@f5xc-salesdemos/xcsh 19.14.3 → 19.15.1

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "19.14.3",
+	"version": "19.15.1",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -50,12 +50,12 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "19.14.3",
-		"@f5xc-salesdemos/pi-agent-core": "19.14.3",
-		"@f5xc-salesdemos/pi-ai": "19.14.3",
-		"@f5xc-salesdemos/pi-natives": "19.14.3",
-		"@f5xc-salesdemos/pi-tui": "19.14.3",
-		"@f5xc-salesdemos/pi-utils": "19.14.3",
+		"@f5xc-salesdemos/xcsh-stats": "19.15.1",
+		"@f5xc-salesdemos/pi-agent-core": "19.15.1",
+		"@f5xc-salesdemos/pi-ai": "19.15.1",
+		"@f5xc-salesdemos/pi-natives": "19.15.1",
+		"@f5xc-salesdemos/pi-tui": "19.15.1",
+		"@f5xc-salesdemos/pi-utils": "19.15.1",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",

package/src/extensibility/extensions/loader.ts

@@ -15,6 +15,8 @@ import { loadCapability } from "../../discovery";
 import { getExtensionNameFromPath } from "../../discovery/helpers";
 import type { ExecOptions } from "../../exec/exec";
 import { execCommand } from "../../exec/exec";
+import type { ProfileCollector } from "../../internal-urls/profile-collectors";
+import { registerProfileCollector as registerProfileCollectorCore } from "../../internal-urls/profile-collectors";
 import type { CustomMessage } from "../../session/messages";
 import { EventBus } from "../../utils/event-bus";
 import { getAllPluginExtensionPaths } from "../plugins/loader";
@@ -181,6 +183,10 @@ class ConcreteExtensionAPI implements ExtensionAPI, IExtensionRuntime {
 		this.extension.serviceStatuses.set(contribution.name, contribution);
 	}
 
+	registerProfileCollector(collector: ProfileCollector): void {
+		registerProfileCollectorCore(collector);
+	}
+
 	getFlag(name: string): boolean | string | undefined {
 		if (!this.extension.flags.has(name)) return undefined;
 		return this.runtime.flagValues.get(name);

package/src/extensibility/extensions/types.ts

@@ -35,6 +35,7 @@ import type { ModelRegistry } from "../../config/model-registry";
 import type { EditToolDetails } from "../../edit";
 import type { BashResult } from "../../exec/bash-executor";
 import type { ExecOptions, ExecResult } from "../../exec/exec";
+import type { ProfileCollector } from "../../internal-urls/profile-collectors";
 import type { PythonResult } from "../../ipy/executor";
 import type { Theme } from "../../modes/theme/theme";
 import type { CompactionPreparation, CompactionResult } from "../../session/compaction";
@@ -1081,6 +1082,9 @@ export interface ExtensionAPI {
 	/** Register a service status check for the welcome screen. */
 	registerServiceStatus(contribution: ServiceStatusContribution): void;
 
+	/** Register a profile collector that pushes discovered person-data to the user profile. */
+	registerProfileCollector(collector: ProfileCollector): void;
+
 	// =========================================================================
 	// Actions
 	// =========================================================================

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.14.3",
-	"commit": "babc47593b34b9bdd2eafbe29e590dcd6b5beb0f",
-	"shortCommit": "babc475",
+	"version": "19.15.1",
+	"commit": "c973489d7e76f41327ba992e44617e173cc702e1",
+	"shortCommit": "c973489",
 	"branch": "main",
-	"tag": "v19.14.3",
-	"commitDate": "2026-06-08T00:40:23Z",
-	"buildDate": "2026-06-08T01:05:25.613Z",
+	"tag": "v19.15.1",
+	"commitDate": "2026-06-08T02:49:22Z",
+	"buildDate": "2026-06-08T03:14:05.699Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/babc47593b34b9bdd2eafbe29e590dcd6b5beb0f",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.14.3"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/c973489d7e76f41327ba992e44617e173cc702e1",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.15.1"
 };

package/src/internal-urls/profile-collectors.ts

@@ -52,4 +52,14 @@ const systemCollector: ProfileCollector = {
 // Registry
 // ---------------------------------------------------------------------------
 
-export const PROFILE_COLLECTORS: readonly ProfileCollector[] = [systemCollector];
+const _collectors: ProfileCollector[] = [systemCollector];
+
+export const PROFILE_COLLECTORS: readonly ProfileCollector[] = _collectors;
+
+export function registerProfileCollector(collector: ProfileCollector): void {
+	if (_collectors.some(c => c.id === collector.id)) {
+		logger.warn(`Profile collector '${collector.id}' already registered, skipping`);
+		return;
+	}
+	_collectors.push(collector);
+}

package/src/internal-urls/user-profile.ts

@@ -67,6 +67,8 @@ export interface UserProfile {
 	observations?: UserProfileObservation[];
 	sources?: { github?: string; system?: string; conversation?: string };
 	updatedAt?: string;
+	/** Tracks which collector ID authoritatively owns each top-level field. */
+	_fieldOwnership?: Record<string, string>;
 }
 
 const PROFILE_PATH = path.join(os.homedir(), ".xcsh", "user-profile.json");
@@ -142,6 +144,57 @@ export async function seedProfile(): Promise<UserProfile> {
 	return profile;
 }
 
