asher-cli 1.0.0__tar.gz → 1.0.2__tar.gz

asher_cli-1.0.2/.github/workflows/bandit.yml

@@ -0,0 +1,47 @@
+# Bandit is a security linter for Python, by PyCQA (Apache v2.0).
+# https://pypi.org/project/bandit/
+#
+# Results land under the repository's Security → Code scanning tab.
+#
+# Scan configuration — which paths are excluded, which checks are skipped and
+# why — lives in [tool.bandit] in pyproject.toml, so `uv run poe security`
+# reproduces this job's findings locally.
+
+name: Bandit
+
+on:
+  push:
+    branches: ["main", "release/*"]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: ["main"]
+  schedule:
+    - cron: '32 0 * * 1'
+
+permissions:
+  contents: read
+
+jobs:
+  bandit:
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+
+      - name: Bandit scan
+        # --exit-zero: findings must not fail the job, or the upload step below
+        # is skipped and code scanning keeps showing the previous run's alerts.
+        run: >-
+          uvx --from 'bandit[toml,sarif]' bandit
+          -c pyproject.toml -r . -f sarif -o bandit.sarif --exit-zero
+
+      - name: Upload SARIF to code scanning
+        uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+        with:
+          sarif_file: bandit.sarif
+          category: bandit

{asher_cli-1.0.0 → asher_cli-1.0.2}/.github/workflows/coverage.yml

@@ -18,7 +18,7 @@ jobs:
       - name: Run tests with coverage
         run: uv run pytest tests/ --cov=asher --cov-report=lcov --cov-report=term-missing
       - name: Upload to Coveralls
-        uses: coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2
+        uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           path-to-lcov: coverage.lcov

{asher_cli-1.0.0 → asher_cli-1.0.2}/CHANGELOG.md

@@ -7,7 +7,27 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 Generated by [git-cliff](https://git-cliff.org) from conventional commits.
 
-## [Unreleased]
+## [1.0.2] - 2026-08-05
+
+### 🐛 Bug Fixes
+
+- Silence bandit noise and resolve dependency advisories
+
+### 🔧 Miscellaneous
+
+- Enable Bandit B101 for asher/ and bump version to 1.0.2
+
+## [1.0.1] - 2026-08-04
+
+### 🚀 Features
+
+- *(history)* Copy-to-clipboard + discoverable footer hints
+
+### 📚 Documentation
+
+- *(changelog)* Cut v1.0.1
+
+## [1.0.0] - 2026-08-02
 
 ### 🚀 Features
 
@@ -18,6 +38,7 @@ Generated by [git-cliff](https://git-cliff.org) from conventional commits.
 
 ### 📚 Documentation
 
+- *(changelog)* Regenerate for next release, trim duplicate README list
 - *(roadmap)* Archive completed sections to docs/roadmap-archive/
 
 ### 🔧 Miscellaneous

{asher_cli-1.0.0 → asher_cli-1.0.2}/CLAUDE.md

@@ -46,7 +46,7 @@ asher/
   mcp_config.py     Claude Desktop config read/write for the /mcp slash command
   mcp_bridge.py     asher-mcp-launch console script — keyring-backed pylitterbot MCP launcher
   faults.py         check_faults(robot) — model-scoped safety/component fault detection (status enum + per-model attr allowlist incl. LR4 USB power fault; hopper never a fault)
-  history_view.py   HistoryScreen (ModalScreen) + format_history_rows() — scrollable activity-history pager pushed by the `history` command
+  history_view.py   HistoryScreen (ModalScreen) + format_history_rows()/format_history_text() — scrollable activity-history pager pushed by the `history` command; `c` copies the full history (plain text) to the clipboard via action_copy_all()
   export.py         shared activity-history CSV core + headless export path: build_history_csv(), resolve_dest(), resolve_robot(), _run_headless_export(), ExportError — no Textual imports; both the TUI `export` command and `asher --export` call build_history_csv()
   completion.py     pure helpers for command completion: slash popup (slash_matches, enter_completes, render_completion) + inline ghost text (CommandSuggester) — fed by _registry, no Textual imports except the Suggester base class
   __main__.py       main() entry point
@@ -75,12 +75,13 @@ tests/
   test_mcp_bridge.py      mcp_bridge launcher credential/subprocess handling
   test_mcp_command.py     /mcp slash command dispatch
   test_faults.py          check_faults() — safety statuses, attribute faults, graceful degradation
-  test_history_view.py    format_history_rows() + HistoryScreen structure + Pilot push/dismiss
+  test_history_view.py    format_history_rows()/format_history_text() + HistoryScreen structure, copy-all + Pilot push/dismiss
   test_export.py          build_history_csv/resolve_dest/resolve_robot/parse_days (pure) + headless _run_headless_export (no Pilot, mocks _connect_headless)
   test_completion.py      slash_matches/enter_completes/render_completion (pure) + Pilot overlay visibility/navigation/accept
 
