@f5xc-salesdemos/xcsh 18.72.0 → 18.75.3

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+## [18.75.0] - 2026-05-23
+
+### Added
+
+- Auto-validate credentials on context switch: SDK context change listener now fires a background `validateToken()` after emitting the switch notification, sending a follow-up `context_validation_result` custom message so the LLM knows whether the new context's credentials are valid
+
 ## [18.64.2] - 2026-05-16
 
 ### Fixed
@@ -20,11 +26,13 @@
 ### Changed
 
 - Regenerated API spec index from catalog v2.1.82: http_loadbalancer CRUD verification corrections (6 new server defaults, corrected minimum configs, cross-field dependencies, default_pool inline pool discovery, 5 composable routing approaches) and tcp_loadbalancer minimum config corrections (listen_port, origin_pools_weights, do_not_advertise format, 9 server defaults, forced hash_policy default) ([#753](https://github.com/f5xc-salesdemos/xcsh/issues/753), [#757](https://github.com/f5xc-salesdemos/xcsh/issues/757))
+
 ## [18.53.0] - 2026-05-09
 
 ### Changed
 
 - Autoresearch subsystem code quality: -513 lines (18.8% reduction), ~13% faster type checking. Un-exported internal symbols, relocated types, consolidated duplicate patterns, replaced manual deep copies with `structuredClone`, replaced `while(exec)` with `matchAll`, compressed control flow, extracted shared interfaces ([#734](https://github.com/f5xc-salesdemos/xcsh/pull/734))
+
 ## [18.53.0] - 2026-05-09
 
 ### Fixed
@@ -79,13 +87,11 @@
 
 ## [18.18.4] - 2026-04-26
 
-
 ### Fixed
 
 - Fixed gutter width propagation in the fallback tool renderer: `#formatToolExecution()` now receives the actual available width at render-time and uses it for line truncation instead of a hardcoded 80-column limit. On narrow terminals (<82 cols) this prevents content wider than the gutter-adjusted viewport; on wide terminals it allows longer output lines. ([#117](https://github.com/f5xc-salesdemos/xcsh/issues/117))
 - Fixed `resolveConfigValue` returning literal env var names (e.g. `"LITELLM_API_KEY"`) as API keys when the env var is unset, causing 401 errors on first launch. The resolver now rejects unresolved `ALL_CAPS_WITH_UNDERSCORES` patterns, matching the existing guard in `resolveYamlApiKeyConfig`. ([#241](https://github.com/f5xc-salesdemos/xcsh/issues/241))
 
-
 ### Changed
 
 - Renamed F5 XC credential system from "profile" to "context" to align with kubectl conventions. The `/profile` command is now `/context`, all types/classes use `Context*` naming (`ContextService`, `ContextStatus`, `F5XCContext`, etc.), on-disk paths changed from `profiles/` to `contexts/` and `active_profile` to `active_context`, and the status-line segment ID is now `context_f5xc`. ([#302](https://github.com/f5xc-salesdemos/xcsh/issues/302))

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "18.72.0",
+	"version": "18.75.3",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -48,12 +48,12 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "18.72.0",
-		"@f5xc-salesdemos/pi-agent-core": "18.72.0",
-		"@f5xc-salesdemos/pi-ai": "18.72.0",
-		"@f5xc-salesdemos/pi-natives": "18.72.0",
-		"@f5xc-salesdemos/pi-tui": "18.72.0",
-		"@f5xc-salesdemos/pi-utils": "18.72.0",
+		"@f5xc-salesdemos/xcsh-stats": "workspace:*",
+		"@f5xc-salesdemos/pi-agent-core": "workspace:*",
+		"@f5xc-salesdemos/pi-ai": "workspace:*",
+		"@f5xc-salesdemos/pi-natives": "workspace:*",
+		"@f5xc-salesdemos/pi-tui": "workspace:*",
+		"@f5xc-salesdemos/pi-utils": "workspace:*",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.18",

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "18.72.0",
-	"commit": "ee865e583dfa21db5c5f5bf07001570c5f7f9086",
-	"shortCommit": "ee865e5",
+	"version": "18.75.3",
+	"commit": "6856457e251f8583b237e72702ac395bc7173f42",
+	"shortCommit": "6856457",
 	"branch": "main",
-	"tag": "v18.72.0",
-	"commitDate": "2026-05-19T19:45:52Z",
-	"buildDate": "2026-05-19T20:24:28.090Z",
+	"tag": "v18.75.3",
+	"commitDate": "2026-05-23T08:23:41Z",
+	"buildDate": "2026-05-23T17:15:18.019Z",
 	"dirty": false,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/ee865e583dfa21db5c5f5bf07001570c5f7f9086",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.72.0"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/6856457e251f8583b237e72702ac395bc7173f42",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.75.3"
 };

package/src/modes/components/status-line/presets.ts

@@ -10,6 +10,18 @@ export const STATUS_LINE_PRESETS: Record<StatusLinePreset, PresetDef> = {
 			path: { abbreviate: true, maxLength: 40, stripWorkPrefix: true },
 			git: { showBranch: true, showStaged: true, showUnstaged: true, showUntracked: true },
 		},
+		dropOrder: [
+			"pr",
+			"token_total",
+			"cost",
+			"git",
+			"path",
+			"context_pct",
+			"plan_mode",
+			"model",
+			"pi",
+			"context_f5xc",
+		],
 	},
 
