vrymdor-node 1.1.0__tar.gz → 1.2.1__tar.gz

{vrymdor_node-1.1.0 → vrymdor_node-1.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: vrymdor-node
-Version: 1.1.0
+Version: 1.2.1
 Summary: Python client for the Vrymdor AI Node: governed tool, model and webhook calls, LangChain and LlamaIndex tools, and vrymdor-mcp, the MCP bridge for Claude Desktop, Cursor and VS Code.
 Author-email: Vrymnox Systems LLC <support@vrymdor.com>
 License-Expression: MIT
@@ -22,6 +22,7 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: httpx<1,>=0.27
+Requires-Dist: truststore>=0.10
 Provides-Extra: langchain
 Requires-Dist: langchain-core>=0.3.49; extra == "langchain"
 Provides-Extra: llamaindex
@@ -76,14 +77,43 @@ message to your node and renews the agent's token by itself. The easiest way to
 a matching Python for you: install uv once (macOS and Linux: `curl -LsSf https://astral.sh/uv/install.sh | sh`;
 Windows PowerShell: `powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"`).
 
-Test the agent first (it prints "Connected: ..." or the reason it is not):
+### Claude Desktop in one command
+
+It tests your agent, writes Claude Desktop's settings in the right place (keeping a backup of the old file) and
+restarts Claude Desktop. Use the three values from AI agents, Connect your AI Node.
+
+Windows (PowerShell):
+
+```powershell
+Get-Process claude -ErrorAction SilentlyContinue | Stop-Process -Force; Start-Sleep -Seconds 2; $env:UV_SYSTEM_CERTS="true"; $env:UV_NATIVE_TLS="true"; $env:VRYMNOX_NODE_URL="https://node.vrymdor.com/t/abc123def456"; $env:VRYMNOX_AGENT_ID="agt_..."; $env:VRYMNOX_AGENT_SECRET="vrym_agent_..."; uv tool install --force "vrymdor-node>=1.2"; uvx --from "vrymdor-node>=1.2" vrymdor-mcp --install-claude
+```
+
+macOS and Linux:
+
+```bash
+export UV_SYSTEM_CERTS=true UV_NATIVE_TLS=true VRYMNOX_NODE_URL=https://node.vrymdor.com/t/abc123def456 \
+  VRYMNOX_AGENT_ID=agt_... VRYMNOX_AGENT_SECRET=vrym_agent_...
+uv tool install --force "vrymdor-node>=1.2" && uvx --from "vrymdor-node>=1.2" vrymdor-mcp --install-claude
+```
+
+Then in Claude Desktop click **+** next to the message box, then **Connectors**: **vrymdor** is listed. Ask Claude
+"run vrymdor_status" to confirm: it answers Connected, with your node and agent, or says exactly what to fix.
+
+`UV_SYSTEM_CERTS` and `UV_NATIVE_TLS` make uv download with the computer's own certificates, which antivirus HTTPS
+scanning (Norton, Avast, AVG) and company proxies need. The bridge itself always trusts the computer's certificates.
+
+### Test the agent
+
+It prints "Connected: ..." or the reason it is not:
 
 ```bash
 VRYMNOX_NODE_URL=https://node.vrymdor.com/t/abc123def456 VRYMNOX_AGENT_ID=agt_... \
   VRYMNOX_AGENT_SECRET=vrym_agent_... uvx --from vrymdor-node vrymdor-mcp --check
 ```
 
-Claude Desktop (`claude_desktop_config.json`) and Cursor (`mcp.json`):
+### Settings by hand: Cursor, VS Code, or Claude Desktop
+
+Cursor (`mcp.json`) and Claude Desktop (`claude_desktop_config.json`):
 
 ```json
 {
@@ -94,7 +124,9 @@ Claude Desktop (`claude_desktop_config.json`) and Cursor (`mcp.json`):
       "env": {
         "VRYMNOX_NODE_URL": "https://node.vrymdor.com/t/abc123def456",
         "VRYMNOX_AGENT_ID": "agt_...",
-        "VRYMNOX_AGENT_SECRET": "vrym_agent_..."
+        "VRYMNOX_AGENT_SECRET": "vrym_agent_...",
+        "UV_SYSTEM_CERTS": "true",
+        "UV_NATIVE_TLS": "true"
       }
     }
   }
@@ -104,7 +136,9 @@ Claude Desktop (`claude_desktop_config.json`) and Cursor (`mcp.json`):
 VS Code (`.vscode/mcp.json`): the same block under `"servers"`, with `"type": "stdio"` added.
 
 If the client says it cannot find `uvx` (Claude Desktop on macOS starts commands without your shell's PATH), put
-the full path in `command`: the output of `which uvx` (macOS, Linux) or `where uvx` (Windows).
+the full path in `command`: the output of `which uvx` (macOS, Linux) or `where.exe uvx` (Windows).
+
+The client always lists **vrymdor**, even when the node cannot be reached: its `vrymdor_status` tool then says why.
 
 ## License
 

{vrymdor_node-1.1.0 → vrymdor_node-1.2.1}/README.md

@@ -45,14 +45,43 @@ message to your node and renews the agent's token by itself. The easiest way to
 a matching Python for you: install uv once (macOS and Linux: `curl -LsSf https://astral.sh/uv/install.sh | sh`;
 Windows PowerShell: `powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"`).
 
-Test the agent first (it prints "Connected: ..." or the reason it is not):
+### Claude Desktop in one command
+
+It tests your agent, writes Claude Desktop's settings in the right place (keeping a backup of the old file) and
+restarts Claude Desktop. Use the three values from AI agents, Connect your AI Node.
+
+Windows (PowerShell):
+
+```powershell
+Get-Process claude -ErrorAction SilentlyContinue | Stop-Process -Force; Start-Sleep -Seconds 2; $env:UV_SYSTEM_CERTS="true"; $env:UV_NATIVE_TLS="true"; $env:VRYMNOX_NODE_URL="https://node.vrymdor.com/t/abc123def456"; $env:VRYMNOX_AGENT_ID="agt_..."; $env:VRYMNOX_AGENT_SECRET="vrym_agent_..."; uv tool install --force "vrymdor-node>=1.2"; uvx --from "vrymdor-node>=1.2" vrymdor-mcp --install-claude
+```
+
+macOS and Linux:
+
+```bash
+export UV_SYSTEM_CERTS=true UV_NATIVE_TLS=true VRYMNOX_NODE_URL=https://node.vrymdor.com/t/abc123def456 \
+  VRYMNOX_AGENT_ID=agt_... VRYMNOX_AGENT_SECRET=vrym_agent_...
