vmware-debug 1.8.7__tar.gz → 1.8.8__tar.gz

{vmware_debug-1.8.7 → vmware_debug-1.8.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: vmware-debug
-Version: 1.8.7
+Version: 1.8.8
 Summary: VMware diagnostic brain — read-only incident triage, log/event correlation, and root-cause routing across the VMware skill family
 Author-email: Wei Zhou <wei-wz.zhou@broadcom.com>
 License-Expression: MIT
@@ -16,7 +16,7 @@ Requires-Dist: typer<1.0,>=0.12
 Requires-Dist: vmware-policy<2.0,>=1.8.5
 Description-Content-Type: text/markdown
 
-<!-- mcp-name: io.github.zw008/vmware-debug -->
+<!-- mcp-name: io.github.vmware-skills/vmware-debug -->
 
 # VMware Debug
 

{vmware_debug-1.8.7 → vmware_debug-1.8.8}/README.md

@@ -1,4 +1,4 @@
-<!-- mcp-name: io.github.zw008/vmware-debug -->
+<!-- mcp-name: io.github.vmware-skills/vmware-debug -->
 
 # VMware Debug
 

{vmware_debug-1.8.7 → vmware_debug-1.8.8}/RELEASE_NOTES.md

@@ -1,3 +1,9 @@
+## v1.8.8 — moved to vmware-skills org + MCP Registry namespace io.github.vmware-skills/vmware-debug
+
+Repo transferred from github.com/zw008 to github.com/vmware-skills (redirects preserve old links).
+MCP Registry server renamed to `io.github.vmware-skills/*`; the old `io.github.zw008/*` entry is deprecated.
+All in-repo links updated. No functional code change on this line beyond the org move.
+
 ## v1.8.7 (2026-07-21) — the skill-level read-only switch is removed; read/write authorization is the vCenter account's job (RBAC)
 
 ### Removed: `VMWARE_READ_ONLY` / `read_only:` — give the agent a read-only service account instead
@@ -255,7 +261,7 @@ this package has no config file.
 
 ## v1.8.0 (2026-07-18) — read-only mode, working policy defaults, declared environments
 
-Family release driven by [VMware-AIops#31](https://github.com/zw008/VMware-AIops/issues/31),
+Family release driven by [VMware-AIops#31](https://github.com/vmware-skills/VMware-AIops/issues/31),
 where an operator running Llama 3.3 70B (Goose / OpenShift AI, on-prem H100) had to
 hand-write 17 prompt guardrails to make tool calling reliable. A prompt is advisory — a
 model can ignore it. Every guardrail that could move into the harness has.
@@ -342,4 +348,4 @@ executes fixes (advisor/executor split, mirroring vmware-harden → vmware-pilot
 ### Notes
 - Read-only by construction; remediation is routed, never executed.
 - `parse_timestamp` rejects implausible/garbage timestamps loudly rather than
-  silently landing at the epoch.
+  silently landing at the epoch.

{vmware_debug-1.8.7 → vmware_debug-1.8.8}/SECURITY.md

@@ -5,7 +5,7 @@
 This is a community-maintained open-source project and is **not affiliated with,
 endorsed by, or sponsored by VMware, Inc. or Broadcom Inc.** "VMware" and
 "vSphere" are trademarks of Broadcom. Source code is publicly auditable at
-[github.com/zw008/VMware-Debug](https://github.com/zw008/VMware-Debug) under the
+[github.com/vmware-skills/VMware-Debug](https://github.com/vmware-skills/VMware-Debug) under the
 MIT license.
 
 ## Reporting Vulnerabilities

{vmware_debug-1.8.7 → vmware_debug-1.8.8}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "vmware-debug"
-version = "1.8.7"
+version = "1.8.8"
 description = "VMware diagnostic brain — read-only incident triage, log/event correlation, and root-cause routing across the VMware skill family"
 readme = "README.md"
 license = "MIT"

