@f5xc-salesdemos/xcsh 18.47.0 → 18.48.1

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "18.47.0",
+	"version": "18.48.1",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -48,12 +48,12 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "18.47.0",
-		"@f5xc-salesdemos/pi-agent-core": "18.47.0",
-		"@f5xc-salesdemos/pi-ai": "18.47.0",
-		"@f5xc-salesdemos/pi-natives": "18.47.0",
-		"@f5xc-salesdemos/pi-tui": "18.47.0",
-		"@f5xc-salesdemos/pi-utils": "18.47.0",
+		"@f5xc-salesdemos/xcsh-stats": "18.48.1",
+		"@f5xc-salesdemos/pi-agent-core": "18.48.1",
+		"@f5xc-salesdemos/pi-ai": "18.48.1",
+		"@f5xc-salesdemos/pi-natives": "18.48.1",
+		"@f5xc-salesdemos/pi-tui": "18.48.1",
+		"@f5xc-salesdemos/pi-utils": "18.48.1",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.18",

package/src/autoresearch/tools/init-experiment.ts

@@ -385,8 +385,8 @@ export function createInitExperimentTool(
 	};
 }
 
-function renderInitCall(name: string, theme: Theme, width?: number): string {
-	return `${theme.fg("toolTitle", theme.bold("init_experiment"))} ${theme.fg("contentAccent", truncateToWidth(replaceTabs(name), Math.max(20, (width ?? 100) - 20)))}`;
+function renderInitCall(name: string | undefined, theme: Theme, width?: number): string {
+	return `${theme.fg("toolTitle", theme.bold("init_experiment"))} ${theme.fg("contentAccent", truncateToWidth(replaceTabs(name ?? ""), Math.max(20, (width ?? 100) - 20)))}`;
 }
 
 function collectLoggedRunNumbers(results: ExperimentState["results"]): Set<number> {

package/src/autoresearch/tools/log-experiment.ts

@@ -362,7 +362,7 @@ export function createLogExperimentTool(
 			const color = args.status === "keep" ? "success" : args.status === "discard" ? "warning" : "error";
 			return {
 				render(width: number): string[] {
-					const description = truncateToWidth(replaceTabs(args.description), Math.max(20, width - 30));
+					const description = truncateToWidth(replaceTabs(args.description ?? ""), Math.max(20, width - 30));
 					return [
 						`${theme.fg("toolTitle", theme.bold("log_experiment"))} ${theme.fg(color, args.status)} ${theme.fg("muted", description)}`,
 					];
@@ -773,7 +773,7 @@ function truncateAsiValue(value: ASIData[string]): string {
 function renderSummary(details: LogDetails, theme: Theme, width?: number): string {
 	const { experiment, state } = details;
 	const color = experiment.status === "keep" ? "success" : experiment.status === "discard" ? "warning" : "error";
-	let summary = `${theme.fg(color, experiment.status.toUpperCase())} ${theme.fg("muted", truncateToWidth(replaceTabs(experiment.description), Math.max(20, (width ?? 100) - 30)))}`;
+	let summary = `${theme.fg(color, experiment.status.toUpperCase())} ${theme.fg("muted", truncateToWidth(replaceTabs(experiment.description ?? ""), Math.max(20, (width ?? 100) - 30)))}`;
 	summary += ` ${theme.fg("contentAccent", `${state.metricName}=${formatNum(experiment.metric, state.metricUnit)}`)}`;
 	if (state.bestMetric !== null) {
 		summary += ` ${theme.fg("dim", `baseline ${formatNum(state.bestMetric, state.metricUnit)}`)}`;

package/src/autoresearch/tools/run-experiment.ts

@@ -383,7 +383,7 @@ export function createRunExperimentTool(
 		renderCall(args, _options, theme): Component {
 			return {
 				render(width: number): string[] {
-					const commandPreview = truncateToWidth(replaceTabs(args.command), Math.max(20, width - 20));
+					const commandPreview = truncateToWidth(replaceTabs(args.command ?? ""), Math.max(20, width - 20));
 					return [`${theme.fg("toolTitle", theme.bold("run_experiment"))} ${theme.fg("muted", commandPreview)}`];
 				},
 				invalidate() {},

package/src/config/settings-schema.ts

@@ -1622,15 +1622,65 @@ export const SETTINGS_SCHEMA = {
 		ui: { tab: "tasks", label: "Skill Commands", description: "Register skills as /skill:name commands" },
 	},
 
