@f5xc-salesdemos/xcsh 18.33.3 → 18.35.0

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "18.33.3",
+	"version": "18.35.0",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -48,12 +48,12 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "18.33.3",
-		"@f5xc-salesdemos/pi-agent-core": "18.33.3",
-		"@f5xc-salesdemos/pi-ai": "18.33.3",
-		"@f5xc-salesdemos/pi-natives": "18.33.3",
-		"@f5xc-salesdemos/pi-tui": "18.33.3",
-		"@f5xc-salesdemos/pi-utils": "18.33.3",
+		"@f5xc-salesdemos/xcsh-stats": "18.35.0",
+		"@f5xc-salesdemos/pi-agent-core": "18.35.0",
+		"@f5xc-salesdemos/pi-ai": "18.35.0",
+		"@f5xc-salesdemos/pi-natives": "18.35.0",
+		"@f5xc-salesdemos/pi-tui": "18.35.0",
+		"@f5xc-salesdemos/pi-utils": "18.35.0",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.18",

package/scripts/generate-api-spec-index.ts

@@ -3,7 +3,6 @@
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
-import { gzipSync } from "node:zlib";
 import { $ } from "bun";
 
 interface SpecPathOperation {
@@ -81,9 +80,16 @@ const REPO = "f5xc-salesdemos/api-specs-enriched";
 const outputPath = path.resolve(import.meta.dir, "../src/internal-urls/api-spec-index.generated.ts");
 const catalogOutputPath = path.resolve(import.meta.dir, "../src/internal-urls/api-catalog-index.generated.ts");
 
+function githubHeaders(): Record<string, string> {
+	const headers: Record<string, string> = { Accept: "application/vnd.github+json" };
+	const token = process.env.GITHUB_TOKEN ?? process.env.GH_TOKEN;
+	if (token) headers.Authorization = `Bearer ${token}`;
+	return headers;
+}
+
 async function resolveLatestTag(): Promise<string> {
 	const response = await fetch(`https://api.github.com/repos/${REPO}/releases/latest`, {
-		headers: { Accept: "application/vnd.github+json" },
+		headers: githubHeaders(),
 	});
 	if (!response.ok) {
 		throw new Error(`Failed to fetch latest release from ${REPO}: ${response.status} ${response.statusText}`);
@@ -203,7 +209,7 @@ if (catalog) {
 }
 
 const domainEntries: string[] = [];
-const blobEntries: string[] = [];
+const specDataEntries: string[] = [];
 let processedCount = 0;
 let skippedCount = 0;
 
@@ -220,8 +226,6 @@ for (const entry of rawIndex.specifications) {
 		paths?: Record<string, Record<string, SpecPathOperation>>;
 		[k: string]: unknown;
 	};
-	const compressed = gzipSync(Buffer.from(specContent));
-	const b64 = compressed.toString("base64");
 
 	const resources = (entry["x-f5xc-primary-resources"] ?? []).map(r => {
 		const upstreamSc = r.schema_components ?? [];
@@ -282,7 +286,7 @@ for (const entry of rawIndex.specifications) {
 			.join("\n"),
 	);
 
-	blobEntries.push(`\t${JSON.stringify(entry.domain)}: ${JSON.stringify(b64)},`);
+	specDataEntries.push(`\t${JSON.stringify(entry.domain)}: ${JSON.stringify(specJson)},`);
 	processedCount++;
 }
 
@@ -310,8 +314,8 @@ const output = [
 	serializeEnrichment("acronyms", acronyms),
 	`};`,
 	"",
-	`export const API_SPEC_BLOBS: Readonly<Record<string, string>> = {`,
-	...blobEntries,
+	`export const API_SPEC_DATA: Readonly<Record<string, unknown>> = {`,
+	...specDataEntries,
 	`};`,
 	"",
 ]
@@ -328,13 +332,11 @@ console.log(
 // Generate API catalog index
 if (catalog) {
 	const categories = (catalog.categories ?? []) as Array<{ name: string; displayName: string; operations: unknown[] }>;
-	const catalogBlobEntries: string[] = [];
 	const catalogIndexEntries: string[] = [];
 
