vmware-aria 2.4.2__tar.gz → 2.4.4__tar.gz

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "vmware-aria",
   "displayName": "VMware Aria",
-  "version": "2.4.2",
+  "version": "2.4.4",
   "description": "VMware Aria Operations: metrics, alerts, capacity, anomaly detection — 46 MCP tools.",
   "author": {
     "name": "Wei Zhou",

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/.mcp.json

@@ -5,7 +5,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-aria==2.4.2",
+        "vmware-aria==2.4.4",
         "vmware-aria-mcp"
       ]
     }

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.5
 Name: vmware-aria
-Version: 2.4.2
+Version: 2.4.4
 Summary: VMware Aria Operations (vRealize Operations) monitoring, alerting, and capacity planning
 Project-URL: Homepage, https://github.com/vmware-skills/VMware-Aria
 Project-URL: Repository, https://github.com/vmware-skills/VMware-Aria
 Project-URL: Issues, https://github.com/vmware-skills/VMware-Aria/issues
 Project-URL: Changelog, https://github.com/vmware-skills/VMware-Aria/blob/main/RELEASE_NOTES.md
-Author-email: Wei Zhou <wei-wz.zhou@broadcom.com>
+Author-email: Wei Zhou <zhouwei008@gmail.com>
 License-Expression: MIT
 Keywords: ai-ops,aria,capacity,mcp,monitoring,vmware,vrealize,vrops
 Classifier: Development Status :: 4 - Beta
@@ -30,7 +30,7 @@ For a read-only check of this skill with your model and agent host, use the shar
 
 > **Note**: In VCF 9.0 and later, **VMware Aria Operations** has been rebranded as **VCF Operations**. This skill works against both names — the `/suite-api/` REST endpoints are unchanged.
 
-> **Author**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+> **Author**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 > This is a community-driven project by a VMware engineer, not an official VMware product.
 > For official VMware developer tools see [developer.broadcom.com](https://developer.broadcom.com).
 
@@ -39,6 +39,10 @@ AI-assisted monitoring and capacity planning for VMware Aria Operations (vRealiz
 [![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
+MCP uses local stdio by default. Opt-in HTTPS opens the configured listener and requires TLS plus caller authentication; it is a network service, not a local-only mode. Credential examples create owner-only placeholder files without overwriting existing files; edit secrets locally.
+
+Container examples build a local version-tagged image and run it with `--pull=never`, avoiding registry fallback. A local version tag is not an immutable image digest.
+
 ## Upgrading to 2.0
 
 2.0 renames 4 of its MCP tools so every name starts with a verb (e.g. `findings_list` → `list_findings`, `fleet_certificate_list` → `list_fleet_certificates`, `fleet_domain_list` → `list_fleet_domains`). The full old → new table is in
@@ -72,7 +76,7 @@ against both the old and the new name, so one file serves both.
 
 ```bash
 # Install
-uv tool install vmware-aria
+uv tool install vmware-aria==2.4.4
 
 # Configure
 mkdir -p ~/.vmware-aria
@@ -88,13 +92,25 @@ default_target: prod
 EOF
 
 # Set password (never in config.yaml)
-echo "VMWARE_ARIA_PROD_PASSWORD=your_password" > ~/.vmware-aria/.env
-chmod 600 ~/.vmware-aria/.env
+(
+  umask 077
+  set -C  # Refuse existing files; edit an existing .env locally instead
+  cat > ~/.vmware-aria/.env <<'EOF'
+VMWARE_ARIA_PROD_PASSWORD=REPLACE_IN_LOCAL_EDITOR
+EOF
+)
+# Before continuing, edit .env locally; never type live secrets into shell commands.
 
 # Verify setup
 vmware-aria doctor
 ```
 
+This writes placeholders only. Enter passwords or tokens using a local editor after creation; do not paste live credentials into terminal commands, chat or commits. If the file exists, the command refuses to overwrite it; edit the existing file after checking its permissions are `600`.
+
+On macOS, v2.4.3 honors the system proxy bypass list for Aria targets. If an
+older installation reaches TCP/443 but token acquisition ends with a TLS close,
+upgrade and rerun `vmware-aria doctor`. `doctor --skip-auth` checks TCP only.
+
 ### Offline / Air-Gapped Install (from source)
 
