@takodotid/circuit 0.43.1 → 1.0.0-rc.2

package/dist/types/platforms/routeros/export.d.ts

@@ -1,59 +0,0 @@
-export type Command = {
-    /** The menu the command belongs to, such as `/ip address`. */
-    menu: string;
-    verb: "add" | "set";
-    /** What a `set` addresses: `[ find default-name=ether1 ]`, `ftp`, `1`, or nothing for a menu of one. */
-    selector: string;
-    /** Words without a value, such as `blackhole`. */
-    flags: string[];
-    /** Properties, unquoted and unescaped. */
-    attrs: Record<string, string>;
-};
-export type Parsed = {
-    commands: Command[];
-    /** Address lists whose entries are filled by `refresh`, not by the render. */
-    generated: Set<string>;
-};
-export declare class RouterOsExport {
-    /**
-     * Values the platform holds when nothing was set, per menu, and under `*` for every menu.
-     *
-     * A property at its default is dropped from both sides of a comparison, and this is the value a property the config does not state is reset to. A property the device holds that is not here cannot be reset, which the plan reports as a problem.
-     */
-    private static readonly DEFAULTS;
-    /** Whether each `/ip service` ships disabled. */
-    private static readonly SERVICE_DISABLED;
-    /** Helpers of `/ip firewall service-port` that ship disabled. The rest ship enabled. */
-    private static readonly HELPER_DISABLED;
-    /** A property the device stops printing once another returns to its default. Resetting that other one clears it, so it is never reset on its own. */
-    static readonly CLEARED_WITH: Record<string, Record<string, string>>;
-    /** Properties whose value cannot be read back from the device. They are compared only by the presence of what holds them. */
-    static readonly SECRET_KEYS: Set<string>;
-    /** Properties that tell two `add` entries of a menu apart. `name` where the menu is not listed. */
-    private static readonly IDENTITY;
-    /** Menus whose entries are an ordered list without names. They are rewritten whole, in the order the render gives. */
-    static readonly ORDERED: Set<string>;
-    /** Undo the line wrapping an export applies: a backslash at the end of a line continues it. */
-    private static unwrap;
-    /** A quoted value without its quotes and escapes. `\_` is an escaped space. */
-    private static unquote;
-    /** Split a command into words, keeping quoted values and bracketed selectors whole. */
-    private static words;
-    /** One `add` or `set` line into a command. */
-    private static parseLine;
-    static parse(text: string): Parsed;
-    /** The default of one property of a command, or undefined when it is not known. */
-    static defaultOf(command: Command, property: string): string | undefined;
-    /** How the renderer writes a secret. */
-    static isSecretMarker(value: string): boolean;
-    /** A filter rule as the platform prints it, with its own spacing, squeezed so that only a real change survives. */
-    private static canonicalRule;
-    /** One property value in the form both sides compare in. */
-    private static normalValue;
-    /** A command's properties without defaults or secrets, in the form both sides compare in. */
-    static normal(command: Command): Record<string, string>;
-    /** What identifies an `add` entry, so that the same entry is found on both sides. */
-    static identity(command: Command): Record<string, string>;
-    /** One command as a string that is equal for equal commands. */
-    static canonical(command: Command): string;
-}

package/dist/types/platforms/routeros/index.d.ts

@@ -1,116 +0,0 @@
-import type { Neighbor } from "../../core/cabling.js";
-import type { Finding } from "../../core/define.js";
-import type { Device, Family } from "../../schema/index.js";
-import { type ConsoleDialect } from "../../transport/console.js";
-import { type ApplyOptions, type BgpLogLine, type BgpSession, type HealthCheck, type HealthOptions, type OsSupport, type Plan, type ReadOptions, type ReadSession, type SwitchRules, Platform } from "../platform.js";
-export declare class RouterOs extends Platform {
-    /** How the RouterOS console asks for a login. The flags after the user turn off colours and terminal detection, without which the console redraws every line. */
-    static readonly CONSOLE: ConsoleDialect;
-    /** Why a MAC limit is refused: neither a bridge port nor a switch port has a learning limit on 7.23.5. */
-    private static readonly NO_MAC_LIMIT;
-    /** The major version this adapter renders for. Version 6 has a different BGP and filter language altogether. */
-    private static readonly SUPPORTED_MAJOR;
-    /** Both dumps stamp the time they were taken. Without the stamp, an unchanged device reads the same twice. */
-    private static readonly EXPORT_TIMESTAMP;
-    /** Lists certificates in the form the renderer writes them, since an export does not include them. One line, because a script sent over exec runs as one. */
-    private static readonly LIST_CERTIFICATES;
-    /**
-     * Every BGP session, one line each: name, remote address, established, prefixes received, uptime, closed on its limit, the limit, when it last closed. Then each disabled connection, `disabled|<name>|<address>`. One line, because a script sent over exec runs as one.
