@tikoci/centrs 0.1.6 → 0.1.8-next.0

package/src/execute.ts

@@ -10,17 +10,22 @@ import type {
 	ValidationTrace,
 	Warning,
 } from "./core/envelope.ts";
-import { buildTip } from "./core/envelope.ts";
+import { buildTip, notReachedReason } from "./core/envelope.ts";
 import {
 	type CanonicalExecuteCommand,
 	canonicalizeExecuteCommand,
 	isWriteShaped,
 } from "./core/execute-command.ts";
 import { inspectArgumentNames, pathTokens } from "./core/inspect.ts";
-import { mapRouterOsError } from "./core/routeros-errors.ts";
+import { mapRouterOsResultError } from "./core/routeros-errors.ts";
 import { routerOsStringLiteral } from "./core/routeros-string.ts";
 import { toYaml } from "./core/yaml.ts";
-import { CentrsError, serializeCentrsError } from "./errors.ts";
+import {
+	CentrsError,
+	formatCentrsErrorText,
+	SYNTAX_REJECTED_REMEDIATION,
+	serializeCentrsError,
+} from "./errors.ts";
 import {
 	assertOfflineSyntax,
 	isOfflineGateRejection,
@@ -623,18 +628,21 @@ function failedValidationMeta(
 		return disabledValidationMeta();
 	}
 	const deviceSource = deviceStageSource(resolved);
-	// Script-shaped input has no `/console/inspect` half to fail, on either
-	// branch below. Reporting `semantic: false` for it would say a semantic gate
-	// ran and said no, which is a different claim from "there was none".
-	const semantic: boolean | "not-applicable" =
-		resolved.canonical.mode === "structured" ? false : "not-applicable";
+	const structured = resolved.canonical.mode === "structured";
+	// A flat summary is present only when its check gave a verdict (GH#435).
+	// Script-shaped input has no semantic half at all: `not-applicable`. For
+	// structured input, a syntax rejection means the name-level check was
+	// never asked, so `semantic` is left out rather than reported `false`.
+	const semanticNotReached = structured
+		? {}
+		: { semantic: "not-applicable" as const };
 	if (isOfflineGateRejection(error)) {
 		return {
 			enabled: true,
 			source: OFFLINE_GATE_SOURCE,
 			result: "failed",
 			syntax: false,
-			semantic,
+			...semanticNotReached,
 			stages: [
 				{ stage: "offline", source: OFFLINE_GATE_SOURCE, result: "failed" },
 				{
@@ -648,31 +656,60 @@ function failedValidationMeta(
 	}
 	// Only a `validation/*` error tells us the DEVICE stage rejected it — and
 	// only then do we know stage 1 passed, because stage 1 runs first and would
-	// have thrown its own (offline-tagged) error otherwise. This builder also
-	// catches everything downstream — a RouterOS fault on the run, a transport
-	// drop — which passed both stages and is served by `trace.validation`. When
-	// neither applies, `stages` is omitted rather than asserting a verdict this
-	// function cannot know.
-	const deviceRejected =
-		error instanceof CentrsError && error.code.startsWith("validation/");
+	// have thrown its own (offline-tagged) error otherwise. Everything downstream
+	// of a passed gate — a RouterOS fault on the run, a transport drop — is
+	// served by `trace.validation` before this function is reached.
+	if (error instanceof CentrsError && error.code.startsWith("validation/")) {
+		// Only a structured `unknown-attribute` (inspect, or `:parse`'s `bad
+		// parameter`) says the syntax was fine and a name was wrong. Every other
+		// device rejection — `syntax`, `unknown-path`, `package-missing`,
+		// `menu-unavailable` — is `:parse` refusing the command itself.
+		const nameRejected =
+			structured && error.code === "validation/unknown-attribute";
+		return {
+			enabled: true,
+			source: deviceSource,
+			result: "failed",
+			...(nameRejected
+				? { syntax: true, semantic: false }
+				: { syntax: false, ...semanticNotReached }),
+			stages: [
+				offlineStagePassed(trace?.offlineVerdict),
+				{ stage: "device", source: deviceSource, result: "failed" },
+			],
+		};
+	}
+	// Anything else stopped the gate before it produced a verdict: a transport or
+	// auth failure, a device error that is not a parse answer, or a refusal
+	// before the gate ran (write confirmation). No `result`, no `syntax` /
+	// `semantic` — no stage said either (GH#435). Without a trace this builder
+	// cannot know whether stage 1 ran, so it leaves that stage out.
+	const reason = notReachedReason(
+		error instanceof CentrsError ? error.code : "internal/unhandled",
+	);
+	const device: EnvelopeValidationStage = {
+		stage: "device",
+		source: deviceSource,
+		result: "skipped",
+		reason,
+	};
+	if (!trace) {
+		return { enabled: true, source: deviceSource, stages: [device] };
+	}
 	return {
 		enabled: true,
 		source: deviceSource,
-		result: "failed",
-		syntax: true,
-		semantic,
-		...(deviceRejected
-			? {
-					stages: [
-						offlineStagePassed(trace?.offlineVerdict),
-						{
-							stage: "device" as const,
-							source: deviceSource,
-							result: "failed" as const,
-						},
-					],
-				}
-			: {}),
+		stages: [
+			trace.offlineVerdict
+				? offlineStagePassed(trace.offlineVerdict)
+				: {
+						stage: "offline",
+						source: OFFLINE_GATE_SOURCE,
+						result: "skipped",
+						reason,
+					},
+			device,
+		],
 	};
 }
 
