lisa-cli 0.2.0__tar.gz → 0.3.1__tar.gz

{lisa_cli-0.2.0/src/lisa_cli.egg-info → lisa_cli-0.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lisa-cli
-Version: 0.2.0
+Version: 0.3.1
 Summary: Terminal CLI for the Lisa Harness
 License-Expression: MIT
 Requires-Python: >=3.11

lisa_cli-0.3.1/pyproject.toml

@@ -0,0 +1,177 @@
+[build-system]
+requires = ["setuptools>=77"]
+build-backend = "setuptools.build_meta"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[project]
+name = "lisa-cli"
+version = "0.3.1"
+description = "Terminal CLI for the Lisa Harness"
+requires-python = ">=3.11"
+license = "MIT"
+license-files = ["LICENSE"]
+dependencies = [
+    "lisa-harness-runtime",
+    "lisa-harness-kernel",
+    "lisa-harness-sdk",
+    "lisa-harness-mcp-servers",
+    "lisa-pack-core",
+    "lisa-pack-introspect",
+    "lisa-pack-memory",
+    "lisa-pack-recovery",
+    "openai>=1.30.0",
+    "rich>=13.7.0",
+    "typer>=0.12.3",
+    "pyyaml>=6.0",
+    "httpx>=0.27.0",
+    "pydantic>=2.7.0",
+    "python-dotenv>=1.0.0",
+]
+
+[project.scripts]
+lisa = "hosts.cli.main:main"
+
+[project.optional-dependencies]
+dev = [
+    "pyinstaller>=6.10.0",
+    "pytest>=8.0.0",
+    "pytest-asyncio>=0.23.0",
+    "ruff>=0.8.0",
+    "types-PyYAML>=6.0",
+]
+# Interactive no-args `lisa prompt` editor: single-box input with
+# history. Without the extra the plain EOF-terminated reader is used.
+prompt = ["prompt-toolkit>=3.0"]
+
+[tool.pytest.ini_options]
+pythonpath = ["src"]
+testpaths = ["tests"]
+markers = [
+    "live: hits real external signal or provider APIs and prints a tester-visible summary",
+    "integration: multi-module in-process test; may require local services",
+    "eval: deterministic agent regression evals (no model calls, no I/O)",
+]
+
+[tool.coverage.run]
+branch = true
+relative_files = true
+source = ["src"]
+omit = [
+    "*/tests/*",
+    "*/test_*.py",
+    "*/conftest.py",
+]
+source_pkgs = ["hosts.cli"]
+
+[tool.coverage.paths]
+source = [
+    "src",
+    "*/src",
+]
+
+[tool.coverage.report]
+show_missing = true
+skip_covered = true
+fail_under = 85
+exclude_also = [
+    ".*/tests/.*",
+    ".*/test_[^/]*\\.py$",
+]
+
+[tool.ruff]
+line-length = 100
+target-version = "py311"
+extend-exclude = ["vulture_allowlist.py"]
+
+[tool.ruff.lint]
+select = [
+    "E",
+    "F",
+    "I",
+    "UP",
+    "B",
+    "SIM",
+    "PL",
+    "C90",
+    "RET",
+    "RUF",
+    "W",
+    "YTT",
+    "C4",
+    "PERF",
+    "PIE",
+    "FURB",
+    "G",
+]
+ignore = ["PLR0913", "PLC0415", "RUF001", "RUF002", "RUF003"]
+
+[tool.ruff.lint.per-file-ignores]
+"**/tests/**" = ["PLC0415", "PLR2004"]
+"**/hosts/cli/main.py" = ["E402", "PLC0415", "PLR0917"]
+"**/hosts/cli/render.py" = ["PLC0415"]
+"**/hosts/cli/entry.py" = ["PLC0415", "RUF001"]
+
+[tool.ruff.lint.mccabe]
+max-complexity = 10
+
+[tool.ruff.lint.pylint]
+max-returns = 6
+max-branches = 12
+max-statements = 50
+max-locals = 15
+
+[tool.ruff.format]
+line-ending = "lf"
+
+[tool.mypy]
+python_version = "3.11"
+files = ["src/hosts/cli"]
+mypy_path = ["$MYPY_CONFIG_FILE_DIR/src"]
+explicit_package_bases = true
+strict = true
+warn_unused_ignores = true
+warn_redundant_casts = true
+warn_return_any = true
+no_implicit_optional = true
+check_untyped_defs = true
+disallow_untyped_defs = true
+disallow_incomplete_defs = true
+exclude = ["vulture_allowlist.py", '(^|/)(tests|test_[^/]*\.py$)']
+
+[tool.vulture]
+paths = ["src/hosts/cli", "vulture_allowlist.py"]
+min_confidence = 80
+exclude = [
+    "**/tests/",
+    "**/test_*.py",
+    "**/conftest.py",
+    "**/*egg-info*/",
+    "**/__pycache__/",
+    ".venv/",
+]
+ignore_names = [
+    "main",
+    "*SignalCollector",
+    "*Collector",
+    "*ProcessingLoop",
+    "*Detector",
+    "*Registry",
+    "*Store",
+    "*Broker",
+    "*Catalog",
+    "*Spec",
+    "*Config",
+    "*Policy",
+    "*Manifest",
+    "*Error",
+    "*Exception",
+    "*Context",
+    "*Fragments",
+    "*Sections",
+    "*Evidence",
+    "*Summary",
+    "*Anomalies",
+]
+ignore_decorators = ["@property"]

