@f5-sales-demo/xcsh 22.4.3 → 22.4.6

package/CHANGELOG.md

@@ -6,6 +6,8 @@
 
 ### Added
 
+- Added shared host-aware software setup with live management probes, reviewed package-manager routes, checksum-verified per-user archives, and asynchronous CLI/TUI setup preparation ([#4598](https://github.com/f5-sales-demo/xcsh/issues/4598)).
+
 - Refreshed generated internal LiteLLM configuration with seven current GPT-6/Claude models,
   route-accurate Responses and native Messages transports, hidden legacy session resolution, and an
   independent maximum-context setting ([#4279](https://github.com/f5-sales-demo/xcsh/issues/4279)).

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5-sales-demo/xcsh",
-	"version": "22.4.3",
+	"version": "22.4.6",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5-sales-demo/xcsh",
 	"author": "Can Boluk",
@@ -67,13 +67,13 @@
 	},
 	"dependencies": {
 		"@agentclientprotocol/sdk": "1.4.0",
-		"@f5-sales-demo/pi-agent-core": "22.4.3",
-		"@f5-sales-demo/pi-ai": "22.4.3",
-		"@f5-sales-demo/pi-natives": "22.4.3",
-		"@f5-sales-demo/pi-resource-management": "22.4.3",
-		"@f5-sales-demo/pi-tui": "22.4.3",
-		"@f5-sales-demo/pi-utils": "22.4.3",
-		"@f5-sales-demo/xcsh-stats": "22.4.3",
+		"@f5-sales-demo/pi-agent-core": "22.4.6",
+		"@f5-sales-demo/pi-ai": "22.4.6",
+		"@f5-sales-demo/pi-natives": "22.4.6",
+		"@f5-sales-demo/pi-resource-management": "22.4.6",
+		"@f5-sales-demo/pi-tui": "22.4.6",
+		"@f5-sales-demo/pi-utils": "22.4.6",
+		"@f5-sales-demo/xcsh-stats": "22.4.6",
 		"@mozilla/readability": "^0.6",
 		"@resvg/resvg-wasm": "2.6.2",
 		"@sinclair/typebox": "0.34.52",

package/src/cli/linux-standalone-update.ts

@@ -0,0 +1,118 @@
+import { createHash } from "node:crypto";
+import path from "node:path";
+
+const REPO = "f5-sales-demo/xcsh";
+const MAX_INSTALLER_BYTES = 256 * 1024;
+
+export interface LinuxInstallerInput {
+	script: Buffer;
+	installDir: string;
+	version: string;
+}
+
+export interface LinuxStandaloneUpdateOptions {
+	targetPath: string;
+	arch?: string;
+	fetchImpl?(input: string | URL | Request, init?: RequestInit): Promise<Response>;
+	runInstaller?(input: LinuxInstallerInput): Promise<void>;
+}
+
+async function runInstaller(input: LinuxInstallerInput): Promise<void> {
+	const child = Bun.spawn(["/bin/sh", "-s", "--", "--binary", "--ref", `v${input.version}`], {
+		stdin: "pipe",
+		stdout: "inherit",
+		stderr: "inherit",
+		env: { ...process.env, PI_INSTALL_DIR: input.installDir },
+	});
+	try {
+		child.stdin.write(input.script);
+		await child.stdin.end();
+	} catch (error) {
+		child.kill();
+		await child.exited;
+		throw error;
+	}
+	const exitCode = await child.exited;
+	if (exitCode !== 0) throw new Error(`Verified Linux installer exited with status ${exitCode}`);
+}
+
+/** Use the published installer's complete integrity transaction for every Linux replacement. */
+export async function updateLinuxStandalone(version: string, options: LinuxStandaloneUpdateOptions): Promise<void> {
+	if (!/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.test(version))
+		throw new Error("A stable published version is required for Linux standalone updates");
+	if (!path.posix.isAbsolute(options.targetPath) || path.posix.basename(options.targetPath) !== "xcsh")
+		throw new Error("Linux standalone target must be an absolute xcsh executable path");
+	const arch = options.arch ?? process.arch;
+	if (arch !== "x64" && arch !== "arm64") throw new Error("Unsupported Linux standalone update architecture");
+
+	const fetchImpl = options.fetchImpl ?? fetch;
+	const tag = `v${version}`;
+	const api = `https://api.github.com/repos/${REPO}`;
+	const releaseResponse = await fetchImpl(`${api}/releases/tags/${tag}`, {
+		signal: AbortSignal.timeout(30_000),
+	});
+	if (!releaseResponse.ok) throw new Error(`Cannot read immutable release metadata: ${releaseResponse.status}`);
+	const release = (await releaseResponse.json()) as {
+		tag_name?: unknown;
+		draft?: unknown;
+		prerelease?: unknown;
+		immutable?: unknown;
+		assets?: unknown;
+	} | null;
+	if (
+		release?.tag_name !== tag ||
+		release.draft !== false ||
+		release.prerelease !== false ||
+		release.immutable !== true
+	)
+		throw new Error("Linux self-update requires the exact published immutable release");
+	if (!Array.isArray(release.assets)) throw new Error("Linux release is missing integrity assets");
+	const binary = `xcsh-linux-${arch}`;
+	for (const name of [binary, `${binary}.sha256`, `${binary}.provenance.json`, `${binary}.provenance.json.sha256`]) {
+		const matches = release.assets.filter(asset => asset?.name === name);
+		if (
+			matches.length !== 1 ||
+			typeof matches[0].digest !== "string" ||
+			!/^sha256:[a-f0-9]{64}$/.test(matches[0].digest) ||
+			!Number.isInteger(matches[0].size) ||
+			matches[0].size <= 0
+		)
+			throw new Error("Linux release has incomplete or ambiguous integrity assets");
+	}
+
+	const sourceResponse = await fetchImpl(`${api}/contents/scripts/install.sh?ref=${tag}`, {
+		signal: AbortSignal.timeout(30_000),
+	});
+	if (!sourceResponse.ok) throw new Error(`Cannot read tagged installer source: ${sourceResponse.status}`);
+	const source = (await sourceResponse.json()) as {
+		type?: unknown;
+		path?: unknown;
+		encoding?: unknown;
+		size?: unknown;
+		sha?: unknown;
+		content?: unknown;
+	} | null;
+	if (
+		source?.type !== "file" ||
+		source.path !== "scripts/install.sh" ||
+		source.encoding !== "base64" ||
+		typeof source.size !== "number" ||
+		!Number.isInteger(source.size) ||
+		source.size <= 0 ||
+		source.size > MAX_INSTALLER_BYTES ||
+		typeof source.sha !== "string" ||
+		!/^[a-f0-9]{40}$/.test(source.sha) ||
+		typeof source.content !== "string"
+	)
+		throw new Error("Invalid tagged installer source metadata");
+	const script = Buffer.from(source.content, "base64");
+	const blobSha = createHash("sha1").update(`blob ${script.length}\0`).update(script).digest("hex");
+	if (script.length !== source.size || blobSha !== source.sha)
+		throw new Error("Tagged installer source does not match its Git blob identity");
+
+	await (options.runInstaller ?? runInstaller)({
+		script,
+		installDir: path.posix.dirname(options.targetPath),
+		version,
+	});
+}

