@f5-sales-demo/xcsh 19.84.0 → 19.85.2

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5-sales-demo/xcsh",
-	"version": "19.84.0",
+	"version": "19.85.2",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5-sales-demo/xcsh",
 	"author": "Can Boluk",
@@ -56,13 +56,13 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5-sales-demo/xcsh-stats": "19.84.0",
-		"@f5-sales-demo/pi-agent-core": "19.84.0",
-		"@f5-sales-demo/pi-ai": "19.84.0",
-		"@f5-sales-demo/pi-natives": "19.84.0",
-		"@f5-sales-demo/pi-resource-management": "19.84.0",
-		"@f5-sales-demo/pi-tui": "19.84.0",
-		"@f5-sales-demo/pi-utils": "19.84.0",
+		"@f5-sales-demo/xcsh-stats": "19.85.2",
+		"@f5-sales-demo/pi-agent-core": "19.85.2",
+		"@f5-sales-demo/pi-ai": "19.85.2",
+		"@f5-sales-demo/pi-natives": "19.85.2",
+		"@f5-sales-demo/pi-resource-management": "19.85.2",
+		"@f5-sales-demo/pi-tui": "19.85.2",
+		"@f5-sales-demo/pi-utils": "19.85.2",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",

package/src/browser/chat-handler.ts

@@ -555,7 +555,19 @@ function titleFromUrl(url: string): string {
 	}
 }
 
-function extractReferences(msg: AssistantMessage): ChatReference[] {
+/**
+ * Trailing characters a bare-URL match may greedily swallow at a markdown/prose
+ * boundary — markdown emphasis + code (`*_~` and backtick) and sentence/wrap
+ * punctuation. A real URL effectively never ends in these, so trimming them yields
+ * the intended link (e.g. `**https://…/llms.txt**` or a code-wrapped
+ * `` `https://…/llms.txt` `` → `https://…/llms.txt`). The markdown-link branch is
+ * bounded by its closing `)` and needs no trimming.
+ */
+function trimTrailingMarkup(url: string): string {
+	return url.replace(/[*_~`,.;:!?'")\]}>]+$/, "");
+}
+
+export function extractReferences(msg: AssistantMessage): ChatReference[] {
 	const refs: ChatReference[] = [];
 	const seen = new Set<string>();
 
@@ -572,7 +584,7 @@ function extractReferences(msg: AssistantMessage): ChatReference[] {
 
 		const bareUrlRegex = /(?<!\()(https?:\/\/[^\s)>\]]+)/g;
 		for (let match = bareUrlRegex.exec(block.text); match !== null; match = bareUrlRegex.exec(block.text)) {
-			const url = match[1];
+			const url = trimTrailingMarkup(match[1]);
 			if (seen.has(url)) continue;
 			seen.add(url);
 			refs.push({ kind: classifyReferenceKind(url), title: titleFromUrl(url), url });

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.84.0",
-	"commit": "61adb144f98de4a4989e874a9c8b6641effc3b52",
-	"shortCommit": "61adb14",
+	"version": "19.85.2",
+	"commit": "a068b469d7c985c518847bf2862acabc1605f490",
+	"shortCommit": "a068b46",
 	"branch": "main",
-	"tag": "v19.84.0",
-	"commitDate": "2026-07-23T14:56:34Z",
-	"buildDate": "2026-07-23T15:21:30.427Z",
+	"tag": "v19.85.2",
+	"commitDate": "2026-07-23T18:30:49Z",
+	"buildDate": "2026-07-23T18:54:23.656Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5-sales-demo/xcsh",
 	"repoSlug": "f5-sales-demo/xcsh",
-	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/61adb144f98de4a4989e874a9c8b6641effc3b52",
-	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v19.84.0"
+	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/a068b469d7c985c518847bf2862acabc1605f490",
+	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v19.85.2"
 };

package/src/sdk.ts

@@ -112,6 +112,7 @@ import { SessionManager } from "./session/session-manager";
 import { closeAllConnections } from "./ssh/connection-manager";
 import { unmountAll } from "./ssh/sshfs-mount";
 import {
+	buildAgentsMdSearch,
 	buildSystemPrompt as buildSystemPromptInternal,
 	buildSystemPromptToolMetadata,
 	loadProjectContextFiles as loadContextFilesInternal,
@@ -965,6 +966,11 @@ export async function createAgentSession(options: CreateAgentSessionOptions = {}
 		async () => options.contextFiles ?? (await discoverContextFiles(cwd, agentDir)),
 	);
 
