net-connector 0.18.1 → 0.20.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 87b108e7525f64a9df67db08537eafa2e3c2845797fccea6fe09fdb5701696fd
-  data.tar.gz: f6c6bea9be822222feb3056e2866b39d35209b4fe06b108613c059261b987467
+  metadata.gz: 1f04a6944e8273ad350cc4ec2af6f7c1673d40d0bd75a52ee4068c0c5086047c
+  data.tar.gz: c7cb714084fdc5edaca889c3261af88398167db99d181bbfb6dc0db596c45325
 SHA512:
-  metadata.gz: de0022df96e76aeeec4bd916c7abd27f9fb4646269d552846d07d1c575a05593fbf3605a25f271574a48202e81100986fb5508e44c162c6b1668c158bcad9ae9
-  data.tar.gz: 749ba87f2702d94098e02b3cf7f9fae6e00557f219c796e453028b7d67db07f1c7469985ad8275818de71b50a1bfc7b2319936e502817f7057f5b3a59c670cd7
+  metadata.gz: f044f6b70db2ca9129878e7e7cc5d8e1ad4ec8e0984c7977ac266f3d86731712be06ac6c97ce86ff5e203c72bc11ea7b19460993fceb145f02350de568961520
+  data.tar.gz: 03e67f261dcbe821f673bee9ac5df06bd82371e23f7effdac6fc2f39ac29e487f2c946591d749d8cff2060f7517240255cebcb851c2e5f74b32cbc48ff1bdd63

data/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 ## Unreleased
 
+## 0.20.0 - 2026-10-29
+
+- Require the latest stable TextFSM 0.5.1, align the minimum dependency matrix, and verify JSON 3 with its original published package instead of a source metadata patch.
+
+- Recheck streamed archive content on the pinned descriptor so same-timestamp overwrites cannot receive a successful copy or delivery receipt.
+
+- Bound compatible ctx_cli and expect-pty dependencies to the contract versions tested with this release (ctx_cli 0.4.x and expect-pty 0.9.6 through 0.9.x).
+
+## 0.19.0 - 2026-10-29
+
+- Extract `Netdisco::Catalog#devices(policy:)` for immutable inventory without credentials or operations; Fleet delegates inventory access. Add live, injected `Credentials#resolve(platform:)` with platform-specific username/password/enable-password precedence and independent secret snapshots.
+
 ## 0.18.1 - 2026-10-24
 
 - Stream SSH archive bodies through bounded binary frames and incremental hashes instead of whole-file base64 copies; preserve deadlines, verified server receipts and committed local paths.

data/README.md

@@ -4,7 +4,7 @@
 
 Ruby sessions for network device CLIs over SSH or Telnet. Collect configurations, save private backups, run interactive scripts, parse output with TextFSM, and back up fleets from Netdisco inventories.
 
-Requires Ruby 3.4+, expect-pty 0.9.4+ and a POSIX system. SSH uses local OpenSSH; Telnet requires a local `telnet` executable and explicit configuration.
+Requires Ruby 3.4+, expect-pty 0.9.6+, ctx_cli 0.4.x, TextFSM 0.5.1+ and a POSIX system. SSH uses local OpenSSH; Telnet requires a local `telnet` executable and explicit configuration.
 
