netstack 0.1.1 → 0.2.0

data/lib/netstack/connector/vendors/h3c.rb

@@ -0,0 +1,75 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class H3c < Netstack::Connector::Device
+        vendor :h3c
+        # 声明 H3C 的命令、提示、诊断和保存确认规则。
+        profile do
+          running_config_strategy Netstack::Connector::RunningConfig::Rendered
+          tftp_strategy Netstack::Connector::Vendors::H3c::TftpBackup
+          topology_strategy Netstack::Connector::Vendors::H3c::Topology
+          commands do
+            running_config "dis cur"
+            save_config "save force"
+          end
+
+          prompts do
+            login(/(?:\A|(?<=[\r\n]))(?:[^\S\n]|\x00)*\S+[>\]](?:[^\S\n]|\x00)*\z/)
+            command(/(?:\A|(?<=[\r\n]))(?:[^\S\n]|\x00)*[^\r\n]+[>\]](?:[^\S\n]|\x00)*\z/)
+            username(/(?:login|Username):\s*\z/i)
+          end
+
+          errors do
+            command(
+              /
+                ^[ \t]*%[ \t]+(?:(?:Unrecognized|Ambiguous|Incomplete)\s+command|Too\s+many\s+parameters)
+                \s+found\s+at\s+'\^'\s+position\.
+              /ix,
+              /^[ \t]*error:/i,
+              /^[ \t]*Permission\s+denied\./i,
+              /^\s*\^/
+            )
+          end
+
+          # 核心交换机配置采集实测超过 10 秒，保留有界的整条命令预算。
+          command_timeout 60
+
+          interactions do
+            confirm %r{Are\s+you\s+sure\?\s*\[Y/N\]}i, response: "y\n"
+            confirm(/press\s+the\s+enter\s+key\)/i, response: "\n")
+            confirm %r{Continue\?\s*\[Y/N\]}i, response: "y\n"
+            confirm(/Please\s+input\s+the\s+file\s+name\(\*\.cfg\)\[[^\]]+\]\s*\z/i, response: "\n")
+            confirm %r{overwrite\?\s*\[Y/N\]}i, response: "y\n"
+          end
+        end
+
+        protected
+
+        # 发送规则追加命令前，用本批次已获取的真实规则编号替换 XXX 占位符。
+        def prepare_command(command, execution)
+          return command unless /\A[ \t]*rule[ \t]+XXX[ \t]+append\b/i.match?(command.text)
+
+          rule_id = execution.context[:rule_id]
+          raise execution.build_error("new rule ID has not been acquired") unless rule_id
+
+          command.with_text(command.text.sub(/XXX/i, rule_id))
+        end
+
+        # 规则创建成功后查询当前配置，提取设备分配的编号并保存到本批次变量。
+        def after_command(command, _response, execution)
+          return unless /\A[ \t]*rule[ \t]+pass\b/i.match?(command.text)
+
+          response = execution.execute_command("dis this")
+          rule_id = response.raw[/rule\s+(\d+)\s+pass[^\n]+\n\s*#/i, 1]
+          raise execution.build_error("device did not return the new rule ID") unless rule_id
+
+          execution.context[:rule_id] = rule_id
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/h3c_wireless.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class H3cWireless < H3c
+        vendor :h3c_wireless
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/hillstone/running_config.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class Hillstone
+        class RunningConfig < Netstack::Connector::RunningConfig::Strategy
+          # 去掉山石 CLI 用退格控制符绘制的分页痕迹。
+          def clean(text) = text.gsub(/\x00?\x08+[ \t]+\x08+/, "")
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/hillstone/tftp_backup.rb

@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class Hillstone
+        class TftpBackup < Tftp::Strategy
+          # 山石原生导出的配置文件使用 dat 扩展名。
+          def self.file_extension = "dat"
+
+          # 在连接前拒绝源文件及远端目录；未指定文件名时仍由设备生成。
+          def validate_options!(target, source_file:, **)
+            raise ArgumentError, "Hillstone TFTP export does not use source_file" unless source_file.nil?
+            return unless target.explicit_path? && target.path.include?("/")
+
+            raise ArgumentError, "Hillstone TFTP filename cannot contain a directory"
+          end
+
+          def receipt_metadata(target, **)
+            { configuration_kind: :startup, format: :dat, requested_path: target.explicit_path? ? target.path : nil }
+          end
+
+          # 构造当前厂商的 TFTP 导出交互脚本。
+          def script(target, source_file:, vrf: nil)
+            validate_options!(target, source_file: source_file, vrf: vrf)
+
+            command = "export configuration startup to tftp server #{target.host} vrouter #{vrf || "mgt-vr"}"
+            command += " #{target.path}" if target.explicit_path?