 	minimal: {
@@ -20,6 +32,7 @@ export const STATUS_LINE_PRESETS: Record<StatusLinePreset, PresetDef> = {
 			path: { abbreviate: true, maxLength: 30 },
 			git: { showBranch: true, showStaged: false, showUnstaged: false, showUntracked: false },
 		},
+		dropOrder: ["git", "plan_mode", "context_pct", "path", "context_f5xc"],
 	},
 
 	compact: {
@@ -30,6 +43,7 @@ export const STATUS_LINE_PRESETS: Record<StatusLinePreset, PresetDef> = {
 			model: { showThinkingLevel: false },
 			git: { showBranch: true, showStaged: true, showUnstaged: true, showUntracked: false },
 		},
+		dropOrder: ["pr", "cost", "git", "context_pct", "plan_mode", "model", "context_f5xc"],
 	},
 
 	full: {
@@ -52,6 +66,25 @@ export const STATUS_LINE_PRESETS: Record<StatusLinePreset, PresetDef> = {
 			git: { showBranch: true, showStaged: true, showUnstaged: true, showUntracked: true },
 			time: { format: "24h", showSeconds: false },
 		},
+		dropOrder: [
+			"time",
+			"time_spent",
+			"cache_read",
+			"token_rate",
+			"token_out",
+			"token_in",
+			"subagents",
+			"pr",
+			"git",
+			"path",
+			"cost",
+			"context_pct",
+			"plan_mode",
+			"hostname",
+			"model",
+			"pi",
+			"context_f5xc",
+		],
 	},
 
 	nerd: {
@@ -77,6 +110,28 @@ export const STATUS_LINE_PRESETS: Record<StatusLinePreset, PresetDef> = {
 			git: { showBranch: true, showStaged: true, showUnstaged: true, showUntracked: true },
 			time: { format: "24h", showSeconds: true },
 		},
+		dropOrder: [
+			"context_total",
+			"cache_write",
+			"session",
+			"time",
+			"time_spent",
+			"cache_read",
+			"token_rate",
+			"token_out",
+			"token_in",
+			"subagents",
+			"pr",
+			"git",
+			"path",
+			"cost",
+			"context_pct",
+			"plan_mode",
+			"hostname",
+			"model",
+			"pi",
+			"context_f5xc",
+		],
 	},
 
 	ascii: {
@@ -89,6 +144,7 @@ export const STATUS_LINE_PRESETS: Record<StatusLinePreset, PresetDef> = {
 			path: { abbreviate: true, maxLength: 40 },
 			git: { showBranch: true, showStaged: true, showUnstaged: true, showUntracked: true },
 		},
+		dropOrder: ["pr", "token_total", "cost", "git", "path", "context_pct", "model", "context_f5xc"],
 	},
 
 	xcsh: {
@@ -101,6 +157,7 @@ export const STATUS_LINE_PRESETS: Record<StatusLinePreset, PresetDef> = {
 			git: { showBranch: true, showStaged: true, showUnstaged: true, showUntracked: true },
 			context_pct: { compact: true },
 		},
+		dropOrder: ["plan_mode", "git", "path", "context_pct", "context_f5xc"],
 	},
 
 	custom: {

package/src/modes/components/status-line/segments.ts

@@ -461,6 +461,25 @@ export const SEGMENTS: Record<StatusLineSegmentId, StatusLineSegment> = {
 				return { content: "", visible: false };
 			}
 		},
+		truncate(maxWidth: number, _ctx: SegmentContext): RenderedSegment | null {
+			try {
+				const { truncateF5XCContextSegment } = require("../../../services/f5xc-context-segment");
+				const result = truncateF5XCContextSegment(maxWidth);
+				if (!result) return null;
+				let bg = theme.fgColorAsBg("statusLineContextF5xcBg");
+				let fg = theme.getFgAnsi("statusLineContextF5xcFg");
+				if (result.tokenHealth === "expiring") {
+					bg = theme.fgColorAsBg("statusLineGitDirtyBg");
+					fg = theme.getFgAnsi("statusLineGitDirtyFg");
+				} else if (result.tokenHealth === "expired") {
+					bg = theme.fgColorAsBg("statusLineGitConflictBg");
+					fg = theme.getFgAnsi("statusLineGitConflictFg");
+				}
+				return { ...result, bg, fg };
+			} catch {
+				return null;
+			}
+		},
 	},
 };
 

package/src/modes/components/status-line/types.ts

@@ -66,6 +66,7 @@ export interface RenderedSegment {
 export interface StatusLineSegment {
 	id: StatusLineSegmentId;
 	render(ctx: SegmentContext): RenderedSegment;
+	truncate?(maxWidth: number, ctx: SegmentContext): RenderedSegment | null;
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
@@ -91,4 +92,5 @@ export interface PresetDef {
 	rightSegments: StatusLineSegmentId[];
 	separator: StatusLineSeparatorStyle;
 	segmentOptions?: StatusLineSegmentOptions;
+	dropOrder?: StatusLineSegmentId[];
 }

package/src/modes/components/status-line.ts

@@ -20,7 +20,7 @@ import {
 	type PrCacheContext,
 } from "./status-line/git-utils";
 import { getPreset } from "./status-line/presets";
-import { renderSegment, type SegmentContext } from "./status-line/segments";
+import { renderSegment, SEGMENTS, type SegmentContext } from "./status-line/segments";
 import { getSeparator } from "./status-line/separators";
 import { calculateTokensPerSecond } from "./status-line/token-rate";
 