-     */
-    private static readonly LIST_BGP_SESSIONS;
-    /** Open again the session from one address, only while it is closed on its limit. */
-    /** Each advertisement of these prefixes, one line each: `ADV|<session>|<prefix>`. One line, because a script sent over exec runs as one. */
-    private static listAdvertisements;
-    private static clearLimit;
-    /**
-     * Every LLDP neighbor, one line each: our interfaces, the port first and then the LAG and bridge it is in, the far system name, and the far port as LLDP reports it. `:tostr` keeps the interface list one value; joined to a string as it is, a list repeats the whole line for each of its items. One line, because a script sent over exec runs as one.
-     */
-    private static readonly LIST_NEIGHBORS;
-    /** BGP log lines, without the `connection ...` lines a session that cannot connect repeats. */
-    private static readonly BGP_LOG;
-    /** The device's date and time, in the form its log prints: `2026-10-24 03:12:44`. */
-    private static readonly CLOCK;
-    /** The switch chip's rules. A rule it cannot hold is invalid, and so is every rule after it, with no log line (TRAPS.md). */
-    private static readonly SWITCH_RULES;
-    private static readonly COUNT_INVALID_SWITCH_RULES;
-    private static readonly ROLLBACK_SCHEDULER;
-    /** Commands that only read: print, monitor, ping, traceroute, torch, profile, sniffer quick, an AS-path regex test, export, and `:put`, `:foreach` or `:delay` scripts. */
-    private static readonly READS;
-    /** Words that change something, or print secrets. A command with any of them is refused, whatever else it holds. */
-    private static readonly WRITES;
-    /** Flags after the user over SSH: no colours, no terminal detection, 300 columns, so output is plain and lines are not cut. */
-    private static readonly PLAIN_OUTPUT;
-    readonly name = "routeros";
-    readonly os: OsSupport;
-    readonly extension = ".rsc";
-    readonly console: ConsoleDialect;
-    /**
-     * A BGP session with a `table` announces from that table, not from main: each prefix of `networks` it announces needs a route in the table too, or it is not announced (TRAPS.md). A session left with nothing to announce is an error; a prefix missing from its table is a warning, since its export may not announce it anyway.
-     */
-    checks(device: Device): Finding[];
-    unsupported(device: Device): string[];
-    render(device: Device): string;
-    switchRules(device: Device): SwitchRules;
-    /**
-     * What the device runs: its export, its users, and its certificates. Secrets are not part of an export.
-     */
-    read(device: Device, _network?: readonly Device[], options?: ReadOptions): Promise<string>;
-    plan(desired: string, current: string, options: ApplyOptions): Plan;
-    apply(device: Device, _network: readonly Device[], changes: Plan, options: ApplyOptions): Promise<void>;
-    readOnly(command: string): boolean;
-    /** Over SSH, each command runs on its own. */
-    session(device: Device, options?: ReadOptions): Promise<ReadSession>;
-    /**
-     * A session is named `<connection>-<n>`, but a renamed connection keeps its session's old name until the session restarts. So a neighbor is matched by its address first, then by name.
-     *
-     * A session that is down says why: closed on its limit, or still connecting. A neighbor with no session and a disabled connection is admin down.
-     */
-    bgpSessions(device: Device, session: ReadSession): Promise<BgpSession[]>;
-    bgpClearLimit(session: ReadSession, sessions: readonly BgpSession[]): Promise<void>;
-    /** A `time>` filter in `/log print` does not filter, so the lines are kept here by comparing each one's time with the device's clock. */
-    bgpLog(session: ReadSession, minutes: number): Promise<BgpLogLine[]>;
-    /**
-     * Three checks after an apply. When the plan touched switch rules, none may be invalid. BGP sessions established before the apply must be established again, and announce again each of the device's `networks` they announced before, within `BgpWait.AFTER_APPLY`. A session can stay up and stop announcing (TRAPS.md), which the session check alone would not see.