@@ -738,7 +775,7 @@ export function renderExecuteEnvelope(
 		case "text":
 			return envelope.ok
 				? renderExecuteSuccessText(envelope, options)
-				: renderExecuteErrorText(envelope, options);
+				: formatCentrsErrorText(envelope.error, options);
 		default:
 			return exhaustiveOutputFormat(format);
 	}
@@ -892,7 +929,16 @@ async function runSyntaxGate(
 	resolved: ResolvedExecuteRequest,
 	backend: ProtocolAdapter,
 ): Promise<void> {
-	const script = `:put [:parse ${routerOsStringLiteral(resolved.command)}]`;
+	await validateRouterOsScript(resolved.command, backend, resolved.via.value);
+}
+
+/** Shared live `:parse` stage for every surface that carries a CLI string. */
+export async function validateRouterOsScript(
+	command: string,
+	backend: ProtocolAdapter,
+	via: RouterOsProtocol,
+): Promise<void> {
+	const script = `:put [:parse ${routerOsStringLiteral(command)}]`;
 	try {
 		// GH#230: `:parse` never throws (CHR 7.23.3). The diagnostic rides the
 		// success value's text — over REST/native the `ret` field (HTTP 200 /
@@ -901,7 +947,7 @@ async function runSyntaxGate(
 		// Read the return and classify it: one `:parse` covers syntax and the
 		// unknown-attribute (name-level) gate.
 		const result = await backend.execute({ path: "", command: "", script });
-		classifyParseResult(result.ret ?? "", resolved.command, resolved.via.value);
+		classifyParseResult(result.ret ?? "", command, via);
 	} catch (error) {
 		// The preflight is a syntax gate, but `backend.execute` also surfaces
 		// connection and authentication failures (login happens lazily here).
@@ -922,12 +968,16 @@ async function runSyntaxGate(
 			code: "validation/syntax",
 			summary:
 				"RouterOS rejected the command syntax during `:parse` preflight.",
-			remediation:
-				"Fix the RouterOS CLI syntax, especially quotes and bracketed expressions, then retry.",
+			remediation: SYNTAX_REJECTED_REMEDIATION,
 			context: {
-				command: resolved.command,
+				command,
 				validationSource: ":put [:parse ...]",
-				via: resolved.via.value,
+				via,
+				// Keep RouterOS's own words from the mapped fault (GH#362).
+				...(error instanceof CentrsError &&
+				typeof error.context?.["detail"] === "string"
+					? { detail: error.context["detail"] }
+					: {}),
 			},
 			...(position ? { position } : {}),
 			cause: error,
@@ -1013,10 +1063,8 @@ function resolveExecuteProtocol(
 	cdb?: CdbResolution,
 	config: Record<string, string | undefined> = {},
 ): ResolvedSetting<RouterOsProtocol> {
-	const defaultVia = isUnresolvedMacTarget(request, env, cdb, config)
-		? "mac-telnet"
-		: "native-api";
-	const via = resolveStringSetting(
+	const defaultVia = defaultExecuteVia(request, env, cdb, config);
+	const resolvedVia = resolveStringSetting(
 		request.via,
 		env,
 		"CENTRS_VIA",
@@ -1026,12 +1074,20 @@ function resolveExecuteProtocol(
 		cdb?.overrides.via,
 		config,
 	);
+	// A URL-derived default names its reason, since native-api is the documented one.
+	const via =
+		resolvedVia?.source.kind === "default" && resolvedVia.value === "rest-api"
+			? {
+					...resolvedVia,
+					source: { kind: "default" as const, key: "via:target-url" },
+				}
+			: resolvedVia;
 	if (!via) {
 		throw new CentrsError({
 			code: "internal/unhandled",
 			summary: "Failed to resolve the default execute protocol.",
 			remediation:
-				"Report this bug; execute should default to native-api or mac-telnet.",
+				"Report this bug; execute should default to native-api, rest-api, or mac-telnet.",
 		});
 	}
 	if (!plannedProtocols.includes(via.value as RouterOsProtocol)) {
@@ -1065,23 +1121,25 @@ function resolveExecuteProtocol(
 	return via as ResolvedSetting<RouterOsProtocol>;
 }
 
