@f5-sales-demo/xcsh 21.5.6 → 21.5.7

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5-sales-demo/xcsh",
-	"version": "21.5.6",
+	"version": "21.5.7",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5-sales-demo/xcsh",
 	"author": "Can Boluk",
@@ -61,13 +61,13 @@
 	},
 	"dependencies": {
 		"@agentclientprotocol/sdk": "1.3.0",
-		"@f5-sales-demo/pi-agent-core": "21.5.6",
-		"@f5-sales-demo/pi-ai": "21.5.6",
-		"@f5-sales-demo/pi-natives": "21.5.6",
-		"@f5-sales-demo/pi-resource-management": "21.5.6",
-		"@f5-sales-demo/pi-tui": "21.5.6",
-		"@f5-sales-demo/pi-utils": "21.5.6",
-		"@f5-sales-demo/xcsh-stats": "21.5.6",
+		"@f5-sales-demo/pi-agent-core": "21.5.7",
+		"@f5-sales-demo/pi-ai": "21.5.7",
+		"@f5-sales-demo/pi-natives": "21.5.7",
+		"@f5-sales-demo/pi-resource-management": "21.5.7",
+		"@f5-sales-demo/pi-tui": "21.5.7",
+		"@f5-sales-demo/pi-utils": "21.5.7",
+		"@f5-sales-demo/xcsh-stats": "21.5.7",
 		"@mozilla/readability": "^0.6",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "21.5.6",
-	"commit": "d3cadfbd84e1ec85fc4f48619ffdabe334164c90",
-	"shortCommit": "d3cadfb",
+	"version": "21.5.7",
+	"commit": "08a80d4f1cb5b5010bffe60579e5808d6bdc90ac",
+	"shortCommit": "08a80d4",
 	"branch": "main",
-	"tag": "v21.5.6",
-	"commitDate": "2026-09-02T00:45:22+00:00",
-	"buildDate": "2026-09-02T01:15:05.987Z",
+	"tag": "v21.5.7",
+	"commitDate": "2026-09-02T03:25:55+00:00",
+	"buildDate": "2026-09-02T04:00:07.787Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5-sales-demo/xcsh",
 	"repoSlug": "f5-sales-demo/xcsh",
-	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/d3cadfbd84e1ec85fc4f48619ffdabe334164c90",
-	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v21.5.6"
+	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/08a80d4f1cb5b5010bffe60579e5808d6bdc90ac",
+	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v21.5.7"
 };

package/src/modes/components/auth-link-presenter.ts

@@ -0,0 +1,36 @@
+import { type Container, Text } from "@f5-sales-demo/pi-tui";
+import { copyToClipboard } from "../../utils/clipboard";
+import { theme } from "../theme/theme";
+
+type AuthLinkContainer = Pick<Container, "addChild">;
+
+export interface AuthLinkPresenterOptions {
+	copy?: (url: string) => void | Promise<void>;
+	platform?: NodeJS.Platform;
+}
+
+/** Present a browser authorization target without exposing its long URL as visible terminal text. */
+export function presentAuthLink(
+	container: AuthLinkContainer,
+	url: string,
+	options: AuthLinkPresenterOptions = {},
+): void {
+	const platform = options.platform ?? process.platform;
+	const clickHint = platform === "darwin" ? "Cmd+click to open" : "Ctrl+click to open";
+	const hyperlink = `\x1b]8;;${url}\x07Open sign-in page\x1b]8;;\x07`;
+	container.addChild(new Text(`${theme.fg("accent", hyperlink)} ${theme.fg("dim", `(${clickHint})`)}`, 1, 0));
+	container.addChild(
+		new Text(
+			theme.fg("dim", "Sign-in URL copied when supported. Clipboard availability depends on terminal support."),
+			1,
+			0,
+		),
+	);
+
+	const copy = options.copy ?? copyToClipboard;
+	try {
+		void Promise.resolve(copy(url)).catch(() => undefined);
+	} catch {
+		// Clipboard access is best-effort; the OSC 8 link remains available.
+	}
+}

