ctx_checker 0.1.0

data/lib/ctx_checker/system_policy.rb

@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+require_relative "observation"
+
+module CtxChecker
+  # 运行限制由可配置策略定义，不作为硬件规格。
+  class SystemPolicy
+    DEFAULT_RESOURCES = CtxParser::Immutable.copy(cpu: { warning: 80, critical: 95 }, memory: { warning: 85, critical: 95 })
+    attr_reader :resource_thresholds, :temperature_thresholds, :required_components,
+      :required_dimensions, :max_clock_skew_seconds, :max_ntp_offset_ms, :device_counter_limits
+
+    # 校验并冻结运行限制及必需组件选择。
+    def initialize(resource_thresholds: {}, temperature_thresholds: {}, required_components: {}, required_dimensions: [],
+      max_clock_skew_seconds: 300, max_ntp_offset_ms: 100, device_counter_limits: {})
+      resources!(resource_thresholds)
+      temperatures!(temperature_thresholds)
+      components!(required_components)
+      unless required_dimensions.is_a?(Array) && required_dimensions.uniq == required_dimensions && (required_dimensions - Observation::NAMES).empty?
+        raise ArgumentError, "Required dimensions must be unique known names"
+      end
+      [ max_clock_skew_seconds, max_ntp_offset_ms ].each do |value|
+        raise ArgumentError, "Time limits must be finite and nonnegative" unless SystemRecord.number?(value) && value >= 0
+      end
+      unless device_counter_limits.is_a?(Hash) && device_counter_limits.all? { |metric, limit| SystemRecord.text?(metric) && limit.is_a?(Integer) && limit >= 0 }
+        raise ArgumentError, "Device counter limits require named metrics and nonnegative integer deltas"
+      end
+      @resource_thresholds = CtxParser::Immutable.copy(DEFAULT_RESOURCES.merge(resource_thresholds))
+      @temperature_thresholds, @required_components, @required_dimensions, @device_counter_limits =
+        [ temperature_thresholds, required_components, required_dimensions, device_counter_limits ].map { |value| CtxParser::Immutable.copy(value) }
+      @max_clock_skew_seconds, @max_ntp_offset_ms = max_clock_skew_seconds, max_ntp_offset_ms
+      freeze
+    end
+
+    # 检查策略是否明确要求此资源或功能。
+    def required?(name) = required_dimensions.include?(name) || required_components.fetch(name, []).any?
+
+    private
+
+    # 两个资源阈值必须明确且有序，拒绝仅替换其中一个。
+    def resources!(values)
+      unless values.is_a?(Hash) && (values.keys - DEFAULT_RESOURCES.keys).empty? && values.values.all? do |row|
+          row.is_a?(Hash) && row.keys.sort == %i[critical warning] && row.values.all? { |value| SystemRecord.number?(value) && value.between?(0, 100) } && row[:warning] <= row[:critical]
+        end
+        raise ArgumentError, "Resource thresholds require ordered warning and critical percentages"
+      end
+    end
+
+    # 校验温度限制及各传感器的策略覆盖值。
+    def temperatures!(values)
+      unless values.is_a?(Hash) && values.all? do |component, row|
+          SystemRecord.text?(component) && row.is_a?(Hash) && (row.keys & Observation::OPTICAL_THRESHOLDS).any? &&
+            (row.keys - Observation::OPTICAL_THRESHOLDS - [ :high_comparison ]).empty? &&
+            (!row.key?(:high_comparison) || %i[gt gte].include?(row[:high_comparison])) &&
+            row.except(:high_comparison).values.all? { |value| SystemRecord.number?(value) } &&
+            row.values_at(*Observation::OPTICAL_THRESHOLDS).compact.each_cons(2).all? { |low, high| low <= high }
+        end
+        raise ArgumentError, "Temperature policies require exact sensors and ordered Celsius limits"
+      end
+    end
+
+    # 校验必需环境组件与允许的状态。
+    def components!(values)
+      unless values.is_a?(Hash) && (values.keys - %i[temperature environment power]).empty? && values.values.all? do |names|
+          names.is_a?(Array) && names.uniq == names && names.all? { |name| SystemRecord.text?(name) }
+        end
+        raise ArgumentError, "Required hardware components must be unique names by dimension"
+      end
+    end
+  end
+end

