asher-cli 1.4.1__tar.gz → 1.6.0__tar.gz

{asher_cli-1.4.1 → asher_cli-1.6.0}/.claude/skills/pylitterbot-ref/SKILL.md

@@ -20,6 +20,7 @@ robot.sleep_mode_enabled      # bool — NOT "sleeping"
 robot.panel_lock_enabled      # bool — NOT "panel_lockout"
 robot.night_light_mode_enabled # bool
 robot.last_seen               # datetime | None
+robot.is_laser_dirty          # bool — LR4 since 2025.7.0, LR5 always
 ```
 
 ## Robot methods (all async, await required)

{asher_cli-1.4.1 → asher_cli-1.6.0}/.github/workflows/bandit.yml

@@ -31,17 +31,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
 
       - name: Bandit scan
         # --exit-zero: findings must not fail the job, or the upload step below
         # is skipped and code scanning keeps showing the previous run's alerts.
         run: >-
-          uvx --from 'bandit[toml,sarif]' bandit
+          uvx --from 'bandit[toml,sarif]==1.9.4' bandit
           -c pyproject.toml -r . -f sarif -o bandit.sarif --exit-zero
 
       - name: Upload SARIF to code scanning
-        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           sarif_file: bandit.sarif
           category: bandit

{asher_cli-1.4.1 → asher_cli-1.6.0}/.github/workflows/ci.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
       - run: uv sync --no-default-groups --group dev
       - run: uv run ruff check .
       - run: uv run ruff format --check .
@@ -30,11 +30,11 @@ jobs:
     needs: lint
     strategy:
       matrix:
-        python-version: ["3.10", "3.11", "3.12"]
+        python-version: ["3.11", "3.12"]
         os: [ubuntu-latest, windows-latest, macos-latest]
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
       - run: uv sync --no-default-groups --group dev
       - run: uv run pytest tests/ -v --tb=short

{asher_cli-1.4.1 → asher_cli-1.6.0}/.github/workflows/coverage.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
       - run: uv sync --no-default-groups --group dev
       - name: Run tests with coverage
         run: uv run pytest tests/ --cov=asher --cov-report=lcov --cov-report=term-missing

{asher_cli-1.4.1 → asher_cli-1.6.0}/.github/workflows/release.yml

@@ -6,8 +6,7 @@ on:
       - "release/*"
 
 permissions:
-  contents: write  # needed to create GitHub Releases
-  id-token: write  # needed for PyPI OIDC trusted publishing
+  contents: read
 
 jobs:
   build:
@@ -20,9 +19,9 @@ jobs:
       - name: Extract version from branch name
         id: version
         run: echo "version=${GITHUB_REF_NAME#release/}" >> "$GITHUB_OUTPUT"
-      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
       - run: uv build
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: dist
           path: dist/
@@ -32,8 +31,10 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     environment: pypi
+    permissions:
+      id-token: write  # needed for PyPI OIDC trusted publishing
     steps:
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           name: dist
           path: dist/
@@ -43,9 +44,11 @@ jobs:
     name: Create GitHub Release
     needs: [build, publish]
     runs-on: ubuntu-latest
+    permissions:
+      contents: write  # needed to create GitHub Releases
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           name: dist
           path: dist/

{asher_cli-1.4.1 → asher_cli-1.6.0}/CHANGELOG.md

@@ -7,6 +7,28 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 Generated by [git-cliff](https://git-cliff.org) from conventional commits.
 
+## [1.6.0] - 2026-10-15
+
+### 🚀 Features
+
+- *(faults)* Alert when LR4 laser sensors are dirty
+
+### 🔧 Miscellaneous
+
+- [**breaking**] Drop Python 3.10 support
+
+## [1.5.0] - 2026-10-03
+
+### 🐛 Bug Fixes
+
+- *(mcp)* Don't overwrite a claude_desktop_config.json that can't be parsed
+- *(mcp)* Cap mcp<2 when /mcp on installs the extra
+
+### 👷 CI/CD
+
+- *(release)* Scope token permissions to the jobs that need them
+- *(bandit)* Pin bandit to 1.9.4
+
 ## [1.4.1] - 2026-10-01
 
 ### 🐛 Bug Fixes
@@ -14,10 +36,6 @@ Generated by [git-cliff](https://git-cliff.org) from conventional commits.
