@f5xc-salesdemos/xcsh 18.35.2 → 18.35.3

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "18.35.2",
+	"version": "18.35.3",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -48,12 +48,12 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "18.35.2",
-		"@f5xc-salesdemos/pi-agent-core": "18.35.2",
-		"@f5xc-salesdemos/pi-ai": "18.35.2",
-		"@f5xc-salesdemos/pi-natives": "18.35.2",
-		"@f5xc-salesdemos/pi-tui": "18.35.2",
-		"@f5xc-salesdemos/pi-utils": "18.35.2",
+		"@f5xc-salesdemos/xcsh-stats": "18.35.3",
+		"@f5xc-salesdemos/pi-agent-core": "18.35.3",
+		"@f5xc-salesdemos/pi-ai": "18.35.3",
+		"@f5xc-salesdemos/pi-natives": "18.35.3",
+		"@f5xc-salesdemos/pi-tui": "18.35.3",
+		"@f5xc-salesdemos/pi-utils": "18.35.3",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.18",

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "18.35.2",
-	"commit": "4476717a972f57d501906d71b1377b21e00744df",
-	"shortCommit": "4476717",
+	"version": "18.35.3",
+	"commit": "32785b70f062fe1930d72a355fc5d72bedb29128",
+	"shortCommit": "32785b7",
 	"branch": "main",
-	"tag": "v18.35.2",
-	"commitDate": "2026-05-03T23:47:28Z",
-	"buildDate": "2026-05-04T00:10:18.411Z",
+	"tag": "v18.35.3",
+	"commitDate": "2026-05-04T00:13:26Z",
+	"buildDate": "2026-05-04T00:32:30.792Z",
 	"dirty": false,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/4476717a972f57d501906d71b1377b21e00744df",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.35.2"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/32785b70f062fe1930d72a355fc5d72bedb29128",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.35.3"
 };

package/src/prompts/system/system-prompt.md

@@ -196,13 +196,22 @@ Most tools resolve custom protocol URLs to internal resources (not web URLs):
 
   When the user needs to **make an API call** (create, read, update, delete):
 
-  1. `xcsh://api-catalog/?resource={resource_name}` → get endpoint path, method, minimum
-     payload JSON, required fields, and response summary
+  1. `xcsh://api-catalog/?resource={resource_name}&compact=true` → get endpoint path, method,
+     minimum payload JSON, OneOf recommendations, and response summary
   2. Call `xcsh_api` tool with `method`, `path`, `params` (all `{placeholder}` substitutions), and `payload`
 
+  When the resource type and required parameters are clear, your **first output
+  MUST be the catalog tool call** — do not preface with explanation or deliberation.
+  If required parameters (e.g., namespace) are ambiguous, ask first.
+
   The `xcsh_api` tool handles authentication, URL construction, and HTTP execution.
   Never construct curl commands for F5 XC API calls — use `xcsh_api` instead.
 
+  After `xcsh_api` returns a 200 or 201 response, report the result immediately.
+  Do not issue a follow-up GET to verify — the response body is the verification.
+  Only issue a GET if the user explicitly asks to read current state, or if the
+  initial call returned a non-2xx status.
+
   If the resource name is unknown, search first:
   `xcsh://api-catalog/?search={term}` → find the matching category, then read it.
 

package/src/prompts/tools/xcsh-api.md

@@ -7,3 +7,5 @@ Pass all path `{placeholder}` values via `params`, e.g. `{ namespace: "default",
 Body is sent for all methods except GET when `payload` is provided — including DELETE operations that require a body.
 
 Use this tool after reading the API catalog to get the endpoint path and payload structure.
+
+API calls to the same F5 XC tenant reuse a single TLS connection — sequential calls are faster than parallel calls. Do not issue multiple xcsh_api calls in the same turn; issue them one at a time.

package/src/tools/xcsh-api.ts

@@ -25,6 +25,7 @@ export interface XcshApiToolDetails {
 	status: number;
 	url: string;
 	method: string;
+	requestId: string;
 }
 
 type XcshApiResult = AgentToolResult<XcshApiToolDetails> & { isError?: boolean };
@@ -35,21 +36,31 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 	readonly description: string;
 	readonly parameters = xcshApiSchema;
 
+	#apiBase: string;
+	#apiToken: string;
+
 	constructor(_session: ToolSession) {
 		this.description = prompt.render(xcshApiDescription);
+		this.#apiBase = (process.env.F5XC_API_URL ?? "").replace(/\/+$/, "");
+		this.#apiToken = process.env.F5XC_API_TOKEN ?? "";
+
+		if (this.#apiBase && this.#apiToken) {
+			fetch(`${this.#apiBase}/api/web/namespaces`, {
+				method: "HEAD",
+				headers: { Authorization: `APIToken ${this.#apiToken}` },
+			}).catch(() => {});
+		}
 	}
 
 	async execute(_toolCallId: string, params: XcshApiParams): Promise<XcshApiResult> {
-		const apiUrl = process.env.F5XC_API_URL;
-		if (!apiUrl) {
+		if (!this.#apiBase) {
 			return {
 				content: [{ type: "text", text: "Error: F5XC_API_URL environment variable is not set." }],
 				isError: true,
 			};
 		}
 
-		const apiToken = process.env.F5XC_API_TOKEN;
-		if (!apiToken) {
+		if (!this.#apiToken) {
 			return {
 				content: [{ type: "text", text: "Error: F5XC_API_TOKEN environment variable is not set." }],
 				isError: true,
@@ -63,13 +74,19 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 			}
 		}
 
-		const url = `${apiUrl.replace(/\/+$/, "")}${resolvedPath}`;
+		const url = `${this.#apiBase}${resolvedPath}`;
+		const requestId = crypto.randomUUID();
 		const headers: Record<string, string> = {
-			Authorization: `APIToken ${apiToken}`,
+			Authorization: `APIToken ${this.#apiToken}`,
 			Accept: "application/json",
+			"X-Request-ID": requestId,
 		};
 
-		const init: RequestInit = { method: params.method, headers };
+		const init: RequestInit = {
+			method: params.method,
+			headers,
+			signal: AbortSignal.timeout(30_000),
+		};
 
 		if (params.payload && params.method !== "GET") {
 			headers["Content-Type"] = "application/json";
@@ -78,21 +95,12 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 
 		try {
 			const response = await fetch(url, init);
-			const contentType = response.headers.get("content-type") ?? "";
-			let bodyText: string;
-
-			if (contentType.includes("application/json")) {
-				const json = await response.json();
-				bodyText = JSON.stringify(json, null, 2);
-			} else {
-				bodyText = await response.text();
-			}
-
+			const bodyText = await response.text();
 			const statusLine = `${response.status} ${response.statusText}`;
 
 			return {
 				content: [{ type: "text", text: `${statusLine}\n\n${bodyText}` }],
-				details: { status: response.status, url, method: params.method },
+				details: { status: response.status, url, method: params.method, requestId },
 				...(response.status >= 400 ? { isError: true } : {}),
 			};
 		} catch (err) {