@@ -490,8 +490,9 @@ export class StatusLineComponent implements Component {
 
 		// Collect visible segments (preserving bg/fg metadata)
 		type SegPart = { content: string; bg: string; fg: string };
-		const collectParts = (segIds: readonly string[]): SegPart[] => {
+		const collectParts = (segIds: readonly string[]): { parts: SegPart[]; ids: string[] } => {
 			const parts: SegPart[] = [];
+			const ids: string[] = [];
 			for (const segId of segIds) {
 				const rendered = renderSegment(segId as any, ctx);
 				if (rendered.visible && rendered.content) {
@@ -500,13 +501,14 @@ export class StatusLineComponent implements Component {
 						bg: rendered.bg || defaultBg,
 						fg: rendered.fg || defaultFg,
 					});
+					ids.push(segId);
 				}
 			}
-			return parts;
+			return { parts, ids };
 		};
 
-		const leftParts = collectParts(effectiveSettings.leftSegments);
-		const rightParts = collectParts(effectiveSettings.rightSegments);
+		const { parts: leftParts, ids: leftIds } = collectParts(effectiveSettings.leftSegments);
+		const { parts: rightParts, ids: rightIds } = collectParts(effectiveSettings.rightSegments);
 
 		const runningBackgroundJobs = this.session.getAsyncJobSnapshot()?.running.length ?? 0;
 		if (runningBackgroundJobs > 0) {
@@ -534,6 +536,8 @@ export class StatusLineComponent implements Component {
 		const topFillWidth = Math.max(0, width);
 		const left = [...leftParts];
 		const right = [...rightParts];
+		const leftSegIds = [...leftIds];
+		const rightSegIds = [...rightIds];
 
 		const sepWidth = visibleWidth(separatorDef.left);
 		const capWidth = separatorDef.endCaps ? visibleWidth(separatorDef.endCaps.right) : 0;
@@ -541,23 +545,74 @@ export class StatusLineComponent implements Component {
 		const groupWidth = (parts: SegPart[]): number => {
 			if (parts.length === 0) return 0;
 			const partsWidth = parts.reduce((sum, p) => sum + visibleWidth(p.content), 0);
-			// Each segment gets 1 char padding on each side, separators between segments
 			const sepTotal = Math.max(0, parts.length - 1) * sepWidth;
 			return partsWidth + parts.length * 2 + sepTotal + capWidth;
 		};
 
 		let leftWidth = groupWidth(left);
 		let rightWidth = groupWidth(right);
-		const totalWidth = () => leftWidth + rightWidth + (left.length > 0 && right.length > 0 ? 1 : 0);
+		const totalWidth = () => leftWidth + rightWidth;
+
+		if (topFillWidth > 0 && totalWidth() > topFillWidth) {
+			const preset = getPreset(effectiveSettings.preset ?? "default");
+			const dropOrder = preset.dropOrder;
+
+			if (dropOrder) {
+				type SegRef = { group: "left" | "right"; part: SegPart; segId: string };
+				const segRefs: SegRef[] = [
+					...left.map((part, i) => ({ group: "left" as const, part, segId: leftSegIds[i] })),
+					...right.map((part, i) => ({ group: "right" as const, part, segId: rightSegIds[i] })),
+				];
+
+				const inOrder: SegRef[] = [];
+				const notInOrder: SegRef[] = [];
+				for (const ref of segRefs) {
+					const orderIdx = dropOrder.indexOf(ref.segId as any);
+					if (orderIdx === -1) notInOrder.push(ref);
+					else inOrder.push(ref);
+				}
+				inOrder.sort((a, b) => dropOrder.indexOf(a.segId as any) - dropOrder.indexOf(b.segId as any));
+				const dropQueue = [...notInOrder, ...inOrder];
+
+				for (const ref of dropQueue) {
+					if (totalWidth() <= topFillWidth) break;
+
+					const segDef = SEGMENTS[ref.segId as StatusLineSegmentId];
+					const group = ref.group === "left" ? left : right;
+
+					const currentIdx = group.indexOf(ref.part);
+					if (currentIdx === -1) continue;
+
+					if (segDef?.truncate) {
+						const currentContentWidth = visibleWidth(ref.part.content);
+						const deficit = totalWidth() - topFillWidth;
+						const targetWidth = Math.max(1, currentContentWidth - deficit);
+						const truncated = segDef.truncate(targetWidth, ctx);
+						if (truncated?.visible && truncated.content) {
+							group[currentIdx] = {
+								content: truncated.content,
+								bg: truncated.bg || ref.part.bg,
+								fg: truncated.fg || ref.part.fg,
+							};
+							if (ref.group === "left") leftWidth = groupWidth(left);
+							else rightWidth = groupWidth(right);
+							continue;
+						}
+					}
 