 ## Install
 
@@ -66,3 +66,22 @@ Licensed under [MIT](LICENSE).
 ## ctx_cli 公共入口
 
 宿主配置文件读取、私有文件初始化、公共参数与终端交互由 ctx_cli 维护。原 `Net::Connector::Config`、配置路径、优先级和 backup/TFTP/topology 策略继续保留。源码联调使用 `CTX_CLI_PATH=../ctx_cli`；隔离安装可通过 `CTX_CLI_GEM=/absolute/path/ctx_cli-0.1.0.gem` 传入精确候选。
+
+
+## Inventory and credentials without device operations
+
+```ruby
+require "net/connector/netdisco/catalog"
+require "net/connector/credentials"
+
+settings = Net::Connector::Netdisco::Settings.new(env: ENV)
+policy = settings.snapshot(mode: :inventory)
+catalog = Net::Connector::Netdisco::Catalog.new(settings: settings)
+devices = catalog.devices(policy: policy)
+# Inspect device.issue before selecting targets; duplicate rows are retained.
+credentials = Net::Connector::Credentials.new(env: ENV).resolve(platform: :cisco_nxos)
+```
+
+Catalog owns inventory reading, normalization, duplicate marking and cache status (`#status`). It does not resolve device credentials, log into devices or create operation reports. Pass one policy snapshot throughout a run. Fleet delegates to Catalog and retains operation orchestration.
+
+Credentials reads the injected environment on every `resolve`; it returns an independent frozen hash, or nil when no username is available. Platform-specific `NC_<PLATFORM>_USERNAME`, `_PASSWORD`, and `_ENABLE_PASSWORD` override `NC_DEVICE_USERNAME`, `NC_DEVICE_PASSWORD`, and `NC_ENABLE_PASSWORD` respectively. Blank values fall back. Secrets are never cached or included in object inspection.

data/README.zh-CN.md

@@ -4,7 +4,7 @@
 
 通过 SSH 或 Telnet 操作网络设备的 Ruby 库。支持配置采集、私有备份、交互脚本、TextFSM 解析，以及基于 Netdisco 清单的批量备份。
 
-需要 Ruby 3.4+、expect-pty 0.9.4+ 和 POSIX 系统。SSH 使用本机 OpenSSH；Telnet 需要本机安装 `telnet` 并显式配置。
+需要 Ruby 3.4+、expect-pty 0.9.6+、ctx_cli 0.4.x、TextFSM 0.5.1+ 和 POSIX 系统。SSH 使用本机 OpenSSH；Telnet 需要本机安装 `telnet` 并显式配置。
 
 ## 安装
 

data/docs/VERIFICATION.md

@@ -155,7 +155,7 @@ SHA-256，首次使用时从官方 GitHub Release 下载，缓存到 `tmp/tools/
 
 运行依赖写在 `net-connector.gemspec`，包括直接使用的、可能从 Ruby 默认
 安装中拆出的标准库 gem。开发工具只写在 Gemfile，不进入运行依赖。
-PTY 与共享脱敏直接依赖 expect-pty 0.9.4+ 的公开 `Session`、`buffer_bytesize` 和 `Expect::Redactor` 接口。
+PTY 与共享脱敏直接依赖 expect-pty 0.9.6+ 的公开 `Session`、`buffer_bytesize` 和 `Expect::Redactor` 接口。
 开发用 `parallel` 保持 1.x。升级 expect-pty 时先验证源码集成，再用本次构建的 gem 验证隔离安装；
 新依赖版本发布前不得将本地构建验证记成已发布版本验收，也不能退回旧接口掩盖依赖缺失。
 
@@ -163,7 +163,7 @@ PTY 与共享脱敏直接依赖 expect-pty 0.9.4+ 的公开 `Session`、`buffer_
 分别解析兼容依赖。应用使用者应在自己的应用中提交 lockfile。测试和打包
 脚本通过隔离安装检查运行依赖，避免依赖开发环境里偶然存在的 gem。
 
-`gemfiles/minimum.gemfile` 固定受支持的依赖下界 expect-pty 0.9.4、textfsm 0.2.0；
+`gemfiles/minimum.gemfile` 固定受支持的依赖下界 expect-pty 0.9.6、ctx_cli 0.4.0、textfsm 0.5.1；
 标准库和开发工具仍按主 Gemfile 的兼容范围解析。普通矩阵检查允许版本的正常解析，
 另在 Ubuntu / Ruby 3.4、4.0 检查这组版本的全量测试与隔离安装。本地复现：
 
@@ -206,17 +206,16 @@ Gitleaks 默认规则之外，还检查网络设备密码/SNMP community 配置
 扫描工具不会自动改写 Git 历史或真实设备备份。规则用于拦截常见泄露，
 发布前仍需人工确认设备名称、拓扑和业务配置等上下文信息是否适合公开。
 