{lisa_cli-0.2.0 → lisa_cli-0.3.1}/src/hosts/cli/entry.py

@@ -50,10 +50,13 @@ from __future__ import annotations
 import os
 import unicodedata
 from pathlib import Path
-from typing import Any
+from typing import TYPE_CHECKING, Any
 
 from rich.console import Console
 
+if TYPE_CHECKING:
+    from prompt_toolkit.key_binding import KeyBindings
+
 #: Unicode general categories that extend a grapheme cluster: combining
 #: marks, enclosing marks, format characters (variation selectors, ZWSP),
 #: and modifier symbols (skin-tone modifiers). ZWJ itself is ``Cf`` but is
@@ -186,7 +189,7 @@ def settings_file_path(data_dir: str | Path, profile: str) -> Path:
     """
     from runtime.config import profile_data_dir  # lazy: import cost
 
-    base = str(data_dir).strip() if str(data_dir).strip() else ""
+    base = str(data_dir).strip() or ""
     if not base and profile.strip():
         base = str(profile_data_dir(profile.strip()))
     if not base:
@@ -289,7 +292,7 @@ def prompt_history_path(data_dir: str | Path, profile: str) -> Path:
     the profile dir; empty hands the decision to the framework's default
     (``LISA_DATA_DIR`` > ``~/.lisa``).
     """
-    base = str(data_dir).strip() if str(data_dir).strip() else ""
+    base = str(data_dir).strip() or ""
     if not base and profile.strip():
         from runtime.config import profile_data_dir  # lazy: import cost
 
@@ -429,7 +432,7 @@ def _delete_first_grapheme(text: str) -> int:
     return i
 
 
-def _add_navigate_bindings(bindings: Any, *, swapped: bool = True) -> None:
+def _add_navigate_bindings(bindings: KeyBindings, *, swapped: bool = True) -> None:
     """Bind submit/newline and navigation keys.
 
     ``swapped`` (the default) puts newline on Enter and send on
@@ -476,7 +479,7 @@ def _add_navigate_bindings(bindings: Any, *, swapped: bool = True) -> None:
         event.current_buffer.history_forward()
 
 
-def _add_grapheme_delete_bindings(bindings: Any) -> None:
+def _add_grapheme_delete_bindings(bindings: KeyBindings) -> None:
     """Bind backspace (Ctrl-H) and forward Delete to cluster-aware cuts.
 
     prompt_toolkit deletes one codepoint, tearing multi-codepoint emoji
@@ -504,14 +507,17 @@ def _add_grapheme_delete_bindings(bindings: Any) -> None:
         buffer.cursor_position = pos
 
 
-def _tui_key_bindings(swapped: bool = True) -> Any:
+def _tui_key_bindings(swapped: bool = True) -> KeyBindings:
     """Build the owned key model for the TUI reader.
 
