@f5xc-salesdemos/xcsh 19.32.0 → 19.33.0

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "19.32.0",
+	"version": "19.33.0",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -50,13 +50,13 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "19.32.0",
-		"@f5xc-salesdemos/pi-agent-core": "19.32.0",
-		"@f5xc-salesdemos/pi-ai": "19.32.0",
-		"@f5xc-salesdemos/pi-natives": "19.32.0",
-		"@f5xc-salesdemos/pi-resource-management": "19.32.0",
-		"@f5xc-salesdemos/pi-tui": "19.32.0",
-		"@f5xc-salesdemos/pi-utils": "19.32.0",
+		"@f5xc-salesdemos/xcsh-stats": "19.33.0",
+		"@f5xc-salesdemos/pi-agent-core": "19.33.0",
+		"@f5xc-salesdemos/pi-ai": "19.33.0",
+		"@f5xc-salesdemos/pi-natives": "19.33.0",
+		"@f5xc-salesdemos/pi-resource-management": "19.33.0",
+		"@f5xc-salesdemos/pi-tui": "19.33.0",
+		"@f5xc-salesdemos/pi-utils": "19.33.0",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",

package/src/internal-urls/branding-index.generated.ts

@@ -1,77 +1,88 @@
 // AUTO-GENERATED — do not edit. Run `bun generate-branding-index` to regenerate.
 
-export const BRANDING_VERSION = "1.0.0";
+export const BRANDING_VERSION = "2.0.0";
 
 export const BRANDING_CANONICAL = {
 	managed_kubernetes: {
-		long_form: "F5 XC Managed Kubernetes",
-		short_form: "XCKS",
-		full_acronym: "XC Kubernetes Service",
+		long_form: "Managed Kubernetes",
 		description:
-			"Enterprise-grade Kubernetes cluster management comparable to AWS EKS, Azure AKS, and Google GKE. Full cluster control with RBAC, pod security, and container registry management.\n",
+			"Enterprise-grade Kubernetes cluster management. Full cluster control with RBAC, pod security, and container registry management.\n",
 		legacy_names: ["AppStack", "VoltStack", "voltstack_site"],
 		comparable_to: ["AWS EKS", "Azure AKS", "Google GKE"],
-		use_cases: [
-			"Deploy and manage Kubernetes clusters on-premises or in cloud",
-			"Configure RBAC roles and cluster security policies",
-			"Manage container registries and pod security admission",
-			"Integrate with existing enterprise Kubernetes infrastructure",
-		],
 	},
-	container_services: {
-		long_form: "F5 XC Container Services",
-		short_form: "XCCS",
-		full_acronym: "XC Container Services",
+	virtual_kubernetes: {
+		long_form: "Virtual Kubernetes",
 		description:
-			"Simplified, multi-tenant container orchestration comparable to AWS ECS and Azure Container Services. Optimized for distributed edge deployments with restricted Kubernetes capabilities (no operators, CRDs, privileged mode).\n",
-		legacy_names: ["Virtual Kubernetes", "vK8s", "virtual_k8s"],
+			"Simplified, multi-tenant container orchestration. Optimized for distributed edge deployments with restricted Kubernetes capabilities.\n",
+		legacy_names: ["vK8s", "virtual_k8s"],
 		comparable_to: ["AWS ECS", "Azure Container Services", "Cloud Run"],
-		use_cases: [
-			"Deploy container workloads across distributed edge sites",
-			"Run multi-tenant containerized applications",
-			"Simplified container orchestration without K8s complexity",
-			"Edge-optimized container deployments",
-		],
 	},
 } as const;
 
