@f5-sales-demo/xcsh 20.22.2 → 20.22.3

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5-sales-demo/xcsh",
-	"version": "20.22.2",
+	"version": "20.22.3",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5-sales-demo/xcsh",
 	"author": "Can Boluk",
@@ -61,13 +61,13 @@
 	},
 	"dependencies": {
 		"@agentclientprotocol/sdk": "1.3.0",
-		"@f5-sales-demo/pi-agent-core": "20.22.2",
-		"@f5-sales-demo/pi-ai": "20.22.2",
-		"@f5-sales-demo/pi-natives": "20.22.2",
-		"@f5-sales-demo/pi-resource-management": "20.22.2",
-		"@f5-sales-demo/pi-tui": "20.22.2",
-		"@f5-sales-demo/pi-utils": "20.22.2",
-		"@f5-sales-demo/xcsh-stats": "20.22.2",
+		"@f5-sales-demo/pi-agent-core": "20.22.3",
+		"@f5-sales-demo/pi-ai": "20.22.3",
+		"@f5-sales-demo/pi-natives": "20.22.3",
+		"@f5-sales-demo/pi-resource-management": "20.22.3",
+		"@f5-sales-demo/pi-tui": "20.22.3",
+		"@f5-sales-demo/pi-utils": "20.22.3",
+		"@f5-sales-demo/xcsh-stats": "20.22.3",
 		"@mozilla/readability": "^0.6",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",

package/src/internal-urls/api-spec-resolve.ts

@@ -757,13 +757,48 @@ function renderSchemaAsTable(
 	depth = 0,
 	prefix = "",
 	schemaRecommended?: Readonly<Record<string, string>>,
+	visited = new Set<string>(),
 ): string {
 	if (depth > SCHEMA_RENDER_MAX_DEPTH) return "";
 
+	const schemaName = extractSchemaName(schema);
+	if (schemaName && visited.has(schemaName)) return "";
+	const nextVisited = new Set(visited);
+	if (schemaName) nextVisited.add(schemaName);
 	const resolved = resolveSchemaRef(schema, spec);
 	const properties = resolved.properties as Record<string, Record<string, unknown>> | undefined;
 	if (!properties) {
 		const type = (resolved.type as string) ?? "object";
+		const items = resolved.items;
+		if (type === "array" && items && typeof items === "object" && depth < SCHEMA_RENDER_MAX_DEPTH) {
+			return renderSchemaAsTable(
+				items as Record<string, unknown>,
+				spec,
+				depth + 1,
+				`${prefix}[]`,
+				schemaRecommended,
+				nextVisited,
+			);
+		}
+		const variants = Array.isArray(resolved.oneOf)
+			? (resolved.oneOf as unknown[]).filter(
+					(variant): variant is Record<string, unknown> => typeof variant === "object" && variant !== null,
+				)
+			: [];
+		if (variants.length > 0 && depth < SCHEMA_RENDER_MAX_DEPTH) {
+			return variants
+				.map((variant, index) =>
+					renderSchemaAsTable(
+						variant,
+						spec,
+						depth + 1,
+						`${prefix}.oneOf[${index}]`,
+						schemaRecommended,
+						nextVisited,
+					),
+				)
+				.join("");
+		}
 		return `Type: ${type}\n`;
 	}
 
@@ -780,7 +815,7 @@ function renderSchemaAsTable(
 	for (const [name, prop] of Object.entries(properties)) {
 		const fieldProp = resolveSchemaRef(prop, spec);
 		const fieldName = prefix ? `${prefix}.${name}` : name;
-		const type = (fieldProp.type as string) ?? "object";
+		const type = (fieldProp.type as string) ?? (Array.isArray(fieldProp.oneOf) ? "oneOf" : "object");
 		const desc = (fieldProp.description as string) ?? "";
 		const isRequired = required.includes(name) ? "yes" : "no";
 		const constraints = formatFieldConstraints(fieldProp);
@@ -819,11 +854,34 @@ function renderSchemaAsTable(
 			}
 		}
 