     ``swapped`` selects the send/newline layout (see
     :func:`_add_navigate_bindings`); this exists so the reader body
     stays under its complexity budget.
     """
-    bindings = _PT["KeyBindings"]()
+    pt = _PT
+    if pt is None:  # pragma: no cover - guarded by the caller's _PT check
+        raise RuntimeError("_tui_key_bindings requires the prompt extra")
+    bindings: KeyBindings = pt["KeyBindings"]()
     _add_navigate_bindings(bindings, swapped=swapped)
     _add_grapheme_delete_bindings(bindings)
     return bindings

{lisa_cli-0.2.0 → lisa_cli-0.3.1}/src/hosts/cli/main.py

@@ -3,8 +3,8 @@
 This is the terminal-transport entry point for the Lisa framework. It
 wraps the transport-neutral :mod:`host` runtime with Typer commands
 and Rich rendering. Every command is a one-shot process: turns run via
-``lisa prompt`` and lifecycle/inspection commands (verify, models, policy,
-pack, mcp, last, intake) run once and exit.
+``lisa prompt`` and lifecycle/inspection commands (verify, update, models,
+policy, pack, mcp, last, intake) run once and exit.
 """
 
 from __future__ import annotations
@@ -14,10 +14,12 @@ import logging
 import os
 import platform
 import shlex
+import shutil
+import subprocess
 import sys
 from collections.abc import Callable
 from pathlib import Path
-from typing import TYPE_CHECKING, Annotated, Any, Literal, NamedTuple
+from typing import TYPE_CHECKING, Annotated, Any, Literal, NamedTuple, cast
 
 import typer
 from kernel.models import McpServerHealth
@@ -185,7 +187,7 @@ _TRUTHY = {"1", "true", "yes", "on"}
 # by ``_cli_callback``) recorded here for the prompt command to OR in when
 # lazy routing lands there (``lisa -r "fix it"``). One CLI process runs the
 # group callback at most once, before any command body.
-_GROUP_HOIST: dict[str, bool] = {}
+_GROUP_HOIST: dict[str, bool | None] = {}
 
 # Env var enabling lazy routing: an unrecognized first positional is
 # resolved by the custom group (``_LisaGroup.resolve_command``) to the
@@ -299,7 +301,7 @@ def _make_pack_command(name: str) -> Any:
             bare_prefix = prefix.lstrip("/")
             if bare_prefix and tokens[0].startswith(bare_prefix) and len(bare_prefix) > len(best):
                 best = bare_prefix
-        command = "/" + (best if best else name)
+        command = "/" + (best or name)
         for token in args:
             command += " " + token
         _run_host_command(
@@ -415,7 +417,7 @@ def _get_version() -> str:
 
         return _pkg_version("lisa-cli")
     except Exception:  # pylint: disable=broad-except
-        return "0.2.0"
+        return "0.3.1"
 
 
 _VERSION_OPTION = typer.Option(
@@ -487,8 +489,9 @@ ProfileOption = Annotated[
     typer.Option(
         "--profile",
         help=(
-            "Named data-dir profile: resolves to ~/.lisa/profiles/<name> "
-            "(overrides LISA_PROFILE; --data-dir still wins). Shares the "
+            "Named data-dir profile: resolves to <profiles-root>/<name> "
+            "(default ~/.lisa/profiles; relocatable via LISA_PROFILES_DIR). "
+            "Overrides LISA_PROFILE; --data-dir still wins. Shares the "
             "base packs venv, isolates threads/memory/models/policy."
         ),
     ),
@@ -709,7 +712,7 @@ def _initialize_runtime(
     wiring -> MCP config compilation) lives in the shared bootstrap so
     the CLI and web hosts cannot drift.
 
