@f5-sales-demo/xcsh 20.18.1 → 20.19.1

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 # Changelog
 
+## Unreleased
+
+### Added
+
+- Added provenance-validated, deterministic `render_map` PNG generation with OpenStreetMap tile
+  policy compliance, schematic and text fallbacks, and optional atomic PNG/GeoJSON export
+  ([#3202](https://github.com/f5-sales-demo/xcsh/issues/3202)).
+
+### Changed
+
+- Unified generated and existing media publication behind the versioned `xcsh.media/v1` result
+  contract so TUI, Browser, Office, RPC, and ACP transports no longer identify media by tool name
+  ([#3202](https://github.com/f5-sales-demo/xcsh/issues/3202)).
+
 ## [20.6.3] - 2026-08-07
 
 ### Improved

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5-sales-demo/xcsh",
-	"version": "20.18.1",
+	"version": "20.19.1",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5-sales-demo/xcsh",
 	"author": "Can Boluk",
@@ -61,13 +61,13 @@
 	},
 	"dependencies": {
 		"@agentclientprotocol/sdk": "1.3.0",
-		"@f5-sales-demo/pi-agent-core": "20.18.1",
-		"@f5-sales-demo/pi-ai": "20.18.1",
-		"@f5-sales-demo/pi-natives": "20.18.1",
-		"@f5-sales-demo/pi-resource-management": "20.18.1",
-		"@f5-sales-demo/pi-tui": "20.18.1",
-		"@f5-sales-demo/pi-utils": "20.18.1",
-		"@f5-sales-demo/xcsh-stats": "20.18.1",
+		"@f5-sales-demo/pi-agent-core": "20.19.1",
+		"@f5-sales-demo/pi-ai": "20.19.1",
+		"@f5-sales-demo/pi-natives": "20.19.1",
+		"@f5-sales-demo/pi-resource-management": "20.19.1",
+		"@f5-sales-demo/pi-tui": "20.19.1",
+		"@f5-sales-demo/pi-utils": "20.19.1",
+		"@f5-sales-demo/xcsh-stats": "20.19.1",
 		"@mozilla/readability": "^0.6",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",

package/src/browser/chat-conformance.json

@@ -891,7 +891,8 @@
                       "const": "tool"
                     },
                     "source": {
-                      "const": "display_media"
+                      "type": "string",
+                      "pattern": "^[a-z][a-z0-9_]{0,63}$"
                     }
                   }
                 },
@@ -942,6 +943,23 @@
             },
             "degradation": {
               "type": "string"
+            },
+            "filenameHint": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 255,
+              "pattern": "^[^/\\\\]+$"
+            },
+            "metadata": {
+              "type": "object",
+              "maxProperties": 16,
+              "propertyNames": {
+                "pattern": "^[a-zA-Z0-9_.-]{1,64}$"
+              },
+              "additionalProperties": {
+                "type": "string",
+                "maxLength": 512
+              }
             }
           }
         }

package/src/browser/chat-handler.ts

@@ -334,15 +334,13 @@ export class ChatHandler {
 			return;
 		}
 		if (event.type === "tool_execution_end" && "toolName" in event) {
-			if (event.toolName === "display_media") {
-				const descriptor = extractMediaDescriptorFromToolResult(event.result);
-				if (descriptor) {
-					this.#server.send({
-						type: "chat_media",
-						id: chat.id,
-						media: projectMediaDescriptorForTransport(descriptor),
-					} satisfies ChatMedia);
-				}
+			const descriptor = extractMediaDescriptorFromToolResult(event.result);
+			if (descriptor) {
+				this.#server.send({
+					type: "chat_media",
+					id: chat.id,
+					media: projectMediaDescriptorForTransport(descriptor),
+				} satisfies ChatMedia);
 			}
 			// ToolExecutionEndEvent carries `isError` (NOT `error`) — checking the wrong
 			// field made this always ok:true, so errored tools rendered ✓ and "failed"

package/src/config/model-registry.ts

@@ -16,7 +16,6 @@ import {
 	type ModelRefreshStrategy,
 	type OAuthCredentials,
 	type OAuthLoginCallbacks,
-	openaiCodexModelManagerOptions,
 	PROVIDER_DESCRIPTORS,
 	readModelCache,
 	registerCustomApi,
@@ -32,7 +31,7 @@ import { type ConfigError, ConfigFile } from "../config";
 import { hasLiteLLMEnv, probeAndUpgradeLiteLLMConfig, startupHealthCheck } from "../config/auto-config";
 import { parseModelString, resolveProviderModelReference } from "../config/model-resolver";
 import { isValidThemeColor, type ThemeColor } from "../modes/theme/theme";
-import type { AuthStorage, OAuthCredential } from "../session/auth-storage";
+import type { AuthStorage } from "../session/auth-storage";
 import {
 	buildCanonicalModelIndex,
 	type CanonicalModelIndex,
@@ -553,31 +552,6 @@ function extractGoogleOAuthToken(value: string | undefined): string | undefined
 	return value;
 }
 