-	"skills.enableCodexUser": { type: "boolean", default: true },
+	"skills.enableCodexUser": {
+		type: "boolean",
+		default: false,
+		ui: {
+			tab: "tasks",
+			label: "Codex User Skills",
+			description: "Load skills from Codex configuration",
+		},
+	},
 
-	"skills.enableClaudeUser": { type: "boolean", default: true },
+	"skills.enableClaudeUser": {
+		type: "boolean",
+		default: false,
+		ui: {
+			tab: "tasks",
+			label: "Claude User Skills",
+			description: "Load skills from ~/.claude/skills/",
+		},
+	},
 
-	"skills.enableClaudeProject": { type: "boolean", default: true },
+	"skills.enableClaudeProject": {
+		type: "boolean",
+		default: false,
+		ui: {
+			tab: "tasks",
+			label: "Claude Project Skills",
+			description: "Load skills from .claude/skills/",
+		},
+	},
 
-	"skills.enablePiUser": { type: "boolean", default: true },
+	"skills.enableClaudePlugins": {
+		type: "boolean",
+		default: false,
+		ui: {
+			tab: "tasks",
+			label: "Claude Marketplace Skills",
+			description: "Load skills from Claude Code marketplace plugins (~/.claude/plugins/cache/)",
+		},
+	},
+
+	"skills.enablePiUser": {
+		type: "boolean",
+		default: true,
+		ui: {
+			tab: "tasks",
+			label: "xcsh User Skills",
+			description: "Load user-level skills from ~/.xcsh/agent/skills/",
+		},
+	},
 
-	"skills.enablePiProject": { type: "boolean", default: true },
+	"skills.enablePiProject": {
+		type: "boolean",
+		default: true,
+		ui: {
+			tab: "tasks",
+			label: "xcsh Project Skills",
+			description: "Load project-level skills from .xcsh/skills/",
+		},
+	},
 
 	"skills.customDirectories": { type: "array", default: [] as string[] },
 

package/src/extensibility/skills.ts

@@ -82,6 +82,7 @@ export async function loadSkills(options: LoadSkillsOptions = {}): Promise<LoadS
 		enableCodexUser = true,
 		enableClaudeUser = true,
 		enableClaudeProject = true,
+		enableClaudePlugins = false,
 		enablePiUser = true,
 		enablePiProject = true,
 		customDirectories = [],
@@ -105,7 +106,7 @@ export async function loadSkills(options: LoadSkillsOptions = {}): Promise<LoadS
 		if (provider === "claude" && level === "project") return enableClaudeProject;
 		if (provider === "native" && level === "user") return enablePiUser;
 		if (provider === "native" && level === "project") return enablePiProject;
-		// For other providers (agents, claude-plugins, etc.), treat them as built-in skill sources.
+		if (provider === "claude-plugins") return enableClaudePlugins;
 		return anyBuiltInSkillSourceEnabled;
 	}
 

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "18.47.0",
-	"commit": "d0994b94529ed5464212568134c7dc9d75506b21",
-	"shortCommit": "d0994b9",
+	"version": "18.48.1",
+	"commit": "158e9c98808fdbaeac9b8c2e0623768abffa800e",
+	"shortCommit": "158e9c9",
 	"branch": "main",
-	"tag": "v18.47.0",
-	"commitDate": "2026-05-06T06:04:50Z",
-	"buildDate": "2026-05-06T06:30:34.654Z",
-	"dirty": false,
+	"tag": "v18.48.1",
+	"commitDate": "2026-05-06T15:22:57Z",
+	"buildDate": "2026-05-06T15:49:54.715Z",
+	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/d0994b94529ed5464212568134c7dc9d75506b21",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.47.0"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/158e9c98808fdbaeac9b8c2e0623768abffa800e",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.48.1"
 };