 - *(export)* Reach the full 30 days on the LR4
 - *(tui)* Hang wrapped log lines under their message
 
-### 🛡️ Security
-
-- *(deps)* Refresh `uv.lock` to patch pyjwt and urllib3 CVEs (#101)
-
 ### ♻️ Refactor
 
 - Group the asher package into core, robot, tui, desktop and mcp
@@ -32,6 +50,8 @@ Generated by [git-cliff](https://git-cliff.org) from conventional commits.
 
 ### 🔧 Miscellaneous
 
+- *(release)* Cut v1.4.1
+- *(release)* Cut v1.4.0
 - Remove claude.yml
 - Remove claude-code-review.yml
 

{asher_cli-1.4.1 → asher_cli-1.6.0}/CLAUDE.md

@@ -277,3 +277,7 @@ Regenerate with `changelog-release X.Y.Z`, never plain `changelog` — the workf
 - Mock external deps with `unittest.mock.AsyncMock` for async robot/account methods
 - `from pylitterbot import Account` is a local import inside `_connect_worker` — patch it at `pylitterbot.Account`, not `asher.tui.connection.Account`
 - Coverage: ~76% overall; main gaps are async exception paths and `_connect_worker` auth flow
+
+## Temp files and large downloads
+
+`/tmp` is tmpfs on this machine, and so is Claude Code's scratchpad (it lives under `/tmp`), so anything written there is held in RAM. Put venvs, model and runtime downloads, extracted archives and build output on disk under `~/.cache/claude-scratch/<task>/` instead, and keep only small throwaway files in the scratchpad. An in-repo `.venv` or `target/` is already on disk and fine.

{asher_cli-1.4.1 → asher_cli-1.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: asher-cli
-Version: 1.4.1
+Version: 1.6.0
 Summary: Terminal dashboard for Litter Robot (LR3/LR4/LR5) via the Whisker cloud API
 Project-URL: Homepage, https://github.com/karanshukla/asher-cli
 Project-URL: Repository, https://github.com/karanshukla/asher-cli
@@ -33,21 +33,20 @@ Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: License :: OSI Approved :: MIT License
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Topic :: Home Automation
-Requires-Python: >=3.10
+Requires-Python: >=3.11
 Requires-Dist: keyring>=24.0.0
 Requires-Dist: plyer>=2.1.0
-Requires-Dist: pylitterbot==2025.6.6
+Requires-Dist: pylitterbot==2025.7.0
 Requires-Dist: python-dotenv>=1.0.0
 Requires-Dist: rich>=13.0.0
 Requires-Dist: textual>=0.47.0
 Requires-Dist: tzlocal>=5.4
 Provides-Extra: mcp
 Requires-Dist: mcp<2; extra == 'mcp'
-Requires-Dist: pylitterbot[mcp]==2025.6.6; extra == 'mcp'
+Requires-Dist: pylitterbot[mcp]==2025.7.0; extra == 'mcp'
 Provides-Extra: tray
 Requires-Dist: pillow>=10.0; extra == 'tray'
 Requires-Dist: pygobject>=3.42; (sys_platform == 'linux') and extra == 'tray'
@@ -75,7 +74,7 @@ A Claude Code-style terminal dashboard for monitoring and controlling Litter Rob
 - Live status bar — unit name, online/offline, drawer fill level, last activity, cat weight
 - Human-readable robot status — translates raw API states into plain English (`Ready`, `Cleaning`, `Cat Detected`, `Drawer Full`, etc.)
 - Real-time cycling indicator with elapsed time (`⟳ Cycling  M:SS`)
-- Fault & safety monitoring — model-scoped in-panel alerts for cat detected, pinch, motor/position/gas faults (LR5: bonnet/laser/drawer); press `d` to dismiss
+- Fault & safety monitoring — model-scoped in-panel alerts for cat detected, pinch, motor/position/gas faults, dirty laser sensors (LR4/LR5), LR5 bonnet/drawer; press `d` to dismiss
 - Cat panel with mode label + status badges (status chip, lock, night light, sleep, wait time) under the art
 - Scrollable activity-history pager — `history [count|all] [--type <kind>]` opens a full-screen, paginated view (arrow keys, `Page Up`/`Page Down`, `Home`/`End`); `c` copies the whole history to the clipboard; `q`/`Esc`/`Enter` to close
 - Commands: `clean`, `status`, `info`, `lock`, `unlock`, `sleep`, `wake`, `night-light on|off|auto|color <hex>`, `night-light-brightness`, `panel-brightness <low|medium|high>` (LR4/LR5), `wait-time`, `power on|off`, `rename`, `insight`, `sleep-schedule [set|disable]`, plus LR5 extras (`privacy`, `volume`, `camera-audio`, `drawer-reset`), `history [count|all] [--type <kind>]`, `export [days|month]`, `help`, `quit`
@@ -470,7 +469,7 @@ Scan settings live in `[tool.bandit]` in `pyproject.toml`, so local runs and the
 Bandit workflow report identical findings. Results from `main` and pull requests
 are published to the repository's **Security → Code scanning** tab.
