@f5xc-salesdemos/xcsh 19.19.1 → 19.19.3

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "19.19.1",
+	"version": "19.19.3",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -50,12 +50,12 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "19.19.1",
-		"@f5xc-salesdemos/pi-agent-core": "19.19.1",
-		"@f5xc-salesdemos/pi-ai": "19.19.1",
-		"@f5xc-salesdemos/pi-natives": "19.19.1",
-		"@f5xc-salesdemos/pi-tui": "19.19.1",
-		"@f5xc-salesdemos/pi-utils": "19.19.1",
+		"@f5xc-salesdemos/xcsh-stats": "19.19.3",
+		"@f5xc-salesdemos/pi-agent-core": "19.19.3",
+		"@f5xc-salesdemos/pi-ai": "19.19.3",
+		"@f5xc-salesdemos/pi-natives": "19.19.3",
+		"@f5xc-salesdemos/pi-tui": "19.19.3",
+		"@f5xc-salesdemos/pi-utils": "19.19.3",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",

package/src/extensibility/extensions/loader.ts

@@ -12,7 +12,7 @@ import type { TSchema } from "@sinclair/typebox";
 import * as TypeBox from "@sinclair/typebox";
 import { type ExtensionModule, extensionModuleCapability } from "../../capability/extension-module";
 import { loadCapability } from "../../discovery";
-import { getExtensionNameFromPath } from "../../discovery/helpers";
+import { getExtensionNameFromPath, getPreloadedPluginRoots } from "../../discovery/helpers";
 import type { ExecOptions } from "../../exec/exec";
 import { execCommand } from "../../exec/exec";
 import { PROFILE_COLLECTORS, type ProfileCollector } from "../../internal-urls/profile-collectors";
@@ -515,9 +515,31 @@ export async function discoverAndLoadExtensions(
 		addPath(ext.path);
 	}
 
-	// 2. Discover extension entry points from installed plugins
+	// 2. Discover extension entry points from installed plugins (node_modules path)
 	addPaths(await getAllPluginExtensionPaths(cwd));
 
+	// 2b. Discover extension entry points from marketplace-cached plugins
+	for (const root of getPreloadedPluginRoots()) {
+		try {
+			const pkgPath = path.join(root.path, "package.json");
+			const pkg = await Bun.file(pkgPath).json();
+			const manifest = pkg?.xcsh ?? pkg?.pi;
+			const extensions = manifest?.extensions;
+			if (Array.isArray(extensions)) {
+				for (const entry of extensions) {
+					if (typeof entry !== "string") continue;
+					if (path.isAbsolute(entry) || entry.includes("..")) continue;
+					const resolved = path.resolve(root.path, entry);
+					if (!resolved.startsWith(root.path + path.sep) && resolved !== root.path) continue;
+					if (isDisabledName(getExtensionNameFromPath(resolved))) continue;
+					addPath(resolved);
+				}
+			}
+		} catch {
+			// No package.json or invalid — skip
+		}
+	}
+
 	// 3. Explicitly configured paths
 	for (const configuredPath of configuredPaths) {
 		const resolved = resolvePath(configuredPath, cwd);

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.19.1",
-	"commit": "1d8f572501dac4506ac9d354e9f03b4172a8d6c6",
-	"shortCommit": "1d8f572",
+	"version": "19.19.3",
+	"commit": "0d01a928658034ee23d053d44eaed4463ee35b8a",
+	"shortCommit": "0d01a92",
 	"branch": "main",
-	"tag": "v19.19.1",
-	"commitDate": "2026-06-09T00:37:10Z",
-	"buildDate": "2026-06-09T01:07:22.031Z",
+	"tag": "v19.19.3",
+	"commitDate": "2026-06-09T02:04:30Z",
+	"buildDate": "2026-06-09T02:27:32.159Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/1d8f572501dac4506ac9d354e9f03b4172a8d6c6",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.19.1"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/0d01a928658034ee23d053d44eaed4463ee35b8a",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.19.3"
 };

package/src/modes/interactive-mode.ts

@@ -387,7 +387,9 @@ export class InteractiveMode implements InteractiveModeContext {
 			}
 		}
 
-		const recommendedPlugins = !startupQuiet ? await checkRecommendedPlugins().catch(() => []) : [];
+		const allRecommendedPlugins = !startupQuiet ? await checkRecommendedPlugins().catch(() => []) : [];
+		const pluginServiceNames = new Set(services.filter(s => s._isPlugin).map(s => s.name.toLowerCase()));
+		const recommendedPlugins = allRecommendedPlugins.filter(p => !pluginServiceNames.has(p.name.toLowerCase()));
 
 		if (!startupQuiet) {
 			this.#welcomeComponent = new WelcomeComponent(

package/src/prompts/tools/xcsh-api.md

@@ -113,6 +113,6 @@ Swap exactly one block per oneOf group — e.g. `enable_ha {}` replaces `disable
 - `site_mesh_group_on_slo { site_mesh_group { name = "<n>", namespace = "system" } }` ← note the nested `site_mesh_group` wrapper
 - `custom_proxy { proxy_ip_address = "proxy.example.com", proxy_port = 8080 }` ← use `proxy_ip_address`/`proxy_port` (NOT `http_proxy`/`https_proxy`)
 - `custom_proxy_bypass { proxy_bypass = ["10.0.0.0/8"] }` ← use `proxy_bypass` (NOT `bypass_list`)
-- `blocked_services { blocked_service { network_type = "VIRTUAL_NETWORK_SITE_LOCAL" } }` ← use `blocked_service` with `network_type` (NOT `service_list`)
+- `blocked_services { blocked_service { network_type = "VIRTUAL_NETWORK_SITE_LOCAL" } }` ← use `blocked_service` with `network_type` (NOT `service_list`). In Terraform, "blocking HTTP services" = blocking `VIRTUAL_NETWORK_SITE_LOCAL` network type. Always write the file even when the phrase mentions "HTTP service in blocked services list" — map it to `blocked_service { network_type = "VIRTUAL_NETWORK_SITE_LOCAL" }`
 
 **CRITICAL — Terraform file write rule**: When asked to "Write Terraform HCL for f5xc_securemesh_site_v2", you **MUST** use the `xcsh_write_file` tool to write the complete `.tf` file to disk. Always name the file after the resource name in the request (e.g., `ar-test-smsv2-1a.tf`). Do NOT just return a coverage table — always write the actual HCL file. The file must include a `terraform { required_providers { f5xc = { source = "f5xc-salesdemos/f5xc" } } }` block and the complete `resource "f5xc_securemesh_site_v2"` block with all 12 oneOf groups.