package/src/modes/components/welcome-checks.ts

@@ -2,6 +2,7 @@ import type { Model } from "@f5xc-salesdemos/pi-ai";
 import { validateApiKeyAgainstModelsEndpoint } from "@f5xc-salesdemos/pi-ai/utils/oauth/api-key-validation";
 import { $which, logger } from "@f5xc-salesdemos/pi-utils";
 import { $ } from "bun";
+import { loadProfile } from "../../internal-urls/user-profile";
 import { type AuthStatus, ContextService } from "../../services/f5xc-context";
 import { deriveTenantFromUrl } from "../../services/f5xc-env";
 import type { AuthStorage } from "../../session/auth-storage";
@@ -426,3 +427,99 @@ export function mapAzureStatus(status: WelcomeAzureStatus | undefined): ServiceS
 			return { name: "Azure", state: "unauthenticated", hint: "run: az login --use-device-code" };
 	}
 }
+
+export type AwsCheckState = "connected" | "auth_error";
+
+export interface WelcomeAwsStatus {
+	state: AwsCheckState;
+}
+
+export async function checkAwsStatus(): Promise<WelcomeAwsStatus | undefined> {
+	try {
+		if (!$which("aws")) return undefined;
+		const result = await $`aws sts get-caller-identity --output json`.quiet().nothrow();
+		return { state: result.exitCode === 0 ? "connected" : "auth_error" };
+	} catch (err) {
+		logger.warn("AWS startup check failed", { error: String(err) });
+		return { state: "auth_error" };
+	}
+}
+
+export function mapAwsStatus(status: WelcomeAwsStatus | undefined): ServiceStatus {
+	if (!status) return { name: "AWS", state: "unavailable", hint: "not installed" };
+	switch (status.state) {
+		case "connected":
+			return { name: "AWS", state: "connected" };
+		case "auth_error":
+			return { name: "AWS", state: "unauthenticated", hint: "run: aws configure" };
+	}
+}
+
+export type GcloudCheckState = "connected" | "auth_error";
+
+export interface WelcomeGcloudStatus {
+	state: GcloudCheckState;
+}
+
+export async function checkGcloudStatus(): Promise<WelcomeGcloudStatus | undefined> {
+	try {
+		if (!$which("gcloud")) return undefined;
+		const result = await $`gcloud auth list --format=value(account)`.quiet().nothrow();
+		const hasAccount = result.text().trim().length > 0;
+		return { state: hasAccount ? "connected" : "auth_error" };
+	} catch (err) {
+		logger.warn("Google Cloud startup check failed", { error: String(err) });
+		return { state: "auth_error" };
+	}
+}
+
+export function mapGcloudStatus(status: WelcomeGcloudStatus | undefined): ServiceStatus {
+	if (!status) return { name: "Google Cloud", state: "unavailable", hint: "not installed" };
+	switch (status.state) {
+		case "connected":
+			return { name: "Google Cloud", state: "connected" };
+		case "auth_error":
+			return { name: "Google Cloud", state: "unauthenticated", hint: "run: gcloud auth login" };
+	}
+}
+
+export type ProfileCheckState = "current" | "stale" | "missing";
+
+export interface WelcomeProfileStatus {
+	state: ProfileCheckState;
+	name?: string;
+	updatedAt?: string;
+	staleDays?: number;
+}
+
+const PROFILE_STALE_HOURS = 24;
+
+/** Check user profile freshness. Returns undefined only on unexpected error. */
+export async function checkProfileStatus(): Promise<WelcomeProfileStatus | undefined> {
+	try {
+		const profile = await loadProfile();
+		if (!profile.givenName && !profile.familyName) {
+			return { state: "missing" };
+		}
+		const name = [profile.givenName, profile.familyName].filter(Boolean).join(" ");
+		const updatedAt = profile.updatedAt;
+
+		if (!updatedAt) {
+			return { state: "stale", name };
+		}
+
+		const ageHours = (Date.now() - new Date(updatedAt).getTime()) / (1000 * 60 * 60);
+		if (ageHours > PROFILE_STALE_HOURS) {
+			return {
+				state: "stale",
+				name,
+				updatedAt,
+				staleDays: Math.floor(ageHours / 24),
+			};
+		}
+
+		return { state: "current", name, updatedAt };
+	} catch {
+		return { state: "missing" };
+	}
+}

