⬆️(deps): Update async-timeout requirement from <5.0.0,>=4.0.0 to >=4.0.0,<6.0.0 in /apps/mewbo_ha_conversation#176
Open
dependabot[bot] wants to merge 2 commits into
Conversation
…pickup, shareable runs + stability fixes ## New features **Agentic Search now works end-to-end.** The SCG engine and API glue existed, but the product was unreachable. The `scg` config section is now a real typed switch instead of a silently dropped key. The orchestrated runner returns real answers, delivers the search playbook, cancels cleanly, and settles dead workers as failed instead of stranding runs. The source catalog comes from your configured MCP servers, not fixtures. Mapped sources actually route: every capability gets a recipe, and `scg_route` emits executable `allowed_tool_ids` so probes are granted real connector tools, not graph addresses. Verified live against a real connector: a cited, grounded answer. The console grew the missing surface: a Sources dialog with live mapping progress, a tier picker, workspace search, run history, and safe snippet rendering. **Search tiers pick the brain.** New `scg.traversal.tier_models` maps fast/auto/deep to models (defaults: gpt-5.4-nano, sonnet-4-6, gpt-5.5). The tier was already the run's one knob for decomposition and fan-out budget; it now picks the model too, and probes inherit it, so one knob moves the whole run. `/v1/structured` and `/v1/structured/fast` also accept an optional per-request `model` override, so external consumers can pin small models on structured runs. **Workspaces are graph-first knowledge surfaces.** A workspace is now a name, purpose instructions, and MCP servers picked from the system catalog, persisted with secrets redacted. Saving auto-maps newly enabled sources, re-maps when a source's tool list drifts, and re-indexes when the purpose prose changes; the purpose textarea is the graph's codified intent. Routing is memory-aware: connector-corpus insights bias recipe ranking and ride along as capped memory hints. Agents can walk the graph themselves with `scg_observe`, typed hop by typed hop. Structured runs bound to a mapped workspace go graph-first: route, fan out path probes, terminate at a schema-validated emit, with pathway and probe provenance on the run. Run events stream live as they happen, so the console shows real reasoning instead of a frozen spinner. `/v1/structured/fast` and `/v1/draft/stream` mint full sessions with write-behind persistence; draft TTFT pays nothing. Every workspace gets a three-layer graph view in the console, schema plus memory plus entities. Mapping warms the memory layer at index time from tool descriptions and workspace prose, and deposit prompts teach notes to encode use-case paths so future agents traverse instead of re-exploring. Ordinary chat sessions get the SCG tools too, whole-graph scoped: route, observe, deposit. **Assign or mention the bot on an issue or PR and an agent picks it up.** A branch-aware Mewbo session starts, with a fetched, fast-forwarded worktree for PR head branches. A second mention steers the active run instead of erroring. When the session ends, the final answer is posted back to the thread as a bot comment. One workflow runs on both GitHub and Gitea Actions, with auth via revocable KeyStore-minted keys. Verified live on Gitea: assignment, mention, PR worktree continuity, and the reply leg. **Every search run is a link.** `/search?ws=<id>&run=<id>` is now the single source of truth for the view. Submit and replay push the URL, Back returns to the prior view, and a shared link renders identically on any browser. Opening a link performs GETs only, never a POST. Past-query chips replay stored runs instead of re-executing them. **Search console, finished.** A shared composer kit gives the search and tasks composers one focus bloom. Autocomplete opens only on real gestures, never on page load. The landing page earns its space: a workspace health band shows mapped-source coverage, graph size, and memory notes, with a clean first-run empty state. Dead controls were wired or deleted. Demo seeding retired behind an env default. **Traces you can filter.** TraceProvenance folds each session's durable signals into Langfuse tags: origin, product, session type, surface, project, repo, branch, workspace, model. Every client surface stamps itself through the `X-Mewbo-Surface` header: cli, console, mcp, home-assistant, channels, vcs-pickup. Wiki-index vs wiki-qa vs search-run vs structured vs chat is now one filter click, and search runs audit as one coherent session from route to emit. **Human-grade REST API reference.