-## JSON 2 发布依赖与 JSON 3 源码兼容分开验证
+## 使用已发布 TextFSM 分别验证 JSON 2 与 JSON 3
 
-默认及最低依赖任务验证实际发布依赖。TextFSM 0.2.0 的公开声明仍为 `json ~> 2.0`；
-本地同版本 gem 的修订不能证明普通消费者能安装 JSON 3。
+运行依赖要求 TextFSM 0.5.1 或更新版本；0.5.1 的公开 JSON 声明为 `>= 2.0`，
+允许普通消费者选择 JSON 2 或 JSON 3。最低依赖任务固定 TextFSM 0.5.1 与 JSON 2。
 
-CI 的 `json3-source-compatibility` 在 Ruby 3.4 / 4.0 检出固定 TextFSM commit
-`733340de378f2d7fbe530b48f2cf1dd6c30c69b0`，应用仓库内
-`script/compatibility/textfsm-json3.patch`，只放宽依赖声明，再执行完整测试和真实打包隔离安装。
-该任务明确代表尚未发布依赖声明下的源码兼容性；不自动发布、替换正式依赖或修改用户的全局 gem。
+CI 的 `json3-compatibility` 在 Ruby 3.4 / 4.0 使用已发布 TextFSM 0.5.1 与 JSON 3，
+执行完整测试和真实打包隔离安装。脚本核对原始 gem 的 JSON 依赖声明，再将发布包缓存
+交给隔离消费者；不再检出旧源码、修改 metadata 或重建同版本 TextFSM。
 
