packet-tracer-skill 0.2.3 → 0.3.0

package/examples/local-sample-evidence.json

@@ -0,0 +1,24 @@
+{
+  "schema_version": "examples.truth.v2",
+  "source": "examples/local-sample-evidence.json",
+  "available": true,
+  "policy": "Local user-supplied samples are evidence inputs only, not curated donor truth or npm package content.",
+  "audit_source": "output/local-sample-audit.json",
+  "total_files": 367,
+  "decode_success_count": 366,
+  "decode_fail_count": 1,
+  "top_capabilities": [
+    {"capability": "stp", "sample_count": 348, "examples": ["09. 2Switches_3Routers_Rime_New.pkt", "1-Securing Network Devices and Establish a SSH Session.pkt", "10-IPv4 Static and Default Routes.pkt"]},
+    {"capability": "static_route", "sample_count": 87, "examples": ["09. 2Switches_3Routers_Rime_New.pkt", "10-IPv4 Static and Default Routes.pkt", "13.3.2 lab.pkt"]},
+    {"capability": "ripv2", "sample_count": 61, "examples": ["10routerEGIRP.pkt", "10RouterRIP.pkt", "13.3.2 lab.pkt"]},
+    {"capability": "default_route", "sample_count": 56, "examples": ["10-IPv4 Static and Default Routes.pkt", "13.3.2 lab.pkt", "23i2110.pkt"]},
+    {"capability": "ospfv2", "sample_count": 50, "examples": ["11-Single-Area OSPFv2.pkt", "13routerOSPF.pkt", "2020-06-18 OSPF.pkt"]},
+    {"capability": "dhcp_pool", "sample_count": 48, "examples": ["10PORTDHCP.pkt", "20211220 VoIP, PortSec, DHCP - finished.pkt", "6-DHCPv4.pkt"]},
+    {"capability": "acl", "sample_count": 40, "examples": ["13.3.2 lab.pkt", "2020-06-18 OSPF.pkt", "23i2110.pkt"]},
+    {"capability": "ssh_ios", "sample_count": 27, "examples": ["1-Securing Network Devices and Establish a SSH Session.pkt", "16.4.7 lab.pkt", "2020-05-16 AAA NTP For Learnersv3.pkt"]},
+    {"capability": "dhcp_relay", "sample_count": 24, "examples": ["2020-04-19 HSRP OGIT PT Lab.pkt", "2020-05-16 AAA NTP For Learnersv3.pkt", "2020-05-20 Routing  NTP and more WTW.pkt"]},
+    {"capability": "eigrp_ipv4", "sample_count": 22, "examples": ["10routerEGIRP.pkt", "13routerEigrp.pkt", "13routerEigrpFINALIZED.pkt"]},
+    {"capability": "etherchannel", "sample_count": 7, "examples": ["20211124 L2 EtherChannel, HSRP, OSPF - empty.pkt", "20211124 L2 EtherChannel, HSRP, OSPF - finished.pkt", "5-Implement Inter-VLAN Routing and Etherchannel.pkt"]},
+    {"capability": "bgp", "sample_count": 2, "examples": ["Cisco-networking-projects-main\\BGP\\BGP_3_Router\\BGP_3_ROUTERS.pkt", "Cisco-networking-projects-main\\BGP\\BGP_Class_C\\BGP_Class_C.pkt"]}
+  ]
+}