-     */
-    health(device: Device, plan: Plan, options?: HealthOptions): Promise<HealthCheck>;
-    /** The LLDP neighbors the device sees, by Circuit's port names. */
-    neighbors(device: Device, network: readonly Device[], options?: ReadOptions): Promise<Neighbor[]>;
-    /** One line of `LIST_NEIGHBORS` as a neighbor. Our port is the first interface, by Circuit's name when it is a port. */
-    private static neighbor;
-    /**
-     * RouterOS reports the far port's description, where it has one, not its name (TRAPS.md). When it is the description of exactly one port of that device in the network, that port is the far port, by Circuit's name; otherwise the report stays as it is.
-     */
-    private static farPort;
-    /** Replace a list's entries in batches, so each command stays a sane length. */
-    fill(device: Device, _network: readonly Device[], set: string, family: Family, prefixes: string[]): Promise<void>;
-    /** The names of the configured neighbors whose session is established now. None, without logging in, on a device without BGP neighbors. */
-    private establishedSessions;
-    /** Wait until every one of these neighbors is established again, and give a problem for each that is not when time runs out. */
-    private bgpBack;
-    /** What each session announces of the device's own `networks`, as `neighbor prefix`. None, without logging in, on a device without networks. */
-    private announcedNow;
-    /** The `networks` each session announces, as `neighbor prefix`, sorted. An advertisement names its session, which is matched to its neighbor by address first, as in `bgpSessions`. */
-    private announced;
-    /** Wait until each session announces again what it announced before, and give a problem for each prefix a session no longer announces when time runs out. */
-    private announcedBack;
-    /** A problem when any switch rule is invalid, saying what to do. */
-    private static invalidSwitchRules;
-    /** Log in over SSH. `flags` go after the user, as RouterOS reads them: `+ct300w`. */
-    private static login;
-    private static sshSession;
-    /** Log in on the console. `settle` is the quiet after the prompt a command waits for, as `ConsoleShell` takes it. */
-    private static consoleSession;
-    /** Log in over SSH, or on the console when asked. */
-    private static open;
-    /** Refuse a device on a version this adapter does not render for, before anything is read or sent. */
-    private static checkVersion;
-    /** A time as the clock and the log print it, `2026-10-24 03:12:44`, in milliseconds. Both are read the same way, so the computer's time zone does not matter. Not a number when the text is not such a time. */
-    private static logTime;
-    private static withoutTimestamp;
-    /** Escape a command so it can sit inside a quoted string on the device. */
-    private static escapeForString;
-    /** Compile a command on the device without running it. Returns why it was refused, or undefined. */
-    private static refusal;
-    /** Upload a certificate and its key, import both under one name, and delete the files. */
-    private static installCertificate;
-}

package/dist/types/platforms/routeros/models.d.ts

@@ -1,18 +0,0 @@
-export declare const models: {
-    readonly "CCR2216-1G-12XS-2XQ": {
-        readonly ports: {
-            readonly "100g": 2;
-            readonly "25g": 12;
-            readonly "1g": 1;
-        };
-        readonly spelling: {
-            readonly "100g": "qsfp28-{n}-1";
-            readonly "25g": "sfp28-{n}";
-            readonly "1g": "ether{n}";
-        };
-        readonly limits: {
-            readonly lag_members: 8;
-            readonly switch_port_ranges: 5;
-        };
-    };
-};

package/dist/types/platforms/routeros/plan.d.ts

@@ -1,58 +0,0 @@
-import type { ApplyOptions, Plan } from "../platform.js";
-export declare class RouterOsPlan {
-    private readonly sendSecrets;
-    /** A plan line the apply handles itself: upload a certificate and its key, and import them. */
-    static readonly INSTALL_CERTIFICATE = "#install-certificate ";
-    /** Dependency order. A menu not listed sorts after all of these. The longest matching prefix decides. */
-    private static readonly ORDER;
-    /** Menus that also hold entries the device learned rather than was told. A selector must not match those. */
-    private static readonly DYNAMIC;
-    /** Menus where an entry that keeps its name but changes what it is known by is changed with a `set`, so what points at it by name, such as an address on a VLAN interface, stays attached. In every other menu it is removed and added again. */
-    private static readonly CHANGED_IN_PLACE;
-    /**
-     * Properties a running entry takes only when it restarts. A BGP session given a new `routing-table` stops announcing at once and keeps its routes in the old table until it restarts (TRAPS.md), so the plan disables the connection, changes it and enables it again: one restart, written in the plan.
