@tikoci/centrs 0.1.3 → 0.1.4

package/src/explain/menus.ts

@@ -0,0 +1,664 @@
+/**
+ * RouterOS menu (container) paths — GENERATED, do not hand-edit.
+ *
+ * Regenerate with `bun run explain:menus`; `bun run explain:menus --check` is
+ * the drift gate. The generator (`scripts/gen-explain-menus.ts`) carries the
+ * full rationale, the source pin, and why absence here is safe.
+ *
+ * Union of the `dir` and `path` nodes in four pinned restraml typed trees
+ * (`https://tikoci.github.io/restraml/`), all extra-packages builds:
+ *
+ * | Tree | Arch | RouterOS | Nodes | Containers |
+ * | ---- | ---- | -------- | ----- | ---------- |
+ * | `7.10.2/extra/inspect.json` | x86 | 7.10.2 | 29,086 | 458 |
+ * | `7.16/extra/inspect.json` | x86 | 7.16 | 34,876 | 522 |
+ * | `7.23.2/extra/deep-inspect.x86.json` | x86 | 7.23.2 | 40,595 | 550 |
+ * | `7.24rc2/extra/deep-inspect.arm64.json` | arm64 | 7.24rc2 | 42,690 | 575 |
+ *
+ * Zero node-type conflicts across those trees — no `dir`↔`cmd` flip across
+ * three versions or across architectures — which is what makes the union
+ * version-less rather than version-keyed. Generation aborts if that ever stops
+ * holding.
+ *
+ * **This table is a floor.** A path missing here is not confirmed as
+ * navigation, so `write.ts` abstains on it — the pre-#207 behaviour for an
+ * unrecognized menu, never a wrong answer. A COMMAND wrongly listed here would
+ * be a wrong answer, which is what the pin and the conflict check protect.
+ */
+
+/** Every container path the pinned trees agree on, lower-cased and sorted. */
+export const MENU_PATHS: ReadonlySet<string> = new Set([
+	"/app",
+	"/app/network",
+	"/app/settings",
+	"/caps-man",
+	"/caps-man/aaa",
+	"/caps-man/access-list",
+	"/caps-man/actual-interface-configuration",
+	"/caps-man/channel",
+	"/caps-man/configuration",
+	"/caps-man/datapath",
+	"/caps-man/interface",
+	"/caps-man/manager",
+	"/caps-man/manager/interface",
+	"/caps-man/provisioning",
+	"/caps-man/radio",
+	"/caps-man/rates",
+	"/caps-man/registration-table",
+	"/caps-man/remote-cap",
+	"/caps-man/security",
+	"/certificate",
+	"/certificate/builtin",
+	"/certificate/crl",
+	"/certificate/scep-server",
+	"/certificate/scep-server/otp",
+	"/certificate/scep-server/ra",
+	"/certificate/scep-server/requests",
+	"/certificate/settings",
+	"/console",
+	"/console/settings",
+	"/container",
+	"/container/config",
+	"/container/envs",
+	"/container/layers",
+	"/container/log",
+	"/container/mounts",
+	"/disk",
+	"/disk/btrfs",
+	"/disk/btrfs/filesystem",
+	"/disk/btrfs/subvolume",
+	"/disk/btrfs/transfer",
+	"/disk/settings",
+	"/disk/smb-share",
+	"/disk/smb-user",
+	"/dude",
+	"/dude/agent",
+	"/dude/device",
+	"/dude/device-type",
+	"/dude/notification",
+	"/dude/probe",
+	"/dude/ros",
+	"/dude/ros/address",
+	"/dude/ros/arp",
+	"/dude/ros/health",
+	"/dude/ros/interface",
+	"/dude/ros/lease",
+	"/dude/ros/neighbor",
+	"/dude/ros/queue",
+	"/dude/ros/registration-table",
+	"/dude/ros/resource",
+	"/dude/ros/route",
+	"/dude/ros/routerboard",
+	"/dude/service",
+	"/dude/settings",
