@f5xc-salesdemos/xcsh 18.64.0 → 18.64.2

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+## [18.64.2] - 2026-05-16
+
+### Fixed
+
+- Welcome banner cloud provider hints: AWS SSO token expiry now correctly suggests `aws sso login` instead of `aws configure`; Google Cloud check replaced `gcloud auth list` (false positives on expired tokens) with `gcloud auth print-access-token`; F5 XC Context surfaces `errorClass` (network/URL) in hints; GitLab `project_inaccessible` gets its own hint; Salesforce differentiates `session_expired` and `not_configured` hints ([#825](https://github.com/f5xc-salesdemos/xcsh/issues/825))
+
 ## [18.64.0] - 2026-05-13
 
 ### Added

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "18.64.0",
+	"version": "18.64.2",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -48,12 +48,12 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "18.64.0",
-		"@f5xc-salesdemos/pi-agent-core": "18.64.0",
-		"@f5xc-salesdemos/pi-ai": "18.64.0",
-		"@f5xc-salesdemos/pi-natives": "18.64.0",
-		"@f5xc-salesdemos/pi-tui": "18.64.0",
-		"@f5xc-salesdemos/pi-utils": "18.64.0",
+		"@f5xc-salesdemos/xcsh-stats": "18.64.2",
+		"@f5xc-salesdemos/pi-agent-core": "18.64.2",
+		"@f5xc-salesdemos/pi-ai": "18.64.2",
+		"@f5xc-salesdemos/pi-natives": "18.64.2",
+		"@f5xc-salesdemos/pi-tui": "18.64.2",
+		"@f5xc-salesdemos/pi-utils": "18.64.2",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.18",

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "18.64.0",
-	"commit": "9928b0103e54c3d9c17c7b1b58efd631c4a20ed5",
-	"shortCommit": "9928b01",
+	"version": "18.64.2",
+	"commit": "192cc2f2ed25a353be4c27164699e162d96fd540",
+	"shortCommit": "192cc2f",
 	"branch": "main",
-	"tag": "v18.64.0",
-	"commitDate": "2026-05-13T20:48:46Z",
-	"buildDate": "2026-05-13T21:13:33.444Z",
+	"tag": "v18.64.2",
+	"commitDate": "2026-05-16T23:00:39Z",
+	"buildDate": "2026-05-16T23:20:31.262Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/9928b0103e54c3d9c17c7b1b58efd631c4a20ed5",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.64.0"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/192cc2f2ed25a353be4c27164699e162d96fd540",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.64.2"
 };

package/src/modes/components/welcome-checks.ts

@@ -364,8 +364,16 @@ export function mapContextStatus(status: WelcomeContextStatus): ServiceStatus {
 		case "no_context":
 			return { name: "F5 XC Context", state: "unauthenticated", hint: "run: /context create" };
 		case "auth_error":
-		case "offline":
 			return { name: "F5 XC Context", state: "unauthenticated", hint: "run: /context" };
+		case "offline":
+			switch (status.errorClass) {
+				case "network":
+					return { name: "F5 XC Context", state: "unauthenticated", hint: "network unreachable" };
+				case "url_not_found":
+					return { name: "F5 XC Context", state: "unauthenticated", hint: "tenant URL not found" };
+				default:
+					return { name: "F5 XC Context", state: "unauthenticated", hint: "run: /context" };
+			}
 	}
 }
 
@@ -376,6 +384,8 @@ export function mapGitLabStatus(status: WelcomeGitLabStatus | undefined): Servic
 			return { name: "GitLab", state: "connected" };
 		case "not_installed":
 			return { name: "GitLab", state: "unavailable", hint: "not installed" };
+		case "project_inaccessible":
+			return { name: "GitLab", state: "unauthenticated", hint: "check project access" };
 		default:
 			return { name: "GitLab", state: "unauthenticated", hint: "run: glab auth login" };
 	}
@@ -386,6 +396,10 @@ export function mapSalesforceStatus(status: WelcomeSalesforceStatus | undefined)
 	switch (status.state) {
 		case "connected":
 			return { name: "Salesforce", state: "connected" };
+		case "session_expired":
+			return { name: "Salesforce", state: "unauthenticated", hint: "session expired, run: sf org login web" };
+		case "not_configured":
+			return { name: "Salesforce", state: "unauthenticated", hint: "run: sf org login web --set-default" };
 		default:
 			return { name: "Salesforce", state: "unauthenticated", hint: "run: sf org login web" };
 	}
@@ -428,17 +442,52 @@ export function mapAzureStatus(status: WelcomeAzureStatus | undefined): ServiceS
 	}
 }
 