-     */
-    private static readonly RESTART_ON;
-    /** The variable holding the old rules of an ordered menu while the new ones are added. Removed when the rewrite ends. */
-    private static readonly OLD_RULES;
-    /** What blocks an apply: something this plan cannot converge. */
-    private readonly problems;
-    /** Also send every secret, so a rotated value reaches the device. */
-    private constructor();
-    /** What it takes to go from `current` to `desired`. */
-    static of(desired: string, current: string, options: Pick<ApplyOptions, "secrets">): Plan;
-    private static rank;
-    /** Quote a value for a command. */
-    private static quote;
-    /** A value as a command takes it: bare when plain, quoted otherwise. A bare value is checked by `:parse` against the values the property takes; a quoted one is not (TRAPS.md). */
-    private static value;
-    /** In a `find`, a quoted `yes` is a string and matches no boolean, while an unquoted slash matches nothing. Plain words go bare, anything else quoted. */
-    private static findValue;
-    /** A selector for the entry with this identity. */
-    private static find;
-    /** A whole command as sent: menu, verb, selector, flags, then properties. */
-    private static line;
-    private static describe;
-    /** Group commands by menu. */
-    private static byMenu;
-    /**
-     * The properties to send so that the device's entry matches the rendered one. A property the device holds and the render does not state is reset to its default.
-     */
-    private changes;
-    /** Settings addressed by a selector: `set ftp ...`, `set [ find default=yes ] ...`. They are changed, never added or removed. */
-    private settings;
-    /** Entries, told apart by identity. New ones are added, changed ones set, and ones the render does not hold removed in the last phase. */
-    private entries;
-    /**
-     * Certificates are installed from the config when missing or different, after the old one of that name is removed. One the device holds under another name, with the same fingerprint and key, is renamed rather than imported a second time. One the config does not hold is removed in the last phase.
-     */
-    private static certificates;
-    /**
-     * An ordered menu is rewritten whole whenever it differs, so the device lists its rules in the order the render gives.
-     *
-     * The old rules are captured, the new ones added after them, then the captured ones removed. Until that moment the old rules keep deciding, so no chain is ever empty or half new.
-     *
-     * In a menu with chains, an old rule is removed in this step only if its chain is still wanted. A chain no longer wanted is removed in the last phase, after whatever pointed at it has been changed.
-     */
-    private static ordered;
-}

package/dist/types/platforms/routeros/render.d.ts

@@ -1,250 +0,0 @@
-import type { AclRule, Device, Ethertype, Interface, Port } from "../../schema/index.js";
-/** A property value as a command takes it. `undefined` and `false` leave the property out. */
-export type Value = string | number | undefined | false;
-export type AnyPort = Port<string, string, string, string>;
-/** One switch rule: the port it is on, the ACL rule it comes from, and the one source and destination port or range it takes. */
-export type SwitchRule = {
-    port: string;
-    rule: AclRule<string>;
-    srcPort?: string;
-    dstPort?: string;
-};
-export type AnyInterface = Interface<string, string>;
-type Speed = NonNullable<AnyPort["speed"]>;
-/** One device's render: the device, and the commands collected under their menu. */
-export declare class RouterOsRender {
-    private readonly device;
-    /** The bridge every switched port joins. One per device. */
-    private static readonly BRIDGE;
-    /** Destination of spanning tree BPDUs, so a filter can drop them on one port. */
-    private static readonly BPDU_DESTINATION;
-    /** The platform names a fixed speed by its medium: an optic in a cage, or copper. */
-    private static readonly MEDIUM;
-    /** Address lists holding the prefixes BGP originates. A session reads the one of its family. */
-    private static readonly NETWORKS;
-    /** A kind of frame as a switch rule's `mac-protocol` names it. */
-    private static readonly MAC_PROTOCOLS;
-    /** Helpers the platform has, all stated so that one the config does not list is off. */
-    private static readonly HELPERS;
-    private static readonly CHAINS;