-function isUnresolvedMacTarget(
+/**
+ * Execute's default transport when no tier pins `via`, decided from the
+ * *effective* target (host > CENTRS_HOST > CDB target > positional), not the
+ * positional alone — an IP supplied via --host/CENTRS_HOST must default to
+ * native-api even when the positional was a MAC. An unresolved MAC defaults to
+ * mac-telnet, and an explicit `http(s)://` base URL names the REST service, so
+ * its scheme and port are honored rather than dropped for native-api (#426).
+ */
+function defaultExecuteVia(
 	request: ExecuteRequest,
 	env: Record<string, string | undefined>,
 	cdb?: CdbResolution,
 	config: Record<string, string | undefined> = {},
-): boolean {
-	if (
-		request.via !== undefined ||
-		env["CENTRS_VIA"] !== undefined ||
-		config["CENTRS_VIA"] !== undefined
-	) {
-		return false;
+): RouterOsProtocol {
+	// A quickchr target's endpoint comes from its descriptor, so no host
+	// setting may steer its transport.
+	if (request.quickchr !== undefined) {
+		return "native-api";
 	}
-	// Decide the default transport from the *effective* target (host >
-	// CENTRS_HOST > CDB target > positional), not the positional alone — an IP
-	// supplied via --host/CENTRS_HOST must default to native-api even when the
-	// positional was a MAC.
 	const candidate = effectiveHostCandidate({
 		host: request.host,
 		targetInput: request.targetInput,
@@ -1089,7 +1147,13 @@ function isUnresolvedMacTarget(
 		env,
 		config,
 	});
-	return candidate ? isMacAddress(candidate) : false;
+	if (candidate === undefined) {
+		return "native-api";
+	}
+	if (isMacAddress(candidate)) {
+		return "mac-telnet";
+	}
+	return /^https?:\/\//i.test(candidate) ? "rest-api" : "native-api";
 }
 
 function resolveFormat(
@@ -1298,52 +1362,14 @@ function routerOsFailureFromResult(
 	result: ProtocolExecuteResult,
 	via: RouterOsProtocol,
 ): CentrsError | undefined {
-	const candidates = [
-		result.ret,
-		...result.records.flatMap((record) => [
-			record["detail"],
-			record["message"],
-			record["failure"],
-			record["error"],
-			record["ret"],
-		]),
-	].filter((value): value is string => typeof value === "string");
-	const failure = candidates.find((candidate) =>
-		isRouterOsFailureString(candidate),
-	);
-	return failure
-		? mapRouterOsError(failure, {
-				transport:
-					via === "rest-api" || via === "mac-telnet" || via === "ssh"
-						? via
-						: "native-api",
-				context: { via },
-			})
-		: undefined;
-}
-
-function isRouterOsFailureString(value: string): boolean {
-	const trimmed = value.trim();
-	// REST/native fault strings (unchanged).
-	if (
-		/^(failure:|error:)|unknown parameter|invalid value|session closed|\(:error; line \d+\)/i.test(
-			trimmed,
-		)
-	) {
-		return true;
-	}
-	// Console (mac-telnet) error forms. `ret` here is ordinary stdout (every
-	// mac-telnet command and REST `/execute`), so anchor to the grounded RouterOS
-	// error *shapes* — the `(line N column M)` source location for parse rejections
-	// — rather than bare phrases, so `:put "syntax error"` is not misread as a
-	// failure.
-	return (
-		/(?:^|\n)\s*(?:bad parameter \S+|syntax error)\b[^\n]*\(line \d+ column \d+\)/i.test(
-			trimmed,
-		) ||
-		/(?:^|\n)\s*bad command name\b/i.test(trimmed) ||
-		/(?:^|\n)\s*expected end of command\b/i.test(trimmed)
-	);
+	if (typeof result.ret !== "string") return undefined;
+	return mapRouterOsResultError(result.ret, {
+		transport:
+			via === "rest-api" || via === "mac-telnet" || via === "ssh"
+				? via
+				: "native-api",
+		context: { via },
+	});
 }
 