 
-CI runs on Python 3.10 / 3.11 / 3.12 across Ubuntu, Windows, and macOS on every push.
+CI runs on Python 3.11 / 3.12 across Ubuntu, Windows, and macOS on every push.
 
 ## Changelog
 

{asher_cli-1.4.1 → asher_cli-1.6.0}/README.md

@@ -19,7 +19,7 @@ A Claude Code-style terminal dashboard for monitoring and controlling Litter Rob
 - Live status bar — unit name, online/offline, drawer fill level, last activity, cat weight
 - Human-readable robot status — translates raw API states into plain English (`Ready`, `Cleaning`, `Cat Detected`, `Drawer Full`, etc.)
 - Real-time cycling indicator with elapsed time (`⟳ Cycling  M:SS`)
-- Fault & safety monitoring — model-scoped in-panel alerts for cat detected, pinch, motor/position/gas faults (LR5: bonnet/laser/drawer); press `d` to dismiss
+- Fault & safety monitoring — model-scoped in-panel alerts for cat detected, pinch, motor/position/gas faults, dirty laser sensors (LR4/LR5), LR5 bonnet/drawer; press `d` to dismiss
 - Cat panel with mode label + status badges (status chip, lock, night light, sleep, wait time) under the art
 - Scrollable activity-history pager — `history [count|all] [--type <kind>]` opens a full-screen, paginated view (arrow keys, `Page Up`/`Page Down`, `Home`/`End`); `c` copies the whole history to the clipboard; `q`/`Esc`/`Enter` to close
 - Commands: `clean`, `status`, `info`, `lock`, `unlock`, `sleep`, `wake`, `night-light on|off|auto|color <hex>`, `night-light-brightness`, `panel-brightness <low|medium|high>` (LR4/LR5), `wait-time`, `power on|off`, `rename`, `insight`, `sleep-schedule [set|disable]`, plus LR5 extras (`privacy`, `volume`, `camera-audio`, `drawer-reset`), `history [count|all] [--type <kind>]`, `export [days|month]`, `help`, `quit`
@@ -414,7 +414,7 @@ Scan settings live in `[tool.bandit]` in `pyproject.toml`, so local runs and the
 Bandit workflow report identical findings. Results from `main` and pull requests
 are published to the repository's **Security → Code scanning** tab.
 
-CI runs on Python 3.10 / 3.11 / 3.12 across Ubuntu, Windows, and macOS on every push.
+CI runs on Python 3.11 / 3.12 across Ubuntu, Windows, and macOS on every push.
 
 ## Changelog
 

{asher_cli-1.4.1 → asher_cli-1.6.0}/asher/core/export.py

@@ -10,7 +10,7 @@ identical regardless of how it was invoked.
 from __future__ import annotations
 
 import csv
-from datetime import datetime, timedelta, timezone, tzinfo
+from datetime import UTC, datetime, timedelta, tzinfo
 from pathlib import Path
 from typing import TYPE_CHECKING, Any
 
@@ -69,7 +69,7 @@ def _filter_recent(acts: list[Any], cutoff: datetime) -> list[tuple[Any, datetim
         if ts_dt is None:
             continue
         if ts_dt.tzinfo is None:
-            ts_dt = ts_dt.replace(tzinfo=timezone.utc)
+            ts_dt = ts_dt.replace(tzinfo=UTC)
         if ts_dt >= cutoff:
             filtered.append((act, ts_dt))
     filtered.sort(key=lambda x: x[1])
@@ -106,7 +106,7 @@ async def build_history_csv(robot: RobotProtocol, pets: list[Any], days: int, de
     ``ACTION_LABELS`` / ``activity_raw_text`` so events render identically to
     the ``history`` command output.
