@f5xc-salesdemos/xcsh 18.78.0 → 18.80.0

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "18.78.0",
+	"version": "18.80.0",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -48,12 +48,12 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "18.78.0",
-		"@f5xc-salesdemos/pi-agent-core": "18.78.0",
-		"@f5xc-salesdemos/pi-ai": "18.78.0",
-		"@f5xc-salesdemos/pi-natives": "18.78.0",
-		"@f5xc-salesdemos/pi-tui": "18.78.0",
-		"@f5xc-salesdemos/pi-utils": "18.78.0",
+		"@f5xc-salesdemos/xcsh-stats": "18.80.0",
+		"@f5xc-salesdemos/pi-agent-core": "18.80.0",
+		"@f5xc-salesdemos/pi-ai": "18.80.0",
+		"@f5xc-salesdemos/pi-natives": "18.80.0",
+		"@f5xc-salesdemos/pi-tui": "18.80.0",
+		"@f5xc-salesdemos/pi-utils": "18.80.0",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.18",

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "18.78.0",
-	"commit": "3bb17496fe0790d993020518091a0fc0979ea249",
-	"shortCommit": "3bb1749",
+	"version": "18.80.0",
+	"commit": "7c19c50d50c5dacf1cb9e16ec599044ee32e1645",
+	"shortCommit": "7c19c50",
 	"branch": "main",
-	"tag": "v18.78.0",
-	"commitDate": "2026-05-24T05:12:38Z",
-	"buildDate": "2026-05-24T05:34:47.462Z",
+	"tag": "v18.80.0",
+	"commitDate": "2026-05-25T05:57:39Z",
+	"buildDate": "2026-05-25T06:19:42.244Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/3bb17496fe0790d993020518091a0fc0979ea249",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.78.0"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/7c19c50d50c5dacf1cb9e16ec599044ee32e1645",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v18.80.0"
 };

package/src/modes/rpc/rpc-client.ts

@@ -376,6 +376,18 @@ export class RpcClient {
 		return this.#getData<{ models: ModelInfo[] }>(response).models;
 	}
 
+	/**
+	 * Get integration health status (F5 XC Context, GitLab, GitHub, Salesforce, Azure, AWS, Google Cloud).
+	 */
+	async getIntegrations(): Promise<{
+		version: string;
+		model: { state: "no_provider" | "connected" | "auth_error"; provider?: string; latencyMs?: number };
+		services: Array<{ name: string; state: "connected" | "unauthenticated" | "unavailable"; hint?: string }>;
+	}> {
+		const response = await this.#send({ type: "get_integrations" });
+		return this.#getData(response);
+	}
+
 	/**
 	 * Set thinking level.
 	 */

package/src/tools/xcsh-api.ts

@@ -6,6 +6,53 @@ import xcshApiDescription from "../prompts/tools/xcsh-api.md" with { type: "text
 import { type ContextEnv, createContextEnv } from "../services/context-env";
 import type { ToolSession } from ".";
 
