ciscollm-cli 1.0.1 → 1.0.2

package/dist/core/agent/PromptEngine.js.map

@@ -1 +1 @@
-{"version":3,"file":"PromptEngine.js","sourceRoot":"","sources":["../../../src/core/agent/PromptEngine.ts"],"names":[],"mappings":";;;AAAA,MAAa,YAAY;IACf,MAAM,CAAC,eAAe,CACvB,SAAiB,EACjB,wBAAgC,+BAA+B,EAC/D,sBAA+B,KAAK;QAErC,OAAO;;;;;;EAMb,SAAS;;;;;;gCAMqB,mBAAmB,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,0BAA0B;EACjI,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+OAkCwN,CAAC;IAC5O,CAAC;CACJ;AAvDD,oCAuDC"}
+{"version":3,"file":"PromptEngine.js","sourceRoot":"","sources":["../../../src/core/agent/PromptEngine.ts"],"names":[],"mappings":";;;AAAA,MAAa,YAAY;IACf,MAAM,CAAC,eAAe,CACvB,SAAiB,EACjB,wBAAgC,+BAA+B,EAC/D,sBAA+B,KAAK,EACpC,eAAuB,8BAA8B;QAEtD,OAAO;;;;;;;;;;;;;;;;EAgBb,SAAS;;;;;;gCAMqB,mBAAmB,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,0BAA0B;EACjI,qBAAqB;;;;;EAKrB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+OAmCiO,CAAC;IAC5O,CAAC;CACJ;AAxED,oCAwEC"}

package/dist/core/guardrails/AuditLogger.d.ts

@@ -0,0 +1,15 @@
+export interface AuditLogEntry {
+    timestamp: string;
+    deviceId: string;
+    role: string;
+    thought?: string;
+    command: string;
+    status: 'SUCCESS' | 'FAILED' | 'BLOCKED' | 'ROLLBACK';
+    outputSnippet?: string;
+    reason?: string;
+}
+export declare class AuditLogger {
+    private static logFile;
+    static setLogFile(filePath: string): void;
+    static log(entry: AuditLogEntry): void;
+}

package/dist/core/guardrails/AuditLogger.js

@@ -0,0 +1,66 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditLogger = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+class AuditLogger {
+    static logFile = path.resolve(process.cwd(), 'audit.log');
+    static setLogFile(filePath) {
+        this.logFile = path.resolve(process.cwd(), filePath);
+    }
+    static log(entry) {
+        const formattedTimestamp = entry.timestamp || new Date().toISOString();
+        const outputCleaned = entry.outputSnippet
+            ? entry.outputSnippet.replace(/\r?\n/g, ' ').substring(0, 100) + '...'
+            : '';
+        const thoughtCleaned = entry.thought
+            ? entry.thought.replace(/\r?\n/g, ' ').substring(0, 150) + '...'
+            : '';
+        const logMessage = `[${formattedTimestamp}] [Device: ${entry.deviceId}] [Role: ${entry.role.toUpperCase()}] [Status: ${entry.status}]
+  Thought: ${thoughtCleaned || 'N/A'}
+  Command: "${entry.command}"
+  Result:  ${outputCleaned || entry.reason || 'N/A'}
+--------------------------------------------------------------------------------\n`;
+        try {
+            fs.appendFileSync(this.logFile, logMessage, 'utf8');
+        }
+        catch (e) {
+            console.error('[AuditLogger Error]: Failed to write to audit log:', e);
+        }
+    }
+}
+exports.AuditLogger = AuditLogger;
+//# sourceMappingURL=AuditLogger.js.map

package/dist/core/guardrails/AuditLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditLogger.js","sourceRoot":"","sources":["../../../src/core/guardrails/AuditLogger.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAa7B,MAAa,WAAW;IACZ,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;IAE3D,MAAM,CAAC,UAAU,CAAC,QAAgB;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;IAGM,MAAM,CAAC,GAAG,CAAC,KAAoB;QAClC,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvE,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa;YACrC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK;YACtE,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO;YAChC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK;YAChE,CAAC,CAAC,EAAE,CAAC;QAET,MAAM,UAAU,GAAG,IAAI,kBAAkB,cAAc,KAAK,CAAC,QAAQ,YAAY,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,KAAK,CAAC,MAAM;aAC9H,cAAc,IAAI,KAAK;cACtB,KAAK,CAAC,OAAO;aACd,aAAa,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK;mFACgC,CAAC;QAE5E,IAAI,CAAC;YACD,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,oDAAoD,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;IACL,CAAC;;AA5BL,kCA6BC"}