-		if (topFillWidth > 0) {
-			while (totalWidth() > topFillWidth && right.length > 0) {
-				right.pop();
-				rightWidth = groupWidth(right);
-			}
-			while (totalWidth() > topFillWidth && left.length > 0) {
-				left.pop();
-				leftWidth = groupWidth(left);
+					group.splice(currentIdx, 1);
+					if (ref.group === "left") leftWidth = groupWidth(left);
+					else rightWidth = groupWidth(right);
+				}
+			} else {
+				while (totalWidth() > topFillWidth && right.length > 0) {
+					right.pop();
+					rightWidth = groupWidth(right);
+				}
+				while (totalWidth() > topFillWidth && left.length > 0) {
+					left.pop();
+					leftWidth = groupWidth(left);
+				}
 			}
 		}
 
@@ -636,13 +691,16 @@ export class StatusLineComponent implements Component {
 		const rightGroup = renderGroup(right, "right");
 		if (!leftGroup && !rightGroup) return "";
 
-		if (topFillWidth === 0 || left.length === 0 || right.length === 0) {
+		if (topFillWidth === 0 || (left.length === 0 && right.length === 0)) {
 			return leftGroup + (leftGroup && rightGroup ? " " : "") + rightGroup;
 		}
 
-		leftWidth = groupWidth(left);
-		rightWidth = groupWidth(right);
-		const gapWidth = Math.max(1, topFillWidth - leftWidth - rightWidth);
+		const actualLeftWidth = visibleWidth(leftGroup);
+		const actualRightWidth = visibleWidth(rightGroup);
+		const gapWidth = Math.max(0, topFillWidth - actualLeftWidth - actualRightWidth);
+		if (gapWidth === 0) {
+			return leftGroup + rightGroup;
+		}
 		const gapFill = theme.fg("border", theme.boxRound.horizontal.repeat(gapWidth));
 		return leftGroup + gapFill + rightGroup;
 	}

package/src/pipeline-report/generator.ts

@@ -424,7 +424,13 @@ function detectAnomalies(
 // Main generator
 // ---------------------------------------------------------------------------
 
-export async function generatePipelineReport(options: PipelineReportOptions): Promise<PipelineReportData> {
+export type SfQueryFn = (soql: string, orgAlias?: string) => Promise<Record<string, unknown>[]>;
+
+export async function generatePipelineReport(
+	options: PipelineReportOptions,
+	queryFn?: SfQueryFn,
+): Promise<PipelineReportData> {
+	const query: SfQueryFn = queryFn ?? runSfQuery;
 	const {
 		userIds,
 		orgAlias,
@@ -501,15 +507,15 @@ export async function generatePipelineReport(options: PipelineReportOptions): Pr
 
 	// Three parallel queries first: combined OLI + renewals + FY booked
 	const [oliRecords, renewalRecords, fyBookedResult] = await Promise.all([
-		runSfQuery(
+		query(
 			`SELECT ${fields} FROM OpportunityLineItem WHERE ${oliTeamScope} AND ${combinedDateFilter} AND ${commonFilters}`,
 			orgAlias,
 		),
-		runSfQuery(
+		query(
 			`SELECT ${renewalFields} FROM Opportunity WHERE ${renewalWhere} ORDER BY True_ACV__c DESC NULLS LAST`,
 			orgAlias,
 		),
-		runSfQuery(fyBookedQuery, orgAlias),
+		query(fyBookedQuery, orgAlias),
 	]);
 	const fyBookedTotal = (fyBookedResult[0]?.total as number) ?? 0;
 
@@ -548,11 +554,8 @@ export async function generatePipelineReport(options: PipelineReportOptions): Pr
 		const bookedWhere = `${oppTeamScope} AND ForecastCategoryName != 'Omitted' AND Amount > 0 AND IsWon = true AND CloseDate >= ${quarterStart} AND CloseDate <= ${quarterEnd}`;
 
 		const [fallbackNetNew, fallbackBooked] = await Promise.all([
-			runSfQuery(`SELECT ${oppFields} FROM Opportunity WHERE ${oppWhere} ORDER BY Amount DESC NULLS LAST`, orgAlias),
-			runSfQuery(
-				`SELECT ${oppFields} FROM Opportunity WHERE ${bookedWhere} ORDER BY Amount DESC NULLS LAST`,
-				orgAlias,
-			),
+			query(`SELECT ${oppFields} FROM Opportunity WHERE ${oppWhere} ORDER BY Amount DESC NULLS LAST`, orgAlias),
+			query(`SELECT ${oppFields} FROM Opportunity WHERE ${bookedWhere} ORDER BY Amount DESC NULLS LAST`, orgAlias),
 		]);
 
 		function parseOppFallback(records: Record<string, unknown>[]): LineItemRecord[] {
@@ -602,7 +605,7 @@ export async function generatePipelineReport(options: PipelineReportOptions): Pr
 		const historyFields =
 			"OpportunityId, Opportunity.Name, Opportunity.Account.Name, Field, OldValue, NewValue, CreatedDate";
 		const historyWhere = `OpportunityId IN (${idList}) AND Field IN ('Amount','ForecastCategoryName','StageName') AND CreatedDate = LAST_N_DAYS:7`;
-		historyRecords = await runSfQuery(
+		historyRecords = await query(
 			`SELECT ${historyFields} FROM OpportunityFieldHistory WHERE ${historyWhere} ORDER BY CreatedDate DESC LIMIT 50`,
 			orgAlias,
 		);