+	"/environment",
+	"/file",
+	"/file/rsync-daemon",
+	"/file/sync",
+	"/interface",
+	"/interface/6to4",
+	"/interface/bonding",
+	"/interface/bridge",
+	"/interface/bridge/calea",
+	"/interface/bridge/filter",
+	"/interface/bridge/host",
+	"/interface/bridge/mdb",
+	"/interface/bridge/msti",
+	"/interface/bridge/nat",
+	"/interface/bridge/port",
+	"/interface/bridge/port-controller",
+	"/interface/bridge/port-controller/device",
+	"/interface/bridge/port-controller/port",
+	"/interface/bridge/port-controller/port/poe",
+	"/interface/bridge/port-extender",
+	"/interface/bridge/port/mst-override",
+	"/interface/bridge/settings",
+	"/interface/bridge/vlan",
+	"/interface/bridge/vlan/mvrp",
+	"/interface/detect-internet",
+	"/interface/detect-internet/state",
+	"/interface/dot1x",
+	"/interface/dot1x/client",
+	"/interface/dot1x/server",
+	"/interface/dot1x/server/active",
+	"/interface/dot1x/server/state",
+	"/interface/eoip",
+	"/interface/eoipv6",
+	"/interface/ethernet",
+	"/interface/ethernet/switch",
+	"/interface/ethernet/switch/host",
+	"/interface/ethernet/switch/port",
+	"/interface/ethernet/switch/port-isolation",
+	"/interface/ethernet/switch/rule",
+	"/interface/ethernet/switch/vlan",
+	"/interface/gre",
+	"/interface/gre6",
+	"/interface/ipip",
+	"/interface/ipipv6",
+	"/interface/l2tp-client",
+	"/interface/l2tp-ether",
+	"/interface/l2tp-server",
+	"/interface/l2tp-server/server",
+	"/interface/list",
+	"/interface/list/member",
+	"/interface/lte",
+	"/interface/lte/apn",
+	"/interface/lte/esim",
+	"/interface/lte/settings",
+	"/interface/macsec",
+	"/interface/macsec/profile",
+	"/interface/macvlan",
+	"/interface/mesh",
+	"/interface/mesh/fdb",
+	"/interface/mesh/port",
+	"/interface/ovpn-client",
+	"/interface/ovpn-server",
+	"/interface/ovpn-server/server",
+	"/interface/ppp-client",
+	"/interface/ppp-server",
+	"/interface/pppoe-client",
+	"/interface/pppoe-server",
+	"/interface/pppoe-server/server",
+	"/interface/pptp-client",
+	"/interface/pptp-server",
+	"/interface/pptp-server/server",
+	"/interface/sstp-client",
+	"/interface/sstp-server",
+	"/interface/sstp-server/server",
+	"/interface/veth",
+	"/interface/vlan",
+	"/interface/vpls",
+	"/interface/vrrp",
+	"/interface/vxlan",
+	"/interface/vxlan/fdb",
+	"/interface/vxlan/vteps",
+	"/interface/wifi",
+	"/interface/wifi/aaa",
+	"/interface/wifi/access-list",
+	"/interface/wifi/cap",
+	"/interface/wifi/capsman",
+	"/interface/wifi/capsman/remote-cap",
+	"/interface/wifi/channel",
+	"/interface/wifi/configuration",
+	"/interface/wifi/datapath",
+	"/interface/wifi/interworking",
+	"/interface/wifi/network",
+	"/interface/wifi/network/radio",
+	"/interface/wifi/provisioning",
+	"/interface/wifi/radio",
+	"/interface/wifi/radio/settings",
+	"/interface/wifi/registration-table",
+	"/interface/wifi/security",
+	"/interface/wifi/security/multi-passphrase",
+	"/interface/wifi/steering",
+	"/interface/wifi/steering/neighbor-group",
+	"/interface/wifiwave2",
+	"/interface/wifiwave2/aaa",
+	"/interface/wifiwave2/access-list",
+	"/interface/wifiwave2/actual-configuration",