 This project uses the modern PEP 517 build system (hatchling), so there is **no
@@ -167,7 +183,7 @@ vmware-aria alert recommendations <alert-id>
 
 ## MCP Setup (Claude Code)
 
-After `uv tool install vmware-aria`, add to `~/.claude.json`:
+After `uv tool install vmware-aria==2.4.4`, add to `~/.claude.json`:
 
 ```json
 {
@@ -185,7 +201,7 @@ After `uv tool install vmware-aria`, add to `~/.claude.json`:
 
 > **v1.5.15+** uses the single-command form `vmware-aria mcp`. The legacy
 > `vmware-aria-mcp` console script is still kept for backward compatibility.
-> If you must use `uvx --from vmware-aria vmware-aria mcp` (no install) and hit
+> If you must use `uvx --from vmware-aria==2.4.4 vmware-aria mcp` (no install) and hit
 > `invalid peer certificate: UnknownIssuer` behind a corporate TLS proxy, set
 > `UV_NATIVE_TLS=true` or use the recommended `vmware-aria mcp` form above.
 

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/README-CN.md

@@ -3,12 +3,16 @@
 
 要用自己的模型和 Agent 平台进行只读自测，请看 marketplace 根目录的[共享模型适配自测任务](https://github.com/vmware-skills/marketplace/blob/main/MODEL_FIT_SELF_TEST.md)。
 
-> **作者**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+> **作者**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 > 本项目由 VMware 工程师维护的社区项目，非 VMware 官方产品。
 > VMware 官方开发者工具请访问 [developer.broadcom.com](https://developer.broadcom.com)。
 
 通过 Model Context Protocol (MCP) 为 VMware Aria Operations（原 vRealize Operations）提供 AI 辅助的监控与容量规划能力。
 
+MCP 默认使用本地 stdio。启用可选 HTTPS 后会打开配置的监听端口，并要求 TLS 与调用者认证；此时属于网络服务。凭据示例先创建仅当前用户可读写的占位文件，拒绝覆盖已有文件，再由用户在本地编辑秘密值。
+
+容器示例先在本地构建带版本标签的镜像，再用 `--pull=never` 运行，避免回退到镜像仓库拉取。本地版本标签不等于不可变的镜像摘要。
+
 ## 升级到 2.0
 
 2.0 把 MCP 工具名改成动词在前（共改名 4 处）（例如 `findings_list` → `list_findings`, `fleet_certificate_list` → `list_fleet_certificates`, `fleet_domain_list` → `list_fleet_domains`），完整的新旧名对照表见
@@ -40,7 +44,7 @@ vmware-policy ≥ 1.18 下仍然生效（`vmware-audit policy` 会列出因改
 
 ```bash
 # 安装
-uv tool install vmware-aria
+uv tool install vmware-aria==2.4.4
 
 # 配置
 mkdir -p ~/.vmware-aria
@@ -56,13 +60,25 @@ default_target: prod
 EOF
 
 # 设置密码（绝不存入 config.yaml）
-echo "VMWARE_ARIA_PROD_PASSWORD=your_password" > ~/.vmware-aria/.env
-chmod 600 ~/.vmware-aria/.env
+(
+  umask 077
+  set -C  # 拒绝覆盖已有文件；已有 .env 请直接用本地编辑器修改
+  cat > ~/.vmware-aria/.env <<'EOF'
+VMWARE_ARIA_PROD_PASSWORD=REPLACE_IN_LOCAL_EDITOR
+EOF
+)
+# 继续前，先用本地编辑器填写 .env；不要在终端命令中输入真实秘密值。
 