+// Namespace filtering driven by x-f5xc-namespace-profile from enriched API specs.
+
+type NamespaceType = "system" | "shared" | "default" | "custom";
+
+function namespaceTypeOf(namespaceName: string): NamespaceType {
+	if (namespaceName === "system") return "system";
+	if (namespaceName === "shared") return "shared";
+	if (namespaceName === "default") return "default";
+	if (namespaceName.startsWith("ves-io-")) return "system";
+	return "custom";
+}
+
+/**
+ * Default allowed namespace types for multi-namespace batch queries.
+ * Matches the default_profile.constraint.allowed from namespace_profile.yaml.
+ * When a batch spans multiple resource types we cannot use a single resource's
+ * namespace profile, so this safe default excludes system namespaces.
+ */
+const DEFAULT_ALLOWED_NS_TYPES: ReadonlySet<NamespaceType> = new Set<NamespaceType>(["custom", "default", "shared"]);
+
+/**
+ * Look up allowed namespace types from the embedded API spec data.
+ * Returns the namespace profile constraint if the spec has x-f5xc-namespace-profile,
+ * otherwise returns the default allowed types.
+ */
+function loadAllowedNamespaceTypes(domain?: string): ReadonlySet<NamespaceType> {
+	if (!domain) return DEFAULT_ALLOWED_NS_TYPES;
+	try {
+		const mod = require("../internal-urls/api-spec-index.generated") as {
+			API_SPEC_DATA?: Readonly<
+				Record<
+					string,
+					{ info?: { "x-f5xc-namespace-profile"?: { constraint?: { allowed?: string[] } } }; [k: string]: unknown }
+				>
+			>;
+		};
+		const spec = mod.API_SPEC_DATA?.[domain];
+		const allowed = spec?.info?.["x-f5xc-namespace-profile"]?.constraint?.allowed;
+		if (Array.isArray(allowed) && allowed.length > 0) {
+			return new Set(allowed as NamespaceType[]);
+		}
+	} catch {
+		// Spec data unavailable — use default
+	}
+	return DEFAULT_ALLOWED_NS_TYPES;
+}
+
 const xcshApiSchema = Type.Object({
 	method: Type.Union(
 		[Type.Literal("GET"), Type.Literal("POST"), Type.Literal("PUT"), Type.Literal("PATCH"), Type.Literal("DELETE")],
@@ -84,6 +131,7 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 	#contextEnv: ContextEnv;
 	#lastApiBase = "";
 	#listablePathsCache: string[] | null = null;
+	#autoExpandPathsCache: string[] | null = null;
 	#expandedNamespaces = new Set<string>();
 
 	constructor(session: ToolSession) {
@@ -131,7 +179,11 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 			const CONFIG_PREFIX = "/api/config/namespaces/{namespace}/";
 			// Only include app/security types (keyword filter). Reduces batch from ~136 to ~42 paths,
 			// cutting expansion time by ~3× and eliminating infrastructure noise from the response.
+			// Healthcheck is included in batch content (for HC labels) but NOT in the auto-expand
+			// trigger list — direct GET to /healthchecks should not trigger a full namespace expansion.
 			const APP_KW =
+				/loadbalancer|pool|firewall|healthcheck|_policys|setting|type|mitigation|identification|network|route|host|definition|rate_limiter|prefix_set|cdn|waf|api_/i;
+			const AUTO_EXPAND_KW =
 				/loadbalancer|pool|firewall|_policys|setting|type|mitigation|identification|network|route|host|definition|rate_limiter|prefix_set|cdn|waf|api_/i;
 			const META_EXCL = /policy_set|policy_rule|data_polic/i;
 			for (const summary of summaries) {
@@ -151,6 +203,11 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 					}
 				}
 			}
+			// Build separate auto-expand trigger list (excludes healthcheck)
+			this.#autoExpandPathsCache = paths.filter(p => {
+				const last = p.split("/").filter(Boolean).at(-1) ?? "";
+				return AUTO_EXPAND_KW.test(last);
+			});
 			this.#listablePathsCache = paths;
 			return paths;
 		} catch {
@@ -170,7 +227,11 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 		const fetchSignal = signal ? AbortSignal.any([signal, timeoutSignal]) : timeoutSignal;
 		const startMs = performance.now();
 
-		// Discover all accessible namespaces
+		// Discover all accessible namespaces, filtered by spec-driven namespace profile.
+		// Multi-resource batch queries use DEFAULT_ALLOWED_NS_TYPES (custom, default, shared)
+		// which excludes system namespaces. When x-f5xc-namespace-profile is present in
+		// enriched specs, loadAllowedNamespaceTypes() will use the spec's constraint.
+		const allowedTypes = loadAllowedNamespaceTypes();
 		let allNs: string[] = [];
 		try {
 			const nsResp = await fetch(`${apiBase}/api/web/namespaces`, {
@@ -182,13 +243,7 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 				const nsData = (await nsResp.json()) as { items?: Array<Record<string, unknown>> };
 				allNs = (nsData.items ?? [])
 					.map(item => (typeof item.name === "string" ? item.name : null))
-					.filter(
-						(name): name is string =>
-							name !== null &&
-							!name.startsWith("ves-io") &&
-							!name.startsWith("system") &&
-							!name.startsWith("shared"),
-					);
+					.filter((name): name is string => name !== null && allowedTypes.has(namespaceTypeOf(name)));
 			}
 		} catch {
 			// Fall back to default namespace only
@@ -412,15 +467,22 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 		// Core types get detailed per-resource output with spec summaries.
 		// Secondary types get a compact count to reduce batch response noise.
 		// Shorter, focused output helps the model find relationship data directly.
-		const getTypeName = (r: BatchEntry) => r.path.split("/").pop() ?? r.path;
-		const coreTypes = relevantData.filter(r => SPEC_TYPES.test(getTypeName(r)));
-		const secondaryTypes = relevantData.filter(r => !SPEC_TYPES.test(getTypeName(r)));
+		const getRawTypeName = (r: BatchEntry) => r.path.split("/").pop() ?? r.path;
+		// Human-readable type name for display: http_loadbalancers → load balancers, origin_pools → origin pools
+		const humanizeType = (raw: string): string =>
+			raw
+				.replace(/^http_/, "")
+				.replace(/_/g, " ")
+				.replace(/([a-z])([A-Z])/g, "$1 $2")
+				.replace(/([a-z])(balancer|checker)/gi, "$1 $2");
+		const coreTypes = relevantData.filter(r => SPEC_TYPES.test(getRawTypeName(r)));
+		const secondaryTypes = relevantData.filter(r => !SPEC_TYPES.test(getRawTypeName(r)));
 