+	const catalogDataEntries: string[] = [];
 	for (const cat of categories) {
-		const catJson = JSON.stringify(cat);
-		const catCompressed = gzipSync(Buffer.from(catJson));
-		catalogBlobEntries.push(`\t${JSON.stringify(cat.name)}: ${JSON.stringify(catCompressed.toString("base64"))},`);
+		catalogDataEntries.push(`\t${JSON.stringify(cat.name)}: ${JSON.stringify(cat)},`);
 		catalogIndexEntries.push(
 			`\t\t{ name: ${JSON.stringify(cat.name)}, displayName: ${JSON.stringify(cat.displayName)}, operationCount: ${cat.operations?.length ?? 0} },`,
 		);
@@ -343,7 +345,7 @@ if (catalog) {
 	const catalogOutput = [
 		"// Auto-generated by scripts/generate-api-spec-index.ts - DO NOT EDIT",
 		"",
-		`import type { ApiCatalogCategorySummary, ApiCatalogIndex } from "./api-catalog-types";`,
+		`import type { ApiCatalogCategory, ApiCatalogCategorySummary, ApiCatalogIndex } from "./api-catalog-types";`,
 		"",
 		`export const API_CATALOG_INDEX: ApiCatalogIndex = {`,
 		`\tversion: ${JSON.stringify(catalog.version ?? "unknown")},`,
@@ -358,8 +360,8 @@ if (catalog) {
 		...catalogIndexEntries,
 		`];`,
 		"",
-		`export const API_CATALOG_BLOBS: Readonly<Record<string, string>> = {`,
-		...catalogBlobEntries,
+		`export const API_CATALOG_DATA: Readonly<Record<string, ApiCatalogCategory>> = {`,
+		...catalogDataEntries,
 		`};`,
 		"",
 	].join("\n");

package/src/cli.ts

@@ -93,4 +93,15 @@ export function runCli(argv: string[]): Promise<void> {
 	return run({ bin: APP_NAME, version: VERSION, argv: runArgv, commands, help: showHelp });
 }
 
+if (process.env.XCSH_SMOKE_TEST_SPECS === "1") {
+	const specMod = require("./internal-urls/api-spec-index.generated") as { API_SPEC_INDEX?: { domains?: unknown[] } };
+	const catalogMod = require("./internal-urls/api-catalog-index.generated") as {
+		API_CATALOG_CATEGORY_SUMMARIES?: unknown[];
+	};
+	const domainCount = specMod.API_SPEC_INDEX?.domains?.length ?? 0;
+	const categoryCount = catalogMod.API_CATALOG_CATEGORY_SUMMARIES?.length ?? 0;
+	console.log(`api-specs: ${domainCount} domains, ${categoryCount} categories`);
+	process.exit(domainCount > 0 && categoryCount > 0 ? 0 : 1);
+}
+
 await runCli(process.argv.slice(2));

package/src/config/settings-schema.ts

@@ -1438,6 +1438,17 @@ export const SETTINGS_SCHEMA = {
 		},
 	},
 
+	"bash.verbose": {
+		type: "boolean",
+		default: false,
+		ui: {
+			tab: "tools",
+			label: "Bash Verbose",
+			description:
+				"Show standard command output panel. When disabled, shows a compact single-line summary with status indicator.",
+		},
+	},
+
 	// MCP
 	"mcp.enableProjectConfig": {
 		type: "boolean",

package/src/internal-urls/api-catalog-resolve.ts

@@ -1,11 +1,7 @@
-import { gunzipSync } from "node:zlib";
-import { LRUCache } from "lru-cache";
 import type { ApiCatalogCategory, ApiCatalogCategorySummary, ApiCatalogIndex } from "./api-catalog-types";
 import type { ApiSpecIndex } from "./api-spec-types";
 import type { InternalResource, InternalUrl } from "./types";
 
-const LRU_CAPACITY = 5;
-
 function normalizeSearchTerm(s: string): string {
 	return s.toLowerCase().replace(/_/g, "-");
 }
@@ -17,22 +13,12 @@ export interface ApiCatalogResolver {
 export function createApiCatalogResolver(
 	index: ApiCatalogIndex,
 	categorySummaries: readonly ApiCatalogCategorySummary[],
-	blobs: Record<string, string>,
+	data: Readonly<Record<string, ApiCatalogCategory>>,
 	specIndex?: ApiSpecIndex,
 ): ApiCatalogResolver {
-	const cache = new LRUCache<string, ApiCatalogCategory>({ max: LRU_CAPACITY });
-
-	function decompress(category: string): ApiCatalogCategory {
-		const cached = cache.get(category);
-		if (cached) return cached;
-
-		const blob = blobs[category];
-		if (!blob) throw new Error(`No catalog blob for category: ${category}`);
-
-		const buffer = Buffer.from(blob, "base64");
-		const decompressed = gunzipSync(buffer);
-		const cat = JSON.parse(decompressed.toString("utf-8")) as ApiCatalogCategory;
-		cache.set(category, cat);
+	function lookup(category: string): ApiCatalogCategory {
+		const cat = data[category];
+		if (!cat) throw new Error(`No catalog data for category: ${category}`);
 		return cat;
 	}
 