package/src/modes/interactive-mode.ts

@@ -28,6 +28,7 @@ import type {
 import type { CompactOptions } from "../extensibility/extensions/types";
 import { BUILTIN_SLASH_COMMANDS, loadSlashCommands } from "../extensibility/slash-commands";
 import { resolveLocalUrlToPath } from "../internal-urls";
+import { seedProfile } from "../internal-urls/user-profile";
 import { renameApprovedPlanFile } from "../plan-mode/approved-plan";
 import planModeApprovedPrompt from "../prompts/system/plan-mode-approved.md" with { type: "text" };
 import type { AgentSession, AgentSessionEvent } from "../session/agent-session";
@@ -51,12 +52,16 @@ import { StatusLineComponent } from "./components/status-line";
 import type { ToolExecutionHandle } from "./components/tool-execution";
 import { type UpdateStatus, WelcomeComponent } from "./components/welcome";
 import {
+	checkAwsStatus,
 	checkAzureStatus,
+	checkGcloudStatus,
 	checkGitHubStatus,
 	checkGitLabStatus,
 	checkSalesforceStatus,
+	mapAwsStatus,
 	mapAzureStatus,
 	mapContextStatus,
+	mapGcloudStatus,
 	mapGitHubStatus,
 	mapGitLabStatus,
 	mapSalesforceStatus,
@@ -318,17 +323,22 @@ export class InteractiveMode implements InteractiveModeContext {
 			getProjectDir(),
 		);
 
-		// Run blocking welcome screen status checks (model + context + gitlab + github + salesforce + azure) in parallel
-		const [welcomeResult, gitlabStatus, salesforceStatus, githubStatus, azureStatus] = await Promise.all([
-			logger.time("InteractiveMode.init:welcomeChecks", () =>
-				runWelcomeChecks(this.session.model, this.session.modelRegistry.authStorage),
-			),
-			checkGitLabStatus(getProjectDir()).catch(() => undefined),
-			checkSalesforceStatus(getProjectDir()).catch(() => undefined),
-			checkGitHubStatus().catch(() => undefined),
-			checkAzureStatus().catch(() => undefined),
-		]);
-
+		// Run blocking welcome screen status checks in parallel
+		const [welcomeResult, gitlabStatus, salesforceStatus, githubStatus, azureStatus, awsStatus, gcloudStatus] =
+			await Promise.all([
+				logger.time("InteractiveMode.init:welcomeChecks", () =>
+					runWelcomeChecks(this.session.model, this.session.modelRegistry.authStorage),
+				),
+				checkGitLabStatus(getProjectDir()).catch(() => undefined),
+				checkSalesforceStatus(getProjectDir()).catch(() => undefined),
+				checkGitHubStatus().catch(() => undefined),
+				checkAzureStatus().catch(() => undefined),
+				checkAwsStatus().catch(() => undefined),
+				checkGcloudStatus().catch(() => undefined),
+			]);
+
+		// Refresh user profile in background — fire and forget
+		seedProfile().catch(err => logger.warn("Background profile refresh failed", { error: String(err) }));
 		const startupQuiet = settings.get("startup.quiet");
 		this.#welcomeComponent = undefined;
 
@@ -348,6 +358,8 @@ export class InteractiveMode implements InteractiveModeContext {
 							mapGitHubStatus(githubStatus),
 							mapSalesforceStatus(salesforceStatus),
 							mapAzureStatus(azureStatus),
+							mapAwsStatus(awsStatus),
+							mapGcloudStatus(gcloudStatus),
 						]
 					: [];
 			this.#welcomeComponent = new WelcomeComponent(

package/src/prompts/system/system-prompt.md

@@ -149,6 +149,17 @@ Use these values when constructing API payloads and resource names.
 Available F5 XC documentation topics: {{knowledgeTopics}}.
 {{/if}}
 {{/if}}
+{{#if userProfile}}
+## Primary Human
+
+{{userProfile.name}} ({{userProfile.role}}, {{userProfile.org}}).
+Full profile at `xcsh://user`. **MUST** read when:
+- Addressing the user by name or drafting communications from/to them
+- A tool call needs personal identifiers (Salesforce user ID, GitHub username, email, phone)
+- User asks about themselves ("my email", "who is my manager", "where am I from")
+- Answering relationship/identity questions ("who is your human", "who do you work with")
+**SHOULD NOT** read for routine technical work, code changes, or product questions.
+{{/if}}
 
