vmware-aiops 2.4.3__tar.gz → 2.4.4__tar.gz

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "vmware-aiops",
   "displayName": "VMware AIops",
-  "version": "2.4.3",
+  "version": "2.4.4",
   "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 61 MCP tools.",
   "author": {
     "name": "Wei Zhou",

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/.mcp.json

@@ -5,7 +5,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-aiops==2.4.3",
+        "vmware-aiops==2.4.4",
         "vmware-aiops-mcp"
       ]
     }

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.5
 Name: vmware-aiops
-Version: 2.4.3
+Version: 2.4.4
 Summary: VMware vCenter/ESXi AI-powered VM lifecycle and deployment tool
 Project-URL: Homepage, https://github.com/vmware-skills/VMware-AIops
 Project-URL: Repository, https://github.com/vmware-skills/VMware-AIops
 Project-URL: Issues, https://github.com/vmware-skills/VMware-AIops/issues
 Project-URL: Changelog, https://github.com/vmware-skills/VMware-AIops/blob/main/RELEASE_NOTES.md
-Author-email: Wei Zhou <wei-wz.zhou@broadcom.com>
+Author-email: Wei Zhou <zhouwei008@gmail.com>
 License-Expression: MIT
 License-File: LICENSE
 Requires-Python: >=3.10
@@ -28,7 +28,7 @@ Description-Content-Type: text/markdown
 
 For a read-only check of this skill with your model and agent host, use the shared [model-fit self-test](https://github.com/vmware-skills/marketplace/blob/main/MODEL_FIT_SELF_TEST.md) in the marketplace root.
 
-> **Author**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+> **Author**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 > This is a community-driven project by a VMware engineer, not an official VMware product.
 > For official VMware developer tools see [developer.broadcom.com](https://developer.broadcom.com).
 
@@ -36,6 +36,8 @@ English | [中文](README-CN.md)
 
 AI-powered VMware vCenter/ESXi VM lifecycle and deployment tool — 61 tools.
 
+Scope also includes datastore file browsing and deployment image discovery, alarm acknowledgment and reset, and an explicitly started scanning/TTL daemon with optional configured webhooks. Alarm reset can clear multiple matching alarms; guest commands and file transfers retain the account and file-access boundaries documented in the [capabilities reference](skills/vmware-aiops/references/capabilities.md).
+
 > **Companion skills** handle everything else:
 >
 > | Skill | Scope | Install |
@@ -368,7 +370,7 @@ Plans stored in `~/.vmware-aiops/plans/`, auto-deleted on success, auto-cleaned
 | **Password Protection** | `.env` file loading with permission check; never in shell history |
 | **SSL Self-signed Support** | `verify_ssl: false` — only for ESXi with self-signed certs in isolated labs; production should use CA-signed certificates |
 | **Prompt Injection Protection** | vSphere event messages and host logs are truncated, stripped of control characters, and wrapped in boundary markers before output |
-| **Webhook Data Scope** | Disabled by default. When configured, the daemon posts to your URL only: every critical issue (alarms, events, ESXi log lines matching critical/panic/corrupt, targets it could not connect to) and every alarm/event warning — host-log warnings stay in the scan log, and `info` rows are never sent. Each issue carries its entity name and message: sanitized alarm, event, or ESXi log text, or the connection error, which can include host names, IP addresses, and user names. No credentials from the skill's config or `.env` are sent |
+| **Webhook Data Scope** | Disabled by default. When configured, the daemon posts to your URL only: every critical issue (alarms, events, ESXi log lines matching critical/panic/corrupt, targets it could not connect to) and every alarm/event warning — host-log warnings stay in the scan log, and `info` rows are never sent. Each issue carries its entity name and message: sanitized alarm, event, or ESXi log text, or a generic connection failure class; operational text can include host names, IP addresses, and user names. No credentials from the skill's config or `.env` are sent |
 | **Task Waiting** | All async operations wait for completion and report result |
 | **State Validation** | Pre-operation checks (VM exists, power state correct) |
 
