vmware-aria 2.4.2__tar.gz → 2.4.3__tar.gz

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "vmware-aria",
   "displayName": "VMware Aria",
-  "version": "2.4.2",
+  "version": "2.4.3",
   "description": "VMware Aria Operations: metrics, alerts, capacity, anomaly detection — 46 MCP tools.",
   "author": {
     "name": "Wei Zhou",

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/.mcp.json

@@ -5,7 +5,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-aria==2.4.2",
+        "vmware-aria==2.4.3",
         "vmware-aria-mcp"
       ]
     }

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.5
 Name: vmware-aria
-Version: 2.4.2
+Version: 2.4.3
 Summary: VMware Aria Operations (vRealize Operations) monitoring, alerting, and capacity planning
 Project-URL: Homepage, https://github.com/vmware-skills/VMware-Aria
 Project-URL: Repository, https://github.com/vmware-skills/VMware-Aria
 Project-URL: Issues, https://github.com/vmware-skills/VMware-Aria/issues
 Project-URL: Changelog, https://github.com/vmware-skills/VMware-Aria/blob/main/RELEASE_NOTES.md
-Author-email: Wei Zhou <wei-wz.zhou@broadcom.com>
+Author-email: Wei Zhou <zhouwei008@gmail.com>
 License-Expression: MIT
 Keywords: ai-ops,aria,capacity,mcp,monitoring,vmware,vrealize,vrops
 Classifier: Development Status :: 4 - Beta
@@ -30,7 +30,7 @@ For a read-only check of this skill with your model and agent host, use the shar
 
 > **Note**: In VCF 9.0 and later, **VMware Aria Operations** has been rebranded as **VCF Operations**. This skill works against both names — the `/suite-api/` REST endpoints are unchanged.
 
-> **Author**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+> **Author**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 > This is a community-driven project by a VMware engineer, not an official VMware product.
 > For official VMware developer tools see [developer.broadcom.com](https://developer.broadcom.com).
 
@@ -95,6 +95,10 @@ chmod 600 ~/.vmware-aria/.env
 vmware-aria doctor
 ```
 
+On macOS, v2.4.3 honors the system proxy bypass list for Aria targets. If an
+older installation reaches TCP/443 but token acquisition ends with a TLS close,
+upgrade and rerun `vmware-aria doctor`. `doctor --skip-auth` checks TCP only.
+
 ### Offline / Air-Gapped Install (from source)
 
 This project uses the modern PEP 517 build system (hatchling), so there is **no

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/README-CN.md

@@ -3,7 +3,7 @@
 
 要用自己的模型和 Agent 平台进行只读自测，请看 marketplace 根目录的[共享模型适配自测任务](https://github.com/vmware-skills/marketplace/blob/main/MODEL_FIT_SELF_TEST.md)。
 
-> **作者**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+> **作者**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 > 本项目由 VMware 工程师维护的社区项目，非 VMware 官方产品。
 > VMware 官方开发者工具请访问 [developer.broadcom.com](https://developer.broadcom.com)。
 
@@ -63,6 +63,10 @@ chmod 600 ~/.vmware-aria/.env
 vmware-aria doctor
 ```
 
+macOS 上的 v2.4.3 会遵守系统代理对 Aria 目标的绕过规则。如果旧版本能连通 TCP/443，
+但获取认证 token 时 TLS 连接被关闭，请升级后重新运行 `vmware-aria doctor`。
+`doctor --skip-auth` 只检查 TCP 连通性。
+
 ### 离线 / 气隙环境安装（从源码）
 
 本项目采用现代 PEP 517 构建系统（hatchling），因此**没有 `setup.py`**——这是

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/README.md

@@ -5,7 +5,7 @@ For a read-only check of this skill with your model and agent host, use the shar
 
 > **Note**: In VCF 9.0 and later, **VMware Aria Operations** has been rebranded as **VCF Operations**. This skill works against both names — the `/suite-api/` REST endpoints are unchanged.
 
-> **Author**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+> **Author**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 > This is a community-driven project by a VMware engineer, not an official VMware product.
 > For official VMware developer tools see [developer.broadcom.com](https://developer.broadcom.com).
 