+uv tool install --force "vrymdor-node>=1.2" && uvx --from "vrymdor-node>=1.2" vrymdor-mcp --install-claude
+```
+
+Then in Claude Desktop click **+** next to the message box, then **Connectors**: **vrymdor** is listed. Ask Claude
+"run vrymdor_status" to confirm: it answers Connected, with your node and agent, or says exactly what to fix.
+
+`UV_SYSTEM_CERTS` and `UV_NATIVE_TLS` make uv download with the computer's own certificates, which antivirus HTTPS
+scanning (Norton, Avast, AVG) and company proxies need. The bridge itself always trusts the computer's certificates.
+
+### Test the agent
+
+It prints "Connected: ..." or the reason it is not:
 
 ```bash
 VRYMNOX_NODE_URL=https://node.vrymdor.com/t/abc123def456 VRYMNOX_AGENT_ID=agt_... \
   VRYMNOX_AGENT_SECRET=vrym_agent_... uvx --from vrymdor-node vrymdor-mcp --check
 ```
 
-Claude Desktop (`claude_desktop_config.json`) and Cursor (`mcp.json`):
+### Settings by hand: Cursor, VS Code, or Claude Desktop
+
+Cursor (`mcp.json`) and Claude Desktop (`claude_desktop_config.json`):
 
 ```json
 {
@@ -63,7 +92,9 @@ Claude Desktop (`claude_desktop_config.json`) and Cursor (`mcp.json`):
       "env": {
         "VRYMNOX_NODE_URL": "https://node.vrymdor.com/t/abc123def456",
         "VRYMNOX_AGENT_ID": "agt_...",
-        "VRYMNOX_AGENT_SECRET": "vrym_agent_..."
+        "VRYMNOX_AGENT_SECRET": "vrym_agent_...",
+        "UV_SYSTEM_CERTS": "true",
+        "UV_NATIVE_TLS": "true"
       }
     }
   }
@@ -73,7 +104,9 @@ Claude Desktop (`claude_desktop_config.json`) and Cursor (`mcp.json`):
 VS Code (`.vscode/mcp.json`): the same block under `"servers"`, with `"type": "stdio"` added.
 
 If the client says it cannot find `uvx` (Claude Desktop on macOS starts commands without your shell's PATH), put
-the full path in `command`: the output of `which uvx` (macOS, Linux) or `where uvx` (Windows).
+the full path in `command`: the output of `which uvx` (macOS, Linux) or `where.exe uvx` (Windows).
+
+The client always lists **vrymdor**, even when the node cannot be reached: its `vrymdor_status` tool then says why.
 
 ## License
 

{vrymdor_node-1.1.0 → vrymdor_node-1.2.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "vrymdor-node"
-version = "1.1.0"
+version = "1.2.1"
 description = "Python client for the Vrymdor AI Node: governed tool, model and webhook calls, LangChain and LlamaIndex tools, and vrymdor-mcp, the MCP bridge for Claude Desktop, Cursor and VS Code."
 readme = "README.md"
 license = "MIT"
@@ -23,7 +23,7 @@ classifiers = [
   "Topic :: Security",
   "Topic :: Software Development :: Libraries",
 ]
-dependencies = ["httpx>=0.27,<1"]
+dependencies = ["httpx>=0.27,<1", "truststore>=0.10"]   # truststore: the computer's own certificates (antivirus HTTPS scanning, company proxies)
 
 [project.scripts]
 vrymdor-mcp = "vrymdor_mcp:main"

vrymdor_node-1.2.1/vrymdor_mcp.py

@@ -0,0 +1,507 @@
+"""vrymdor-mcp: connect Claude Desktop, Cursor, VS Code or any MCP client to your Vrymdor AI Node, no Docker needed.
+
+Desktop MCP clients start a local command and talk to it over standard input and output. This command relays each
+message to your node's MCP endpoint (POST /mcp) and writes the node's answer back. It trades the Agent ID and Agent
+Secret for a short-lived token and renews it a minute before it expires, so the client never handles a token.
+
+    vrymdor-mcp --install-claude   # set up Claude Desktop in one step: tests the agent, writes Claude's settings
+    vrymdor-mcp --check            # one-time test: does the node accept this agent?
+    vrymdor-mcp                    # what the MCP client runs
+
+Settings come from the environment (the MCP client's "env" block); --install-claude asks for any that are missing:
+
+    VRYMNOX_NODE_URL      your Node Host URL, for example https://node.vrymdor.com/t/abc123def456
+                          or http://localhost:8080 for a node on this computer
+    VRYMNOX_AGENT_ID      agt_...
+    VRYMNOX_AGENT_SECRET  vrym_agent_...
+
+The VRYMDOR_ spellings (VRYMDOR_NODE_URL and so on, as in the GitHub Action) work too. Standard output carries only
+MCP messages; anything for a person goes to standard error.
+
+It trusts the certificates this computer trusts, so antivirus HTTPS scanning (Norton, Avast, AVG) and company
+proxies work without any change. In the client it always shows as "vrymdor", even when the node cannot be reached,
+with a vrymdor_status tool that says whether it is connected and, if not, what to fix.
+"""
+from __future__ import annotations
+
+import io
+import json
+import os
+import shutil
+import ssl
+import subprocess
+import sys
+import time
+from datetime import datetime
+from pathlib import Path
+from typing import TextIO
+
+import httpx
+
+try:
+    from vrymnox_node import system_ssl_context
+except ImportError:  # pragma: no cover (running this file on its own)
+    def system_ssl_context():  # type: ignore[misc]
+        return True
+
+NAMES = {"url": ("VRYMNOX_NODE_URL", "VRYMDOR_NODE_URL"),
+         "id": ("VRYMNOX_AGENT_ID", "VRYMDOR_AGENT_ID"),
+         "secret": ("VRYMNOX_AGENT_SECRET", "VRYMDOR_AGENT_SECRET")}
+
+STATUS_TOOL = "vrymdor_status"
+SERVER_KEY = "vrymdor"
+PROTOCOL = "2025-06-18"
+
+
+def version() -> str:
+    try:
+        from importlib.metadata import version as _v
+
+        return _v("vrymdor-node")
+    except Exception:  # noqa: BLE001 (running from a source checkout)
+        return "0"
+
+
+def user_agent() -> str:
+    # Our own name: a stock library name (Python-urllib, python-httpx) can be refused by Cloudflare's browser check in
+    # front of a hosted node.
+    return f"vrymdor-mcp/{version()}"
+
+
+def clean_url(raw: str) -> str:
+    """Forgive the usual paste mistakes: spaces, quotes, a slash at the end, or the Token URL ending in /v1/token."""