-复现时，在 `tmp/json3/textfsm` 准备该源码并应用补丁，然后运行：
+本地复现：
 
 ```sh
 BUNDLE_GEMFILE=gemfiles/json3.gemfile bundle install

data/docs/usage.md

@@ -165,6 +165,6 @@ Per-command prompts use `interactions: [Net::Connector::Interaction.new(/Token:\
 
 ## Dependencies and extensions
 
-Load device APIs with `require "net/connector"`; Netdisco has a separate entrypoint. Vendor implementations and TextFSM load on demand. The gemspec requires expect-pty 0.9.4+; the host application's lockfile selects concrete dependency versions. The minimum dependency matrix uses TextFSM 0.2.0 and JSON 2, with a separate fixed-source TextFSM patch matrix for JSON 3.
+Load device APIs with `require "net/connector"`; Netdisco has a separate entrypoint. Vendor implementations and TextFSM load on demand. The gemspec requires expect-pty 0.9.6+, ctx_cli 0.4.x and TextFSM 0.5.1+; the host application's lockfile selects concrete dependency versions. The minimum dependency matrix uses TextFSM 0.5.1 and JSON 2. A separate JSON 3 matrix uses the same published TextFSM package without modifying its dependency metadata.
 
 CLI entry points share layered configuration and `.env` loading; dotenv is a declared runtime dependency. Core library calls do not discover host files. Follow the [loading and migration reference](architecture.md#加载入口与厂商策略) (Chinese) for custom profiles, strategies, and protected hooks.

data/docs/usage.zh-CN.md

@@ -2,11 +2,11 @@
 
 [English](usage.md) | [返回首页](../README.zh-CN.md) | [Netdisco 批量备份](netdisco.zh-CN.md)
 
-支持 Ruby 3.4 及以上版本和 POSIX 系统。SSH 调用本机 OpenSSH，Telnet 需要本机安装 `telnet` 并显式选择。要求 [`expect-pty`](https://rubygems.org/gems/expect-pty) 0.9.4 及以上；[`textfsm`](https://rubygems.org/gems/textfsm) 由宿主选择版本，最低依赖测试覆盖 0.2.0。
+支持 Ruby 3.4 及以上版本和 POSIX 系统。SSH 调用本机 OpenSSH，Telnet 需要本机安装 `telnet` 并显式选择。要求 [`expect-pty`](https://rubygems.org/gems/expect-pty) 0.9.6 及以上、ctx_cli 0.4.x 和 [`textfsm`](https://rubygems.org/gems/textfsm) 0.5.1 及以上；具体版本由宿主锁定。
 
 脱敏直接复用 expect-pty 的公开 `Expect::Redactor` 接口；连接器只管理秘密作用域和配置输出的隐私策略。
 
-gemspec 声明 expect-pty 的接口版本下界；宿主应用通过自己的 Gemfile 和锁文件固定具体依赖版本。最低依赖组合使用 textfsm 0.2.0 与 JSON 2；JSON 3 另有固定 TextFSM 源码及显式依赖声明补丁的验证通道。开发工具及测试矩阵的版本约束不进入 gem 的运行依赖。
+gemspec 声明所需接口的版本下界；宿主应用通过自己的 Gemfile 和锁文件固定具体依赖版本。最低依赖组合使用 textfsm 0.5.1 与 JSON 2；JSON 3 矩阵也使用同一已发布 TextFSM 包，无需源码或 metadata 补丁。开发工具及测试矩阵的版本约束不进入 gem 的运行依赖。
 
 CLI 与示例入口共用分层配置和 `.env` 加载，dotenv 已声明为运行时依赖；核心库调用不自动发现宿主文件。
 

data/lib/net/connector/credentials.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+module Net
+  module Connector
+    # 设备凭据的字段优先级；借用来源，每次解析独立快照，不缓存秘密。
+    class Credentials
+      def initialize(env: ENV)
+        raise ArgumentError, "Credential source must support key lookup" unless env.respond_to?(:[])
+        @env = env
+      end
+
+      # 平台字段优先于通用字段；缺少用户名时由宿主决定跳过或拒绝。
+      def resolve(platform:)
+        unless (platform.is_a?(String) || platform.is_a?(Symbol)) && /\A[a-z][a-z0-9_]*\z/i.match?(platform.to_s)
+          raise ArgumentError, "Credential platform must be a name"
+        end
+        prefix = "NC_#{platform.to_s.upcase}_"
+        username = value(prefix + "USERNAME") || value("NC_DEVICE_USERNAME")
+        return nil unless username
+
+        { username: username, password: value(prefix + "PASSWORD") || value("NC_DEVICE_PASSWORD"),
+          enable_password: value(prefix + "ENABLE_PASSWORD") || value("NC_ENABLE_PASSWORD") }.freeze
+      end
+
+      def inspect = "#<#{self.class}>"
+      alias to_s inspect
+      def pretty_print(printer) = printer.text(inspect)
+
+      private
+
+      # 拒绝非法值而不回显内容，也不冻结调用方的字符串。
+      def value(key)
+        result = @env[key]
+        raise ArgumentError, "#{key} must be a String" unless result.nil? || result.is_a?(String)
+        result.dup.freeze unless result.nil? || result.strip.empty?
+      end
+    end
+  end
+end

data/lib/net/connector/netdisco/catalog.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+require_relative "settings"
+require_relative "device"
+
+module Net
+  module Connector
+    module Netdisco
+      # 只读取、归一化及标记清单；凭据、连接、操作和报告由宿主拥有。
+      class Catalog
+        attr_reader :status
+
+        def initialize(settings: Settings.new, inventory: nil, rules: nil)
+          @settings, @inventory, @rules = settings, inventory, rules
+        end
+
+        # 使用调用方固定的同批策略，保留被过滤、无效及重复的记录。
+        def devices(policy:, force_refresh: false)
+          @status = nil