-    ``profile`` resolves to ``~/.lisa/profiles/<name>`` here (CLI arg >
+    ``profile`` resolves to ``<profiles-root>/<name>`` here (CLI arg >
     ``LISA_PROFILE``; an explicit ``data_dir`` still wins) because
     ``--data-dir`` and ``--profile`` are both CLI-level data-dir inputs —
     the framework's ``HostConfig.from_env`` only knows the env var.
@@ -775,7 +778,11 @@ def _render_runtime_error(console: Console, exc: Exception, *, title: str = "Err
 # ---------------------------------------------------------------------------
 
 
-@app.callback()
+# invoke_without_command lets the eager --version flag short-circuit on a bare
+# `lisa --version` (Click otherwise raises "Missing command" before the
+# callback runs). With no subcommand and no --version the callback mirrors the
+# group's no-args help + exit 2.
+@app.callback(invoke_without_command=True)
 def _cli_callback(
     ctx: typer.Context,
     version: bool = _VERSION_OPTION,
@@ -819,6 +826,9 @@ def _cli_callback(
     if version:
         console.print(f"lisa v{_get_version()}")
         raise typer.Exit()
+    if ctx.invoked_subcommand is None:
+        console.print(ctx.get_help())
+        raise typer.Exit(code=2)
 
 
 # ---------------------------------------------------------------------------
@@ -1233,7 +1243,7 @@ def _models_command(
             await runtime.start()
             return await handle_models_command(runtime, stripped, stripped)
         finally:
-            await runtime.aclose()
+            await _aclose_runtime_bounded(runtime)
 
     response_text = asyncio.run(_run_models_command())
     console.print(Panel(Markdown(response_text), title="Models", border_style="cyan"))
@@ -1900,6 +1910,142 @@ async def _run_pack_update_all(runtime: HostRuntime) -> tuple[bool, str]:
     return await run_pack_update_all(runtime)
 