-function getOAuthCredentialsForProvider(authStorage: AuthStorage, provider: string): OAuthCredential[] {
-	const providerEntry = authStorage.getAll()[provider];
-	if (!providerEntry) {
-		return [];
-	}
-	const entries = Array.isArray(providerEntry) ? providerEntry : [providerEntry];
-	return entries.filter((entry): entry is OAuthCredential => entry.type === "oauth");
-}
-
-function resolveOAuthAccountIdForAccessToken(
-	authStorage: AuthStorage,
-	provider: string,
-	accessToken: string,
-): string | undefined {
-	const oauthCredentials = getOAuthCredentialsForProvider(authStorage, provider);
-	const matchingCredential = oauthCredentials.find(credential => credential.access === accessToken);
-	if (matchingCredential) {
-		return matchingCredential.accountId;
-	}
-	if (oauthCredentials.length === 1) {
-		return oauthCredentials[0].accountId;
-	}
-	return undefined;
-}
-
 function mergeCompat(
 	baseCompat: Model<Api>["compat"],
 	overrideCompat: ModelOverride["compat"],
@@ -1416,17 +1390,6 @@ export class ModelRegistry {
 						endpoint: this.getProviderBaseUrl("google-gemini-cli"),
 					}),
 			},
-			{
-				providerId: "openai-codex",
-				resolveKey: value => value,
-				createOptions: accessToken => {
-					const accountId = resolveOAuthAccountIdForAccessToken(this.authStorage, "openai-codex", accessToken);
-					return openaiCodexModelManagerOptions({
-						accessToken,
-						accountId,
-					});
-				},
-			},
 		];
 		const peekKey = (descriptor: { providerId: string }) => this.#peekApiKeyForProvider(descriptor.providerId);
 		// Special providers discover entitlement-scoped models through OAuth. Refresh their

package/src/config/model-resolver.ts

@@ -1049,6 +1049,9 @@ export interface InitialModelResult {
 	fallbackMessage: string | undefined;
 }
 
+export const UNSUPPORTED_OPENAI_CODEX_RECOVERY =
+	"Saved OpenAI Codex subscription configuration is unsupported in xcsh. Use the official codex CLI for ChatGPT subscription access, set OPENAI_API_KEY for usage-based OpenAI API access in xcsh, select another provider, or remove the disabled legacy credential with /logout openai-codex.";
+
 /**
  * Find the initial model to use based on priority:
  * 1. CLI args (provider + model)
@@ -1109,7 +1112,8 @@ export async function findInitialModel(options: {
 	}
 
 	// 3. Try saved default from settings
-	if (defaultProvider && defaultModelId) {
+	const hasUnsupportedOpenAICodexDefault = defaultProvider === "openai-codex";
+	if (defaultProvider && defaultModelId && !hasUnsupportedOpenAICodexDefault) {
 		const found = modelRegistry.find(defaultProvider, defaultModelId);
 		if (found) {
 			model = found;
@@ -1127,16 +1131,28 @@ export async function findInitialModel(options: {
 			const defaultId = defaultModelPerProvider[provider];
 			const match = availableModels.find(m => m.provider === provider && m.id === defaultId);
 			if (match) {
-				return { model: match, thinkingLevel: undefined, fallbackMessage: undefined };
+				return {
+					model: match,
+					thinkingLevel: undefined,
+					fallbackMessage: hasUnsupportedOpenAICodexDefault ? UNSUPPORTED_OPENAI_CODEX_RECOVERY : undefined,
+				};
 			}
 		}
 
 		// If no default found, use first available
-		return { model: availableModels[0], thinkingLevel: undefined, fallbackMessage: undefined };
+		return {
+			model: availableModels[0],
+			thinkingLevel: undefined,
+			fallbackMessage: hasUnsupportedOpenAICodexDefault ? UNSUPPORTED_OPENAI_CODEX_RECOVERY : undefined,
+		};
 	}
 
 	// 5. No model found
-	return { model: undefined, thinkingLevel: undefined, fallbackMessage: undefined };
+	return {
+		model: undefined,
+		thinkingLevel: undefined,
+		fallbackMessage: hasUnsupportedOpenAICodexDefault ? UNSUPPORTED_OPENAI_CODEX_RECOVERY : undefined,
+	};
 }
 
 /**

package/src/config/settings-schema.ts

@@ -564,7 +564,7 @@ export const SETTINGS_SCHEMA = {
 
 	"routing.profile": {
 		type: "enum",
-		values: ["none", "google-antigravity", "openai-codex"] as const,
+		values: ["none", "google-antigravity"] as const,
 		default: "none",
 		ui: {
 			tab: "model",
@@ -1988,7 +1988,6 @@ export const SETTINGS_SCHEMA = {
 			"perplexity",
 			"anthropic",
 			"gemini",
-			"codex",
 			"tavily",
 			"kagi",
 			"synthetic",

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "20.18.1",
-	"commit": "05ebcdc9d4b43f54c4e54ff44c52229b34e62a6b",
-	"shortCommit": "05ebcdc",
+	"version": "20.19.1",
+	"commit": "85fec653171dd194403a9444e937285f47f5227b",
+	"shortCommit": "85fec65",
 	"branch": "main",
-	"tag": "v20.18.1",
-	"commitDate": "2026-08-15T13:25:53Z",
-	"buildDate": "2026-08-15T13:57:09.805Z",
+	"tag": "v20.19.1",
+	"commitDate": "2026-08-15T22:14:41Z",
+	"buildDate": "2026-08-15T22:42:30.318Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5-sales-demo/xcsh",
 	"repoSlug": "f5-sales-demo/xcsh",
-	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/05ebcdc9d4b43f54c4e54ff44c52229b34e62a6b",
-	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v20.18.1"
+	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/85fec653171dd194403a9444e937285f47f5227b",
+	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v20.19.1"
 };