package/src/cli/plugin-cli.ts

@@ -344,10 +344,10 @@ export async function reviewAndExecuteIntegrationSetup(
 	handle: IntegrationHandle<unknown>,
 	options: { force?: boolean } = {},
 ) {
-	const plan = handle.setupPlan;
-	if (!plan) throw new Error(`Integration ${handle.id} does not declare setup`);
+	if (!handle.setupPlan) throw new Error(`Integration ${handle.id} does not declare setup`);
 	const current = await handle.get();
 	if (shouldSkipIntegrationSetup(current.state, options.force)) return current;
+	const plan = handle.prepareSetup ? await handle.prepareSetup() : handle.setupPlan!;
 	if (plan.guidedAction?.kind === "context_wizard")
 		throw new Error(
 			`Plugin ${handle.plugin ?? handle.id} setup requires interactive xcsh; run /plugin setup ${handle.plugin ?? handle.id} in the xcsh TUI.`,
@@ -373,18 +373,22 @@ async function handleIntegrationSetup(
 	if (args.length !== 1) throw new Error(`Usage: ${APP_NAME} plugin setup <plugin> [--context <name>] [--force]`);
 	if (!process.stdin.isTTY || !process.stdout.isTTY) throw new Error("Plugin setup requires an interactive terminal");
 	const handles = await loadIntegrationHandles();
-	await withPluginContext(flags.context, async () => {
-		const handle = selectSetupIntegration(handles, args[0]);
-		const current = await handle.get();
-		if (shouldSkipIntegrationSetup(current.state, flags.force)) {
-			process.stdout.write(`${handle.plugin ?? handle.id}: ready (setup is not required)\n`);
-			return;
-		}
-		const result = await reviewAndExecuteIntegrationSetup(handle, { force: flags.force });
-		process.stdout.write(
-			`${handle.plugin ?? handle.id}: ${result.state}${result.reason ? ` (${result.reason})` : ""}\n`,
-		);
-	});
+	try {
+		await withPluginContext(flags.context, async () => {
+			const handle = selectSetupIntegration(handles, args[0]);
+			const current = await handle.get();
+			if (shouldSkipIntegrationSetup(current.state, flags.force)) {
+				process.stdout.write(`${handle.plugin ?? handle.id}: ready (setup is not required)\n`);
+				return;
+			}
+			const result = await reviewAndExecuteIntegrationSetup(handle, { force: flags.force });
+			process.stdout.write(
+				`${handle.plugin ?? handle.id}: ${result.state}${result.reason ? ` (${result.reason})` : ""}\n`,
+			);
+		});
+	} catch (error) {
+		throw new CliUsageError(error instanceof Error ? error.message : "Plugin setup failed");
+	}
 }
 
 async function reportMarketplaceInstallation(
@@ -411,6 +415,9 @@ async function reportMarketplaceInstallation(
 		lifecycle: entry,
 		trigger: "direct-install",
 		handles,
+		review: async handle => {
+			process.stdout.write(`${describeSetupPlan(handle)}\n`);
+		},
 	});
 	if (installSetup) await personProfileService.reconcileFromCollectors(undefined, 0);
 	const statuses = await Promise.all(

package/src/cli/update-cli.ts

@@ -5,6 +5,7 @@ import path from "node:path";
 import { pipeline } from "node:stream/promises";
 import { APP_NAME, isEnoent, VERSION } from "@f5-sales-demo/pi-utils";
 import chalk from "chalk";
+import { type LinuxInstallerInput, updateLinuxStandalone } from "./linux-standalone-update";
 import {
 	createInstallReceipt,
 	defaultInstallChannelDependencies,
@@ -76,6 +77,7 @@ export interface StandaloneReplacementOptions {
 	writeFile?(file: string, contents: string): Promise<void>;
 	unlink?(file: string): Promise<void>;
 	validate?(executable: string, expectedVersion: string): Promise<void>;
+	runLinuxInstaller?(input: LinuxInstallerInput): Promise<void>;
 }
 
 async function ignoreMissing(unlink: (file: string) => Promise<void>, file: string): Promise<void> {
@@ -94,6 +96,15 @@ export async function replaceStandaloneExecutable(
 	const targetPath = options.targetPath;
 	const platform = options.platform ?? process.platform;
 	const arch = options.arch ?? process.arch;
+	if (platform === "linux") {
+		if (arch !== "x64" && arch !== "arm64") throw new Error("Unsupported Linux standalone update architecture");
+		return updateLinuxStandalone(expectedVersion, {
+			targetPath,
+			arch,
+			fetchImpl: options.fetchImpl,
+			runInstaller: options.runLinuxInstaller,
+		});
+	}
 	const binaryName = getBinaryName(platform, arch);
 	const url = `https://github.com/${REPO}/releases/download/v${expectedVersion}/${binaryName}`;
 	const tempPath = `${targetPath}.new-${process.pid}`;

package/src/cli.ts

@@ -5,11 +5,14 @@ import { APP_NAME, initI18n, MIN_BUN_VERSION, registerLocales, t, VERSION } from
  * lightweight CLI runner from pi-utils.
  */
 import { CliUsageError, type CommandEntry, run } from "@f5-sales-demo/pi-utils/cli";
+import { installCliOutputHandlers, writeCliOutput } from "@f5-sales-demo/pi-utils/cli-output";
 import { validateInlineFlagSyntax } from "./cli/flag-spec";
 import { findPrefixedCommand, launchFlagScopeMessage } from "./cli/root-command-routing";
 import { sandboxArgs, sandboxFlags, validateSandboxInvocation } from "./cli/sandbox-spec";
 import { locales } from "./locales/index";
 