-export const BRANDING_DEPRECATIONS = null;
-
-export const BRANDING_GLOSSARY = {
-	XCKS: {
-		term: "XC Kubernetes Service",
-		definition: "F5's enterprise managed Kubernetes offering (comparable to AWS EKS, Azure AKS)",
-		legacy: "Formerly known as AppStack",
+export const BRANDING_DEPRECATIONS = {
+	terraform_provider: {
+		deprecated: {
+			registry: "registry.terraform.io/providers/volterraedge/volterra",
+			source: "volterraedge/volterra",
+			github: "github.com/volterraedge/terraform-provider-volterra",
+			status: "active-but-deprecated",
+			last_version: "0.11.49",
+			downloads: "1M+",
+			note: "Still live on registry with no deprecation notice. High risk of AI model recommendation due to training data prevalence.\n",
+		},
+		canonical: {
+			registry: "registry.terraform.io/providers/f5xc-salesdemos/f5xc",
+			source: "f5xc-salesdemos/f5xc",
+			github: "github.com/f5xc-salesdemos/terraform-provider-f5xc",
+			docs: "https://f5xc-salesdemos.github.io/terraform-provider-f5xc/",
+			llms_txt: "https://f5xc-salesdemos.github.io/terraform-provider-f5xc/llms.txt",
+		},
+		required_providers_block:
+			'terraform {\n  required_providers {\n    f5xc = {\n      source = "f5xc-salesdemos/f5xc"\n    }\n  }\n}\n',
+	},
+	api_endpoint: {
+		deprecated: {
+			url: "console.ves.volterra.io",
+		},
+		canonical: {
+			note: "Tenant-specific. No hardcoded default. Require F5XC_API_URL env var.",
+		},
 	},
-	XCCS: {
-		term: "XC Container Services",
-		definition: "F5's multi-tenant container orchestration service (comparable to AWS ECS)",
-		legacy: "Formerly known as Virtual Kubernetes (vK8s)",
+	documentation: {
+		deprecated: {
+			note: "docs.cloud.f5.com references to Volterra provider point to the deprecated volterraedge/volterra registry.\n",
+		},
+		canonical: {
+			url: "https://f5xc-salesdemos.github.io/terraform-provider-f5xc/",
+		},
 	},
+} as const;
+
+export const BRANDING_GLOSSARY = {
 	CE: {
 		term: "Customer Edge",
-		definition: "F5's edge deployment infrastructure for distributed applications",
+		definition: "F5 XC edge deployment infrastructure for distributed applications",
 	},
 	RE: {
 		term: "Regional Edge",
-		definition: "F5's globally distributed edge network infrastructure",
+		definition: "F5 XC globally distributed edge network infrastructure",
 	},
 } as const;
 
 export const BRANDING_DOMAIN = {
-	container_services: {
-		title: "XCCS - XC Container Services",
+	virtual_kubernetes: {
+		title: "Virtual Kubernetes",
 		description:
-			'F5 XC Container Services (XCCS) provides simplified, multi-tenant container orchestration comparable to AWS ECS and Azure Container Services. Optimized for distributed edge deployments with restricted Kubernetes capabilities. Formerly known as "Virtual Kubernetes" (vK8s).\n',
+			'Virtual Kubernetes provides simplified, multi-tenant container orchestration optimized for distributed edge deployments. Formerly known as "vK8s".\n',
 	},
 	managed_kubernetes: {
-		title: "XCKS - XC Kubernetes Service",
+		title: "Managed Kubernetes",
 		description:
-			'F5 XC Managed Kubernetes (XCKS) provides enterprise-grade Kubernetes cluster management comparable to AWS EKS, Azure AKS, and Google GKE. Full cluster control with RBAC, pod security, and container registry management. Formerly known as "AppStack".\n',
+			'Managed Kubernetes provides enterprise-grade cluster management with full RBAC, pod security, and container registry support. Formerly known as "AppStack".\n',
 	},
 	sites: {
 		title: "Customer Edge Sites",
 		description:
-			"Site deployment and management across cloud providers (AWS VPC, Azure VNET, GCP VPC), F5 XC Managed Kubernetes (XCKS, formerly AppStack) deployments, and Secure Mesh deployments for networking-focused edge sites.\n",
+			"Site deployment and management across cloud providers (AWS VPC, Azure VNET, GCP VPC), Managed Kubernetes deployments (formerly AppStack), and Secure Mesh deployments for networking-focused edge sites.\n",
 	},
 } as const;