 # 验证配置
 vmware-aria doctor
 ```
 
+模板只写入占位符。创建后用本地编辑器填写密码或令牌；不要把真实凭据粘贴到终端命令、聊天或提交中。若文件已存在，上述命令会拒绝覆盖；直接编辑现有文件并先确认权限为 `600`。
+
+macOS 上的 v2.4.3 会遵守系统代理对 Aria 目标的绕过规则。如果旧版本能连通 TCP/443，
+但获取认证 token 时 TLS 连接被关闭，请升级后重新运行 `vmware-aria doctor`。
+`doctor --skip-auth` 只检查 TCP 连通性。
+
 ### 离线 / 气隙环境安装（从源码）
 
 本项目采用现代 PEP 517 构建系统（hatchling），因此**没有 `setup.py`**——这是
@@ -132,7 +148,7 @@ vmware-aria alert recommendations <alert-id>
 
 ## MCP 配置（Claude Code）
 
-完成 `uv tool install vmware-aria` 后，在 `~/.claude.json` 中添加：
+完成 `uv tool install vmware-aria==2.4.4` 后，在 `~/.claude.json` 中添加：
 
 ```json
 {
@@ -149,7 +165,7 @@ vmware-aria alert recommendations <alert-id>
 ```
 
 > **v1.5.15+** 推荐使用单命令 `vmware-aria mcp`。旧的 `vmware-aria-mcp` 入口仍然
-> 保留以向后兼容。如必须使用 `uvx --from vmware-aria vmware-aria mcp`（不安装）
+> 保留以向后兼容。如必须使用 `uvx --from vmware-aria==2.4.4 vmware-aria mcp`（不安装）
 > 且公司 TLS 代理报 `invalid peer certificate: UnknownIssuer`，请设置
 > `UV_NATIVE_TLS=true`，或直接使用上面的 `vmware-aria mcp` 形式。
 

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/README.md

@@ -5,7 +5,7 @@ For a read-only check of this skill with your model and agent host, use the shar
 
 > **Note**: In VCF 9.0 and later, **VMware Aria Operations** has been rebranded as **VCF Operations**. This skill works against both names — the `/suite-api/` REST endpoints are unchanged.
 
-> **Author**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+> **Author**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 > This is a community-driven project by a VMware engineer, not an official VMware product.
 > For official VMware developer tools see [developer.broadcom.com](https://developer.broadcom.com).
 
@@ -14,6 +14,10 @@ AI-assisted monitoring and capacity planning for VMware Aria Operations (vRealiz
 [![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
+MCP uses local stdio by default. Opt-in HTTPS opens the configured listener and requires TLS plus caller authentication; it is a network service, not a local-only mode. Credential examples create owner-only placeholder files without overwriting existing files; edit secrets locally.
+
+Container examples build a local version-tagged image and run it with `--pull=never`, avoiding registry fallback. A local version tag is not an immutable image digest.
+
 ## Upgrading to 2.0
 
 2.0 renames 4 of its MCP tools so every name starts with a verb (e.g. `findings_list` → `list_findings`, `fleet_certificate_list` → `list_fleet_certificates`, `fleet_domain_list` → `list_fleet_domains`). The full old → new table is in
@@ -47,7 +51,7 @@ against both the old and the new name, so one file serves both.
 
 ```bash
 # Install
-uv tool install vmware-aria
+uv tool install vmware-aria==2.4.4
 
 # Configure
 mkdir -p ~/.vmware-aria
@@ -63,13 +67,25 @@ default_target: prod
 EOF
 
 # Set password (never in config.yaml)
-echo "VMWARE_ARIA_PROD_PASSWORD=your_password" > ~/.vmware-aria/.env
-chmod 600 ~/.vmware-aria/.env
+(
+  umask 077
+  set -C  # Refuse existing files; edit an existing .env locally instead
+  cat > ~/.vmware-aria/.env <<'EOF'
+VMWARE_ARIA_PROD_PASSWORD=REPLACE_IN_LOCAL_EDITOR
+EOF
+)
+# Before continuing, edit .env locally; never type live secrets into shell commands.
 