+const META_FIELDS = new Set(["sources", "observations", "updatedAt", "_fieldOwnership"]);
+const FORBIDDEN_KEYS = new Set(["__proto__", "constructor", "prototype"]);
+
+export function reconcileProfile(target: UserProfile, source: Partial<UserProfile>, sourceId: string): void {
+	const ownership = target._fieldOwnership ?? {};
+
+	for (const [key, value] of Object.entries(source)) {
+		if (value === undefined || value === null) continue;
+		if (FORBIDDEN_KEYS.has(key)) continue;
+		const k = key as keyof UserProfile;
+		if (META_FIELDS.has(k)) continue;
+
+		const currentOwner = ownership[k];
+
+		if (currentOwner === "user") continue;
+		if (currentOwner && currentOwner !== sourceId) continue;
+		if (!currentOwner && target[k] !== undefined && target[k] !== null) continue;
+
+		Object.defineProperty(target, k, { value, writable: true, enumerable: true, configurable: true });
+		if (!currentOwner) {
+			Object.defineProperty(ownership, k, { value: sourceId, writable: true, enumerable: true, configurable: true });
+		}
+	}
+
+	target._fieldOwnership = ownership;
+}
+
+export async function reconcileFromCollectors(): Promise<UserProfile> {
+	const profile = await loadProfile();
+	if (!profile.sources) profile.sources = {};
+
+	for (const collector of PROFILE_COLLECTORS) {
+		try {
+			const isAvailable = await collector.available();
+			if (!isAvailable) {
+				logger.debug(`Profile collector '${collector.id}' not available, skipping`);
+				continue;
+			}
+			const partial = await collector.collect();
+			reconcileProfile(profile, partial, collector.id);
+			(profile.sources as Record<string, string>)[collector.id] = new Date().toISOString();
+			logger.debug(`Profile collector '${collector.id}' reconciled`);
+		} catch (err: unknown) {
+			logger.debug(`Profile collector '${collector.id}' failed`, { error: err });
+		}
+	}
+
+	await saveProfile(profile);
+	return profile;
+}
+
 function formatAddress(addr: NonNullable<UserProfile["address"]>): string {
 	const parts: string[] = [];
 	if (addr.streetAddress) parts.push(addr.streetAddress);

package/src/modes/interactive-mode.ts

@@ -29,7 +29,7 @@ import type { CompactOptions } from "../extensibility/extensions/types";
 import { BUILTIN_SLASH_COMMANDS, loadSlashCommands } from "../extensibility/slash-commands";
 import { resolveLocalUrlToPath } from "../internal-urls";
 import { seedComputerProfile } from "../internal-urls/computer-profile";
-import { seedProfile } from "../internal-urls/user-profile";
+import { reconcileFromCollectors } from "../internal-urls/user-profile";
 import { renameApprovedPlanFile } from "../plan-mode/approved-plan";
 import planModeApprovedPrompt from "../prompts/system/plan-mode-approved.md" with { type: "text" };
 import type { AgentSession, AgentSessionEvent } from "../session/agent-session";
@@ -321,7 +321,7 @@ export class InteractiveMode implements InteractiveModeContext {
 		);
 
 		// Refresh user profile in background — fire and forget
-		seedProfile().catch(err => logger.warn("Background profile refresh failed", { error: String(err) }));
+		reconcileFromCollectors().catch(err => logger.warn("Background profile refresh failed", { error: String(err) }));
 		// Refresh computer profile in background — fire and forget
 		seedComputerProfile().catch(err =>
 			logger.warn("Background computer profile refresh failed", { error: String(err) }),