-    /** The validator group every RPKI server joins. */
-    private static readonly RPKI_GROUP;
-    /** The chain a session without a policy uses, so that it learns or announces nothing. */
-    private static readonly REJECT_ALL;
-    private static readonly ROLES;
-    /** Neutral service name to the platform's. `native` is the platform's own desktop client. */
-    private static readonly SERVICES;
-    private static readonly USER_GROUPS;
-    private static readonly SNMP_AUTH;
-    private static readonly SNMP_PRIVACY;
-    /** Severity threshold to the topics the platform logs under, most severe first. */
-    private static readonly TOPICS;
-    private static readonly SEVERITY_ORDER;
-    private readonly ports;
-    private readonly interfaces;
-    /** Commands under their menu. */
-    private readonly menus;
-    private constructor();
-    /** The whole configuration the device should run. */
-    static of(device: Device): string;
-    /** The platform's name for a fixed speed on a port, or undefined when it has none. */
-    static medium(platformPortName: string, speed: Speed): string | undefined;
-    /** Quote a value when it holds anything but plain characters. */
-    private static quote;
-    /**
-     * A command: a verb such as `add` or `set [ find name=x ]`, then `property=value` for every property that has a value.
-     *
-     * Properties are written in the order given.
-     */
-    private static command;
-    /** `yes` or `no`. */
-    private static yesNo;
-    /** `V4` or `V6`, the suffix of a chain rendered for one family. */
-    private static familySuffix;
-    /** Each port or range of ports as the platform writes it: `53`, `0-52`. */
-    private static eachPort;
-    /** One port, a range, or a list of them, as `53,0-52`. */
-    private static portList;
-    /** Seconds as the platform writes a duration: `3600` becomes `1h`, `90` becomes `1m30s`. */
-    private static duration;
-    /** A rate as the switch chip takes it: `2G` becomes `2.0Gbps`. */
-    private static bitrate;
-    /** An IPv4 prefix with a dotted mask, as the switch chip takes it: `10.0.0.0/8` becomes `10.0.0.0/255.0.0.0`. */
-    private static dottedMask;
-    /** A community pattern with `*` as a regular expression the platform matches on: `64500:*:*` becomes `^64500:[0-9]+:[0-9]+$`. */
-    private static communityPattern;
-    /** The name of the VLAN interface under one with a MAC of its own, which takes the configured name itself. */
-    private static underMacvlan;
-    /** The interface holding one VRRP group. */
-    private static vrrpName;
-    /** `host:port` into its parts. The last colon separates them, so an IPv6 host keeps its own. */
-    private static splitEndpoint;
-    /** The chain a policy is rendered as for one family. A policy can test prefix lengths that mean different things per family, so each family gets its own. */
-    private static chainName;
-    /** The conditions of a rule, as the platform's filter language writes them. */
-    private static conditions;
-    /** What a rule does to a matching route, then its decision. */
-    private static actions;
-    /** One rule as the platform writes it: hand off, ask the validator, test, change, decide. */
-    private static ruleText;
-    /** SHA-256 of the certificate's DER encoding, lowercase hex, as the platform prints it. */
-    private static fingerprint;
-    /** Every topic at or above a severity. Emergency and alert are logged as critical; the platform has no notice topic. */
-    private static topicsFrom;
-    /** Add a line to a menu as it is. */
-    private addLine;
-    /** Add a command to a menu. */
-    private add;
-    /** The whole configuration as text. */
-    private text;
-    /** What the platform calls a port or an interface. A port is spelled by the model; an interface keeps its config name. */
-    private name;
-    /** The number of a VLAN, by its config name. */
-    private vlanId;
-    /** Ports and LAGs that are layer 2 members of a VLAN, with their settings. A port in a LAG is represented by the LAG. */
-    private switched;
-    /** VLAN interfaces, with their settings. */
-    private declaredVlanInterfaces;
-    /** Every port and interface that holds addresses or other layer 3 settings. Ports are named as the platform spells them. */
-    private routed;
-    private interfaceMenus;
-    /**
-     * Routing in the switch chip. With it on, routed traffic bypasses the forward chain unless its interface opts out.