+installCliOutputHandlers();
+
 registerLocales(locales);
 initI18n();
 
@@ -97,7 +100,7 @@ async function showHelp(config: import("@f5-sales-demo/pi-utils/cli").CliConfig)
 	renderRootHelp(config);
 	const extra = getExtraHelpText();
 	if (extra.trim().length > 0) {
-		process.stdout.write(`\n${extra}\n`);
+		writeCliOutput(process.stdout, `\n${extra}\n`);
 	}
 }
 

package/src/extensibility/extensions/loader.ts

@@ -21,12 +21,15 @@ import {
 } from "../../discovery/helpers";
 import type { ExecOptions } from "../../exec/exec";
 import { execCommand } from "../../exec/exec";
+import { host } from "../../host/host";
+import { software } from "../../host/software";
 import { integrationRegistry } from "../../integrations/registry";
 import type { IntegrationDefinition, IntegrationHandle } from "../../integrations/types";
 import { personProfileService } from "../../person-profile/service";
 import type { CustomMessage } from "../../session/messages";
 import { EventBus } from "../../utils/event-bus";
 import { getAllPluginExtensionPaths } from "../plugins/loader";
+import { assertRuntimeRequirement } from "../plugins/marketplace/runtime";
 import { resolvePath } from "../utils";
 import herdrReporter from "./bundled/herdr-reporter";
 import herdrTerminal from "./bundled/herdr-terminal";
@@ -130,6 +133,8 @@ class ConcreteExtensionAPI implements ExtensionAPI, IExtensionRuntime {
 		config: import("./types").ProviderConfig;
 		sourceId: string;
 	}> = [];
+	readonly host = host;
+	readonly software = software;
 	readonly personProfile: ExtensionAPI["personProfile"];
 	readonly integrations: ExtensionAPI["integrations"];
 	readonly advisories: ExtensionAPI["advisories"];
@@ -301,7 +306,7 @@ class ConcreteExtensionAPI implements ExtensionAPI, IExtensionRuntime {
 	}
 
 	exec(command: string, args: string[], options?: ExecOptions) {
-		return execCommand(command, args, options?.cwd ?? this.cwd, options);
+		return execCommand(host.findExecutable(command) ?? command, args, options?.cwd ?? this.cwd, options);
 	}
 
 	getActiveTools(): string[] {
@@ -692,6 +697,9 @@ export async function discoverAndLoadExtensions(
 					// A marketplace plugin may use package metadata only.
 				}
 
+				const minimumRuntimeVersion = (canonical as { minimumRuntimeVersion?: string } | undefined)
+					?.minimumRuntimeVersion;
+				if (minimumRuntimeVersion) assertRuntimeRequirement({ name: root.plugin, minimumRuntimeVersion });
 				// The canonical manifest owns an explicitly declared extension list. Older marketplace
 				// plugins keep lifecycle metadata in that manifest and their extension declaration in
 				// package.json, so use the established package contract only when it is omitted.

package/src/extensibility/extensions/types.ts

@@ -1040,6 +1040,8 @@ export interface ExtensionAPI {
 	pi: typeof piCodingAgent;
 
 	/** Canonical, provenance-aware person profile integration. */
+	readonly host: typeof import("../../host/host").host;
+	readonly software: typeof import("../../host/software").software;
 	readonly personProfile: {
 		get(): Promise<import("../../person-profile/schema").PersonProfile>;
 		registerCollector(collector: import("../../person-profile/service").ExtensionProfileCollector): void;

