@tikoci/centrs 0.1.9-next.22 → 0.1.9-next.23

package/GLOSSARY.txt

@@ -206,6 +206,8 @@ tzsp
 TZSP
 UDP
 UIA
+# unscorable: a corpus observation with no device answer (failed/missing capture, unknown or ambiguous readout); `parseVerdict` in scripts/corpus-db.ts.
+unscorable
 uvx
 vcs
 venv
@@ -216,6 +218,8 @@ vrf
 webproxy
 WinAppDriver
 winbox
+# wiresage/routeros-lsp: third-party RouterOS checker; its 875 conformance cases are the corpus's `wiresage-conformance` collection (lsp-routeros-ts#42).
+wiresage
 Wireshark
 workstream
 workstreams
@@ -318,6 +322,9 @@ REUSEADDR
 # L2 bridge frame-parsing terms (test/integration/mndp-l2-bridge.ts):
 # ethertype: 16-bit EtherType field in an Ethernet frame (0x0800 = IPv4).
 ethertype
+# binpad: OpenSSL `BN_bn2binpad`, a big number as fixed-width big-endian bytes;
+#   MAC-Telnet's mtwei.c hashes EC-SRP `z` with it, btest does not (#516).
+binpad
 # ihl: IPv4 Internet Header Length (low nibble of the first byte, in 32-bit words).
 ihl
 # PIIX: Intel PCI-ISA bridge chipset QEMU emulates; shows up in CHR's REST board-name.
@@ -409,6 +416,16 @@ globalname
 localname
 setnote
 runnumber
+# addcomment/setcomment/setname/setdisabled/setnumbers/printdetail/pickbegin: the
+# same IL rendering, quoted as evidence for the spaced-argument rule (GH#350) —
+# "/interface set ether1 comment \"x\"" is "(evl /interface/setcomment=x;numbers=ether1)".
+addcomment
+setcomment
+setname
+setdisabled
+setnumbers
+printdetail
+pickbegin
 # unconfigured: a freshly-flashed RouterOS device with no IP — the mac-telnet use case.
 unconfigured
 unwired
@@ -783,6 +800,8 @@ dgram # Node's `node:dgram` UDP socket module — reached by `mac-telnet`, and o
 # pair, so its spelling is load-bearing and must not be "corrected".
 elsy # the misspelled `else` in `:if (1=1) do={…} elsy {…}` — rejected as `expected end of command` on CHR 7.21.5/7.23.5/7.24.2/7.25beta3, which is what proves the bare-brace `else {` acceptance is a real device fact and not a probe artifact (#347)
 prnt # a misspelt `print` verb — `/ip/address/prnt` is the offline analyzer's ABSTENTION fixture (`verdict: warn`, not `fail`), which is what proves the two-stage validation gate passes an abstention through to the device rather than refusing it (#354)
+zzznotanarg # an argument name no RouterOS command has — `/system/script add zzznotanarg beep` is `bad parameter zzznotanarg` (7.24.5) or `expected end of command` (7.22.1), which proves the device pairs a spaced `name value` against per-command schema (#350)
+zzzscript # a `…script`-shaped name no command has — `zzzscript={ :beep }` is a `syntax error` on CHR 7.22.1/7.24.5, the control for the script-body brace exemption (#350)
 zzznotamenu # a menu name no RouterOS build has — `/ip { zzznotamenu { print } }` is a `syntax error` on device, so menu-scope resolution is schema-dependent and a catalog MISS must abstain rather than accept (#348)
 
 # #361 absent-menu controls. Deliberate NON-words: each names a path no RouterOS
@@ -797,3 +816,8 @@ nochr # a CLI-Reference syscap that excludes CHR — `/system/license/output` is
 # #417 CLI Reference refresh (7.26beta1).
 cmr # MikroTik's optional `cmr` controller package and the `/cmr` menu tree it adds (7.26beta1); the catalog carries `package="cmr"` as its published gate, e.g. `/cmr/device/reboot` (#417)
 apptraffic # two paths new in 7.26beta1 with different published gates: the `/tool/apptraffic` settings menu (conditions `!mmips, !powerpc, !smips`) and the `/cmr/device/apptraffic` command (package `cmr`, no conditions) (#417)
+
+# #498 schema-5 corpus repin.
+rle # the corpus's `highlight-rle-v1` response encoding: each highlight stream stored as run-length `[class, count]` pairs, decoded by `decodeHighlightRuns` in scripts/corpus-db.ts (#498)
+removenumbers # the IL head `/ip/firewall/address-list/removenumbers=…` that `remove [find …]` renders as, quoted verbatim in the bracket-`=` corroboration test (#498)
+vscod # the last segment of a corpus path the forum importer truncated at its slug limit (`…-editors-like-vscod/post-0014-snippet-02.rsc`); cited as the path, so the spelling must match the corpus row (#498)

package/commands/execute/examples.md

@@ -530,6 +530,25 @@ has no `result`, `syntax` or `semantic`. Its stages are `offline: passed`, then
 `device: skipped` with `reason: "not reached: transport/auth-failed"`. RouterOS
 answered 401 before `:parse` could give a verdict.
 
+### V9. A stray `}` that RouterOS would silently discard is refused (#504)
+
+A `}` or `]` that closes nothing at the top level makes RouterOS accept the
+script and stop reading there: everything from that byte on is dropped without a
+word. `/system identity set name=a}` sets the identity to `a`. `explain` reports
+it as a `warning`, because nothing is rejected (`commands/explain/examples.md`
+example 42). The gate refuses that one warning by code, because the script the
+device would run is not the one that was written.
+
+```bash
+centrs execute $R ':put "first"};:put "second"' --via rest-api --username $U --password $P --json
+```
+
+Envelope: `ok: false`, `error.code=validation/syntax`,
+`error.context.validationStage="offline"`, `error.context.span` covering the `}`
+through the end of the input, and
+`error.context.diagnostics[0].code="explain/canonicalizer/discarded-close"`. With
+`--validate=false` the device runs it and prints only `first`.
+
 ## Write authorization and returned runtime faults
 
 These regressions are transport-independent and run in