vmware-aiops 2.1.0__tar.gz → 2.2.0__tar.gz

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "vmware-aiops",
   "displayName": "VMware AIops",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 60 MCP tools.",
   "author": {
     "name": "Wei Zhou",

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/.mcp.json

@@ -5,7 +5,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-aiops==2.1.0",
+        "vmware-aiops==2.2.0",
         "vmware-aiops-mcp"
       ]
     }

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vmware-aiops
-Version: 2.1.0
+Version: 2.2.0
 Summary: VMware vCenter/ESXi AI-powered VM lifecycle and deployment tool
 Project-URL: Homepage, https://github.com/vmware-skills/VMware-AIops
 Project-URL: Repository, https://github.com/vmware-skills/VMware-AIops
@@ -12,14 +12,14 @@ License-File: LICENSE
 Requires-Python: >=3.10
 Requires-Dist: apscheduler<4.0,>=3.10
 Requires-Dist: httpx<1.0,>=0.27
-Requires-Dist: mcp[cli]<2.0,>=1.10
+Requires-Dist: mcp[cli]<2.0,>=1.28
 Requires-Dist: pyaml<27.0,>=24.0
 Requires-Dist: python-dotenv<2.0,>=1.0
 Requires-Dist: pyvmomi<10.0,>=8.0.3.0
 Requires-Dist: rich<16.0,>=13.0
 Requires-Dist: typer<1.0,>=0.12
 Requires-Dist: vmware-monitor<3.0,>=2.0.0
-Requires-Dist: vmware-policy<2.0,>=1.20.0
+Requires-Dist: vmware-policy<2.0,>=1.21.0
 Description-Content-Type: text/markdown
 
 <!-- mcp-name: io.github.vmware-skills/vmware-aiops -->

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/RELEASE_NOTES.md

@@ -1,3 +1,22 @@
+## v2.2.0 — serve MCP over HTTPS
+
+`vmware-aiops mcp` can now serve the network as well as stdio (HLD §16, via vmware-policy 1.21.0):
+
+```bash
+vmware-audit token create alice          # once per caller; shown once
+vmware-aiops mcp --transport https --host 0.0.0.0 --port 8443 \
+    --cert server.pem --key server-key.pem --public-name mcp.example.com
+```
+
+* Every request needs `Authorization: Bearer <token>`; the server will not start without a token, refuses Host or
+  Origin values outside `--public-name`, and checks itself (unauthenticated requests must get 401) before it
+  binds. `--transport http` binds loopback only, for a TLS-terminating reverse proxy.
+* Audit rows record the caller as `token:<name>` and the surface as `mcp-https`. Calls naming different targets
+  run in parallel; calls naming no target run one at a time.
+* stdio remains the default; the `vmware-aiops-mcp` console script and `python -m` are unchanged.
+* Everyone who can reach the endpoint acts with this server's account; run one endpoint per privilege level.
+* Requires `vmware-policy>=1.21.0` and `mcp>=1.28`.
+
 ## v2.1.0 — offer only read tools, plus chosen write tools
 
 `vmware-aiops mcp` can now offer a subset of this server's tools (HLD §17 D-16, via vmware-policy 1.20.0):

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/openclaw.plugin.json

@@ -11,7 +11,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-aiops==2.1.0",
+        "vmware-aiops==2.2.0",
         "vmware-aiops-mcp"
       ]
     }

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zw008/vmware-aiops",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 60 MCP tools.",
   "private": true,
   "license": "MIT",

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "vmware-aiops"
-version = "2.1.0"
+version = "2.2.0"
 description = "VMware vCenter/ESXi AI-powered VM lifecycle and deployment tool"
 readme = "README.md"
 license = "MIT"
@@ -18,8 +18,8 @@ dependencies = [
     "apscheduler>=3.10,<4.0",
     "httpx>=0.27,<1.0",
     "python-dotenv>=1.0,<2.0",
-    "mcp[cli]>=1.10,<2.0",
-    "vmware-policy>=1.20.0,<2.0",
+    "mcp[cli]>=1.28,<2.0",
+    "vmware-policy>=1.21.0,<2.0",
     # Read-only cluster-health triage (summary + HTML snapshot) is owned by
     # vmware-monitor; AIops delegates to it so a conversation with the AIops
     # entry point can produce the same report without duplicating the code.

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/vmware-skills/VMware-AIops",
     "source": "github"
   },
-  "version": "2.1.0",
+  "version": "2.2.0",
   "packages": [
     {
       "registryType": "pypi",
       "identifier": "vmware-aiops",
-      "version": "2.1.0",
+      "version": "2.2.0",
       "runtimeHint": "uvx",
       "packageArguments": [
         {

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/skills/vmware-aiops/SKILL.md