package/src/extensibility/plugins/marketplace/builtin-marketplace-snapshot.ts

@@ -1,4 +1,4 @@
 const builtinMarketplaceSnapshot =
-	'{\n  "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",\n  "name": "f5-sales-demo-marketplace",\n  "version": "1.0.0",\n  "metadata": {\n    "description": "Claude Code plugins for f5-sales-demo documentation repositories"\n  },\n  "owner": {\n    "name": "f5-sales-demo",\n    "url": "https://github.com/f5-sales-demo"\n  },\n  "plugins": [\n    {\n      "name": "docs-tools",\n      "description": "MDX content validation and review tools for f5-sales-demo docs repos",\n      "version": "1.1.6",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/docs-tools",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/docs-tools",\n      "category": "productivity",\n      "keywords": ["mdx", "documentation", "validation", "starlight", "astro"],\n      "tags": ["docs", "linting", "content-review", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["Documentation content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "sales-engineer",\n      "description": "Sales Engineer persona framework for F5 XC demo repositories — demo execution, environment operations, presentation, Q&A, post-session debrief",\n      "version": "1.0.12",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/sales-engineer",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/sales-engineer",\n      "category": "productivity",\n      "keywords": ["sales-engineer", "demo", "persona", "presentation", "f5xc"],\n      "tags": ["demo", "sales", "persona", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["Sales engineering content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "docs-pipeline",\n      "description": "Documentation pipeline architecture — config ownership, release dispatch chain, content authoring, managed files, local preview",\n      "version": "1.0.6",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/docs-pipeline",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/docs-pipeline",\n      "category": "productivity",\n      "keywords": ["docs", "pipeline", "astro", "starlight", "content", "authoring"],\n      "tags": ["docs", "pipeline", "content", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["Documentation pipeline content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "brand",\n      "description": "F5 corporate branding enforcement — colors, typography, logos, icons, accessibility, and visual identity standards across all content types",\n      "version": "1.0.6",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/brand",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/brand",\n      "category": "productivity",\n      "keywords": ["brand", "design-system", "colors", "typography", "accessibility"],\n      "tags": ["brand", "design", "visual-identity", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["Brand guidance content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "meddpicc",\n      "description": "MEDDPICC sales qualification and deal-execution framework — evidence-based deal management, stakeholder mapping, mutual action plans, and forecast integrity for complex enterprise B2B sales",\n      "version": "7.5.9",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/meddpicc",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/meddpicc",\n      "category": "productivity",\n      "keywords": [\n        "meddpicc",\n        "sales-qualification",\n        "deal-management",\n        "enterprise-sales",\n        "forecast",\n        "champion",\n        "economic-buyer",\n        "mutual-action-plan",\n        "f5xc"\n      ],\n      "tags": ["sales", "qualification", "deal-management", "forecast", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["MEDDPICC content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "devcontainer",\n      "description": "Container awareness — tool catalog, self-identity, self-diagnosis, and maintenance for the f5-sales-demo devcontainer",\n      "version": "1.2.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/devcontainer",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/devcontainer",\n      "category": "productivity",\n      "keywords": ["devcontainer", "tools", "catalog", "cli", "inventory", "container"],\n      "tags": ["devcontainer", "tools", "catalog", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["devcontainer"],\n        "requirements": ["A supported development container runtime"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "platform",\n      "description": "Provider-neutral F5 Distributed Cloud Secure Mesh Site v2 capabilities, configuration, bootstrap, and status tools",\n      "version": "6.0.1",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/platform",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/platform",\n      "category": "productivity",\n      "keywords": [\n        "console",\n        "browser",\n        "automation",\n        "azure-sso",\n        "mcp",\n        "chrome-devtools",\n        "f5xc",\n        "api",\n        "rest",\n        "platform",\n        "openapi",\n        "crud",\n        "spec-aware"\n      ],\n      "tags": ["console", "browser", "automation", "f5xc", "api", "platform", "openapi"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["platform"],\n        "requirements": ["F5 Distributed Cloud API URL and token environment variables"],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "osint-framework",\n      "description": "OSINT Framework tool catalog and investigation skills — 1,064 free intelligence-gathering tools across 34 categories, mapped from osintframework.com. Category-based skills, executable investigation pipelines, CLI tool execution, and OPSEC-aware workflows.",\n      "version": "1.0.8",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/osint-framework",\n      "keywords": ["osint", "reconnaissance", "intelligence", "investigation", "security"],\n      "license": "Apache-2.0",\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "source": "./plugins/osint-framework",\n      "category": "security",\n      "tags": ["osint", "recon", "security", "intelligence"],\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["OSINT framework content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "firecrawl",\n      "description": "Local self-hosted firecrawl web scraping — scrape, crawl, and map websites via the local firecrawl API on port 3002. No API keys, no subscriptions, fully open-source.",\n      "version": "1.2.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/firecrawl",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/firecrawl",\n      "category": "productivity",\n      "keywords": ["firecrawl", "scrape", "crawl", "web-scraping", "markdown", "self-hosted", "local", "open-source"],\n      "tags": ["firecrawl", "scraping", "web", "local"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["firecrawl"],\n        "requirements": ["A reachable local Firecrawl service"],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "salesforce",\n      "description": "Salesforce pipeline intelligence with shared lifecycle setup, account discovery, context, and reporting tools",\n      "version": "1.5.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/salesforce",\n      "keywords": [\n        "salesforce",\n        "sf",\n        "apex",\n        "lwc",\n        "soql",\n        "metadata",\n        "deploy",\n        "testing",\n        "sfdx",\n        "agentforce",\n        "pipeline",\n        "xcsh"\n      ],\n      "license": "Apache-2.0",\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "source": "./plugins/salesforce",\n      "category": "development",\n      "tags": ["salesforce", "development", "cli", "crm", "xcsh-extension"],\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["salesforce"],\n        "requirements": ["Salesforce CLI", "An authenticated default Salesforce org"],\n        "setupRequired": true,\n        "collectedData": ["accounts", "identifiers", "business_profile"],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "cloudstatus",\n      "description": "Live cloud status and Internet network intelligence for xcsh — current incidents, routing, registration, RPKI, peering, facilities, F5 Regional Edge evidence, and bounded path diagnostics",\n      "version": "1.7.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/cloudstatus",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/cloudstatus",\n      "category": "productivity",\n      "keywords": [\n        "status",\n        "monitoring",\n        "incidents",\n        "maintenance",\n        "statuspage",\n        "operational-intelligence",\n        "network-intelligence",\n        "bgp",\n        "rdap",\n        "rpki",\n        "routing",\n        "location",\n        "peeringdb",\n        "facilities",\n        "f5xc",\n        "atlassian"\n      ],\n      "tags": ["status", "network-intelligence", "routing", "peering", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "on_demand",\n        "integrations": ["cloudstatus"],\n        "requirements": ["Network access when a cloud-status command is invoked"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "azure",\n      "description": "Azure CLI integration and deterministic F5 Customer Edge discovery, planning, lifecycle, and diagnostics",\n      "version": "4.4.