 		if (coreTypes.length > 0) {
 			sections.push(`Namespace resource inventory (${coreTypes.length} core types):\n`);
 			let idx = 1;
 			for (const r of coreTypes) {
-				const typeName = getTypeName(r);
+				const typeName = humanizeType(getRawTypeName(r));
 				const items = (r.parsed?.items as Array<Record<string, unknown>> | undefined) ?? [];
 				if (items.length === 0) {
 					sections.push(`${idx}. ${typeName}: ${r.itemCount} item(s)`);
@@ -439,7 +501,7 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 		if (secondaryTypes.length > 0) {
 			const secondaryCount = secondaryTypes.reduce((sum, r) => sum + (r.itemCount ?? 0), 0);
 			sections.push(
-				`\n(+${secondaryTypes.length} other types with ${secondaryCount} items: ${secondaryTypes.map(r => getTypeName(r)).join(", ")})`,
+				`\n(+${secondaryTypes.length} other types with ${secondaryCount} items: ${secondaryTypes.map(r => humanizeType(getRawTypeName(r))).join(", ")})`,
 			);
 		}
 
@@ -493,6 +555,15 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 				if (spec.monitoring != null) labels.push("monitoring-mode");
 				else if (spec.blocking != null) labels.push("blocking-mode");
 			}
+			if (/healthcheck/i.test(rType)) {
+				if (spec.http_health_check != null) {
+					labels.push("http");
+					const httpHC = spec.http_health_check as Record<string, unknown>;
+					if (typeof httpHC.path === "string") labels.push(`path=${httpHC.path}`);
+				} else if (spec.tcp_health_check != null) {
+					labels.push("tcp");
+				}
+			}
 			if (labels.length > 0) {
 				summaryLines.push(`${rName}: ${labels.join(", ")}`);
 			}
@@ -595,12 +666,15 @@ export class XcshApiTool implements AgentTool<typeof xcshApiSchema, XcshApiToolD
 		// File-based cache in #executeBatch prevents redundant API calls across sessions.
 		if (params.method === "GET" && !params.payload) {
 			const listablePaths = this.#loadListablePaths();
-			if (listablePaths.length > 0) {
+			// Use the auto-expand trigger list (excludes healthcheck) to decide WHETHER to expand.
+			// The batch itself uses the full listablePaths (includes healthcheck) for content.
+			const triggerPaths = this.#autoExpandPathsCache ?? listablePaths;
+			if (triggerPaths.length > 0) {
 				const normalized = params.path.replace(
 					/\/api\/config\/namespaces\/[^/]+\//,
 					"/api/config/namespaces/{namespace}/",
 				);
-				if (listablePaths.includes(params.path) || listablePaths.includes(normalized)) {
+				if (triggerPaths.includes(params.path) || triggerPaths.includes(normalized)) {
 					const nsMatch = params.path.match(/\/api\/config\/namespaces\/([^/]+)\//);
 					const ns = params.params?.namespace ?? (nsMatch?.[1] && nsMatch[1] !== "{namespace}" ? nsMatch[1] : "");
 					if (ns && !this.#expandedNamespaces.has(ns)) {