 # Verify setup
 vmware-aria doctor
 ```
 
+This writes placeholders only. Enter passwords or tokens using a local editor after creation; do not paste live credentials into terminal commands, chat or commits. If the file exists, the command refuses to overwrite it; edit the existing file after checking its permissions are `600`.
+
+On macOS, v2.4.3 honors the system proxy bypass list for Aria targets. If an
+older installation reaches TCP/443 but token acquisition ends with a TLS close,
+upgrade and rerun `vmware-aria doctor`. `doctor --skip-auth` checks TCP only.
+
 ### Offline / Air-Gapped Install (from source)
 
 This project uses the modern PEP 517 build system (hatchling), so there is **no
@@ -142,7 +158,7 @@ vmware-aria alert recommendations <alert-id>
 
 ## MCP Setup (Claude Code)
 
-After `uv tool install vmware-aria`, add to `~/.claude.json`:
+After `uv tool install vmware-aria==2.4.4`, add to `~/.claude.json`:
 
 ```json
 {
@@ -160,7 +176,7 @@ After `uv tool install vmware-aria`, add to `~/.claude.json`:
 
 > **v1.5.15+** uses the single-command form `vmware-aria mcp`. The legacy
 > `vmware-aria-mcp` console script is still kept for backward compatibility.
-> If you must use `uvx --from vmware-aria vmware-aria mcp` (no install) and hit
+> If you must use `uvx --from vmware-aria==2.4.4 vmware-aria mcp` (no install) and hit
 > `invalid peer certificate: UnknownIssuer` behind a corporate TLS proxy, set
 > `UV_NATIVE_TLS=true` or use the recommended `vmware-aria mcp` form above.
 

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/RELEASE_NOTES.md

@@ -1,4 +1,25 @@
-## v2.4.2 — p95 in metric summaries; the `confirmed` alias is gone; error hints fit the error
+## v2.4.4 — Security documentation and Gemini extension packaging
+
+Released 2026-11-09.
+
+Clarify actual capability, credential, local-write and transport boundaries where applicable.
+Pin documented setup/fallback tools and make credential examples owner-only before writing,
+without overwriting existing files. Runtime permissions, TLS defaults and approval behavior are unchanged.
+These edits do not establish a new ClawHub scan verdict.
+
+Add the root Gemini CLI extension manifest and discovery metadata, using the existing canonical skill and exact MCP package version. No duplicate skill entrypoint is introduced.
+
+Runtime infrastructure operations, permissions, TLS defaults and confirmation behavior are unchanged. No new vSphere/VCF 9.x or live product compatibility is claimed. ClawHub skill and bundle verdicts are checked separately after publication; documentation corrections are not a clean-scan claim.
+
+## v2.4.3 — honor macOS proxy bypass for Aria targets (2026-11-08)
+
+* Update public author/project contact metadata to `zhouwei008@gmail.com`.
+
+* **Connection fix:** when macOS marks an Aria host as bypassed from its system HTTPS proxy, the HTTP client now uses a direct route for that host. It still honors CA bundle settings such as `SSL_CERT_FILE`; targets without a bypass keep their existing proxy route. Previously `httpx` picked up the proxy but missed the bypass, so token acquisition failed with a TLS connection close even though the appliance was healthy.
+* **Live verification on Aria Operations 8.18.7:** `get_aria_health` returned `HEALTHY`; resource and metric-key discovery succeeded. For a powered-on VM, 24-hour `cpu|usage_average` had 56 five-minute points and p95 44.154666900634766. The summary p95 exactly matched an independent nearest-rank calculation from the raw points. A powered-off VM had no CPU points and correctly reported `no_data_in_window`, not zero.
+
+
+## v2.4.2 — p95 in metric summaries; the `confirmed` alias is gone; error hints fit the error (2026-11-01)
 