+          raise ArgumentError, "force_refresh must be true or false" unless [true, false].include?(force_refresh)
+
+          inventory = @inventory || @settings.inventory(policy: policy)
+          cache_mode = policy.inventory_cache_mode
+          raise ArgumentError, "cache-only cannot force refresh" if cache_mode == :only && force_refresh
+          if cache_mode == :only && !inventory.is_a?(Inventory::Cache)
+            raise Inventory::Error.new("validated inventory cache is unavailable", code: :cache_unavailable), cause: nil
+          end
+          rows = if inventory.is_a?(Inventory::Cache)
+                   inventory.devices(force_refresh: force_refresh, cache_mode: cache_mode)
+                 else
+                   inventory.devices
+                 end
+          @status = if inventory.is_a?(Inventory::Cache)
+                                { source: inventory.status, fetched_at: inventory.fetched_at,
+                                  refresh_error_code: inventory.refresh_error_code, write_error_type: inventory.write_error_type }.freeze
+                              else
+                                { source: :uncached }.freeze
+                              end
+          raise Inventory::Error, "Netdisco returned an invalid device inventory" unless rows.is_a?(Array)
+
+          rules = @rules || policy.rules
+          devices = rows.map { |row| Device.from_row(row, rules: rules) }
+          host_counts = devices.each_with_object(Hash.new(0)) { |device, counts| counts[device.host] += 1 if device.host }
+          devices.map { |device| host_counts[device.host] > 1 ? device.with(issue: :duplicate_host) : device }.freeze
+        end
+
+        def inspect = "#<#{self.class}>"
+        alias to_s inspect
+        def pretty_print(printer) = printer.text(inspect)
+      end
+    end
+  end
+end

data/lib/net/connector/netdisco/fleet.rb

@@ -4,6 +4,7 @@ require "fileutils"
 require_relative "../storage"
 require_relative "../device/scope"
 require_relative "inventory"
+require_relative "catalog"
 require_relative "settings"
 require_relative "device"
 require_relative "device/access"
@@ -35,8 +36,7 @@ module Net
         def initialize(inventory: nil, settings: Settings.new, rules: nil, credentials: nil, connector_factory: nil,
                        report_store: Report::Store::Json.new)
           @settings = settings
-          @inventory = inventory
-          @rules = rules
+          @catalog = Catalog.new(settings: settings, inventory: inventory, rules: rules)
           @credentials = credentials
           @connector_factory = connector_factory || ->(device, access_options) { device.build_connector(**access_options) }
           @report_store = report_store
@@ -176,32 +176,9 @@ module Net
 
         # 策略在清单请求之前固定；注入的清单来源仍由调用方负责其自身生命周期。
         def inventory(settings_snapshot, force_refresh: false)
-          @inventory_status = nil
-          raise ArgumentError, "force_refresh must be true or false" unless [true, false].include?(force_refresh)
-
-          inventory = @inventory || @settings.inventory(policy: settings_snapshot)
-          cache_mode = settings_snapshot.inventory_cache_mode
-          raise ArgumentError, "cache-only cannot force refresh" if cache_mode == :only && force_refresh
-          if cache_mode == :only && !inventory.is_a?(Inventory::Cache)
-            raise Inventory::Error.new("validated inventory cache is unavailable", code: :cache_unavailable), cause: nil
-          end
-          rows = if inventory.is_a?(Inventory::Cache)
-                   inventory.devices(force_refresh: force_refresh, cache_mode: cache_mode)
-                 else
-                   inventory.devices
-                 end
-          @inventory_status = if inventory.is_a?(Inventory::Cache)
-                                { source: inventory.status, fetched_at: inventory.fetched_at,
-                                  refresh_error_code: inventory.refresh_error_code, write_error_type: inventory.write_error_type }.freeze
-                              else
-                                { source: :uncached }.freeze
-                              end
-          raise Inventory::Error, "Netdisco returned an invalid device inventory" unless rows.is_a?(Array)
-
-          rules = @rules || settings_snapshot.rules
-          devices = rows.map { |row| Device.from_row(row, rules: rules) }