@@ -52,7 +38,7 @@ export function createApiCatalogResolver(
 							const catName = res.catalogCategories[0];
 							if (categorySummaries.some(c => c.name === catName)) {
 								try {
-									const cat = decompress(catName);
+									const cat = lookup(catName);
 									return makeResource(url, renderCatalogDetail(cat, index, { compact }));
 								} catch {
 									break;
@@ -75,7 +61,7 @@ export function createApiCatalogResolver(
 			}
 
 			try {
-				const cat = decompress(category);
+				const cat = lookup(category);
 				return makeResource(url, renderCatalogDetail(cat, index, { compact }));
 			} catch (err) {
 				const message = err instanceof Error ? err.message : String(err);
@@ -174,6 +160,13 @@ function formatRequiredFor(
 	return ops.length > 0 ? ops.join(", ") : "--";
 }
 
+function fieldMetadataFingerprint(metadata: Record<string, unknown>): string {
+	return JSON.stringify(metadata, (key, value) => {
+		if (key === "validatedAt" || key === "confidence" || key === "source") return undefined;
+		return value;
+	});
+}
+
 function formatDefault(defaultVal: unknown, serverDefault: boolean | undefined): string {
 	if (defaultVal == null && !serverDefault) return "--";
 	let val = "--";
@@ -235,7 +228,7 @@ function renderCatalogDetail(cat: ApiCatalogCategory, index: ApiCatalogIndex, op
 
 		// Field Constraints (Tier 2) — skipped in compact mode, deduped when identical across operations
 		if (op.fieldMetadata && Object.keys(op.fieldMetadata).length > 0 && !options?.compact) {
-			const currentFingerprint = JSON.stringify(op.fieldMetadata);
+			const currentFingerprint = fieldMetadataFingerprint(op.fieldMetadata as Record<string, unknown>);
 			if (fieldConstraintsRenderedForOp && currentFingerprint === fieldConstraintsFingerprint) {
 				sections.push("", "### Field Constraints");
 				sections.push(`Same as ${fieldConstraintsRenderedForOp} — see above.`, "");

package/src/internal-urls/api-spec-resolve.ts

@@ -1,9 +1,6 @@
-import { gunzipSync } from "node:zlib";
-import { LRUCache } from "lru-cache";
 import type { ApiSpecDomainEntry, ApiSpecIndex, OpenAPIPathOperation, OpenAPISpec } from "./api-spec-types";
 import type { InternalResource, InternalUrl } from "./types";
 
-const LRU_CAPACITY = 5;
 const SCHEMA_RENDER_MAX_DEPTH = 3;
 const CRUD_OPERATION_SUFFIXES = [".API.Create", ".API.Replace", ".API.Get", ".API.List", ".API.Delete"];
 
@@ -21,28 +18,14 @@ export interface ApiSpecResolver {
 	resolve(url: InternalUrl): Promise<InternalResource>;
 }
 
-export function createApiSpecResolver(index: ApiSpecIndex, blobs: Record<string, string>): ApiSpecResolver {
-	const cache = new LRUCache<string, OpenAPISpec>({ max: LRU_CAPACITY });
-
-	function decompress(domain: string): OpenAPISpec {
-		const cached = cache.get(domain);
-		if (cached) return cached;
-
-		const blob = blobs[domain];
-		if (!blob) {
-			throw new Error(`No spec blob for domain: ${domain}`);
-		}
-
-		try {
-			const buffer = Buffer.from(blob, "base64");
-			const decompressed = gunzipSync(buffer);
-			const spec = JSON.parse(decompressed.toString("utf-8")) as OpenAPISpec;
-			cache.set(domain, spec);
-			return spec;
-		} catch (err) {
-			const message = err instanceof Error ? err.message : String(err);
-			throw new Error(`Failed to decompress spec for domain '${domain}': ${message}`);
-		}
+export function createApiSpecResolver(
+	index: ApiSpecIndex,
+	data: Readonly<Record<string, OpenAPISpec>>,
+): ApiSpecResolver {
+	function lookup(domain: string): OpenAPISpec {
+		const spec = data[domain];
+		if (!spec) throw new Error(`No spec data for domain: ${domain}`);
+		return spec;
 	}
 
 	return {
@@ -80,7 +63,7 @@ export function createApiSpecResolver(index: ApiSpecIndex, blobs: Record<string,
 
 				if (resource) {
 					const crud = url.searchParams.get("crud") === "true";
-					const spec = decompress(domain);
+					const spec = lookup(domain);
 					const matchingPaths = filterPathsByResource(spec, resource, entry);
 					if (Object.keys(matchingPaths).length === 0) {
 						return makeResource(url, renderUnknownResource(resource, entry, spec));
@@ -89,11 +72,11 @@ export function createApiSpecResolver(index: ApiSpecIndex, blobs: Record<string,
 				}
 
 				if (pathFilter) {
-					const spec = decompress(domain);
+					const spec = lookup(domain);
 					return makeResource(url, renderPathSpec(domain, pathFilter, spec));
 				}
 
