@f5-sales-demo/xcsh 19.102.5 → 19.102.6

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5-sales-demo/xcsh",
-	"version": "19.102.5",
+	"version": "19.102.6",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5-sales-demo/xcsh",
 	"author": "Can Boluk",
@@ -57,13 +57,13 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@mozilla/readability": "^0.6",
-		"@f5-sales-demo/xcsh-stats": "19.102.5",
-		"@f5-sales-demo/pi-agent-core": "19.102.5",
-		"@f5-sales-demo/pi-ai": "19.102.5",
-		"@f5-sales-demo/pi-natives": "19.102.5",
-		"@f5-sales-demo/pi-resource-management": "19.102.5",
-		"@f5-sales-demo/pi-tui": "19.102.5",
-		"@f5-sales-demo/pi-utils": "19.102.5",
+		"@f5-sales-demo/xcsh-stats": "19.102.6",
+		"@f5-sales-demo/pi-agent-core": "19.102.6",
+		"@f5-sales-demo/pi-ai": "19.102.6",
+		"@f5-sales-demo/pi-natives": "19.102.6",
+		"@f5-sales-demo/pi-resource-management": "19.102.6",
+		"@f5-sales-demo/pi-tui": "19.102.6",
+		"@f5-sales-demo/pi-utils": "19.102.6",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.102.5",
-	"commit": "8a63bfb03a98e424c010b4176b65ed5583587dad",
-	"shortCommit": "8a63bfb",
+	"version": "19.102.6",
+	"commit": "983ca4f8d682745db27c890d634cb459fc7e3e32",
+	"shortCommit": "983ca4f",
 	"branch": "main",
-	"tag": "v19.102.5",
-	"commitDate": "2026-07-30T22:33:51Z",
-	"buildDate": "2026-07-30T23:00:45.450Z",
+	"tag": "v19.102.6",
+	"commitDate": "2026-07-31T01:44:23Z",
+	"buildDate": "2026-07-31T02:07:47.614Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5-sales-demo/xcsh",
 	"repoSlug": "f5-sales-demo/xcsh",
-	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/8a63bfb03a98e424c010b4176b65ed5583587dad",
-	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v19.102.5"
+	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/983ca4f8d682745db27c890d634cb459fc7e3e32",
+	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v19.102.6"
 };

package/src/prompts/system/workspace-boundary.md

@@ -1,15 +1,8 @@
 <workspace-boundary>
-This session may be scoped to a single customer. Treat the working directory as the scope of the
-work: what the task needs is inside it, and another customer's material is not yours to open here.
-- You **MUST NOT** range across the filesystem hunting for files, examples, or precedent. Search
-  within the working directory. Your own skills and plugins, and paths the operator granted
-  explicitly (`--allow-path`, `sandbox.allowRead`), are legitimate — and are not licence to browse
-  anywhere else.
-- Subdirectories may themselves be separate customers. Reachable does not mean in scope: work in
-  the one the task names, state the crossing when the task genuinely spans more than one, and
-  **MUST NOT** merge two customers' material into one artifact.
-- A sandbox confines this session's file access, but its boundary is the working directory, not the
-  customer subdirectory: nothing refuses a sibling, so the rule above is yours to keep. When the
-  sandbox is active a path outside the working directory is refused — that is the boundary working,
-  not a tool failure. Say what you needed and why, and **MUST NOT** reach the same path another way.
+Separate tenants may sit side by side — as subdirectories of the working directory, and anywhere
+else you can reach when filesystem isolation is off. Reaching something is not the same as it being
+in scope; keeping tenants apart is your judgment.
+- Work in the one the task names, and say so when the task genuinely spans more than one.
+- You **MUST NOT** open another tenant's material for context, examples, or precedent when the task
+  did not ask for it, and **MUST NOT** merge two tenants' material into one artifact.
 </workspace-boundary>

package/src/sandbox/containment.ts

@@ -543,7 +543,7 @@ export function buildContainmentFence(options: ContainmentOptions): ContainmentF
 	// ~30 carve-outs to make ordinary tooling work again — every one of them evidence the posture was wrong.
 	//
 	// What the walk still covers is the part that matters: every level between the workspace and home. With
-	// the workspace at `~/MEDDPICC/EQUIFAX`, `~/MEDDPICC` is denied so the `ACME` sibling is unreachable,
+	// the workspace at `~/MEDDPICC/CUSTOMER-A`, `~/MEDDPICC` is denied so the `CUSTOMER-B` sibling is unreachable,
 	// and with `<container>/<tenant>/repo` every level up to home is denied, so the v19.100.1 cross-tenant
 	// regression does not return.
 	//
@@ -620,7 +620,7 @@ export function buildContainmentFence(options: ContainmentOptions): ContainmentF
 	}
 
 	// Top-level directories that hold somebody's files. Without these the fence covered only home and
-	// the workspace's ancestors, so with the workspace at `~/MEDDPICC/EQUIFAX` another operator's
+	// the workspace's ancestors, so with the workspace at `~/MEDDPICC/CUSTOMER-A` another operator's
 	// account, an external volume and `/data/globex` were all readable AND writable — measured. The
 	// command-text scan was refusing them on the way in, which is exactly why that scan could not
 	// simply be stood down (#2624).