data/lib/ctx_checker/system_record.rb

@@ -0,0 +1,81 @@
+# frozen_string_literal: true
+
+require "time"
+require "date"
+require "ctx_parser/immutable"
+
+module CtxChecker
+  # 标准化系统测量保留来源作用域与计算依据。
+  module SystemRecord
+    FIELDS = CtxParser::Immutable.copy(
+      cpu: %i[component scope window_seconds utilization interrupt_utilization],
+      memory: %i[component scope utilization total_bytes used_bytes free_bytes available_bytes basis status],
+      temperature: %i[component value low_alarm low_warning high_warning high_alarm high_comparison status],
+      environment: %i[component kind status],
+      power: %i[component kind status present watts capacity_watts],
+      clock: %i[component time source synchronized],
+      ntp: %i[component synchronized stratum reference peer offset_ms leap last_sync_status last_sync_at],
+      alarms: %i[component alarm_id severity active count],
+      device_counters: %i[component metric category value discontinuity sampled_at])
+    IDENTITIES = CtxParser::Immutable.copy(cpu: %i[component scope window_seconds], memory: %i[component scope],
+      temperature: %i[component], environment: %i[component kind], power: %i[component kind],
+      clock: %i[component], ntp: %i[component], alarms: %i[component alarm_id], device_counters: %i[component metric])
+    REQUIRED = CtxParser::Immutable.copy(FIELDS.keys.to_h do |name|
+      fields = case name
+      when :cpu, :memory then %i[component scope]
+      when :alarms then %i[component alarm_id]
+      when :device_counters then %i[component metric]
+      else %i[component]
+      end
+      [ name, fields ]
+    end)
+    STATES = %i[ok warning critical failed absent unknown].freeze
+    BASES = %i[used_total available used_minus_cache used_including_cache unknown].freeze
+    CATEGORIES = %i[error discard policy informational unknown].freeze
+
+    # 校验测量值，不将不可用读数转换为零或 false。
+    def self.valid?(name, key, value)
+      case key
+      when :status then STATES.include?(value)
+      when :basis then BASES.include?(value)
+      when :kind
+        (name == :power ? %i[power_supply power_rail unknown] : %i[fan voltage module clock overall unknown]).include?(value)
+      when :severity then %i[info warning critical unknown].include?(value)
+      when :category then CATEGORIES.include?(value)
+      when :last_sync_status then %i[succeeded failed unknown].include?(value)
+      when :high_comparison then %i[gt gte].include?(value)
+      when :utilization, :interrupt_utilization then number?(value) && value.between?(0, 100)
+      when :window_seconds, :total_bytes, :used_bytes, :free_bytes, :available_bytes, :count
+        value.is_a?(Integer) && value >= 0
+      when :stratum then value.is_a?(Integer) && value.between?(0, 16)
+      when :leap then value.is_a?(Integer) && value.between?(0, 3)
+      when :present, :synchronized, :active then value == true || value == false
+      when :watts, :capacity_watts then number?(value) && value >= 0
+      when :value then name == :device_counters ? value.is_a?(Integer) && value >= 0 : number?(value)
+      when :low_alarm, :low_warning, :high_warning, :high_alarm, :offset_ms then number?(value)
+      when :discontinuity then value.is_a?(Integer) && value >= 0 || text?(value)
+      when :time, :sampled_at, :last_sync_at then timestamp?(value)
+      else text?(value)
+      end
+    end
+
+    # 识别有限数值策略值，不强制转换任意字符串。
+    def self.number?(value) = value.is_a?(Numeric) && value.real? && value.finite?
+    # 校验非空文本，拒绝将含控制字符的值作为标识。
+    def self.text?(value) = value.is_a?(String) && !value.strip.empty? && !/[\x00-\x1f\x7f]/.match?(value)
+
+    # 没有时区的本地时间不能安全地与采集器时间比较。
+    def self.timestamp?(value)
+      return false unless value.is_a?(String) && /\A\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})\z/.match?(value)
+      Date.iso8601(value[0, 10])
+      return false unless value[11, 2].to_i < 24 && value[14, 2].to_i < 60 && value[17, 2].to_i < 60
+      if (offset = /[+-](\d{2}):(\d{2})\z/.match(value))
+        return false unless offset[1].to_i < 24 && offset[2].to_i < 60
+      end
+      Time.iso8601(value)
+      true
+    rescue ArgumentError
+      false
+    end
+  end
+end