-				const spec = decompress(domain);
+				const spec = lookup(domain);
 				return makeResource(url, renderDomainDetail(domain, entry, spec));
 			} catch (err) {
 				const message = err instanceof Error ? err.message : String(err);

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "18.33.3",
-	"commit": "ea081417a014b40c53422b3a51e062a13f035c5e",
-	"shortCommit": "ea08141",
+	"version": "18.35.0",
+	"commit": "ec582a736845e44f023ae6975c86e5377b6ccbdf",
+	"shortCommit": "ec582a7",
 	"branch": "main",
-	"tag": "v18.33.3",
-	"commitDate": "2026-05-03T05:25:43Z",
-	"buildDate": "2026-05-03T05:47:37.045Z",
+	"tag": "v18.35.0",
+	"commitDate": "2026-05-03T21:42:09Z",
+	"buildDate": "2026-05-03T22:04:53.312Z",
 	"dirty": false,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/ea081417a014b40c53422b3a51e062a13f035c5e",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.33.3"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/ec582a736845e44f023ae6975c86e5377b6ccbdf",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.35.0"
 };

package/src/internal-urls/xcsh-protocol.ts

@@ -21,9 +21,9 @@ import * as path from "node:path";
 import { logger } from "@f5xc-salesdemos/pi-utils";
 import type { ContextStatus } from "../services/f5xc-context";
 import { type ApiCatalogResolver, createApiCatalogResolver } from "./api-catalog-resolve";
-import type { ApiCatalogCategorySummary, ApiCatalogIndex } from "./api-catalog-types";
+import type { ApiCatalogCategory, ApiCatalogCategorySummary, ApiCatalogIndex } from "./api-catalog-types";
 import { type ApiSpecResolver, createApiSpecResolver } from "./api-spec-resolve";
-import type { ApiSpecIndex } from "./api-spec-types";
+import type { ApiSpecIndex, OpenAPISpec } from "./api-spec-types";
 import { getRuntimeBuildInfo, type RuntimeBuildInfo, renderAboutDoc } from "./build-info-runtime";
 import { EMBEDDED_DOC_FILENAMES, EMBEDDED_DOCS } from "./docs-index.generated";
 import type { InternalResource, InternalUrl, ProtocolHandler } from "./types";
@@ -43,14 +43,14 @@ const EMPTY_CATALOG_INDEX: ApiCatalogIndex = {
 	defaults: {},
 };
 
-let _apiSpecCache: { index: ApiSpecIndex; blobs: Record<string, string>; version: string } | null = null;
+let _apiSpecCache: { index: ApiSpecIndex; data: Readonly<Record<string, OpenAPISpec>>; version: string } | null = null;
 
-function loadApiSpecs(): { index: ApiSpecIndex; blobs: Record<string, string>; version: string } {
+function loadApiSpecs(): { index: ApiSpecIndex; data: Readonly<Record<string, OpenAPISpec>>; version: string } {
 	if (_apiSpecCache) return _apiSpecCache;
 	try {
 		const mod = require("./api-spec-index.generated") as {
 			API_SPEC_INDEX?: ApiSpecIndex;
-			API_SPEC_BLOBS?: Record<string, string>;
+			API_SPEC_DATA?: Readonly<Record<string, unknown>>;
 			API_SPEC_VERSION?: string;
 		};
 		const index = mod.API_SPEC_INDEX ?? EMPTY_INDEX;
@@ -60,14 +60,14 @@ function loadApiSpecs(): { index: ApiSpecIndex; blobs: Record<string, string>; v
 		}
 		_apiSpecCache = {
 			index,
-			blobs: mod.API_SPEC_BLOBS ?? {},
+			data: (mod.API_SPEC_DATA ?? {}) as Readonly<Record<string, OpenAPISpec>>,
 			version,
 		};
 	} catch (err) {
 		logger.warn("api-spec index unavailable, embedded specs disabled", {
 			error: err instanceof Error ? err.message : String(err),
 		});
-		_apiSpecCache = { index: EMPTY_INDEX, blobs: {}, version: "unavailable" };
+		_apiSpecCache = { index: EMPTY_INDEX, data: {}, version: "unavailable" };
 	}
 	return _apiSpecCache;
 }
@@ -75,20 +75,20 @@ function loadApiSpecs(): { index: ApiSpecIndex; blobs: Record<string, string>; v
 let _apiCatalogCache: {
 	index: ApiCatalogIndex;
 	summaries: readonly ApiCatalogCategorySummary[];
-	blobs: Record<string, string>;
+	data: Readonly<Record<string, ApiCatalogCategory>>;
 } | null = null;
 