-		if (type === "object" && fieldProp.properties && depth < SCHEMA_RENDER_MAX_DEPTH) {
-			const nestedOneOf = renderOneOfGroups(fieldProp, schemaRecommended);
+		const nestedSources: Array<{ source: Record<string, unknown>; prefix: string }> = [];
+		if (type === "array" && fieldProp.items && typeof fieldProp.items === "object") {
+			nestedSources.push({ source: fieldProp.items as Record<string, unknown>, prefix: `${fieldName}[]` });
+		} else if (Array.isArray(fieldProp.oneOf)) {
+			for (const [index, variant] of fieldProp.oneOf.entries()) {
+				if (typeof variant === "object" && variant !== null) {
+					nestedSources.push({
+						source: variant as Record<string, unknown>,
+						prefix: `${fieldName}.oneOf[${index}]`,
+					});
+				}
+			}
+		} else if (type === "object") {
+			nestedSources.push({ source: prop, prefix: fieldName });
+		}
+
+		for (const { source, prefix: nestedPrefix } of nestedSources) {
+			const nestedResolved = resolveSchemaRef(source, spec);
+			if (
+				depth >= SCHEMA_RENDER_MAX_DEPTH ||
+				(!nestedResolved.properties && nestedResolved.type !== "array" && !Array.isArray(nestedResolved.oneOf))
+			) {
+				continue;
+			}
+			const nestedOneOf = renderOneOfGroups(nestedResolved, schemaRecommended);
 			if (nestedOneOf) rows.push("", nestedOneOf);
-			const nested = renderSchemaAsTable(fieldProp, spec, depth + 1, fieldName, schemaRecommended);
-			const nestedLines = nested.split("\n").filter(l => l.startsWith("|") && !l.startsWith("| Field"));
+			const nested = renderSchemaAsTable(source, spec, depth + 1, nestedPrefix, schemaRecommended, nextVisited);
+			const nestedLines = nested.split("\n").filter(line => line.startsWith("|") && !line.startsWith("| Field"));
 			rows.push(...nestedLines);
 		}
 	}

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "20.22.2",
-	"commit": "ed93a01366838afc5ccd503a0bc678af72c92fe4",
-	"shortCommit": "ed93a01",
+	"version": "20.22.3",
+	"commit": "57fa717872ecf0c762c91f0e4ebf6aeb8a6fd8b1",
+	"shortCommit": "57fa717",
 	"branch": "main",
-	"tag": "v20.22.2",
-	"commitDate": "2026-08-25T17:12:23+00:00",
-	"buildDate": "2026-08-26T01:20:47.235Z",
+	"tag": "v20.22.3",
+	"commitDate": "2026-08-27T12:54:10+00:00",
+	"buildDate": "2026-08-27T13:26:07.116Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5-sales-demo/xcsh",
 	"repoSlug": "f5-sales-demo/xcsh",
-	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/ed93a01366838afc5ccd503a0bc678af72c92fe4",
-	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v20.22.2"
+	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/57fa717872ecf0c762c91f0e4ebf6aeb8a6fd8b1",
+	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v20.22.3"
 };