package/dist/core/guardrails/CommandFirewall.js

@@ -47,6 +47,24 @@ class CommandFirewall {
     }
     checkCommand(command, currentInterfaceContext) {
         const normalized = command.toLowerCase().trim();
+        if (normalized.startsWith('no ip route 0.0.0.0') || normalized.startsWith('no ip route 0.0.0.0 0.0.0.0')) {
+            return {
+                dangerous: true,
+                reason: 'Attempting to remove the default static route (0.0.0.0/0) which may sever SSH/telnet connectivity.'
+            };
+        }
+        if (normalized.startsWith('no aaa new-model') || normalized.startsWith('crypto key zeroize')) {
+            return {
+                dangerous: true,
+                reason: 'Attempting to disable AAA security or zeroize crypto keys, which can lock out admin access.'
+            };
+        }
+        if (normalized.startsWith('no access-list') || normalized.startsWith('no ip access-group')) {
+            return {
+                dangerous: true,
+                reason: 'Attempting to remove or disable an access-list which could expose or lock the management interface.'
+            };
+        }
         const matchedDestructive = constants_1.DESTRUCTIVE_TOKENS.find(token => normalized.startsWith(token) || normalized.includes(` ${token}`));
         if (matchedDestructive) {
             return {
@@ -89,6 +107,12 @@ class CommandFirewall {
             p.startsWith(interfaceName));
     }
     async verifyWithHuman(command, reason) {
+        const isNonInteractive = process.env.CISCOLLM_NON_INTERACTIVE === 'true';
+        if (isNonInteractive) {
+            console.warn('\n' + chalk_1.default.bold.red(`⚠️  [GUARDRAIL BLOCK]: Non-interactive mode active. Automatically rejecting high-risk command: "${command}"`));
+            console.warn(`- Protection Rule Match:      ${chalk_1.default.cyan(reason)}\n`);
+            return false;
+        }
         const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
         return new Promise((resolve) => {
             console.warn('\n' + chalk_1.default.bold.red('⚠️  [GUARDRAIL WARNING]: High-Risk Command Blocked'));