@@ -574,6 +576,8 @@ VMWARE_{TARGET_NAME_UPPER}_PASSWORD
 
 ### Security Best Practices
 
+Scanner notification failures report an HTTP status or exception class. Raw webhook response bodies, transport errors and connection exceptions are excluded from notification diagnostics and audit summaries to keep endpoint tokens out of them.
+
 - **NEVER** hardcode passwords in scripts or config files
 - **NEVER** pass passwords as command-line arguments (visible in `ps`)
 - **ALWAYS** use `~/.vmware-aiops/.env` with `chmod 600`

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/README-CN.md

@@ -3,7 +3,7 @@
 
 要用自己的模型和 Agent 平台进行只读自测，请看 marketplace 根目录的[共享模型适配自测任务](https://github.com/vmware-skills/marketplace/blob/main/MODEL_FIT_SELF_TEST.md)。
 
-> **作者**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+> **作者**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 > 本项目由 VMware 工程师维护的社区项目，非 VMware 官方产品。
 > VMware 官方开发者工具请访问 [developer.broadcom.com](https://developer.broadcom.com)。
 
@@ -11,6 +11,8 @@
 
 AI 驱动的 VMware vCenter/ESXi VM 生命周期管理与部署工具 — 61 个工具。
 
+范围还包括数据存储文件浏览与部署镜像发现、告警确认与重置，以及需显式启动的扫描/TTL daemon（可选配置 webhook）。告警重置可能清除多个匹配告警；guest 命令与文件传输仍受[能力参考](skills/vmware-aiops/references/capabilities.md)所述的账户和文件访问边界约束。
+
 > **配套技能**负责其他领域：
 >
 > | 技能 | 范围 | 安装 |
@@ -289,6 +291,8 @@ Plan 存储在 `~/.vmware-aiops/plans/`，成功后自动删除，超过 24 小
 
 ## 安全特性
 
+扫描通知失败只报告 HTTP 状态或异常类型。通知诊断与审计摘要不引用原始 webhook 响应、传输错误或连接异常，避免写入其中可能包含的端点令牌。
+
 | 功能 | 说明 |
 |------|------|
 | 预演模式（Dry-Run，**仅 CLI**） | 加 `--dry-run` 只打印将要发出的 API 调用而不执行；除 `deploy iso`、`deploy mark-template`、`vm cancel-ttl`、`vm guest-download` 外，每个 CLI 写操作都支持 |
@@ -302,7 +306,7 @@ Plan 存储在 `~/.vmware-aiops/plans/`，成功后自动删除，超过 24 小
 | 配置文件内容 | `config.yaml` 仅存储主机名、端口和 `.env` 引用路径，**不含密码或 Token** |
 | SSL 自签名 | 仅用于 ESXi 自签名证书的隔离实验环境；生产环境应使用 CA 签名证书 |
 | Prompt 注入防护 | vSphere 事件消息和主机日志在输出前进行截断、控制字符清理和边界标记包裹 |
-| Webhook 数据范围 | **默认禁用**。配置后，daemon 只向你配置的 URL 发送：所有 critical 问题（告警、事件、匹配 critical/panic/corrupt 的 ESXi 日志行、连不上的目标）和所有告警/事件类 warning——主机日志的 warning 只写入扫描日志，`info` 记录从不发送。每条问题带实体名和消息：经过清洗的告警、事件或 ESXi 日志文本，或连接错误信息，其中可能含主机名、IP 地址和用户名。不会发送 skill 配置或 `.env` 里的任何凭据 |
+| Webhook 数据范围 | **默认禁用**。配置后，daemon 只向你配置的 URL 发送：所有 critical 问题（告警、事件、匹配 critical/panic/corrupt 的 ESXi 日志行、连不上的目标）和所有告警/事件类 warning——主机日志的 warning 只写入扫描日志，`info` 记录从不发送。每条问题带实体名和消息：经过清洗的告警、事件或 ESXi 日志文本，或不含原始异常的连接失败类型；运维文本可能含主机名、IP 地址和用户名。不会发送 skill 配置或 `.env` 里的任何凭据 |
 | 最小权限 | 推荐使用专用 vCenter 服务账户，仅授予所需最小权限。仅需监控时使用 [VMware-Monitor](https://github.com/vmware-skills/VMware-Monitor) |
 | 任务等待 | 所有异步操作等待完成并报告结果 |
 