+    url = raw.strip().strip("\"'").strip().rstrip("/")
+    if url.endswith("/v1/token"):
+        url = url[: -len("/v1/token")].rstrip("/")
+    return url
+
+
+def setting(key: str, env: dict | None = None) -> str:
+    env = os.environ if env is None else env
+    for name in NAMES[key]:
+        if env.get(name, "").strip():
+            return env[name].strip().strip("\"'").strip()
+    return ""
+
+
+def refusal(status: int, raw: bytes) -> str:
+    """Why the token was refused, in words: the node's own reason, or that something in front of it answered."""
+    text = (raw or b"")[:2000].decode("utf-8", "replace")
+    try:
+        doc = json.loads(text)
+        detail = doc.get("detail") or doc.get("error") if isinstance(doc, dict) else None
+    except ValueError:
+        detail = None
+    if isinstance(detail, dict):
+        detail = detail.get("message") or detail.get("code")
+    if detail:
+        hint = ""
+        if "may not receive tokens" in str(detail):
+            hint = (". This agent is stopped, paused or expired: on AI agents, resume or extend it, or add a new agent "
+                    "and use its Agent ID and Agent Secret")
+        return f"the node refused the agent (HTTP {status}): {str(detail)[:200].rstrip('.')}{hint}"
+    low = text.lower()
+    if "cloudflare" in low or "error code: 10" in low:
+        return (f"the request was blocked before it reached the node (HTTP {status}, Cloudflare). Check the Node Host "
+                "URL is the one from your Vrymdor dashboard")
+    if status == 401:
+        return "the node refused the agent (HTTP 401): the Agent ID or Agent Secret is wrong"
+    if status == 404:
+        return "the node answered 404: the Node Host URL is wrong. Copy it again from your Vrymdor dashboard"
+    if status in (502, 503, 504):
+        return f"the node is not answering (HTTP {status}). If it is a hosted node, turn it on in Home base"
+    return f"the node refused the agent (HTTP {status})"
+
+
+def certificate_problem(exc: BaseException) -> bool:
+    """True when the connection failed because the node's certificate was not trusted (not a wrong address)."""
+    seen: set[int] = set()
+    e: BaseException | None = exc
+    while e is not None and id(e) not in seen:
+        seen.add(id(e))
+        if isinstance(e, ssl.SSLCertVerificationError) or "CERTIFICATE_VERIFY_FAILED" in str(e):
+            return True
+        e = e.__cause__ or e.__context__
+    return False
+
+
+def why(exc: Exception, url: str) -> str:
+    """An exception in words, naming the real cause: an untrusted certificate, no connection, or a slow answer."""
+    if isinstance(exc, httpx.ConnectError) and certificate_problem(exc):
+        return (f"the connection to {url} was not trusted: something on this computer replaced the node's certificate "
+                "(antivirus HTTPS scanning such as Norton, Avast or AVG, or a company proxy) with one this computer does "
+                "not trust either. Exclude the node's address from that program's HTTPS scanning, or set SSL_CERT_FILE "
+                "to its certificate")
+    if isinstance(exc, (httpx.ConnectError, httpx.ConnectTimeout)):
+        return f"could not reach {url} (check the Node Host URL, and that your node is on)"
+    if isinstance(exc, httpx.TimeoutException):
+        return f"{url} did not answer in time"
+    return str(exc)
+
+
+def status_tool(problem: str = "") -> dict:
+    text = ("Checks the connection to your Vrymdor AI Node: says whether it is connected, with the node address, the "
+            "agent and the tools it offers, or exactly what to fix.")
+    if problem:
+        text = f"Not connected to your Vrymdor AI Node yet: {problem}. Run this tool to check again. " + text
+    return {"name": STATUS_TOOL, "title": "Vrymdor connection status", "description": text,
+            "inputSchema": {"type": "object", "properties": {}, "additionalProperties": False},
+            "annotations": {"title": "Vrymdor connection status", "readOnlyHint": True, "openWorldHint": False}}
+
+
+def _reply(id_, result: dict) -> str:
+    return json.dumps({"jsonrpc": "2.0", "id": id_, "result": result})
+
+
+LIST_CHANGED = json.dumps({"jsonrpc": "2.0", "method": "notifications/tools/list_changed"})
+
+
+class Bridge:
+    def __init__(self, url: str, agent_id: str, secret: str, *, http: httpx.Client | None = None) -> None:
+        self.url, self.agent_id, self._secret = clean_url(url), agent_id, secret
+        self._http = http or httpx.Client(timeout=120.0, headers={"User-Agent": user_agent()},
+                                          verify=system_ssl_context())
+        self._token, self._expires = "", 0.0
+        self._session = ""
+        self.problem = ""   # why the node could not be reached last time; "" while it works
+
+    def token(self) -> str:
+        if self._token and time.time() < self._expires - 60:
+            return self._token
+        r = self._http.post(f"{self.url}/v1/token", json={"agent_id": self.agent_id, "agent_secret": self._secret})
+        if r.status_code != 200:
+            raise RuntimeError(refusal(r.status_code, r.content))
+        doc = r.json()
+        self._token, self._expires = doc["access_token"], time.time() + int(doc.get("expires_in", 600))
+        return self._token
+
+    def _send(self, line: str) -> httpx.Response:
+        def post() -> httpx.Response:
+            headers = {"Content-Type": "application/json", "Accept": "application/json, text/event-stream",
+                       "Authorization": f"Bearer {self.token()}"}
+            if self._session:
+                headers["Mcp-Session-Id"] = self._session
+            return self._http.post(f"{self.url}/mcp", content=line.encode("utf-8"), headers=headers)
+
+        r = post()
+        if r.status_code == 401:   # the token was revoked or the node restarted: get a fresh one and try once more
+            self._token, self._expires = "", 0.0
+            r = post()
+        if r.headers.get("mcp-session-id"):
+            self._session = r.headers["mcp-session-id"]
+        return r
+
+    def _node_tools(self) -> list[dict]:
+        """The node's own tool list (raises on any failure, in words)."""
+        r = self._send(json.dumps({"jsonrpc": "2.0", "id": "vrymdor-status", "method": "tools/list"}))
+        text = r.content.decode("utf-8")
+        if r.headers.get("content-type", "").split(";")[0].strip().lower() == "text/event-stream":
+            text = sse_messages(text).split("\n")[0]
+        doc = json.loads(text or "{}")
+        if doc.get("error"):
+            raise RuntimeError(str(doc["error"].get("message") or doc["error"]).rstrip("."))
+        return [t for t in doc.get("result", {}).get("tools", []) if isinstance(t, dict)]
+
+    def status(self) -> tuple[bool, str, list[str]]:
+        """Connected or not, in a sentence for a person, and the node's tool names."""