package/dist/core/guardrails/CommandFirewall.js.map

@@ -1 +1 @@
-{"version":3,"file":"CommandFirewall.js","sourceRoot":"","sources":["../../../src/core/guardrails/CommandFirewall.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAAqC;AACrC,kDAA0B;AAC1B,sDAA0F;AAE1F,MAAa,eAAe;IAChB,mBAAmB,CAAW;IAEtC,YAAY,sBAAgC,wCAA4B;QACpE,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IAGM,YAAY,CAAC,OAAe,EAAE,uBAAsC;QACvE,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAGhD,MAAM,kBAAkB,GAAG,8BAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACvD,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CACnE,CAAC;QACF,IAAI,kBAAkB,EAAE,CAAC;YACrB,OAAO;gBACH,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,kCAAkC,kBAAkB,IAAI;aACnE,CAAC;QACN,CAAC;QAGD,MAAM,cAAc,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,IAAI,cAAc,EAAE,CAAC;YACjB,MAAM,iBAAiB,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YAEjE,IAAI,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzE,OAAO;oBACH,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,0DAA0D,cAAc,CAAC,CAAC,CAAC,EAAE;iBACxF,CAAC;YACN,CAAC;QACL,CAAC;QAGD,IAAI,uBAAuB,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,uBAAuB,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YAChE,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;oBAC5B,OAAO;wBACH,SAAS,EAAE,IAAI;wBACf,MAAM,EAAE,0DAA0D,uBAAuB,EAAE;qBAC9F,CAAC;gBACN,CAAC;gBACD,IAAI,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC/E,OAAO;wBACH,SAAS,EAAE,IAAI;wBACf,MAAM,EAAE,oEAAoE,uBAAuB,EAAE;qBACxG,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAChC,CAAC;IAEO,WAAW,CAAC,aAAqB;QAErC,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACrC,CAAC,KAAK,aAAa;YACnB,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3B,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAC9B,CAAC;IACN,CAAC;IAGM,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,MAAc;QACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAEtF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;YAC7F,OAAO,CAAC,IAAI,CAAC,iCAAiC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,iCAAiC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;YAE7F,EAAE,CAAC,QAAQ,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,iEAAiE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;gBACxG,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AApFD,0CAoFC"}
+{"version":3,"file":"CommandFirewall.js","sourceRoot":"","sources":["../../../src/core/guardrails/CommandFirewall.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAAqC;AACrC,kDAA0B;AAC1B,sDAA0F;AAE1F,MAAa,eAAe;IAChB,mBAAmB,CAAW;IAEtC,YAAY,sBAAgC,wCAA4B;QACpE,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IAGM,YAAY,CAAC,OAAe,EAAE,uBAAsC;QACvE,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAGhD,IAAI,UAAU,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACvG,OAAO;gBACH,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,oGAAoG;aAC/G,CAAC;QACN,CAAC;QAGD,IAAI,UAAU,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC3F,OAAO;gBACH,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,6FAA6F;aACxG,CAAC;QACN,CAAC;QAGD,IAAI,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACzF,OAAO;gBACH,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,qGAAqG;aAChH,CAAC;QACN,CAAC;QAED,MAAM,kBAAkB,GAAG,8BAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACvD,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CACnE,CAAC;QACF,IAAI,kBAAkB,EAAE,CAAC;YACrB,OAAO;gBACH,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,kCAAkC,kBAAkB,IAAI;aACnE,CAAC;QACN,CAAC;QAED,MAAM,cAAc,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,IAAI,cAAc,EAAE,CAAC;YACjB,MAAM,iBAAiB,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YAEjE,IAAI,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzE,OAAO;oBACH,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,0DAA0D,cAAc,CAAC,CAAC,CAAC,EAAE;iBACxF,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,uBAAuB,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,uBAAuB,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YAChE,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;oBAC5B,OAAO;wBACH,SAAS,EAAE,IAAI;wBACf,MAAM,EAAE,0DAA0D,uBAAuB,EAAE;qBAC9F,CAAC;gBACN,CAAC;gBACD,IAAI,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC/E,OAAO;wBACH,SAAS,EAAE,IAAI;wBACf,MAAM,EAAE,oEAAoE,uBAAuB,EAAE;qBACxG,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAChC,CAAC;IAEO,WAAW,CAAC,aAAqB;QACrC,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACrC,CAAC,KAAK,aAAa;YACnB,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3B,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAC9B,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,MAAc;QACxD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,MAAM,CAAC;QACzE,IAAI,gBAAgB,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,mGAAmG,OAAO,GAAG,CAAC,CAAC,CAAC;YACnJ,OAAO,CAAC,IAAI,CAAC,iCAAiC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtE,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAEtF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;YAC7F,OAAO,CAAC,IAAI,CAAC,iCAAiC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,iCAAiC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;YAE7F,EAAE,CAAC,QAAQ,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,iEAAiE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;gBACxG,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AA9GD,0CA8GC"}

package/dist/core/guardrails/PreExecutionValidator.d.ts

@@ -0,0 +1,9 @@
+import { NetworkTopology } from '../../shared/types';
+export interface ValidationResult {
+    safe: boolean;
+    warnLevel: 'INFO' | 'WARNING' | 'CRITICAL';
+    reason?: string;
+}
+export declare class PreExecutionValidator {
+    static validateCommand(command: string, deviceId: string, topology: NetworkTopology, currentInterfaceContext: string | null): ValidationResult;
+}