 function loadApiCatalog(): {
 	index: ApiCatalogIndex;
 	summaries: readonly ApiCatalogCategorySummary[];
-	blobs: Record<string, string>;
+	data: Readonly<Record<string, ApiCatalogCategory>>;
 } {
 	if (_apiCatalogCache) return _apiCatalogCache;
 	try {
 		const mod = require("./api-catalog-index.generated") as {
 			API_CATALOG_INDEX?: ApiCatalogIndex;
 			API_CATALOG_CATEGORY_SUMMARIES?: readonly ApiCatalogCategorySummary[];
-			API_CATALOG_BLOBS?: Record<string, string>;
+			API_CATALOG_DATA?: Readonly<Record<string, ApiCatalogCategory>>;
 		};
 		const index = mod.API_CATALOG_INDEX ?? EMPTY_CATALOG_INDEX;
 		const summaries = mod.API_CATALOG_CATEGORY_SUMMARIES ?? [];
@@ -98,13 +98,13 @@ function loadApiCatalog(): {
 		_apiCatalogCache = {
 			index,
 			summaries,
-			blobs: mod.API_CATALOG_BLOBS ?? {},
+			data: mod.API_CATALOG_DATA ?? {},
 		};
 	} catch (err) {
 		logger.warn("api-catalog index unavailable, catalog disabled", {
 			error: err instanceof Error ? err.message : String(err),
 		});
-		_apiCatalogCache = { index: EMPTY_CATALOG_INDEX, summaries: [], blobs: {} };
+		_apiCatalogCache = { index: EMPTY_CATALOG_INDEX, summaries: [], data: {} };
 	}
 	return _apiCatalogCache;
 }
@@ -133,7 +133,7 @@ export class InternalDocsProtocolHandler implements ProtocolHandler {
 	#getApiSpecResolver(): ApiSpecResolver {
 		if (!this.#apiSpecResolver) {
 			const specs = loadApiSpecs();
-			this.#apiSpecResolver = createApiSpecResolver(specs.index, specs.blobs);
+			this.#apiSpecResolver = createApiSpecResolver(specs.index, specs.data);
 		}
 		return this.#apiSpecResolver;
 	}
@@ -145,7 +145,7 @@ export class InternalDocsProtocolHandler implements ProtocolHandler {
 			this.#apiCatalogResolver = createApiCatalogResolver(
 				catalog.index,
 				catalog.summaries,
-				catalog.blobs,
+				catalog.data,
 				specs.index,
 			);
 		}

package/src/prompts/system/system-prompt.md

@@ -192,18 +192,19 @@ Most tools resolve custom protocol URLs to internal resources (not web URLs):
     This document contains the authoritative repository URL, issues URL, and source location.
     For identity questions (source code, repo, version, who built this) — answer from `xcsh://about` alone. Do not call external GitHub tools.
 - `xcsh://api-spec/` — F5 XC API specifications (schema introspection, field types, validation).
-- `xcsh://api-catalog/` — F5 XC API operations with curl templates (CRUD execution).
+- `xcsh://api-catalog/` — F5 XC API operations catalog (CRUD execution).
 
   When the user needs to **make an API call** (create, read, update, delete):
 
-  1. `xcsh://api-catalog/?search={term}` → find the operation
-  2. `xcsh://api-catalog/{category}?compact=true` → get curl template, minimum payload,
-     OneOf recommendations, and response summary
+  1. `xcsh://api-catalog/?resource={resource_name}` → get endpoint path, method, minimum
+     payload JSON, required fields, and response summary
+  2. Call `xcsh_api` tool with `method`, `path`, `params` (all `{placeholder}` substitutions), and `payload`
 
-  For POST/PUT operations, the catalog includes a ready-to-use JSON payload.
-  Customize the payload with user-specified values (name, namespace, etc.),
-  substitute path parameters (`{namespace}`, `{name}`) with actual values,
-  insert the payload as the `-d` body in the curl template, and execute.
+  The `xcsh_api` tool handles authentication, URL construction, and HTTP execution.
+  Never construct curl commands for F5 XC API calls — use `xcsh_api` instead.
+
+  If the resource name is unknown, search first:
+  `xcsh://api-catalog/?search={term}` → find the matching category, then read it.
 
   When the user needs **field-level validation rules** (constraints, patterns, enums):
 
@@ -215,8 +216,7 @@ Most tools resolve custom protocol URLs to internal resources (not web URLs):
   If the domain is unknown, read `xcsh://api-spec/` first to identify it.
 