+        try:
+            self.token()
+            names = [str(t.get("name")) for t in self._node_tools()]
+        except (httpx.HTTPError, RuntimeError, ValueError, KeyError) as exc:
+            self.problem = why(exc, self.url)
+            return False, f"Not connected: {self.problem}.", []
+        self.problem = ""
+        if not names:
+            return False, ("Connected, but the node listed no tools for this agent. Check the agent's role in your "
+                           "policy."), []
+        first = sorted(names, key=lambda n: (n != "vrymnox_sanitize", not n.startswith("vrymnox_"), n))[:4]
+        return True, (f"Connected: your node at {self.url} accepted agent {self.agent_id} and offers {len(names)} "
+                      f"tools, including {', '.join(first)}. Bridge vrymdor-mcp {version()}."), names
+
+    def handle(self, line: str, err: TextIO = sys.stderr) -> str | None:
+        try:
+            msg = json.loads(line)
+        except ValueError:
+            return json.dumps({"jsonrpc": "2.0", "id": None, "error": {"code": -32700, "message": "Parse error"}})
+        if not isinstance(msg, dict):
+            return json.dumps({"jsonrpc": "2.0", "id": None, "error": {"code": -32600, "message": "Invalid request"}})
+        has_id, method = "id" in msg, msg.get("method")
+        params = msg.get("params") if isinstance(msg.get("params"), dict) else {}
+        if method == "tools/call" and params.get("name") == STATUS_TOOL:
+            was_down = bool(self.problem)
+            ok, text, _ = self.status()
+            out = _reply(msg.get("id"), {"content": [{"type": "text", "text": text}], "isError": not ok})
+            return f"{LIST_CHANGED}\n{out}" if ok and was_down else out
+        try:
+            r = self._send(line)
+        except (httpx.HTTPError, RuntimeError, ValueError, KeyError) as exc:
+            self.problem = why(exc, self.url)
+            print(f"vrymdor-mcp: {self.problem}", file=err, flush=True)
+            return self._offline(msg, method, params, has_id)
+        self.problem = ""
+        if r.status_code == 202 or not r.content:
+            return None   # a notification
+        text = r.content.decode("utf-8")
+        if r.headers.get("content-type", "").split(";")[0].strip().lower() == "text/event-stream":
+            text = sse_messages(text)
+        if method == "tools/list" and has_id:
+            text = _with_status_tool(text, msg.get("id"))
+        return text or None
+
+    def _offline(self, msg: dict, method, params: dict, has_id: bool) -> str | None:
+        """The node could not be reached: still start, so the client lists "vrymdor" with a tool that says why."""
+        if not has_id:
+            return None
+        id_ = msg.get("id")
+        if method == "initialize":
+            return _reply(id_, {"protocolVersion": str(params.get("protocolVersion") or PROTOCOL),
+                                "capabilities": {"tools": {"listChanged": True}},
+                                "serverInfo": {"name": SERVER_KEY, "title": "Vrymdor AI Node", "version": version()},
+                                "instructions": (f"Not connected to the Vrymdor AI Node yet: {self.problem}. The "
+                                                 f"{STATUS_TOOL} tool checks again and says what to fix.")})
+        if method == "tools/list":
+            return _reply(id_, {"tools": [status_tool(self.problem)]})
+        if method == "ping":
+            return _reply(id_, {})
+        if method in ("resources/list", "prompts/list"):
+            return _reply(id_, {method.split("/")[0]: []})
+        return json.dumps({"jsonrpc": "2.0", "id": id_,
+                           "error": {"code": -32603, "message": f"Your Vrymdor AI Node could not be reached: {self.problem}"}})
+
+
+def _with_status_tool(text: str, id_) -> str:
+    """Add the vrymdor_status tool to the node's tool list answer (each line is one JSON message)."""
+    out = []
+    for raw in text.split("\n"):
+        try:
+            doc = json.loads(raw)
+        except ValueError:
+            out.append(raw)
+            continue
+        tools = doc.get("result", {}).get("tools") if isinstance(doc, dict) and doc.get("id") == id_ else None
+        if isinstance(tools, list) and not any(isinstance(t, dict) and t.get("name") == STATUS_TOOL for t in tools):
+            tools.append(status_tool())
+            raw = json.dumps(doc)
+        out.append(raw)
+    return "\n".join(out)
+
+
+def sse_messages(text: str) -> str:
+    """A streamed answer (text/event-stream): each event's data lines joined, one JSON message per output line."""
+    out, data = [], []
+    for raw in text.replace("\r\n", "\n").split("\n"):
+        if raw.startswith("data:"):
+            data.append(raw[5:].lstrip(" "))
+        elif raw == "" and data:
+            out.append("".join(data))
+            data = []
+    if data:
+        out.append("".join(data))
+    return "\n".join(m for m in out if m.strip())
+
+
+def _utf8(stream: TextIO) -> None:
+    # MCP messages are UTF-8 with \n line endings; a Windows console default (cp1252, \r\n) would damage them.
+    try:
+        stream.reconfigure(encoding="utf-8", newline="\n")   # type: ignore[attr-defined]
+    except (AttributeError, ValueError):
+        pass
+
+
+def check(bridge: Bridge, out: TextIO = sys.stdout) -> int:
+    """--check: get a token and list the tools, then say in words whether it works."""
+    ok, text, _ = bridge.status()
+    print(text, file=out)
+    return 0 if ok else 1
+
+
+# ---------------------------------------------------------------- Claude Desktop setup
+def claude_config_paths(env: dict | None = None, platform: str | None = None, home: Path | None = None) -> list[Path]:
+    """Every place Claude Desktop may read its settings from on this computer (the first one is always written).
+
+    Windows: %APPDATA%\\Claude, and for the packaged (Microsoft Store style) install also its own folder under
+    %LOCALAPPDATA%\\Packages. macOS: ~/Library/Application Support/Claude. Linux: ~/.config/Claude."""
+    env = os.environ if env is None else env
+    platform = platform or sys.platform
+    home = home or Path.home()
+    name = "claude_desktop_config.json"
+    if platform.startswith("win"):
+        out = [Path(env.get("APPDATA") or home / "AppData" / "Roaming") / "Claude" / name]
+        packages = Path(env.get("LOCALAPPDATA") or home / "AppData" / "Local") / "Packages"
+        if packages.is_dir():
+            out += [d / "LocalCache" / "Roaming" / "Claude" / name for d in sorted(packages.glob("Claude_*")) if d.is_dir()]
+        return out
+    if platform == "darwin":
+        return [home / "Library" / "Application Support" / "Claude" / name]
+    return [Path(env.get("XDG_CONFIG_HOME") or home / ".config") / "Claude" / name]
+
+
+def _ephemeral(path: str) -> bool:
+    """A command inside uv's cache (what uvx runs) moves on the next update: never write that into Claude's settings."""