package/dist/core/guardrails/PreExecutionValidator.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PreExecutionValidator = void 0;
+class PreExecutionValidator {
+    static validateCommand(command, deviceId, topology, currentInterfaceContext) {
+        const normalized = command.toLowerCase().trim();
+        if (normalized.startsWith('no ip route 0.0.0.0') || normalized.startsWith('no ip route 0.0.0.0 0.0.0.0')) {
+            return {
+                safe: false,
+                warnLevel: 'CRITICAL',
+                reason: `Command attempts to remove the default gateway route. This will disconnect remote SSH/Telnet sessions.`
+            };
+        }
+        if (normalized.startsWith('router ospf') || normalized.startsWith('router bgp') || normalized.startsWith('router rip')) {
+            return {
+                safe: true,
+                warnLevel: 'WARNING',
+                reason: `Entering dynamic routing configuration mode. Incorrect network declarations can disrupt routing convergence across the backbone.`
+            };
+        }
+        const interfaceMatch = /^interface\s+([A-Za-z0-9\/\.\-]+)/i.exec(command.trim());
+        let targetedInterface = interfaceMatch ? interfaceMatch[1].toLowerCase().trim() : null;
+        if (currentInterfaceContext && !targetedInterface) {
+            targetedInterface = currentInterfaceContext.toLowerCase().trim();
+        }
+        if (targetedInterface && normalized.includes('shutdown')) {
+            const connectedLink = topology.links.find(link => (link.localDeviceId.toLowerCase() === deviceId.toLowerCase() && link.localInterface.toLowerCase() === targetedInterface) ||
+                (link.remoteDeviceId.toLowerCase() === deviceId.toLowerCase() && link.remoteInterface.toLowerCase() === targetedInterface));
+            if (connectedLink) {
+                const neighborId = connectedLink.localDeviceId.toLowerCase() === deviceId.toLowerCase()
+                    ? connectedLink.remoteDeviceId
+                    : connectedLink.localDeviceId;
+                return {
+                    safe: false,
+                    warnLevel: 'CRITICAL',
+                    reason: `Interface "${targetedInterface}" is actively connected to neighbor device "${neighborId}" via ${connectedLink.protocol.toUpperCase()}. Shutting it down will break network topology adjacency.`
+                };
+            }
+        }
+        if (targetedInterface && (normalized.startsWith('no ip address') || normalized.startsWith('ip address'))) {
+            const connectedLink = topology.links.find(link => (link.localDeviceId.toLowerCase() === deviceId.toLowerCase() && link.localInterface.toLowerCase() === targetedInterface) ||
+                (link.remoteDeviceId.toLowerCase() === deviceId.toLowerCase() && link.remoteInterface.toLowerCase() === targetedInterface));
+            if (connectedLink && normalized.startsWith('no ip address')) {
+                return {
+                    safe: false,
+                    warnLevel: 'CRITICAL',
+                    reason: `Removing IP address from "${targetedInterface}", which is an active network uplink to neighbor "${connectedLink.localDeviceId === deviceId ? connectedLink.remoteDeviceId : connectedLink.localDeviceId}".`
+                };
+            }
+        }
+        return {
+            safe: true,
+            warnLevel: 'INFO'
+        };
+    }
+}
+exports.PreExecutionValidator = PreExecutionValidator;
+//# sourceMappingURL=PreExecutionValidator.js.map

package/dist/core/guardrails/PreExecutionValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PreExecutionValidator.js","sourceRoot":"","sources":["../../../src/core/guardrails/PreExecutionValidator.ts"],"names":[],"mappings":";;;AAQA,MAAa,qBAAqB;IAEvB,MAAM,CAAC,eAAe,CACzB,OAAe,EACf,QAAgB,EAChB,QAAyB,EACzB,uBAAsC;QAEtC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAGhD,IAAI,UAAU,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACvG,OAAO;gBACH,IAAI,EAAE,KAAK;gBACX,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,wGAAwG;aACnH,CAAC;QACN,CAAC;QAGD,IAAI,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACrH,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,kIAAkI;aAC7I,CAAC;QACN,CAAC;QAED,MAAM,cAAc,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,IAAI,iBAAiB,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAEvF,IAAI,uBAAuB,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAChD,iBAAiB,GAAG,uBAAuB,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACrE,CAAC;QAED,IAAI,iBAAiB,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAEvD,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7C,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAAC;gBACxH,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAAC,CAC7H,CAAC;YAEF,IAAI,aAAa,EAAE,CAAC;gBAChB,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE;oBACnF,CAAC,CAAC,aAAa,CAAC,cAAc;oBAC9B,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC;gBAElC,OAAO;oBACH,IAAI,EAAE,KAAK;oBACX,SAAS,EAAE,UAAU;oBACrB,MAAM,EAAE,cAAc,iBAAiB,+CAA+C,UAAU,SAAS,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,2DAA2D;iBAC3M,CAAC;YACN,CAAC;QACL,CAAC;QAGD,IAAI,iBAAiB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACvG,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7C,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAAC;gBACxH,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAAC,CAC7H,CAAC;YAEF,IAAI,aAAa,IAAI,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC1D,OAAO;oBACH,IAAI,EAAE,KAAK;oBACX,SAAS,EAAE,UAAU;oBACrB,MAAM,EAAE,6BAA6B,iBAAiB,qDAAqD,aAAa,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,IAAI;iBACvN,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO;YACH,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,MAAM;SACpB,CAAC;IACN,CAAC;CACJ;AA5ED,sDA4EC"}

