@f5-sales-demo/xcsh 19.98.2 → 19.98.3

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5-sales-demo/xcsh",
-	"version": "19.98.2",
+	"version": "19.98.3",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5-sales-demo/xcsh",
 	"author": "Can Boluk",
@@ -57,13 +57,13 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@mozilla/readability": "^0.6",
-		"@f5-sales-demo/xcsh-stats": "19.98.2",
-		"@f5-sales-demo/pi-agent-core": "19.98.2",
-		"@f5-sales-demo/pi-ai": "19.98.2",
-		"@f5-sales-demo/pi-natives": "19.98.2",
-		"@f5-sales-demo/pi-resource-management": "19.98.2",
-		"@f5-sales-demo/pi-tui": "19.98.2",
-		"@f5-sales-demo/pi-utils": "19.98.2",
+		"@f5-sales-demo/xcsh-stats": "19.98.3",
+		"@f5-sales-demo/pi-agent-core": "19.98.3",
+		"@f5-sales-demo/pi-ai": "19.98.3",
+		"@f5-sales-demo/pi-natives": "19.98.3",
+		"@f5-sales-demo/pi-resource-management": "19.98.3",
+		"@f5-sales-demo/pi-tui": "19.98.3",
+		"@f5-sales-demo/pi-utils": "19.98.3",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.98.2",
-	"commit": "0721dc78b3894f7f79f8121b7ccde4de06e2c711",
-	"shortCommit": "0721dc7",
+	"version": "19.98.3",
+	"commit": "4d3b95e9c675ae810cc60b6829fa3541a042d1ac",
+	"shortCommit": "4d3b95e",
 	"branch": "main",
-	"tag": "v19.98.2",
-	"commitDate": "2026-07-28T03:43:05Z",
-	"buildDate": "2026-07-28T04:18:37.474Z",
+	"tag": "v19.98.3",
+	"commitDate": "2026-07-28T05:29:35Z",
+	"buildDate": "2026-07-28T05:56:14.196Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5-sales-demo/xcsh",
 	"repoSlug": "f5-sales-demo/xcsh",
-	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/0721dc78b3894f7f79f8121b7ccde4de06e2c711",
-	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v19.98.2"
+	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/4d3b95e9c675ae810cc60b6829fa3541a042d1ac",
+	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v19.98.3"
 };

package/src/sandbox/enforce.ts

@@ -190,6 +190,28 @@ const REDIRECT_OPERATOR = /[0-9]*(?:&>>|&>|<<<|<<-|<<|>>|>\||<>|>&|<&|>|<)/g;
 /** A whitespace token that is only a redirection operator, so the next token is its operand. */
 const BARE_REDIRECT = /^[0-9]*(?:&>>|&>|<<<|<<-|<<|>>|>\||<>|>&|<&|>|<)$/;
 
+/**
+ * A path glued to its option, as one shell word (#2524).
+ *
+ * `path.isAbsolute("if=/work/custB/secret")` is false, so the floor's whole-token test
+ * never saw these — a single space was the difference between the blocked form and the
+ * allowed one.
+ *
+ * Only the option's VALUE is captured, never an arbitrary `/`-containing substring. That
+ * distinction is what keeps #2470 shut: scanning any slash-bearing fragment would read
+ * `sed -n '/a/p'` as a path again, which is the false positive #2479 exists to remove.
+ * The captured value still has to satisfy `looksLikePath`, so `--output=./out` stays
+ * allowed while `--output=/work/custB/x` does not.
+ *
+ * The short-option form additionally requires its value to begin with `/` or `~`. Without
+ * that, `-la` and friends would be read as an option carrying a relative path.
+ */
+const OPTION_VALUE_FORMS: readonly RegExp[] = [
+	/^-{1,2}[A-Za-z0-9][^=]*=(.+)$/, // --output=/p, -o=/p
+	/^[A-Za-z_][A-Za-z0-9_]*=(.+)$/, // if=/p, of=/p (operand style)
+	/^-[A-Za-z0-9]+([/~].*)$/, // -o/p, -C/p (no separator)
+];
+
 /**
  * Path-like tokens in a command/code string: bare (whitespace-split) and quoted.
  *
@@ -231,6 +253,24 @@ function codePathOccurrences(command: string): PathOccurrence[] {
 			const from = operator.index + operator[0].length;
 			add(stripped.slice(from).replace(/^["']|["']$/g, ""), match.index + openingQuote + from, access);
 		}
+
+		// An option glued to its value is one word too, and the lexer cannot help: it
+		// correctly reports `if=/work/custB/secret` as a single word, because that is what
+		// it is. Which options introduce a filename is command-specific knowledge the floor
+		// deliberately does not have, so scan the value and let `looksLikePath` decide.
+		//
+		// Skipped after a here-string or heredoc delimiter for the same reason the whole
+		// token is: that operand is literal data the shell never opens, so `cat <<<if=/tmp/f`
+		// prints the text rather than reading the file.
+		if (operand !== "skip") {
+			for (const form of OPTION_VALUE_FORMS) {
+				const optionValue = stripped.match(form);
+				if (!optionValue?.[1]) continue;
+				const from = stripped.length - optionValue[1].length;
+				add(optionValue[1].replace(/^["']|["']$/g, ""), match.index + openingQuote + from, operand);
+				break; // the forms overlap; the first that matches has already captured the value
+			}
+		}
 	}
 	for (const match of command.matchAll(/["']([^"']+)["']/g)) add(match[1], match.index + 1);
 	return found;