package/src/modes/components/index.ts

@@ -1,5 +1,6 @@
 // UI Components barrel export
 export * from "./assistant-message";
+export * from "./auth-link-presenter";
 export * from "./bash-execution";
 export * from "./bordered-loader";
 export * from "./branch-summary-message";

package/src/modes/components/login-dialog.ts

@@ -2,8 +2,14 @@ import { getOAuthProviders } from "@f5-sales-demo/pi-ai";
 import { Container, getKeybindings, Input, Spacer, Text, type TUI } from "@f5-sales-demo/pi-tui";
 import { theme } from "../../modes/theme/theme";
 import { openPath } from "../../utils/open";
+import { presentAuthLink } from "./auth-link-presenter";
 import { DynamicBorder } from "./dynamic-border";
 
+interface LoginDialogDependencies {
+	openUrl?: (url: string) => void;
+	presentLink?: typeof presentAuthLink;
+}
+
 /**
  * Login dialog component - replaces editor during OAuth login flow
  */
@@ -19,6 +25,7 @@ export class LoginDialogComponent extends Container {
 		tui: TUI,
 		providerId: string,
 		private onComplete: (success: boolean, message?: string) => void,
+		private dependencies: LoginDialogDependencies = {},
 	) {
 		super();
 		this.#tui = tui;
@@ -73,11 +80,7 @@ export class LoginDialogComponent extends Container {
 	showAuth(url: string, instructions?: string): void {
 		this.#contentContainer.clear();
 		this.#contentContainer.addChild(new Spacer(1));
-		this.#contentContainer.addChild(new Text(theme.fg("contentAccent", url), 1, 0));
-
-		const clickHint = process.platform === "darwin" ? "Cmd+click to open" : "Ctrl+click to open";
-		const hyperlink = `\x1b]8;;${url}\x07${clickHint}\x1b]8;;\x07`;
-		this.#contentContainer.addChild(new Text(theme.fg("dim", hyperlink), 1, 0));
+		(this.dependencies.presentLink ?? presentAuthLink)(this.#contentContainer, url);
 
 		if (instructions) {
 			this.#contentContainer.addChild(new Spacer(1));
@@ -85,7 +88,7 @@ export class LoginDialogComponent extends Container {
 		}
 
 		// Open browser (best-effort)
-		openPath(url);
+		(this.dependencies.openUrl ?? openPath)(url);
 
 		this.#tui.requestRender();
 	}

package/src/modes/controllers/mcp-command-controller.ts

@@ -21,7 +21,6 @@ import {
 	clearSmitheryApiKey,
 	createSmitheryCliAuthSession,
 	getSmitheryApiKey,
-	getSmitheryLoginUrl,
 	pollSmitheryCliAuthSession,
 	saveSmitheryApiKey,
 } from "../../mcp/smithery-auth";
@@ -36,6 +35,7 @@ import type { MCPAuthConfig, MCPServerConfig, MCPServerConnection } from "../../
 import type { OAuthCredential } from "../../session/auth-storage";
 import { shortenPath } from "../../tools/render-utils";
 import { openPath } from "../../utils/open";
+import { presentAuthLink } from "../components/auth-link-presenter";
 import { DynamicBorder } from "../components/dynamic-border";
 import { MCPAddWizard } from "../components/mcp-add-wizard";
 import { parseCommandArgs } from "../shared";
@@ -68,6 +68,42 @@ type MCPSearchParsed = {
 	error?: string;
 };
 
