@f5xc-salesdemos/xcsh 19.21.1 → 19.22.0

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "19.21.1",
+	"version": "19.22.0",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -50,12 +50,12 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "19.21.1",
-		"@f5xc-salesdemos/pi-agent-core": "19.21.1",
-		"@f5xc-salesdemos/pi-ai": "19.21.1",
-		"@f5xc-salesdemos/pi-natives": "19.21.1",
-		"@f5xc-salesdemos/pi-tui": "19.21.1",
-		"@f5xc-salesdemos/pi-utils": "19.21.1",
+		"@f5xc-salesdemos/xcsh-stats": "19.22.0",
+		"@f5xc-salesdemos/pi-agent-core": "19.22.0",
+		"@f5xc-salesdemos/pi-ai": "19.22.0",
+		"@f5xc-salesdemos/pi-natives": "19.22.0",
+		"@f5xc-salesdemos/pi-tui": "19.22.0",
+		"@f5xc-salesdemos/pi-utils": "19.22.0",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.21.1",
-	"commit": "806c028f9e51acc0f44993df94bc76c583543156",
-	"shortCommit": "806c028",
+	"version": "19.22.0",
+	"commit": "a80eb3c1c0cc909d3a8b40f5b904e876240341a8",
+	"shortCommit": "a80eb3c",
 	"branch": "main",
-	"tag": "v19.21.1",
-	"commitDate": "2026-06-09T21:10:16Z",
-	"buildDate": "2026-06-09T21:32:34.802Z",
+	"tag": "v19.22.0",
+	"commitDate": "2026-06-09T21:08:12-04:00",
+	"buildDate": "2026-06-10T01:36:55.747Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/806c028f9e51acc0f44993df94bc76c583543156",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.21.1"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/a80eb3c1c0cc909d3a8b40f5b904e876240341a8",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.22.0"
 };

package/src/modes/components/welcome.ts

@@ -15,7 +15,7 @@ export class WelcomeComponent implements Component {
 		private modelStatus: ModelStatus,
 		private services: ServiceStatus[] = [],
 		private updateStatus?: UpdateStatus,
-		private _recommendedPlugins: RecommendedPluginStatus[] = [],
+		private recommendedPlugins: RecommendedPluginStatus[] = [],
 		private plugins: UnifiedPluginStatus[] = [],
 	) {}
 	invalidate(): void {}
@@ -29,7 +29,7 @@ export class WelcomeComponent implements Component {
 		this.updateStatus = status;
 	}
 	setRecommendedPlugins(plugins: RecommendedPluginStatus[]): void {
-		this._recommendedPlugins = plugins;
+		this.recommendedPlugins = plugins;
 	}
 	setPlugins(plugins: UnifiedPluginStatus[]): void {
 		this.plugins = plugins;

package/src/prompts/tools/xcsh-api.md

@@ -186,9 +186,95 @@ Swap exactly one block per oneOf group — e.g. `enable_ha {}` replaces `disable
 - `active_forward_proxy_policies { forward_proxy_policies { name = "<n>", namespace = "system" } }`
 - `log_receiver { name = "<n>", namespace = "<ns>" }`
 - `dc_cluster_group_sli { name = "<n>", namespace = "system" }` (same for `dc_cluster_group_slo`)
-- `site_mesh_group_on_slo { site_mesh_group { name = "<n>", namespace = "system" } }` ← note the nested `site_mesh_group` wrapper
+- `site_mesh_group_on_slo { site_mesh_group { name = "<n>", namespace = "system" } }` ← CRITICAL: requires nested `site_mesh_group {}` wrapper block (not direct name/namespace attributes on site_mesh_group_on_slo)
 - `custom_proxy { proxy_ip_address = "proxy.example.com", proxy_port = 8080 }` ← use `proxy_ip_address`/`proxy_port` (NOT `http_proxy`/`https_proxy`)
 - `custom_proxy_bypass { proxy_bypass = ["10.0.0.0/8"] }` ← use `proxy_bypass` (NOT `bypass_list`)
 - `blocked_services { blocked_service { network_type = "VIRTUAL_NETWORK_SITE_LOCAL" } }` ← use `blocked_service` with `network_type` (NOT `service_list`). In Terraform, "blocking HTTP services" = blocking `VIRTUAL_NETWORK_SITE_LOCAL` network type. Always write the file even when the phrase mentions "HTTP service in blocked services list" — map it to `blocked_service { network_type = "VIRTUAL_NETWORK_SITE_LOCAL" }`
 