package/dist/core/rollback/StateDiff.d.ts

@@ -0,0 +1,47 @@
+import { SessionState } from '../../shared/types';
+export interface InterfaceStateSnapshot {
+    name: string;
+    ip: string | null;
+    subnet: string | null;
+    adminShutdown: boolean;
+    lineProtocolUp: boolean;
+    description: string | null;
+}
+export interface RoutingStateSnapshot {
+    network: string;
+    mask: string;
+    nextHop: string | null;
+}
+export interface DeviceStateSnapshot {
+    deviceId: string;
+    timestamp: string;
+    sessionState: SessionState;
+    interfaces: InterfaceStateSnapshot[];
+    routes: RoutingStateSnapshot[];
+    vlans: number[];
+}
+export interface StateDiffResult {
+    modifiedInterfaces: Array<{
+        name: string;
+        changes: Array<{
+            field: string;
+            before: any;
+            after: any;
+        }>;
+    }>;
+    addedRoutes: RoutingStateSnapshot[];
+    removedRoutes: RoutingStateSnapshot[];
+    addedVlans: number[];
+    removedVlans: number[];
+    hostnameChanged: {
+        before: string;
+        after: string;
+    } | null;
+}
+export declare class StateDiff {
+    static diff(before: DeviceStateSnapshot, after: DeviceStateSnapshot): StateDiffResult;
+    /**
+     * Helper to render the diff output as a readable table/string.
+     */
+    static renderDiff(diff: StateDiffResult): string;
+}

package/dist/core/rollback/StateDiff.js

@@ -0,0 +1,121 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StateDiff = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+class StateDiff {
+    static diff(before, after) {
+        const result = {
+            modifiedInterfaces: [],
+            addedRoutes: [],
+            removedRoutes: [],
+            addedVlans: [],
+            removedVlans: [],
+            hostnameChanged: null
+        };
+        if (before.sessionState.hostname !== after.sessionState.hostname) {
+            result.hostnameChanged = {
+                before: before.sessionState.hostname,
+                after: after.sessionState.hostname
+            };
+        }
+        for (const afterIntf of after.interfaces) {
+            const beforeIntf = before.interfaces.find(i => i.name === afterIntf.name);
+            if (!beforeIntf) {
+                result.modifiedInterfaces.push({
+                    name: afterIntf.name,
+                    changes: [{ field: 'created', before: null, after: true }]
+                });
+                continue;
+            }
+            const changes = [];
+            if (beforeIntf.ip !== afterIntf.ip)
+                changes.push({ field: 'ip', before: beforeIntf.ip, after: afterIntf.ip });
+            if (beforeIntf.subnet !== afterIntf.subnet)
+                changes.push({ field: 'subnet', before: beforeIntf.subnet, after: afterIntf.subnet });
+            if (beforeIntf.adminShutdown !== afterIntf.adminShutdown)
+                changes.push({ field: 'adminShutdown', before: beforeIntf.adminShutdown, after: afterIntf.adminShutdown });
+            if (beforeIntf.description !== afterIntf.description)
+                changes.push({ field: 'description', before: beforeIntf.description, after: afterIntf.description });
+            if (changes.length > 0) {
+                result.modifiedInterfaces.push({ name: afterIntf.name, changes });
+            }
+        }
+        for (const afterRoute of after.routes) {
+            const exists = before.routes.some(r => r.network === afterRoute.network && r.mask === afterRoute.mask && r.nextHop === afterRoute.nextHop);
+            if (!exists) {
+                result.addedRoutes.push(afterRoute);
+            }
+        }
+        for (const beforeRoute of before.routes) {
+            const exists = after.routes.some(r => r.network === beforeRoute.network && r.mask === beforeRoute.mask && r.nextHop === beforeRoute.nextHop);
+            if (!exists) {
+                result.removedRoutes.push(beforeRoute);
+            }
+        }
+        for (const vlan of after.vlans) {
+            if (!before.vlans.includes(vlan)) {
+                result.addedVlans.push(vlan);
+            }
+        }
+        for (const vlan of before.vlans) {
+            if (!after.vlans.includes(vlan)) {
+                result.removedVlans.push(vlan);
+            }
+        }
+        return result;
+    }
+    /**
+     * Helper to render the diff output as a readable table/string.
+     */
+    static renderDiff(diff) {
+        const lines = [];
+        if (diff.hostnameChanged) {
+            lines.push(chalk_1.default.cyan(`  Device Hostname Changed: `) + chalk_1.default.red(`"${diff.hostnameChanged.before}"`) + chalk_1.default.gray(' ➔ ') + chalk_1.default.green(`"${diff.hostnameChanged.after}"`));
+        }
+        if (diff.modifiedInterfaces.length > 0) {
+            lines.push(chalk_1.default.cyan('  Interface State Changes:'));
+            for (const item of diff.modifiedInterfaces) {
+                lines.push(chalk_1.default.bold.yellow(`    * ${item.name}:`));
+                for (const change of item.changes) {
+                    const beforeVal = change.before ?? 'unassigned';
+                    const afterVal = change.after ?? 'unassigned';
+                    let formattedLine = '';
+                    if (change.field === 'adminShutdown') {
+                        formattedLine = `      - shutdown: ` + (change.before ? chalk_1.default.red('YES') : chalk_1.default.green('NO')) + chalk_1.default.gray(' ➔ ') + (change.after ? chalk_1.default.red('YES') : chalk_1.default.green('NO'));
+                    }
+                    else {
+                        formattedLine = `      - ${change.field}: ` + chalk_1.default.red(`"${beforeVal}"`) + chalk_1.default.gray(' ➔ ') + chalk_1.default.green(`"${afterVal}"`);
+                    }
+                    lines.push(formattedLine);
+                }
+            }
+        }
+        if (diff.addedRoutes.length > 0) {
+            lines.push(chalk_1.default.green('  Routes Added (+)'));
+            for (const r of diff.addedRoutes) {
+                lines.push(chalk_1.default.green(`    + ip route ${r.network} ${r.mask} ${r.nextHop || ''}`));
+            }
+        }
+        if (diff.removedRoutes.length > 0) {
+            lines.push(chalk_1.default.red('  Routes Removed (-)'));
+            for (const r of diff.removedRoutes) {
+                lines.push(chalk_1.default.red(`    - ip route ${r.network} ${r.mask} ${r.nextHop || ''}`));
+            }
+        }
+        if (diff.addedVlans.length > 0) {
+            lines.push(chalk_1.default.green(`  VLANs Added (+): ${diff.addedVlans.join(', ')}`));
+        }
+        if (diff.removedVlans.length > 0) {
+            lines.push(chalk_1.default.red(`  VLANs Removed (-): ${diff.removedVlans.join(', ')}`));
+        }
+        if (lines.length === 0) {
+            return '  No configuration differences detected.';
+        }
+        return lines.join('\n');
+    }
+}
+exports.StateDiff = StateDiff;
+//# sourceMappingURL=StateDiff.js.map