{vmware_debug-1.8.7 → vmware_debug-1.8.8}/server.json

@@ -1,18 +1,18 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
-  "name": "io.github.zw008/vmware-debug",
+  "name": "io.github.vmware-skills/vmware-debug",
   "title": "VMware Debug",
   "description": "Read-only VMware incident correlation: timeline, spikes, root-cause routing. 2 MCP tools.",
   "repository": {
-    "url": "https://github.com/zw008/VMware-Debug",
+    "url": "https://github.com/vmware-skills/VMware-Debug",
     "source": "github"
   },
-  "version": "1.8.7",
+  "version": "1.8.8",
   "packages": [
     {
       "registryType": "pypi",
       "identifier": "vmware-debug",
-      "version": "1.8.7",
+      "version": "1.8.8",
       "transport": {
         "type": "stdio"
       }

{vmware_debug-1.8.7 → vmware_debug-1.8.8}/skills/vmware-debug/SKILL.md

@@ -19,7 +19,7 @@ installer:
   package: vmware-debug
 allowed-tools:
   - Bash
-metadata: {"openclaw":{"requires":{"bins":["vmware-debug"]},"optional":{"env":["VMWARE_AUDIT_APPROVED_BY","VMWARE_AUDIT_RATIONALE"],"bins":["vmware-policy"]},"primaryEnv":"NONE","homepage":"https://github.com/zw008/VMware-Debug","os":["macos","linux"]}}
+metadata: {"openclaw":{"requires":{"bins":["vmware-debug"]},"optional":{"env":["VMWARE_AUDIT_APPROVED_BY","VMWARE_AUDIT_RATIONALE"],"bins":["vmware-policy"]},"primaryEnv":"NONE","homepage":"https://github.com/vmware-skills/VMware-Debug","os":["macos","linux"]}}
 ---
 
 # VMware Debug

{vmware_debug-1.8.7 → vmware_debug-1.8.8}/skills/vmware-debug/references/agent-guardrails.md

@@ -10,7 +10,7 @@ guardrails below are adapted, with thanks, from the working configuration
 [@juanpf-ha](https://github.com/juanpf-ha) developed while running
 vmware-monitor and vmware-aria against a production vSphere estate with Llama
 3.3 70B FP8 on an on-prem H100
-([VMware-AIops#31](https://github.com/zw008/VMware-AIops/issues/31)). The
+([VMware-AIops#31](https://github.com/vmware-skills/VMware-AIops/issues/31)). The
 cross-skill rules are identical across this family; the parts below marked
 vmware-debug are specific to this skill.
 
@@ -131,4 +131,4 @@ Local-model compatibility is an explicit design constraint for this family, and
 the evidence base is small. If you evaluate a model against this skill —
 Qwen, Mistral, Granite, or anything else — a report of what worked and what did
 not is genuinely useful:
-[github.com/zw008/VMware-Debug/issues](https://github.com/zw008/VMware-Debug/issues).
+[github.com/vmware-skills/VMware-Debug/issues](https://github.com/vmware-skills/VMware-Debug/issues).

{vmware_debug-1.8.7 → vmware_debug-1.8.8}/skills/vmware-debug/references/setup-guide.md

@@ -31,7 +31,7 @@ routes fixes to (vmware-aiops, vmware-pilot).
 > **Disclaimer**: Community-maintained open-source project, **not affiliated with,
 > endorsed by, or sponsored by VMware, Inc. or Broadcom Inc.**
 
-1. **Source Code** — https://github.com/zw008/VMware-Debug (MIT).
+1. **Source Code** — https://github.com/vmware-skills/VMware-Debug (MIT).
 2. **Credentials** — none. debug holds no secrets and connects to nothing.
 3. **Network** — none. All tools are local pure functions over event data the
    agent supplies.

{vmware_debug-1.8.7 → vmware_debug-1.8.8}/uv.lock

@@ -1293,7 +1293,7 @@ wheels = [
 
 [[package]]
 name = "vmware-debug"
-version = "1.8.5"
+version = "1.8.7"
 source = { editable = "." }
 dependencies = [
     { name = "mcp", extra = ["cli"] },
@@ -1326,14 +1326,14 @@ dev = [
 
