get_router.read: SSH parse remainder (ports/vri n=0; cli listed)

[AdamRickards]

SSH remainder (split from #61)

Parent timeout: cleared on main 0cbe2cd (#225) — SSH status=ok.

Remain: ports/vri n=0 while mops/snmp have rows; cli lists show ip global, show ip interface, show port.

No device identity.

[AdamRickards]

Architect triage

Loop: schema / SSH overlay (live YAML) — not hang #92
Protocols: ssh
Orders:

• Schema clerk — confirm-only: for get_router, is SSH overlay/YAML missing, wrong wire, or wrong join (CLI parse vs declared shows)? Prefer existing schema/wire tools; no implement unless ordered. MIB + CLI JSON. Trail on this issue.
• 1.17 clerk — confirm-only: labeled ssh differential vs napalm-hios v1.17 for get_router (same-wire or diff). Own venv only; never 2.0 shim. No fix. Trail on this issue.
• Test bot — skip — live receipt already on body/parents

Leftover: SSH ports/vri n=0 with cli listed; timeout cleared
Named proof (later): POST {"name":"get_router.read","trace":true} — SSH status=ok with field leaving default or honest empty+raw; do not treat 2-of-3 as green.
Rails: no --gate; no device identity on public comments; one SSH ticket per leftover.

[AdamRickards]

Schema clerk — confirm-only triage

Flow: confirm-only triage (no implement)

Symptom (ssh): status=ok; ports/vri n=0 while other protocols have rows; cli lists show ip global, show ip interface, show port. Timeout cleared. Protocols: ssh only.

Declared SSH vs CLI.json:

• show ip global — HIT (routing_enabled)
• show ip interface — HIT (ip/netmask table cols only)
• No SSH sources for hm2agentswitchipinterfaceifindex (ports primary_key) or any VRI (hm2agentswitchipvlan*)

Classification: overlay missing — listed shows HIT but insufficient: ports lack SSH identity key; entire VRI table has no SSH overlay. Partial IP/netmask wire cannot form sub_tables alone. Not a timeout; not inventing mops/snmp winners.

Later hop (Schema soft): declare SSH overlay for port ifindex/key + VRI (existing overlay/declare tools); confirm show ip interface table key_column. Park until ordered.

[AdamRickards]

Decision trail (1.17 clerk — SSH confirm)

Flow: source review only (no live). Compare napalm-hios-1.17 for get_router vs schema + SSH overlay.

Ruled out: hang/#92 (timeout cleared on #225). Not a protocol pick. Not an extra 1.17 CLI (there is no 1.17 getter).

Tool: 1.17 tree (version.py = 1.17.0) rg over napalm_hios/*.py + crude_engine/schemas/router.yaml + crude_engine/wire/ssh/platform-routing.yaml. No live.

1.17 SSH: no get_router on SSH / MOPS / SNMP / facade (hios.py). Closest SSH neighbor is get_interfaces_ip (ssh_hios.py:803): CLI show ip interface → parse_table; skip 0.0.0.0/0.0.0.0; key by interface name. No show ip global. No VRI table.

YAML overlay (wire/ssh/platform-routing.yaml):

• hm2agentswitchiproutingmode: show ip global field Routing mode.
• ports IP/mask: show ip interface parser: table col 1 / col 2 (no key_column; schema primary_key: port_ifindex + key_map: ifindex implies extra show port join).
• routing_mode / proxy_arp / mtu / icmp / directed_broadcast: write-only.
• VRI wires (hm2agentswitchipvlanid / hm2agentswitchipvlanifindex) have no SSH overlay.

Verdict: differential (missing getter + missing VRI SSH + key join). 1.17 has no get_router. Overlay reads global + show ip interface but never VRI; ports keyed via ifindex join vs 1.17 name keys on the closest getter — leftover ports/vri n=0 with cli listed.

Leftover: ports/vri n=0 (not timeout). Not green until VRI has an SSH read and ports join matches a 1.17-shaped table (or getter is declared 1.17-absent).