 * **Breaking for callers still sending `confirmed`:** the deprecated alias on `acknowledge_alert`, `cancel_alert`,
   `delete_alert_definition`, `delete_report`, `start_resource_maintenance` and `end_resource_maintenance` is removed. A call that passes it is refused
@@ -6,7 +27,7 @@
   `confirm` previews, as before.
 * **`get_resource_metrics(summary=true)` adds `p95`** per series (nearest rank), with `p95_unavailable` saying why
   when the window holds fewer than 20 numeric points ("widen the window or use a finer interval"). Issue #22.
-  Live on 8.18.7: 288 five-minute points, `cpu|demandmhz` p95 50.2.
+  Live on 8.18.7: 288 five-minute points, `cpu|demandmhz` p95 50.2. A fresh lab call on 2026-11-01 was unavailable because the configured appliance did not accept a TCP 443 connection; this release does not claim a second live measurement.
 * **Error hints fit the error.** A malformed id, a 400/404/409/422 the message already explains (including the
   9.0+-only fleet / findings / PromQL endpoints on 8.x) and a missing password env var now say "The error message
   says what to change; connectivity is not the problem" instead of sending the agent to `doctor`, which would
@@ -1663,7 +1684,7 @@ This release tracks vmware-pilot v1.5.17 (new `investigate_alert` template + `re
 - **[READ]/[WRITE] tool prefixes**: All MCP tool descriptions now start with [READ] or [WRITE] to clearly indicate operation type
 - **Read/write split counts**: SKILL.md MCP Tools section header shows exact read vs write tool counts
 - **Negative routing**: Description frontmatter includes "Do NOT use when..." clause to prevent misrouting
-- **Broadcom author attestation**: README.md, README-CN.md, and pyproject.toml include VMware by Broadcom author identity (wei-wz.zhou@broadcom.com) to resolve Snyk E005 brand warnings
+- **Broadcom author attestation**: README.md, README-CN.md, and pyproject.toml include VMware by Broadcom author identity (zhouwei008@gmail.com) to resolve Snyk E005 brand warnings
 
 ### Aria-specific
 

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/SECURITY.md

@@ -4,13 +4,13 @@
 
 This is a community-maintained open-source project and is **not affiliated with, endorsed by, or sponsored by VMware, Inc. or Broadcom Inc.** "VMware" and "Aria" are trademarks of Broadcom Inc.
 
-**Author**: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com
+**Author**: Wei Zhou, VMware by Broadcom — zhouwei008@gmail.com
 
 ## Reporting Vulnerabilities
 
 If you discover a security vulnerability, please report it privately:
 
-- **Email**: wei-wz.zhou@broadcom.com
+- **Email**: zhouwei008@gmail.com
 - **GitHub**: Open a [private security advisory](https://github.com/vmware-skills/VMware-Aria/security/advisories/new)
 
 Do **not** open a public GitHub issue for security vulnerabilities.
@@ -69,7 +69,7 @@ This skill makes no webhook, HTTP listener, or outbound network connections beyo
 This project is scanned with [Bandit](https://bandit.readthedocs.io/) before every release, targeting 0 Medium+ issues:
 
 ```bash
-uvx bandit -r vmware_aria/
+uvx bandit==1.9.4 -r vmware_aria/
 ```
 
 ## Supported Versions

vmware_aria-2.4.4/gemini-extension.json

@@ -0,0 +1,16 @@
+{
+  "name": "vmware-aria",
+  "version": "2.4.4",
+  "description": "VMware Aria Operations (vRealize Operations) monitoring, alerting, and capacity planning",
+  "mcpServers": {
+    "vmware-aria": {
+      "type": "stdio",
+      "command": "uvx",
+      "args": [
+        "--from",
+        "vmware-aria==2.4.4",
+        "vmware-aria-mcp"
+      ]
+    }
+  }
+}

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/openclaw.plugin.json

@@ -11,7 +11,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-aria==2.4.2",
+        "vmware-aria==2.4.4",
         "vmware-aria-mcp"
       ]
     }

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zw008/vmware-aria",
-  "version": "2.4.2",
+  "version": "2.4.4",
   "description": "VMware Aria Operations: metrics, alerts, capacity, anomaly detection — 46 MCP tools.",
   "private": true,
   "license": "MIT",

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/pyproject.toml

@@ -4,12 +4,12 @@ build-backend = "hatchling.build"
 
 [project]
 name = "vmware-aria"
-version = "2.4.2"
+version = "2.4.4"
 description = "VMware Aria Operations (vRealize Operations) monitoring, alerting, and capacity planning"
 readme = "README.md"
 license = "MIT"
 requires-python = ">=3.10"
-authors = [{ name = "Wei Zhou", email = "wei-wz.zhou@broadcom.com" }]
+authors = [{ name = "Wei Zhou", email = "zhouwei008@gmail.com" }]
 keywords = ["vmware", "aria", "vrealize", "vrops", "monitoring", "capacity", "mcp", "ai-ops"]
 classifiers = [
     "Development Status :: 4 - Beta",

