⬆️(deps): Update rich requirement from <15.0.0,>=14.2.0 to >=14.2.0,<16.0.0 in /apps/mewbo_cli - #152
dependabot[bot] wants to merge 2 commits into
Conversation
…capability gating, and SessionTool protocol
- Add `builtin_plugins/widget_builder` as a bundled plugin: `SubmitWidgetTool`, extensible
AST lint pipeline, `st-widget-builder` agent + skill, Jinja2 prompt template, and reusable
Streamlit component library (PlantUMLCard, GitHub repo card, stock ticker, search result card)
- Add `capabilities.py`: pure `parse_capabilities`, `filter_by_capabilities`, and
`overlay_capabilities` helpers for frontmatter-driven capability gating across agents, skills,
and plugins
- Add `session_tools.py`: `SessionTool` Protocol and `SessionToolRegistry`; retrofit
`ExitPlanModeTool` to satisfy the protocol; replace single `_exit_plan_mode_tool` slot in
`ToolUseLoop` with a `_session_tools` list built from registry + allowed_tools
- Extend `AgentRegistry.register()` with `capabilities=` and `plugin_root=` params; `get()` and
`render_catalog()` accept `session_capabilities` for gated visibility; add `visible_for()`
- Add `substitute_agent_body()` in `spawn_agent.py` for `${SESSION_ID}` /
`${CLAUDE_PLUGIN_ROOT}` / bash-style `${VAR:-default}` expansion in agent bodies; registered
agent types' model is now authoritative (ignores LLM-supplied model arg)
- Auto-scan `builtin_plugins/` at plugin discovery; propagate `plugin_root` and capability
tuples through `Orchestrator` → `AgentRegistry` / `SkillRegistry` / `SessionToolRegistry`
- Parse `X-Meeseeks-Capabilities` request header in API backend; thread `session_capabilities`
end-to-end through `Orchestrator` → `SpawnAgentTool` → `ToolUseLoop`
- Add `StliteWidgetPanel`, `CheckAgentsCard`, `SpawnAgentCard`, `FiveLeafBloomLoader`, and
`WidgetCard` to the console; wire `widget_ready` event parsing and render inline stlite
widgets in the conversation timeline
- Persist completed child handles in `AgentHypervisor` so `check_agents` surfaces results;
add `list_visible()` helper; emit structured `check_agents` payload in tool card
- Fix: skip CWD root injection for non-registry tools; thread session_capabilities into
slash-command skill lookup; reject path traversal in `widget_id`; scope `submit_widget`
schema to widget-builder sessions only; force full PWA refresh on service-worker update
- Migrate docs screenshots to PNG; add Capabilities, Widgets, and core-orchestration docs
pages; refresh plugins, skills, web-api, and landing pages
Updates the requirements on [rich](https://github.com/Textualize/rich) to permit the latest version. - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v14.2.0...v15.0.0) --- updated-dependencies: - dependency-name: rich dependency-version: 15.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
| "mewbo-tools>=0.0.10", | ||
| "prompt-toolkit>=3.0.47,<4.0.0", | ||
| "rich>=14.2.0,<15.0.0", | ||
| "rich>=14.2.0,<16.0.0", |
There was a problem hiding this comment.
🟡 Widened rich upper bound is ineffective due to stricter transitive constraint in mewbo_tools
The PR widens rich from <15.0.0 to <16.0.0 in apps/mewbo_cli/pyproject.toml, but mewbo_cli depends on mewbo-tools>=0.0.10 (line 14), and packages/mewbo_tools/pyproject.toml:18 still constrains rich>=14.2.0,<15.0.0. Since pip/uv resolves the intersection of all constraints, the effective upper bound remains <15.0.0. The version bump is a no-op — rich 15.x can never be installed for mewbo_cli unless mewbo_tools is also updated.
Prompt for agents
The rich upper bound was widened to <16.0.0 in apps/mewbo_cli/pyproject.toml, but the transitive dependency mewbo-tools (packages/mewbo_tools/pyproject.toml line 18) still constrains rich to <15.0.0. The resolver will pick the stricter bound, making this change ineffective. To actually allow rich 15.x, also update packages/mewbo_tools/pyproject.toml line 18 from rich>=14.2.0,<15.0.0 to rich>=14.2.0,<16.0.0.
Was this helpful? React with 👍 or 👎 to provide feedback.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #152 +/- ##
=======================================
Coverage 84.59% 84.59%
=======================================
Files 72 72
Lines 12480 12480
=======================================
Hits 10558 10558
Misses 1922 1922
🚀 New features to boost your workflow:
|
0ec317d to
2956b80
Compare
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Updates the requirements on rich to permit the latest version.
Release notes
Sourced from rich's releases.
Changelog
Sourced from rich's changelog.
... (truncated)
Commits
6ac483ccorrection458a910Merge pull request #4080 from Textualize/bump150082e06e0changelogd6556bcbump to 15.0.0ffe2edcMerge pull request #4079 from Textualize/inline-table-codecf3b5a1changelog77f0edbremove comments7ef2d05fix inline code in table cells19c67b9Merge pull request #4077 from Textualize/isattry494b795changelogYou can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)