[AdamRickards]

Architect assign — raw-cli ↔ gold ↔ 1.17 trace (HITL review)

Goal: lock bucket before implement — parse/primitives vs wrong wire vs honest SSH gap.

Orders (confirm / capture only — no YAML/engine fix this hop):

1. Test bot — sidecar trace:true named read; post: mops row/key summary (gold-shaped control), snmp one-liner if cheap, SSH cli raw (relevant shows), declared wire shows, current n/parity.
2. Schema — table: gold/MOPS field → present in raw cli? → declared SSH source → 1.17 ask (from 1.17 trail). Bucket: wrong join / wrong show / overlay missing / honest gap.
3. 1.17 — ssh-only: commands + shape vs crude declared; same-wire or differential (refresh if stale).

No 2-of-3 invent. No --gate. No device identity on GitHub. HITL will review the three trails together.

[AdamRickards]

Decision trail (1.17 clerk — HITL gold-pack SSH)

1. 1.17 shows used — no get_router on SSH/MOPS/SNMP/facade. Closest SSH neighbor get_interfaces_ip (ssh_hios.py:803): show ip interface only (L2 fallback show network parms). No show ip global. No VRI show.
2. 1.17 row shape — N/A for get_router. Neighbor returns dict keyed by interface name; parse_table; skip 0.0.0.0/0.0.0.0; nested ipv4 map — not Crude’s {routing_enabled, ports, vri} shape.
3. Crude declared SSH — wire/ssh/platform-routing.yaml: show ip global field Routing mode; ports IP/mask from show ip interface parser: table col 1/2; other port attrs write-only. Issue body also lists show port (ifindex join). VRI wires (hm2agentswitchipvlanid / hm2agentswitchipvlanifindex) — no SSH overlay.
4. Crude row shape — dict defaults; ports sub_table primary_key: port_ifindex + key_map: ifindex; vri sub_table primary_key: vri_vlan_id. Overlay table has no key_column → depends on ifindex join.
5. Verdict: differential — missing 1.17 getter + missing VRI SSH + ports key-join ≠ neighbor name keys; leftover ports/vri n=0 with cli listed.
6. Gold note: Test raw cli not yet on issue — align when Test raw cli lands. Expect Crude declare list: show ip global, show ip interface, show port. 1.17 has no matching getter shows for this method.

[AdamRickards]

Raw-cli ↔ gold MOPS ↔ 1.17 capture (Test, main d6b7876)

Confirm/capture only — no implement.

1) MOPS control

• top keys: ['routing_enabled', 'ports', 'vri']
• ports n=35, vri n=7 (addresses redacted in SSH dump below)

2) SNMP

• status=ok phase=None open_ms=809 call_ms=5447 n=3 err=None

3) SSH cli raw

show ip global

Default Time to Live........................64
Routing Mode................................enabled
Source Routing Mode.........................disabled
ICMP Rate Limit Interval(msec)..............1000
ICMP Rate Limit Burst Size..................100
ICMP Echo Replies...........................enabled
ICMP Redirects..............................enabled
Default preference for static routes........1
Number of routes............................10
Number of active routes.....................10
File-transfers global source-interface......none

show ip interface

Interface   IP Address       IP Mask                 
----------  ---------------- ---------- 
1/1         <ip>          <ip>        
1/2         <ip>          <ip>        
1/3         <ip>          <ip>        
1/4         <ip>          <ip>        
1/5         <ip>          <ip>        
1/6         <ip>          <ip>        
1/7         <ip>          <ip>        
1/8         <ip>          <ip>        
1/9         <ip>          <ip>        
1/10        <ip>          <ip>        
1/11        <ip>          <ip>        
1/12        <ip>          <ip>        
2/1         <ip>          <ip>        
2/2         <ip>          <ip>        
2/3         <ip>          <ip>        
2/4         <ip>          <ip>        
2/5         <ip>          <ip>        
2/6         <ip>          <ip>        
2/7         <ip>          <ip>        
2/8         <ip>          <ip>        
3/1         <ip>          <ip>        
3/2         <ip>          <ip>        
3/3         <ip>          <ip>        
3/4         <ip>          <ip>        
3/5         <ip>          <ip>        
3/6         <ip>          <ip>        
3/7         <ip>       <ip>
3/8         <ip>       <ip>
vlan/1      <ip>    <ip>  
vlan/2      <ip>   <ip>  
vlan/3      <ip>    <ip>  
vlan/6      <ip>    <ip>  
vlan/9      <ip>    <ip>  
vlan/60     <ip>   <ip>  
vlan/99     <ip>   <ip>