package/src/prompts/tools/sf-pipeline-report.md

@@ -0,0 +1,25 @@
+Generate a comprehensive F5 Distributed Cloud pipeline report for the current fiscal quarter.
+
+<instruction>
+Use this tool when the user asks for a "pipeline report", "forecast", "what's my pipeline", "how's the quarter", "show my deals", or any request for a structured view of the sales pipeline. It runs all the necessary queries automatically.
+
+Do NOT use sf_query for pipeline reports — sf_pipeline_report handles the multi-query orchestration (net new, booked, renewals, anomaly detection, close distribution) in a single call.
+
+Use sf_query for ad-hoc, one-off lookups: specific account checks, MEDDPICC qualification, case queries, or any query outside the pipeline reporting context.
+
+Parameters:
+**target_org**: optional — only needed when the default org is not the correct Salesforce instance.
+
+What the report includes:
+Booked (closed-won) this quarter by account, broken out by Platform (Distributed Cloud) and Point (Shape + DI).
+Open net-new pipeline, grouped by territory and account, with forecast category (Commit / Best Case / Pipeline).
+Open renewal pipeline (True ACV / Upsell ACV).
+Forecast summary: Commit + Best Case + Pipeline totals for quota-eligible products.
+Top deals by amount with owner, stage, close date, and next steps.
+Close-date distribution: pipeline bucketed by month.
+FY-to-date booked total vs quota (when quota is set in user profile).
+Data quality anomalies: slipped close dates, stalled deals (no activity >30 days), missing territories, urgent renewals closing within 30 days, unclassified SKUs.
+Recent pipeline changes (last 7 days) from OpportunityFieldHistory.
+
+After the tool returns, present the report as-is. Do not re-query Salesforce to fill in gaps — the report already contains all available data. If the report shows zero pipeline, mention that the user may need to read `xcsh://salesforce?refresh=true` to refresh their team membership context.
+</instruction>

package/src/prompts/tools/sf-query.md

@@ -3,7 +3,10 @@ Execute SOQL queries against Salesforce via sf CLI. Returns structured results a
 <instruction>
 Always provide a `description` parameter (2-4 words) summarizing the query's purpose — it appears in the output header. Examples: "forecast breakdown", "in-quarter pipeline", "closed-won deals", "open opportunities", "stalled deals", "renewal pipeline", "booked this quarter".
 
-Use for pipeline reporting, case management, account intelligence, and ad-hoc data queries.
+For structured pipeline reports, use **sf_pipeline_report** instead of sf_query. sf_pipeline_report runs multi-query orchestration (net new, booked, renewals, anomaly detection, close distribution) in one call.
+Use sf_query for ad-hoc SOQL queries: specific account lookups, MEDDPICC data, case queries, or one-off investigations.
+
+Use for ad-hoc data queries, account intelligence, and one-off investigations.
 
 Common query templates (substitute {userId} from user profile — read `xcsh://user` to get identifiers.salesforceId):
 
@@ -106,7 +109,7 @@ For each deal, assess these 8 MEDDPICC elements from available SFDC data:
 **D**ecision Criteria: Are evaluation criteria documented? Check Opportunity.NextStep, Description.
 **D**ecision Process: Is the buying process mapped? Check stage progression timeline, paper process.
 **P**aper Process: Are procurement steps known? Check Opportunity.Description for legal/procurement notes.
-**Identify** Pain: Is the business pain articulated? Check Opportunity.Description, discovery notes.
+**I**dentify Pain: Is the business pain articulated? Check Opportunity.Description, discovery notes.
 **C**hampion: Is there an internal advocate? Check Contact roles for 'Champion' or active engagement.
 **C**ompetition: Are competitors identified? Check Opportunity.CompetitorName or description.
 Score each element: Green (validated), Yellow (partially known), Red (unknown/missing).

package/src/sdk.ts

@@ -1906,6 +1906,30 @@ export async function createAgentSession(options: CreateAgentSessionOptions = {}
 					});
 					lastEmittedContext = { name: currentName, namespace: currentNamespace };
 					void session.refreshBaseSystemPrompt();
+					// Role 3: background-validate credentials after context switch so the
+					// LLM knows whether the new context is usable. Fire-and-forget — do
+					// not block the context change notification.
+					void (async () => {
+						try {
+							const { status: authStatus, latencyMs } = await service.instance.validateToken({
+								timeoutMs: 5000,
+							});
+							const qualifier =
+								authStatus === "connected"
+									? `connected${latencyMs ? ` (${latencyMs}ms)` : ""}`
+									: authStatus === "auth_error"
+										? "credential error -- token may be invalid or expired"
+										: "unreachable -- network error or tenant offline";
+							void session.sendCustomMessage({
+								customType: "context_validation_result",
+								content: `[Auth status: ${authStatus}] Credentials for ${currentTenant}: ${qualifier}.`,
+								display: true,
+								attribution: "agent",
+							});
+						} catch {
+							// Validation failed (e.g., no credentials configured) -- skip silently.
+						}
+					})();
 				} catch {
 					// ContextService.instance throws if not initialized; skip.
 				}