+    parts = [p.lower() for p in path.replace("\\", "/").split("/")]
+    return any(p in ("cache", ".cache") or p.startswith("archive-v") for p in parts)
+
+
+def installed_command(env: dict | None = None, home: Path | None = None) -> str:
+    """The lasting vrymdor-mcp command (uv tool install vrymdor-node puts it in ~/.local/bin), or "" when there is none."""
+    env = os.environ if env is None else env
+    home = home or Path.home()
+    exe = "vrymdor-mcp.exe" if os.name == "nt" else "vrymdor-mcp"
+    candidates = [env.get("UV_TOOL_BIN_DIR", ""), env.get("XDG_BIN_HOME", ""), str(home / ".local" / "bin")]
+    found = [shutil.which("vrymdor-mcp") or ""] + [str(Path(d) / exe) for d in candidates if d]
+    for c in found:
+        if c and Path(c).is_file() and not _ephemeral(c):
+            return str(Path(c))
+    return ""
+
+
+def server_entry(url: str, agent_id: str, secret: str, command: str = "") -> dict:
+    """Claude Desktop's settings for this server: the installed command, or uvx told to use the computer's certificates."""
+    env = {"VRYMNOX_NODE_URL": clean_url(url), "VRYMNOX_AGENT_ID": agent_id, "VRYMNOX_AGENT_SECRET": secret}
+    if command:
+        return {"command": command, "args": [], "env": env}
+    uvx = shutil.which("uvx") or "uvx"
+    # uv downloads with its own certificate list unless told otherwise: UV_SYSTEM_CERTS (uv 0.11 and later) and
+    # UV_NATIVE_TLS (earlier versions) make it use the computer's, as antivirus HTTPS scanning needs.
+    return {"command": uvx, "args": ["--from", "vrymdor-node", "vrymdor-mcp"],
+            "env": {**env, "UV_SYSTEM_CERTS": "true", "UV_NATIVE_TLS": "true"}}
+
+
+def write_claude_config(path: Path, entry: dict) -> Path | None:
+    """Put the vrymdor server into one settings file, keeping everything else in it. Returns the backup, if any."""
+    doc: dict = {}
+    backup = None
+    if path.is_file():
+        raw = path.read_text(encoding="utf-8-sig")
+        backup = path.with_name(f"{path.name}.{datetime.now().strftime('%Y%m%d-%H%M%S')}.bak")
+        backup.write_text(raw, encoding="utf-8")
+        try:
+            loaded = json.loads(raw) if raw.strip() else {}
+            doc = loaded if isinstance(loaded, dict) else {}
+        except ValueError:
+            doc = {}   # damaged: the backup keeps the old text, the new file starts clean
+    servers = doc.get("mcpServers") if isinstance(doc.get("mcpServers"), dict) else {}
+    servers[SERVER_KEY] = entry
+    doc["mcpServers"] = servers
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(json.dumps(doc, indent=2) + "\n", encoding="utf-8")   # UTF-8 without a byte order mark
+    return backup
+
+
+def restart_claude(platform: str | None = None) -> str:
+    """Close Claude Desktop and open it again so it reads the new settings. Returns what happened, in words."""
+    platform = platform or sys.platform
+    try:
+        if platform.startswith("win"):
+            # Close it if it runs, then open it from its Start menu entry (works for the installer and the packaged
+            # install alike); the path of the running copy is the fallback.
+            ps = ("$p = Get-Process claude -ErrorAction SilentlyContinue; $path = ($p | Where-Object Path | "
+                  "Select-Object -First 1).Path; if ($p) { $p | Stop-Process -Force; Start-Sleep -Seconds 2 }; "
+                  "$app = Get-StartApps -ErrorAction SilentlyContinue | Where-Object { $_.Name -eq 'Claude' } | "
+                  "Select-Object -First 1; if ($app) { Start-Process \"shell:AppsFolder\\$($app.AppID)\"; 'restarted' } "
+                  "elseif ($path) { Start-Process $path; 'restarted' } elseif ($p) { 'closed' } else { 'not running' }")
+            out = subprocess.run(["powershell", "-NoProfile", "-Command", ps], capture_output=True, text=True,
+                                 timeout=30).stdout.strip().splitlines()
+            return out[-1] if out else "closed"
+        if platform == "darwin":
+            running = subprocess.run(["pgrep", "-x", "Claude"], capture_output=True).returncode == 0
+            if not running:
+                return "not running"
+            subprocess.run(["osascript", "-e", 'quit app "Claude"'], capture_output=True, timeout=30)
+            time.sleep(2)
+            subprocess.run(["open", "-a", "Claude"], capture_output=True, timeout=30)
+            return "restarted"
+    except (OSError, subprocess.SubprocessError):
+        return "closed"
+    return "not running"
+
+
+def _ask(prompt: str, secret: bool = False) -> str:
+    if not sys.stdin or not sys.stdin.isatty():
+        return ""
+    if secret:
+        import getpass
+
+        return getpass.getpass(prompt).strip()
+    return input(prompt).strip()
+
+
+def install_claude(args: list[str], out: TextIO = sys.stdout, bridge: Bridge | None = None) -> int:
+    """--install-claude: test the agent, then write Claude Desktop's settings and restart it."""