data/lib/ctx_checker/version.rb

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+module CtxChecker
+  # 公开包版本，供 RubyGems 元数据和运行时调用方共用。
+  VERSION = "0.1.0"
+end

data/lib/ctx_checker.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+require_relative "ctx_checker/version"
+
+module CtxChecker
+  # 独立运行时由 Ruby 管理延迟加载，同时保留 Zeitwerk 已有注册。
+  {
+    Observation: "observation", Snapshot: "snapshot", Policy: "policy", Finding: "finding",
+    Report: "report", Evaluator: "evaluator", RuntimeParser: "runtime_parser", Collector: "collector", Applicability: "applicability",
+    SystemPolicy: "system_policy", SystemRecord: "system_record", ObservationMerger: "observation_merger", Failure: "failure",
+    ParserRegistry: "parser_registry", Parsers: "parsers/base", H3c: "h3c/profile",
+    CiscoIos: "cisco_ios/profile", CiscoNxos: "cisco_nxos/profile", PaloAlto: "palo_alto/profile",
+    Hillstone: "hillstone/profile", RadwareAlteon: "radware_alteon"
+  }.each do |name, path|
+    autoload(name, File.expand_path("ctx_checker/#{path}", __dir__)) unless const_defined?(name, false)
+  end
+end

metadata

@@ -0,0 +1,271 @@
+--- !ruby/object:Gem::Specification
+name: ctx_checker
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Gatework contributors
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: ctx_parser
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: ctx_driver
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: date
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: digest
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: ipaddr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: time
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Normalize interfaces, routing protocols, optical metrics, system resources
+  and counters into evidence-aware health reports.
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- COUNTER_CONTRACT.md
+- LICENSE
+- README-zh.md
+- README.md
+- docs/architecture-zh.md
+- docs/release.md
+- examples/offline.rb
+- lib/ctx_checker.rb
+- lib/ctx_checker/applicability.rb
+- lib/ctx_checker/checks/aggregation.rb
+- lib/ctx_checker/checks/alarms.rb
+- lib/ctx_checker/checks/base.rb
+- lib/ctx_checker/checks/clock.rb
+- lib/ctx_checker/checks/counters.rb
+- lib/ctx_checker/checks/device_counters.rb
+- lib/ctx_checker/checks/hardware.rb
+- lib/ctx_checker/checks/interfaces.rb
+- lib/ctx_checker/checks/ntp.rb
+- lib/ctx_checker/checks/optics.rb
+- lib/ctx_checker/checks/resources.rb
+- lib/ctx_checker/checks/routing.rb
+- lib/ctx_checker/checks/temperature.rb
+- lib/ctx_checker/cisco_ios/parsers/show_clock_detail.rb
+- lib/ctx_checker/cisco_ios/parsers/show_environment_all.rb
+- lib/ctx_checker/cisco_ios/parsers/show_etherchannel_summary.rb
+- lib/ctx_checker/cisco_ios/parsers/show_facility_alarm_status.rb
+- lib/ctx_checker/cisco_ios/parsers/show_interfaces.rb
+- lib/ctx_checker/cisco_ios/parsers/show_interfaces_transceiver_detail.rb