     """
-    cutoff = datetime.now(tz=timezone.utc) - timedelta(days=days)
+    cutoff = datetime.now(tz=UTC) - timedelta(days=days)
     # Only the LR4's get_activity_history() takes a start time.
     fetch: Any = robot.get_activity_history
     try:
@@ -127,7 +127,7 @@ async def build_history_csv(robot: RobotProtocol, pets: list[Any], days: int, de
 
         local_tz: tzinfo = get_localzone()
     except Exception:  # noqa: BLE001 — tz discovery is best-effort; fall back to UTC
-        local_tz = timezone.utc
+        local_tz = UTC
 
     try:
         with dest.open("w", newline="", encoding="utf-8") as f:

{asher_cli-1.4.1 → asher_cli-1.6.0}/asher/core/faults.py

@@ -104,6 +104,9 @@ _MODEL_ENUM_FAULTS: dict[str, tuple[_EnumCheck, ...]] = {
 
 _MODEL_BOOL_FAULTS: dict[str, tuple[_BoolCheck, ...]] = {
     # LR3 has no component-fault attributes exposed by pylitterbot.
+    "LitterRobot4": (
+        _BoolCheck("is_laser_dirty", "LASER SENSOR DIRTY — clean globe", SEVERITY_WARN),
+    ),
     "LitterRobot5": (
         _BoolCheck("is_bonnet_removed", "BONNET OPEN", SEVERITY_WARN),
         _BoolCheck("is_laser_dirty", "LASER SENSOR DIRTY — clean globe", SEVERITY_WARN),

{asher_cli-1.4.1 → asher_cli-1.6.0}/asher/core/helpers.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 import os
 import re
-from datetime import datetime, time, timezone
+from datetime import UTC, datetime, time
 
 from rich.text import Text
 
@@ -42,8 +42,8 @@ def fmt_ago(dt: datetime | None) -> str:
     if dt is None:
         return "never"
     if dt.tzinfo is None:
-        dt = dt.replace(tzinfo=timezone.utc)
-    s = int((datetime.now(timezone.utc) - dt).total_seconds())
+        dt = dt.replace(tzinfo=UTC)
+    s = int((datetime.now(UTC) - dt).total_seconds())
     if s < 60:
         return f"{s}s ago"
     if s < 3600:
@@ -58,8 +58,8 @@ def fmt_until(dt: datetime | None) -> str:
     if dt is None:
         return "—"
     if dt.tzinfo is None:
-        dt = dt.replace(tzinfo=timezone.utc)
-    seconds = (dt - datetime.now(timezone.utc)).total_seconds()
+        dt = dt.replace(tzinfo=UTC)
+    seconds = (dt - datetime.now(UTC)).total_seconds()
     stamp = dt.date().isoformat()
     # Counted away from now in whole days, so 3 days and an hour ago reads as
     # "3d" in either direction — timedelta.days alone floors that to 4.

{asher_cli-1.4.1 → asher_cli-1.6.0}/asher/mcp/config.py

@@ -11,6 +11,10 @@ from pathlib import Path
 _SERVER_NAME = "Asher CLI MCP Bridge"
 
 
+class McpConfigError(Exception):
+    """A Claude Desktop config file exists but can't be read as a JSON object."""
+
+
 def mcp_extra_installed() -> bool:
     """Whether pylitterbot's mcp extra (the third-party `mcp` SDK) is importable."""
     return importlib.util.find_spec("mcp") is not None
@@ -60,10 +64,12 @@ def _load(path: Path) -> dict:
     if not path.exists():
         return {}
     try:
-        data: dict = json.loads(path.read_text(encoding="utf-8"))
-        return data
-    except (json.JSONDecodeError, OSError):
-        return {}
+        data = json.loads(path.read_text(encoding="utf-8"))
+    except (json.JSONDecodeError, OSError) as e:
+        raise McpConfigError(f"Can't read {path}: {e}") from e
+    if not isinstance(data, dict):
+        raise McpConfigError(f"Can't read {path}: not a JSON object")
+    return data
 
 
 def _save(path: Path, data: dict) -> None:
@@ -74,12 +80,13 @@ def _save(path: Path, data: dict) -> None:
 def set_mcp_enabled(enabled: bool) -> list[Path]:
     """Add or remove the MCP server entry in every known config location.