+            Script.new([Command.new(command, timeout: 180)])
+          end
+
+          # 检查设备回显是否确认 TFTP 传输完成。
+          def device_reported_complete?(result)
+            !completion_line(result).nil?
+          end
+
+          # 从山石成功回显提取实际目标文件名。
+          def remote_path(_target, result)
+            filename = completion_line(result)&.split&.last
+            TftpTarget.validate_path!(filename)
+          end
+
+          private
+
+          # 仅认可设备明确给出目标文件名的 Export ok 回显。
+          def completion_line(result)
+            completion_lines(result).find { |line| line.match?(/\AExport\s+ok\s*,\s*target\s+file\s+name\s+\S+\z/i) }
+          end
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/hillstone/topology.rb

@@ -0,0 +1,64 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class Hillstone
+        class Topology < Netstack::Connector::Topology::ImmediateStrategy
+          # 山石提供 LLDP 邻居、配置描述读取和描述变更。
+          def self.supports?(capability)
+            %i[neighbors interface_descriptions interface_description_changes].include?(capability)
+          end
+
+          # 读取 LLDP 邻居信息。
+          def neighbor_command = "show lldp neighbor-information"
+
+          # 从运行配置解析接口描述。
+          def description_template = "hillstone_interface_descriptions.textfsm"
+
+          # 进入配置视图。
+          def enter_configuration_command = "configure"
+
+          # 退出配置视图后先读回，保存动作随后单独执行。
+          def leave_configuration_commands = ["exit"]
+
+          def persistence_pattern = /\ASaving configuration is finished\.?\z/i
+
+          # 用数据行和设备报告的总数交叉核对，避免遗漏邻居。
+          def expected_neighbor_count(output, _template)
+            reported = output[/Total lldp neighbor number:\s*(\d+)/i, 1]
+            lines = neighbor_lines(output)
+            return unless lines.all? { |line| line.match?(/\A\S+\s+ethernet\d+\/\d+\s/i) }
+            return if reported && reported.to_i != lines.size
+
+            lines.size
+          end
+
+          # 仅在列表为空且有明确零邻居证据时认可空表。
+          def empty_neighbor_output?(output)
+            neighbor_lines(output).empty? && (output.match?(/Total lldp neighbor number:\s*0\b/i) ||
+              output.match?(/System Name\s+Local Interface/i))
+          end
+
+          # 复用公共接口描述命令。
+          def change_commands(change)
+            Netstack::Connector::Topology::InterfaceDescription.commands(interface: change.interface, description: change.new_description)
+          end
+
+          private
+
+          # 去掉命令、表头、总数和提示符，只保留邻居数据行。
+          def neighbor_lines(output)
+            output.lines.map(&:strip).reject do |line|
+              line.empty? || line == neighbor_command || line.match?(/\ASystem Name\s+Local Interface\b/i) ||
+                line.match?(/\ATotal lldp neighbor number:\s*\d+\.?\z/i) ||
+                line.match?(/\A[-=+ ]+\z/) || line.match?(/\A\S+(?:#|\([MBF]\))\z/)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/hillstone.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class Hillstone < Netstack::Connector::Device
+        vendor :hillstone
+        profile do
+          running_config_strategy Netstack::Connector::Vendors::Hillstone::RunningConfig
+          tftp_strategy Netstack::Connector::Vendors::Hillstone::TftpBackup
+          topology_strategy Netstack::Connector::Vendors::Hillstone::Topology
+          commands do
+            running_config "terminal length 0", "show configuration running"
+            save_config "save all"
+          end
+
+          prompts do
+            login(/(?:\A|(?<=[\r\n]))\S+(?:[#>$]|\([MBF]\))\s*\z/)
+            command(/(?:\A|(?<=[\r\n]))\S+(?:#|\([MBF]\))\s*\z/)
+          end
+
+          pager do
+            pattern(/(?:\A|(?<=[\r\n]))[ \t]*--More--[ \t\x00\x08]*(?=\r|\n|\z)/i)
+          end
+
+          errors do
+            command(/^[ \t]*\^-+/i, /^\s*\^/,
+                    /^[ \t]*(?:Unknown|Invalid|Error)\s+command/i,
+                    /^[ \t]*Error:\s*[^\r\n]+/i)
+          end
+
+          command_timeout 60
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/huawei/tftp_backup.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class Huawei
+        class TftpBackup < Tftp::FileUpload
+          # 缺少源文件也必须在首次设备 I/O 之前拒绝。
+          def validate_options!(target, source_file:, vrf: nil)
+            super
+            raise ArgumentError, "Huawei TFTP backup requires source_file" if source_file.nil?