+	// Walk the CWD for nested XCSH.md ONCE per session — the walk is bounded but not
+	// free, so hoisting it here keeps every tool-refresh prompt rebuild off the tree
+	// (a large cwd like $HOME must never re-stall on set_host_tools). #2245.
+	const agentsMdSearch = await logger.time("buildAgentsMdSearch", buildAgentsMdSearch, cwd);
+
 	let agent: Agent;
 	let session!: AgentSession;
 	let hasSession = false;
@@ -1596,6 +1602,7 @@ export async function createAgentSession(options: CreateAgentSessionOptions = {}
 				cwd,
 				skills,
 				contextFiles,
+				agentsMdSearch,
 				tools: promptTools,
 				toolNames,
 				rules: rulebookRules,
@@ -1626,6 +1633,7 @@ export async function createAgentSession(options: CreateAgentSessionOptions = {}
 					cwd,
 					skills,
 					contextFiles,
+					agentsMdSearch,
 					tools: promptTools,
 					toolNames,
 					rules: rulebookRules,

package/src/system-prompt.ts

@@ -108,15 +108,30 @@ const AGENTS_MD_MIN_DEPTH = 1;
 const AGENTS_MD_MAX_DEPTH = 4;
 const AGENTS_MD_LIMIT = 200;
 const SYSTEM_PROMPT_PREP_TIMEOUT_MS = 5000;
+// The walk's `limit` caps DISCOVERED files, not directories VISITED — so a dir
+// with ~no XCSH.md (e.g. serving from $HOME) would otherwise traverse the entire
+// tree to AGENTS_MD_MAX_DEPTH and stall prep. These bound the traversal itself:
+// a directory-visit budget AND a wall-clock deadline, both well inside the 5s
+// prep timeout, so discovery stays fast regardless of how few matches exist.
+const AGENTS_MD_MAX_DIRS = 4000;
+const AGENTS_MD_WALK_BUDGET_MS = 1500;
 const AGENTS_MD_EXCLUDED_DIRS = new Set(["node_modules", ".git"]);
 
-interface AgentsMdSearch {
+/** A cited context-file search result (the nested XCSH.md files under the cwd). */
+export interface AgentsMdSearch {
 	scopePath: string;
 	limit: number;
 	pattern: string;
 	files: string[];
 }
 
+/** Mutable traversal budget shared across the recursive walk. */
+interface WalkBudget {
+	readonly maxDirs: number;
+	readonly deadline: number;
+	dirsVisited: number;
+}
+
 function normalizePath(value: string): string {
 	return value.replace(/\\/g, "/");
 }
@@ -131,11 +146,24 @@ async function collectAgentsMdFiles(
 	dir: string,
 	depth: number,
 	limit: number,
+	maxDepth: number,
 	discovered: Set<string>,
+	budget: WalkBudget,
 ): Promise<void> {
-	if (depth > AGENTS_MD_MAX_DEPTH || discovered.size >= limit) {
+	// Stop on any bound: depth, enough matches, the directory-visit budget, or the
+	// wall-clock deadline. The last two keep a match-poor tree (e.g. $HOME) bounded.
+	if (
+		depth > maxDepth ||
+		discovered.size >= limit ||
+		budget.dirsVisited >= budget.maxDirs ||
+		Date.now() >= budget.deadline
+	) {
 		return;
 	}
+	// Reserve this directory's slot SYNCHRONOUSLY (before the readdir await) so a
+	// concurrent Promise.all fan-out can't blow past the budget: every scheduled
+	// sibling sees the updated count before it yields, making the cap effectively hard.
+	budget.dirsVisited++;
 
 	let entries: fs.Dirent[];
 	try {
@@ -157,7 +185,7 @@ async function collectAgentsMdFiles(
 		}
 	}
 
-	if (depth === AGENTS_MD_MAX_DEPTH) {
+	if (depth === maxDepth) {
 		return;
 	}
 