 
-    Returns the list of config paths actually written.
+    Returns the list of config paths actually written. Raises McpConfigError,
+    before writing anything, if any existing config can't be read.
     """
     touched: list[Path] = []
+    configs = [(path, _load(path)) for path in config_paths()]
 
-    for path in config_paths():
-        data = _load(path)
+    for path, data in configs:
         servers = data.setdefault("mcpServers", {})
 
         if enabled:
@@ -101,7 +108,9 @@ def mcp_status() -> list[tuple[Path, bool]]:
     """Return (path, enabled) for every known Claude Desktop config location."""
     result = []
     for path in config_paths():
-        data = _load(path)
-        enabled = _SERVER_NAME in data.get("mcpServers", {})
+        try:
+            enabled = _SERVER_NAME in _load(path).get("mcpServers", {})
+        except McpConfigError:
+            enabled = False
         result.append((path, enabled))
     return result

{asher_cli-1.4.1 → asher_cli-1.6.0}/asher/tui/commands/robot.py

@@ -121,7 +121,7 @@ class CleanCommand(Command):
         timed_out = False
         try:
             await asyncio.wait_for(done.wait(), timeout=300)
-        except asyncio.TimeoutError:
+        except TimeoutError:
             timed_out = True
         finally:
             unsubscribe()

{asher_cli-1.4.1 → asher_cli-1.6.0}/asher/tui/commands/slash.py

@@ -439,14 +439,15 @@ async def _ensure_mcp_extra(app: AsherApp) -> bool:
     if mcp_extra_installed():
         return True
 
-    pin = f"pylitterbot[mcp]=={pkg_version('pylitterbot')}"
-    app._log_info(f"Installing {pin}…")
+    # Same requirements as the `mcp` extra in pyproject.toml, cap included.
+    requirements = [f"pylitterbot[mcp]=={pkg_version('pylitterbot')}", "mcp<2"]
+    app._log_info(f"Installing {' '.join(requirements)}…")
     proc = await asyncio.create_subprocess_exec(
         sys.executable,
         "-m",
         "pip",
         "install",
-        pin,
+        *requirements,
         stdout=asyncio.subprocess.PIPE,
         stderr=asyncio.subprocess.STDOUT,
     )
@@ -458,7 +459,8 @@ async def _ensure_mcp_extra(app: AsherApp) -> bool:
     app._log_err("Failed to install pylitterbot[mcp]:")
     for line in output.splitlines()[-10:]:
         app._log_err(f"  {line}")
-    app._log_info(f"Try manually: {sys.executable} -m pip install '{pin}'")
+    quoted = " ".join(f"'{r}'" for r in requirements)
+    app._log_info(f"Try manually: {sys.executable} -m pip install {quoted}")
     return False
 
 
@@ -467,7 +469,7 @@ class McpCommand(SlashCommand):
     description = "on|off|status  Litter-Robot MCP server for Claude Desktop"
 
     async def run(self, app: AsherApp, args: list[str]) -> None:
-        from ...mcp.config import mcp_status, set_mcp_enabled  # noqa: PLC0415
+        from ...mcp.config import McpConfigError, mcp_status, set_mcp_enabled  # noqa: PLC0415
 
         sub = args[0].lower() if args else "status"
         if sub not in ("on", "off", "status"):
@@ -507,9 +509,12 @@ class McpCommand(SlashCommand):
                 return
             if not await _ensure_mcp_extra(app):
                 return
-            touched = set_mcp_enabled(True)
-        else:
-            touched = set_mcp_enabled(False)
+
+        try:
+            touched = set_mcp_enabled(sub == "on")
+        except McpConfigError as e:
+            app._log_err(f"{e}. Nothing was changed.")
+            return
 
         verb = "enabled" if sub == "on" else "disabled"
         if touched:

{asher_cli-1.4.1 → asher_cli-1.6.0}/asher/tui/history.py

@@ -22,7 +22,7 @@ vertically regardless of an event's age — every event shows its date.
 from __future__ import annotations
 
 from collections import Counter
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from typing import TYPE_CHECKING, Any
 
 from rich.text import Text
@@ -61,7 +61,7 @@ def _localize(ts: object) -> datetime | None:
     if not isinstance(ts, datetime):
         return None
     if ts.tzinfo is None:
-        ts = ts.replace(tzinfo=timezone.utc)
+        ts = ts.replace(tzinfo=UTC)
     return ts.astimezone(get_localzone())
 
 
@@ -69,7 +69,7 @@ def _ts_str(local_dt: datetime | None) -> str:
     """Fixed-width timestamp: ``MM/DD HH:MM`` this year, ``YYYY-MM-DD`` older."""
     if local_dt is None:
         return "?"