+	"/interface/wifiwave2/cap",
+	"/interface/wifiwave2/capsman",
+	"/interface/wifiwave2/capsman/remote-cap",
+	"/interface/wifiwave2/channel",
+	"/interface/wifiwave2/configuration",
+	"/interface/wifiwave2/datapath",
+	"/interface/wifiwave2/interworking",
+	"/interface/wifiwave2/provisioning",
+	"/interface/wifiwave2/radio",
+	"/interface/wifiwave2/registration-table",
+	"/interface/wifiwave2/security",
+	"/interface/wireguard",
+	"/interface/wireguard/peers",
+	"/interface/wireless",
+	"/interface/wireless/access-list",
+	"/interface/wireless/align",
+	"/interface/wireless/cap",
+	"/interface/wireless/channels",
+	"/interface/wireless/connect-list",
+	"/interface/wireless/info",
+	"/interface/wireless/interworking-profiles",
+	"/interface/wireless/manual-tx-power-table",
+	"/interface/wireless/nstreme",
+	"/interface/wireless/nstreme-dual",
+	"/interface/wireless/registration-table",
+	"/interface/wireless/security-profiles",
+	"/interface/wireless/sniffer",
+	"/interface/wireless/sniffer/packet",
+	"/interface/wireless/snooper",
+	"/interface/wireless/wds",
+	"/iot",
+	"/iot/bluetooth",
+	"/iot/bluetooth/advertisers",
+	"/iot/bluetooth/advertisers/ad-structures",
+	"/iot/bluetooth/connections",
+	"/iot/bluetooth/connections/async-data",
+	"/iot/bluetooth/connections/characteristics",
+	"/iot/bluetooth/peripheral-devices",
+	"/iot/bluetooth/scanners",
+	"/iot/bluetooth/scanners/advertisements",
+	"/iot/bluetooth/whitelist",
+	"/iot/lora",
+	"/iot/lora/channels",
+	"/iot/lora/joineui",
+	"/iot/lora/netid",
+	"/iot/lora/radios",
+	"/iot/lora/servers",
+	"/iot/lora/traffic",
+	"/iot/lora/traffic/options",
+	"/iot/modbus",
+	"/iot/modbus/security-rules",
+	"/iot/mqtt",
+	"/iot/mqtt/brokers",
+	"/iot/mqtt/subscriptions",
+	"/iot/mqtt/subscriptions/recv",
+	"/iot/wiliot",
+	"/iot/wiliot/bluetooth-traffic",
+	"/iot/wiliot/mqtt-traffic",
+	"/iot/wiliot/options",
+	"/iot/wiliot/servers",
+	"/ip",
+	"/ip/address",
+	"/ip/arp",
+	"/ip/cloud",
+	"/ip/cloud/advanced",
+	"/ip/cloud/back-to-home-file",
+	"/ip/cloud/back-to-home-file/settings",
+	"/ip/cloud/back-to-home-user",
+	"/ip/dhcp-client",
+	"/ip/dhcp-client/option",
+	"/ip/dhcp-relay",
+	"/ip/dhcp-server",
+	"/ip/dhcp-server/alert",
+	"/ip/dhcp-server/config",
+	"/ip/dhcp-server/lease",
+	"/ip/dhcp-server/matcher",
+	"/ip/dhcp-server/network",
+	"/ip/dhcp-server/option",
+	"/ip/dhcp-server/option/sets",
+	"/ip/dns",
+	"/ip/dns/adlist",
+	"/ip/dns/cache",
+	"/ip/dns/cache/all",
+	"/ip/dns/forwarders",
+	"/ip/dns/static",
+	"/ip/firewall",
+	"/ip/firewall/address-list",
+	"/ip/firewall/calea",
+	"/ip/firewall/connection",
+	"/ip/firewall/connection/tracking",
+	"/ip/firewall/filter",
+	"/ip/firewall/layer7-protocol",
+	"/ip/firewall/mangle",
+	"/ip/firewall/nat",
+	"/ip/firewall/raw",
+	"/ip/firewall/service-port",
+	"/ip/hotspot",
+	"/ip/hotspot/active",
+	"/ip/hotspot/cookie",
+	"/ip/hotspot/host",
+	"/ip/hotspot/ip-binding",
+	"/ip/hotspot/profile",
+	"/ip/hotspot/service-port",
+	"/ip/hotspot/user",
+	"/ip/hotspot/user/profile",
+	"/ip/hotspot/walled-garden",
+	"/ip/hotspot/walled-garden/ip",