-     *
-     * Restarting the offload after a failure, and offloading IPv6 too, follow the same switch.
-     */
-    private hardwareOffload;
-    /** One VLAN-filtering bridge carries every switched port. A loopback is a bridge with no ports, the platform's idiom for one. */
-    private bridge;
-    /** Every port of the model is stated. One the config does not declare is disabled. */
-    private ethernet;
-    /**
-     * Storm control in the switch chip. The platform takes one rate, in percent, and which kinds of flooded traffic it limits.
-     *
-     * `unsupported()` refuses packets per second and different percentages per kind, so here they are always one shared percent.
-     */
-    private switchPorts;
-    /** A LAG is a bonding interface. Its members are named as the platform spells them. */
-    private lags;
-    /**
-     * A VLAN interface sits on the bridge. When the device offloads, one that opts out is routed in software so the firewall applies.
-     *
-     * Every VLAN interface on the bridge has the bridge's MAC. One with a MAC of its own is a MACVLAN on top of the VLAN interface: the MACVLAN takes the configured name, so its addresses and every rule naming it land on it.
-     */
-    private vlanInterfaces;
-    private tunnels;
-    private wireguard;
-    /** Each VRRP group is an interface of its own, holding the shared address. Version 3 carries IPv6. */
-    private vrrp;
-    /** A switched port or LAG joins the bridge. Its untagged VLAN is its port VLAN ID. */
-    private bridgePorts;
-    /** A VLAN is tagged on every trunk carrying it, and on the bridge itself when the router has an interface in it. */
-    private bridgeVlans;
-    /** The platform cannot take a port out of spanning tree, so `stp: false` drops the BPDUs it would send and receive. */
-    private bridgeFilters;
-    /**
-     * Interface lists scope what works at layer 2: neighbor discovery, and the platform's own client over MAC. The IP firewall never sees either.
-     */
-    private interfaceLists;
-    /**
-     * Where LLDP runs, when it is limited to some ports. Undefined when it runs everywhere or nowhere, which the discovery settings say directly.
-     */
-    private lldpMembers;
-    /** A VRF lists its interfaces. */
-    private vrfs;
-    private addressing;
-    /** Every address goes on the menu of its family, with the interface's description as its comment. */
-    private addresses;
-    private dhcp;
-    private dns;
-    /**
-     * Address lists come from firewall address sets, prefix sets typed in the config, and what BGP originates.
-     *
-     * A prefix set fetched from a registry is filled by `refresh`, so only its name is marked, and the plan leaves its entries alone.
-     */
-    private addressLists;
-    private firewall;
-    /**
-     * Untracked prefixes skip connection tracking in the raw table, both ways, before a connection is ever made.
-     *
-     * An address NAT uses inside one stays tracked, by an `accept` in each direction before every `notrack`: a reply to it that skipped tracking would never be translated back.
-     */
-    private untracked;
-    /** Every address NAT translates to or from: each translation's target, and the address a destination translation matches. Once each, in rule order. */
-    static natAddresses(device: Device): string[];
-    /**
-     * The families a rule applies to. An address in the rule decides it; otherwise it applies to both.
-     *
-     * A rule naming an address set applies only to the families the set has members in.
-     */
-    private families;
-    /** The match properties of a rule, as the platform names them. */
-    private matchProperties;
-    private filter;
-    private nat;
-    private helpers;
-    /**
-     * ACLs run in the switch chip on the port traffic arrives on. The chip matches addresses with a dotted mask on IPv4, drops by forwarding to no port, and limits by rate. A rule takes one port or range, so a list becomes one rule for each.
-     */
-    private switchAcls;
-    /**
-     * A port that takes only some kinds of frame: a rule that lets each kind through, then one that drops the rest. The chip takes the first rule that matches on the port, so these come after the port's ACL, whose rules match only IPv4 or IPv6.