   **MUST NOT** read proactively.
-  Never start at `xcsh://api-spec/` for CRUD operations — the catalog provides
-  the same endpoint with curl template at a fraction of the token cost.
+  Never start at `xcsh://api-spec/` for CRUD operations — the catalog is faster.
   Never guess API paths or request schemas.
   Also available: `xcsh://api-spec/workflows/` (step-by-step guides),
   `xcsh://api-spec/errors/{code}` (error resolution), `xcsh://api-spec/glossary/` (acronym reference).

package/src/prompts/tools/bash.md

@@ -2,13 +2,14 @@ Executes bash command in shell session for terminal operations like git, bun, ca
 
 <instruction>
 - You **MUST** use `cwd` parameter to set working directory instead of `cd dir && …`
+- Always provide a `description` parameter: a short, human-readable summary of what the command does (e.g. "Install dependencies", "Run test suite"). This is displayed in compact mode and during execution.
 - Prefer `env: { NAME: "…" }` for multiline, quote-heavy, or untrusted values instead of inlining them into shell syntax; reference them from the command as `$NAME`
 - Quote variable expansions like `"$NAME"` to preserve exact content and avoid shell parsing bugs
 - PTY mode is opt-in: set `pty: true` only when command expects a real terminal (for example `sudo`, `ssh` where you need input from the user); default is `false`
 - You **MUST** use `;` only when later commands should run regardless of earlier failures
 - `skill://` URIs are auto-resolved to filesystem paths before execution
-	- `python skill://my-skill/scripts/init.py` runs the script from the skill directory
-	- `skill://<name>/<relative-path>` resolves within the skill's base directory
+  - `python skill://my-skill/scripts/init.py` runs the script from the skill directory
+  - `skill://<name>/<relative-path>` resolves within the skill's base directory
 - Internal URLs are also auto-resolved to filesystem paths before execution.
 {{#if asyncEnabled}}
 - Use `async: true` for long-running commands when you don't need immediate output; the call returns a background job ID and the result is delivered automatically as a follow-up.
@@ -45,17 +46,22 @@ You **MUST** use specialized tools instead of bash for ALL file operations:
 |---|---|
 |`cat file`, `head -n N file`|`read(path="file", limit=N)`|
 |`cat -n file \|sed -n '50,150p'`|`read(path="file", offset=50, limit=100)`|
+<!-- markdownlint-disable MD055 MD056 -->
 {{#if hasGrep}}|`grep -A 20 'pat' file`|`grep(pattern="pat", path="file", post=20)`|
 |`grep -rn 'pat' dir/`|`grep(pattern="pat", path="dir/")`|
 |`rg 'pattern' dir/`|`grep(pattern="pattern", path="dir/")`|{{/if}}
 {{#if hasFind}}|`find dir -name '*.ts'`|`find(pattern="dir/**/*.ts")`|{{/if}}
+<!-- markdownlint-enable MD055 MD056 -->
 |`ls dir/`|`read(path="dir/")`|
 |`cat <<'EOF' > file`|`write(path="file", content="…")`|
 |`sed -i 's/old/new/' file`|`edit(path="file", edits=[…])`|
 
+<!-- markdownlint-disable MD055 MD056 -->
 {{#if hasAstEdit}}|`sed -i 's/oldFn(/newFn(/' src/*.ts`|`ast_edit({ops:[{pat:"oldFn($$$A)", out:"newFn($$$A)"}], path:"src/"})`|{{/if}}
+<!-- markdownlint-enable MD055 MD056 -->
 {{#if hasAstGrep}}- You **MUST** use `ast_grep` for structural code search instead of bash `grep`/`awk`/`perl` pipelines{{/if}}
 {{#if hasAstEdit}}- You **MUST** use `ast_edit` for structural rewrites instead of bash `sed`/`awk`/`perl` pipelines{{/if}}
+
 - You **MUST NOT** use Bash for these operations like read, grep, find, edit, write, where specialized tools exist.
 - You **MUST NOT** use `2>&1` | `2>/dev/null` pattern, stdout and stderr are already merged.
 - You **MUST NOT** use `| head -n 50` or `| tail -n 100` pattern, use `head` and `tail` parameters instead.

package/src/prompts/tools/xcsh-api.md

@@ -0,0 +1,9 @@
+Execute an F5 Distributed Cloud API call directly.
+
+Handles authentication, URL construction, and HTTP execution.
+Requires `F5XC_API_URL` and `F5XC_API_TOKEN` environment variables.
+
+Pass all path `{placeholder}` values via `params`, e.g. `{ namespace: "default", name: "example-lb", vh_name: "example-vh" }`.
+Body is sent for all methods except GET when `payload` is provided — including DELETE operations that require a body.
+
+Use this tool after reading the API catalog to get the endpoint path and payload structure.