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/README.md

@@ -3,7 +3,7 @@
 
 For a read-only check of this skill with your model and agent host, use the shared [model-fit self-test](https://github.com/vmware-skills/marketplace/blob/main/MODEL_FIT_SELF_TEST.md) in the marketplace root.
 
-> **Author**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+> **Author**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 > This is a community-driven project by a VMware engineer, not an official VMware product.
 > For official VMware developer tools see [developer.broadcom.com](https://developer.broadcom.com).
 
@@ -11,6 +11,8 @@ English | [中文](README-CN.md)
 
 AI-powered VMware vCenter/ESXi VM lifecycle and deployment tool — 61 tools.
 
+Scope also includes datastore file browsing and deployment image discovery, alarm acknowledgment and reset, and an explicitly started scanning/TTL daemon with optional configured webhooks. Alarm reset can clear multiple matching alarms; guest commands and file transfers retain the account and file-access boundaries documented in the [capabilities reference](skills/vmware-aiops/references/capabilities.md).
+
 > **Companion skills** handle everything else:
 >
 > | Skill | Scope | Install |
@@ -343,7 +345,7 @@ Plans stored in `~/.vmware-aiops/plans/`, auto-deleted on success, auto-cleaned
 | **Password Protection** | `.env` file loading with permission check; never in shell history |
 | **SSL Self-signed Support** | `verify_ssl: false` — only for ESXi with self-signed certs in isolated labs; production should use CA-signed certificates |
 | **Prompt Injection Protection** | vSphere event messages and host logs are truncated, stripped of control characters, and wrapped in boundary markers before output |
-| **Webhook Data Scope** | Disabled by default. When configured, the daemon posts to your URL only: every critical issue (alarms, events, ESXi log lines matching critical/panic/corrupt, targets it could not connect to) and every alarm/event warning — host-log warnings stay in the scan log, and `info` rows are never sent. Each issue carries its entity name and message: sanitized alarm, event, or ESXi log text, or the connection error, which can include host names, IP addresses, and user names. No credentials from the skill's config or `.env` are sent |
+| **Webhook Data Scope** | Disabled by default. When configured, the daemon posts to your URL only: every critical issue (alarms, events, ESXi log lines matching critical/panic/corrupt, targets it could not connect to) and every alarm/event warning — host-log warnings stay in the scan log, and `info` rows are never sent. Each issue carries its entity name and message: sanitized alarm, event, or ESXi log text, or a generic connection failure class; operational text can include host names, IP addresses, and user names. No credentials from the skill's config or `.env` are sent |
 | **Task Waiting** | All async operations wait for completion and report result |
 | **State Validation** | Pre-operation checks (VM exists, power state correct) |
 
@@ -549,6 +551,8 @@ VMWARE_{TARGET_NAME_UPPER}_PASSWORD
 
 ### Security Best Practices
 
+Scanner notification failures report an HTTP status or exception class. Raw webhook response bodies, transport errors and connection exceptions are excluded from notification diagnostics and audit summaries to keep endpoint tokens out of them.
+
 - **NEVER** hardcode passwords in scripts or config files
 - **NEVER** pass passwords as command-line arguments (visible in `ps`)
 - **ALWAYS** use `~/.vmware-aiops/.env` with `chmod 600`