+          end
+
+          # 要求调用方提供合法的华为启动配置文件路径。
+          def resolve_source_file(value)
+            raise ArgumentError, "Huawei TFTP backup requires source_file" unless value
+
+            TftpTarget.validate_source_file!(value)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/huawei.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class Huawei < Netstack::Connector::Device
+        vendor :huawei
+        # 声明 Huawei 的命令、提示、诊断、提权和保存确认规则。
+        profile do
+          running_config_strategy Netstack::Connector::RunningConfig::Rendered
+          tftp_strategy Netstack::Connector::Vendors::Huawei::TftpBackup
+          commands do
+            running_config "dis cur"
+            save_config "save force"
+          end
+
+          prompts do
+            login(/(?:\A|(?<=[\r\n]))\s*\S+[>\]]\s*\z/)
+            command(/(?:\A|(?<=[\r\n]))[^\r\n]+[>\]]\s*\z/)
+            username(/(?:login|Username):\s*\z/i)
+          end
+
+          errors do
+            command(
+              /^\s*\^/,
+              /^[ \t]*error:/i,
+              /^[ \t]*Permission\s+denied\./i,
+              /
+                ^[ \t]*%[ \t]+(?:(?:Unrecognized|Ambiguous|Incomplete)\s+command|Too\s+many\s+parameters)
+                \s+found\s+at\s+'\^'\s+position\.
+              /ix
+            )
+          end
+
+          privilege do
+            command "su"
+            prompt(/privilege\s+(?:level\s+is|is\s+).+>\s*\z/im)
+          end
+
+          command_timeout 10
+
+          interactions do
+            confirm %r{Are\s+you\s+sure\?\s*\[Y/N\]}i, response: "y\n"
+            confirm(/press\s+the\s+enter\s+key\)/i, response: "\n")
+            confirm %r{Continue\?\s*\[Y/N\]}i, response: "y\n"
+            confirm(/Please\s+input\s+the\s+file\s+name\(\*\.cfg\)\[[^\]]+\]\s*\z/i, response: "\n")
+            confirm %r{overwrite\?\s*\[Y/N\]}i, response: "y\n"
+          end
+        end
+
+        protected
+
+        # 登录后若提示符以 ] 结尾，则确认设备已经处于特权视图。
+        def after_login(session, response)
+          session.mark_privileged! if response.prompt.include?("]")
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/palo_alto/running_config.rb

@@ -0,0 +1,77 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+require "shellwords"
+
+module Netstack
+  module Connector
+    module Vendors
+      class PaloAlto
+        class RunningConfig < Netstack::Connector::RunningConfig::Strategy
+          # 配置位于 show 步骤，最后的 exit 只负责离开候选视图。
+          def result_step(result)
+            result.steps.find { |step| step.command.text == "show" }
+          end
+
+          # 采集切换视图时只改变结束符，仍绑定已认证的设备身份。
+          def prompt_text(command)
+            prompt = super
+            case command.text
+            when "configure" then prompt.sub(/[>#]\z/, "#")
+            when "exit" then prompt.sub(/[>#]\z/, ">")
+            else prompt
+            end
+          end
+
+          # 采集前后都检查候选差异，拒绝把未提交配置误作运行配置。
+          def validate_response!(command, response, _execution)
+            return unless command.text == "show config diff"
+            return if body(response.output, command.text).empty?
+
+            raise DeviceError.new("PAN-OS candidate differs from running configuration",
+                                  code: :uncommitted_configuration, host: @device.host, phase: :collect)
+          end
+
+          # 只接受完整的 set 命令文本，排除 XML 或截断的引号配置。
+          def clean(text)
+            normalized = body(text, "show").sub(/(?:\A|\n)[ \t]*\[edit\][ \t]*\z/, "").strip
+            unless set_commands?(normalized)
+              raise DeviceError.new("PAN-OS configuration must be set format",
+                                    code: :unsupported_configuration_format, host: @device.host, phase: :collect)
+            end
+            normalized
+          end
+
+          private
+
+          # 证书等引号内换行必须闭合，不能将截断文本当成配置。
+          def set_commands?(text)
+            return false if text.empty?
+
+            pending = +""
+            text.each_line do |line|
+              next if pending.empty? && line.strip.empty?
+              return false if pending.empty? && !line.start_with?("set ")
+
+              pending << line
+              begin
+                Shellwords.split(pending)
+                pending.clear
+              rescue ArgumentError
+                # 未闭合引号继续读取；末尾仍未闭合则拒绝整个采集结果。
+              end
+            end
+            pending.empty?