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/azure",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/azure",\n      "category": "development",\n      "keywords": ["azure", "az", "cloud", "f5xc", "customer-edge", "secure-mesh-site"],\n      "tags": ["azure", "cloud", "f5xc", "customer-edge", "xcsh-extension"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["azure"],\n        "requirements": ["Azure CLI", "An authenticated Azure account"],\n        "setupRequired": true,\n        "collectedData": ["accounts"],\n        "pluginDependencies": ["platform"]\n      }\n    },\n    {\n      "name": "aws",\n      "description": "AWS CLI integration and deterministic F5 Secure Mesh Site v2 Customer Edge discovery, planning, lifecycle, and diagnostics",\n      "version": "2.1.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/aws",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/aws",\n      "category": "development",\n      "keywords": ["aws", "amazon", "cloud", "f5xc", "customer-edge", "secure-mesh-site", "tgw", "nlb"],\n      "tags": ["aws", "cloud", "f5xc", "customer-edge", "xcsh-extension"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["aws"],\n        "requirements": ["AWS CLI", "AWS credentials or an authenticated SSO profile"],\n        "setupRequired": true,\n        "collectedData": ["accounts"],\n        "pluginDependencies": ["platform"]\n      }\n    },\n    {\n      "name": "kvm",\n      "description": "Dual-NIC KVM Secure Mesh Site v2 with isolated SLO, home-LAN SLI, inside VIP, and rollback-protected host preparation",\n      "version": "3.0.4",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/kvm",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/kvm",\n      "category": "development",\n      "keywords": ["kvm", "libvirt", "qemu", "f5xc", "customer-edge", "secure-mesh-site", "home-lan", "terraform"],\n      "tags": ["kvm", "libvirt", "f5xc", "customer-edge", "xcsh-extension"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["kvm"],\n        "requirements": [\n          "Terraform CLI",\n          "libvirt and qemu system access",\n          "curl",\n          "F5 Distributed Cloud Platform integration"\n        ],\n        "setupRequired": true,\n        "setupAuthorization": "install",\n        "collectedData": [],\n        "pluginDependencies": ["platform"]\n      }\n    },\n    {\n      "name": "gcloud",\n      "description": "Google Cloud CLI integration — container-adapted auth, context injection, CLI operator agent, token expiry detection, and welcome screen status",\n      "version": "1.3.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/gcloud",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/gcloud",\n      "category": "development",\n      "keywords": ["gcloud", "google", "cloud"],\n      "tags": ["gcloud", "google", "cloud", "xcsh-extension"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["gcloud"],\n        "requirements": ["Google Cloud CLI", "An authenticated Google Cloud account"],\n        "setupRequired": true,\n        "collectedData": ["accounts"],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "gitlab",\n      "description": "GitLab CLI integration with shared lifecycle readiness, profile discovery, and issue management tools",\n      "version": "1.3.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "keywords": ["gitlab", "glab", "issues", "git"],\n      "license": "Apache-2.0",\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "source": "./plugins/gitlab",\n      "category": "development",\n      "tags": ["gitlab", "development", "cli", "xcsh-extension"],\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/gitlab",\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["gitlab"],\n        "requirements": ["GitLab CLI", "An authenticated GitLab account"],\n        "setupRequired": true,\n        "collectedData": ["accounts"],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "github",\n      "description": "GitHub and Git operations with typed lifecycle stages, normalized evidence, and advisory governance",\n      "version": "3.1.1",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/github",\n      "keywords": ["github", "gh", "git", "pr", "issues", "ci", "workflow", "git-sops", "github-ops"],\n      "license": "Apache-2.0",\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "source": "./plugins/github",\n      "category": "development",\n      "tags": ["github", "development", "cli", "workflow", "xcsh-extension"],\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["github", "github_email"],\n        "requirements": ["GitHub CLI", "An authenticated GitHub account"],\n        "setupRequired": true,\n        "setupAuthorization": "install",\n        "collectedData": ["accounts", "email", "identifiers", "sameAs"],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "herdr",\n      "description": "Install and operate the stable F5 Herdr fork with verified native xcsh health, explicit pairing, and complete pane-control guidance.",\n      "version": "1.1.5",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/herdr",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "extensions": ["extensions/integration.ts"],\n      "xcsh": {\n        "name": "Herdr",\n        "version": "1.1.5"\n      },\n      "source": "./plugins/herdr",\n      "category": "development",\n      "keywords": ["herdr", "terminal", "multiplexer", "panes", "agents"],\n      "tags": ["terminal", "orchestration", "agents", "xcsh-extension"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["herdr"],\n        "requirements": [\n          "Supported 64-bit Linux, macOS, or Windows host",\n          "HTTPS access to the f5-sales-demo/herdr stable manifest and release"\n        ],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "asm-migration",\n      "description": "Deterministic BIG-IP ASM conversion and guarded F5 Distributed Cloud deployment",\n      "version": "2.1.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/asm-migration",\n      "keywords": ["asm", "waf", "migration", "f5xc", "xcsh-extension"],\n      "license": "Apache-2.0",\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "source": "./plugins/asm-migration",\n      "category": "security",\n      "tags": ["asm", "waf", "security", "migration", "f5xc"],\n      "recommended": false,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["asm_migration"],\n        "requirements": ["ASM migration runtime dependencies", "F5 Distributed Cloud Platform integration"],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": ["platform"]\n      }\n    },\n    {\n      "name": "terraform",\n      "description": "Senior DevOps Infrastructure-as-Code plugin providing HashiCorp Registry proactive version checks, HCL authoring, testing frameworks, and troubleshooting playbooks.",\n      "version": "2.1.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/terraform",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/terraform",\n      "category": "development",\n      "keywords": ["terraform", "hcl", "iac", "devops", "hashicorp", "testing", "troubleshooting"],\n      "tags": ["terraform", "iac", "devops", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["terraform"],\n        "requirements": ["Terraform CLI"],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "xorg",\n      "version": "1.1.9",\n      "description": "Ubuntu 24.04 Xorg desktop automation substrate",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "extensions": ["extensions/integration.ts"],\n      "xcsh": {\n        "name": "Xorg",\n        "version": "1.1.9"\n      },\n      "source": "./plugins/xorg",\n      "category": "development",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/xorg",\n      "keywords": ["xorg", "at-spi", "xtest", "pipewire"],\n      "tags": ["linux", "desktop", "automation"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["xorg"],\n        "requirements": ["Ubuntu 24.04 with passwordless sudo"],\n        "setupRequired": true,\n        "setupAuthorization": "install",\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "zoom",\n      "version": "1.1.1",\n      "description": "Verified Zoom Workplace control through public xorgctl JSON",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "extensions": ["extensions/integration.ts"],\n      "xcsh": {\n        "name": "Zoom",\n        "version": "1.1.1"\n      },\n      "source": "./plugins/zoom",\n      "category": "productivity",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/zoom",\n      "keywords": ["zoom", "meeting", "accessibility", "virtual-camera"],\n      "tags": ["zoom", "meeting", "automation"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["zoom"],\n        "requirements": ["Ubuntu 24.04 amd64", "Zoom Workplace 7.2.1.5760", "Xorg, Herdr, and Ghostty plugins"],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": ["xorg", "herdr", "ghostty"]\n      }\n    },\n    {\n      "name": "ghostty",\n      "version": "1.0.4",\n      "description": "Curated Linux Ghostty setup for Xorg and Herdr terminal sessions",\n      "license": "MIT",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "extensions": ["extensions/integration.ts"],\n      "xcsh": {\n        "name": "Ghostty",\n        "version": "1.0.4"\n      },\n      "source": "./plugins/ghostty",\n      "category": "development",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/ghostty",\n      "keywords": ["ghostty", "terminal", "xorg", "herdr"],\n      "tags": ["linux", "terminal", "xorg"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["ghostty"],\n        "requirements": ["Ubuntu Linux", "Xorg and Herdr marketplace plugins"],\n        "setupRequired": true,\n        "setupAuthorization": "install",\n        "collectedData": [],\n        "pluginDependencies": ["xorg", "herdr"]\n      }\n    }\n  ]\n}\n';