 function applyMaxResultsBudget(
@@ -1396,20 +1422,6 @@ function renderExecuteSuccessText(
 	return lines.join("\n");
 }
 
-function renderExecuteErrorText(
-	envelope: ExecuteErrorEnvelope,
-	options: { verbose?: boolean },
-): string {
-	const lines = [`[${envelope.error.code}] ${envelope.error.summary}`];
-	if (envelope.error.remediation) {
-		lines.push(`Fix: ${envelope.error.remediation}`);
-	}
-	if (options.verbose && envelope.error.context) {
-		lines.push("", JSON.stringify(envelope.error.context, null, 2));
-	}
-	return lines.join("\n");
-}
-
 function syntaxCause(error: unknown): unknown {
 	if (error instanceof CentrsError) {
 		return error.causeData ?? error.context ?? error.toJSON();

package/src/explain/catalog.ts

@@ -9,26 +9,28 @@
  * Union of two first-order sources (#228):
  *
  * 1. MikroTik's published CLI Reference (`https://manual.mikrotik.com/docs/cli-reference/`),
- *    1,053 pages, 1,060 entries — first-order about the definition
+ *    1,099 pages, 1,106 entries — first-order about the definition
  *    structs and their build-time gates. Since #285 every page is a leaf whose
  *    slug is the CLI path, so no spelling has to be rewritten to be looked up.
- * 2. 6 pinned restraml `/console/inspect` trees
+ * 2. 8 pinned restraml `/console/inspect` trees
  *    (`https://tikoci.github.io/restraml/`) — first-order about the CLI surface:
  *
  * | Tree | Arch | RouterOS | Nodes |
  * | ---- | ---- | -------- | ----- |
  * | `7.10.2/extra/inspect.json` | x86 | 7.10.2 | 29,086 |
  * | `7.16/extra/inspect.json` | x86 | 7.16 | 34,876 |
- * | `7.24.2/extra/deep-inspect.x86.json` | x86 | 7.24.2 | 41,345 |
- * | `7.24.2/extra/deep-inspect.arm64.json` | arm64 | 7.24.2 | 42,691 |
- * | `7.25beta3/extra/deep-inspect.x86.json` | x86 | 7.25beta3 | 41,798 |
- * | `7.25beta3/extra/deep-inspect.arm64.json` | arm64 | 7.25beta3 | 43,148 |
+ * | `7.24.4/extra/deep-inspect.x86.json` | x86 | 7.24.4 | 41,345 |
+ * | `7.24.4/extra/deep-inspect.arm64.json` | arm64 | 7.24.4 | 42,691 |
+ * | `7.25beta5/extra/deep-inspect.x86.json` | x86 | 7.25beta5 | 41,794 |
+ * | `7.25beta5/extra/deep-inspect.arm64.json` | arm64 | 7.25beta5 | 43,150 |
+ * | `7.26beta1/extra/deep-inspect.x86.json` | x86 | 7.26beta1 | 43,294 |
+ * | `7.26beta1/extra/deep-inspect.arm64.json` | arm64 | 7.26beta1 | 44,650 |
  *
  * | Kind | Total | `both` | `inspect` | `published` |
  * | ---- | ----- | ------ | --------- | ----------- |
- * | `menu` | 554 | 443 | 67 | 44 |
- * | `command` | 450 | 409 | 0 | 41 |
- * | `settings` | 116 | 107 | 0 | 9 |
+ * | `menu` | 568 | 457 | 67 | 44 |
+ * | `command` | 477 | 436 | 0 | 41 |
+ * | `settings` | 121 | 112 | 0 | 9 |
  *
  * Zero navigation-vs-command contradictions between the two sources. Generation
  * aborts if that ever stops holding, rather than picking a winner. Where a path
@@ -89,7 +91,7 @@ export interface CatalogEntry {
  * `path|kind|provenance|package|conditions|syscap` — with trailing empty