package/src/prompts/tools/xcsh-api.md

@@ -55,3 +55,25 @@ For HTTPS: replace `"http": {"port": 80}` with `"https_auto_cert": {"http_redire
 - `policers` / "policer": `{"metadata":{"name":"<n>","namespace":"<ns>"},"spec":{"burst_size":<int>,"committed_information_rate":<int>}}` — network-level byte/Mbps limiting
 - `rate_limiters` / "rate limiter": `{"metadata":{"name":"<n>","namespace":"<ns>"},"spec":{"burst_size":<int>,"committed_information_rate":<int>}}` — HTTP request-level limiting (rps)
 - `rate_limiter_policys` / "rate limiter policy": requires existing `rate_limiter` reference; use `{"metadata":{"name":"<n>","namespace":"<ns>"},"spec":{"any_server":{},"rules":[{"metadata":{"name":"r"},"spec":{"any_client":{},"any_ip":{},"rate_limiter":{"namespace":"<ns>","name":"<rl-name>"}}}]}}`
+
+**SecureMesh Site v2 (`securemesh_site_v2s`) — system namespace only** — POST to `/api/config/namespaces/system/securemesh_site_v2s`. Base payload with all 12 oneOf groups set to defaults:
+
+```json
+{"metadata":{"name":"<n>","namespace":"system"},"spec":{"azure":{"not_managed":{"node_list":[]}},"disable_ha":{},"block_all_services":{},"no_network_policy":{},"no_forward_proxy":{},"f5_proxy":{},"no_proxy_bypass":{},"logs_streaming_disabled":{},"no_s2s_connectivity_sli":{},"no_s2s_connectivity_slo":{},"disable_url_categorization":{},"disable_management_network":{}}}
+```
+
+Each of the 12 oneOf groups has two or three mutually exclusive choices — pick exactly one per group:
+
+|Group|Options (pick one)|Notes|
+|---|---|---|
+|node_ha|`"disable_ha":{}` OR `"enable_ha":{}`||
+|blocked_services|`"block_all_services":{}` OR `"blocked_services":{"service_list":[{"service":"HTTP"}]}`||
+|network_policy|`"no_network_policy":{}` OR `"active_enhanced_firewall_policies":{"active_enhanced_firewall_policies":[{"name":"<n>","namespace":"<ns>"}]}`|prereq: create `enhanced_firewall_policys` with `spec:{}` first|
+|forward_proxy|`"no_forward_proxy":{}` OR `"active_forward_proxy_policies":{"active_forward_proxy_policies":[{"name":"<n>","namespace":"<ns>"}]}`|prereq: create `forward_proxy_policys` with `spec:{"drp_http_connect":{},"allow_all":{}}` — drp_http_connect **REQUIRED**|
+|enterprise_proxy|`"f5_proxy":{}` OR `"custom_proxy":{"http_proxy":"http://proxy:8080","https_proxy":"http://proxy:8080"}`||
+|proxy_bypass|`"no_proxy_bypass":{}` OR `"custom_proxy_bypass":{"bypass_list":["10.0.0.0/8"]}`||
+|logs_receiver|`"logs_streaming_disabled":{}` OR `"log_receiver":{"name":"<n>","namespace":"<ns>"}`|prereq: create `global_log_receivers` with `spec:{"request_logs":{},"http_receiver":{"uri":"http://logs:8080","no_tls":{},"disable_authentication":{}}}`|
+|s2s_sli|`"no_s2s_connectivity_sli":{}` OR `"dc_cluster_group_sli":{"name":"<n>","namespace":"system"}`|prereq: create `dc_cluster_groups` in system ns with `spec:{}`|
+|s2s_slo|`"no_s2s_connectivity_slo":{}` OR `"dc_cluster_group_slo":{"name":"<n>","namespace":"system"}` OR `"site_mesh_group_on_slo":{"name":"<n>","namespace":"system"}`|dc_cluster_group prereq same as above; site_mesh_group prereq: `spec:{"type":"SITE_MESH_GROUP_TYPE_FULL_MESH","tunnel_type":"SITE_TO_SITE_TUNNEL_IPSEC","full_mesh":{"data_plane_mesh":{}},"bfd_disabled":{}}` — bfd_disabled **REQUIRED**|
+|url_categorization|`"disable_url_categorization":{}` OR `"enable_url_categorization":{}`||
+|management_network|`"disable_management_network":{}` OR `"enable_management_network":{}`||

package/src/tui/output-block.ts

@@ -21,7 +21,7 @@ export interface OutputBlockOptions {
 	sections?: Array<{ label?: string; lines: string[] }>;
 	width: number;
 	applyBg?: boolean;
-	/** Override the state-derived border color. Use sparingly — only for branded core tools. */
+	/** Override the state-derived border color. Always takes precedence, including on error. Use for branded core tools. */
 	borderColor?: ThemeColor;
 }
 
@@ -39,14 +39,11 @@ export function renderOutputBlock(options: OutputBlockOptions, theme: Theme): st
 	const v = theme.boxSharp.vertical;
 	const cap = h.repeat(3);
 	const lineWidth = Math.max(0, width);
-	// Border colors: error→error (red), warning→warning, running/pending→spinnerAccent, success→dim.
-	// borderColorOverride (from options) takes precedence for non-error states on F5-branded tools (e.g. XC-API);
-	// override is always cleared on error so all tools show a consistent error border; use F5_TOOL_BORDER_COLOR.
+	// borderColorOverride (F5 brand chrome) always takes precedence;
+	// built-in tools without an override use dim borders regardless of error state.
 	const resolvedBorderColor: ThemeColor =
-		state === "error"
-			? "error"
-			: (borderColorOverride ??
-				(state === "warning" ? "warning" : state === "running" || state === "pending" ? "spinnerAccent" : "dim"));
+		borderColorOverride ??
+		(state === "warning" ? "warning" : state === "running" || state === "pending" ? "spinnerAccent" : "dim");
 	const border = (text: string) => theme.fg(resolvedBorderColor, text);
 	const bgFn = (() => {
 		if (!state || !applyBg) return undefined;