@@ -70,6 +70,10 @@ chmod 600 ~/.vmware-aria/.env
 vmware-aria doctor
 ```
 
+On macOS, v2.4.3 honors the system proxy bypass list for Aria targets. If an
+older installation reaches TCP/443 but token acquisition ends with a TLS close,
+upgrade and rerun `vmware-aria doctor`. `doctor --skip-auth` checks TCP only.
+
 ### Offline / Air-Gapped Install (from source)
 
 This project uses the modern PEP 517 build system (hatchling), so there is **no

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/RELEASE_NOTES.md

@@ -1,4 +1,11 @@
-## v2.4.2 — p95 in metric summaries; the `confirmed` alias is gone; error hints fit the error
+## v2.4.3 — honor macOS proxy bypass for Aria targets (2026-11-08)
+
+* Update public author/project contact metadata to `zhouwei008@gmail.com`.
+
+* **Connection fix:** when macOS marks an Aria host as bypassed from its system HTTPS proxy, the HTTP client now uses a direct route for that host. It still honors CA bundle settings such as `SSL_CERT_FILE`; targets without a bypass keep their existing proxy route. Previously `httpx` picked up the proxy but missed the bypass, so token acquisition failed with a TLS connection close even though the appliance was healthy.
+* **Live verification on Aria Operations 8.18.7:** `get_aria_health` returned `HEALTHY`; resource and metric-key discovery succeeded. For a powered-on VM, 24-hour `cpu|usage_average` had 56 five-minute points and p95 44.154666900634766. The summary p95 exactly matched an independent nearest-rank calculation from the raw points. A powered-off VM had no CPU points and correctly reported `no_data_in_window`, not zero.
+
+## v2.4.2 — p95 in metric summaries; the `confirmed` alias is gone; error hints fit the error (2026-11-01)
 
 * **Breaking for callers still sending `confirmed`:** the deprecated alias on `acknowledge_alert`, `cancel_alert`,
   `delete_alert_definition`, `delete_report`, `start_resource_maintenance` and `end_resource_maintenance` is removed. A call that passes it is refused
@@ -6,7 +13,7 @@
   `confirm` previews, as before.
 * **`get_resource_metrics(summary=true)` adds `p95`** per series (nearest rank), with `p95_unavailable` saying why
   when the window holds fewer than 20 numeric points ("widen the window or use a finer interval"). Issue #22.
-  Live on 8.18.7: 288 five-minute points, `cpu|demandmhz` p95 50.2.
+  Live on 8.18.7: 288 five-minute points, `cpu|demandmhz` p95 50.2. A fresh lab call on 2026-11-01 was unavailable because the configured appliance did not accept a TCP 443 connection; this release does not claim a second live measurement.
 * **Error hints fit the error.** A malformed id, a 400/404/409/422 the message already explains (including the
   9.0+-only fleet / findings / PromQL endpoints on 8.x) and a missing password env var now say "The error message
   says what to change; connectivity is not the problem" instead of sending the agent to `doctor`, which would
@@ -1663,7 +1670,7 @@ This release tracks vmware-pilot v1.5.17 (new `investigate_alert` template + `re
 - **[READ]/[WRITE] tool prefixes**: All MCP tool descriptions now start with [READ] or [WRITE] to clearly indicate operation type
 - **Read/write split counts**: SKILL.md MCP Tools section header shows exact read vs write tool counts
 - **Negative routing**: Description frontmatter includes "Do NOT use when..." clause to prevent misrouting
-- **Broadcom author attestation**: README.md, README-CN.md, and pyproject.toml include VMware by Broadcom author identity (wei-wz.zhou@broadcom.com) to resolve Snyk E005 brand warnings
+- **Broadcom author attestation**: README.md, README-CN.md, and pyproject.toml include VMware by Broadcom author identity (zhouwei008@gmail.com) to resolve Snyk E005 brand warnings
 
 ### Aria-specific
 

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/SECURITY.md

@@ -4,13 +4,13 @@
 
 This is a community-maintained open-source project and is **not affiliated with, endorsed by, or sponsored by VMware, Inc. or Broadcom Inc.** "VMware" and "Aria" are trademarks of Broadcom Inc.
 
-**Author**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+**Author**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 
 ## Reporting Vulnerabilities
 
 If you discover a security vulnerability, please report it privately:
 
-- **Email**: wei-wz.zhou@broadcom.com
+- **Email**: zhouwei008@gmail.com
 - **GitHub**: Open a [private security advisory](https://github.com/vmware-skills/VMware-Aria/security/advisories/new)
 
 Do **not** open a public GitHub issue for security vulnerabilities.

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/openclaw.plugin.json

@@ -11,7 +11,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-aria==2.4.2",
+        "vmware-aria==2.4.3",
         "vmware-aria-mcp"
       ]
     }

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zw008/vmware-aria",
-  "version": "2.4.2",
+  "version": "2.4.3",
   "description": "VMware Aria Operations: metrics, alerts, capacity, anomaly detection — 46 MCP tools.",
   "private": true,
   "license": "MIT",

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/pyproject.toml

@@ -4,12 +4,12 @@ build-backend = "hatchling.build"
 
 [project]
 name = "vmware-aria"
-version = "2.4.2"
+version = "2.4.3"
 description = "VMware Aria Operations (vRealize Operations) monitoring, alerting, and capacity planning"
 readme = "README.md"
 license = "MIT"
 requires-python = ">=3.10"
-authors = [{ name = "Wei Zhou", email = "wei-wz.zhou@broadcom.com" }]
+authors = [{ name = "Wei Zhou", email = "zhouwei008@gmail.com" }]
 keywords = ["vmware", "aria", "vrealize", "vrops", "monitoring", "capacity", "mcp", "ai-ops"]
 classifiers = [
     "Development Status :: 4 - Beta",

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/vmware-skills/VMware-Aria",
     "source": "github"
   },
-  "version": "2.4.2",
+  "version": "2.4.3",
   "packages": [
     {
       "registryType": "pypi",
       "identifier": "vmware-aria",
-      "version": "2.4.2",
+      "version": "2.4.3",
       "runtimeHint": "uvx",
       "packageArguments": [
         {

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/skills/vmware-aria/SKILL.md

@@ -51,7 +51,7 @@ VMware Aria Operations (vRealize Operations 8.x, VCF Operations 9.x) AI-assisted
 ## Quick Install
 