  * columns trimmed. Lower-cased, slash-led and sorted by path.
  *
- * Text rather than ~1,120 object literals so that one path is one line in a
+ * Text rather than ~1,166 object literals so that one path is one line in a
  * review diff, and so the formatter has nothing to re-wrap.
  */
 const ROWS = `
@@ -154,6 +156,38 @@ const ROWS = `
 /certificate/settings|settings|both
 /certificate/sign|command|both
 /certificate/sign-certificate-request|command|both
+/cmr|settings|both|cmr
+/cmr/alert|menu|both|cmr
+/cmr/alert/show-devices|command|both|cmr
+/cmr/alert/test|command|both|cmr
+/cmr/client|settings|both||!smips, !powerpc
+/cmr/client/forget|command|both||!smips, !powerpc
+/cmr/client/pair|command|both||!smips, !powerpc
+/cmr/client/push-button|command|both
+/cmr/device|menu|both|cmr
+/cmr/device/apptraffic|command|both|cmr
+/cmr/device/dashboard|command|both|cmr
+/cmr/device/pair|command|both|cmr
+/cmr/device/reboot|command|both|cmr
+/cmr/device/run-script|command|both|cmr
+/cmr/device/upgrade|command|both|cmr
+/cmr/device/wifi-logs|command|both|cmr
+/cmr/layout|menu|both|cmr
+/cmr/layout/add-devices|command|both|cmr
+/cmr/layout/link|menu|both|cmr
+/cmr/layout/node|menu|both|cmr
+/cmr/layout/rebuild-links|command|both|cmr
+/cmr/push-button|command|both
+/cmr/upgrade|menu|both|cmr
+/cmr/upgrade/job|menu|both|cmr
+/cmr/upgrade/job/run-next|command|both|cmr
+/cmr/upgrade/job/show-devices|command|both|cmr
+/cmr/upgrade/show-devices|command|both|cmr
+/cmr/upgrade/trigger|command|both|cmr
+/cmr/upgrade/version-check|command|both|cmr
+/cmr/vlan|menu|both|cmr
+/cmr/wifi|menu|both|cmr
+/cmr/wifi/radio|menu|both|cmr
 /console|menu|inspect
 /console/inspect|command|both
 /console/settings|settings|both
@@ -285,7 +319,8 @@ const ROWS = `
 /interface/ethernet/poe/monitor|command|published|||(poe or poe-in)
 /interface/ethernet/poe/power-cycle|command|published|||(poe or poe-in)
 /interface/ethernet/poe/settings|settings|published|||(poe or poe-in) and poesettings
-/interface/ethernet/pon|menu|inspect
+/interface/ethernet/pon|menu|both
+/interface/ethernet/pon/monitor|command|both
 /interface/ethernet/reset-counters|command|both
 /interface/ethernet/reset-mac-address|command|both
 /interface/ethernet/switch|menu|both
@@ -327,7 +362,8 @@ const ROWS = `
 /interface/ethernet/switch/reserved-fdb|menu|published|||musicswitch
 /interface/ethernet/switch/reset-counters|command|both
 /interface/ethernet/switch/rule|menu|both|||rbswitch
-/interface/ethernet/switch/rule/reset-counters|command|both|||rbswitch
+/interface/ethernet/switch/rule/reset-counters|command|both|||rbswitch and crs_prestera
+/interface/ethernet/switch/rule/reset-counters-all|command|published|||rbswitch and crs_prestera
 /interface/ethernet/switch/shaper|menu|published|||musicswitch
 /interface/ethernet/switch/stats|settings|published||!smips|musicswitch
 /interface/ethernet/switch/trunk|menu|published|||musicswitch