 .github/workflows/
   ci.yml            ruff + mypy + pytest on every push/PR
+  bandit.yml        bandit security scan → SARIF → code scanning (config: [tool.bandit] in pyproject.toml)
 ```
 
 ## Credentials
@@ -196,6 +197,7 @@ Don't add comments above functions or inline unless the WHY is genuinely non-obv
 - All command execution runs in `@work` async workers to keep the UI responsive
 - Cat modes: `idle`, `happy`, `cleaning` (animated), `sleeping`, `error`, `full`
 - `VERSION` is read from `importlib.metadata.version("asher-cli")` — falls back to `"dev"` when running from source
+- **No `assert` in `asher/`** — Bandit enforces this (B101 is enabled; only `tests/` is exempt, via `exclude_dirs`). For a `requires_robot` command, narrow with `if app._robot is None: return` rather than an assert: `_dispatch_command` already rejects the disconnected case, and unlike `assert` the guard survives `python -O`
 - The primary login path is the inline flow in `login_flow.py` (`LoginFlow` state machine: `IDLE` → `AWAITING_EMAIL` → `AWAITING_PASSWORD`). `LoginScreen` (`auth.py`) still exists as a modal but is not used in the current main flow.
 - `LoginScreen` uses `event.stop()` on `Input.Submitted` and `Button.Pressed` to prevent bubbling to the App's `on_input_submitted` (relevant if re-activating the modal path)
 
@@ -226,6 +228,7 @@ uv run poe watch         # run with Python auto-restart on file change (watchfil
 uv run poe test          # run test suite
 uv run poe check         # ruff + mypy + pytest (same as CI)
 uv run poe fix           # auto-fix ruff issues
+uv run poe security      # bandit scan (same config the Bandit workflow uses)
 ```
 
 Pre-push hook (`.githooks/pre-push`) runs: ruff check → ruff format --check → mypy. Tests are not in the hook — run them manually.