package/dist/core/rollback/StateDiff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StateDiff.js","sourceRoot":"","sources":["../../../src/core/rollback/StateDiff.ts"],"names":[],"mappings":";;;;;;AACA,kDAA0B;AAsC1B,MAAa,SAAS;IAEX,MAAM,CAAC,IAAI,CAAC,MAA2B,EAAE,KAA0B;QACtE,MAAM,MAAM,GAAoB;YAC5B,kBAAkB,EAAE,EAAE;YACtB,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,EAAE;YACjB,UAAU,EAAE,EAAE;YACd,YAAY,EAAE,EAAE;YAChB,eAAe,EAAE,IAAI;SACxB,CAAC;QAGF,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,KAAK,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC/D,MAAM,CAAC,eAAe,GAAG;gBACrB,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ;gBACpC,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,QAAQ;aACrC,CAAC;QACN,CAAC;QAGD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;gBAEd,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC;oBAC3B,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;iBAC7D,CAAC,CAAC;gBACH,SAAS;YACb,CAAC;YAED,MAAM,OAAO,GAAsD,EAAE,CAAC;YACtE,IAAI,UAAU,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9G,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YAClI,IAAI,UAAU,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,CAAC,aAAa,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC;YACrK,IAAI,UAAU,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;YAE3J,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACtE,CAAC;QACL,CAAC;QAGD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC;YAC3I,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC;YAC7I,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3C,CAAC;QACL,CAAC;QAGD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,UAAU,CAAC,IAAqB;QAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,GAAG,eAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,eAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC/K,CAAC;QAED,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC;YACrD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;gBACrD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBAChC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,IAAI,YAAY,CAAC;oBAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,IAAI,YAAY,CAAC;oBAC9C,IAAI,aAAa,GAAG,EAAE,CAAC;oBACvB,IAAI,MAAM,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;wBACnC,aAAa,GAAG,oBAAoB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC9K,CAAC;yBAAM,CAAC;wBACJ,aAAa,GAAG,WAAW,MAAM,CAAC,KAAK,IAAI,GAAG,eAAK,CAAC,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,eAAK,CAAC,KAAK,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;oBACjI,CAAC;oBACD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC9B,CAAC;YACL,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACxF,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACjC,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACtF,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,0CAA0C,CAAC;QACtD,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;CACJ;AA/HD,8BA+HC"}