+    url = setting("url") or _ask("Node Host URL (from AI agents, Connect your AI Node): ")
+    agent_id = setting("id") or _ask("Agent ID (agt_...): ")
+    secret = setting("secret") or _ask("Agent Secret (vrym_agent_..., hidden as you type): ", secret=True)
+    if not (url and agent_id and secret):
+        print("Not set up: give the Node Host URL, the Agent ID and the Agent Secret (VRYMNOX_NODE_URL, "
+              "VRYMNOX_AGENT_ID, VRYMNOX_AGENT_SECRET).", file=out)
+        return 2
+    url = clean_url(url)
+    if not url.startswith(("http://", "https://")):
+        print("Not set up: the Node Host URL must start with https:// (or http:// for a node on this computer).", file=out)
+        return 2
+    ok, text, _ = (bridge or Bridge(url, agent_id, secret)).status()
+    print(f"1. Testing your agent. {text}", file=out)
+    if not ok and "--force" not in args:
+        print("Claude Desktop was not changed. Fix the line above and run this again.", file=out)
+        return 1
+    command = installed_command()
+    entry = server_entry(url, agent_id, secret, command)
+    paths = claude_config_paths()
+    for path in paths:
+        backup = write_claude_config(path, entry)
+        print(f"2. Claude Desktop settings written: {path}" + (f" (your old file is kept as {backup.name})" if backup else ""),
+              file=out)
+    if not command:
+        print("   It starts the bridge with uvx. For a faster start that never downloads, run "
+              "'uv tool install vrymdor-node' and then this command again.", file=out)
+    state = "skipped" if "--no-restart" in args else restart_claude()
+    if state == "restarted":
+        print("3. Claude Desktop was restarted so it reads the new settings.", file=out)
+    elif state == "closed":
+        print("3. Claude Desktop was closed. Open it again.", file=out)
+    else:
+        print("3. Open Claude Desktop (if it is open, quit it completely from its icon by the clock, then open it).",
+              file=out)
+    print("Done. In Claude Desktop, click + next to the message box, then Connectors: vrymdor is listed. "
+          "To confirm, ask Claude: \"run vrymdor_status\". It answers Connected, with your node and agent.", file=out)
+    return 0
+
+
+def main(argv: list[str] | None = None) -> int:
+    args = sys.argv[1:] if argv is None else argv
+    if "--version" in args:
+        print(f"vrymdor-mcp {version()}")
+        return 0
+    if "-h" in args or "--help" in args:
+        print(__doc__)
+        return 0
+    if "--install-claude" in args or "setup" in args:
+        return install_claude(args)
+    missing = [NAMES[k][0] for k in ("url", "id", "secret") if not setting(k)]
+    if missing:
+        print(f"vrymdor-mcp: set {', '.join(missing)} (in your MCP client's env block)", file=sys.stderr)
+        return 2
+    url = setting("url")
+    if not url.startswith(("http://", "https://")):
+        print("vrymdor-mcp: VRYMNOX_NODE_URL must start with https:// (or http:// for a node on this computer)",
+              file=sys.stderr)
+        return 2
+    bridge = Bridge(url, setting("id"), setting("secret"))
+    if "--check" in args:
+        return check(bridge)
+    _utf8(sys.stdin)
+    _utf8(sys.stdout)
+    try:
+        for line in sys.stdin:
+            if line.strip():
+                out = bridge.handle(line.strip())
+                if out is not None:
+                    sys.stdout.write(out + "\n")
+                    sys.stdout.flush()
+    except KeyboardInterrupt:
+        pass
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

{vrymdor_node-1.1.0 → vrymdor_node-1.2.1}/vrymdor_node.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: vrymdor-node
-Version: 1.1.0
+Version: 1.2.1
 Summary: Python client for the Vrymdor AI Node: governed tool, model and webhook calls, LangChain and LlamaIndex tools, and vrymdor-mcp, the MCP bridge for Claude Desktop, Cursor and VS Code.
 Author-email: Vrymnox Systems LLC <support@vrymdor.com>
 License-Expression: MIT
@@ -22,6 +22,7 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: httpx<1,>=0.27
+Requires-Dist: truststore>=0.10
 Provides-Extra: langchain
 Requires-Dist: langchain-core>=0.3.49; extra == "langchain"
 Provides-Extra: llamaindex
@@ -76,14 +77,43 @@ message to your node and renews the agent's token by itself. The easiest way to
 a matching Python for you: install uv once (macOS and Linux: `curl -LsSf https://astral.sh/uv/install.sh | sh`;
 Windows PowerShell: `powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"`).
 
-Test the agent first (it prints "Connected: ..." or the reason it is not):
+### Claude Desktop in one command
+
+It tests your agent, writes Claude Desktop's settings in the right place (keeping a backup of the old file) and
+restarts Claude Desktop. Use the three values from AI agents, Connect your AI Node.
+
+Windows (PowerShell):
+
+```powershell
+Get-Process claude -ErrorAction SilentlyContinue | Stop-Process -Force; Start-Sleep -Seconds 2; $env:UV_SYSTEM_CERTS="true"; $env:UV_NATIVE_TLS="true"; $env:VRYMNOX_NODE_URL="https://node.vrymdor.com/t/abc123def456"; $env:VRYMNOX_AGENT_ID="agt_..."; $env:VRYMNOX_AGENT_SECRET="vrym_agent_..."; uv tool install --force "vrymdor-node>=1.2"; uvx --from "vrymdor-node>=1.2" vrymdor-mcp --install-claude
+```
+
+macOS and Linux:
+
+```bash
+export UV_SYSTEM_CERTS=true UV_NATIVE_TLS=true VRYMNOX_NODE_URL=https://node.vrymdor.com/t/abc123def456 \
+  VRYMNOX_AGENT_ID=agt_... VRYMNOX_AGENT_SECRET=vrym_agent_...
+uv tool install --force "vrymdor-node>=1.2" && uvx --from "vrymdor-node>=1.2" vrymdor-mcp --install-claude
+```
+
+Then in Claude Desktop click **+** next to the message box, then **Connectors**: **vrymdor** is listed. Ask Claude
+"run vrymdor_status" to confirm: it answers Connected, with your node and agent, or says exactly what to fix.
+
+`UV_SYSTEM_CERTS` and `UV_NATIVE_TLS` make uv download with the computer's own certificates, which antivirus HTTPS
+scanning (Norton, Avast, AVG) and company proxies need. The bridge itself always trusts the computer's certificates.
+
+### Test the agent
+
+It prints "Connected: ..." or the reason it is not:
 
 ```bash
 VRYMNOX_NODE_URL=https://node.vrymdor.com/t/abc123def456 VRYMNOX_AGENT_ID=agt_... \
   VRYMNOX_AGENT_SECRET=vrym_agent_... uvx --from vrymdor-node vrymdor-mcp --check
 ```
 
-Claude Desktop (`claude_desktop_config.json`) and Cursor (`mcp.json`):
+### Settings by hand: Cursor, VS Code, or Claude Desktop
+
+Cursor (`mcp.json`) and Claude Desktop (`claude_desktop_config.json`):
 
 ```json
 {
@@ -94,7 +124,9 @@ Claude Desktop (`claude_desktop_config.json`) and Cursor (`mcp.json`):
       "env": {
         "VRYMNOX_NODE_URL": "https://node.vrymdor.com/t/abc123def456",
         "VRYMNOX_AGENT_ID": "agt_...",
-        "VRYMNOX_AGENT_SECRET": "vrym_agent_..."
+        "VRYMNOX_AGENT_SECRET": "vrym_agent_...",
+        "UV_SYSTEM_CERTS": "true",
+        "UV_NATIVE_TLS": "true"
       }
     }
   }
@@ -104,7 +136,9 @@ Claude Desktop (`claude_desktop_config.json`) and Cursor (`mcp.json`):
 VS Code (`.vscode/mcp.json`): the same block under `"servers"`, with `"type": "stdio"` added.