 {{#if contextFiles.length}}
 <context>
@@ -194,6 +205,8 @@ Most tools resolve custom protocol URLs to internal resources (not web URLs):
   - `xcsh://about` — Identity, version, build fingerprint, architecture, self-improvement. **MUST** read for any question about xcsh before exploring `~/.xcsh/`.
     This document contains the authoritative repository URL, issues URL, and source location.
     For identity questions (source code, repo, version, who built this) — answer from `xcsh://about` alone. Do not call external GitHub tools.
+  - `xcsh://user` — Primary human user profile (identity, employment, contact, demographics). Read when personal identity context is needed. Do not read proactively on every turn.
+  - `xcsh://user?seed=true` — Refresh profile from Salesforce, GitHub, and system sources.
 - `xcsh://api-spec/` — F5 XC API specifications (schema introspection, field types, validation).
 - `xcsh://api-catalog/` — F5 XC API operations catalog (CRUD execution).
 

package/src/sdk.ts

@@ -72,6 +72,7 @@ import {
 	RuleProtocolHandler,
 	SkillProtocolHandler,
 } from "./internal-urls";
+import { loadProfile } from "./internal-urls/user-profile";
 import { disposeAllKernelSessions, disposeKernelSessionsByOwner } from "./ipy/executor";
 import { LSP_STARTUP_EVENT_CHANNEL, type LspStartupEvent } from "./lsp/startup-events";
 import { discoverAndLoadMCPTools, type MCPManager, type MCPToolsLoadResult } from "./mcp";
@@ -1450,6 +1451,27 @@ export async function createAgentSession(options: CreateAgentSessionOptions = {}
 				}
 				appendPrompt = parts.join("\n\n");
 			}
+			// Load compact user profile for system prompt hint
+			let userProfile: { name: string; role: string; org: string } | undefined;
+			try {
+				const _profile = await loadProfile();
+				if (_profile.givenName || _profile.familyName) {
+					const _name = [_profile.givenName, _profile.familyName].filter(Boolean).join(" ");
+					if (_name) {
+						userProfile = {
+							name: _name,
+							role: _profile.jobTitle ?? "",
+							org:
+								typeof _profile.worksFor === "string"
+									? _profile.worksFor
+									: ((_profile.worksFor as { name?: string } | undefined)?.name ?? ""),
+						};
+					}
+				}
+			} catch {
+				// No profile — hint block omitted
+			}
+
 			const defaultPrompt = await buildSystemPromptInternal({
 				cwd,
 				skills,
@@ -1467,6 +1489,7 @@ export async function createAgentSession(options: CreateAgentSessionOptions = {}
 				eagerTasks,
 				secretsEnabled,
 				context: contextForPrompt,
+				userProfile,
 				knowledgeTopics,
 				contextSkillDirs,
 				contextIncludeSkills,
@@ -1495,6 +1518,7 @@ export async function createAgentSession(options: CreateAgentSessionOptions = {}
 					eagerTasks,
 					secretsEnabled,
 					context: contextForPrompt,
+					userProfile,
 					knowledgeTopics,
 					contextSkillDirs,
 					contextIncludeSkills,

package/src/system-prompt.ts

@@ -459,6 +459,12 @@ export interface BuildSystemPromptOptions {
 		credentialSource: string;
 		authStatus: string;
 	};
+	/** Compact user profile hint injected into Workspace section. Omit when no profile exists. */
+	userProfile?: {
+		name: string;
+		role: string;
+		org: string;
+	};
 	knowledgeTopics?: string;
 	contextSkillDirs?: string[];
 	contextIncludeSkills?: string[];
@@ -650,6 +656,7 @@ export async function buildSystemPrompt(options: BuildSystemPromptOptions = {}):
 		eagerTasks,
 		secretsEnabled,
 		context,
+		userProfile: options.userProfile,
 		knowledgeTopics: options.knowledgeTopics,
 	};
 	let rendered = prompt.render(resolvedCustomPrompt ? customSystemPromptTemplate : systemPromptTemplate, data);