-    if local_dt.year == datetime.now(tz=timezone.utc).year:
+    if local_dt.year == datetime.now(tz=UTC).year:
         return local_dt.strftime("%m/%d %H:%M")
     return local_dt.strftime("%Y-%m-%d")
 

{asher_cli-1.4.1 → asher_cli-1.6.0}/docs/CONTRIBUTING.md

@@ -51,7 +51,7 @@ uv run pytest --cov=asher --cov-report=term-missing
 Per-file descriptions are in `CLAUDE.md` § Package structure. Pilot gotchas are
 in `CLAUDE.md` § Testing notes.
 
-CI matrix: Python 3.10 / 3.11 / 3.12 × Ubuntu / Windows / macOS.
+CI matrix: Python 3.11 / 3.12 × Ubuntu / Windows / macOS.
 
 ### Coverage
 

{asher_cli-1.4.1 → asher_cli-1.6.0}/pyproject.toml

@@ -1,23 +1,22 @@
 [project]
 name = "asher-cli"
-version = "1.4.1"
+version = "1.6.0"
 description = "Terminal dashboard for Litter Robot (LR3/LR4/LR5) via the Whisker cloud API"
 readme = "README.md"
 license = { file = "LICENSE" }
-requires-python = ">=3.10"
+requires-python = ">=3.11"
 keywords = ["litter-robot", "whisker", "tui", "terminal", "smart-home"]
 classifiers = [
     "Development Status :: 4 - Beta",
     "Environment :: Console",
     "License :: OSI Approved :: MIT License",
     "Programming Language :: Python :: 3",
-    "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Topic :: Home Automation",
 ]
 dependencies = [
-    "pylitterbot==2025.6.6",
+    "pylitterbot==2025.7.0",
     "textual>=0.47.0",
     "rich>=13.0.0",
     "python-dotenv>=1.0.0",
@@ -29,8 +28,9 @@ dependencies = [
 [project.optional-dependencies]
 # pylitterbot asks for mcp[cli]>=1.0.0 with no upper bound, but its server does
 # `from mcp.server.fastmcp import FastMCP`, and mcp 2.0 deleted that module.
-# Cap it here until pylitterbot ships a 2.x-compatible release.
-mcp = ["pylitterbot[mcp]==2025.6.6", "mcp<2"]
+# Cap it here, and in _ensure_mcp_extra (tui/commands/slash.py), until
+# pylitterbot ships a 2.x-compatible release.
+mcp = ["pylitterbot[mcp]==2025.7.0", "mcp<2"]
 # PyGObject is what puts pystray on its AppIndicator backend. Without it pystray
 # silently falls back to a legacy XEmbed icon, which KDE Plasma and GNOME no
 # longer host at all — the watcher runs, draws an icon, and nothing shows it.
@@ -81,7 +81,7 @@ lint   = "ruff check ."
 fmt    = "ruff format --check ."
 types  = "mypy asher/ --ignore-missing-imports"
 test   = "pytest tests/ -v --tb=short"
-security.cmd = "uvx --from bandit[toml] bandit -c pyproject.toml -r ."
+security.cmd = "uvx --from bandit[toml]==1.9.4 bandit -c pyproject.toml -r ."
 security.help = "run the same Bandit scan as the Bandit workflow"
 fix.sequence = [{cmd = "ruff check --fix ."}, {cmd = "ruff format ."}]
 dev    = "textual run --dev asher/__main__.py"
@@ -104,7 +104,7 @@ packages = ["asher"]
 
 [tool.ruff]
 line-length = 100
-target-version = "py310"
+target-version = "py311"