 
 If the client says it cannot find `uvx` (Claude Desktop on macOS starts commands without your shell's PATH), put
-the full path in `command`: the output of `which uvx` (macOS, Linux) or `where uvx` (Windows).
+the full path in `command`: the output of `which uvx` (macOS, Linux) or `where.exe uvx` (Windows).
+
+The client always lists **vrymdor**, even when the node cannot be reached: its `vrymdor_status` tool then says why.
 
 ## License
 

{vrymdor_node-1.1.0 → vrymdor_node-1.2.1}/vrymdor_node.egg-info/requires.txt

@@ -1,4 +1,5 @@
 httpx<1,>=0.27
+truststore>=0.10
 
 [langchain]
 langchain-core>=0.3.49

{vrymdor_node-1.1.0 → vrymdor_node-1.2.1}/vrymnox_node.py

@@ -16,6 +16,8 @@ VrymnoxError with a stable `code` (tool_not_allowed, rate_limited, agent_stopped
 """
 from __future__ import annotations
 
+import os
+import ssl
 import time
 import uuid
 from typing import Any
@@ -23,6 +25,22 @@ from typing import Any
 import httpx
 
 
+def system_ssl_context() -> ssl.SSLContext | bool:
+    """Trust the certificates this computer trusts (the Windows, macOS or Linux certificate store), as a browser does.
+
+    Antivirus HTTPS scanning (Norton, Avast, AVG and others) and company proxies replace a site's certificate with their
+    own, which the computer trusts but Python's bundled list does not: without this, every call to the node fails with a
+    certificate error on those machines. SSL_CERT_FILE or SSL_CERT_DIR, when set, keep their usual meaning."""
+    if os.environ.get("SSL_CERT_FILE") or os.environ.get("SSL_CERT_DIR"):
+        return True
+    try:
+        import truststore
+
+        return truststore.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
+    except Exception:  # noqa: BLE001 (truststore missing or the platform store unreadable: Python's own list)
+        return True
+
+
 class VrymnoxError(Exception):
     def __init__(self, code: str, message: str, retryable: bool = False, response: dict | None = None) -> None:
         super().__init__(f"{code}: {message}")
@@ -42,7 +60,8 @@ class VrymnoxNode:
                  timeout: float = 120.0) -> None:
         self.url, self.agent_id, self._secret = url.rstrip("/"), agent_id, agent_secret
         # Our own name: Cloudflare's browser check in front of a hosted node can refuse stock library names.
-        self._http = http or httpx.Client(timeout=timeout, headers={"User-Agent": "vrymdor-node-python"})
+        self._http = http or httpx.Client(timeout=timeout, headers={"User-Agent": "vrymdor-node-python"},
+                                          verify=system_ssl_context())
         self._token, self._expires = "", 0.0
 
     # ------------------------------------------------------------ plumbing

vrymdor_node-1.1.0/vrymdor_mcp.py

@@ -1,235 +0,0 @@
-"""vrymdor-mcp: connect Claude Desktop, Cursor, VS Code or any MCP client to your Vrymdor AI Node, no Docker needed.
-
-Desktop MCP clients start a local command and talk to it over standard input and output. This command relays each
-message to your node's MCP endpoint (POST /mcp) and writes the node's answer back. It trades the Agent ID and Agent
-Secret for a short-lived token and renews it a minute before it expires, so the client never handles a token.
-
-    uvx --from vrymdor-node vrymdor-mcp            # what the MCP client runs
-    uvx --from vrymdor-node vrymdor-mcp --check    # one-time test: does the node accept this agent?
-
-Settings come from the environment (the MCP client's "env" block):
-
-    VRYMNOX_NODE_URL      your Node Host URL, for example https://node.vrymdor.com/t/abc123def456
-                          or http://localhost:8080 for a node on this computer
-    VRYMNOX_AGENT_ID      agt_...
-    VRYMNOX_AGENT_SECRET  vrym_agent_...
-
-The VRYMDOR_ spellings (VRYMDOR_NODE_URL and so on, as in the GitHub Action) work too. Standard output carries only
-MCP messages; anything for a person goes to standard error.
-"""
-from __future__ import annotations
-
-import io
-import json
-import os
-import sys
-import time
-from typing import TextIO
-
-import httpx
-
-NAMES = {"url": ("VRYMNOX_NODE_URL", "VRYMDOR_NODE_URL"),
-         "id": ("VRYMNOX_AGENT_ID", "VRYMDOR_AGENT_ID"),
-         "secret": ("VRYMNOX_AGENT_SECRET", "VRYMDOR_AGENT_SECRET")}
-
-
-def version() -> str:
-    try:
-        from importlib.metadata import version as _v
-
-        return _v("vrymdor-node")
-    except Exception:  # noqa: BLE001 (running from a source checkout)
-        return "0"
-
-
-def user_agent() -> str:
-    # Our own name: a stock library name (Python-urllib, python-httpx) can be refused by Cloudflare's browser check in
-    # front of a hosted node.
-    return f"vrymdor-mcp/{version()}"
-
-
-def clean_url(raw: str) -> str:
-    """Forgive the usual paste mistakes: spaces, quotes, a slash at the end, or the Token URL ending in /v1/token."""
-    url = raw.strip().strip("\"'").strip().rstrip("/")
-    if url.endswith("/v1/token"):
-        url = url[: -len("/v1/token")].rstrip("/")
-    return url
-
-
-def setting(key: str, env: dict | None = None) -> str:
-    env = os.environ if env is None else env
-    for name in NAMES[key]:
-        if env.get(name, "").strip():
-            return env[name].strip().strip("\"'").strip()
-    return ""
-
-
-def refusal(status: int, raw: bytes) -> str:
-    """Why the token was refused, in words: the node's own reason, or that something in front of it answered."""