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/RELEASE_NOTES.md

@@ -1,3 +1,13 @@
+## v2.4.4 — minimize notification and audit secrets (2026-11-08)
+
+* Update public author/project contact metadata to `zhouwei008@gmail.com`.
+
+### notification secret minimization
+* Webhook status/transport logs and unexpected scan/send audit failures retain HTTP status or exception class without raw response/exception text. Connection-failure notifications no longer forward raw exceptions that can contain credential-bearing URLs or opaque tokens.
+
+### scope declaration
+* Explicitly declare the existing datastore browsing/image discovery, multi-alarm reset and user-started scanning/TTL daemon capabilities in the canonical skill description and both READMEs. Runtime behavior, permission boundaries and risk disclosures are unchanged.
+
 ## v2.4.3 — bind confirmed writes to measured identities; reject ambiguous inventory names (2026-11-08)
 
 * **Confirmed MCP writes re-check the identities measured during that call.** The eight confirm-gated VM and snapshot tools pass the current blast-radius measurement's VM instance UUID and snapshot id into execution, refusing a replacement object found by the executor. Each `confirm=True` invocation measures afresh; the separate earlier preview supplies no identity token. The existing `delete_vm` acknowledgement requirement is unchanged, as are the CLI and plan-executor paths (AIops#49).
@@ -1952,7 +1962,7 @@ This release tracks vmware-pilot v1.5.17 (new `investigate_alert` template + `re
 - **[READ]/[WRITE] tool prefixes**: All MCP tool descriptions now start with [READ] or [WRITE] to clearly indicate operation type
 - **Read/write split counts**: SKILL.md MCP Tools section header shows exact read vs write tool counts
 - **Negative routing**: Description frontmatter includes "Do NOT use when..." clause to prevent misrouting
-- **Broadcom author attestation**: README.md, README-CN.md, and pyproject.toml include VMware by Broadcom author identity (wei-wz.zhou@broadcom.com) to resolve Snyk E005 brand warnings
+- **Broadcom author attestation**: README.md, README-CN.md, and pyproject.toml include VMware by Broadcom author identity (zhouwei008@gmail.com) to resolve Snyk E005 brand warnings
 
 ### AIops-specific
 

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/SECURITY.md

@@ -4,13 +4,13 @@
 
 This is a community-maintained open-source project and is **not affiliated with, endorsed by, or sponsored by VMware, Inc. or Broadcom Inc.** "VMware" and "vSphere" are trademarks of Broadcom Inc.
 
-**Author**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+**Author**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 
 ## Reporting Vulnerabilities
 
 If you discover a security vulnerability, please report it privately:
 
-- **Email**: wei-wz.zhou@broadcom.com
+- **Email**: zhouwei008@gmail.com
 - **GitHub**: Open a [private security advisory](https://github.com/vmware-skills/VMware-AIops/security/advisories/new)
 
 Do **not** open a public GitHub issue for security vulnerabilities.

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/openclaw.plugin.json

@@ -11,7 +11,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-aiops==2.4.3",
+        "vmware-aiops==2.4.4",
         "vmware-aiops-mcp"
       ]
     }

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zw008/vmware-aiops",
-  "version": "2.4.3",
+  "version": "2.4.4",
   "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 61 MCP tools.",
   "private": true,
   "license": "MIT",

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/pyproject.toml

@@ -4,12 +4,12 @@ build-backend = "hatchling.build"
 
 [project]
 name = "vmware-aiops"
-version = "2.4.3"
+version = "2.4.4"
 description = "VMware vCenter/ESXi AI-powered VM lifecycle and deployment tool"
 readme = "README.md"
 license = "MIT"
 requires-python = ">=3.10"
-authors = [{ name = "Wei Zhou", email = "wei-wz.zhou@broadcom.com" }]
+authors = [{ name = "Wei Zhou", email = "zhouwei008@gmail.com" }]
 dependencies = [
     "pyvmomi>=8.0.3.0,<10.0",
     "pyaml>=24.0,<27.0",

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/vmware-skills/VMware-AIops",
     "source": "github"
   },
-  "version": "2.4.3",
+  "version": "2.4.4",
   "packages": [
     {
       "registryType": "pypi",
       "identifier": "vmware-aiops",
-      "version": "2.4.3",
+      "version": "2.4.4",
       "runtimeHint": "uvx",
       "packageArguments": [
         {