 ```bash
-uv tool install vmware-aria==2.4.2
+uv tool install vmware-aria==2.4.3
 vmware-aria init      # guided setup: writes config + .env (chmod 600, password grep-safe), then verifies
 vmware-aria doctor
 ```
@@ -308,7 +308,7 @@ Set `VMWARE_ARIA_<TARGET_NAME_UPPER>_PASSWORD` (hyphens become underscores; targ
 
 ### `invalid peer certificate: UnknownIssuer` when running uvx (corporate TLS proxy)
 
-`uvx` re-resolves from PyPI on every launch, and a TLS-intercepting proxy breaks that. Run `vmware-aria mcp` after `uv tool install vmware-aria==2.4.2` (no network on launch), or set `UV_NATIVE_TLS=true` to use the system cert store.
+`uvx` re-resolves from PyPI on every launch, and a TLS-intercepting proxy breaks that. Run `vmware-aria mcp` after `uv tool install vmware-aria==2.4.3` (no network on launch), or set `UV_NATIVE_TLS=true` to use the system cert store.
 
 ## Audit & Safety
 

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/skills/vmware-aria/references/setup-guide.md

@@ -16,19 +16,19 @@ Complete setup and security guide for `vmware-aria`.
 ### Via uv (recommended)
 
 ```bash
-uv tool install vmware-aria==2.4.2
+uv tool install vmware-aria==2.4.3
 ```
 
 ### Via pip
 
 ```bash
-pip install vmware-aria==2.4.2
+pip install vmware-aria==2.4.3
 ```
 
 ### From source
 