+	'{\n  "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",\n  "name": "f5-sales-demo-marketplace",\n  "version": "1.0.0",\n  "metadata": {\n    "description": "Claude Code plugins for f5-sales-demo documentation repositories"\n  },\n  "owner": {\n    "name": "f5-sales-demo",\n    "url": "https://github.com/f5-sales-demo"\n  },\n  "plugins": [\n    {\n      "name": "docs-tools",\n      "description": "MDX content validation and review tools for f5-sales-demo docs repos",\n      "version": "1.1.6",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/docs-tools",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/docs-tools",\n      "category": "productivity",\n      "keywords": ["mdx", "documentation", "validation", "starlight", "astro"],\n      "tags": ["docs", "linting", "content-review", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["Documentation content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "sales-engineer",\n      "description": "Sales Engineer persona framework for F5 XC demo repositories — demo execution, environment operations, presentation, Q&A, post-session debrief",\n      "version": "1.0.12",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/sales-engineer",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/sales-engineer",\n      "category": "productivity",\n      "keywords": ["sales-engineer", "demo", "persona", "presentation", "f5xc"],\n      "tags": ["demo", "sales", "persona", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["Sales engineering content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "docs-pipeline",\n      "description": "Documentation pipeline architecture — config ownership, release dispatch chain, content authoring, managed files, local preview",\n      "version": "1.0.6",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/docs-pipeline",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/docs-pipeline",\n      "category": "productivity",\n      "keywords": ["docs", "pipeline", "astro", "starlight", "content", "authoring"],\n      "tags": ["docs", "pipeline", "content", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["Documentation pipeline content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "brand",\n      "description": "F5 corporate branding enforcement — colors, typography, logos, icons, accessibility, and visual identity standards across all content types",\n      "version": "1.0.6",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/brand",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/brand",\n      "category": "productivity",\n      "keywords": ["brand", "design-system", "colors", "typography", "accessibility"],\n      "tags": ["brand", "design", "visual-identity", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["Brand guidance content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "meddpicc",\n      "description": "MEDDPICC sales qualification and deal-execution framework — evidence-based deal management, stakeholder mapping, mutual action plans, and forecast integrity for complex enterprise B2B sales",\n      "version": "7.6.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/meddpicc",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/meddpicc",\n      "category": "productivity",\n      "keywords": [\n        "meddpicc",\n        "sales-qualification",\n        "deal-management",\n        "enterprise-sales",\n        "forecast",\n        "champion",\n        "economic-buyer",\n        "mutual-action-plan",\n        "f5xc"\n      ],\n      "tags": ["sales", "qualification", "deal-management", "forecast", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["MEDDPICC content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "devcontainer",\n      "description": "Container awareness — tool catalog, self-identity, self-diagnosis, and maintenance for the f5-sales-demo devcontainer",\n      "version": "1.2.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/devcontainer",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/devcontainer",\n      "category": "productivity",\n      "keywords": ["devcontainer", "tools", "catalog", "cli", "inventory", "container"],\n      "tags": ["devcontainer", "tools", "catalog", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["devcontainer"],\n        "requirements": ["A supported development container runtime"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "platform",\n      "description": "Provider-neutral F5 Distributed Cloud Secure Mesh Site v2 capabilities, configuration, bootstrap, and status tools",\n      "version": "6.0.1",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/platform",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/platform",\n      "category": "productivity",\n      "keywords": [\n        "console",\n        "browser",\n        "automation",\n        "azure-sso",\n        "mcp",\n        "chrome-devtools",\n        "f5xc",\n        "api",\n        "rest",\n        "platform",\n        "openapi",\n        "crud",\n        "spec-aware"\n      ],\n      "tags": ["console", "browser", "automation", "f5xc", "api", "platform", "openapi"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["platform"],\n        "requirements": ["F5 Distributed Cloud API URL and token environment variables"],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "osint-framework",\n      "description": "OSINT Framework tool catalog and investigation skills — 1,064 free intelligence-gathering tools across 34 categories, mapped from osintframework.com. Category-based skills, executable investigation pipelines, CLI tool execution, and OPSEC-aware workflows.",\n      "version": "1.0.8",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/osint-framework",\n      "keywords": ["osint", "reconnaissance", "intelligence", "investigation", "security"],\n      "license": "Apache-2.0",\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "source": "./plugins/osint-framework",\n      "category": "security",\n      "tags": ["osint", "recon", "security", "intelligence"],\n      "lifecycle": {\n        "mode": "content",\n        "integrations": [],\n        "requirements": ["OSINT framework content only"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "firecrawl",\n      "description": "Local self-hosted firecrawl web scraping — scrape, crawl, and map websites via the local firecrawl API on port 3002. No API keys, no subscriptions, fully open-source.",\n      "version": "1.2.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/firecrawl",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/firecrawl",\n      "category": "productivity",\n      "keywords": ["firecrawl", "scrape", "crawl", "web-scraping", "markdown", "self-hosted", "local", "open-source"],\n      "tags": ["firecrawl", "scraping", "web", "local"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["firecrawl"],\n        "requirements": ["A reachable local Firecrawl service"],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "salesforce",\n      "description": "Salesforce pipeline intelligence with shared lifecycle setup, account discovery, context, and reporting tools",\n      "version": "1.5.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/salesforce",\n      "keywords": [\n        "salesforce",\n        "sf",\n        "apex",\n        "lwc",\n        "soql",\n        "metadata",\n        "deploy",\n        "testing",\n        "sfdx",\n        "agentforce",\n        "pipeline",\n        "xcsh"\n      ],\n      "license": "Apache-2.0",\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "source": "./plugins/salesforce",\n      "category": "development",\n      "tags": ["salesforce", "development", "cli", "crm", "xcsh-extension"],\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["salesforce"],\n        "requirements": ["Salesforce CLI", "An authenticated default Salesforce org"],\n        "setupRequired": true,\n        "collectedData": ["accounts", "identifiers", "business_profile"],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "cloudstatus",\n      "description": "Live cloud status and Internet network intelligence for xcsh — current incidents, routing, registration, RPKI, peering, facilities, F5 Regional Edge evidence, and bounded path diagnostics",\n      "version": "1.7.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/cloudstatus",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/cloudstatus",\n      "category": "productivity",\n      "keywords": [\n        "status",\n        "monitoring",\n        "incidents",\n        "maintenance",\n        "statuspage",\n        "operational-intelligence",\n        "network-intelligence",\n        "bgp",\n        "rdap",\n        "rpki",\n        "routing",\n        "location",\n        "peeringdb",\n        "facilities",\n        "f5xc",\n        "atlassian"\n      ],\n      "tags": ["status", "network-intelligence", "routing", "peering", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "on_demand",\n        "integrations": ["cloudstatus"],\n        "requirements": ["Network access when a cloud-status command is invoked"],\n        "setupRequired": false,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "azure",\n      "description": "Azure CLI integration and deterministic F5 Customer Edge discovery, planning, lifecycle, and diagnostics",\n      "version": "4.4.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/azure",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/azure",\n      "category": "development",\n      "keywords": ["azure", "az", "cloud", "f5xc", "customer-edge", "secure-mesh-site"],\n      "tags": ["azure", "cloud", "f5xc", "customer-edge", "xcsh-extension"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["azure"],\n        "requirements": ["Azure CLI", "An authenticated Azure account"],\n        "setupRequired": true,\n        "collectedData": ["accounts"],\n        "pluginDependencies": ["platform"]\n      }\n    },\n    {\n      "name": "aws",\n      "description": "AWS CLI integration and deterministic F5 Secure Mesh Site v2 Customer Edge discovery, planning, lifecycle, and diagnostics",\n      "version": "2.1.