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.32.0",
-	"commit": "b58c4c478fdfe8e2fc87f692408fd75a458cae2e",
-	"shortCommit": "b58c4c4",
+	"version": "19.33.0",
+	"commit": "f29552ef521f334d775ed9700aea3e820e89cbe7",
+	"shortCommit": "f29552e",
 	"branch": "main",
-	"tag": "v19.32.0",
-	"commitDate": "2026-06-15T22:36:02Z",
-	"buildDate": "2026-06-15T23:19:37.250Z",
+	"tag": "v19.33.0",
+	"commitDate": "2026-06-16T01:41:37Z",
+	"buildDate": "2026-06-16T02:10:01.349Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/b58c4c478fdfe8e2fc87f692408fd75a458cae2e",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.32.0"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/f29552ef521f334d775ed9700aea3e820e89cbe7",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.33.0"
 };

package/src/prompts/tools/catalog-workflow-runner.md

@@ -0,0 +1,13 @@
+Runs a workflow from the F5 XC console catalog against a live browser session.
+
+<instruction>
+- Reads a YAML workflow definition from the catalog directory
+- Executes browser automation steps sequentially (navigate, click, fill, assert, etc.)
+- Resolves {param} placeholders from the provided params map
+- Supports conditional steps, sub-steps, and observable mode with screenshots
+- Use this tool when you need to automate F5 XC console operations defined in catalog workflows
+</instruction>
+
+<output>
+Returns a per-step pass/fail report with timing and optional screenshot paths.
+</output>