+interface McpOAuthPresentationDependencies {
+	openUrl?: (url: string) => void;
+	presentLink?: typeof presentAuthLink;
+}
+
+/** Render the MCP controller's browser-authorization state without exposing the raw URL. */
+export function showMcpOAuthAuthorization(
+	ctx: Pick<InteractiveModeContext, "chatContainer" | "ui">,
+	info: { url: string; instructions?: string },
+	dependencies: McpOAuthPresentationDependencies = {},
+): void {
+	const showLink = dependencies.presentLink ?? presentAuthLink;
+	const openUrl = dependencies.openUrl ?? openPath;
+
+	ctx.chatContainer.addChild(new Spacer(1));
+	ctx.chatContainer.addChild(new Text(theme.fg("contentAccent", "━━━ OAuth Authorization Required ━━━"), 1, 0));
+	ctx.chatContainer.addChild(new Spacer(1));
+	showLink(ctx.chatContainer, info.url);
+	if (info.instructions) {
+		ctx.chatContainer.addChild(new Spacer(1));
+		ctx.chatContainer.addChild(new Text(theme.fg("warning", info.instructions), 1, 0));
+	}
+	ctx.chatContainer.addChild(new Spacer(1));
+	ctx.chatContainer.addChild(
+		new Text(theme.fg("muted", "Waiting for authorization... (Press Ctrl+C to cancel, 5 minute timeout)"), 1, 0),
+	);
+	ctx.chatContainer.addChild(new Spacer(1));
+	ctx.chatContainer.addChild(new Text(theme.fg("contentAccent", "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"), 1, 0));
+	ctx.ui.requestRender();
+
+	openUrl(info.url);
+	ctx.chatContainer.addChild(new Spacer(1));
+	ctx.chatContainer.addChild(new Text(theme.fg("success", "→ Opening browser automatically..."), 1, 0));
+	ctx.ui.requestRender();
+}
+
 export class MCPCommandController {
 	constructor(private ctx: InteractiveModeContext) {}
 
@@ -518,60 +554,7 @@ export class MCPCommandController {
 					callbackPath,
 				},
 				{
-					onAuth: (info: { url: string; instructions?: string }) => {
-						// Show auth URL prominently in chat
-						this.ctx.chatContainer.addChild(new Spacer(1));
-						this.ctx.chatContainer.addChild(
-							new Text(theme.fg("contentAccent", "━━━ OAuth Authorization Required ━━━"), 1, 0),
-						);
-						this.ctx.chatContainer.addChild(new Spacer(1));
-						this.ctx.chatContainer.addChild(
-							new Text(theme.fg("muted", "Preparing browser authorization..."), 1, 0),
-						);
-						this.ctx.chatContainer.addChild(new Spacer(1));
-						this.ctx.chatContainer.addChild(
-							new Text(
-								theme.fg("muted", "Waiting for authorization... (Press Ctrl+C to cancel, 5 minute timeout)"),
-								1,
-								0,
-							),
-						);
-						this.ctx.chatContainer.addChild(new Spacer(1));
-						this.ctx.chatContainer.addChild(
-							new Text(theme.fg("contentAccent", "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"), 1, 0),
-						);
-						this.ctx.ui.requestRender();
-						// Try to open browser automatically
-						try {
-							openPath(info.url);
-
-							// Show confirmation that browser should open
-							this.ctx.chatContainer.addChild(new Spacer(1));
-							this.ctx.chatContainer.addChild(
-								new Text(theme.fg("success", "→ Opening browser automatically..."), 1, 0),
-							);
-							this.ctx.chatContainer.addChild(new Spacer(1));
-							this.ctx.chatContainer.addChild(
-								new Text(theme.fg("muted", "Alternative if browser did not open:"), 1, 0),
-							);
-							this.ctx.chatContainer.addChild(
-								new Text(theme.fg("success", "Copy this exact URL in your browser:"), 1, 0),
-							);
-							this.ctx.chatContainer.addChild(new Text(theme.fg("contentAccent", info.url), 1, 0));
-							this.ctx.ui.requestRender();
-						} catch (_error) {
-							// Show error if browser doesn't open
-							this.ctx.chatContainer.addChild(new Spacer(1));
-							this.ctx.chatContainer.addChild(
-								new Text(theme.fg("warning", "→ Could not open browser automatically"), 1, 0),
-							);
-							this.ctx.chatContainer.addChild(
-								new Text(theme.fg("success", "Copy this exact URL in your browser:"), 1, 0),
-							);
-							this.ctx.chatContainer.addChild(new Text(theme.fg("contentAccent", info.url), 1, 0));
-							this.ctx.ui.requestRender();
-						}
-					},
+					onAuth: (info: { url: string; instructions?: string }) => showMcpOAuthAuthorization(this.ctx, info),
 					onProgress: (message: string) => {
 						this.ctx.chatContainer.addChild(new Spacer(1));
 						this.ctx.chatContainer.addChild(new Text(theme.fg("muted", message), 1, 0));
@@ -1678,23 +1661,22 @@ export class MCPCommandController {
 