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/aws",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/aws",\n      "category": "development",\n      "keywords": ["aws", "amazon", "cloud", "f5xc", "customer-edge", "secure-mesh-site", "tgw", "nlb"],\n      "tags": ["aws", "cloud", "f5xc", "customer-edge", "xcsh-extension"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["aws"],\n        "requirements": ["AWS CLI", "AWS credentials or an authenticated SSO profile"],\n        "setupRequired": true,\n        "collectedData": ["accounts"],\n        "pluginDependencies": ["platform"]\n      }\n    },\n    {\n      "name": "kvm",\n      "description": "Dual-NIC KVM Secure Mesh Site v2 with isolated SLO, home-LAN SLI, inside VIP, and rollback-protected host preparation",\n      "version": "3.0.4",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/kvm",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/kvm",\n      "category": "development",\n      "keywords": ["kvm", "libvirt", "qemu", "f5xc", "customer-edge", "secure-mesh-site", "home-lan", "terraform"],\n      "tags": ["kvm", "libvirt", "f5xc", "customer-edge", "xcsh-extension"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["kvm"],\n        "requirements": [\n          "Terraform CLI",\n          "libvirt and qemu system access",\n          "curl",\n          "F5 Distributed Cloud Platform integration"\n        ],\n        "setupRequired": true,\n        "setupAuthorization": "install",\n        "collectedData": [],\n        "pluginDependencies": ["platform"]\n      }\n    },\n    {\n      "name": "gcloud",\n      "description": "Google Cloud CLI integration — container-adapted auth, context injection, CLI operator agent, token expiry detection, and welcome screen status",\n      "version": "1.3.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/gcloud",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/gcloud",\n      "category": "development",\n      "keywords": ["gcloud", "google", "cloud"],\n      "tags": ["gcloud", "google", "cloud", "xcsh-extension"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["gcloud"],\n        "requirements": ["Google Cloud CLI", "An authenticated Google Cloud account"],\n        "setupRequired": true,\n        "collectedData": ["accounts"],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "gitlab",\n      "description": "GitLab CLI integration with shared lifecycle readiness, profile discovery, and issue management tools",\n      "version": "1.3.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "keywords": ["gitlab", "glab", "issues", "git"],\n      "license": "Apache-2.0",\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "source": "./plugins/gitlab",\n      "category": "development",\n      "tags": ["gitlab", "development", "cli", "xcsh-extension"],\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/gitlab",\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["gitlab"],\n        "requirements": ["GitLab CLI", "An authenticated GitLab account"],\n        "setupRequired": true,\n        "collectedData": ["accounts"],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "github",\n      "description": "GitHub and Git operations with typed lifecycle stages, normalized evidence, and advisory governance",\n      "version": "3.1.1",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/github",\n      "keywords": ["github", "gh", "git", "pr", "issues", "ci", "workflow", "git-sops", "github-ops"],\n      "license": "Apache-2.0",\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "source": "./plugins/github",\n      "category": "development",\n      "tags": ["github", "development", "cli", "workflow", "xcsh-extension"],\n      "recommended": true,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["github", "github_email"],\n        "requirements": ["GitHub CLI", "An authenticated GitHub account"],\n        "setupRequired": true,\n        "setupAuthorization": "install",\n        "collectedData": ["accounts", "email", "identifiers", "sameAs"],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "herdr",\n      "description": "Install and operate the stable F5 Herdr fork with verified native xcsh health, explicit pairing, and complete pane-control guidance.",\n      "version": "1.1.5",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/herdr",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "extensions": ["extensions/integration.ts"],\n      "xcsh": {\n        "name": "Herdr",\n        "version": "1.1.5"\n      },\n      "source": "./plugins/herdr",\n      "category": "development",\n      "keywords": ["herdr", "terminal", "multiplexer", "panes", "agents"],\n      "tags": ["terminal", "orchestration", "agents", "xcsh-extension"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["herdr"],\n        "requirements": [\n          "Supported 64-bit Linux, macOS, or Windows host",\n          "HTTPS access to the f5-sales-demo/herdr stable manifest and release"\n        ],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "asm-migration",\n      "description": "Deterministic BIG-IP ASM conversion and guarded F5 Distributed Cloud deployment",\n      "version": "2.1.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/asm-migration",\n      "keywords": ["asm", "waf", "migration", "f5xc", "xcsh-extension"],\n      "license": "Apache-2.0",\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "source": "./plugins/asm-migration",\n      "category": "security",\n      "tags": ["asm", "waf", "security", "migration", "f5xc"],\n      "recommended": false,\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["asm_migration"],\n        "requirements": ["ASM migration runtime dependencies", "F5 Distributed Cloud Platform integration"],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": ["platform"]\n      }\n    },\n    {\n      "name": "terraform",\n      "description": "Senior DevOps Infrastructure-as-Code plugin providing HashiCorp Registry proactive version checks, HCL authoring, testing frameworks, and troubleshooting playbooks.",\n      "version": "2.1.0",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/terraform",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "source": "./plugins/terraform",\n      "category": "development",\n      "keywords": ["terraform", "hcl", "iac", "devops", "hashicorp", "testing", "troubleshooting"],\n      "tags": ["terraform", "iac", "devops", "f5xc"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["terraform"],\n        "requirements": ["Terraform CLI"],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "xorg",\n      "version": "1.1.9",\n      "description": "Ubuntu 24.04 Xorg desktop automation substrate",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "extensions": ["extensions/integration.ts"],\n      "xcsh": {\n        "name": "Xorg",\n        "version": "1.1.9"\n      },\n      "source": "./plugins/xorg",\n      "category": "development",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/xorg",\n      "keywords": ["xorg", "at-spi", "xtest", "pipewire"],\n      "tags": ["linux", "desktop", "automation"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["xorg"],\n        "requirements": ["Ubuntu 24.04 with passwordless sudo"],\n        "setupRequired": true,\n        "setupAuthorization": "install",\n        "collectedData": [],\n        "pluginDependencies": []\n      }\n    },\n    {\n      "name": "zoom",\n      "version": "1.1.6",\n      "description": "Verified Zoom Workplace control through public xorgctl JSON",\n      "license": "Apache-2.0",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "extensions": ["extensions/integration.ts"],\n      "xcsh": {\n        "name": "Zoom",\n        "version": "1.1.6"\n      },\n      "source": "./plugins/zoom",\n      "category": "productivity",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/zoom",\n      "keywords": ["zoom", "meeting", "accessibility", "virtual-camera"],\n      "tags": ["zoom", "meeting", "automation"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["zoom"],\n        "requirements": ["Ubuntu 24.04 amd64", "Zoom Workplace 7.2.1.5760", "Xorg, Herdr, and Ghostty plugins"],\n        "setupRequired": true,\n        "collectedData": [],\n        "pluginDependencies": ["xorg", "herdr", "ghostty"]\n      }\n    },\n    {\n      "name": "ghostty",\n      "version": "1.0.4",\n      "description": "Curated Linux Ghostty setup for Xorg and Herdr terminal sessions",\n      "license": "MIT",\n      "author": {\n        "name": "f5-sales-demo"\n      },\n      "extensions": ["extensions/integration.ts"],\n      "xcsh": {\n        "name": "Ghostty",\n        "version": "1.0.4"\n      },\n      "source": "./plugins/ghostty",\n      "category": "development",\n      "homepage": "https://github.com/f5-sales-demo/marketplace/tree/main/plugins/ghostty",\n      "keywords": ["ghostty", "terminal", "xorg", "herdr"],\n      "tags": ["linux", "terminal", "xorg"],\n      "repository": "https://github.com/f5-sales-demo/marketplace",\n      "lifecycle": {\n        "mode": "integrated",\n        "integrations": ["ghostty"],\n        "requirements": ["Ubuntu Linux", "Xorg and Herdr marketplace plugins"],\n        "setupRequired": true,\n        "setupAuthorization": "install",\n        "collectedData": [],\n        "pluginDependencies": ["xorg", "herdr"]\n      }\n    }\n  ]\n}\n';
 