package/examples/proof-cards.json

@@ -0,0 +1,117 @@
+{
+  "schema_version": "examples.truth.v2",
+  "proof_cards": [
+    {
+      "schema_version": "examples.truth.v2",
+      "artifact_type": "proof_card",
+      "name": "ipv4_routing_management_edit_proof",
+      "title": "IPv4 Routing / NAT / IOS Management",
+      "scenario_family": "ipv4_routing_management",
+      "support_level": "edit_proven",
+      "capabilities": ["ospfv2", "eigrp_ipv4", "ripv2", "static_route", "default_route", "dhcp_relay", "nat_static", "nat_dynamic", "pat", "ssh_ios", "ntp_ios", "syslog_ios"],
+      "explicit_command": "set R1 ospfv2 1 network 10.0.0.0 wildcard 0.0.0.255 area 0",
+      "try_command": "set R1 ospfv2 1 network 10.0.0.0 wildcard 0.0.0.255 area 0",
+      "proof_doc": "docs/ipv4-routing-management-proof.md",
+      "parity_excerpt": "explicit IPv4 routing/NAT/IOS-management commands are edit_proven; generate_ready=false",
+      "refusal_boundary": "No topology synthesis, route convergence proof, ACL object inference, or broad NAT design generation.",
+      "does_not_claim": "No topology synthesis, route convergence proof, ACL object inference, or broad NAT design generation.",
+      "maturity_summary": {"atlas_status": "edit_proven", "example_status": "proof_card", "donor_backed_ready": false, "generate_ready": false}
+    },
+    {
+      "schema_version": "examples.truth.v2",
+      "artifact_type": "proof_card",
+      "name": "l2_resiliency_bgp_edit_proof",
+      "title": "L2 Resiliency + BGP",
+      "scenario_family": "l2_resiliency_routing",
+      "support_level": "edit_proven",
+      "capabilities": ["bgp", "stp", "rstp", "etherchannel", "lacp", "pagp", "vtp", "dtp"],
+      "explicit_command": "set SW1 etherchannel 1 mode active interfaces FastEthernet0/1 FastEthernet0/2",
+      "try_command": "set SW1 etherchannel 1 mode active interfaces FastEthernet0/1 FastEthernet0/2",
+      "proof_doc": "docs/l2-resiliency-bgp-proof.md",
+      "parity_excerpt": "explicit BGP/STP/EtherChannel/VTP/DTP IOS commands are edit_proven; generate_ready=false",
+      "refusal_boundary": "No redundant link creation, STP state validation, BGP convergence proof, or topology generation.",
+      "does_not_claim": "No redundant link creation, STP state validation, BGP convergence proof, or topology generation.",
+      "maturity_summary": {"atlas_status": "edit_proven", "example_status": "proof_card", "donor_backed_ready": false, "generate_ready": false}
+    },
+    {
+      "schema_version": "examples.truth.v2",
+      "artifact_type": "proof_card",
+      "name": "l2_security_qos_proof",
+      "title": "L2 Security + QoS",
+      "scenario_family": "l2_security_monitoring",
+      "support_level": "donor_backed_ready",
+      "capabilities": ["dot1x", "qos", "dhcp_snooping", "dai", "snmp", "netflow", "span"],
+      "explicit_command": "set SW1 dot1x interface FastEthernet0/1 mode auto radius 192.168.1.10 key radius123",
+      "try_command": "set SW1 dot1x interface FastEthernet0/1 mode auto radius 192.168.1.10 key radius123",
+      "proof_doc": "docs/l2-security-qos-proof.md",
+      "parity_excerpt": "dot1x is donor_backed_ready; QoS remains edit_proven; generate_ready=false",
+      "refusal_boundary": "No broad NAC design, RADIUS user synthesis, certificate workflow, or end-to-end QoS policy inference.",
+      "does_not_claim": "No broad NAC design, RADIUS user synthesis, certificate workflow, or end-to-end QoS policy inference.",
+      "maturity_summary": {"atlas_status": "donor_backed_ready", "example_status": "proof_card", "donor_backed_ready": true, "generate_ready": false}
+    },
+    {
+      "schema_version": "examples.truth.v2",
+      "artifact_type": "proof_card",
+      "name": "security_edge_deepening_proof",
+      "title": "Security Edge CBAC/ZFW",
+      "scenario_family": "wan_security_edge",
+      "support_level": "donor_backed_ready",
+      "capabilities": ["cbac", "zfw"],
+      "explicit_command": "set R1 zfw zone-pair INSIDE_OUT source inside destination outside policy POLICY1",
+      "try_command": "set R1 zfw zone-pair INSIDE_OUT source inside destination outside policy POLICY1",
+      "proof_doc": "docs/security-edge-deepening-proof.md",