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/vmware-skills/VMware-Aria",
     "source": "github"
   },
-  "version": "2.4.2",
+  "version": "2.4.4",
   "packages": [
     {
       "registryType": "pypi",
       "identifier": "vmware-aria",
-      "version": "2.4.2",
+      "version": "2.4.4",
       "runtimeHint": "uvx",
       "packageArguments": [
         {

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/skills/vmware-aria/SKILL.md

@@ -16,7 +16,7 @@ compatibility: >
   vmware-policy auto-installed as Python dependency (provides @vmware_tool decorator and audit logging). All write operations audited to ~/.vmware/audit.db.
   Credentials: Each Aria Operations target requires a per-target password env var in ~/.vmware-aria/.env following the pattern VMWARE_ARIA_<TARGET_NAME_UPPER>_PASSWORD. Passwords are never logged or echoed.
   Read-heavy: 36 of 46 tools are read-only. Write operations limited to alert acknowledge/cancel, alert notes, alert definition management, report management, and resource maintenance start/end.
-  No webhooks, no outbound network calls, no guest operations. Local only: stdio MCP + Aria Operations REST API (HTTPS 443).
+  No webhooks or guest operations. API calls use the configured Aria endpoint (HTTPS 443); MCP defaults to stdio, with opt-in authenticated HTTPS.
   Transitive dependencies: Only vmware-policy (audit/policy). No post-install scripts or background services.
 ---
 
@@ -51,7 +51,7 @@ VMware Aria Operations (vRealize Operations 8.x, VCF Operations 9.x) AI-assisted
 ## Quick Install
 
 ```bash
-uv tool install vmware-aria==2.4.2
+uv tool install vmware-aria==2.4.4
 vmware-aria init      # guided setup: writes config + .env (chmod 600, password grep-safe), then verifies
 vmware-aria doctor
 ```
@@ -308,13 +308,13 @@ Set `VMWARE_ARIA_<TARGET_NAME_UPPER>_PASSWORD` (hyphens become underscores; targ
 
 ### `invalid peer certificate: UnknownIssuer` when running uvx (corporate TLS proxy)
 
-`uvx` re-resolves from PyPI on every launch, and a TLS-intercepting proxy breaks that. Run `vmware-aria mcp` after `uv tool install vmware-aria==2.4.2` (no network on launch), or set `UV_NATIVE_TLS=true` to use the system cert store.
+`uvx` re-resolves from PyPI on every launch, and a TLS-intercepting proxy breaks that. Run `vmware-aria mcp` after `uv tool install vmware-aria==2.4.4` (no network on launch), or set `UV_NATIVE_TLS=true` to use the system cert store.
 
 ## Audit & Safety
 
 1. **Source code**: [github.com/vmware-skills/VMware-Aria](https://github.com/vmware-skills/VMware-Aria) (MIT).
 2. **Config and credentials**: `config.yaml` holds hosts and usernames only; passwords live in `~/.vmware-aria/.env` (chmod 600) as `VMWARE_ARIA_<TARGET>_PASSWORD` and are never logged.
-3. **No webhooks**: no outbound calls besides the Aria Operations REST API over HTTPS 443; the MCP server is local stdio.
+3. **Network**: no webhooks. API calls use configured Aria HTTPS endpoints; MCP defaults to local stdio, with opt-in authenticated HTTPS.
 4. **TLS**: verification on by default; for a private CA set `SSL_CERT_FILE` rather than `verify_ssl: false` (isolated labs only).
 5. **Prompt-injection defense**: API text is sanitized (control characters stripped, length capped) before it reaches the agent.
 6. **Least privilege**: use an Aria Operations account with read-only roles unless the write tools (alert acknowledge/cancel, alert notes, alert definitions, reports, resource maintenance) are needed.