(empty command entry)

show port

Interface  Role      Admin mode  Phys. Mode  Cross  Phys. Stat  Link  STP state
Name                                                Trackname         Trackstate
---------  --------  ----------  ----------  -----  ----------  ----  ----------
1/1        -         enabled     2500 full   -      2500 full   up    manualFwd
                                                    -                 -         
1/2        -         enabled     2500 full   -      -           down  disabled
                                                    -                 -         
1/3        -         enabled     auto        auto   1000 full   up    manualFwd
                                                    -                 -         
1/4        -         enabled     auto        auto   1000 full   up    manualFwd
                                                    -                 -         
1/5        -         enabled     2500 full   -      -           down  disabled
                                                    -                 -         
1/6        -         enabled     2500 full   -      -           down  disabled
                                                    -                 -         
1/7        -         enabled     auto        auto   1000 full   up    manualFwd
                                                    -                 -         
1/8        -         enabled     auto        auto   10 full     up    manualFwd
                                                    -                 -         
1/9        -         enabled     auto        -      -           down  disabled
                                                    -                 -         
1/10       -         enabled     auto        -      -           down  disabled
                                                    -                 -         
1/11       -         enabled     auto        auto   1000 full   up    manualFwd
                                                    -                 -         
1/12       -         enabled     auto        auto   1000 full   up    manualFwd
                                                    -                 -         
2/1        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
2/2        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
2/3        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
2/4        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
2/5        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
2/6        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
2/7        -         enabled     auto        auto   100 full    up    manualFwd
                                                    -                 -         
2/8        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
3/1        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
3/2        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
3/3        -         enabled     auto        auto   1000 full   up    manualFwd
                                                    -                 -         
3/4        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
3/5        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
3/6        -         enabled     auto        auto   -           down  disabled
                                                    -                 -         
3/7        Router    enabled     auto        auto   1000 full   up    manualFwd
         
… truncated; full_len=5794

4) Declared SSH shows vs ran

• Declared (feature shows): ['show ip global', 'show ip interface']
• Ran: ['show ip global', 'show ip interface', 'show port']
• show ip global + show ip interface ran; also show port (shared). Formatted ssh ports/vri n=0.

5) parity_diffs / n

• top-level mops/snmp/ssh n=3
• parity: ['ports.row count: mops=35 vs ssh=0', 'vri.row count: mops=7 vs ssh=0', 'ports.row count: snmp=35 vs ssh=0', 'vri.row count: snmp=7 vs ssh=0']

No device identity on this trail.

[AdamRickards]

Schema HITL review pack (confirm-only)

Sources: issue cli + 1.17 trail on-issue (Test raw not yet refreshed).

Method: get_router · ssh-labeled · gold = schema defaults (router.yaml) · wire platform-routing · CLI.json HIT show ip global / show ip interface / show port. Leftover: ports/vri n=0.

gold/MOPS field	in raw SSH cli?	declared crude SSH source	1.17 ask (from 1.17 trail)
routing_enabled	unknown (snippet) — issue lists show ip global	hm2agentswitchiproutingmode ← show ip global field Routing mode	VRI/show ip global not in 1.17 getter
ports (sub_table; pk port_ifindex + key_map: ifindex)	unknown (snippet) — issue lists show ip interface + show port	IP/mask only; no SSH for hm2agentswitchipinterfaceifindex	no get_router in 1.17; closest get_interfaces_ip→show ip interface Intf/IP/Mask
ports[].ip_address	unknown (snippet)	hm2agentswitchipinterfaceipaddress ← show ip interface table col 1	closest: Intf/IP/Mask
ports[].netmask	unknown (snippet)	hm2agentswitchipinterfacenetmask ← show ip interface table col 2	closest: Intf/IP/Mask
ports[].routing_mode / proxy_arp / directed_broadcast / mtu / icmp_*	unknown (snippet)	write-only	not in 1.17 closest getter
vri (sub_table)	unknown (snippet)	no SSH overlay (hm2agentswitchipvlan*)	VRI/show ip global not in 1.17 getter
vri[].vlan_id / vri[].ifindex	unknown (snippet)	no SSH source	no 1.17 SSH ask