package/src/tools/bash.ts

@@ -9,6 +9,7 @@ import type { Component } from "@f5xc-salesdemos/pi-tui";
 import { ImageProtocol, TERMINAL, Text } from "@f5xc-salesdemos/pi-tui";
 import { $env, getProjectDir, isEnoent, prompt, setShellPwd } from "@f5xc-salesdemos/pi-utils";
 import { Type } from "@sinclair/typebox";
+import { Settings } from "../config/settings";
 import { type BashResult, executeBash } from "../exec/bash-executor";
 import type { RenderResultOptions } from "../extensibility/custom-tools/types";
 import { truncateToVisualLines } from "../modes/components/visual-truncate";
@@ -26,7 +27,7 @@ import { applyHeadTail } from "./bash-normalize";
 import { expandInternalUrls, type InternalUrlExpansionOptions } from "./bash-skill-urls";
 import { formatStyledTruncationWarning, type OutputMeta } from "./output-meta";
 import { resolveToCwd } from "./path-utils";
-import { formatToolWorkingDirectory, replaceTabs } from "./render-utils";
+import { formatToolWorkingDirectory, replaceTabs, truncateToWidth } from "./render-utils";
 import { ToolAbortError, ToolError } from "./tool-errors";
 import { toolResult } from "./tool-result";
 import { clampTimeout } from "./tool-timeouts";
@@ -41,6 +42,12 @@ const DEFAULT_AUTO_BACKGROUND_THRESHOLD_MS = 60_000;
 
 const bashSchemaBase = Type.Object({
 	command: Type.String({ description: "Command to execute" }),
+	description: Type.Optional(
+		Type.String({
+			description:
+				"Human-readable description of what this command does (e.g. 'Install dependencies', 'Run test suite')",
+		}),
+	),
 	env: Type.Optional(
 		Type.Record(Type.String({ pattern: BASH_ENV_NAME_PATTERN.source }), Type.String(), {
 			description:
@@ -71,6 +78,7 @@ type BashToolSchema = typeof bashSchemaBase | typeof bashSchemaWithAsync;
 
 export interface BashToolInput {
 	command: string;
+	description?: string;
 	env?: Record<string, string>;
 	timeout?: number;
 	cwd?: string;
@@ -680,6 +688,7 @@ export class BashTool implements AgentTool<BashToolSchema, BashToolDetails> {
 
 interface BashRenderArgs {
 	command?: string;
+	description?: string;
 	env?: Record<string, string>;
 	timeout?: number;
 	cwd?: string;
@@ -711,10 +720,18 @@ function formatBashCommand(args: BashRenderArgs): string {
 	return displayWorkdir ? `${prompt} cd ${displayWorkdir} && ${renderedCommand}` : `${prompt} ${renderedCommand}`;
 }
 
+function getBashVerboseSetting(): boolean {
+	try {
+		return Settings.instance.get("bash.verbose");
+	} catch {
+		return false;
+	}
+}
+
 export const bashToolRenderer = {
 	renderCall(args: BashRenderArgs, _options: RenderResultOptions, uiTheme: Theme): Component {
-		const cmdText = formatBashCommand(args);
-		const text = renderStatusLine({ icon: "pending", title: "Bash", description: cmdText }, uiTheme);
+		const summaryText = args.description ?? formatBashCommand(args);
+		const text = renderStatusLine({ icon: "pending", title: "Bash", description: summaryText }, uiTheme);
 		return new Text(text, 0, 0);
 	},
 
@@ -746,6 +763,30 @@ export const bashToolRenderer = {
 				const displayOutput = output.trimEnd();
 				const showingFullOutput = expanded && renderContext?.isFullOutput === true;
 
+				const rawOutputLines = displayOutput.split("\n");
+				const sixelLineMask =
+					TERMINAL.imageProtocol === ImageProtocol.Sixel ? getSixelLineMask(rawOutputLines) : undefined;
+				const hasSixelOutput = sixelLineMask?.some(Boolean) ?? false;
+
+				// Collapsed mode: single status line when bash.verbose=false
+				const verbose = getBashVerboseSetting();
+				const hasAsyncDetails = details?.async != null;
+				const forceExpand = isError || hasAsyncDetails || hasSixelOutput;
+				if (!verbose && !expanded && !forceExpand && !options.isPartial) {
+					const rawCmd = args?.command;
+					const summaryText =
+						args?.description ?? (rawCmd && rawCmd.length > 60 ? `${rawCmd.slice(0, 60)}…` : rawCmd) ?? "…";
+					const line = renderStatusLine(
+						{
+							title: "Bash",
+							description: summaryText,
+							badge: { label: "ok", color: "success" },
+						},
+						uiTheme,
+					);
+					return [truncateToWidth(line, width)];
+				}
+
 				// Build truncation warning
 				const timeoutSeconds = details?.timeoutSeconds ?? renderContext?.timeout;
 				const timeoutLine =
@@ -762,10 +803,6 @@ export const bashToolRenderer = {
 
 				const outputLines: string[] = [];
 				const hasOutput = displayOutput.trim().length > 0;
-				const rawOutputLines = displayOutput.split("\n");
-				const sixelLineMask =
-					TERMINAL.imageProtocol === ImageProtocol.Sixel ? getSixelLineMask(rawOutputLines) : undefined;
-				const hasSixelOutput = sixelLineMask?.some(Boolean) ?? false;
 				if (hasOutput) {
 					if (hasSixelOutput) {
 						outputLines.push(

package/src/tools/index.ts

@@ -56,6 +56,7 @@ import { loadSshTool } from "./ssh";
 import { SubmitResultTool } from "./submit-result";
 import { type TodoPhase, TodoWriteTool } from "./todo-write";
 import { WriteTool } from "./write";
+import { XcshApiTool } from "./xcsh-api";
 