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/skills/vmware-aria/references/setup-guide.md

@@ -16,19 +16,19 @@ Complete setup and security guide for `vmware-aria`.
 ### Via uv (recommended)
 
 ```bash
-uv tool install vmware-aria==2.4.2
+uv tool install vmware-aria==2.4.4
 ```
 
 ### Via pip
 
 ```bash
-pip install vmware-aria==2.4.2
+pip install vmware-aria==2.4.4
 ```
 
 ### From source
 
 ```bash
-git clone --branch v2.4.2 https://github.com/vmware-skills/VMware-Aria.git
+git clone --branch v2.4.4 https://github.com/vmware-skills/VMware-Aria.git
 cd VMware-Aria
 pip install -e .
 ```
@@ -65,16 +65,21 @@ default_target: prod
 
 **Option A — .env file (recommended)**:
 ```bash
-cat > ~/.vmware-aria/.env << 'EOF'
-VMWARE_ARIA_PROD_PASSWORD=your_password_here
+(
+  umask 077
+  set -C  # Refuse existing files; edit an existing .env locally instead
+  cat > ~/.vmware-aria/.env <<'EOF'
+VMWARE_ARIA_PROD_PASSWORD=REPLACE_IN_LOCAL_EDITOR
 EOF
-chmod 600 ~/.vmware-aria/.env
+)
+# Before continuing, edit .env locally; never type live secrets into shell commands.
 ```
 
-**Option B — shell environment**:
-```bash
-export VMWARE_ARIA_PROD_PASSWORD=your_password_here
-```
+This writes placeholders only. Enter passwords or tokens using a local editor after creation; do not paste live credentials into terminal commands, chat or commits. If the file exists, the command refuses to overwrite it; edit the existing file after checking its permissions are `600`.
+
+**Option B — injected environment**: have your secret manager or launcher set
+`VMWARE_ARIA_PROD_PASSWORD` in the process environment. Do not type the secret in
+a terminal command or include it in MCP configuration committed to source control.
 
 Password variable naming convention: `VMWARE_ARIA_<TARGET_UPPER>_PASSWORD`
 - Target `prod` → `VMWARE_ARIA_PROD_PASSWORD`
@@ -194,7 +199,7 @@ Add to `~/.claude.json` (or use `claude mcp add`):
 
 > v1.5.15+ recommends `vmware-aria mcp`. Pre-1.5.15 used the legacy
 > `vmware-aria-mcp` console script (still kept for backward compatibility).
-> If using `uvx --from vmware-aria==2.4.2 vmware-aria mcp` and you hit
+> If using `uvx --from vmware-aria==2.4.4 vmware-aria mcp` and you hit
 > `invalid peer certificate: UnknownIssuer` behind a corporate TLS proxy,
 > set `UV_NATIVE_TLS=true` or use the recommended form above.
 
@@ -307,19 +312,19 @@ decide:
 ### Build and run
 
 ```bash
-docker build -t vmware-aria .
-docker run -i \
+docker build -t vmware-aria:2.4.4 .
+docker run --pull=never -i \
   -v ~/.vmware-aria:/root/.vmware-aria:ro \
   -e VMWARE_ARIA_CONFIG=/root/.vmware-aria/config.yaml \
-  vmware-aria
+  vmware-aria:2.4.4
 ```
 
+These commands run the image built locally above; `--pull=never` prevents a missing local image from falling back to a registry. The version tag identifies this build, not an immutable digest.
+
 ### Using docker-compose
 
 ```bash
-# Set password in your shell first
-export VMWARE_ARIA_PROD_PASSWORD=your_password
-
+# Inject VMWARE_ARIA_PROD_PASSWORD through your secret manager/launcher first.
 docker-compose up
 ```
 