 
+# ---------------------------------------------------------------------------
+# update command
+# ---------------------------------------------------------------------------
+
+_UPDATE_TOOL_NAME = "lisa-cli"
+
+#: uv cannot replace a running console-script trampoline on Windows; the
+#: command reports the argv for the operator to run after exiting instead.
+_UPDATE_IN_PLACE_BLOCKED = platform.system() == "Windows"
+
+
+@app.command(
+    "update",
+    help="Upgrade the installed lisa CLI in place (uv tool upgrade lisa-cli).",
+)
+def _update_command(
+    force: bool = typer.Option(
+        False,
+        "--force",
+        help=(
+            "Reinstall even when the recorded version is unchanged "
+            "(picks up new code from a local or git checkout without a version bump)."
+        ),
+    ),
+    dry_run: bool = typer.Option(
+        False,
+        "--dry-run",
+        help="Print the uv command instead of running it.",
+    ),
+) -> None:
+    """Upgrade the tool install that provides this ``lisa`` executable.
+
+    ``uv tool upgrade`` is the only correct update path: it replays the
+    install receipt (``<tool-dir>/lisa-cli/uv-receipt.toml``), which is where
+    the installer records the ``--with`` framework requirements, the
+    ``[prompt]`` extra, and ``no-sources``. ``uv tool install --upgrade
+    lisa-cli`` would rewrite that receipt from a bare index spec and drop
+    all of it, so this command never does that.
+    """
+    from runtime.paths import default_packs_venv, is_tool_install
+
+    if not is_tool_install():
+        console.print(
+            "[yellow]lisa is running from a repo checkout, so there is no uv tool to "
+            "upgrade. Update with:[/yellow] git pull && uv sync"
+        )
+        raise typer.Exit(code=2)
+
+    tool_dir = _installed_tool_dir()
+    if tool_dir is None:
+        console.print(
+            "[yellow]This interpreter is not a uv tool install (no uv-receipt.toml in "
+            f"{sys.prefix}), so there is nothing for `uv tool upgrade` to update.[/yellow]"
+        )
+        raise typer.Exit(code=2)
+
+    uv_bin = shutil.which("uv")
+    # Point uv at the tool dir this process is actually running from. Without
+    # it uv consults only UV_TOOL_DIR/default, so an install made with a custom
+    # tool dir would miss the real one and advise `uv tool install lisa-cli` —
+    # the receipt-clobbering path this command exists to avoid.
+    env = {**os.environ, "UV_TOOL_DIR": str(tool_dir.parent)}
+    argv = [
+        uv_bin or "uv",
+        "tool",
+        "upgrade",
+        *(["--reinstall"] if force else []),
+        _UPDATE_TOOL_NAME,
+    ]
+    printable = shlex.join(argv)
+
+    # On Windows the console script is a .exe trampoline inside the tool
+    # venv, which cannot be replaced while this process still has it open.
+    blocked = uv_bin is None or (_UPDATE_IN_PLACE_BLOCKED and not dry_run)
+    if dry_run or blocked:
+        if dry_run:
+            console.print(f"Run: [bold]{printable}[/bold]")
+        else:
+            reason = (
+                "uv is not on PATH; run it yourself"
+                if uv_bin is None
+                else "Windows locks the running lisa.exe"
+            )
+            console.print(f"[yellow]{reason}.[/yellow] Run: [bold]{printable}[/bold]")
+        raise typer.Exit(code=0 if dry_run else 1)
+
+    console.print(f"Running [bold]{printable}[/bold]")
+    completed = subprocess.run(argv, check=False, env=env)  # inherits stdio so uv streams progress
+    if completed.returncode != 0:
+        console.print(f"[red]uv tool upgrade failed (exit {completed.returncode}).[/red]")
+        raise typer.Exit(code=completed.returncode)
+
+    console.print("Updated. Restart lisa to use the new version.")
+    _warn_stale_packs_venv(default_packs_venv())
+
+
+def _installed_tool_dir() -> Path | None:
+    """Return the uv tool directory this process is running from.
+
+    A ``uv tool`` venv carries the receipt at its root, so ``sys.prefix``
+    identifies the install unambiguously — including installs made with a
+    custom ``UV_TOOL_DIR``, which uv would otherwise not find. The receipt's
+    parent is the value ``UV_TOOL_DIR`` expects (it is the directory holding
+    one subdirectory per tool).
+
+    This is a positive check: a plain virtualenv or pipx install has no
+    receipt and returns ``None``.
+    """
+    prefix = Path(sys.prefix)
+    if not (prefix / "uv-receipt.toml").is_file():
+        return None
+    return prefix
+
+
+def _warn_stale_packs_venv(packs_venv: Path) -> None:
+    """Point the operator at the one follow-up packs may need.
+
+    The packs venv is a second install with its own framework copies. Packs
+    import the CLI's framework packages (the tool venv's site-packages
+    precedes the packs venv on ``sys.path``), so an upgrade does not break
+    them — but a pack whose *dependencies* moved can still need a re-resolve,
+    and ``uv pip install`` never upgrades an already-satisfied requirement.
+    ``lisa pack update --all`` re-installs each pack from its recorded source,
+    which re-resolves its dependency set. Surfacing the command is cheaper
+    than silently re-seeding every pack after an upgrade.
+    """
+    if not packs_venv.is_dir():
+        return
+    console.print(
+        f"[yellow]Packs live in a separate venv ({packs_venv}). Packs keep working "
+        "against the upgraded framework, but their own dependencies are only "
+        "re-resolved by `lisa pack update --all` — run it if a pack misbehaves "
+        "after an update.[/yellow]"
+    )
+
+
 # ---------------------------------------------------------------------------
 # prompt command
 # ---------------------------------------------------------------------------
@@ -1971,8 +2117,10 @@ def _collect_interactive_or_error(
     if sys.stdin.isatty() and sys.stdout.isatty():
         from hosts.cli import entry as entry_mod
 