package/src/tools/catalog-workflow-runner.ts

@@ -0,0 +1,532 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import type { AgentTool, AgentToolResult } from "@f5xc-salesdemos/pi-agent-core";
+import { logger, prompt, untilAborted } from "@f5xc-salesdemos/pi-utils";
+import { type Static, Type } from "@sinclair/typebox";
+import { parse as parseYaml } from "yaml";
+import catalogWorkflowRunnerDescription from "../prompts/tools/catalog-workflow-runner.md" with { type: "text" };
+import type { ToolSession } from ".";
+import { BrowserTool } from "./browser";
+import type { OutputMeta } from "./output-meta";
+import { ToolError, throwIfAborted } from "./tool-errors";
+import { toolResult } from "./tool-result";
+
+// =============================================================================
+// Schema
+// =============================================================================
+
+const catalogWorkflowRunnerSchema = Type.Object({
+	catalog_path: Type.String({ description: "Path to the console catalog root directory" }),
+	resource: Type.String({ description: 'Resource identifier, e.g. "http-load-balancer"' }),
+	operation: Type.String({ description: 'Workflow operation, e.g. "create", "delete", "view"' }),
+	params: Type.Optional(
+		Type.Record(Type.String(), Type.Unknown(), {
+			description: "Workflow parameters (name, namespace, etc.) for {placeholder} resolution",
+		}),
+	),
+	observable: Type.Optional(Type.Boolean({ description: "Enable slow execution with screenshots after each step" })),
+	observable_delay_ms: Type.Optional(
+		Type.Number({ description: "Delay between steps in observable mode (default 1500)" }),
+	),
+	screenshot_dir: Type.Optional(Type.String({ description: "Directory to save screenshots" })),
+	base_url: Type.Optional(Type.String({ description: "F5XC console base URL; falls back to F5XC_API_URL env var" })),
+});
+
+type CatalogWorkflowRunnerParams = Static<typeof catalogWorkflowRunnerSchema>;
+
+// =============================================================================
+// Workflow YAML Types
+// =============================================================================
+
+interface WorkflowDefinition {
+	schema: string;
+	id: string;
+	name: string;
+	description?: string;
+	resource: string;
+	operation: string;
+	params?: WorkflowParamDef[];
+	steps: WorkflowStep[];
+}
+
+interface WorkflowParamDef {
+	name: string;
+	required?: boolean;
+	default?: unknown;
+	description?: string;
+}
+
+interface WorkflowStep {
+	id: string;
+	action: string;
+	description?: string;
+	url?: string;
+	selector?: string;
+	value?: string;
+	values?: string[];
+	key?: string;
+	expected_text?: string;
+	wait_for?: string;
+	condition?: string;
+	then?: WorkflowStep[];
+	timeout?: number;
+}
+
+// =============================================================================
+// Details Types
+// =============================================================================
+
+export interface StepResult {
+	stepId: string;
+	action: string;
+	description?: string;
+	status: "pass" | "fail" | "skipped";
+	durationMs: number;
+	error?: string;
+	screenshotPath?: string;
+}
+
+export interface CatalogWorkflowRunnerDetails {
+	workflowId: string;
+	resource: string;
+	operation: string;
+	status: "pass" | "fail";
+	totalDurationMs: number;
+	steps: StepResult[];
+	failedAtStep?: string;
+	meta?: OutputMeta;
+}
+
+// =============================================================================
+// Constants
+// =============================================================================
+
+const EXPECTED_SCHEMA = "urn:f5xc:console:workflow:v1";
+const DEFAULT_OBSERVABLE_DELAY_MS = 1500;
+const DEFAULT_STEP_TIMEOUT_S = 30;
+
+// =============================================================================
+// Helpers
+// =============================================================================
+
+/**
+ * Resolve `{placeholder}` references in a string using the provided params map.
+ * Supports dotted paths: `{params.name}` resolves to the `name` key in params.
+ */
+function resolvePlaceholders(template: string, params: Record<string, unknown>): string {
+	return template.replace(/\{([^}]+)\}/g, (_match, key: string) => {
+		// Support "params.X" → look up X in params
+		const resolved = key.startsWith("params.") ? params[key.slice("params.".length)] : params[key];
+		return resolved !== undefined ? String(resolved) : `{${key}}`;
+	});
+}
+
+/**
+ * Evaluate a simple condition string.
+ * Supports patterns:
+ * - "params.X is set"       → truthy check
+ * - "params.X is not set"   → falsy check
+ * - "params.X == value"     → equality check
+ */
+function evaluateCondition(condition: string, params: Record<string, unknown>): boolean {
+	const isSetMatch = condition.match(/^params\.(\w+)\s+is\s+set$/);
+	if (isSetMatch) {
+		const key = isSetMatch[1]!;
+		return params[key] !== undefined && params[key] !== null && params[key] !== "";
+	}
+
+	const isNotSetMatch = condition.match(/^params\.(\w+)\s+is\s+not\s+set$/);
+	if (isNotSetMatch) {
+		const key = isNotSetMatch[1]!;
+		return params[key] === undefined || params[key] === null || params[key] === "";
+	}
+
+	const eqMatch = condition.match(/^params\.(\w+)\s*==\s*(.+)$/);
+	if (eqMatch) {
+		const key = eqMatch[1]!;
+		const expected = eqMatch[2]!.trim();
+		return String(params[key] ?? "") === expected;
+	}
+
+	logger.warn("catalog-workflow-runner: unrecognized condition, treating as false", { condition });
+	return false;
+}
+
+/**
+ * Format duration in seconds with one decimal place.
+ */
+function formatDuration(ms: number): string {
+	return `${(ms / 1000).toFixed(1)}s`;
+}
+
+// =============================================================================
+// Tool Class