-     */
-    private ethertypeFilters;
-    /** The ports with an ethertype filter, with the kinds each takes. Each makes one switch rule per kind and one more. */
-    static ethertypeFilters(device: Device): {
-        port: string;
-        ethertypes: readonly Ethertype[];
-    }[];
-    /** Every switch rule the device's hardware ACLs make, in order: one for each port with an ACL, each rule of it, and each source and destination port or range of the rule. */
-    static switchRules(device: Device): SwitchRule[];
-    private routing;
-    /** A table beside the main one. `fib` puts its routes in the forwarding table, so traffic can be routed by them. */
-    private routingTables;
-    /** Rules in the order written. `lookup-only-in-table` drops what the table has no route for, and `lookup` falls back to the main table. */
-    private routingRules;
-    private staticRoutes;
-    private rpki;
-    /** The default instance exists on every device; it is stated in the form the export prints it. */
-    private bgpInstance;
-    /** A neighbor's settings with its group's beneath them. */
-    private settingsOf;
-    /** The families a neighbor exchanges: the ones it states, or its address's. */
-    private familiesOf;
-    /** Does a rule belong on a family's chain? A rule naming a prefix, a family, or a prefix set of one family belongs only there. */
-    private appliesTo;
-    /**
-     * Policies become filter chains, one per family a session uses, plus every chain those call.
-     *
-     * A chain a session uses directly ends in a reject when its last rule does not decide, so a route nothing accepted is rejected on any platform default. A chain only called returns to its caller instead.
-     */
-    private policies;
-    /** One connection per neighbor. The platform carries one family per connection. */
-    private bgpConnections;
-    /** One instance per OSPF version, an area per area and instance, and a template per interface. */
-    private ospf;
-    /**
-     * BFD runs where a session or an OSPF interface asks for it, with the device's timers when it states them. One configuration covers every interface. A multihop session has no interface, and BFD for it is forbidden unless a configuration names its address, so each gets one of its own.
-     */
-    private bfd;
-    private management;
-    /** Every service the platform has is stated. One the config does not name is disabled. */
-    private services;
-    /** What works at layer 2: the platform's client over MAC, MAC ping, the bandwidth test server and neighbor discovery. */
-    private layerTwo;
-    /**
-     * The platform keeps one community it will not delete. With version 2c it becomes the read community; without, it is disabled. Version 3 users are communities of their own.
-     */
-    private snmp;
-    private users;
-    /**
-     * Certificates are not part of an export, so the reader lists them in this same form: a name, the SHA-256 fingerprint of the certificate, and whether the device holds its private key. A difference is installed from the config, not edited.
-     */
-    private certificates;
-    private system;
-    /** Local logging uses the platform's built-in disk action, number 1. Each remote collector gets an action of its own. */
-    private logging;
-    /** NetFlow version 9 and IPFIX through traffic flow. The platform has no sFlow, which `unsupported()` reports. */
-    private flowExport;
-}
-export {};

package/dist/types/platforms/vrp/index.d.ts

@@ -1,83 +0,0 @@
-import type { Neighbor } from "../../core/cabling.js";
-import type { Device } from "../../schema/index.js";
-import { type ConsoleDialect } from "../../transport/console.js";
-import { type ApplyOptions, type OsSupport, type Plan, type ReadOptions, type ReadSession, Platform } from "../platform.js";
-export declare class Vrp extends Platform {
-    /** How the console asks for a login: the same question to change the password, always answered no, a system view left with `return`, and the line's banner after a logout or a refused password answered with Enter. Not yet proved on a device. */
-    static readonly CONSOLE: ConsoleDialect;
-    /** Lines the device prints whatever is configured, or that describe the hardware rather than its configuration. */
-    private static readonly DEVICE_FACTS;
-    /** Lines whose removal takes only their keyword, not their value. */
-    private static readonly UNDO_BY_KEYWORD;
-    /** Lines a new line of the same kind replaces whole, so the old one is not undone first. */
-    private static readonly REPLACED_WHOLE;
-    private static readonly DIALECT;
-    /** The platform offers an ECDSA host key it then signs wrongly, so RSA is asked for. */
-    private static readonly HOST_KEYS;
-    /** What the device prints when it refuses a line. */
-    private static readonly REFUSED;
-    /** A setting whose password the platform asks for interactively: the command, then the password, then the password again. */
-    private static readonly INTERACTIVE;
-    private static readonly NOT_SAVED;
-    /** Commands that only read. A `?` sent by a script is run, not taken as help, so a line with one is refused. */
-    private static readonly READS;
-    readonly name = "vrp";
-    readonly os: OsSupport;
-    readonly extension = ".cfg";
-    readonly console: ConsoleDialect;
-    unsupported(device: Device): string[];
-    render(device: Device): string;
-    /** What the device runs, credentials scrubbed. */
-    read(device: Device, _network?: readonly Device[], options?: ReadOptions): Promise<string>;
-    /**
-     * What changes, in the order the platform accepts.