 **CRITICAL — Terraform file write rule**: When asked to "Write Terraform HCL for f5xc_securemesh_site_v2", you **MUST** use the `xcsh_write_file` tool to write the complete `.tf` file to disk. Always name the file after the resource name in the request (e.g., `ar-test-smsv2-1a.tf`). Do NOT just return a coverage table — always write the actual HCL file. The file must include a `terraform { required_providers { f5xc = { source = "f5xc-salesdemos/f5xc" } } }` block and the complete `resource "f5xc_securemesh_site_v2"` block with all 12 oneOf groups.
+
+**HTTP/HTTPS Load Balancer Terraform HCL (`f5xc_http_loadbalancer`)** — Use `resource "f5xc_http_loadbalancer"` in any namespace. Must include `terraform { required_providers { f5xc = { source = "f5xc-salesdemos/f5xc" } } }` block. Always write file with `xcsh_write_file`. Name the file after the resource name (e.g., `ar-test-lb-https-1.tf`).
+
+**CRITICAL — Terraform HCL single-line block rule**: A block definition like `outer { inner {} }` is INVALID when `inner {}` is itself a block (not an attribute). Nested blocks **MUST** be on their own lines:
+- WRONG: `tls_config { default_security {} }`
+- CORRECT: `tls_config {\n  default_security {}\n}`
+- WRONG: `full_mesh { data_plane_mesh {} }`
+- CORRECT: `full_mesh {\n  data_plane_mesh {}\n}`
+- WRONG: `virtual_site = { name = "x", namespace = "y" }` (object literal — NOT a nested block)
+- CORRECT: `virtual_site {\n  name = "x"\n  namespace = "y"\n}` (nested block)
+
+For HTTPS auto-cert: use `https_auto_cert {}` block (tls defaults apply). For HTTP: use `http { port = 80 }`. For HTTPS redirect: add `http_redirect = true` inside `https_auto_cert`.
+
+For `advertise_custom` with CE virtual site (Terraform HCL):
+```hcl
+resource "f5xc_http_loadbalancer" "lb" {
+  name      = "<name>"
+  namespace = "<ns>"
+
+  domains = ["<domain>"]
+
+  https_auto_cert {
+    http_redirect = false
+    tls_config {
+      default_security {}
+    }
+    no_mtls {}
+  }
+
+  advertise_custom {
+    advertise_where {
+      virtual_site {
+        network = "SITE_NETWORK_INSIDE_AND_OUTSIDE"
+        virtual_site {
+          name      = "<vsite>"
+          namespace = "<ns>"
+        }
+      }
+      use_default_port {}
+    }
+  }
+
+  default_route_pools {
+    pool { name = "<pool>", namespace = "<ns>" }
+    weight = 1
+    priority = 1
+  }
+}
+```
+
+TLS config options (pick one): `default_security {}` · `medium_security {}` · `low_security {}`. mTLS: `no_mtls {}` (default) or `use_mtls { tls_certificates_ref { … } }`. Advertise options same as API — use Terraform attribute syntax (`network = "…"`, `virtual_site = { … }`).
+
+**Site mesh group Terraform HCL (`f5xc_site_mesh_group`)** — system namespace only. Use blocks to select mesh type and BFD setting (no `type`/`tunnel_type` string attributes — the provider uses block-based selection):
+```hcl
+resource "f5xc_site_mesh_group" "smg" {
+  name      = "<name>"
+  namespace = "system"
+
+  full_mesh {
+    data_plane_mesh {}
+  }
+
+  bfd_disabled {}
+}
+```
+For spoke mesh: use `spoke_mesh { … }` instead of `full_mesh`. For `data_plane_mesh` vs `control_and_data_plane_mesh`: use `data_plane_mesh {}` for data-plane only. **DO NOT add `type` or `tunnel_type` attributes** — these are API-level concepts, not Terraform provider attributes.
+
+**Virtual site Terraform HCL (`f5xc_virtual_site`)** — any namespace:
+```hcl
+resource "f5xc_virtual_site" "vsite" {
+  name      = "<name>"
+  namespace = "<ns>"
+
+  site_type = "CUSTOMER_EDGE"
+  site_selector {
+    expressions = ["ves.io/siteName in (<ce-site-name>)"]
+  }
+}
+```
+`site_type`: `CUSTOMER_EDGE` for CE/SMSv2 sites, `REGIONAL_EDGE` for vK8s_service (RE only).
+
+**Terraform import** — To import existing F5 XC resources into Terraform state, use `terraform import <resource_type>.<label> <namespace>/<name>`:
+- `terraform import f5xc_securemesh_site_v2.site system/<site-name>`
+- `terraform import f5xc_http_loadbalancer.lb <namespace>/<lb-name>`
+- `terraform import f5xc_virtual_site.vsite <namespace>/<vsite-name>`
+- `terraform import f5xc_site_mesh_group.smg system/<smg-name>`