+	"/ip/ipsec",
+	"/ip/ipsec/active-peers",
+	"/ip/ipsec/identity",
+	"/ip/ipsec/installed-sa",
+	"/ip/ipsec/key",
+	"/ip/ipsec/key/psk",
+	"/ip/ipsec/key/qkd",
+	"/ip/ipsec/key/rsa",
+	"/ip/ipsec/mode-config",
+	"/ip/ipsec/peer",
+	"/ip/ipsec/policy",
+	"/ip/ipsec/policy/group",
+	"/ip/ipsec/profile",
+	"/ip/ipsec/proposal",
+	"/ip/ipsec/settings",
+	"/ip/ipsec/statistics",
+	"/ip/kid-control",
+	"/ip/kid-control/device",
+	"/ip/media",
+	"/ip/media/settings",
+	"/ip/nat-pmp",
+	"/ip/nat-pmp/interfaces",
+	"/ip/neighbor",
+	"/ip/neighbor/discovery-settings",
+	"/ip/neighbor/lldp",
+	"/ip/packing",
+	"/ip/pool",
+	"/ip/pool/used",
+	"/ip/proxy",
+	"/ip/proxy/access",
+	"/ip/proxy/cache",
+	"/ip/proxy/cache-contents",
+	"/ip/proxy/connections",
+	"/ip/proxy/direct",
+	"/ip/proxy/inserts",
+	"/ip/proxy/lookups",
+	"/ip/proxy/refreshes",
+	"/ip/reverse-proxy",
+	"/ip/route",
+	"/ip/service",
+	"/ip/service/webserver",
+	"/ip/settings",
+	"/ip/smb",
+	"/ip/smb/shares",
+	"/ip/smb/users",
+	"/ip/socks",
+	"/ip/socks/access",
+	"/ip/socks/connections",
+	"/ip/socks/users",
+	"/ip/socksify",
+	"/ip/ssh",
+	"/ip/tftp",
+	"/ip/tftp/settings",
+	"/ip/traffic-flow",
+	"/ip/traffic-flow/ipfix",
+	"/ip/traffic-flow/target",
+	"/ip/upnp",
+	"/ip/upnp/interfaces",
+	"/ip/vrf",
+	"/ipv6",
+	"/ipv6/address",
+	"/ipv6/dhcp-client",
+	"/ipv6/dhcp-client/option",
+	"/ipv6/dhcp-relay",
+	"/ipv6/dhcp-relay/option",
+	"/ipv6/dhcp-relay/routes",
+	"/ipv6/dhcp-server",
+	"/ipv6/dhcp-server/binding",
+	"/ipv6/dhcp-server/option",
+	"/ipv6/dhcp-server/option/sets",
+	"/ipv6/firewall",
+	"/ipv6/firewall/address-list",
+	"/ipv6/firewall/connection",
+	"/ipv6/firewall/filter",
+	"/ipv6/firewall/mangle",
+	"/ipv6/firewall/nat",
+	"/ipv6/firewall/raw",
+	"/ipv6/nd",
+	"/ipv6/nd/prefix",
+	"/ipv6/nd/prefix/default",
+	"/ipv6/nd/proxy",
+	"/ipv6/nd/settings",
+	"/ipv6/neighbor",
+	"/ipv6/pool",
+	"/ipv6/pool/used",
+	"/ipv6/route",
+	"/ipv6/settings",
+	"/log",
+	"/lora",
+	"/lora/channels",
+	"/lora/joineui",
+	"/lora/netid",
+	"/lora/radios",
+	"/lora/servers",
+	"/mpls",
+	"/mpls/forwarding-table",
+	"/mpls/interface",
+	"/mpls/ldp",
+	"/mpls/ldp/accept-filter",
+	"/mpls/ldp/advertise-filter",
+	"/mpls/ldp/interface",
+	"/mpls/ldp/local-mapping",
+	"/mpls/ldp/neighbor",
+	"/mpls/ldp/remote-mapping",
+	"/mpls/mangle",
+	"/mpls/settings",
+	"/mpls/traffic-eng",
+	"/mpls/traffic-eng/flow",
+	"/mpls/traffic-eng/interface",
+	"/mpls/traffic-eng/path",
+	"/mpls/traffic-eng/tunnel",
+	"/openflow",
+	"/openflow/flow",
+	"/openflow/group",
+	"/openflow/meter",
+	"/openflow/port",
+	"/port",
+	"/port/remote-access",
+	"/ppp",
+	"/ppp/aaa",
+	"/ppp/active",
+	"/ppp/l2tp-secret",
+	"/ppp/profile",
+	"/ppp/secret",
+	"/queue",
+	"/queue/interface",
+	"/queue/simple",
+	"/queue/tree",
+	"/queue/type",
+	"/radius",
+	"/radius/incoming",
+	"/routing",
+	"/routing/bfd",
+	"/routing/bfd/configuration",
+	"/routing/bfd/session",
+	"/routing/bgp",
+	"/routing/bgp/advertisements",
+	"/routing/bgp/connection",
+	"/routing/bgp/evpn",
+	"/routing/bgp/instance",