-     *
-     * A VLAN list changes by ID. VLANs no longer used go first, with their VLAN interfaces, so their names and numbers are free before a new VLAN takes them: a VLAN name is unique, and a VLAN with an interface cannot be removed. The whole plan is one candidate, so going first leaves nothing half done.
-     */
-    plan(desired: string, current: string, options: ApplyOptions): Plan;
-    apply(device: Device, _network: readonly Device[], plan: Plan, options: ApplyOptions): Promise<void>;
-    neighbors(device: Device, _network?: readonly Device[], options?: ReadOptions): Promise<Neighbor[]>;
-    /**
-     * The neighbors in `display lldp neighbor`: a header per port, `10GE1/0/2 has 1 neighbor(s):`, then a block per neighbor where `Port ID` comes before `System name`. A port Circuit does not know, such as the management port, is left out.
-     */
-    static neighborsOf(device: Device, output: string): Neighbor[];
-    readOnly(command: string): boolean;
-    /** One shell for every command, as the platform takes commands only there. */
-    session(device: Device, options?: ReadOptions): Promise<ReadSession>;
-    private static undo;
-    /** Secrets the device prints as ciphers and the render writes as markers compare equal. */
-    private static canon;
-    /** Blocks other blocks refer to come first: VRFs, VLANs, the ACL and users, then device-wide lines, then LAGs, ports, VLAN interfaces, OSPF and logins. */
-    private static order;
-    /**
-     * A log host the config no longer has is removed. One at the default level prints as `info-center loghost <address>`, whose head is the bare command, so a new log host would otherwise seem to replace it.
-     */
-    private static removeLoghosts;
-    /** An ACL rule sent over a rule of the same number merges into it: `rule 10 deny` over `rule 10 permit source A` leaves `rule 10 deny source A`. A changed rule is undone first. */
-    private static replaceRules;
-    /** A static route's BFD template sent again replaces the old one whole, options left out included, so the old one is not undone: a route still uses it. */
-    private static keepReplacedWhole;
-    /** `undo alarm` is not a command: the `alarm` view goes once each line in it is undone. */
-    private static emptyAlarmView;
-    /** The VLAN IDs of a `vlan batch` line: `vlan batch 10 20 to 30`. */
-    private static batchIds;
-    private static login;
-    /**
-     * An interactive shell at the user prompt, paging off.
-     *
-     * Every login asks whether to change the password. Answering yes replaces it at once and every stored credential with it, so the answer is always no. Anything sent before the question is answered is taken as the answer.
-     */
-    private static shell;
-    /** Log in on the console with paging off. Returns the console, a way to log in afresh, and how to let the console go. */
-    private static openConsole;
-    /** Log in on the console with paging off, run `work` with a way to log in afresh, and log out. */
-    private static onConsole;
-    /** The configuration in a dump, without the prompt or the stamp of the last change. */
-    private static configurationOf;
-    /** Send one line, answering a confirmation, and return what the device said. */
-    private static sendLine;
-    /** Send a plan into the candidate and commit it. A refused line clears the candidate, which leaves the device as it was. */
-    private static commitPlan;
-    /** Save what runs, so a reboot keeps it. */
-    private static save;
-}

package/dist/types/platforms/vrp/models.d.ts

@@ -1,12 +0,0 @@
-export declare const models: {
-    readonly "CE6855-48S6Q-HI": {
-        readonly ports: {
-            readonly "10g": 48;
-            readonly "40g": 6;
-        };
-        readonly spelling: {
-            readonly "10g": "10GE1/0/{n}";
-            readonly "40g": "40GE1/0/{n}";
-        };
-    };
-};