 [[package]]
 name = "vmware-policy"
-version = "1.8.5"
+version = "1.8.8"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "pyyaml" },
     { name = "rich" },
     { name = "typer" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/ab/b0/5b85b282a8a761a8c600504e9ce33873e42060dccc2f8421d42240720c15/vmware_policy-1.8.5.tar.gz", hash = "sha256:4a495a9dc79ebe3e8e611fea71e7eb5bc5933824796ee0f4507012aadfaa1669", size = 145426, upload-time = "2026-07-20T12:59:30.765Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a4/30/c500004557ff80a7f70d1e3e1e2adb7c7ad8b74250d030d2e3f189a32d7a/vmware_policy-1.8.8.tar.gz", hash = "sha256:43ad7d00942b0d0c79be318037badfa7919a0476e11ad1efad0e9a1ffe7fa2da", size = 125590, upload-time = "2026-07-21T15:38:02.147Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/5a/52/10a2ec839d34626a4ed6c2753b288c05e5690522074296867ea344ffe2bf/vmware_policy-1.8.5-py3-none-any.whl", hash = "sha256:ae2c82bc8e915e1c9380649d8cda88e1b4e61b248c75126e1a4474fb38e8c9b9", size = 53996, upload-time = "2026-07-20T12:59:32.134Z" },
+    { url = "https://files.pythonhosted.org/packages/ae/93/b8c6d16f703c1c0c4bfcc82209ac5a6d3bce60dc54e5e487244e1fc851b1/vmware_policy-1.8.8-py3-none-any.whl", hash = "sha256:0d8556a848690a41863805b30d1bb25172d8d43f84bd5b17fd1fd5c3b30b1b11", size = 47621, upload-time = "2026-07-21T15:38:00.516Z" },
 ]

{vmware_debug-1.8.7 → vmware_debug-1.8.8}/vmware_debug/__init__.py

@@ -5,4 +5,4 @@ into a unified timeline, detect spikes, rank root-cause hypotheses, and route
 remediation to vmware-aiops / vmware-pilot. Never writes; never executes fixes.
 """
 
-__version__ = "1.8.7"
+__version__ = "1.8.8"