+	"/routing/bgp/session",
+	"/routing/bgp/template",
+	"/routing/bgp/vpls",
+	"/routing/bgp/vpn",
+	"/routing/fantasy",
+	"/routing/filter",
+	"/routing/filter/chain",
+	"/routing/filter/community-ext-list",
+	"/routing/filter/community-large-list",
+	"/routing/filter/community-list",
+	"/routing/filter/num-list",
+	"/routing/filter/rule",
+	"/routing/filter/select-rule",
+	"/routing/gmp",
+	"/routing/id",
+	"/routing/igmp-proxy",
+	"/routing/igmp-proxy/interface",
+	"/routing/igmp-proxy/mfc",
+	"/routing/isis",
+	"/routing/isis/instance",
+	"/routing/isis/interface",
+	"/routing/isis/interface-template",
+	"/routing/isis/lsp",
+	"/routing/isis/neighbor",
+	"/routing/nexthop",
+	"/routing/ospf",
+	"/routing/ospf/area",
+	"/routing/ospf/area/range",
+	"/routing/ospf/instance",
+	"/routing/ospf/interface",
+	"/routing/ospf/interface-template",
+	"/routing/ospf/lsa",
+	"/routing/ospf/neighbor",
+	"/routing/ospf/static-neighbor",
+	"/routing/pimsm",
+	"/routing/pimsm/bsr",
+	"/routing/pimsm/bsr/candidate",
+	"/routing/pimsm/bsr/rp-candidate",
+	"/routing/pimsm/bsr/rp-set",
+	"/routing/pimsm/igmp-interface-template",
+	"/routing/pimsm/instance",
+	"/routing/pimsm/interface",
+	"/routing/pimsm/interface-template",
+	"/routing/pimsm/neighbor",
+	"/routing/pimsm/static-rp",
+	"/routing/pimsm/uib-g",
+	"/routing/pimsm/uib-sg",
+	"/routing/rip",
+	"/routing/rip/instance",
+	"/routing/rip/interface",
+	"/routing/rip/interface-template",
+	"/routing/rip/keys",
+	"/routing/rip/neighbor",
+	"/routing/rip/static-neighbor",
+	"/routing/route",
+	"/routing/route/rule",
+	"/routing/rpki",
+	"/routing/rpki/session",
+	"/routing/rule",
+	"/routing/settings",
+	"/routing/stats",
+	"/routing/stats/memory",
+	"/routing/stats/origin",
+	"/routing/stats/pcap",
+	"/routing/stats/process",
+	"/routing/stats/step",
+	"/routing/table",
+	"/rsync-daemon",
+	"/safe-mode",
+	"/snmp",
+	"/snmp/community",
+	"/special-login",
+	"/system",
+	"/system/backup",
+	"/system/backup/cloud",
+	"/system/clock",
+	"/system/clock/manual",
+	"/system/console",
+	"/system/console/screen",
+	"/system/default-configuration",
+	"/system/default-configuration/caps-mode-script",
+	"/system/default-configuration/custom-script",
+	"/system/default-configuration/script",
+	"/system/device-mode",
+	"/system/gps",
+	"/system/hardware",
+	"/system/health",
+	"/system/health/settings",
+	"/system/history",
+	"/system/identity",
+	"/system/keymat-provider",
+	"/system/leds",
+	"/system/leds/settings",
+	"/system/license",
+	"/system/logging",
+	"/system/logging/action",
+	"/system/note",
+	"/system/ntp",
+	"/system/ntp/client",
+	"/system/ntp/client/servers",
+	"/system/ntp/key",
+	"/system/ntp/server",
+	"/system/package",
+	"/system/package/local-update",
+	"/system/package/local-update/mirror",
+	"/system/package/local-update/update-package-source",
+	"/system/package/update",
+	"/system/regulatory",
+	"/system/resource",
+	"/system/resource/cpu",
+	"/system/resource/hardware",
+	"/system/resource/hardware/usb-settings",
+	"/system/resource/irq",
+	"/system/resource/irq/rps",
+	"/system/resource/pci",