 # Ruff 0.16 added "*.md" to the default include list, which pulls the Python
 # snippets in docs/ and .claude/skills/ into `ruff format`. Those are
 # illustrative, not compiled, so keep the formatter scoped to real source.
@@ -124,14 +124,14 @@ known-first-party = ["asher"]
 # ── Mypy ──────────────────────────────────────────────────────────────────────
 
 [tool.mypy]
-python_version = "3.10"
+python_version = "3.11"
 warn_return_any = true
 ignore_missing_imports = true  # pylitterbot and textual have incomplete stubs
 
 # ── bump-my-version ───────────────────────────────────────────────────────────
 
 [tool.bumpversion]
-current_version = "1.4.1"
+current_version = "1.6.0"
 commit = true
 tag = true
 tag_name = "v{new_version}"

{asher_cli-1.4.1 → asher_cli-1.6.0}/tests/conftest.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from unittest.mock import AsyncMock, MagicMock
 
 import pytest
@@ -25,7 +25,7 @@ def mock_robot():
     r.panel_lock_enabled = False
     r.night_light_mode_enabled = False
     r.serial = "ABC123"
-    r.last_seen = datetime.now(timezone.utc)
+    r.last_seen = datetime.now(UTC)
     # Fault sources in their healthy/no-fault state (enums are truthy even
     # when healthy, so they must be set explicitly to avoid false positives).
     r.globe_motor_fault_status = GlobeMotorFaultStatus.NONE

{asher_cli-1.4.1 → asher_cli-1.6.0}/tests/test_activity_labels.py

@@ -7,7 +7,7 @@ about how ``action`` (``str | LitterBoxStatus``) is read.
 
 from __future__ import annotations
 
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from types import SimpleNamespace
 
 from pylitterbot.enums import LitterBoxStatus
@@ -29,7 +29,7 @@ def _act(action, *, weight=None, pet_id=None, timestamp=None):
     Using ``SimpleNamespace`` lets us attach them without subclassing.
     """
     return SimpleNamespace(
-        timestamp=timestamp or datetime(2026, 6, 14, 12, 0, tzinfo=timezone.utc),
+        timestamp=timestamp or datetime(2026, 6, 14, 12, 0, tzinfo=UTC),
         action=action,
         weight=weight,
         pet_id=pet_id,
@@ -52,7 +52,7 @@ class TestActivityRawText:
 
     def test_missing_action_attribute_falls_back_to_str_none(self):
         # Defensive: a malformed object with no .action attr should not raise.
-        assert activity_raw_text(SimpleNamespace(timestamp=datetime.now(timezone.utc))) == "None"
+        assert activity_raw_text(SimpleNamespace(timestamp=datetime.now(UTC))) == "None"
 
 
 # ── format_activity ──────────────────────────────────────────────────────────

{asher_cli-1.4.1 → asher_cli-1.6.0}/tests/test_app_pilot.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from unittest.mock import AsyncMock, MagicMock, patch
 
 import pytest
@@ -23,7 +23,7 @@ def mock_robot():
     robot.panel_lock_enabled = False
     robot.night_light_mode_enabled = False
     robot.serial = "LR12345"
-    robot.last_seen = datetime.now(timezone.utc)
+    robot.last_seen = datetime.now(UTC)
     robot.pet_weight = 10.5
     robot.refresh = AsyncMock()
     robot.start_cleaning = AsyncMock(return_value=True)

{asher_cli-1.4.1 → asher_cli-1.6.0}/tests/test_commands_pilot.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from unittest.mock import AsyncMock, MagicMock, patch
 
 import pytest
@@ -24,7 +24,7 @@ def connected_app():
     robot.panel_lock_enabled = False
     robot.night_light_mode_enabled = False
     robot.serial = "LR12345"
-    robot.last_seen = datetime.now(timezone.utc)
+    robot.last_seen = datetime.now(UTC)
     robot.pet_weight = 10.5
     robot.refresh = AsyncMock()
     robot.start_cleaning = AsyncMock(return_value=True)

{asher_cli-1.4.1 → asher_cli-1.6.0}/tests/test_completion.py

@@ -19,7 +19,7 @@ so the command bar is live but no real cloud calls happen.
 
 from __future__ import annotations
 
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from types import SimpleNamespace
 from unittest.mock import AsyncMock, MagicMock
 
@@ -72,7 +72,7 @@ def connected_app():
     robot.panel_lock_enabled = False
     robot.night_light_mode_enabled = False
     robot.serial = "LR12345"
-    robot.last_seen = datetime.now(timezone.utc)
+    robot.last_seen = datetime.now(UTC)
     robot.pet_weight = 10.5
     robot.refresh = AsyncMock()
     robot.start_cleaning = AsyncMock(return_value=True)