@@ -168,24 +196,47 @@ async function collectAgentsMdFiles(
 
 	await Promise.all(
 		childDirs.map(async child => {
-			if (discovered.size >= limit) return;
-			await collectAgentsMdFiles(root, path.join(dir, child), depth + 1, limit, discovered);
+			if (discovered.size >= limit || budget.dirsVisited >= budget.maxDirs || Date.now() >= budget.deadline) return;
+			await collectAgentsMdFiles(root, path.join(dir, child), depth + 1, limit, maxDepth, discovered, budget);
 		}),
 	);
 }
 
-async function listAgentsMdFiles(root: string, limit: number): Promise<string[]> {
+/** Options for {@link discoverAgentsMdFiles} (all bounded by defaults). */
+export interface DiscoverAgentsMdOptions {
+	limit?: number;
+	maxDepth?: number;
+	maxDirs?: number;
+	budgetMs?: number;
+}
+
+/**
+ * Walk `root` (bounded by depth, match-limit, directory budget, and a wall-clock
+ * deadline) collecting nested `XCSH.md` paths. Returns the sorted matches plus the
+ * number of directories visited (for observability/tests). Never throws.
+ */
+export async function discoverAgentsMdFiles(
+	root: string,
+	opts: DiscoverAgentsMdOptions = {},
+): Promise<{ files: string[]; dirsVisited: number }> {
+	const limit = opts.limit ?? AGENTS_MD_LIMIT;
+	const maxDepth = opts.maxDepth ?? AGENTS_MD_MAX_DEPTH;
+	const budget: WalkBudget = {
+		maxDirs: opts.maxDirs ?? AGENTS_MD_MAX_DIRS,
+		deadline: Date.now() + (opts.budgetMs ?? AGENTS_MD_WALK_BUDGET_MS),
+		dirsVisited: 0,
+	};
 	try {
 		const discovered = new Set<string>();
-		await collectAgentsMdFiles(root, root, 0, limit, discovered);
-		return Array.from(discovered).sort().slice(0, limit);
+		await collectAgentsMdFiles(root, root, 0, limit, maxDepth, discovered, budget);
+		return { files: Array.from(discovered).sort().slice(0, limit), dirsVisited: budget.dirsVisited };
 	} catch {
-		return [];
+		return { files: [], dirsVisited: budget.dirsVisited };
 	}
 }
 
-async function buildAgentsMdSearch(cwd: string): Promise<AgentsMdSearch> {
-	const files = await listAgentsMdFiles(cwd, AGENTS_MD_LIMIT);
+export async function buildAgentsMdSearch(cwd: string): Promise<AgentsMdSearch> {
+	const { files } = await discoverAgentsMdFiles(cwd);
 	return {
 		scopePath: ".",
 		limit: AGENTS_MD_LIMIT,
@@ -449,6 +500,9 @@ export interface BuildSystemPromptOptions {
 	cwd?: string;
 	/** Pre-loaded context files (skips discovery if provided). */
 	contextFiles?: Array<{ path: string; content: string; depth?: number }>;
+	/** Pre-computed nested-XCSH.md search (skips the CWD walk if provided). Hoisted
+	 *  once per session so tool-refresh rebuilds never re-walk the tree. */
+	agentsMdSearch?: AgentsMdSearch;
 	/**
 	 * Explicit disabled extension IDs applied to context-file discovery instead of the
 	 * global settings default. Pass `[]` to discover independent of process-wide settings.
@@ -519,6 +573,7 @@ export async function buildSystemPrompt(options: BuildSystemPromptOptions = {}):
 		toolNames: providedToolNames,
 		cwd,
 		contextFiles: providedContextFiles,
+		agentsMdSearch: providedAgentsMdSearch,
 		skills: providedSkills,
 		rules,
 		alwaysApplyRules,
@@ -541,7 +596,9 @@ export async function buildSystemPrompt(options: BuildSystemPromptOptions = {}):
 					cwd: resolvedCwd,
 					disabledExtensions: options.disabledExtensions,
 				});
-		const agentsMdSearchPromise = logger.time("buildAgentsMdSearch", buildAgentsMdSearch, resolvedCwd);
+		const agentsMdSearchPromise = providedAgentsMdSearch
+			? Promise.resolve(providedAgentsMdSearch)
+			: logger.time("buildAgentsMdSearch", buildAgentsMdSearch, resolvedCwd);
 		const mergedSkillsSettings = {
 			...skillsSettings,
 			customDirectories: [...(skillsSettings?.customDirectories ?? []), ...(options.contextSkillDirs ?? [])],