+	"/system/resource/usb",
+	"/system/resource/usb/settings",
+	"/system/routerboard",
+	"/system/routerboard/mode-button",
+	"/system/routerboard/reset-button",
+	"/system/routerboard/settings",
+	"/system/routerboard/usb",
+	"/system/routerboard/wps-button",
+	"/system/rtrace",
+	"/system/scheduler",
+	"/system/script",
+	"/system/script/environment",
+	"/system/script/job",
+	"/system/upgrade",
+	"/system/upgrade/mirror",
+	"/system/upgrade/upgrade-package-source",
+	"/system/ups",
+	"/system/watchdog",
+	"/task",
+	"/terminal",
+	"/tool",
+	"/tool/bandwidth-server",
+	"/tool/bandwidth-server/session",
+	"/tool/calea",
+	"/tool/e-mail",
+	"/tool/graphing",
+	"/tool/graphing/interface",
+	"/tool/graphing/queue",
+	"/tool/graphing/resource",
+	"/tool/mac-server",
+	"/tool/mac-server/mac-winbox",
+	"/tool/mac-server/ping",
+	"/tool/mac-server/sessions",
+	"/tool/netinstall",
+	"/tool/netinstall/cache",
+	"/tool/netinstall/devices",
+	"/tool/netinstall/settings",
+	"/tool/netwatch",
+	"/tool/romon",
+	"/tool/romon/port",
+	"/tool/sms",
+	"/tool/sms/inbox",
+	"/tool/sniffer",
+	"/tool/sniffer/connection",
+	"/tool/sniffer/host",
+	"/tool/sniffer/packet",
+	"/tool/sniffer/protocol",
+	"/tool/traffic-generator",
+	"/tool/traffic-generator/packet-template",
+	"/tool/traffic-generator/port",
+	"/tool/traffic-generator/raw-packet-template",
+	"/tool/traffic-generator/stats",
+	"/tool/traffic-generator/stats/latency-distribution",
+	"/tool/traffic-generator/stats/port",
+	"/tool/traffic-generator/stats/raw",
+	"/tool/traffic-generator/stats/stream",
+	"/tool/traffic-generator/stream",
+	"/tool/traffic-monitor",
+	"/tr069-client",
+	"/user",
+	"/user-manager",
+	"/user-manager/advanced",
+	"/user-manager/attribute",
+	"/user-manager/database",
+	"/user-manager/limitation",
+	"/user-manager/payment",
+	"/user-manager/profile",
+	"/user-manager/profile-limitation",
+	"/user-manager/router",
+	"/user-manager/session",
+	"/user-manager/user",
+	"/user-manager/user-profile",
+	"/user-manager/user/group",
+	"/user/aaa",
+	"/user/active",
+	"/user/group",
+	"/user/settings",
+	"/user/ssh-keys",
+	"/user/ssh-keys/private",
+	"/zerotier",
+	"/zerotier/controller",
+	"/zerotier/controller/member",
+	"/zerotier/interface",
+	"/zerotier/peer",
+	"/zerotier/peer/hint",
+]);
+
+/**
+ * Is this token sequence a known RouterOS menu?
+ *
+ * Takes the path SEGMENTS rather than raw text so callers pass what they
+ * already parsed — `describeStatement`'s run, say — instead of re-splitting a
+ * statement and having to re-derive which spelling (`/ip/address` or
+ * `/ip address`) it used. Both spellings reduce to the same segments, which is
+ * the whole reason this reads segments.
+ *
+ * Empty input is not a menu: the bare `/` and `..` forms are decided by their
+ * own rule, and answering `true` here would let an empty run fall into a menu
+ * verdict by accident.
+ */
+export function isMenuPath(segments: readonly string[]): boolean {
+	if (segments.length === 0) return false;
+	return MENU_PATHS.has(`/${segments.join("/").toLowerCase()}`);
+}