@@ -442,6 +478,11 @@ const ROWS = `
 /interface/wifi/capsman/remote-cap/upgrade|command|both
 /interface/wifi/channel|menu|both
 /interface/wifi/configuration|menu|both
+/interface/wifi/dashboard|menu|inspect
+/interface/wifi/dashboard/settings|settings|both
+/interface/wifi/dashboard/show|command|both
+/interface/wifi/dashboard/show-clients|command|both
+/interface/wifi/dashboard/show-logs|command|both
 /interface/wifi/datapath|menu|both
 /interface/wifi/devel|command|both
 /interface/wifi/flat-snoop|command|both
@@ -525,6 +566,7 @@ const ROWS = `
 /interface/wireless/sniffer/sniff|command|both|wireless-rep
 /interface/wireless/snooper|settings|both|wireless-rep
 /interface/wireless/snooper/flat-snoop|command|both|wireless-rep
+/interface/wireless/snooper/snoop|command|both|wireless-rep
 /interface/wireless/spectral-scan|command|both|wireless-rep
 /interface/wireless/wds|menu|both|wireless-rep
 /interface/wireless/wds/monitor|command|both|wireless-rep
@@ -744,7 +786,7 @@ const ROWS = `
 /ip/ssh|settings|both
 /ip/ssh/export-host-key|command|both
 /ip/ssh/import-host-key|command|both
-/ip/ssh/known-hosts|menu|inspect
+/ip/ssh/known-hosts|menu|both
 /ip/ssh/regenerate-host-key|command|both
 /ip/tftp|menu|both
 /ip/tftp/settings|settings|both
@@ -984,6 +1026,9 @@ const ROWS = `
 /system/clock/manual|settings|both
 /system/console|menu|both
 /system/console/screen|settings|both||i386
+/system/dashboard|menu|inspect
+/system/dashboard/settings|settings|both
+/system/dashboard/show|command|both
 /system/default-configuration|settings|both
 /system/default-configuration/caps-mode-script|settings|both
 /system/default-configuration/custom-script|settings|both
@@ -1062,10 +1107,9 @@ const ROWS = `
 /system/routerboard/mode-button|settings|both||!i386
 /system/routerboard/reset-button|settings|both||!i386
 /system/routerboard/settings|settings|both||!i386
-/system/routerboard/settings/keep-frequency|command|published||!i386, mipsel
 /system/routerboard/upgrade|command|both||!i386
-/system/routerboard/usb|settings|both||!i386, !i386, !mipsel, !powerpc
-/system/routerboard/usb/power-reset|command|both||!i386, !i386, !mipsel, !powerpc
+/system/routerboard/usb|settings|both||!i386, !i386, !powerpc
+/system/routerboard/usb/power-reset|command|both||!i386, !i386, !powerpc
 /system/routerboard/wps-button|settings|both||!i386
 /system/rtrace|settings|both
 /system/rtrace/start|command|both
@@ -1101,6 +1145,10 @@ const ROWS = `
 /task/terminate|command|both
 /terminal|menu|inspect
 /tool|menu|inspect
+/tool/apptraffic|settings|both||!mmips, !powerpc, !smips
+/tool/apptraffic/stats|menu|both||!mmips, !powerpc, !smips
+/tool/apptraffic/stats/categories|menu|both||!mmips, !powerpc, !smips
+/tool/apptraffic/stats/clear|command|both||!mmips, !powerpc, !smips
 /tool/bandwidth-server|settings|both
 /tool/bandwidth-server/session|menu|both
 /tool/bandwidth-test|command|both