package/src/internal-urls/terraform-index.generated.ts

@@ -289,7 +289,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "alert_gen_policy",
 			category: "security",
 			description: "Alert Generation Policy",
-			required: ["name", "namespace", "alert_status"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/alert_gen_policy.txt#minimal-valid-config",
@@ -332,7 +332,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "bot_defense_app_infrastructure",
 			category: "security",
 			description: "Bot Defense App Infrastructure in a given namespace",
-			required: ["name", "namespace", "environment_type", "traffic_type"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/bot_defense_app_infrastructure.txt#minimal-valid-config",
@@ -346,7 +346,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "data_type",
 			category: "security",
 			description: "Data_type creates a new object in the storage backend for metadata.namespace",
-			required: ["name", "namespace", "is_pii", "is_sensitive_data"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/data_type.txt#minimal-valid-config",
@@ -390,7 +390,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "fast_acl_rule",
 			category: "security",
 			description: "New Fast ACL rule, has specification to match source IP, source port and action to apply",
-			required: ["name"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/fast_acl_rule.txt#minimal-valid-config",
@@ -505,7 +505,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "network_policy_view",
 			category: "security",
 			description: "Network policy view specification. configuration",
-			required: ["name", "namespace"],
+			required: ["name"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/network_policy_view.txt#minimal-valid-config",
@@ -751,7 +751,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "forwarding_class",
 			category: "networking",
 			description: "Forwarding class is created by users in system namespace. configuration",
-			required: ["name", "namespace", "queue_id_to_use", "interface_group"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/forwarding_class.txt#minimal-valid-config",
@@ -851,7 +851,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "proxy",
 			category: "networking",
 			description: "Tcp loadbalancer create specification. configuration",
-			required: ["name", "namespace", "connection_timeout"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/proxy.txt#minimal-valid-config",
@@ -865,7 +865,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "segment",
 			category: "networking",
 			description: "Segment. configuration",
-			required: ["name", "namespace"],
+			required: ["name"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/segment.txt#minimal-valid-config",
@@ -879,13 +879,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "srv6_network_slice",
 			category: "networking",
 			description: "Srv6_network_slice creates a new object in the storage backend for metadata.namespace",
-			required: [
-				"name",
-				"namespace",
-				"connect_to_access_networks",
-				"connect_to_enterprise_networks",
-				"connect_to_internet",
-			],
+			required: ["name"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/srv6_network_slice.txt#minimal-valid-config",
@@ -914,7 +908,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "tunnel",
 			category: "networking",
 			description: "Tunnel in a given namespace. If one already exist it will give a error",
-			required: ["name", "namespace", "tunnel_type"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/tunnel.txt#minimal-valid-config",
@@ -928,7 +922,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "virtual_network",
 			category: "networking",
 			description: "Virtual network in given namespace",
-			required: ["name", "legacy_type"],
+			required: ["name"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/virtual_network.txt#minimal-valid-config",
@@ -1062,7 +1056,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			category: "load-balancing",
 			description:
 				"Advertise_policy object controls how and where a service represented by a given virtual_host object is advertised to consumers. configuration",
-			required: ["name", "namespace", "address", "protocol", "skip_xff_append"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/advertise_policy.txt#minimal-valid-config",
@@ -1118,15 +1112,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "cluster",
 			category: "load-balancing",
 			description: "Cluster will create the object in the storage backend for namespace metadata.namespace",
-			required: [
-				"name",
-				"namespace",
-				"connection_timeout",
-				"endpoint_selection",
-				"fallback_policy",
-				"http_idle_timeout",
-				"loadbalancer_algorithm",
-			],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/cluster.txt#minimal-valid-config",
@@ -1140,7 +1126,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "endpoint",
 			category: "load-balancing",
 			description: "Endpoint will create the object in the storage backend for namespace metadata.namespace",
-			required: ["name", "namespace", "health_check_port", "port", "protocol"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/endpoint.txt#minimal-valid-config",
@@ -1192,7 +1178,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "udp_loadbalancer",
 			category: "load-balancing",
 			description: "Load balancing UDP traffic across origin pools",
-			required: ["name", "namespace", "dns_volterra_managed", "idle_timeout"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/udp_loadbalancer.txt#minimal-valid-config",
@@ -1206,17 +1192,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "virtual_host",
 			category: "load-balancing",
 			description: "Virtual host in a given namespace",
-			required: [
-				"name",
-				"namespace",
-				"add_location",
-				"connection_idle_timeout",
-				"disable_default_error_pages",
-				"disable_dns_resolve",
-				"idle_timeout",
-				"max_request_header_size",
-				"proxy",
-			],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/virtual_host.txt#minimal-valid-config",
@@ -1244,7 +1220,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "aws_vpc_site",
 			category: "sites",
 			description: "Deploying F5 sites within AWS VPC environments",
-			required: ["name", "namespace", "address", "aws_region", "disk_size", "instance_type", "ssh_key"],
+			required: ["name", "namespace", "aws_region", "instance_type", "ssh_key"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/aws_vpc_site.txt#minimal-valid-config",
@@ -1258,7 +1234,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "azure_vnet_site",
 			category: "sites",
 			description: "Deploying F5 sites within Azure Virtual Network environments",
-			required: ["name", "namespace", "machine_type", "resource_group", "ssh_key"],
+			required: ["name", "machine_type", "resource_group", "ssh_key"],
 			server_defaults: [
 				"block_all_services",
 				"disk_size",
