ltcai 10.3.0 → 10.4.0

package/latticeai/api/permissions.py

@@ -11,7 +11,7 @@ import threading
 import time
 import urllib.request
 from pathlib import Path
-from typing import Dict, Optional, Tuple
+from typing import Any, Dict, Optional, Tuple
 
 from fastapi import APIRouter, HTTPException, Request
 
@@ -33,7 +33,7 @@ class PermissionGateway:
         self.local_approval_ttl_seconds = 5 * 60
         self.local_approval_lock = threading.Lock()
         self.perm_queue_lock = threading.Lock()
-        self.local_approvals: Dict[str, Dict[str, object]] = {}
+        self.local_approvals: Dict[str, Dict[str, Any]] = {}
         self.discord_permission_webhook_url = config.discord_permission_webhook
         self.discord_bot_token = config.discord_bot_token
         self.discord_permission_channel = config.discord_permission_channel

package/latticeai/api/search.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from typing import Any, Callable, Dict, Optional
+from typing import Any, Callable, Dict, NoReturn, Optional
 
 from fastapi import APIRouter, HTTPException, Request
 from pydantic import BaseModel, Field
@@ -84,14 +84,16 @@ def create_search_router(
 ) -> APIRouter:
     router = APIRouter()
 
-    def _guarded(request: Request) -> SearchService:
+    def _guarded(request: Request) -> "_ScopedSearchService":
         user = require_user(request)
         allowed = None
         if allowed_workspaces_for is not None and user:
             allowed = allowed_workspaces_for(user)
         return _ScopedSearchService(service, allowed)
 
-    def _raise_graph_error(exc: Exception) -> None:
+    def _raise_graph_error(exc: Exception) -> NoReturn:
+        # NoReturn, not None: every handler ends with this in its except
+        # branch, and without it each one reads as a missing return.
         raise HTTPException(status_code=404, detail=str(exc)) from exc
 
     @router.post("/api/search/hybrid")

package/latticeai/api/security_dashboard.py

@@ -515,8 +515,6 @@ def create_security_router(
         else:
             raise HTTPException(status_code=400, detail="지원하지 않는 scope입니다.")
 
-        if not isinstance(rows, list):
-            rows = []
 
         _log_view(admin_email, "export", f"{scope}:{fmt}", reason="export")
 
@@ -530,7 +528,7 @@ def create_security_router(
                 headers={"Content-Disposition": f"attachment; filename={filename}"},
             )
         if fmt == "csv":
-            body = _csv_dump(rows)
+            body = _csv_dump(rows)  # type: ignore[assignment]
             filename = f"security_{scope}.csv"
             return Response(
                 content=body,
@@ -538,7 +536,7 @@ def create_security_router(
                 headers={"Content-Disposition": f"attachment; filename={filename}"},
             )
         if fmt in {"excel", "xlsx"}:
-            body = _excel_dump(rows)
+            body = _excel_dump(rows)  # type: ignore[assignment]
             filename = f"security_{scope}.xlsx"
             return Response(
                 content=body,
@@ -547,7 +545,7 @@ def create_security_router(
             )
         if fmt == "pdf":
             overview = build_sensitivity_report(get_history() or []).get("summary", {}) or {}
-            body = _pdf_report("Lattice AI Security Report", rows, overview)
+            body = _pdf_report("Lattice AI Security Report", rows, overview)  # type: ignore[assignment]
             filename = f"security_{scope}.pdf"
             return Response(
                 content=body,

package/latticeai/api/setup.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from typing import Dict, List, Optional
+from typing import Any, Dict, List, Optional
 
 from fastapi import APIRouter, HTTPException, Request
 from fastapi.responses import StreamingResponse
@@ -63,7 +63,7 @@ def create_setup_router(
 
     # ── Setup Wizard ─────────────────────────────────────────────────────────────
 
-    def setup_auto_state() -> Dict[str, object]:
+    def setup_auto_state() -> Dict[str, Any]:
         """Return the PPT-aligned zero-config setup state used by setup UI/API."""
         profile = auto_setup_probe()
         recommendation = auto_setup_recommend(profile)
@@ -77,7 +77,7 @@ def create_setup_router(
         }
     
     
-    def primary_setup_model(recs: Dict[str, object]) -> Optional[Dict[str, object]]:
+    def primary_setup_model(recs: Dict[str, Any]) -> Optional[Dict[str, Any]]:
         models = recs.get("models") if isinstance(recs, dict) else None
         if not isinstance(models, list):
             return None

package/latticeai/api/static_routes.py

@@ -9,7 +9,7 @@ import subprocess
 import time
 from dataclasses import dataclass
 from pathlib import Path
-from typing import Callable, Optional
+from typing import Any, Callable, Dict, Optional
 
 from fastapi import APIRouter, Cookie, HTTPException, Request
 from fastapi.responses import FileResponse, HTMLResponse
@@ -253,7 +253,12 @@ def create_static_routes_router(
         """CPU / RAM / GPU(MLX) 사용량을 반환합니다."""
         require_user(request)
         import re as _re
-        result = {"cpu_pct": 0.0, "ram_pct": 0.0, "gpu_mem_pct": 0.0, "gpu_mem_gb": 0.0}
+        result: Dict[str, Any] = {
+            "cpu_pct": 0.0,
+            "ram_pct": 0.0,
+            "gpu_mem_pct": 0.0,
+            "gpu_mem_gb": 0.0,
+        }
         try:
             # CPU
             top_out = subprocess.run(["top", "-l", "1", "-n", "0"], capture_output=True, text=True, timeout=4).stdout