-        reader = _prompt_reader or entry_mod.read_prompt_message_tui
-        if reader is entry_mod.read_prompt_message_tui:
+        if _prompt_reader is not None:
+            # Custom reader seam (tests): the plain-reader contract.
+            terminal_message = _prompt_reader(console)
+        else:
             # Flag state -> reader layout (True=shipped, False=chat-box):
             #   absent (None)      -> env decides (swapped_keys=None)
             #   --no-swap-keys     -> shipped (swapped_keys=True)
@@ -1984,16 +2132,13 @@ def _collect_interactive_or_error(
                 resolved = True
             else:
                 resolved = False
-            terminal_message = reader(
+            terminal_message = entry_mod.read_prompt_message_tui(
                 console,
                 history_path=entry_mod.prompt_history_path(data_dir, profile),
                 swapped_keys=resolved,
                 data_dir=data_dir,
                 profile=profile,
             )
-        else:
-            # Custom reader seam (tests): the plain-reader contract.
-            terminal_message = reader(console)
         if terminal_message is None:
             raise typer.Exit(code=_ABORT_EXIT) from None
         if terminal_message.strip():
@@ -2064,7 +2209,7 @@ async def _run_host_command_turn(runtime: HostRuntime, command: str) -> str:
         await runtime.start()
         result = await handle_message(runtime, command, NullTransport())
     finally:
-        await runtime.aclose()
+        await _aclose_runtime_bounded(runtime)
     return getattr(result, "text", "") or str(result)
 
 
@@ -2088,7 +2233,9 @@ async def _resolve_pending_request_id(runtime: HostRuntime) -> str:
         logger.debug("prompt: pending-approval resolution failed: %s", exc)
         return ""
     if len(pending) == 1:
-        request_id = pending[0].invocation.request_id
+        # The service reaches the CLI as Any (duck-typed seam), so reassert
+        # the declared kernel field type for the return contract.
+        request_id = cast("str", pending[0].invocation.request_id)
         logger.info("prompt: resolved bare decision to pending %s", request_id[:8])
         return request_id
     return ""
@@ -2128,7 +2275,7 @@ async def _decide_approval_turn(
             transport=NullTransport(),
         )
     finally:
-        await runtime.aclose()
+        await _aclose_runtime_bounded(runtime)
     return getattr(result, "text", "") or str(result)
 
 
@@ -2392,76 +2539,6 @@ def _deny_command(  # Match shared runtime options used by one-shot commands.
     )
 