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/skills/vmware-aiops/SKILL.md

@@ -1,11 +1,15 @@
 ---
 name: vmware-aiops
 description: >
-  Use this skill whenever the user needs to manage VMs in VMware/vSphere/ESXi — it's the entry point for all VM operations.
-  Directly handles: power on/off, clone, snapshot, migrate, deploy from OVA or templates, run commands inside VMs, batch operations, cluster management, vCenter alarm acknowledgment, a one-glance cluster-health triage ("is anything on fire?"), and VM/host/datastore investigation drill-downs.
-  Always use this skill for any "power on", "clone", "deploy", "migrate", "batch", "guest exec", "alarm", or VM lifecycle task, and for triage like "is anything on fire" / "what needs attention now" / "investigate this VM", when the context is explicitly VMware, vSphere, or ESXi.
-  Do NOT use for general read-only queries (inventory/events/VM details — use vmware-monitor), NSX networking (use vmware-nsx), storage/iSCSI/vSAN (use vmware-storage), or Kubernetes cluster lifecycle (use vmware-vks).
-  For multi-step workflows use vmware-pilot. For load balancing/AVI/AKO use vmware-avi.
+  Use for VMware/vSphere/ESXi VM lifecycle: power on/off, clone, snapshot, migrate,
+  OVA/template deployment, guest commands and file transfer, batch operations, plans and clusters.
+  Also handles datastore file browsing and deployment image scanning; alarm acknowledgment
+  and reset (which can clear multiple matching alarms); read-only cluster/VM/host/datastore
+  triage; and a user-started scanning/TTL daemon with optional configured webhooks.
+  Always use for power on, clone, deploy, migrate, guest exec, batch, alarms or VM investigation
+  in VMware. Use vmware-monitor for general read-only inventory/events/VM details;
+  vmware-storage for iSCSI/vSAN/storage configuration; vmware-nsx for NSX;
+  vmware-vks for Kubernetes; vmware-pilot for workflows; vmware-avi for load balancing.
 installer:
   kind: uv
   package: vmware-aiops
@@ -65,7 +69,7 @@ Read before connecting an agent. Per-tool inventory: `references/capabilities.md
 ## Quick Install
 
 ```bash
-uv tool install vmware-aiops==2.4.3
+uv tool install vmware-aiops==2.4.4
 vmware-aiops doctor
 vmware-aiops hub status   # see which family members are installed
 ```
@@ -305,7 +309,7 @@ The account has no vSphere role. Assign one (Read-Only or higher) on the vCenter
 ## Setup
 
 ```bash
-uv tool install vmware-aiops==2.4.3
+uv tool install vmware-aiops==2.4.4
 mkdir -p ~/.vmware-aiops
 vmware-aiops init  # generates config.yaml and .env templates
 chmod 600 ~/.vmware-aiops/.env

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/skills/vmware-aiops/references/setup-guide.md

@@ -6,13 +6,13 @@ All install methods fetch from the same source: [github.com/vmware-skills/VMware
 
 ```bash
 # Via PyPI (recommended for version pinning)
-uv tool install vmware-aiops==2.4.3
+uv tool install vmware-aiops==2.4.4
 
 # Via Skills.sh (fetches from GitHub)
-npx skills add vmware-skills/VMware-AIops#v2.4.3
+npx skills add vmware-skills/VMware-AIops#v2.4.4
 
 # Via ClawHub (fetches from ClawHub registry snapshot of GitHub)
-clawhub install @zw008/vmware-aiops --version 2.4.3
+clawhub install @zw008/vmware-aiops --version 2.4.4
 ```
 
 ### Claude Code
@@ -35,7 +35,7 @@ claude mcp add vmware-aiops -- vmware-aiops mcp
 
 ```bash
 # 1. Install from PyPI (source: github.com/vmware-skills/VMware-AIops)
-uv tool install vmware-aiops==2.4.3
+uv tool install vmware-aiops==2.4.4
 