{asher_cli-1.0.0 → asher_cli-1.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: asher-cli
-Version: 1.0.0
+Version: 1.0.2
 Summary: Terminal dashboard for Litter Robot (LR3/LR4/LR5) via the Whisker cloud API
 Project-URL: Homepage, https://github.com/karanshukla/asher-cli
 Project-URL: Repository, https://github.com/karanshukla/asher-cli
@@ -70,7 +70,7 @@ A Claude Code-style terminal dashboard for monitoring and controlling Litter Rob
 - Real-time cycling indicator with elapsed time (`⟳ Cycling  M:SS`)
 - Fault & safety monitoring — model-scoped in-panel alerts for cat detected, pinch, motor/position/gas faults (LR5: bonnet/laser/drawer); press `d` to dismiss
 - Cat panel with mode label + status badges (status chip, lock, night light, sleep, wait time) under the art
-- Scrollable activity-history pager — `history [count|all]` opens a full-screen, paginated view (arrow keys, `Page Up`/`Page Down`, `Home`/`End`); `q`/`Esc`/`Enter` to close
+- Scrollable activity-history pager — `history [count|all]` opens a full-screen, paginated view (arrow keys, `Page Up`/`Page Down`, `Home`/`End`); `c` copies the whole history to the clipboard; `q`/`Esc`/`Enter` to close
 - Commands: `clean`, `status`, `info`, `lock`, `unlock`, `sleep`, `wake`, `night-light on|off|auto`, `night-light-brightness`, `panel-brightness <low|medium|high>` (LR4/LR5), `wait-time`, `power on|off`, `rename`, `insight`, `sleep-schedule`, plus LR5 extras (`privacy`, `volume`, `camera-audio`, `drawer-reset`), `history [count|all]`, `export [days|month]`, `help`, `quit`
 - Slash commands for app management: `/login`, `/logout`, `/robots`, `/robot <index|name>`, `/pets`, `/pet <index|name>`, `/cat on|off|colour <hex>`, `/refresh [seconds|off]`, `/config`, `/notify on|off|sound on|off|test`, `/version`, `/mcp on|off|status`, `/exit`
 - Slash-command tab completion — type `/` and a Claude Code-style overlay lists matching commands; `↑`/`↓` to move, `Tab` or `Enter` to accept, `Esc` to dismiss
@@ -339,6 +339,16 @@ uv run poe types   # mypy
 uv run poe check   # run all of the above + tests (same as CI)
 ```
 
+### 6. Security scan
+
+```bash
+uv run poe security # bandit, same config the Bandit workflow uses
+```
+
+Scan settings live in `[tool.bandit]` in `pyproject.toml`, so local runs and the
+Bandit workflow report identical findings. Results from `main` and pull requests
+are published to the repository's **Security → Code scanning** tab.
+
 CI runs on Python 3.10 / 3.11 / 3.12 across Ubuntu, Windows, and macOS on every push.
 
 ## Changelog

{asher_cli-1.0.0 → asher_cli-1.0.2}/README.md

@@ -19,7 +19,7 @@ A Claude Code-style terminal dashboard for monitoring and controlling Litter Rob
 - Real-time cycling indicator with elapsed time (`⟳ Cycling  M:SS`)
 - Fault & safety monitoring — model-scoped in-panel alerts for cat detected, pinch, motor/position/gas faults (LR5: bonnet/laser/drawer); press `d` to dismiss
 - Cat panel with mode label + status badges (status chip, lock, night light, sleep, wait time) under the art
-- Scrollable activity-history pager — `history [count|all]` opens a full-screen, paginated view (arrow keys, `Page Up`/`Page Down`, `Home`/`End`); `q`/`Esc`/`Enter` to close
+- Scrollable activity-history pager — `history [count|all]` opens a full-screen, paginated view (arrow keys, `Page Up`/`Page Down`, `Home`/`End`); `c` copies the whole history to the clipboard; `q`/`Esc`/`Enter` to close
 - Commands: `clean`, `status`, `info`, `lock`, `unlock`, `sleep`, `wake`, `night-light on|off|auto`, `night-light-brightness`, `panel-brightness <low|medium|high>` (LR4/LR5), `wait-time`, `power on|off`, `rename`, `insight`, `sleep-schedule`, plus LR5 extras (`privacy`, `volume`, `camera-audio`, `drawer-reset`), `history [count|all]`, `export [days|month]`, `help`, `quit`
 - Slash commands for app management: `/login`, `/logout`, `/robots`, `/robot <index|name>`, `/pets`, `/pet <index|name>`, `/cat on|off|colour <hex>`, `/refresh [seconds|off]`, `/config`, `/notify on|off|sound on|off|test`, `/version`, `/mcp on|off|status`, `/exit`
 - Slash-command tab completion — type `/` and a Claude Code-style overlay lists matching commands; `↑`/`↓` to move, `Tab` or `Enter` to accept, `Esc` to dismiss
@@ -288,6 +288,16 @@ uv run poe types   # mypy
 uv run poe check   # run all of the above + tests (same as CI)
 ```
 
+### 6. Security scan
+
+```bash
+uv run poe security # bandit, same config the Bandit workflow uses
+```
+
+Scan settings live in `[tool.bandit]` in `pyproject.toml`, so local runs and the
+Bandit workflow report identical findings. Results from `main` and pull requests
+are published to the repository's **Security → Code scanning** tab.
+
 CI runs on Python 3.10 / 3.11 / 3.12 across Ubuntu, Windows, and macOS on every push.
 