 
-@app.command(
-    "run",
-    hidden=True,
-    help=(
-        "[DEPRECATED] Run one slash command (host admin or pack-defined). "
-        "Every host command now has a real subcommand (pack-registered ones "
-        "like `stalls`/`retry` are generated from the pack registry); this "
-        "escape hatch remains one release for compatibility. The leading '/' "
-        "is optional. Quote multi-word arguments as one string; with multiple "
-        "tokens they are re-quoted verbatim so the runtime sees the exact "
-        "slash-command string."
-    ),
-)
-def _run_command_command(  # Match shared runtime options used by one-shot commands.
-    command: Annotated[
-        list[str] | None,
-        typer.Argument(help="Slash command and its arguments."),
-    ] = None,
-    log_level: LogLevelOption = "",
-    log: LogOption = "",
-    no_log: NoLogOption = False,
-    data_dir: DataDirOption = "",
-    profile: ProfileOption = "",
-    overlays_dir: OverlaysDirOption = "",
-    thread_dir: ThreadDirOption = "",
-    no_thread: NoThreadOption = False,
-    session_context: SessionContextOption = "",
-    timezone: TimezoneOption = "",
-    state_snapshot: StateSnapshotOption = "",
-    streaming: StreamingOption = "",
-    host_log: HostLogOption = "",
-) -> None:
-    """Dispatch one slash command to the runtime exactly as a persistent
-    host would, via ``handle_message`` and ``_run_host_command_turn``.
-
-    DEPRECATED: kept one release for compatibility. Every host admin verb
-    now has a tailored Typer command; pack-registered commands (``stalls``,
-    ``retry``, ...) resolve as dynamically generated subcommands. This
-    generic string escape hatch hides from help and will be removed once
-    scripts have migrated.
-    """
-    console.print(
-        "[yellow]`lisa run` is deprecated: host commands are real subcommands "
-        "now (`lisa settings`, `lisa stalls`, ...).[/yellow]"
-    )
-    if not command:
-        console.print("[red]No slash command given. Example: lisa run '/policy mode trust'[/red]")
-        raise typer.Exit(code=2)
-    parts = list(command)
-    command_str = parts[0] if len(parts) == 1 else " ".join(shlex.quote(part) for part in parts)
-    if not command_str.startswith("/"):
-        command_str = "/" + command_str
-    _run_host_command(
-        command_str,
-        log_level=log_level,
-        log_path=log,
-        no_log=no_log,
-        data_dir=data_dir,
-        profile=profile,
-        overlays_dir=overlays_dir,
-        thread_dir=thread_dir,
-        no_thread=no_thread,
-        session_context=session_context,
-        timezone=timezone,
-        state_snapshot_path=state_snapshot,
-        streaming=streaming,
-        host_log_path=host_log,
-    )
-
-
 def _compose_prompt_message(instruction: str, payload: str) -> str:
     """Compose the prompt-mode turn message from the CLI instruction and stdin.
 
@@ -2672,14 +2749,22 @@ async def _run_prompt_with_teardown(
                 # stop — there is no turn to run.
                 decision_text = getattr(result, "text", "") or str(result)
                 transport.stop_activity()
-                await runtime.aclose()
+                await _aclose_runtime_bounded(runtime)
                 await transport.on_response(decision_text)
                 return transport
         if message:
             await handle_message(runtime, message, transport)
     finally:
         transport.stop_activity()
-        await runtime.aclose()
+        # Bounded teardown: the prompt command previously awaited bare
+        # ``runtime.aclose()`` — when the MCP pool's sequential anyio
+        # task-group teardown stalls (the 2026-09-21 headroom incident
+        # recurred on 2026-10-26 ~16:11: the turn had already completed
+        # and persisted, yet the CLI sat idle in epoll for the rest of
+        # the prompt run because the unbounded close never returned).
+        # The bounded helper falls back to terminating every tracked
+        # MCP/proxy subprocess after the grace window.
+        await _aclose_runtime_bounded(runtime)
     return transport
 
 

{lisa_cli-0.2.0 → lisa_cli-0.3.1}/src/hosts/cli/render.py

@@ -423,8 +423,10 @@ def _containment_badge(containment: str) -> tuple[str, str]:
     return "✗ NOT SANDBOXED", STYLE_CONTAINMENT_NONE
 
 
-def _format_approval_expiry(seconds: object) -> str:
+def _format_approval_expiry(seconds: int | float | str | None) -> str:
     """Format a host-supplied approval TTL for compact panel display."""
+    if seconds is None:
+        return ""
     try:
         remaining = max(0, int(seconds))
     except (TypeError, ValueError):
@@ -466,7 +468,10 @@ def render_approval_panel(
     reasons = str(payload.get("containment_reasons") or "").strip()
     policy_reason = str(payload.get("policy_reason") or "").strip()
     policy_tier = str(payload.get("policy_tier") or "").strip()
-    expiry = _format_approval_expiry(payload.get("expires_in_seconds"))
+    raw_expiry = payload.get("expires_in_seconds")
+    expiry = _format_approval_expiry(
+        raw_expiry if isinstance(raw_expiry, (int, float, str)) else None
+    )
 
     body = Text()
     if _looks_like_diff(preview or ""):