 ```bash
-git clone --branch v2.4.2 https://github.com/vmware-skills/VMware-Aria.git
+git clone --branch v2.4.3 https://github.com/vmware-skills/VMware-Aria.git
 cd VMware-Aria
 pip install -e .
 ```
@@ -194,7 +194,7 @@ Add to `~/.claude.json` (or use `claude mcp add`):
 
 > v1.5.15+ recommends `vmware-aria mcp`. Pre-1.5.15 used the legacy
 > `vmware-aria-mcp` console script (still kept for backward compatibility).
-> If using `uvx --from vmware-aria==2.4.2 vmware-aria mcp` and you hit
+> If using `uvx --from vmware-aria==2.4.3 vmware-aria mcp` and you hit
 > `invalid peer certificate: UnknownIssuer` behind a corporate TLS proxy,
 > set `UV_NATIVE_TLS=true` or use the recommended form above.
 

vmware_aria-2.4.3/tests/eval/regression/test_macos_proxy_bypass.py

@@ -0,0 +1,47 @@
+"""A macOS proxy bypass must cover the Aria HTTP client, including login."""
+
+from __future__ import annotations
+
+import time
+import urllib.request
+
+import httpx
+
+from vmware_aria import connection
+from vmware_aria.config import TargetConfig
+
+
+def test_system_proxy_bypass_routes_aria_auth_directly(monkeypatch):
+    """httpx sees system proxies but does not apply macOS's bypass list."""
+    monkeypatch.setenv("HTTPS_PROXY", "http://127.0.0.1:1")
+    monkeypatch.delenv("NO_PROXY", raising=False)
+    monkeypatch.setattr(urllib.request, "proxy_bypass", lambda host: host == "aria.invalid")
+
+    seen = []
+
+    def direct(request: httpx.Request) -> httpx.Response:
+        seen.append(request.url.path)
+        if request.url.path.endswith("/auth/token/acquire"):
+            return httpx.Response(
+                200,
+                json={"token": "test-token", "validity": int((time.time() + 3600) * 1000)},
+            )
+        return httpx.Response(200, json={})
+
+    monkeypatch.setattr(
+        connection.httpx,
+        "HTTPTransport",
+        lambda **_kwargs: httpx.MockTransport(direct),
+    )
+
+    client = connection.AriaClient(
+        TargetConfig(host="aria.invalid", username="admin", verify_ssl=False),
+        "test-password",
+    )
+    try:
+        assert client._token == "test-token"
+        assert client._client.get("https://aria.invalid/suite-api/api/resources").status_code == 200
+        assert any(path.endswith("/auth/token/acquire") for path in seen)
+        assert any(path.endswith("/resources") for path in seen)
+    finally:
+        client.close()

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/uv.lock

@@ -1,5 +1,5 @@
 version = 1
-revision = 5
+revision = 3
 requires-python = ">=3.10"
 resolution-markers = [
     "python_full_version >= '3.14' and sys_platform == 'win32'",
@@ -341,7 +341,7 @@ name = "exceptiongroup"
 version = "1.3.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "typing-extensions" },
+    { name = "typing-extensions", marker = "python_full_version < '3.13'" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/50/79/66800aadf48771f6b62f7eb014e352e5d06856655206165d775e675a02c9/exceptiongroup-1.3.1.tar.gz", hash = "sha256:8b412432c6055b0b7d14c310000ae93352ed6754f70fa8f7c34141f91c4e3219", size = 30371, upload-time = "2025-11-21T23:01:54.787Z" }
 wheels = [
@@ -1142,7 +1142,7 @@ wheels = [
 
 [[package]]
 name = "vmware-aria"
-version = "2.4.2"
+version = "2.4.3"
 source = { editable = "." }
 dependencies = [
     { name = "httpx" },

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/vmware_aria/__init__.py

@@ -1,3 +1,3 @@
 """VMware Aria Operations (vRealize Operations) monitoring and capacity planning."""
 
-__version__ = "2.4.2"
+__version__ = "2.4.3"

{vmware_aria-2.4.2 → vmware_aria-2.4.3}/vmware_aria/connection.py

@@ -17,6 +17,7 @@ from __future__ import annotations
 import logging
 import re
 import time
+import urllib.request
 from typing import Any
 
 import httpx
@@ -288,10 +289,19 @@ class AriaClient:
         self._product_version: str | None | object = _UNPROBED
 
 
+        # httpx reads macOS system proxies but can miss their bypass list. Route
+        # an explicitly bypassed Aria host directly while keeping trust_env for
+        # CA bundle settings such as SSL_CERT_FILE.
+        mounts = None
+        if urllib.request.proxy_bypass(target.host):
+            origin = f"https://{target.host}:{target.port}"
+            mounts = {origin: httpx.HTTPTransport(verify=target.verify_ssl, trust_env=True)}
+
         self._client = httpx.Client(
             base_url=self._base_url,
             verify=target.verify_ssl,
             timeout=30.0,
+            mounts=mounts,
         )
         self._acquire_token()