 ## Changelog

{asher_cli-1.0.0 → asher_cli-1.0.2}/asher/commands/__init__.py

@@ -5,6 +5,7 @@ from __future__ import annotations
 import asyncio
 import contextlib
 import os
+import shutil
 import subprocess
 import sys
 from datetime import time
@@ -121,7 +122,8 @@ class CleanCommand(Command):
     requires_robot = True
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._robot is not None
+        if app._robot is None:
+            return
         app._set_cat("cleaning", "cleaning…")
 
         done: asyncio.Event = asyncio.Event()
@@ -169,7 +171,8 @@ class StatusCommand(Command):
     requires_robot = True
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._robot is not None
+        if app._robot is None:
+            return
         try:
             await app._robot.refresh()
             await app._refresh_status()
@@ -178,12 +181,10 @@ class StatusCommand(Command):
             return
         r = app._robot
         weight = "—"
-        try:
+        with contextlib.suppress(Exception):
             w = getattr(r, "pet_weight", None)
             if w is not None and float(w) > 0:
                 weight = f"{float(w):.1f} lb"
-        except Exception:
-            pass
         last_seen = getattr(app, "_last_cat_seen", None) or getattr(r, "last_seen", None)
         rows = [
             ("Online", "yes" if getattr(r, "is_online", False) else "no"),
@@ -206,7 +207,8 @@ class InfoCommand(Command):
     requires_robot = True
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._robot is not None
+        if app._robot is None:
+            return
         try:
             await app._robot.refresh()
         except Exception as exc:
@@ -267,7 +269,8 @@ class LockCommand(Command):
         return "lock / unlock"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._adapter is not None
+        if app._adapter is None:
+            return
         ok, msg = await app._adapter.set_panel_lockout(True)
         if ok:
             app.query_one("#lock-lbl", Static).update(Text("⊘ Locked", style="bold #d29922"))
@@ -286,7 +289,8 @@ class UnlockCommand(Command):
         return "lock / unlock"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._adapter is not None
+        if app._adapter is None:
+            return
         ok, msg = await app._adapter.set_panel_lockout(False)
         if ok:
             app.query_one("#lock-lbl", Static).update(Text("□ Unlocked", style="#484f58"))
@@ -305,7 +309,8 @@ class SleepCommand(Command):
         return "sleep / wake"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._adapter is not None
+        if app._adapter is None:
+            return
         ok, msg = await app._adapter.set_sleep(True)
         if ok:
             app._log_ok(msg)
@@ -327,7 +332,8 @@ class WakeCommand(Command):
         return "sleep / wake"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._adapter is not None
+        if app._adapter is None:
+            return
         ok, msg = await app._adapter.set_sleep(False)
         if ok:
             app._log_ok(msg)
@@ -350,7 +356,8 @@ class NightLightCommand(Command):
         return "night-light on|off|auto"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._adapter is not None
+        if app._adapter is None:
+            return
         arg = args[0].lower() if args else ""
         if arg not in ("on", "off", "auto"):
             app._log_warn("Usage: night-light on|off|auto")
@@ -380,7 +387,8 @@ class NightLightBrightnessCommand(Command):
         return "night-light-brightness"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._adapter is not None
+        if app._adapter is None:
+            return
         if not args or not args[0].isdigit():
             app._log_warn("Usage: night-light-brightness <level>")
             return
@@ -416,7 +424,8 @@ class PanelBrightnessCommand(Command):
     requires_robot = True
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._adapter is not None
+        if app._adapter is None:
+            return
         if not args:
             current = getattr(app._robot, "panel_brightness", None)
             app._log_info(f"Usage: panel-brightness <low|medium|high>  (current: {current or '—'})")
@@ -435,7 +444,8 @@ class HistoryCommand(Command):
     requires_robot = True
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._robot is not None
+        if app._robot is None:
+            return
         raw = args[0].lower() if args else ""
         if raw in ("all", "max"):
             limit = 500
@@ -467,7 +477,8 @@ class WaitTimeCommand(Command):
         return "wait-time <minutes>"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._robot is not None
+        if app._robot is None:
+            return
         valid = sorted(getattr(app._robot, "VALID_WAIT_TIMES", []))
         if not args or not args[0].isdigit():
             current = getattr(app._robot, "clean_cycle_wait_time_minutes", "?")
@@ -508,7 +519,8 @@ class PowerCommand(Command):
         return "power on|off"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._robot is not None
+        if app._robot is None:
+            return
         arg = args[0].lower() if args else ""
         if arg not in ("on", "off"):
             app._log_warn("Usage: power on|off")
@@ -536,7 +548,8 @@ class RenameCommand(Command):
         return "rename <name>"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._robot is not None
+        if app._robot is None:
+            return
         if not args:
             app._log_warn(f"Usage: rename <new name>  (current: {app._robot.name})")
             return
@@ -563,7 +576,8 @@ class InsightCommand(Command):
     requires_robot = True
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._robot is not None
+        if app._robot is None:
+            return
         raw = args[0].lower() if args else "30"
         if raw == "month":
             days = 30
@@ -618,6 +632,19 @@ def _dow_to_weekday(day: int) -> int:
     return (day - 1) % 7
 