-    text = (raw or b"")[:2000].decode("utf-8", "replace")
-    try:
-        doc = json.loads(text)
-        detail = doc.get("detail") or doc.get("error") if isinstance(doc, dict) else None
-    except ValueError:
-        detail = None
-    if isinstance(detail, dict):
-        detail = detail.get("message") or detail.get("code")
-    if detail:
-        return f"the node refused the agent (HTTP {status}): {str(detail)[:200]}"
-    low = text.lower()
-    if "cloudflare" in low or "error code: 10" in low:
-        return (f"the request was blocked before it reached the node (HTTP {status}, Cloudflare). Check the Node Host "
-                "URL is the one from your Vrymdor dashboard")
-    if status == 401:
-        return "the node refused the agent (HTTP 401): the Agent ID or Agent Secret is wrong"
-    if status == 404:
-        return "the node answered 404: the Node Host URL is wrong. Copy it again from your Vrymdor dashboard"
-    if status in (502, 503, 504):
-        return f"the node is not answering (HTTP {status}). If it is a hosted node, turn it on in Home base"
-    return f"the node refused the agent (HTTP {status})"
-
-
-class Bridge:
-    def __init__(self, url: str, agent_id: str, secret: str, *, http: httpx.Client | None = None) -> None:
-        self.url, self.agent_id, self._secret = clean_url(url), agent_id, secret
-        self._http = http or httpx.Client(timeout=120.0, headers={"User-Agent": user_agent()})
-        self._token, self._expires = "", 0.0
-        self._session = ""
-
-    def token(self) -> str:
-        if self._token and time.time() < self._expires - 60:
-            return self._token
-        r = self._http.post(f"{self.url}/v1/token", json={"agent_id": self.agent_id, "agent_secret": self._secret})
-        if r.status_code != 200:
-            raise RuntimeError(refusal(r.status_code, r.content))
-        doc = r.json()
-        self._token, self._expires = doc["access_token"], time.time() + int(doc.get("expires_in", 600))
-        return self._token
-
-    def _send(self, line: str) -> httpx.Response:
-        def post() -> httpx.Response:
-            headers = {"Content-Type": "application/json", "Accept": "application/json, text/event-stream",
-                       "Authorization": f"Bearer {self.token()}"}
-            if self._session:
-                headers["Mcp-Session-Id"] = self._session
-            return self._http.post(f"{self.url}/mcp", content=line.encode("utf-8"), headers=headers)
-
-        r = post()
-        if r.status_code == 401:   # the token was revoked or the node restarted: get a fresh one and try once more
-            self._token, self._expires = "", 0.0
-            r = post()
-        if r.headers.get("mcp-session-id"):
-            self._session = r.headers["mcp-session-id"]
-        return r
-
-    def handle(self, line: str, err: TextIO = sys.stderr) -> str | None:
-        try:
-            msg = json.loads(line)
-        except ValueError:
-            return json.dumps({"jsonrpc": "2.0", "id": None, "error": {"code": -32700, "message": "Parse error"}})
-        has_id = isinstance(msg, dict) and "id" in msg
-        try:
-            r = self._send(line)
-        except (httpx.HTTPError, RuntimeError, ValueError, KeyError) as exc:
-            reason = why(exc, self.url)
-            print(f"vrymdor-mcp: {reason}", file=err, flush=True)
-            if has_id:
-                return json.dumps({"jsonrpc": "2.0", "id": msg.get("id"),
-                                   "error": {"code": -32603, "message": f"Your Vrymdor AI Node could not be reached: {reason}"}})
-            return None
-        if r.status_code == 202 or not r.content:
-            return None   # a notification
-        text = r.content.decode("utf-8")
-        if r.headers.get("content-type", "").split(";")[0].strip().lower() == "text/event-stream":
-            return sse_messages(text) or None
-        return text
-
-
-def sse_messages(text: str) -> str:
-    """A streamed answer (text/event-stream): each event's data lines joined, one JSON message per output line."""
-    out, data = [], []
-    for raw in text.replace("\r\n", "\n").split("\n"):
-        if raw.startswith("data:"):
-            data.append(raw[5:].lstrip(" "))
-        elif raw == "" and data:
-            out.append("".join(data))
-            data = []
-    if data:
-        out.append("".join(data))
-    return "\n".join(m for m in out if m.strip())
-
-
-def why(exc: Exception, url: str) -> str:
-    """An exception in words: no connection is the usual case, and it is the address or a node that is off."""
-    if isinstance(exc, (httpx.ConnectError, httpx.ConnectTimeout)):
-        return f"could not reach {url} (check the Node Host URL, and that your node is on)"
-    if isinstance(exc, httpx.TimeoutException):
-        return f"{url} did not answer in time"
-    return str(exc)
-
-
-def _utf8(stream: TextIO) -> None:
-    # MCP messages are UTF-8 with \n line endings; a Windows console default (cp1252, \r\n) would damage them.
-    try:
-        stream.reconfigure(encoding="utf-8", newline="\n")   # type: ignore[attr-defined]
-    except (AttributeError, ValueError):
-        pass
-
-
-def check(bridge: Bridge, out: TextIO = sys.stdout) -> int:
-    """--check: get a token and list the tools, then say in words whether it works."""
-    try:
-        bridge.token()
-        doc = json.loads(bridge.handle(json.dumps({"jsonrpc": "2.0", "id": 1, "method": "tools/list"}),
-                                       err=io.StringIO()) or "{}")
-        if doc.get("error"):
-            raise RuntimeError(str(doc["error"].get("message") or doc["error"]).rstrip("."))
-        tools = [t.get("name") for t in doc.get("result", {}).get("tools", [])]
-    except (httpx.HTTPError, RuntimeError, ValueError, KeyError) as exc:
-        print(f"Not connected: {why(exc, bridge.url)}.", file=out)
-        return 1
-    if not tools:
-        print("Connected, but the node listed no tools for this agent. Check the agent's role in your policy.", file=out)
-        return 1
-    first = sorted(tools, key=lambda n: (n != "vrymnox_sanitize", not str(n).startswith("vrymnox_"), str(n)))[:4]
-    print(f"Connected: your node accepted this agent and offers {len(tools)} tools, including "
-          f"{', '.join(map(str, first))}.", file=out)
-    return 0
-
-
-def main(argv: list[str] | None = None) -> int:
-    args = sys.argv[1:] if argv is None else argv
-    if "--version" in args:
-        print(f"vrymdor-mcp {version()}")
-        return 0
-    if "-h" in args or "--help" in args:
-        print(__doc__)
-        return 0
-    missing = [NAMES[k][0] for k in ("url", "id", "secret") if not setting(k)]
-    if missing:
-        print(f"vrymdor-mcp: set {', '.join(missing)} (in your MCP client's env block)", file=sys.stderr)
-        return 2
-    url = setting("url")
-    if not url.startswith(("http://", "https://")):
-        print("vrymdor-mcp: VRYMNOX_NODE_URL must start with https:// (or http:// for a node on this computer)",
-              file=sys.stderr)
-        return 2
-    bridge = Bridge(url, setting("id"), setting("secret"))
-    if "--check" in args:
-        return check(bridge)
-    _utf8(sys.stdin)
-    _utf8(sys.stdout)
-    try:
-        for line in sys.stdin:
-            if line.strip():
-                out = bridge.handle(line.strip())
-                if out is not None:
-                    sys.stdout.write(out + "\n")
-                    sys.stdout.flush()
-    except KeyboardInterrupt:
-        pass
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())