@@ -361,7 +366,7 @@ Aria Operations Manager
 VMs / Hosts / Clusters / Datastores / Alerts / Capacity
 ```
 
-The MCP server uses stdio transport (local only, no network listener). Connections to Aria Ops use HTTPS on port 443 with vRealizeOpsToken authentication (6-hour sliding token validity, auto-refreshed).
+By default the MCP server uses local stdio without a listener; opt-in HTTPS opens a listener and requires TLS plus caller authentication. Connections to Aria Ops use HTTPS on port 443 with vRealizeOpsToken authentication (6-hour sliding token validity, auto-refreshed).
 
 ## Security Notes
 
@@ -371,7 +376,7 @@ The MCP server uses stdio transport (local only, no network listener). Connectio
 - **Never** store passwords in `config.yaml` — use env vars or `.env` file
 - `.env` file must be `chmod 600` (owner read/write only)
 - TLS verification is on by default (`verify_ssl: true`); trust a private CA with `SSL_CERT_FILE` rather than disabling verification (see [TLS Certificate Verification](#tls-certificate-verification))
-- The MCP server uses stdio transport — it runs locally only, no network listener
+- By default the MCP server uses local stdio without a listener. Opt-in HTTPS requires TLS plus caller authentication and opens the configured listener
 - Audit log at `~/.vmware/audit.db` (SQLite WAL, via vmware-policy) records all write operations (alert acknowledge/cancel, alert definition management, report generate/delete)
 - Tokens have a 6-hour sliding validity (extended on each call); the client re-acquires automatically 60 seconds before expiry. Requests carry `Authorization: vRealizeOpsToken <token>`
 

vmware_aria-2.4.4/tests/eval/regression/test_macos_proxy_bypass.py

@@ -0,0 +1,47 @@
+"""A macOS proxy bypass must cover the Aria HTTP client, including login."""
+
+from __future__ import annotations
+
+import time
+import urllib.request
+
+import httpx
+
+from vmware_aria import connection
+from vmware_aria.config import TargetConfig
+
+
+def test_system_proxy_bypass_routes_aria_auth_directly(monkeypatch):
+    """httpx sees system proxies but does not apply macOS's bypass list."""
+    monkeypatch.setenv("HTTPS_PROXY", "http://127.0.0.1:1")
+    monkeypatch.delenv("NO_PROXY", raising=False)
+    monkeypatch.setattr(urllib.request, "proxy_bypass", lambda host: host == "aria.invalid")
+
+    seen = []
+
+    def direct(request: httpx.Request) -> httpx.Response:
+        seen.append(request.url.path)
+        if request.url.path.endswith("/auth/token/acquire"):
+            return httpx.Response(
+                200,
+                json={"token": "test-token", "validity": int((time.time() + 3600) * 1000)},
+            )
+        return httpx.Response(200, json={})
+
+    monkeypatch.setattr(
+        connection.httpx,
+        "HTTPTransport",
+        lambda **_kwargs: httpx.MockTransport(direct),
+    )
+
+    client = connection.AriaClient(
+        TargetConfig(host="aria.invalid", username="admin", verify_ssl=False),
+        "test-password",
+    )
+    try:
+        assert client._token == "test-token"
+        assert client._client.get("https://aria.invalid/suite-api/api/resources").status_code == 200
+        assert any(path.endswith("/auth/token/acquire") for path in seen)
+        assert any(path.endswith("/resources") for path in seen)
+    finally:
+        client.close()

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/uv.lock

@@ -1142,7 +1142,7 @@ wheels = [
 
 [[package]]
 name = "vmware-aria"
-version = "2.4.2"
+version = "2.4.4"
 source = { editable = "." }
 dependencies = [
     { name = "httpx" },

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/vmware_aria/__init__.py

@@ -1,3 +1,3 @@
 """VMware Aria Operations (vRealize Operations) monitoring and capacity planning."""
 
-__version__ = "2.4.2"
+__version__ = "2.4.4"

{vmware_aria-2.4.2 → vmware_aria-2.4.4}/vmware_aria/connection.py

@@ -17,6 +17,7 @@ from __future__ import annotations
 import logging
 import re
 import time
+import urllib.request
 from typing import Any
 
 import httpx
@@ -288,10 +289,19 @@ class AriaClient:
         self._product_version: str | None | object = _UNPROBED
 
 
+        # httpx reads macOS system proxies but can miss their bypass list. Route
+        # an explicitly bypassed Aria host directly while keeping trust_env for
+        # CA bundle settings such as SSL_CERT_FILE.
+        mounts = None
+        if urllib.request.proxy_bypass(target.host):
+            origin = f"https://{target.host}:{target.port}"
+            mounts = {origin: httpx.HTTPTransport(verify=target.verify_ssl, trust_env=True)}
+
         self._client = httpx.Client(
             base_url=self._base_url,
             verify=target.verify_ssl,
             timeout=30.0,
+            mounts=mounts,
         )
         self._acquire_token()