 
+def _parse_sleep_day(day: Any) -> tuple[int, bool, object, object] | None:
+    """Read one schedule day, or None when the API returns a shape we can't read."""
+    try:
+        return (
+            _dow_to_weekday(int(getattr(day, "day", 0))),
+            bool(getattr(day, "is_enabled", False)),
+            getattr(day, "sleep_time", None),
+            getattr(day, "wake_time", None),
+        )
+    except Exception:
+        return None
+
+
 class SleepScheduleCommand(Command):
     name = "sleep-schedule"
     aliases = ("sleepschedule",)
@@ -629,7 +656,8 @@ class SleepScheduleCommand(Command):
         return "sleep-schedule"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._robot is not None
+        if app._robot is None:
+            return
         try:
             schedule = getattr(app._robot, "sleep_schedule", None)
         except Exception as exc:
@@ -663,23 +691,18 @@ class SleepScheduleCommand(Command):
         log = app.query_one("#log", RichLog)
         active_day_indices = set()
         if window is not None:
-            try:
+            with contextlib.suppress(Exception):
                 start_dt, end_dt = window
                 # Sleep windows can wrap past midnight, so flag both the start
                 # and end day as "active now" for the user-facing marker.
                 active_day_indices.add(start_dt.weekday())
                 active_day_indices.add(end_dt.weekday())
-            except Exception:
-                pass
 
         for day in days:
-            try:
-                idx = _dow_to_weekday(int(getattr(day, "day", 0)))
-                day_enabled = bool(getattr(day, "is_enabled", False))
-                sleep_t = getattr(day, "sleep_time", None)
-                wake_t = getattr(day, "wake_time", None)
-            except Exception:
+            parsed = _parse_sleep_day(day)
+            if parsed is None:
                 continue
+            idx, day_enabled, sleep_t, wake_t = parsed
 
             name = _DAY_NAMES[idx]
             t = Text()
@@ -712,7 +735,8 @@ class PrivacyCommand(Command):
         return "privacy on|off"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._adapter is not None
+        if app._adapter is None:
+            return
         arg = args[0].lower() if args else ""
         if arg not in ("on", "off"):
             app._log_warn("Usage: privacy on|off")
@@ -735,7 +759,8 @@ class VolumeCommand(Command):
         return "volume <0-100>"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._adapter is not None
+        if app._adapter is None:
+            return
         if not args or not args[0].lstrip("-").isdigit():
             current = getattr(app._robot, "sound_volume", None)
             extra = f"  (current: {current})" if current is not None else ""
@@ -760,7 +785,8 @@ class CameraAudioCommand(Command):
         return "camera-audio on|off"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._adapter is not None
+        if app._adapter is None:
+            return
         arg = args[0].lower() if args else ""
         if arg not in ("on", "off"):
             app._log_warn("Usage: camera-audio on|off")
@@ -784,7 +810,8 @@ class DrawerResetCommand(Command):
         return "drawer-reset"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        assert app._adapter is not None
+        if app._adapter is None:
+            return
         ok, msg = await app._adapter.reset_waste_drawer()
         if ok:
             app._log_ok(msg)
@@ -1287,15 +1314,19 @@ class VersionCommand(SlashCommand):
 