 export default builtinMarketplaceSnapshot;

package/src/extensibility/plugins/marketplace/builtin-marketplace.provenance.json

@@ -1,7 +1,7 @@
 {
   "repository": "https://github.com/f5-sales-demo/marketplace",
   "sourcePath": ".xcsh-plugin/marketplace.json",
-  "commit": "c47a8ac17ac805af56d8fc4240de5bd30d57cc54",
-  "sha256": "8dd87f4f9dc8e228d3688dd8add17faa332e9a7fe0e4453999963682be1f6ccf",
-  "capturedAt": "2026-09-29T12:08:23.831Z"
+  "commit": "e5460adca2d6ebab2e585c8a8924b0c1ce502c8f",
+  "sha256": "9de315c4ef171142a1e2235f99be47c9bdb51963ba456728d153c570cb6e8724",
+  "capturedAt": "2026-09-30T03:10:08.894Z"
 }

package/src/extensibility/plugins/marketplace/fetcher.ts

@@ -132,6 +132,12 @@ export function parseMarketplaceCatalog(content: string, filePath: string): Mark
 		const entry = plugins[i];
 		assertField(typeof entry === "object" && entry !== null && !Array.isArray(entry), `plugins[${i}]`, filePath);
 		const p = entry as Record<string, unknown>;
+		assertField(
+			p.minimumRuntimeVersion === undefined ||
+				(typeof p.minimumRuntimeVersion === "string" && /^\d+\.\d+\.\d+$/.test(p.minimumRuntimeVersion)),
+			`plugins[${i}].minimumRuntimeVersion`,
+			filePath,
+		);
 		assertField(typeof p.name === "string" && isValidNameSegment(p.name), `plugins[${i}].name`, filePath);
 		// source can be a string path or a typed object (github/url/git-subdir/npm)
 		// all typed objects carry a "source" discriminant string field

package/src/extensibility/plugins/marketplace/manager.ts

@@ -1,3 +1,4 @@
+import { assertRuntimeRequirement } from "./runtime";
 /**
  * MarketplaceManager — orchestrates registry, fetcher, resolver, and cache.
  *
@@ -491,6 +492,8 @@ export class MarketplaceManager {
 		if (!entry) throw new Error(`Marketplace "${marketplace}" not found`);
 		const catalog = await this.#readCatalog(entry);
 		const plan = resolvePluginDependencyNames(catalog, name);
+		for (const pluginName of plan)
+			assertRuntimeRequirement(catalog.plugins.find(plugin => plugin.name === pluginName)!);
 		const retainReplacedCache = entry.sourceType === "local";
 		const registryPath = this.#registryPath(scope);
 		const before = await readInstalledPluginsRegistry(registryPath);

package/src/extensibility/plugins/marketplace/runtime.ts

@@ -0,0 +1,10 @@
+import { VERSION } from "@f5-sales-demo/pi-utils";
+export function assertRuntimeRequirement(
+	plugin: { name: string; minimumRuntimeVersion?: string },
+	current = VERSION,
+): void {
+	if (plugin.minimumRuntimeVersion === undefined) return;
+	if (!/^\d+\.\d+\.\d+$/.test(plugin.minimumRuntimeVersion)) throw new Error("Invalid minimum xcsh runtime version");
+	if (Bun.semver.order(current, plugin.minimumRuntimeVersion) < 0)
+		throw new Error(`${plugin.name} requires xcsh ${plugin.minimumRuntimeVersion} or later; upgrade xcsh first`);
+}

package/src/extensibility/plugins/marketplace/types.ts

@@ -89,6 +89,7 @@ export interface MarketplacePluginLifecycle {
 }
 
 export interface MarketplacePluginEntry {
+	minimumRuntimeVersion?: string;
 	name: string;
 	displayName?: string;
 	source: PluginSource;