-          host_counts = devices.each_with_object(Hash.new(0)) { |device, counts| counts[device.host] += 1 if device.host }
-          devices.map { |device| host_counts[device.host] > 1 ? device.with(issue: :duplicate_host) : device }.freeze
+          @catalog.devices(policy: settings_snapshot, force_refresh: force_refresh)
+        ensure
+          @inventory_status = @catalog.status
         end
 
         # 在固定清单快照上生成模式对应的计划，规划阶段不读取设备凭据。

data/lib/net/connector/netdisco/settings.rb

@@ -346,13 +346,7 @@ module Net
 
         # 每台任务读取最新厂商凭据，缺失字段回退到通用凭据；无用户名时跳过设备。
         def device_credentials_for(device)
-          prefix = "NC_#{device.vendor.to_s.upcase}_"
-          username = secret_value(prefix + "USERNAME") || secret_value("NC_DEVICE_USERNAME")
-          return nil unless username
-
-          { username: username,
-            password: secret_value(prefix + "PASSWORD") || secret_value("NC_DEVICE_PASSWORD"),
-            enable_password: secret_value(prefix + "ENABLE_PASSWORD") || secret_value("NC_ENABLE_PASSWORD") }
+          Net::Connector::Credentials.new(env: @env).resolve(platform: device.vendor)
         end
 
         # 会话日志目录属于公开策略；调用方和批次入口负责实际创建。

data/lib/net/connector/netdisco/ssh/archive/worker.py

@@ -130,6 +130,21 @@ def read_file(parent, name, missing=False, consume=None):
             digest.update(chunk)
             if consume is not None and consume(chunk) != len(chunk):
                 raise IOError("incomplete file write")
+        # 同一时钟粒度内的覆写可能不改变 stat 时间；投递后重读摘要核对已发送字节。
+        if consume is not None:
+            f.seek(0)
+            verified = hashlib.sha256()
+            verified_size = 0
+            while True:
+                chunk = f.read(CHUNK_BYTES)
+                if not chunk:
+                    break
+                verified_size += len(chunk)
+                if verified_size > MAX_BYTES:
+                    raise ValueError("oversized file")
+                verified.update(chunk)
+            if verified_size != size or verified.digest() != digest.digest():
+                raise ValueError("file changed while delivering")
         after = os.fstat(f.fileno())
         if size != after.st_size or fingerprint(before) != fingerprint(after):
             raise ValueError("file changed while reading")

data/lib/net/connector/version.rb

@@ -3,6 +3,6 @@
 module Net
   module Connector
     # gemspec、CLI 与发布工具共用此版本，运行时读取不触发设备依赖加载。
-    VERSION = "0.18.1"
+    VERSION = "0.20.0"
   end
 end

data/lib/net/connector.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require_relative "connector/version"
+require_relative "connector/credentials"
 require_relative "connector/device/base"
 require_relative "connector/vendor"
 

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: net-connector
 version: !ruby/object:Gem::Version
-  version: 0.18.1
+  version: 0.20.0
 platform: ruby
 authors:
 - net-connector contributors
 bindir: bin
 cert_chain: []
-date: 2026-10-24 00:00:00.000000000 Z
+date: 2026-10-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ctx_cli
@@ -15,42 +15,54 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.4.0
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '0.5'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.4.0
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '0.5'
 - !ruby/object:Gem::Dependency
   name: expect-pty
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.9.6
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '0.10'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.9.6
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '0.10'
 - !ruby/object:Gem::Dependency
   name: textfsm
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.5.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.5.1
 - !ruby/object:Gem::Dependency
   name: pg
   requirement: !ruby/object:Gem::Requirement
@@ -375,6 +387,7 @@ files:
 - lib/net/connector.rb
 - lib/net/connector/collect/progress.rb
 - lib/net/connector/config.rb
+- lib/net/connector/credentials.rb
 - lib/net/connector/device/base.rb
 - lib/net/connector/device/interfaces.rb
 - lib/net/connector/device/interfaces/audit.rb
@@ -436,6 +449,7 @@ files:
 - lib/net/connector/inventory/selection.rb
 - lib/net/connector/netdisco.rb
 - lib/net/connector/netdisco/batch.rb
+- lib/net/connector/netdisco/catalog.rb
 - lib/net/connector/netdisco/cli.rb
 - lib/net/connector/netdisco/cli/backup.rb
 - lib/net/connector/netdisco/cli/credentials.rb