vmware_debug-1.8.7/tests/eval/regression/test_declared_environment.py

@@ -1,181 +0,0 @@
-"""vmware-debug declares a constant environment, and must keep doing so.
-
-Policy rules scope by environment. The baseline treats a target that declares
-none as unknown: today a state-changing operation against it runs but logs a
-warning (``require_declared_environment: warn``), and the next major release
-refuses it outright (``true``).
-
-Every skill with a config answers this per target. vmware-debug has none and no
-connection to declare one about — its tools are pure correlation over event
-dicts the calling agent has already fetched with other skills' read tools. No
-network, no writes, and no operation above read risk. So it registers a
-constant ``local`` resolver: the claim "nothing here touches a remote VMware
-estate" is simply true.
-
-Nothing this skill ships is gated under either setting today, so this file is
-about keeping that honest as the skill changes: if debug ever grows a tool that
-writes to a local store, the declaration is already in place and correct, and a
-refactor that drops the registration fails here rather than at the moment
-enforcement lands.
-"""
-
-from __future__ import annotations
-
-import importlib
-
-import pytest
-
-import vmware_policy.environment as env_mod
-from vmware_debug.mcp_server import server
-from vmware_policy.environment import resolve_environment, set_environment_resolver
-
-
-@pytest.fixture()
-def _policy():
-    """The policy engine, or a skip.
-
-    ``vmware_policy.policy._load_rules`` imports PyYAML, but vmware-policy
-    declares only typer + rich — so constructing a PolicyEngine raises
-    ModuleNotFoundError in this skill's environment. Every other skill happens
-    to pull PyYAML in for its own config; vmware-debug has no config and so
-    does not. It never calls @vmware_tool either, so this is latent here rather
-    than broken.
-
-    Skipping (not stubbing) keeps that honest: these assertions start running
-    for real the day vmware-policy declares the dependency.
-    """
-    pytest.importorskip(
-        "yaml",
-        reason="vmware-policy imports PyYAML without declaring it; "
-        "vmware-debug has no YAML config so it is absent here",
-    )
-    from vmware_policy.policy import reset_policy_engine
-
-    reset_policy_engine()
-    yield
-    reset_policy_engine()
-
-
-@pytest.fixture()
-def baseline(_policy):
-    """The shipped policy baseline — currently the warn-only migration setting."""
-    from vmware_policy.policy import get_policy_engine
-
-    get_policy_engine()
-    yield
-
-
-@pytest.fixture()
-def enforcing(_policy, tmp_path):
-    """The same rules with the requirement switched on, as the next major
-    release will ship it."""
-    from vmware_policy.policy import get_policy_engine
-
-    rules = tmp_path / "rules.yaml"
-    rules.write_text("require_declared_environment: true\n")
-    get_policy_engine(rules)
-    yield
-
-
-@pytest.fixture(autouse=True)
-def _restore_resolver():
-    """Tests here clear/reload the global resolver; put it back afterwards."""
-    yield
-    importlib.reload(server)
-
-
-class TestConstantResolverIsRegistered:
-    def test_importing_the_server_registers_a_resolver(self) -> None:
-        set_environment_resolver(None)
-        importlib.reload(server)
-
-        assert env_mod._resolver is not None, (
-            "vmware_debug.mcp_server.server must call set_environment_resolver() at import."
-        )
-        assert env_mod._resolver is server._environment_for
-
-    def test_registration_is_at_module_level_not_inside_build_server(self) -> None:
-        """Importing alone must be enough — no build_server() call required."""
-        set_environment_resolver(None)
-        importlib.reload(server)  # import only — build_server() not called
-
-        assert env_mod._resolver is not None
-        assert resolve_environment("lab") == server.LOCAL_ENVIRONMENT
-
-    def test_resolver_reports_a_non_empty_environment(self) -> None:
-        importlib.reload(server)
-
-        # "" is the sentinel for *undeclared*. Anything else is a declaration.
-        assert resolve_environment("") != ""
-        assert resolve_environment("anything") == server.LOCAL_ENVIRONMENT
-
-    def test_declaration_is_constant_across_targets(self) -> None:
-        importlib.reload(server)
-
-        for target in ("", "prod-vc01", "vcenter-lab", "nonsense"):
-            assert resolve_environment(target) == server.LOCAL_ENVIRONMENT
-
-    def test_declared_environment_is_not_a_production_label(self) -> None:
-        """`local` must not collide with the environments real rules scope to."""
-        assert server.LOCAL_ENVIRONMENT not in ("production", "prod", "staging", "")
-
-
-class TestWriteGateInput:
-    """Debug ships no write tools today. Pin that the value the gate keys on is
-    a declaration, so a future local-store write is scoped right on day one
-    rather than discovered at the enforcing release."""
-
-    def test_the_gate_sees_a_declaration_not_a_blank(self) -> None:
-        """``env`` is what PolicyEngine.check_allowed receives; "" is what it
-        refuses. This holds regardless of whether PyYAML is installed."""
-        importlib.reload(server)
-
-        assert resolve_environment("") == server.LOCAL_ENVIRONMENT
-
-    @pytest.mark.parametrize("mode", ["baseline", "enforcing"])
-    @pytest.mark.parametrize("risk", ["medium", "high"])
-    def test_a_hypothetical_write_is_allowed(self, mode, request, risk) -> None:
-        from vmware_policy.policy import get_policy_engine
-
-        request.getfixturevalue(mode)
-        importlib.reload(server)
-
-        result = get_policy_engine().check_allowed(
-            "some_future_local_write", env=resolve_environment(""), risk_level=risk
-        )
-        assert result.allowed is True
-        assert result.rule != "undeclared_environment_warning"
-
-    def test_without_a_resolver_such_a_write_would_be_refused(self, enforcing) -> None:
-        """Proves the pin above is load-bearing rather than decorative."""
-        from vmware_policy.policy import get_policy_engine
-
-        set_environment_resolver(None)
-
-        result = get_policy_engine().check_allowed(
-            "some_future_local_write", env=resolve_environment(""), risk_level="medium"
-        )
-        assert result.allowed is False
-        assert result.rule == "undeclared_environment"
-
-
-class TestReadsAreNeverGated:
-    def test_product_read_tools_work_with_no_resolver_at_all(self) -> None:
-        """Every tool this skill ships is read-only, so the whole surface must
-        keep working regardless of any of this."""
-        set_environment_resolver(None)
-
-        from vmware_debug.mcp import tools as t
-
-        assert t.list_symptom_categories()
-
-    @pytest.mark.parametrize("mode", ["baseline", "enforcing"])
-    def test_reads_allowed_by_policy_under_both_settings(self, mode, request) -> None:
-        from vmware_policy.policy import get_policy_engine
-
-        request.getfixturevalue(mode)
-        set_environment_resolver(None)
-
-        assert get_policy_engine().check_allowed(
-            "incident_timeline", env="", risk_level="low"
-        ).allowed