package/src/services/f5xc-context-display.ts

@@ -7,3 +7,43 @@ export function formatContextLabel(status: ContextStatus): string {
 	if (status.tokenHealth === "expiring" || status.tokenHealth === "expired") return `${base} ⚠`;
 	return base;
 }
+
+export function truncateContextLabel(status: ContextStatus, maxWidth: number): string | null {
+	if (!status.isConfigured) return null;
+
+	const left = status.activeContextTenant ?? status.activeContextName ?? "env";
+	const right = status.activeContextNamespace ?? "default";
+	const hasWarning = status.tokenHealth === "expiring" || status.tokenHealth === "expired";
+	const warningSuffix = hasWarning ? " ⚠" : "";
+	const warningLen = warningSuffix.length;
+	const available = maxWidth - warningLen;
+
+	if (available < 4) return null;
+
+	const full = `${left}:${right}`;
+	if (full.length <= available) return `${full}${warningSuffix}`;
+
+	// Tier 1: Truncate right side, keep full left
+	if (available >= left.length + 3) {
+		const rightMax = available - left.length - 1 - 1;
+		return `${left}:${right.slice(0, rightMax)}…${warningSuffix}`;
+	}
+
+	// Tier 2: Abbreviate both sides
+	if (available >= 6) {
+		const contentBudget = available - 2;
+		const leftBudget = Math.max(2, Math.ceil(contentBudget / 2));
+		const rightBudget = contentBudget - leftBudget;
+		const abbrLeft = left.slice(0, leftBudget);
+		const abbrRight = rightBudget > 0 ? right.slice(0, rightBudget) : "";
+		return `${abbrLeft}:${abbrRight}…${warningSuffix}`;
+	}
+
+	// Tier 3: Tenant abbreviation only
+	if (available >= 4) {
+		const leftBudget = available - 2;
+		return `${left.slice(0, leftBudget)}:…${warningSuffix}`;
+	}
+
+	return null;
+}

package/src/services/f5xc-context-segment.ts

@@ -1,5 +1,5 @@
 import { ContextService, type TokenHealth } from "./f5xc-context";
-import { formatContextLabel } from "./f5xc-context-display";
+import { formatContextLabel, truncateContextLabel } from "./f5xc-context-display";
 
 export interface RenderedSegment {
 	content: string;
@@ -21,3 +21,19 @@ export function renderF5XCContextSegment(): RenderedSegment {
 		return { content: "", visible: false };
 	}
 }
+
+export function truncateF5XCContextSegment(maxWidth: number): RenderedSegment | null {
+	try {
+		const service = ContextService.instance;
+		const status = service.getStatus();
+
+		if (!status.isConfigured) return null;
+
+		const truncated = truncateContextLabel(status, maxWidth);
+		if (truncated === null) return null;
+
+		return { content: truncated, visible: true, tokenHealth: status.tokenHealth };
+	} catch {
+		return null;
+	}
+}

package/src/tools/index.ts

@@ -54,6 +54,7 @@ import { ResolveTool } from "./resolve";
 import { reportFindingTool } from "./review";
 import { SearchToolBm25Tool } from "./search-tool-bm25";
 import { SfOrgDisplayTool, SfQueryTool, SfSetupTool } from "./sf";
+import { SfPipelineReportTool } from "./sf-pipeline-report";
 import { loadSshTool } from "./ssh";
 import { SubmitResultTool } from "./submit-result";
 import { type TodoPhase, TodoWriteTool } from "./todo-write";
@@ -239,6 +240,7 @@ export const BUILTIN_TOOLS: Record<string, ToolFactory> = {
 	sf_setup: SfSetupTool.createIf,
 	sf_query: SfQueryTool.createIf,
 	sf_org_display: SfOrgDisplayTool.createIf,
+	sf_pipeline_report: SfPipelineReportTool.createIf,
 	find: s => new FindTool(s),
 	grep: s => new GrepTool(s),
 	lsp: LspTool.createIf,

package/src/tools/renderers.ts

@@ -74,4 +74,5 @@ export const toolRenderers: Record<string, ToolRenderer> = {
 	sf_setup: sfToolRenderer as ToolRenderer,
 	sf_query: sfToolRenderer as ToolRenderer,
 	sf_org_display: sfToolRenderer as ToolRenderer,
+	sf_pipeline_report: sfToolRenderer as ToolRenderer,
 };