package/src/explain/menus.ts

@@ -5,20 +5,22 @@
  * the drift gate. The generator (`scripts/gen-explain-menus.ts`) carries the
  * full rationale, the source pin, and why absence here is safe.
  *
- * Union of the `dir` and `path` nodes in 6 pinned restraml typed trees
+ * Union of the `dir` and `path` nodes in 8 pinned restraml typed trees
  * (`https://tikoci.github.io/restraml/`), all extra-packages builds:
  *
  * | Tree | Arch | RouterOS | Nodes | Containers |
  * | ---- | ---- | -------- | ----- | ---------- |
  * | `7.10.2/extra/inspect.json` | x86 | 7.10.2 | 29,086 | 458 |
  * | `7.16/extra/inspect.json` | x86 | 7.16 | 34,876 | 522 |
- * | `7.24.2/extra/deep-inspect.x86.json` | x86 | 7.24.2 | 41,345 | 554 |
- * | `7.24.2/extra/deep-inspect.arm64.json` | arm64 | 7.24.2 | 42,691 | 575 |
- * | `7.25beta3/extra/deep-inspect.x86.json` | x86 | 7.25beta3 | 41,798 | 557 |
- * | `7.25beta3/extra/deep-inspect.arm64.json` | arm64 | 7.25beta3 | 43,148 | 578 |
+ * | `7.24.4/extra/deep-inspect.x86.json` | x86 | 7.24.4 | 41,345 | 554 |
+ * | `7.24.4/extra/deep-inspect.arm64.json` | arm64 | 7.24.4 | 42,691 | 575 |
+ * | `7.25beta5/extra/deep-inspect.x86.json` | x86 | 7.25beta5 | 41,794 | 557 |
+ * | `7.25beta5/extra/deep-inspect.arm64.json` | arm64 | 7.25beta5 | 43,150 | 578 |
+ * | `7.26beta1/extra/deep-inspect.x86.json` | x86 | 7.26beta1 | 43,294 | 576 |
+ * | `7.26beta1/extra/deep-inspect.arm64.json` | arm64 | 7.26beta1 | 44,650 | 597 |
  *
  * Zero node-type conflicts across those trees — no `dir`↔`cmd` flip across
- * 4 versions or across architectures — which is what makes the union
+ * 5 versions or across architectures — which is what makes the union
  * version-less rather than version-keyed. Generation aborts if that ever stops
  * holding.
  *
@@ -57,6 +59,18 @@ export const MENU_PATHS: ReadonlySet<string> = new Set([
 	"/certificate/scep-server/ra",
 	"/certificate/scep-server/requests",
 	"/certificate/settings",
+	"/cmr",
+	"/cmr/alert",
+	"/cmr/client",
+	"/cmr/device",
+	"/cmr/layout",
+	"/cmr/layout/link",
+	"/cmr/layout/node",
+	"/cmr/upgrade",
+	"/cmr/upgrade/job",
+	"/cmr/vlan",
+	"/cmr/wifi",
+	"/cmr/wifi/radio",
 	"/console",
 	"/console/settings",
 	"/container",
@@ -183,6 +197,8 @@ export const MENU_PATHS: ReadonlySet<string> = new Set([
 	"/interface/wifi/capsman/remote-cap",
 	"/interface/wifi/channel",
 	"/interface/wifi/configuration",
+	"/interface/wifi/dashboard",
+	"/interface/wifi/dashboard/settings",
 	"/interface/wifi/datapath",
 	"/interface/wifi/interworking",
 	"/interface/wifi/network",
@@ -526,6 +542,8 @@ export const MENU_PATHS: ReadonlySet<string> = new Set([
 	"/system/clock/manual",
 	"/system/console",
 	"/system/console/screen",
+	"/system/dashboard",
+	"/system/dashboard/settings",
 	"/system/default-configuration",
 	"/system/default-configuration/caps-mode-script",
 	"/system/default-configuration/custom-script",
@@ -583,6 +601,9 @@ export const MENU_PATHS: ReadonlySet<string> = new Set([
 	"/task",
 	"/terminal",
 	"/tool",
+	"/tool/apptraffic",
+	"/tool/apptraffic/stats",
+	"/tool/apptraffic/stats/categories",
 	"/tool/bandwidth-server",
 	"/tool/bandwidth-server/session",
 	"/tool/calea",

package/src/explain.ts

@@ -108,7 +108,11 @@ import {
 	isWriteShaped,
 } from "./core/execute-command.ts";
 import { toYaml } from "./core/yaml.ts";
-import { CentrsError, serializeCentrsError } from "./errors.ts";
+import {
+	CentrsError,
+	formatCentrsErrorText,
+	serializeCentrsError,
+} from "./errors.ts";
 import { argSpans } from "./explain/arg-tokens.ts";
 import {
 	type ArgumentKind,
@@ -2495,11 +2499,7 @@ function renderExplainText(
 ): string {
 	const lines: string[] = [];
 	if (!envelope.ok) {
-		lines.push(`[${envelope.error.code}] ${envelope.error.summary}`);
-		if (envelope.error.remediation)
-			lines.push(`Fix: ${envelope.error.remediation}`);
-		if (envelope.error.detailsUrl)
-			lines.push(`Details: ${envelope.error.detailsUrl}`);
+		lines.push(formatCentrsErrorText(envelope.error));
 		lines.push(...tipLines(envelope.tips));
 		return lines.join("\n");
 	}