@@ -1282,14 +1258,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "fleet",
 			category: "sites",
 			description: "Fleet will create a fleet object in 'system' namespace of the user",
-			required: [
-				"name",
-				"namespace",
-				"enable_default_fleet_config_download",
-				"fleet_label",
-				"operating_system_version",
-				"volterra_software_version",
-			],
+			required: ["name", "namespace", "fleet_label"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/fleet.txt#minimal-valid-config",
@@ -1303,7 +1272,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "gcp_vpc_site",
 			category: "sites",
 			description: "Deploying F5 sites within Google Cloud VPC environments",
-			required: ["name", "namespace", "address", "disk_size", "gcp_region", "instance_type", "ssh_key"],
+			required: ["name", "namespace", "gcp_region", "instance_type", "ssh_key"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/gcp_vpc_site.txt#minimal-valid-config",
@@ -1331,7 +1300,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "securemesh_site",
 			category: "sites",
 			description: "Deploying secure mesh edge sites with distributed security",
-			required: ["name", "namespace", "address", "volterra_certified_hw"],
+			required: ["name", "namespace", "volterra_certified_hw"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/securemesh_site.txt#minimal-valid-config",
@@ -1345,7 +1314,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "securemesh_site_v2",
 			category: "sites",
 			description: "Deploying secure mesh edge sites with security and networking controls",
-			required: ["name", "namespace"],
+			required: ["name"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/securemesh_site_v2.txt#minimal-valid-config",
@@ -1387,7 +1356,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "voltstack_site",
 			category: "sites",
 			description: "Deploying App Stack edge computing sites",
-			required: ["name", "namespace", "address", "volterra_certified_hw"],
+			required: ["name", "namespace", "volterra_certified_hw"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/voltstack_site.txt#minimal-valid-config",
@@ -1401,7 +1370,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "container_registry",
 			category: "kubernetes",
 			description: "Container image registry configuration",
-			required: ["name", "namespace", "email", "registry", "user_name"],
+			required: ["name", "namespace", "registry", "user_name"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/container_registry.txt#minimal-valid-config",
@@ -1455,7 +1424,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			category: "kubernetes",
 			description:
 				"K8s_cluster_role_binding will create the object in the storage backend for namespace metadata.namespace",
-			required: ["name"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/k8s_cluster_role_binding.txt#minimal-valid-config",
@@ -1469,7 +1438,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "k8s_pod_security_admission",
 			category: "kubernetes",
 			description: "K8s_pod_security_admission will create the object in the storage backend",
-			required: ["name", "namespace"],
+			required: ["name"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/k8s_pod_security_admission.txt#minimal-valid-config",
@@ -1511,7 +1480,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "workload_flavor",
 			category: "kubernetes",
 			description: "Workload_flavor",
-			required: ["name", "namespace", "ephemeral_storage", "memory", "vcpus"],
+			required: ["name"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/workload_flavor.txt#minimal-valid-config",
@@ -1553,7 +1522,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "bot_infrastructure",
 			category: "uncategorized",
 			description: "Bot Infrastructure",
-			required: ["name", "namespace", "traffic_type"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/bot_infrastructure.txt#minimal-valid-config",
@@ -1581,7 +1550,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "protected_application",
 			category: "uncategorized",
 			description: "Applications protected by Bot Defense",
-			required: ["name", "namespace", "region"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/protected_application.txt#minimal-valid-config",
@@ -1652,7 +1621,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "dns_lb_pool",
 			category: "dns",
 			description: "DNS Load Balancer Pool in a given namespace. If one already exist it will give a error",
-			required: ["name", "load_balancing_mode"],
+			required: ["name"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/dns_lb_pool.txt#minimal-valid-config",
@@ -1680,7 +1649,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "dns_proxy",
 			category: "dns",
 			description: "DNS Proxy in a given namespace. If one already exists it will give an error",
-			required: ["name", "transport_type"],
+			required: ["name"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/dns_proxy.txt#minimal-valid-config",
@@ -1762,7 +1731,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "api_testing",
 			category: "api-security",
 			description: "API Testing resource",
-			required: ["name", "namespace", "custom_header_value"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/api_testing.txt#minimal-valid-config",
@@ -1945,7 +1914,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "trusted_ca_list",
 			category: "certificates",
 			description: "Trusted certificate authority list management",
-			required: ["name", "namespace", "trusted_ca_url"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/trusted_ca_list.txt#minimal-valid-config",
@@ -1973,7 +1942,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "alert_template",
 			category: "monitoring",
 			description: "Domain to protect",
-			required: ["name", "namespace", "alert_message", "alert_message_details", "alert_name", "severity"],
+			required: ["name", "namespace", "alert_message", "alert_message_details", "alert_name"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/alert_template.txt#minimal-valid-config",
@@ -2100,7 +2069,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "irule",
 			category: "big-ip-integration",
 			description: "IRule in a given namespace. If one already exists it will give an error",
-			required: ["name", "namespace", "description", "description_spec", "irule"],
+			required: ["name", "namespace", "description_spec", "irule"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/irule.txt#minimal-valid-config",
@@ -2114,7 +2083,7 @@ export const TERRAFORM_INDEX: TerraformIndex = {
 			name: "address_allocator",
 			category: "cloud-resources",
 			description: "Address Allocator will create an address allocator object in 'system' namespace of the user",
-			required: ["name", "namespace", "mode"],
+			required: ["name", "namespace"],
 			minimal_config: {
 				format: "terraform",
 				source: "_llms-txt/resources/address_allocator.txt#minimal-valid-config",