package/dist/core/rollback/TransactionManager.d.ts

@@ -1,6 +1,8 @@
 import { BaseSession } from '../../infrastructure/protocols/BaseSession';
 export declare class TransactionManager {
     private configChangeLog;
+    private mutationsWithContext;
+    private contextStack;
     private targetInterface;
     private backupCreated;
     private readonly backupFilename;

package/dist/core/rollback/TransactionManager.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.TransactionManager = void 0;
 class TransactionManager {
     configChangeLog = [];
+    mutationsWithContext = [];
+    contextStack = [];
     targetInterface = null;
     backupCreated = false;
     backupFilename = 'flash:backup-agent.cfg';
@@ -13,6 +15,12 @@ class TransactionManager {
             await session.execute('enable');
         }
         try {
+            console.log('[TransactionManager]: Checking flash storage reachability...');
+            const flashCheck = await session.execute('dir flash:');
+            if (flashCheck.includes('% Invalid') || flashCheck.includes('No such file') || flashCheck.includes('Error')) {
+                console.warn('[TransactionManager Warning]: Flash storage is not accessible or not found. Skipping backup creation.');
+                return;
+            }
             console.log('[TransactionManager]: Creating device running-config backup on flash...');
             const rawOutput = await session.execute(`copy running-config ${this.backupFilename}`);
             if (rawOutput.includes('Destination filename') || rawOutput.includes('?')) {
@@ -38,13 +46,52 @@ class TransactionManager {
         }
     }
     trackMutation(command) {
-        const cleanCmd = command.trim();
-        const interfaceMatch = /^interface\s+([A-Za-z0-9\/\.\-]+)/i.exec(cleanCmd);
-        if (interfaceMatch) {
-            this.targetInterface = interfaceMatch[1];
+        const clean = command.trim();
+        const lower = clean.toLowerCase();
+        if (lower.startsWith('interface ') || lower.startsWith('int ')) {
+            const parts = clean.split(/\s+/);
+            if (parts.length >= 2) {
+                if (this.contextStack.length > 0 && this.contextStack[this.contextStack.length - 1].startsWith('interface')) {
+                    this.contextStack.pop();
+                }
+                this.contextStack.push(`interface ${parts[1]}`);
+                this.targetInterface = parts[1];
+            }
+        }
+        else if (lower.startsWith('router ')) {
+            if (this.contextStack.length > 0 && this.contextStack[this.contextStack.length - 1].startsWith('router')) {
+                this.contextStack.pop();
+            }
+            this.contextStack.push(clean);
+        }
+        else if (lower.startsWith('line ')) {
+            if (this.contextStack.length > 0 && this.contextStack[this.contextStack.length - 1].startsWith('line')) {
+                this.contextStack.pop();
+            }
+            this.contextStack.push(clean);
+        }
+        else if (lower.startsWith('vlan ') && !lower.startsWith('no vlan ')) {
+            if (this.contextStack.length > 0 && this.contextStack[this.contextStack.length - 1].startsWith('vlan')) {
+                this.contextStack.pop();
+            }
+            this.contextStack.push(clean);
+        }
+        else if (lower === 'exit') {
+            this.contextStack.pop();
+            if (this.contextStack.length === 0 || !this.contextStack[this.contextStack.length - 1].startsWith('interface')) {
+                this.targetInterface = null;
+            }
+        }
+        else if (lower === 'end') {
+            this.contextStack = [];
+            this.targetInterface = null;
         }
-        if (this.isMutational(cleanCmd)) {
-            this.configChangeLog.push(cleanCmd);
+        if (this.isMutational(clean)) {
+            this.configChangeLog.push(clean);
+            this.mutationsWithContext.push({
+                command: clean,
+                contextStack: [...this.contextStack]
+            });
         }
     }
     isMutational(command) {
@@ -56,10 +103,25 @@ class TransactionManager {
             !lower.startsWith('configure terminal') &&
             !lower.startsWith('conf t') &&
             !lower.startsWith('copy') &&
-            !lower.startsWith('interface');
+            !lower.startsWith('interface') &&
+            !lower.startsWith('int ') &&
+            !lower.startsWith('router ') &&
+            !lower.startsWith('line ') &&
+            !lower.startsWith('vlan ');
     }
     async executeRollback(session) {
         console.warn('[TransactionManager]: Safety rollback triggered!');
+        const snapshotCapableSession = session;
+        if (snapshotCapableSession.restoreBackupSnapshot?.()) {
+            console.log('[TransactionManager]: Mock backup restore completed successfully.');
+            this.clear();