@@ -62,7 +62,7 @@ Read before connecting an agent. Per-tool inventory: `references/capabilities.md
 ## Quick Install
 
 ```bash
-uv tool install vmware-aiops==2.1.0
+uv tool install vmware-aiops==2.2.0
 vmware-aiops doctor
 vmware-aiops hub status   # see which family members are installed
 ```
@@ -298,7 +298,7 @@ Run `vmware-aiops plan list` to see failed plan status. Ask user if they want to
 ## Setup
 
 ```bash
-uv tool install vmware-aiops==2.1.0
+uv tool install vmware-aiops==2.2.0
 mkdir -p ~/.vmware-aiops
 vmware-aiops init  # generates config.yaml and .env templates
 chmod 600 ~/.vmware-aiops/.env

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/skills/vmware-aiops/references/setup-guide.md

@@ -6,13 +6,13 @@ All install methods fetch from the same source: [github.com/vmware-skills/VMware
 
 ```bash
 # Via PyPI (recommended for version pinning)
-uv tool install vmware-aiops==2.1.0
+uv tool install vmware-aiops==2.2.0
 
 # Via Skills.sh (fetches from GitHub)
-npx skills add vmware-skills/VMware-AIops#v2.1.0
+npx skills add vmware-skills/VMware-AIops#v2.2.0
 
 # Via ClawHub (fetches from ClawHub registry snapshot of GitHub)
-clawhub install @zw008/vmware-aiops --version 2.1.0
+clawhub install @zw008/vmware-aiops --version 2.2.0
 ```
 
 ### Claude Code
@@ -35,7 +35,7 @@ claude mcp add vmware-aiops -- vmware-aiops mcp
 
 ```bash
 # 1. Install from PyPI (source: github.com/vmware-skills/VMware-AIops)
-uv tool install vmware-aiops==2.1.0
+uv tool install vmware-aiops==2.2.0
 
