infracensus-collector 1.6.1 → 1.6.2

package/dist/index.js

@@ -1198,6 +1198,22 @@ function cleanCommandOutput(raw, command, prompt) {
   }
   return lines2.join("\n");
 }
+var ENABLE_DETAIL = {
+  /** The session never settled — there was no prompt to elevate FROM. */
+  noPrompt: "the session never returned a usable prompt",
+  /**
+   * It asked, we answered, it stayed in user mode: the secret is wrong.
+   * `enablePassword` falls back to the LOGIN password when a credential
+   * carries no enable field, so "nothing was supplied" and "the wrong thing
+   * was" reach the device identically — and the fix differs, which is the
+   * whole reason these are two sentences.
+   */
+  borrowedLoginPasswordRejected: "this credential carries no enable secret, so the login password was offered instead and the device refused it",
+  /** It asked, we answered with this credential's own secret, it refused. */
+  secretRejected: "the device rejected this credential's enable secret",
+  /** It never asked at all — the account is not permitted to elevate. */
+  neverAsked: "the device never asked to be unlocked and stayed in user mode \u2014 the account is probably not permitted to enable"
+};
 async function gatherViaShell(conn, commands, perCommandTimeoutMs, signal, enablePassword, onDebug, usedLoginPasswordAsSecret = false) {
   const stream = await openShell(conn);
   let buf = "";
@@ -1231,7 +1247,7 @@ async function gatherViaShell(conn, commands, perCommandTimeoutMs, signal, enabl
     stream.write("\r");
     let prompt = await readUntilPrompt(8e3);
     let elevated = prompt != null && prompt.endsWith("#");
-    if (prompt === null) enableDetail = "the session never returned a usable prompt";
+    if (prompt === null) enableDetail = ENABLE_DETAIL.noPrompt;
     if (prompt && prompt.endsWith(">")) {
       buf = "";
       stream.write("enable\r");
@@ -1251,14 +1267,7 @@ async function gatherViaShell(conn, commands, perCommandTimeoutMs, signal, enabl
       }
       elevated = prompt != null && prompt.endsWith("#");
       if (!elevated) {
-        enableDetail = askedForSecret ? (
-          // It asked and we answered, and it stayed in user mode: the secret is
-          // wrong. `enablePassword` falls back to the LOGIN password when the
-          // credential carries no enable field, so "no enable secret was
-          // supplied" and "the wrong one was" reach the device identically —
-          // and the fix differs.
-          usedLoginPasswordAsSecret ? "the device asked for an enable secret and rejected the login password \u2014 this credential carries no enable secret of its own" : "the device rejected the enable secret on this credential"
-        ) : "the device never asked for an enable secret and stayed in user mode \u2014 the account is probably not permitted to enable";
+        enableDetail = askedForSecret ? usedLoginPasswordAsSecret ? ENABLE_DETAIL.borrowedLoginPasswordRejected : ENABLE_DETAIL.secretRejected : ENABLE_DETAIL.neverAsked;
         onDebug?.(`enable did not elevate (${enableDetail})`);
       }
     }