 # 2. Verify installation source
 vmware-aiops --version  # confirms installed version
@@ -73,7 +73,7 @@ The `vmware-aiops` package installs a Python CLI binary and its dependencies (py
 ## Development Install
 
 ```bash
-git clone --branch v2.4.3 https://github.com/vmware-skills/VMware-AIops.git
+git clone --branch v2.4.4 https://github.com/vmware-skills/VMware-AIops.git
 cd VMware-AIops
 uv venv && source .venv/bin/activate
 # --no-sources: pyproject's [tool.uv.sources] points vmware-monitor at a sibling

vmware_aiops-2.4.4/tests/test_webhook_secret_logging.py

@@ -0,0 +1,66 @@
+"""Notification failures cannot publish opaque endpoint tokens or remote bodies."""
+
+from types import SimpleNamespace
+
+import httpx
+import pytest
+
+from vmware_aiops.notify.webhook import WebhookNotifier
+from vmware_aiops.scanner import scheduler
+
+
+@pytest.mark.parametrize("failure", ["transport", "status"])
+def test_notifier_logs_only_error_class_or_status(monkeypatch, caplog, failure):
+    def post(*args, **kwargs):
+        if failure == "transport":
+            raise httpx.ConnectError("https://hook.example/opaque-private-token")
+        return httpx.Response(500, text="opaque-private-token echoed remotely")
+
+    monkeypatch.setattr(httpx, "post", post)
+    assert not WebhookNotifier("https://hook.example/opaque-private-token", timeout=1).send(
+        [{"severity": "critical", "message": "incident text"}]
+    )
+    assert "opaque-private-token" not in caplog.text
+    assert "incident text" not in caplog.text
+
+
+def test_unexpected_sender_exception_is_not_copied_into_audit(monkeypatch):
+    rows = []
+    monkeypatch.setattr(scheduler, "_audit", lambda *args: rows.append(args))
+
+    def fail(issues):
+        raise RuntimeError("https://hook.example/opaque-private-token")
+
+    with pytest.raises(RuntimeError):
+        scheduler._send_webhook(SimpleNamespace(send=fail), [])
+    assert rows and rows[0][2] == "error"
+    assert "opaque-private-token" not in str(rows)
+
+
+def test_connection_exception_is_not_sent_to_webhook(monkeypatch):
+    sent = []
+    monkeypatch.setattr(
+        scheduler, "ScanLogger", lambda *a: SimpleNamespace(log_issue=lambda i: None)
+    )
+    monkeypatch.setattr(
+        scheduler,
+        "WebhookNotifier",
+        lambda **k: SimpleNamespace(send=lambda issues: sent.extend(issues) or True),
+    )
+    monkeypatch.setattr(scheduler, "_audit", lambda *a: None)
+
+    def fail(name):
+        raise ConnectionError("https://user:password@host/opaque-private-token")
+
+    conn = SimpleNamespace(list_targets=lambda: ["vc"], connect=fail)
+    config = SimpleNamespace(
+        scanner=SimpleNamespace(),
+        notify=SimpleNamespace(
+            log_file="unused",
+            webhook_url="https://hook.example/opaque-private-token",
+            webhook_timeout=1,
+        ),
+    )
+    scheduler._run_scan(config, conn)
+    assert sent and "ConnectionError" in str(sent)
+    assert "opaque-private-token" not in str(sent) and "password" not in str(sent)

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/uv.lock

@@ -1,5 +1,5 @@
 version = 1
-revision = 3
+revision = 5
 requires-python = ">=3.10"
 resolution-markers = [
     "python_full_version >= '3.14' and sys_platform == 'win32'",
@@ -353,7 +353,7 @@ name = "exceptiongroup"
 version = "1.3.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "typing-extensions", marker = "python_full_version < '3.13'" },
+    { name = "typing-extensions" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/50/79/66800aadf48771f6b62f7eb014e352e5d06856655206165d775e675a02c9/exceptiongroup-1.3.1.tar.gz", hash = "sha256:8b412432c6055b0b7d14c310000ae93352ed6754f70fa8f7c34141f91c4e3219", size = 30371, upload-time = "2025-11-21T23:01:54.787Z" }