package/src/tools/sf-pipeline-report.ts

@@ -0,0 +1,175 @@
+import type {
+	AgentTool,
+	AgentToolContext,
+	AgentToolResult,
+	AgentToolUpdateCallback,
+} from "@f5xc-salesdemos/pi-agent-core";
+import { $which, prompt } from "@f5xc-salesdemos/pi-utils";
+import { type Static, Type } from "@sinclair/typebox";
+import { loadSalesforceContext } from "../internal-urls/salesforce-context";
+import { loadProfile } from "../internal-urls/user-profile";
+import { generatePipelineReport, type SfQueryFn } from "../pipeline-report/generator";
+import { renderPipelineReport } from "../pipeline-report/renderer";
+import type { PipelineReportData, PipelineReportOptions } from "../pipeline-report/types";
+import sfPipelineReportDescription from "../prompts/tools/sf-pipeline-report.md" with { type: "text" };
+import type { ToolSession } from ".";
+import { makeExecApi, type SfErrorType, type SfToolDetails } from "./sf";
+import { execSfJson, SfAuthError, SfNoDefaultOrgError, SfSessionExpiredError } from "./sf/exec";
+import { ORG_ALIAS_PATTERN } from "./sf/types";
+
+const sfPipelineReportSchema = Type.Object({
+	target_org: Type.Optional(Type.String({ description: "Org alias or username to run report against" })),
+});
+
+type SfPipelineReportInput = Static<typeof sfPipelineReportSchema>;
+
+type SfResult = AgentToolResult<SfToolDetails> & { isError?: boolean };
+
+function fiscalQuarterDates(): { start: string; end: string } {
+	const now = new Date();
+	const m = now.getMonth();
+	const y = now.getFullYear();
+
+	let start: Date;
+	let end: Date;
+
+	if (m >= 10) {
+		start = new Date(y, 10, 1);
+		end = new Date(y + 1, 1, 0);
+	} else if (m === 0) {
+		start = new Date(y - 1, 10, 1);
+		end = new Date(y, 1, 0);
+	} else if (m <= 3) {
+		start = new Date(y, 1, 1);
+		end = new Date(y, 4, 0);
+	} else if (m <= 6) {
+		start = new Date(y, 4, 1);
+		end = new Date(y, 7, 0);
+	} else {
+		start = new Date(y, 7, 1);
+		end = new Date(y, 10, 0);
+	}
+
+	const fmt = (d: Date) => d.toISOString().split("T")[0]!;
+	return { start: fmt(start), end: fmt(end) };
+}
+
+function buildQueryFn(cwd: string, orgAlias?: string): SfQueryFn {
+	const api = makeExecApi(cwd);
+	return async (soql: string, queryOrgAlias?: string): Promise<Record<string, unknown>[]> => {
+		const org = queryOrgAlias ?? orgAlias;
+		const args = ["data", "query", "--query", soql];
+		if (org) args.push("--target-org", org);
+		try {
+			const result = await execSfJson(api, args, undefined, soql);
+			const data = result.result as { records?: Record<string, unknown>[] };
+			return data.records ?? [];
+		} catch {
+			return [];
+		}
+	};
+}
+
+function detectErrorType(err: unknown): SfErrorType {
+	if (err instanceof SfAuthError) return "auth_required";
+	if (err instanceof SfSessionExpiredError) return "session_expired";
+	if (err instanceof SfNoDefaultOrgError) return "no_default_org";
+	return "exec_error";
+}
+
+export class SfPipelineReportTool implements AgentTool<typeof sfPipelineReportSchema, SfToolDetails> {
+	readonly name = "sf_pipeline_report";
+	readonly label = "Salesforce Pipeline Report";
+	readonly description = prompt.render(sfPipelineReportDescription);
+	readonly parameters = sfPipelineReportSchema;
+
+	constructor(readonly session: ToolSession) {}
+
+	static createIf(session: ToolSession): SfPipelineReportTool | null {
+		if (!$which("sf")) return null;
+		return new SfPipelineReportTool(session);
+	}
+
+	async execute(
+		_toolCallId: string,
+		params: SfPipelineReportInput,
+		_signal?: AbortSignal,
+		_onUpdate?: AgentToolUpdateCallback<SfToolDetails>,
+		_context?: AgentToolContext,
+	): Promise<SfResult> {
+		const base: SfToolDetails = { tool: "sf_pipeline_report" };
+
+		if (params.target_org && !ORG_ALIAS_PATTERN.test(params.target_org)) {
+			return {
+				content: [
+					{
+						type: "text",
+						text: `Error: invalid org alias "${params.target_org}". Only alphanumeric characters, dots, underscores, hyphens, and @ are allowed.`,
+					},
+				],
+				isError: true,
+				details: { ...base, errorType: "exec_error" },
+			};
+		}
+
+		const profile = await loadProfile();
+		const sfContext = await loadSalesforceContext();
+
+		const userId = profile.identifiers?.salesforceId;
+		if (!userId) {
+			return {
+				content: [
+					{
+						type: "text",
+						text: "No Salesforce user ID found. Run sf_setup with action 'status' first, then read `xcsh://user` to confirm your salesforceId is set.",
+					},
+				],
+				isError: true,
+				details: { ...base, errorType: "auth_required" },
+			};
+		}
+
+		const partnerId = profile.partner?.id;
+		const userIds = partnerId ? [userId, partnerId] : [userId];
+		const { start, end } = fiscalQuarterDates();
+
+		const staleDate = new Date();
+		staleDate.setFullYear(staleDate.getFullYear() - 1);
+		const staleCutoff = staleDate.toISOString().split("T")[0]!;
+
+		const partnerName = profile.partner?.name;
+		const selfName = [profile.givenName, profile.familyName].filter(Boolean).join(" ").trim();
+		const teamMemberNames = partnerName && selfName ? [selfName, partnerName] : selfName ? [selfName] : undefined;
+
+		const orgAlias = params.target_org ?? sfContext?.orgAlias;
+
+		const options: PipelineReportOptions = {
+			userIds,
+			orgAlias,
+			quarterStart: start,
+			quarterEnd: end,
+			staleCutoff,
+			confirmedTerritories: profile.territories ?? sfContext?.confirmedTerritories ?? sfContext?.territories,
+			teamMemberNames,
+		};
+
+		try {
+			const queryFn = buildQueryFn(this.session.cwd, orgAlias);
+			const data: PipelineReportData = await generatePipelineReport(options, queryFn);
+			const report = renderPipelineReport(data, sfContext?.instanceUrl ?? "");
+
+			return {
+				content: [{ type: "text", text: report }],
+				details: { ...base, pipelineReport: data },
+			};
+		} catch (err) {
+			const errorType = detectErrorType(err);
+			const message = err instanceof Error ? err.message : String(err);
+			return {
+				content: [{ type: "text", text: message }],
+				isError: true,
+				details: { ...base, errorType },
+			};
+		}
+	}
+}