+          end
+
+          # 去掉命令回显和提示符，保留真正需要校验的设备响应。
+          def body(text, command)
+            text.gsub("\r\n", "\n").sub(/\A[ \t]*#{Regexp.escape(command)}[ \t]*\n/, "")
+                .sub(@device.profile.command_prompt, "").strip
+          end
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/palo_alto/tftp_backup.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class PaloAlto
+        class TftpBackup < Tftp::Strategy
+          FILENAME = "running-config.xml"
+
+          # 返回 PAN-OS 固定使用的运行配置文件名。
+          def self.filename(_host, **) = FILENAME
+
+          # 默认文件名尚未生成时只校验显式目标；固定名冲突仍由批量计划拒绝。
+          def validate_options!(target, source_file:, vrf: nil)
+            raise ArgumentError, "PAN-OS does not use source_file" unless source_file.nil?
+            raise ArgumentError, "PAN-OS TFTP backup does not use vrf" unless vrf.nil?
+            return unless target.explicit_path? && target.path != FILENAME
+
+            raise ArgumentError, "PAN-OS TFTP export uses the fixed filename #{FILENAME}"
+          end
+
+          def receipt_metadata(_target, **)
+            { configuration_kind: :running, format: :xml, source_file: FILENAME }
+          end
+
+          # 构造当前厂商的 TFTP 导出交互脚本。
+          def script(target, source_file:, vrf: nil)
+            validate_options!(target, source_file: source_file, vrf: vrf)
+
+            Script.new([Command.new("tftp export configuration to #{target.host} from #{FILENAME}",
+                                    timeout: 180)])
+          end
+
+          # 检查设备回显是否确认 TFTP 传输完成。
+          def device_reported_complete?(result)
+            completion_lines(result).any? do |line|
+              line.match?(/\ASent\s+[1-9]\d*\s+bytes(?:\s+in\s+[\d.]+\s+(?:secs?|seconds?))?[.!]?\z/i)
+            end
+          end
+
+          # 返回 PAN-OS 实际上传的固定文件名。
+          def remote_path(_target, _result) = FILENAME
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/palo_alto/topology.rb

@@ -0,0 +1,77 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class PaloAlto
+        class Topology < Netstack::Connector::Topology::Strategy
+          # 候选配置缺少经固件实验确认的所有权/commit 协议，暂只提供读取能力。
+          def self.supports?(capability)
+            %i[neighbors interface_descriptions].include?(capability)
+          end
+
+          def change_error_code = :candidate_isolation_unavailable
+
+          # 读取各本机接口的 LLDP 邻居详情。
+          def neighbor_command = "show lldp neighbors all"
+
+          # 从 set 格式配置解析接口备注。
+          def description_template = "palo_alto_interface_descriptions.textfsm"
+
+          # 进入候选配置视图。
+          def enter_configuration_command = "configure"
+
+          # 只计入非空邻居块，跳过没有对端的本机接口。
+          def expected_neighbor_count(output, _template)
+            neighbor_blocks(output).count { |block| !empty_neighbor_block?(block) }
+          end
+
+          # 输出必须明确说明无邻居，或每个本机接口块都明确为空。
+          def empty_neighbor_output?(output)
+            return true if output.match?(/No LLDP neighbors/i)
+
+            blocks = neighbor_blocks(output)
+            !blocks.empty? && blocks.all? { |block| empty_neighbor_block?(block) }
+          end
+
+          private
+
+          # PAN-OS 会列出启用 LLDP、但没有邻居的本机接口；只有明确为空的
+          # Neighbor information 块可跳过，缺字段的非空块继续交给数量校验拒绝。
+          def neighbor_blocks(output)
+            output.split(/^\s*Local information:\s*$/i).select { |block| block.match?(/^\s*Local interface:\s*\S+/i) }
+          end
+
+          # 邻居字段区只有空行和提示符时，才视为明确的空块。
+          def empty_neighbor_block?(block)
+            tail = block.split(/^\s*Neighbor information:\s*$/i, 2)
+            tail.size == 2 && tail.last.lines.all? { |line| line.strip.empty? || line.match?(/^\S+[>#]\s*$/) }
+          end
+
+          public
+
+          # 模板按行读取；未闭合的引号表示证据不完整，不能把首行当成旧描述。
+          def decode_description(value)
+            value = value.strip
+            value.start_with?('"') ? Shellwords.split(value).join(" ") : value
+          rescue ArgumentError
+            raise ParsingError.new("PAN-OS interface comment is not a complete single-line value",
+                                   code: :unrecognized_output, host: @device.host, phase: :parse)
+          end
+
+          # 用 PAN-OS set 语法生成接口备注变更。