+- lib/ctx_checker/cisco_ios/parsers/show_ip_bgp_summary.rb
+- lib/ctx_checker/cisco_ios/parsers/show_ip_ospf_neighbor.rb
+- lib/ctx_checker/cisco_ios/parsers/show_ip_traffic.rb
+- lib/ctx_checker/cisco_ios/parsers/show_memory_statistics.rb
+- lib/ctx_checker/cisco_ios/parsers/show_ntp_status.rb
+- lib/ctx_checker/cisco_ios/parsers/show_processes_cpu.rb
+- lib/ctx_checker/cisco_ios/parsers/system_values.rb
+- lib/ctx_checker/cisco_ios/profile.rb
+- lib/ctx_checker/cisco_nxos/parsers/show_bgp_ipv4_unicast_summary.rb
+- lib/ctx_checker/cisco_nxos/parsers/show_clock.rb
+- lib/ctx_checker/cisco_nxos/parsers/show_environment.rb
+- lib/ctx_checker/cisco_nxos/parsers/show_interface.rb
+- lib/ctx_checker/cisco_nxos/parsers/show_interface_transceiver_details.rb
+- lib/ctx_checker/cisco_nxos/parsers/show_ip_ospf_neighbors.rb
+- lib/ctx_checker/cisco_nxos/parsers/show_ip_traffic.rb
+- lib/ctx_checker/cisco_nxos/parsers/show_ntp_peer_status.rb
+- lib/ctx_checker/cisco_nxos/parsers/show_port_channel_summary.rb
+- lib/ctx_checker/cisco_nxos/parsers/show_system_resources.rb
+- lib/ctx_checker/cisco_nxos/profile.rb
+- lib/ctx_checker/collector.rb
+- lib/ctx_checker/evaluator.rb
+- lib/ctx_checker/failure.rb
+- lib/ctx_checker/finding.rb
+- lib/ctx_checker/h3c/parsers/counters_table.rb
+- lib/ctx_checker/h3c/parsers/display_alarm_active.rb
+- lib/ctx_checker/h3c/parsers/display_bgp_peer.rb
+- lib/ctx_checker/h3c/parsers/display_clock.rb
+- lib/ctx_checker/h3c/parsers/display_counters_inbound_interface.rb
+- lib/ctx_checker/h3c/parsers/display_counters_outbound_interface.rb
+- lib/ctx_checker/h3c/parsers/display_cpu_usage.rb
+- lib/ctx_checker/h3c/parsers/display_environment.rb
+- lib/ctx_checker/h3c/parsers/display_fan.rb
+- lib/ctx_checker/h3c/parsers/display_interface.rb
+- lib/ctx_checker/h3c/parsers/display_link_aggregation_verbose.rb
+- lib/ctx_checker/h3c/parsers/display_memory.rb
+- lib/ctx_checker/h3c/parsers/display_ntp_service_status.rb
+- lib/ctx_checker/h3c/parsers/display_ospf_peer.rb
+- lib/ctx_checker/h3c/parsers/display_power.rb
+- lib/ctx_checker/h3c/parsers/display_transceiver_diagnosis.rb
+- lib/ctx_checker/h3c/parsers/system_values.rb
+- lib/ctx_checker/h3c/profile.rb
+- lib/ctx_checker/hillstone/parsers/show_clock.rb
+- lib/ctx_checker/hillstone/parsers/show_cpu.rb
+- lib/ctx_checker/hillstone/parsers/show_cpu_cntr.rb
+- lib/ctx_checker/hillstone/parsers/show_environment.rb
+- lib/ctx_checker/hillstone/parsers/show_interface.rb
+- lib/ctx_checker/hillstone/parsers/show_interface_counter.rb
+- lib/ctx_checker/hillstone/parsers/show_ip_bgp_summary.rb
+- lib/ctx_checker/hillstone/parsers/show_ip_ospf_neighbor.rb
+- lib/ctx_checker/hillstone/parsers/show_memory.rb
+- lib/ctx_checker/hillstone/parsers/show_ntp_status.rb
+- lib/ctx_checker/hillstone/parsers/show_transceiver.rb
+- lib/ctx_checker/hillstone/profile.rb
+- lib/ctx_checker/observation.rb
+- lib/ctx_checker/observation_merger.rb