+            return 'Mock backup restore completed successfully.';
+        }
+        if (snapshotCapableSession.hasSnapshots?.() && snapshotCapableSession.restoreToInitialSnapshot?.()) {
+            console.log('[TransactionManager]: Mock snapshot restore completed successfully.');
+            this.clear();
+            return 'Mock snapshot restore completed successfully.';
+        }
         if (this.backupCreated) {
             try {
                 console.warn(`[TransactionManager]: Restoring running configuration atomically using ${this.backupFilename}...`);
@@ -82,46 +144,54 @@ class TransactionManager {
                 console.warn(`[TransactionManager Warning]: Atomic replace failed: ${err.message}. Falling back to command inversion.`);
             }
         }
-        console.warn(`[TransactionManager]: Executing manual inversion for ${this.configChangeLog.length} mutations...`);
+        console.warn(`[TransactionManager]: Executing manual inversion for ${this.mutationsWithContext.length} mutations...`);
         let rollbackSequence = ['configure terminal'];
-        if (this.targetInterface) {
-            rollbackSequence.push(`interface ${this.targetInterface}`);
-            for (const cmd of [...this.configChangeLog].reverse()) {
-                const clean = cmd.trim();
-                const lower = clean.toLowerCase();
-                if (lower.startsWith('ip address') || lower.startsWith('ip add')) {
-                    rollbackSequence.push('no ip address');
-                }
-                else if (lower.startsWith('shutdown')) {
-                    rollbackSequence.push('no shutdown');
-                }
-                else if (lower.startsWith('no shutdown')) {
-                    rollbackSequence.push('shutdown');
-                }
-                else if (lower.startsWith('description')) {
-                    rollbackSequence.push('no description');
-                }
-                else {
-                    if (lower.startsWith('no ')) {
-                        rollbackSequence.push(clean.substring(3));
-                    }
-                    else {
-                        rollbackSequence.push(`no ${clean}`);
+        let currentRollbackContext = [];
+        for (const item of [...this.mutationsWithContext].reverse()) {
+            const targetStack = item.contextStack;
+            let needsReentry = false;
+            if (currentRollbackContext.length !== targetStack.length) {
+                needsReentry = true;
+            }
+            else {
+                for (let i = 0; i < targetStack.length; i++) {
+                    if (currentRollbackContext[i] !== targetStack[i]) {
+                        needsReentry = true;
+                        break;
                     }
                 }
             }
-        }
-        else {
-            for (const cmd of [...this.configChangeLog].reverse()) {
-                const clean = cmd.trim();
-                const lower = clean.toLowerCase();
-                if (lower.startsWith('no ')) {
-                    rollbackSequence.push(clean.substring(3));
+            if (needsReentry) {
+                if (currentRollbackContext.length > 0) {
+                    rollbackSequence.push('exit');
                 }
-                else {
-                    rollbackSequence.push(`no ${clean}`);
+                for (const submode of targetStack) {
+                    rollbackSequence.push(submode);
                 }
+                currentRollbackContext = [...targetStack];
+            }
+            const clean = item.command;
+            const lower = clean.toLowerCase();
+            let inverseCmd = '';
+            if (lower.startsWith('ip address') || lower.startsWith('ip add')) {
+                inverseCmd = 'no ip address';
+            }
+            else if (lower.startsWith('shutdown')) {
+                inverseCmd = 'no shutdown';
+            }
+            else if (lower.startsWith('no shutdown')) {
+                inverseCmd = 'shutdown';
+            }
+            else if (lower.startsWith('description')) {
+                inverseCmd = 'no description';
+            }
+            else if (lower.startsWith('no ')) {
+                inverseCmd = clean.substring(3);
+            }
+            else {
+                inverseCmd = `no ${clean}`;
             }
+            rollbackSequence.push(inverseCmd);
         }
         rollbackSequence.push('end');
         let summary = '';
@@ -134,10 +204,12 @@ class TransactionManager {
     }
     clear() {
         this.configChangeLog = [];
+        this.mutationsWithContext = [];
+        this.contextStack = [];
         this.targetInterface = null;
     }
     hasMutations() {
-        return this.configChangeLog.length > 0;
+        return this.configChangeLog.length > 0 || this.mutationsWithContext.length > 0;
     }
 }
 exports.TransactionManager = TransactionManager;