+      "parity_excerpt": "ZFW is donor_backed_ready; CBAC remains edit_proven; generate_ready=false",
+      "refusal_boundary": "No ASA GUI/internal mutation, clientless VPN, service-policy synthesis, or broad security topology generation.",
+      "does_not_claim": "No ASA GUI/internal mutation, clientless VPN, service-policy synthesis, or broad security topology generation.",
+      "maturity_summary": {"atlas_status": "donor_backed_ready", "example_status": "proof_card", "donor_backed_ready": true, "generate_ready": false}
+    },
+    {
+      "schema_version": "examples.truth.v2",
+      "artifact_type": "proof_card",
+      "name": "voice_collaboration_proof",
+      "title": "Voice / Collaboration",
+      "scenario_family": "voice_collaboration",
+      "support_level": "donor_backed_ready",
+      "capabilities": ["voip", "ip_phone", "call_manager"],
+      "explicit_command": "set \"Router0\" telephony service source-address 192.168.10.1 port 2000 max-ephones 4 max-dn 4",
+      "try_command": "set \"Router0\" telephony service source-address 192.168.10.1 port 2000 max-ephones 4 max-dn 4",
+      "proof_doc": "docs/voice-collaboration-proof.md",
+      "parity_excerpt": "IOS telephony-service, ephone, and dial-peer paths are donor_backed_ready; generate_ready=false",
+      "refusal_boundary": "No Call Manager GUI synthesis, Linksys voice mutation, phone GUI internals, or broad VoIP topology generation.",
+      "does_not_claim": "No Call Manager GUI synthesis, Linksys voice mutation, phone GUI internals, or broad VoIP topology generation.",
+      "maturity_summary": {"atlas_status": "donor_backed_ready", "example_status": "proof_card", "donor_backed_ready": true, "generate_ready": false}
+    },
+    {
+      "schema_version": "examples.truth.v2",
+      "artifact_type": "proof_card",
+      "name": "automation_controller_proof",
+      "title": "Automation / Controller Scripts",
+      "scenario_family": "automation_controller",
+      "support_level": "donor_backed_ready",
+      "capabilities": ["python_programming", "javascript_programming", "tcp_udp_app"],
+      "explicit_command": "set \"Device\" script app \"App Name\" file \"main.py\" content \"print('hello')\"",
+      "try_command": "set \"Device\" script app \"App Name\" file \"main.py\" content \"print('hello')\"",
+      "proof_doc": "docs/automation-controller-proof.md",
+      "parity_excerpt": "existing Python, JavaScript, and TCP/UDP script files are donor_backed_ready; generate_ready=false",
+      "refusal_boundary": "No Network Controller GUI synthesis, Blockly graph mutation, VM/IOx workflow generation, or new app/file creation.",
+      "does_not_claim": "No Network Controller GUI synthesis, Blockly graph mutation, VM/IOx workflow generation, or new app/file creation.",
+      "maturity_summary": {"atlas_status": "donor_backed_ready", "example_status": "proof_card", "donor_backed_ready": true, "generate_ready": false}
+    },
+    {
+      "schema_version": "examples.truth.v2",
+      "artifact_type": "proof_card",
+      "name": "industrial_programming_proof",
+      "title": "Industrial Programming",
+      "scenario_family": "industrial_iot",
+      "support_level": "donor_backed_ready",
+      "capabilities": ["real_http", "real_websocket"],
+      "explicit_command": "set \"Py: real http server 2\" script app \"Real HTTP Server\" file \"main.py\" content \"print('updated')\"",
+      "try_command": "set \"Py: real http server 2\" script app \"Real HTTP Server\" file \"main.py\" content \"print('updated')\"",
+      "proof_doc": "docs/industrial-programming-proof.md",
+      "parity_excerpt": "Real HTTP and Real WebSocket script-file edits are donor_backed_ready; generate_ready=false",
+      "refusal_boundary": "No MQTT broker generation, Profinet/PTP/L2NAT mutation, CyberObserver workflow, or industrial topology generation.",
+      "does_not_claim": "No MQTT broker generation, Profinet/PTP/L2NAT mutation, CyberObserver workflow, or industrial topology generation.",
+      "maturity_summary": {"atlas_status": "donor_backed_ready", "example_status": "proof_card", "donor_backed_ready": true, "generate_ready": false}
+    }
+  ]
+}