package/latticeai/api/tools.py

@@ -243,10 +243,15 @@ def create_tools_router(
     api_router = APIRouter()
     HOOKS = hooks
     CONFIG = config
-    DATA_DIR = data_dir
-    STATIC_DIR = static_dir
+    # These three are Optional in the signature only because the legacy
+    # kwarg form predates AppContext; the router cannot be built without
+    # them, so resolve once here rather than at every use.
+    if data_dir is None or static_dir is None:
+        raise RuntimeError("create_tools_router requires data_dir and static_dir")
+    DATA_DIR: Path = data_dir
+    STATIC_DIR: Path = static_dir
     router = model_router
-    ENABLE_GRAPH = enable_graph
+    ENABLE_GRAPH: bool = bool(enable_graph)
     KNOWLEDGE_GRAPH = knowledge_graph
     LOCAL_KG_WATCHER = local_kg_watcher
     _require_graph = require_graph
@@ -327,7 +332,7 @@ def create_tools_router(
             or None
         )
 
-    def _knowledge_scope(request: Request, current_user: str, *, write: bool) -> Dict[str, str]:
+    def _knowledge_scope(request: Request, current_user: str, *, write: bool) -> Dict[str, Any]:
         # Preserve the historical shared vault only for explicit single-user,
         # no-auth local mode. Authenticated deployments always partition by
         # both authorized workspace and account.

package/latticeai/api/workspace.py

@@ -165,35 +165,38 @@ def create_workspace_router(context: AppContext) -> APIRouter:
     router = APIRouter()
 
     # Bind injected deps to the names the moved handler bodies expect.
-    service = context.workspace_service
-    require_user = context.require_user
-    require_admin = context.require_admin
-    get_current_user = context.get_current_user
-    append_audit_event = context.append_audit_event
-    get_history = context.get_history
-    get_audit_log = context.get_audit_log
-    load_users = context.load_users
-    scan_environment = context.scan_environment
-    local_sysinfo = context.local_sysinfo
-    get_recommendations = context.get_recommendations
-    install_skill = context.install_skill
-    remove_skill_directory = context.remove_skill_directory
-    redact_secret_text = context.redact_secret_text
-    capability_registry = context.capability_registry
+    # `context.require(...)` for anything this router calls: an absent
+    # dependency now names itself here instead of surfacing as
+    # "'NoneType' object is not callable" inside a request handler.
+    service = context.require("workspace_service")
+    require_user = context.require("require_user")
+    require_admin = context.require("require_admin")
+    get_current_user = context.require("get_current_user")
+    append_audit_event = context.require("append_audit_event")
+    get_history = context.require("get_history")
+    get_audit_log = context.require("get_audit_log")
+    load_users = context.require("load_users")
+    scan_environment = context.require("scan_environment")
+    local_sysinfo = context.require("local_sysinfo")
+    get_recommendations = context.require("get_recommendations")
+    install_skill = context.require("install_skill")
+    remove_skill_directory = context.require("remove_skill_directory")
+    redact_secret_text = context.require("redact_secret_text")
+    capability_registry = context.require("capability_registry")
 
     svc = service
     WORKSPACE_OS = service.store
-    _workspace_graph = context.workspace_graph
-    _graph_stats_safe = context.graph_stats
-    _workspace_models_payload = context.workspace_models
-    _workspace_settings_payload = context.workspace_settings
-    _require_graph = context.require_graph
+    _workspace_graph = context.require("workspace_graph")
+    _graph_stats_safe = context.require("graph_stats")
+    _workspace_models_payload = context.require("workspace_models")
+    _workspace_settings_payload = context.require("workspace_settings")
+    _require_graph = context.require("require_graph")
     KNOWLEDGE_GRAPH = context.knowledge_graph
     LOCAL_KG_WATCHER = context.local_kg_watcher
     SKILLS_DIR = context.skills_dir
     LOCAL_MODEL = context.local_model
     PUBLIC_MODEL = context.public_model
-    _fetch_skills_marketplace = context.fetch_skills_marketplace
+    _fetch_skills_marketplace = context.require("fetch_skills_marketplace")
     _workspace_scope = _workspace_scope_from_request
 
     def _gate_read(request: Request):
@@ -651,7 +654,7 @@ def create_workspace_router(context: AppContext) -> APIRouter:
     @router.get("/workspace/vscode/status")
     async def workspace_vscode_status(request: Request):
         require_user(request)
-        last_seen = int(_VSCODE_STATUS.get("last_seen_ms") or 0)
+        last_seen = int(str(_VSCODE_STATUS.get("last_seen_ms") or 0))
         now_ms = int(datetime.utcnow().timestamp() * 1000)
         connected = last_seen > 0 and (now_ms - last_seen) < 60000
         return {