Bucket: overlay missing

[AdamRickards]

Schema HITL review pack (confirm-only) — refreshed

Sources: Test raw receipt (main d6b7876) + 1.17 ask (on-issue / steering).

Method: get_router · ssh-labeled · gold = schema defaults · wire platform-routing · CLI.json. Test: ran show ip global + show ip interface + show port; formatted ssh ports/vri n=0 vs mops ports 35 / vri 7.

gold/MOPS field	in raw SSH cli?	declared crude SSH source	1.17 ask (from 1.17 trail)
routing_enabled	yes — Routing Mode................................enabled	hm2agentswitchiproutingmode ← show ip global field Routing mode	VRI/show ip global not in 1.17 getter
ports identity (port_ifindex / key_map: ifindex)	no — no ifindex column; names only on show ip interface / show port	no SSH for hm2agentswitchipinterfaceifindex	no get_router in 1.17; closest get_interfaces_ip→show ip interface Intf/IP/Mask
ports[].ip_address	yes — IP Address col (redacted)	hm2agentswitchipinterfaceipaddress ← table col 1	closest: Intf/IP/Mask
ports[].netmask	yes — IP Mask col (redacted)	hm2agentswitchipinterfacenetmask ← table col 2	closest: Intf/IP/Mask
ports[].routing_mode / proxy_arp / directed_broadcast / mtu / icmp_*	no	write-only	not in 1.17 closest getter
vri / vri[].vlan_id / vri[].ifindex	no as VRI table — vlan/* appear only as Intf rows on show ip interface (no vlan_id/ifindex VRI cols)	no SSH overlay (hm2agentswitchipvlan*)	VRI/show ip global not in 1.17 getter

Bucket: overlay missing

[AdamRickards]

Test — Σ Execute pack WHERE (main 3106a94)

Named proof: sidecar get_router.read trace:true vs MOPS floor.

proto	status	n	cli
mops	ok	3	—
ssh	ok	3	show ip global, show ip interface, show port

Bucket: close-format. ports/vri still empty vs MOPS filled. Timeout cleared. No invent. No #92.

[AdamRickards]

Schema — Rank1 classify pass (Σ Resolve 2026-09-25)

• Flow: Rank1 classify → SOFT for ports (pk bind + key_column); leftover for vri (no SSH VRI table in raw).
• Ruled out: Engine; inventing VRI vlan_id/ifindex from vlan/* interface names; extra shows or fanout.
• Tool: wire/ssh/platform-routing.yaml new hm2agentswitchipinterfaceifindex read (col 0, type: string) + key_column: 0 on ip/mask. Offline _parse_table gives ifName keys. validate_schemas.py --errors → 0 errors (baseline).
• Receipt (before): ssh ports/vri n=0 vs mops 35/7. The pk port_ifindex had no SSH source.
• PR: schema(#228): SSH get_router ports pk bind + key_column 0 #382 · tip c5d7a7f
• Green / leftover: ports should fill with ifName keys and ip/netmask (Test proves). Leftover: vri is an honest SSH gap; routing_mode/proxy_arp/mtu/icmp are write-only.

Proof: python3 tests/release_matrix.py --inspect --method get_router --protocol ssh --trace --device

[AdamRickards]

Architect: #382 merged; ports are now 35/35/35 (was 0). Remaining leftovers: vri has no SSH source, plus mtu, icmp_unreachables/redirects, and routing_mode on routed rows. Staying open.