package/examples/service_heavy_cli_edit_v1.inventory.json

@@ -1,11 +1,20 @@
 {
+  "schema_version": "examples.truth.v2",
   "example_name": "service_heavy_cli_edit_v1",
+  "artifact_type": "showcase_example",
   "source_mode": "donor-backed edit",
   "scenario_family": "service_heavy",
-  "public_repo_policy": {
+  "artifact_policy": {
     "commit_pkt_binary": false,
     "commit_inventory_json": true,
-    "commit_screenshot": false
+    "commit_screenshots": true,
+    "raw_source_public": false
+  },
+  "maturity_summary": {
+    "atlas_status": "known_working_example",
+    "example_status": "known_working_example",
+    "donor_backed_ready": true,
+    "generate_ready": false
   },
   "artifact_paths": {
     "inventory_json": "examples/service_heavy_cli_edit_v1.inventory.json",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "packet-tracer-skill",
-  "version": "0.2.3",
+  "version": "0.3.0",
   "private": false,
   "description": "Donor-backed Cisco Packet Tracer 9.x skill for natural-language planning, safe-open generation, editing, parity reporting, and runtime diagnostics across coding hosts.",
   "keywords": [
@@ -54,62 +54,69 @@
     "doctor": "node bin/packet-tracer-skill.js --doctor",
     "smoke:parity": "python scripts/generate_pkt.py --parity-report \"campus with VLAN DHCP ACL\""
   },
-  "files": [
-    "SKILL.md",
-    "LICENSE",
-    "LICENSES",
-    "README.md",
+  "files": [
+    "SKILL.md",
+    "LICENSE",
+    "LICENSES",
+    "README.md",
     "CONTRIBUTING.md",
     "CHANGELOG.md",
     "CITATION.cff",
     "SECURITY.md",
-    "CODE_OF_CONDUCT.md",
-    "requirements.txt",
-    "requirements-dev.txt",
-    "bin/packet-tracer-skill.js",
-    "scripts/*.py",
-    "scripts/*.ps1",
-    "scripts/vendor/README.md",
-    "scripts/vendor/twofish.py",
-    "templates",
-    "references/*.json",
-    "references/*.md",
-    "examples/README.md",
-    "examples/gallery.md",
-    "examples/index.json",
-    "examples/blueprint_minimal.json",
-    "examples/*.inventory.json",
-    "examples/screenshots/*.png",
-    "docs/curated-donor-registry.md",
-    "docs/campus-donor-proof.md",
-    "docs/home-iot-donor-proof.md",
-    "docs/wan-security-donor-proof.md",
-    "docs/wireless-advanced-proof.md",
-    "docs/industrial-programming-proof.md",
-    "docs/automation-controller-proof.md",
-    "docs/voice-collaboration-proof.md",
-    "docs/l2-resiliency-bgp-proof.md",
-    "docs/ipv4-routing-management-proof.md",
-    "docs/l2-security-qos-proof.md",
-    "docs/security-edge-deepening-proof.md",
-    "docs/generate-ready-pilot-design.md",
-    "docs/packet-tracer-feature-gap-atlas.md",
-    "docs/discovery-keywords.md",
-    "docs/github-discussions-setup.md",
-    "docs/github-launch-ops-0.2.1.md",
-    "docs/github-launch-ops-0.2.2.md",
-    "docs/github-metadata.md",
-    "docs/hero-demo-plan.md",
-    "docs/launch-announcement-0.2.1.md",
-    "docs/launch-announcement-0.2.2.md",
-    "docs/post-launch-follow-up.md",
-    "docs/publish-preview-roadmap.md",
-    "docs/release-checklist.md",
-    "docs/release-notes-0.2.1.md",
-    "docs/release-notes-0.2.2.md",
-    "docs/release-notes-0.2.3.md",
-    "docs/runtime-truth.md"
-  ],
+    "CODE_OF_CONDUCT.md",
+    "requirements.txt",
+    "requirements-dev.txt",
+    "pytest.ini",
+    "bin/packet-tracer-skill.js",
+    "scripts/*.py",
+    "scripts/*.ps1",
+    "scripts/vendor/README.md",
+    "scripts/vendor/twofish.py",
+    "scripts/vendor/twofish_pure.py",
+    "templates",
+    "references/*.json",
+    "references/*.md",
+    "examples/README.md",
+    "examples/gallery.md",
+    "examples/index.json",
+    "examples/proof-cards.json",
+    "examples/local-sample-evidence.json",
+    "examples/blueprint_minimal.json",
+    "examples/*.inventory.json",
+    "examples/screenshots/*.png",
+    "docs/curated-donor-registry.md",
+    "docs/campus-donor-proof.md",
+    "docs/home-iot-donor-proof.md",
+    "docs/wan-security-donor-proof.md",
+    "docs/wireless-advanced-proof.md",
+    "docs/industrial-programming-proof.md",
+    "docs/automation-controller-proof.md",
+    "docs/voice-collaboration-proof.md",
+    "docs/l2-resiliency-bgp-proof.md",
+    "docs/ipv4-routing-management-proof.md",
+    "docs/l2-security-qos-proof.md",
+    "docs/security-edge-deepening-proof.md",
+    "docs/generate-ready-pilot-design.md",
+    "docs/proof-readiness-dashboard.md",
+    "docs/packet-tracer-feature-gap-atlas.md",
+    "docs/discovery-keywords.md",
+    "docs/github-discussions-setup.md",
+    "docs/github-launch-ops-0.2.1.md",
+    "docs/github-launch-ops-0.2.2.md",
+    "docs/github-launch-ops-0.2.3.md",
+    "docs/github-metadata.md",
+    "docs/hero-demo-plan.md",
+    "docs/launch-announcement-0.2.1.md",
+    "docs/launch-announcement-0.2.2.md",
+    "docs/post-launch-follow-up.md",
+    "docs/publish-preview-roadmap.md",
+    "docs/release-checklist.md",
+    "docs/release-notes-0.2.1.md",
+    "docs/release-notes-0.2.2.md",
+    "docs/release-notes-0.2.3.md",
+    "docs/release-notes-0.2.4.md",
+    "docs/runtime-truth.md"
+  ],
   "engines": {
     "node": ">=18"
   }

package/pytest.ini

@@ -0,0 +1,9 @@
+[pytest]
+# Generated labs and their scratch installs live under `output/`, and a bare
+# `pytest` used to walk into them: a vendored `colorama` there ships its own
+# test files, so collection failed with 8 errors before a single test of this
+# repo ran. The suite lives in exactly one place, so say so.
+testpaths = tests
+norecursedirs = output .git .pydeps __pycache__ templates
+markers =
+    requires_twofish: test requires a local Packet Tracer Twofish bridge and real .pkt decode/edit runtime