 def _open_folder(path: Path) -> None:
     if sys.platform == "win32":
-        subprocess.Popen(["explorer", "/select,", str(path)])
+        argv = ["explorer", "/select,", str(path)]
     elif sys.platform == "darwin":
-        subprocess.Popen(["open", "-R", str(path)])
+        argv = ["open", "-R", str(path)]
     else:
-        subprocess.Popen(["xdg-open", str(path.parent)])
+        argv = ["xdg-open", str(path.parent)]
+
+    argv[0] = shutil.which(argv[0]) or argv[0]
+    subprocess.Popen(argv)  # nosec B603 # fixed argv, no shell, path is not user-controlled
 
 
 async def _run_export(app: AsherApp, days: int) -> None:
-    assert app._robot is not None
+    if app._robot is None:
+        return
     dest = resolve_dest(app._robot, None)
     app._log_info(f"Fetching history (last {days} days)…")
     try:
@@ -1522,6 +1553,11 @@ class CommandsMixin:
         return False
 
     def on_key(self, event) -> None:  # type: ignore[override]
+        # A pushed modal (history pager, login modal, …) owns its keys. The base
+        # screen's `focused` still points at #cmd-input under a modal, so
+        # has_focus alone would let us hijack arrows/special keys from the overlay.
+        if len(self.screen_stack) > 1:  # type: ignore[attr-defined]
+            return
         cmd_input = self.query_one("#cmd-input", Input)  # type: ignore[attr-defined]
         if not cmd_input.has_focus:
             return

{asher_cli-1.0.0 → asher_cli-1.0.2}/asher/history_view.py

@@ -13,7 +13,7 @@ Layout (top to bottom):
 * summary line — a compact event-type breakdown (cleans, cat visits, …)
 * column header — pinned ``TIME`` / ``EVENT`` row aligned with the data
 * scroll area — one styled row per event, newest first, fixed-width timestamps
-* footer — navigation + close hints
+* footer — navigation, copy, and close hints (``c`` copies the whole history to the clipboard)
 
 Timestamps are rendered at a fixed width so the event column lines up
 vertically regardless of an event's age — every event shows its date.
@@ -47,6 +47,13 @@ _TS_WIDTH = 11
 # raw strings still fall into "other" rather than mislabeling.
 _ALERT_KEYWORDS = ("offline", "fault", "pinch", "power", "motor", "timing")
 
+# Footer hint line shown at the bottom of the pager and restored after the
+# post-copy confirmation flash.
+_FOOTER_HINT = (
+    "  \u2191/\u2193 scroll   PgUp/PgDn page   Home/End jump   "
+    "c copy   q \u00b7 Esc \u00b7 Enter close"
+)
+
 
 def _localize(ts: object) -> datetime | None:
     """Coerce an activity timestamp to a local-tz-aware datetime, or ``None``."""
@@ -85,6 +92,32 @@ def format_history_rows(acts: list[Activity], pets: list[Any] | None = None) ->
     return rows
 
 
+def format_history_text(
+    acts: list[Activity], pets: list[Any] | None = None, robot_name: str = ""
+) -> str:
+    """Plain-text rendering of the history, for clipboard copying.
+
+    Self-contained: title line, event-type summary, column header, and one row
+    per event (newest first) — mirrors what the on-screen pager shows so a pasted
+    copy reads the same as the view.
+    """
+    count = len(acts)
+    lines = [
+        f"Activity history \u2014 {robot_name}   {_plural(count, 'event')}   {_date_range(acts)}"
+    ]
+    if not count:
+        lines.append("No activity history available.")
+        return "\n".join(lines)
+    lines.append(_summarize(acts, pets))
+    lines.append("")
+    lines.append(f"  {'TIME'.ljust(_TS_WIDTH)}  EVENT")
+    for act in acts:
+        ts_str = _ts_str(_localize(getattr(act, "timestamp", None)))
+        label, _ = format_activity(act, pets)
+        lines.append(f"  {ts_str.ljust(_TS_WIDTH)}  {label}")
+    return "\n".join(lines)
+
+
 def _category(label: str) -> str:
     """Bucket a translated label into a short summary name."""
     low = label.lower()
@@ -147,7 +180,7 @@ class HistoryScreen(ModalScreen[None]):
 