 // Exa MCP tools (22 tools)
 
@@ -244,6 +245,7 @@ export const BUILTIN_TOOLS: Record<string, ToolFactory> = {
 	web_search: s => new SearchTool(s),
 	search_tool_bm25: SearchToolBm25Tool.createIf,
 	write: s => new WriteTool(s),
+	xcsh_api: s => new XcshApiTool(s),
 };
 
 export const HIDDEN_TOOLS: Record<string, ToolFactory> = {

package/src/tools/xcsh-api.ts

@@ -0,0 +1,106 @@
+import type { AgentTool, AgentToolResult } from "@f5xc-salesdemos/pi-agent-core";
+import { prompt } from "@f5xc-salesdemos/pi-utils";
+import { type Static, Type } from "@sinclair/typebox";
+import xcshApiDescription from "../prompts/tools/xcsh-api.md" with { type: "text" };
+import type { ToolSession } from ".";
+
+const xcshApiSchema = Type.Object({
+	method: Type.Union(
+		[Type.Literal("GET"), Type.Literal("POST"), Type.Literal("PUT"), Type.Literal("PATCH"), Type.Literal("DELETE")],
+		{ description: "HTTP method" },
+	),
+	path: Type.String({ description: "API path, e.g. /api/config/namespaces/{namespace}/http_loadbalancers" }),
+	params: Type.Optional(
+		Type.Record(Type.String(), Type.String(), {
+			description:
+				"Path parameter substitutions, e.g. { namespace: 'default', name: 'example-lb', vh_name: 'example-vh' }",
+		}),
+	),
+	payload: Type.Optional(Type.Unknown({ description: "JSON body for POST/PUT/PATCH/DELETE requests" })),
+});
+
+type XcshApiParams = Static<typeof xcshApiSchema>;
+
+export interface XcshApiToolDetails {
+	status: number;
+	url: string;
+	method: string;
+}
+
+type XcshApiResult = AgentToolResult<XcshApiToolDetails> & { isError?: boolean };
+
+export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolDetails> {
+	readonly name = "xcsh_api";
+	readonly label = "API";
+	readonly description: string;
+	readonly parameters = xcshApiSchema;
+
+	constructor(_session: ToolSession) {
+		this.description = prompt.render(xcshApiDescription);
+	}
+
+	async execute(_toolCallId: string, params: XcshApiParams): Promise<XcshApiResult> {
+		const apiUrl = process.env.F5XC_API_URL;
+		if (!apiUrl) {
+			return {
+				content: [{ type: "text", text: "Error: F5XC_API_URL environment variable is not set." }],
+				isError: true,
+			};
+		}
+
+		const apiToken = process.env.F5XC_API_TOKEN;
+		if (!apiToken) {
+			return {
+				content: [{ type: "text", text: "Error: F5XC_API_TOKEN environment variable is not set." }],
+				isError: true,
+			};
+		}
+
+		let resolvedPath = params.path;
+		if (params.params) {
+			for (const [key, value] of Object.entries(params.params)) {
+				resolvedPath = resolvedPath.replaceAll(`{${key}}`, value);
+			}
+		}
+
+		const url = `${apiUrl.replace(/\/+$/, "")}${resolvedPath}`;
+		const headers: Record<string, string> = {
+			Authorization: `APIToken ${apiToken}`,
+			Accept: "application/json",
+		};
+
+		const init: RequestInit = { method: params.method, headers };
+
+		if (params.payload && params.method !== "GET") {
+			headers["Content-Type"] = "application/json";
+			init.body = JSON.stringify(params.payload);
+		}
+
+		try {
+			const response = await fetch(url, init);
+			const contentType = response.headers.get("content-type") ?? "";
+			let bodyText: string;
+
+			if (contentType.includes("application/json")) {
+				const json = await response.json();
+				bodyText = JSON.stringify(json, null, 2);
+			} else {
+				bodyText = await response.text();
+			}
+
+			const statusLine = `${response.status} ${response.statusText}`;
+
+			return {
+				content: [{ type: "text", text: `${statusLine}\n\n${bodyText}` }],
+				details: { status: response.status, url, method: params.method },
+				...(response.status >= 400 ? { isError: true } : {}),
+			};
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			return {
+				content: [{ type: "text", text: `Request failed: ${message}` }],
+				isError: true,
+			};
+		}
+	}
+}