package/src/tools/sf-renderer.ts

@@ -124,6 +124,11 @@ export const sfToolRenderer = {
 			const text = renderStatusLine({ icon: "pending", title: TOOL_TITLE, description }, uiTheme);
 			return new Text(text, 0, 0);
 		}
+		if (args.action === undefined && args.query === undefined) {
+			// Pipeline report — no action or query args
+			const text = renderStatusLine({ icon: "pending", title: TOOL_TITLE, description: "pipeline report" }, uiTheme);
+			return new Text(text, 0, 0);
+		}
 		const action = args.action ?? "org";
 		const text = renderStatusLine(
 			{
@@ -244,6 +249,47 @@ export const sfToolRenderer = {
 				const text = result.content?.find(c => c.type === "text")?.text ?? "";
 				addSection(sections, "Result", [uiTheme.fg("toolOutput", text)], uiTheme);
 			}
+		} else if (tool === "sf_pipeline_report") {
+			description = "pipeline report";
+			const report = details?.pipelineReport;
+			if (report) {
+				const acctCount =
+					report.netNew.accounts.length + report.booked.accounts.length + report.renewals.accounts.length;
+				meta.push(uiTheme.fg("dim", `${report.lineItemCount} items`));
+				meta.push(uiTheme.fg("dim", `${acctCount} accounts`));
+				if (report.anomalies.length > 0) {
+					meta.push(uiTheme.fg("warning", `${report.anomalies.length} anomalies`));
+				}
+
+				const fc = report.forecast;
+				const fmtK = (v: number) =>
+					v >= 1_000_000
+						? `$${(v / 1_000_000).toFixed(1)}M`
+						: v >= 1_000
+							? `$${(v / 1_000).toFixed(0)}K`
+							: `$${v.toFixed(0)}`;
+				const summaryLines = [
+					`  ${uiTheme.fg("toolTitle", "Commit".padEnd(12))}${uiTheme.fg("toolOutput", fmtK(fc.commit))}`,
+					`  ${uiTheme.fg("toolTitle", "Best Case".padEnd(12))}${uiTheme.fg("toolOutput", fmtK(fc.bestCase))}`,
+					`  ${uiTheme.fg("toolTitle", "Pipeline".padEnd(12))}${uiTheme.fg("toolOutput", fmtK(fc.pipeline))}`,
+				];
+				addSection(sections, "Forecast", summaryLines, uiTheme);
+
+				const text = result.content?.find(c => c.type === "text")?.text ?? "";
+				const reportLines = text.split("\n").map(line => replaceTabs(uiTheme.fg("toolOutput", line)));
+				addSection(sections, "Report", reportLines, uiTheme);
+
+				if (report.anomalies.length > 0) {
+					const anomalyLines = report.anomalies.map(a => {
+						const icon = a.severity === "warning" ? "[WARN]" : a.severity === "error" ? "[ERR]" : "[INFO]";
+						return uiTheme.fg(a.severity === "info" ? "muted" : "warning", `  ${icon} ${a.message}`);
+					});
+					addSection(sections, "Anomalies", anomalyLines, uiTheme);
+				}
+			} else {
+				const text = result.content?.find(c => c.type === "text")?.text ?? "";
+				addSection(sections, "Result", [uiTheme.fg("toolOutput", text)], uiTheme);
+			}
 		} else {
 			const text = result.content?.find(c => c.type === "text")?.text ?? "";
 			addSection(sections, "Result", [uiTheme.fg("toolOutput", text)], uiTheme);

package/src/tools/sf.ts

@@ -24,7 +24,7 @@ import { deriveQueryLabel, formatOrgDetail, formatOrgTable, formatQueryResults }
 import type { SfOrg, SfQueryResult, SfRawResult } from "./sf/types";
 import { ORG_ALIAS_PATTERN } from "./sf/types";
 
-function makeExecApi(cwd: string): SfExecApi {
+export function makeExecApi(cwd: string): SfExecApi {
 	return {
 		async exec(command: string, args: string[], _options?: { signal?: AbortSignal }): Promise<SfRawResult> {
 			// Never pass signal to Bun.spawn and never pre-check signal.aborted.
@@ -96,11 +96,12 @@ type SfOrgDisplayInput = Static<typeof sfOrgDisplaySchema>;
 export type SfErrorType = "auth_required" | "session_expired" | "no_default_org" | "invalid_query" | "exec_error";
 
 export interface SfToolDetails {
-	tool: "sf_setup" | "sf_query" | "sf_org_display";
+	tool: "sf_setup" | "sf_query" | "sf_org_display" | "sf_pipeline_report";
 	action?: string;
 	orgs?: SfOrg[];
 	queryResult?: SfQueryResult;
 	queryDescription?: string;
+	pipelineReport?: import("../pipeline-report/types").PipelineReportData;
 	errorType?: SfErrorType;
 }