 # 2. Verify installation source
 vmware-aiops --version  # confirms installed version
@@ -73,7 +73,7 @@ The `vmware-aiops` package installs a Python CLI binary and its dependencies (py
 ## Development Install
 
 ```bash
-git clone --branch v2.1.0 https://github.com/vmware-skills/VMware-AIops.git
+git clone --branch v2.2.0 https://github.com/vmware-skills/VMware-AIops.git
 cd VMware-AIops
 uv venv && source .venv/bin/activate
 # --no-sources: pyproject's [tool.uv.sources] points vmware-monitor at a sibling

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/uv.lock

@@ -1195,7 +1195,7 @@ wheels = [
 
 [[package]]
 name = "vmware-aiops"
-version = "2.1.0"
+version = "2.2.0"
 source = { editable = "." }
 dependencies = [
     { name = "apscheduler" },
@@ -1221,14 +1221,14 @@ dev = [
 requires-dist = [
     { name = "apscheduler", specifier = ">=3.10,<4.0" },
     { name = "httpx", specifier = ">=0.27,<1.0" },
-    { name = "mcp", extras = ["cli"], specifier = ">=1.10,<2.0" },
+    { name = "mcp", extras = ["cli"], specifier = ">=1.28,<2.0" },
     { name = "pyaml", specifier = ">=24.0,<27.0" },
     { name = "python-dotenv", specifier = ">=1.0,<2.0" },
     { name = "pyvmomi", specifier = ">=8.0.3.0,<10.0" },
     { name = "rich", specifier = ">=13.0,<16.0" },
     { name = "typer", specifier = ">=0.12,<1.0" },
     { name = "vmware-monitor", editable = "../VMware-Monitor" },
-    { name = "vmware-policy", specifier = ">=1.20.0,<2.0" },
+    { name = "vmware-policy", specifier = ">=1.21.0,<2.0" },
 ]
 
 [package.metadata.requires-dev]
@@ -1240,7 +1240,7 @@ dev = [
 
 [[package]]
 name = "vmware-monitor"
-version = "2.1.0"
+version = "2.2.0"
 source = { editable = "../VMware-Monitor" }
 dependencies = [
     { name = "apscheduler" },
@@ -1258,13 +1258,13 @@ dependencies = [
 requires-dist = [
     { name = "apscheduler", specifier = ">=3.10,<4.0" },
     { name = "httpx", specifier = ">=0.27,<1.0" },
-    { name = "mcp", extras = ["cli"], specifier = ">=1.10,<2.0" },
+    { name = "mcp", extras = ["cli"], specifier = ">=1.28,<2.0" },
     { name = "pyaml", specifier = ">=24.0,<27.0" },
     { name = "python-dotenv", specifier = ">=1.0,<2.0" },
     { name = "pyvmomi", specifier = ">=8.0.3.0,<10.0" },
     { name = "rich", specifier = ">=13.0,<16.0" },
     { name = "typer", specifier = ">=0.12,<1.0" },
-    { name = "vmware-policy", specifier = ">=1.20.0,<2.0" },
+    { name = "vmware-policy", specifier = ">=1.21.0,<2.0" },
 ]
 
 [package.metadata.requires-dev]
@@ -1276,14 +1276,14 @@ dev = [
 
 [[package]]
 name = "vmware-policy"
-version = "1.20.0"
+version = "1.21.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "pyyaml" },
     { name = "rich" },
     { name = "typer" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/66/f3/cae0e18d269bd4764d5f9b34a838174e9668f931e44d41effab620aeecf4/vmware_policy-1.20.0.tar.gz", hash = "sha256:eb9875d3e94435a18d1dd6cf2c71905c46e2e812808556db3fb741ef322bee99", size = 220048, upload-time = "2026-10-15T06:33:35.174Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/87/5d/4221ea4a344ec33d6b54903682ce8ae2013bb0a2d6137c94ac769690ea8b/vmware_policy-1.21.0.tar.gz", hash = "sha256:f42b794ea69e52e1fa13aff8b5bc07631d82683b1c12872f2f2ec744e3853549", size = 303862, upload-time = "2026-10-15T10:13:33.719Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/b2/cf/6c87f6b5439407c1c3b83b84a5ef53def7544b687efd6f16a6cb187acf78/vmware_policy-1.20.0-py3-none-any.whl", hash = "sha256:cea9451c70be96e3d7adc420a2ac001cf431c29b61350dd58c3771378058737a", size = 86684, upload-time = "2026-10-15T06:33:33.413Z" },
+    { url = "https://files.pythonhosted.org/packages/b3/b4/feb7015ae5f7870e8058ad713050f7fe3ddefa57aa7bdd4a83f2e3b9abb4/vmware_policy-1.21.0-py3-none-any.whl", hash = "sha256:a10c26816be09f9a2823cc58bc4eacb9b5eff8b6df49dfc5b504b3d76cb3b7ec", size = 99818, upload-time = "2026-10-15T10:13:31.67Z" },
 ]

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/vmware_aiops/__init__.py

@@ -1,3 +1,3 @@
 """VMware AIops - AI-powered vCenter/ESXi monitoring and operations."""
 
-__version__ = "2.1.0"
+__version__ = "2.2.0"

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/vmware_aiops/cli/_root.py

@@ -76,13 +76,31 @@ def mcp_cmd(
         "--allow-write",
         help="With --expose read: comma-separated write tools to offer as well.",
     ),
+    transport: Optional[str] = typer.Option(
+        None,
+        "--transport",
+        help="stdio (default), https, or http (loopback only, behind a TLS reverse proxy). "
+        "https/http need a token: 'vmware-audit token create NAME'.",
+    ),
+    host: Optional[str] = typer.Option(None, "--host", help="Bind address (default 127.0.0.1)."),
+    port: Optional[int] = typer.Option(None, "--port", help="Port (default 8443)."),
+    cert: Optional[str] = typer.Option(None, "--cert", help="TLS certificate (PEM) for https."),
+    key: Optional[str] = typer.Option(None, "--key", help="TLS private key (PEM) for https."),
+    public_name: Optional[str] = typer.Option(
+        None,
+        "--public-name",
+        help="Host names clients use, comma-separated; other Host/Origin values are refused.",
+    ),
+    token_file: Optional[str] = typer.Option(
+        None, "--token-file", help="Token hash file (default $OPS_HOME/mcp-tokens)."
+    ),
 ) -> None:
-    """Start the MCP server (stdio transport).
+    """Start the MCP server (stdio by default; --transport https serves the network).
 
     Single-command entry point for MCP clients (Claude Desktop, Cursor, etc.):
         vmware-aiops mcp
 
-    Equivalent to the legacy `vmware-aiops-mcp` console script.
+    Equivalent to the legacy `vmware-aiops-mcp` console script for stdio (the console script takes no flags).
     """
     import sys
 
@@ -99,7 +117,10 @@ def mcp_cmd(
 
     from vmware_aiops.mcp_server.server import main as _mcp_main
 
-    _mcp_main(expose=expose, allow_write=allow_write)
+    _mcp_main(
+        expose=expose, allow_write=allow_write, transport=transport, host=host, port=port,
+        cert=cert, key=key, public_name=public_name, token_file=token_file,
+    )
 
 
 if __name__ == "__main__":

{vmware_aiops-2.1.0 → vmware_aiops-2.2.0}/vmware_aiops/mcp_server/server.py

@@ -145,13 +145,27 @@ def _exit_on_stop_signals() -> None:
         signal.signal(sig, _stop)
 
 
-def main(expose: Optional[str] = None, allow_write: Optional[str] = None) -> None:
+def main(
+    expose: Optional[str] = None,
+    allow_write: Optional[str] = None,
+    transport: Optional[str] = None,
+    host: Optional[str] = None,
+    port: Optional[int] = None,
+    cert: Optional[str] = None,
+    key: Optional[str] = None,
+    public_name: Optional[str] = None,
+    token_file: Optional[str] = None,
+) -> None:
     """Run the MCP server over stdio."""
     logging.basicConfig(level=logging.INFO)
     _exit_on_stop_signals()
-    from vmware_policy.exposure import apply_or_exit
-    apply_or_exit(mcp, skill="aiops", expose=expose, allow_write=allow_write)
-    mcp.run(transport="stdio")
+    from vmware_policy.serve import run_server
+    run_server(
+        mcp,
+        skill="aiops",
+        expose=expose, allow_write=allow_write, transport=transport, host=host, port=port,
+        cert=cert, key=key, public_name=public_name, token_file=token_file,
+    )
 
 # The docstrings above are the schema. `describe_tool_parameters` copies each
 # `Args:` entry into the JSON schema an agent actually reads, and closes the