+          def change_commands(change)
+            [%Q(set network interface ethernet #{change.interface} comment "#{change.new_description}")]
+          end
+
+          # commit 可能耗时较长，单独放宽该命令的超时。
+          def script_command(command)
+            command == "commit" ? Command.new(command, timeout: 300) : command
+          end
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/palo_alto.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class PaloAlto < Netstack::Connector::Device
+        vendor :palo_alto
+        # 声明 PAN-OS 的命令、提示、超时、诊断和登录确认规则。
+        profile do
+          running_config_strategy Netstack::Connector::Vendors::PaloAlto::RunningConfig
+          tftp_strategy Netstack::Connector::Vendors::PaloAlto::TftpBackup
+          topology_strategy Netstack::Connector::Vendors::PaloAlto::Topology
+          commands do
+            running_config "set cli pager off", "set cli config-output-format set", "show config diff",
+                           "configure", "show", "exit", "show config diff"
+          end
+
+          prompts do
+            login(/(?:\A|(?<=[\r\n]))(?:[^\s@]+)@[^\s>#]+[>#]\s*\z/)
+            command(/(?:\A|(?<=[\r\n]))(?:[^\s@]+)@[^\s>#]+[>#]\s*\z/)
+          end
+
+          errors do
+            command(/^[ \t]*(?:Invalid syntax|Unknown command|Server error|Command failed)(?:[.:]|\s)/i)
+          end
+
+          command_timeout 120
+
+          interactions do
+            login %r{(?:acknowledge|accept)[\s\S]*(?:yes/no|\[y/n\]|enter\s+yes)[^\r\n]*\z}i,
+                  response: "yes\n"
+          end
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/radware/running_config.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class Radware
+        class RunningConfig < Netstack::Connector::RunningConfig::Rendered
+          # /cfg/dump 进入 Configuration 菜单；保留设备前缀，只替换菜单名称。
+          def prompt_text(command)
+            prompt = super
+            return prompt unless command.text == "/cfg/dump"
+
+            prompt.sub(/\A(>>[ \t]+(?:.* - )?)[^\r\n#]+#\z/, '\1Configuration#')
+          end
+        end
+      end
+    end
+  end
+end

data/lib/netstack/connector/vendors/radware/tftp_backup.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+# Adapted from net-connector; copyright (c) 2026 net-connector contributors (MIT).
+
+module Netstack
+  module Connector
+    module Vendors
+      class Radware
+        class TftpBackup < Tftp::Strategy
+          # Radware 原生导出生成压缩配置归档。
+          def self.file_extension = "tgz"
+
+          # 在连接前拒绝当前厂商不支持的参数组合。
+          def validate_options!(_target, source_file:, vrf: nil)
+            raise ArgumentError, "Radware Alteon does not use source_file" unless source_file.nil?
+            raise ArgumentError, "Radware TFTP backup does not use vrf" unless vrf.nil?
+          end
+
+          def receipt_metadata(_target, **) = { configuration_kind: :native_archive, format: :tgz }
+
+          # 构造当前厂商的 TFTP 导出交互脚本。
+          def script(target, source_file:, vrf: nil)
+            validate_options!(target, source_file: source_file, vrf: vrf)
+
+            Script.new([Command.new("/cfg/ptcfg #{target.host} -tftp", timeout: 180, interactions: [
+              interaction(/Enter\s+(?:hostname|IP address)[^\r\n]*:\s*\z/i, "#{target.host}\n"),
+              interaction(/Enter\s+name\s+of\s+(?:\.tgz\s+)?file[^\r\n]*:\s*\z/i, "#{target.path}\n"),
+              interaction(/Enter\s+username[^\r\n]*:\s*\z/i, "\n"),
+              interaction(/Include\s+private\s+keys\?\s*\[y\/n\]:\s*\z/i, "n\n"),
+              interaction(/Enter\s+"?mansync"?\s+to\s+get\s+real\/group\/virt\s+internal\s+index\s+config:\s*\z/i,
+                          "mansync\n")
+            ])])
+          end
+
+          # 检查设备回显是否确认 TFTP 传输完成。
+          def device_reported_complete?(result)
+            completion_lines(result).any? do |line|
+              line.match?(/\A
+                (?:Current\s+)?(?:configuration|config)\s+
+                (?:successfully\s+(?:uploaded|tftp'd)|(?:uploaded|tftp'd)(?:\s+successfully)?|
+                  complete(?:d)?(?:\s+successfully)?)[.!]?
+                \z/ix)
+            end
+          end
+        end
+      end
+    end
+  end
+end