** The docs site's /rest-api/ page is now a full-page native Scalar app under the brand header, via a new `app.html` template and optional `header_tabs` tab rail in the mkdocs-shadcn-mewbo theme v1.3.0. All ~71 REST operations got rewritten OpenAPI metadata at the source: imperative summaries, consumer-grade descriptions, documented path and query params, 30 request-body models, and response status annotations. The spec exporter re-tags operations by path into resource families (Sessions, Projects & Worktrees, API Keys, Configuration, Workspaces & Runs, Source Graph, Structured Outputs, Fast Structured, Draft Streaming, Automation) with sidebar groups, a rewritten quickstart intro, and RST-literal sanitation. CI regenerates the committed spec best-effort on every docs build, so the reference cannot drift from the code. ## Stability & fixes - Realtime sessions are visible. The recorder creates the session record before any event write, tags are unique per session instead of colliding on one shared doc, and the synthesizer and streamer attach the Langfuse callback, so fast and draft calls finally export traces with cost and latency. - Runtime-granted capabilities reach the root agent's session tools, not just sub-agents. Continue-recovery no longer deletes a crash-interrupted turn; it anchors on the last recovery marker, so the user message and tool traces survive. - Connector insight deposits anchor on capability nodes again; the resolver had hard-coded entity ids, leaving every connector note orphaned. Pre-existing orphans re-anchor on the next map. - Long workspace purpose statements truncate instead of 500ing the save, and enrich plumbing can never fail the save that carried the prose. - Small-model discipline in the probe playbooks, from live nano and flash-lite runs: the graph is the map, connector tools are the territory; never declare NO DATA from graph reads alone; never emit while a probe is still running. - Console: the live run view can no longer wedge on "Starting search" when the opener frame drops; result cards are idempotent by result id at both the store and render seams; duplicate-key rendering is impossible. ## Docs & infrastructure - Docs gap-closure sweep: every feature page checked against source. Search, structured outputs, web API, session runtime, CLI, Docker and production deployment, getting started, LSP, and LLM setup all corrected; phantom extras and dead flags removed; a new Branches & Worktrees capability page added. - Repo restructure: the Home Assistant component moved into apps/ with its editable install genuinely wired and its default port fixed to 5125; the aider provenance snapshot moved next to the live adapted copy; the root workspace stub package deleted in favor of metadata-only wheel selection. - Agent CLAUDE.md tree refreshed across the touched subsystems with the durable invariants and seams. Co-authored-by: Mewbo <268600793+mewbo-ai[bot]@users.noreply.github.com> --------- Co-authored-by: mewbo-ai[bot] <mewbo-ai@mewbo.com> Reviewed-on: https://git.hurricane.home/bearlike/Assistant/pulls/90 Co-authored-by: Krishnakanth Alagiri <mail@kanth.tech> Co-committed-by: Krishnakanth Alagiri <mail@kanth.tech>
Updates the requirements on [async-timeout](https://github.com/aio-libs/async-timeout) to permit the latest version. - [Release notes](https://github.com/aio-libs/async-timeout/releases) - [Changelog](https://github.com/aio-libs-abandoned/async-timeout/blob/master/CHANGES.rst) - [Commits](aio-libs-abandoned/async-timeout@v4.0.0...v5.0.1) --- updated-dependencies: - dependency-name: async-timeout dependency-version: 5.0.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
mewbo-docs-discovery | 25219b9 | Jun 11 2026, 08:35 PM |
Codecov Report❌ Patch coverage is Additional details and impacted files@@ Coverage Diff @@
## main #176 +/- ##
==========================================
+ Coverage 91.54% 91.88% +0.34%
==========================================
Files 77 82 +5
Lines 13418 14192 +774
==========================================
+ Hits 12283 13040 +757
- Misses 1135 1152 +17
🚀 New features to boost your workflow:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on async-timeout to permit the latest version.
Release notes
Sourced from async-timeout's releases.
Changelog
Sourced from async-timeout's changelog.
... (truncated)
Commits
cc52d41Bump to 5.0.11af7d71Bump to 5.0.13bf26d9Fix #423: add requirements.txt to sdist package (#425)380e8baMention condition import of asyncio.timeout / async_timeout.timeout in README...8a232d0Update README3d3e3e4Bump to 5.0.0d5c21f3Mimic asyncio.Timeout behavior (#422)a1111c2Drop deprecated sync context manager support (#421)00fd343Imports cleanup7b61b33Update CI config fileDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)