-export type AwsCheckState = "connected" | "auth_error";
+export type AwsCheckState =
+	| "connected"
+	| "sso_expired"
+	| "not_configured"
+	| "profile_not_found"
+	| "network_error"
+	| "auth_error";
 
 export interface WelcomeAwsStatus {
 	state: AwsCheckState;
 }
 
+/** Classify AWS CLI stderr into a specific failure state. Exported for testing. */
+export function classifyAwsError(stderr: string): AwsCheckState {
+	const s = stderr.toLowerCase();
+	// SSO session/token expiry
+	if (
+		s.includes("sso session") ||
+		s.includes("sso token") ||
+		s.includes("expiredtokenexception") ||
+		s.includes("expiredtoken")
+	) {
+		return "sso_expired";
+	}
+	// No credentials configured at all
+	if (s.includes("unable to locate credentials")) {
+		return "not_configured";
+	}
+	// AWS_PROFILE points to a non-existent profile
+	if (s.includes("config profile") && s.includes("could not be found")) {
+		return "profile_not_found";
+	}
+	// Network/connectivity errors
+	if (s.includes("could not connect") || s.includes("connection error") || s.includes("endpoint url")) {
+		return "network_error";
+	}
+	return "auth_error";
+}
+
 export async function checkAwsStatus(): Promise<WelcomeAwsStatus | undefined> {
 	try {
 		if (!$which("aws")) return undefined;
 		const result = await $`aws sts get-caller-identity --output json`.quiet().nothrow();
-		return { state: result.exitCode === 0 ? "connected" : "auth_error" };
+		if (result.exitCode === 0) return { state: "connected" };
+		const stderr = result.stderr.toString();
+		return { state: classifyAwsError(stderr) };
 	} catch (err) {
 		logger.warn("AWS startup check failed", { error: String(err) });
 		return { state: "auth_error" };
@@ -450,23 +499,43 @@ export function mapAwsStatus(status: WelcomeAwsStatus | undefined): ServiceStatu
 	switch (status.state) {
 		case "connected":
 			return { name: "AWS", state: "connected" };
+		case "sso_expired":
+			return { name: "AWS", state: "unauthenticated", hint: "SSO session expired, run: aws sso login" };
+		case "not_configured":
+			return { name: "AWS", state: "unauthenticated", hint: "run: aws configure" };
+		case "profile_not_found":
+			return { name: "AWS", state: "unauthenticated", hint: "check AWS_PROFILE env var" };
+		case "network_error":
+			return { name: "AWS", state: "unauthenticated", hint: "network unreachable" };
 		case "auth_error":
 			return { name: "AWS", state: "unauthenticated", hint: "run: aws configure" };
 	}
 }
 
-export type GcloudCheckState = "connected" | "auth_error";
+export type GcloudCheckState = "connected" | "token_expired" | "auth_error";
 
 export interface WelcomeGcloudStatus {
 	state: GcloudCheckState;
 }
 
+/** Classify gcloud stderr into a specific failure state. Exported for testing. */
+export function classifyGcloudError(stderr: string): GcloudCheckState {
+	const s = stderr.toLowerCase();
+	if (s.includes("valid credentials") || s.includes("refreshing your current auth tokens")) {
+		return "token_expired";
+	}
+	return "auth_error";
+}
+
 export async function checkGcloudStatus(): Promise<WelcomeGcloudStatus | undefined> {
 	try {
 		if (!$which("gcloud")) return undefined;
-		const result = await $`gcloud auth list --format=value(account)`.quiet().nothrow();
-		const hasAccount = result.text().trim().length > 0;
-		return { state: hasAccount ? "connected" : "auth_error" };
+		const result = await $`gcloud auth print-access-token --quiet`.quiet().nothrow();
+		if (result.exitCode === 0 && result.text().trim().length > 0) {
+			return { state: "connected" };
+		}
+		const stderr = result.stderr.toString();
+		return { state: classifyGcloudError(stderr) };
 	} catch (err) {
 		logger.warn("Google Cloud startup check failed", { error: String(err) });
 		return { state: "auth_error" };
@@ -478,6 +547,8 @@ export function mapGcloudStatus(status: WelcomeGcloudStatus | undefined): Servic
 	switch (status.state) {
 		case "connected":
 			return { name: "Google Cloud", state: "connected" };
+		case "token_expired":
+			return { name: "Google Cloud", state: "unauthenticated", hint: "token expired, run: gcloud auth login" };
 		case "auth_error":
 			return { name: "Google Cloud", state: "unauthenticated", hint: "run: gcloud auth login" };
 	}