 	async #handleSmitheryBrowserLogin(): Promise<boolean> {
 		const session = await createSmitheryCliAuthSession();
-		const fallbackLoginUrl = getSmitheryLoginUrl();
-		this.#showMessage(
-			[
-				"",
-				theme.bold("Smithery Login"),
-				theme.fg("muted", "Browser authorization started. Complete auth in your browser."),
-				theme.fg("dim", "Authorize URL:"),
-				theme.fg("contentAccent", session.authUrl),
-				theme.fg("dim", `Fallback: ${fallbackLoginUrl}`),
-				"",
-			].join("\n"),
+		this.ctx.chatContainer.addChild(new Spacer(1));
+		this.ctx.chatContainer.addChild(new DynamicBorder());
+		this.ctx.chatContainer.addChild(
+			new Text(
+				[
+					theme.bold("Smithery Login"),
+					theme.fg("muted", "Browser authorization started. Complete auth in your browser."),
+				].join("\n"),
+				1,
+				1,
+			),
 		);
-		try {
-			openPath(session.authUrl);
-		} catch {
-			// URL is already shown above.
-		}
+		presentAuthLink(this.ctx.chatContainer, session.authUrl);
+		this.ctx.chatContainer.addChild(new DynamicBorder());
+		this.ctx.ui.requestRender();
+		openPath(session.authUrl);
 
 		const apiKey = await this.#waitForSmitheryCliApiKey(session.sessionId, new AbortController().signal);
 		await this.#validateSmitheryApiKey(apiKey);

package/src/modes/controllers/selector-controller.ts

@@ -48,6 +48,7 @@ import { isSearchProviderPreference, setPreferredImageProvider, setPreferredSear
 import { setSessionTerminalTitle } from "../../utils/title-generator";
 import { AgentDashboard } from "../components/agent-dashboard";
 import { AssistantMessageComponent } from "../components/assistant-message";
+import { presentAuthLink } from "../components/auth-link-presenter";
 import { ExtensionDashboard } from "../components/extensions";
 import { GutterBlock } from "../components/gutter-block";
 import { HistorySearchComponent } from "../components/history-search";
@@ -1243,9 +1244,7 @@ export class SelectorController {
 		const loginCallbacks = {
 			onAuth: (info: { url: string; instructions?: string }) => {
 				this.ctx.chatContainer.addChild(new Spacer(1));
-				this.ctx.chatContainer.addChild(new Text(theme.fg("dim", info.url), 1, 0));
-				const hyperlink = `\x1b]8;;${info.url}\x07Click here to login\x1b]8;;\x07`;
-				this.ctx.chatContainer.addChild(new Text(theme.fg("accent", hyperlink), 1, 0));
+				presentAuthLink(this.ctx.chatContainer, info.url);
 				if (info.instructions) {
 					this.ctx.chatContainer.addChild(new Spacer(1));
 					this.ctx.chatContainer.addChild(new Text(theme.fg("warning", info.instructions), 1, 0));
@@ -1361,7 +1360,7 @@ export class SelectorController {
 				this.ctx.showStatus("Authenticating Corporate Vertex with the authorized Google enterprise flow…");
 				await authStorage.login("google-vertex", {
 					onAuth: info => {
-						this.ctx.chatContainer.addChild(new Text(theme.fg("dim", info.url), 1, 0));
+						presentAuthLink(this.ctx.chatContainer, info.url);
 						if (isHeadlessTerminal(runtime.environment)) {
 							this.ctx.chatContainer.addChild(new Text(theme.fg("dim", VERTEX_MANUAL_LOGIN_TIP), 1, 0));
 						} else {