     #history-meta {
         dock: top;
-        height: 1;
+        height: 2;
         background: #161b22;
         border-bottom: solid #30363d;
         padding: 0 2;
@@ -165,11 +198,11 @@ class HistoryScreen(ModalScreen[None]):
 
     #history-footer {
         dock: bottom;
-        height: 1;
+        height: 2;
         background: #161b22;
         border-top: solid #30363d;
         padding: 0 2;
-        color: #484f58;
+        color: #c9d1d9;
     }
 
     #history-scroll {
@@ -188,6 +221,7 @@ class HistoryScreen(ModalScreen[None]):
 
     BINDINGS = [
         Binding("escape,q,enter", "dismiss", "Close", show=False, priority=True),
+        Binding("c", "copy_all", "Copy all", show=False, priority=True),
     ]
 
     def __init__(self, acts: list[Activity], pets: list[Any] | None, robot_name: str) -> None:
@@ -195,6 +229,7 @@ class HistoryScreen(ModalScreen[None]):
         self._acts = acts
         self._pets = pets
         self._robot_name = robot_name
+        self._restore_timer: Any = None
 
     def compose(self) -> ComposeResult:
         count = len(self._acts)
@@ -209,13 +244,35 @@ class HistoryScreen(ModalScreen[None]):
             else:
                 yield Static("No activity history available for this robot.", id="history-empty")
         yield Static(
-            "  ↑/↓ scroll   PgUp/PgDn page   Home/End jump   q · Esc · Enter close",
+            _FOOTER_HINT,
             id="history-footer",
         )
 
     def on_mount(self) -> None:
         self.query_one("#history-scroll", ScrollableContainer).focus()
 
+    def action_copy_all(self) -> None:
+        """Copy the full history (plain text) to the OS clipboard.
+
+        Flashes the footer with a confirmation, then restores the hint line.
+        ``copy_to_clipboard`` uses OSC52 under the hood and silently no-ops on
+        terminals that don't support it, so we optimistically report success.
+        """
+        text = format_history_text(self._acts, self._pets, self._robot_name)
+        try:
+            self.app.copy_to_clipboard(text)
+        except Exception:
+            message = "  Clipboard unavailable in this terminal"
+        else:
+            message = f"  ✓ Copied {_plural(len(self._acts), 'event')} to clipboard"
+        self.query_one("#history-footer", Static).update(message)
+        if self._restore_timer is not None:
+            self._restore_timer.stop()
+        self._restore_timer = self.set_timer(1.5, self._restore_footer)
+
+    def _restore_footer(self) -> None:
+        self.query_one("#history-footer", Static).update(_FOOTER_HINT)
+
     def _title_line(self, count: int) -> str:
         return f"  Activity history — {self._robot_name}   {_plural(count, 'event')}   {_date_range(self._acts)}"
 

{asher_cli-1.0.0 → asher_cli-1.0.2}/asher/mcp_bridge.py

@@ -33,7 +33,9 @@ def main() -> None:
     env["LITTER_ROBOT_USERNAME"] = email
     env["LITTER_ROBOT_PASSWORD"] = password
 
-    result = subprocess.run([sys.executable, "-m", "pylitterbot.mcp"], env=env, check=False)
+    result = subprocess.run(  # nosec B603 # fixed argv on this interpreter, no shell
+        [sys.executable, "-m", "pylitterbot.mcp"], env=env, check=False
+    )
     sys.exit(result.returncode)