 wheels = [
@@ -1195,7 +1195,7 @@ wheels = [
 
 [[package]]
 name = "vmware-aiops"
-version = "2.4.3"
+version = "2.4.4"
 source = { editable = "." }
 dependencies = [
     { name = "apscheduler" },
@@ -1242,7 +1242,7 @@ dev = [
 
 [[package]]
 name = "vmware-monitor"
-version = "2.5.0"
+version = "2.6.0"
 source = { editable = "../VMware-Monitor" }
 dependencies = [
     { name = "apscheduler" },

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/vmware_aiops/__init__.py

@@ -1,3 +1,3 @@
 """VMware AIops - AI-powered vCenter/ESXi monitoring and operations."""
 
-__version__ = "2.4.3"
+__version__ = "2.4.4"

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/vmware_aiops/notify/webhook.py

@@ -52,15 +52,10 @@ class WebhookNotifier:
             if response.status_code < 300:
                 logger.info("Webhook sent successfully (%d issues)", len(issues))
                 return True
-            logger.warning(
-                "Webhook returned %d: %s",
-                response.status_code,
-                # Strip CR/LF so a hostile endpoint can't inject forged log lines.
-                response.text[:200].replace("\n", " ").replace("\r", " "),
-            )
+            logger.warning("Webhook returned HTTP %d", response.status_code)
             return False
         except httpx.HTTPError as e:
-            logger.error("Webhook failed: %s", e)
+            logger.error("Webhook failed (%s)", type(e).__name__)
             return False
 
 

{vmware_aiops-2.4.3 → vmware_aiops-2.4.4}/vmware_aiops/scanner/scheduler.py

@@ -22,13 +22,13 @@ from vmware_aiops.connection import ConnectionManager
 from vmware_aiops.notify.logger import ScanLogger
 from vmware_aiops.notify.webhook import WebhookNotifier
 from vmware_aiops.ops.inventory import AmbiguousVMError
+from vmware_aiops.ops.step_policy import TOOL_RISK
 from vmware_aiops.ops.ttl import (
     TTLIdentityError,
     get_expired_entries,
     remove_entry,
     verify_ttl_identity,
 )
-from vmware_aiops.ops.step_policy import TOOL_RISK
 from vmware_aiops.ops.vm_lifecycle import VMNotFoundError, delete_vm
 from vmware_aiops.scanner.alarm_scanner import scan_alarms
 from vmware_aiops.scanner.log_scanner import scan_host_logs_since, scan_logs
@@ -192,7 +192,7 @@ def _send_webhook(webhook: WebhookNotifier, paged: list[dict]) -> None:
                 "error": "webhook send failed; the daemon log has the HTTP status or exception"
             }
     except Exception as exc:
-        status, result = "error", {"error": sanitize(f"{type(exc).__name__}: {exc}", 500)}
+        status, result = "error", {"error": type(exc).__name__}
         raise
     except BaseException as exc:
         # Ctrl+C / shutdown mid-send: not delivered, and not a plain failure.
@@ -235,7 +235,8 @@ def _run_scan(
                 issue = {
                     "severity": "critical",
                     "source": "connection",
-                    "message": f"Failed to connect to {target_name}: {e}",
+                    "message": f"Failed to connect to {target_name} ({type(e).__name__}); "
+                               "run vmware-aiops doctor",
                     "time": "",
                     "entity": target_name,
                 }
@@ -261,7 +262,7 @@ def _run_scan(
             status = "error"
             outcome["error"] = sanitize("incomplete scan: " + "; ".join(failed), 500)
     except Exception as exc:
-        status, outcome = "error", {"error": sanitize(f"{type(exc).__name__}: {exc}", 500)}
+        status, outcome = "error", {"error": type(exc).__name__}
         raise
     except BaseException as exc:
         # Ctrl+C during the first scan (before signal handlers are installed) or a