package/src/prompts/system/system-prompt.md

@@ -380,6 +380,8 @@ Set a session-wide default with `set_presentation_profile`.
   The `xcsh_api` tool handles authentication, URL construction, and HTTP execution.
   Never construct cURL commands for F5 XC API calls — use `xcsh_api` instead.
 
+  **CLI portability:** Prefer broadly supported flags and output fields. Before using version-specific diagnostics, inspect the installed tool version or help. If an optional diagnostic field is unsupported (for example cURL 8.7.1 does not provide ssl_cipher), retry without that field while preserving and reporting the underlying command result. Do not add command interception layers or tool-specific compatibility shims.
+
   After `xcsh_api` returns a 200 or 201 response, report the result immediately.
   Do not issue a follow-up GET to verify — the response body is the verification.
   Only issue a GET if the user explicitly asks to read current state, or if the

package/src/session/agent-session.ts

@@ -799,6 +799,23 @@ export class AgentSession {
 		}
 
 		// Deobfuscate assistant message content for display emission — the LLM echoes back
+		// A terminal-envelope error means the provider never completed the response.
+		// Persist its diagnostics, but never retain text, tool arguments, or other partial content.
+		if (
+			event.type === "message_end" &&
+			event.message.role === "assistant" &&
+			event.message.stopReason === "error" &&
+			this.#isTransientEnvelopeErrorMessage(event.message.errorMessage ?? "")
+		) {
+			const discardedMessage: AssistantMessage = { ...event.message, content: [] };
+			event = { ...event, message: discardedMessage };
+			const messages = this.agent.state.messages;
+			const lastMessage = messages.at(-1);
+			if (lastMessage?.role === "assistant" && lastMessage.timestamp === discardedMessage.timestamp) {
+				this.agent.replaceMessages([...messages.slice(0, -1), discardedMessage]);
+			}
+		}
+
 		// obfuscated placeholders, but listeners (TUI, extensions, exporters) must see real
 		// values. The original event.message stays obfuscated so the persistence path below
 		// writes `#HASH#` tokens to the session file; convertToLlm re-obfuscates outbound
@@ -5888,8 +5905,8 @@ export class AgentSession {
 	}
 
 	#isTransientEnvelopeErrorMessage(errorMessage: string): boolean {
-		// Match Anthropic stream-envelope failures that indicate a broken stream before any content starts.
-		return /anthropic stream envelope error:/i.test(errorMessage) && /before message_start/i.test(errorMessage);
+		// A terminal-envelope failure is a discarded attempt; the provider never returns its partial content as a completed message.
+		return /anthropic stream envelope error:/i.test(errorMessage);
 	}
 
 	#isTransientTransportErrorMessage(errorMessage: string): boolean {