+- lib/ctx_checker/palo_alto/parsers/show_clock.rb
+- lib/ctx_checker/palo_alto/parsers/show_counter_global.rb
+- lib/ctx_checker/palo_alto/parsers/show_counter_interface_all.rb
+- lib/ctx_checker/palo_alto/parsers/show_interface_all.rb
+- lib/ctx_checker/palo_alto/parsers/show_lacp_aggregate_ethernet.rb
+- lib/ctx_checker/palo_alto/parsers/show_ntp.rb
+- lib/ctx_checker/palo_alto/parsers/show_routing_protocol_bgp_peer.rb
+- lib/ctx_checker/palo_alto/parsers/show_routing_protocol_ospf_neighbor.rb
+- lib/ctx_checker/palo_alto/parsers/show_system_environmentals.rb
+- lib/ctx_checker/palo_alto/parsers/show_system_resources.rb
+- lib/ctx_checker/palo_alto/parsers/show_system_state_alarms.rb
+- lib/ctx_checker/palo_alto/parsers/show_transceiver_all.rb
+- lib/ctx_checker/palo_alto/profile.rb
+- lib/ctx_checker/parser_registry.rb
+- lib/ctx_checker/parsers/base.rb
+- lib/ctx_checker/parsers/interface_names.rb
+- lib/ctx_checker/parsers/scoped_result.rb
+- lib/ctx_checker/policy.rb
+- lib/ctx_checker/radware_alteon.rb
+- lib/ctx_checker/radware_alteon/parsers/info_l2_lacp_dump.rb
+- lib/ctx_checker/radware_alteon/parsers/info_l2_trunk.rb
+- lib/ctx_checker/radware_alteon/parsers/info_l3_bgp_summary.rb
+- lib/ctx_checker/radware_alteon/parsers/info_l3_ip.rb
+- lib/ctx_checker/radware_alteon/parsers/info_l3_ospf_nbr.rb
+- lib/ctx_checker/radware_alteon/parsers/info_link.rb
+- lib/ctx_checker/radware_alteon/parsers/info_sys_fan.rb
+- lib/ctx_checker/radware_alteon/parsers/info_sys_general.rb
+- lib/ctx_checker/radware_alteon/parsers/info_sys_ps.rb
+- lib/ctx_checker/radware_alteon/parsers/info_sys_temp.rb
+- lib/ctx_checker/radware_alteon/parsers/info_transceiver.rb
+- lib/ctx_checker/radware_alteon/parsers/stats_mp_cpu.rb
+- lib/ctx_checker/radware_alteon/parsers/stats_mp_mem.rb
+- lib/ctx_checker/radware_alteon/parsers/stats_port_ether.rb
+- lib/ctx_checker/radware_alteon/parsers/stats_port_if.rb
+- lib/ctx_checker/radware_alteon/parsers/stats_sp_allutils.rb
+- lib/ctx_checker/radware_alteon/parsers/stats_sys_ntp.rb
+- lib/ctx_checker/radware_alteon/port_counter_parser.rb
+- lib/ctx_checker/radware_alteon/profile.rb
+- lib/ctx_checker/report.rb
+- lib/ctx_checker/runtime_parser.rb
+- lib/ctx_checker/snapshot.rb
+- lib/ctx_checker/system_policy.rb
+- lib/ctx_checker/system_record.rb
+- lib/ctx_checker/version.rb
+homepage: https://github.com/gatework/ctx_checker
+licenses:
+- MIT
+metadata:
+  source_code_uri: https://github.com/gatework/ctx_checker
+  bug_tracker_uri: https://github.com/gatework/ctx_checker/issues
+  changelog_uri: https://github.com/gatework/ctx_checker/blob/main/CHANGELOG.md
+  documentation_uri: https://github.com/gatework/ctx_checker#readme
+  allowed_push_host: https://rubygems.org
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 4.0.6
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.16
+specification_version: 4
+summary: Analyze multi-vendor network runtime health.
+test_files: []