+// =============================================================================
+
+export class CatalogWorkflowRunnerTool
+	implements AgentTool<typeof catalogWorkflowRunnerSchema, CatalogWorkflowRunnerDetails>
+{
+	readonly name = "catalog_workflow_runner";
+	readonly label = "Catalog Workflow";
+	readonly description: string;
+	readonly parameters = catalogWorkflowRunnerSchema;
+	readonly strict = true;
+
+	readonly #session: ToolSession;
+	#browserTool: BrowserTool | null = null;
+
+	constructor(session: ToolSession) {
+		this.#session = session;
+		this.description = prompt.render(catalogWorkflowRunnerDescription);
+	}
+
+	// -------------------------------------------------------------------------
+	// Browser facade
+	// -------------------------------------------------------------------------
+
+	async #ensureBrowser(): Promise<BrowserTool> {
+		if (!this.#browserTool) {
+			this.#browserTool = new BrowserTool(this.#session);
+		}
+		return this.#browserTool;
+	}
+
+	/**
+	 * Execute a single BrowserTool action, forwarding abort signals.
+	 * Returns the text content from the result.
+	 */
+	async #browserAction(action: string, actionParams: Record<string, unknown>, signal?: AbortSignal): Promise<string> {
+		const browser = await this.#ensureBrowser();
+		const result = await browser.execute(`wf-${Date.now()}`, { action, ...actionParams } as any, signal);
+		const text = result.content?.find((c: { type: string }) => c.type === "text") as
+			| { type: "text"; text: string }
+			| undefined;
+		return text?.text ?? "";
+	}
+
+	// -------------------------------------------------------------------------
+	// YAML loading & validation
+	// -------------------------------------------------------------------------
+
+	#loadWorkflow(workflowPath: string): WorkflowDefinition {
+		if (!fs.existsSync(workflowPath)) {
+			throw new ToolError(`Workflow file not found: ${workflowPath}`);
+		}
+		const raw = fs.readFileSync(workflowPath, "utf-8");
+		const workflow = parseYaml(raw) as WorkflowDefinition;
+
+		if (workflow.schema !== EXPECTED_SCHEMA) {
+			throw new ToolError(`Invalid workflow schema: expected "${EXPECTED_SCHEMA}", got "${workflow.schema}"`);
+		}
+		if (!workflow.steps || !Array.isArray(workflow.steps)) {
+			throw new ToolError("Workflow has no steps array");
+		}
+		return workflow;
+	}
+
+	#validateParams(workflow: WorkflowDefinition, params: Record<string, unknown>): void {
+		if (!workflow.params) return;
+		const missing: string[] = [];
+		for (const paramDef of workflow.params) {
+			if (paramDef.required && !(paramDef.name in params)) {
+				if (paramDef.default !== undefined) continue;
+				missing.push(paramDef.name);
+			}
+		}
+		if (missing.length > 0) {
+			throw new ToolError(`Missing required workflow params: ${missing.join(", ")}`);
+		}
+	}
+
+	// -------------------------------------------------------------------------
+	// Step execution
+	// -------------------------------------------------------------------------
+
+	async #executeStep(
+		step: WorkflowStep,
+		params: Record<string, unknown>,
+		baseUrl: string,
+		options: { observable: boolean; observableDelayMs: number; screenshotDir?: string; stepIndex: number },
+		signal?: AbortSignal,
+	): Promise<StepResult> {
+		const start = performance.now();
+		const result: StepResult = {
+			stepId: step.id,
+			action: step.action,
+			description: step.description,
+			status: "pass",
+			durationMs: 0,
+		};
+
+		try {
+			throwIfAborted(signal);
+
+			// Condition gating
+			if (step.condition) {
+				const conditionMet = evaluateCondition(step.condition, params);
+				if (!conditionMet) {
+					result.status = "skipped";
+					result.durationMs = performance.now() - start;
+					return result;
+				}
+			}
+
+			// Resolve placeholders in relevant fields
+			const resolvedUrl = step.url ? resolvePlaceholders(step.url, params) : undefined;
+			const resolvedSelector = step.selector ? resolvePlaceholders(step.selector, params) : undefined;
+			const resolvedValue = step.value ? resolvePlaceholders(step.value, params) : undefined;
+			const resolvedValues = step.values?.map(v => resolvePlaceholders(v, params));
+			const resolvedExpected = step.expected_text ? resolvePlaceholders(step.expected_text, params) : undefined;
+			const resolvedWaitFor = step.wait_for ? resolvePlaceholders(step.wait_for, params) : undefined;
+
+			const timeout = step.timeout ?? DEFAULT_STEP_TIMEOUT_S;
+
+			switch (step.action) {
+				case "navigate": {
+					if (!resolvedUrl) throw new ToolError(`Step "${step.id}": navigate requires url`);
+					const fullUrl = resolvedUrl.startsWith("http") ? resolvedUrl : `${baseUrl}${resolvedUrl}`;
+					await this.#browserAction("goto", { url: fullUrl, timeout }, signal);
+					if (resolvedWaitFor) {
+						await this.#browserAction("wait_for_selector", { selector: resolvedWaitFor, timeout }, signal);
+					}
+					break;
+				}
+				case "click": {
+					if (!resolvedSelector) throw new ToolError(`Step "${step.id}": click requires selector`);
+					await this.#browserAction("click", { selector: resolvedSelector, timeout }, signal);
+					break;
+				}
+				case "fill": {
+					if (!resolvedSelector) throw new ToolError(`Step "${step.id}": fill requires selector`);
+					if (resolvedValue === undefined) throw new ToolError(`Step "${step.id}": fill requires value`);
+					await this.#browserAction("fill", { selector: resolvedSelector, value: resolvedValue, timeout }, signal);
+					break;
+				}
+				case "fill-list": {
+					if (!resolvedSelector) throw new ToolError(`Step "${step.id}": fill-list requires selector`);
+					if (!resolvedValues?.length) throw new ToolError(`Step "${step.id}": fill-list requires values`);
+					for (const val of resolvedValues) {
+						await this.#browserAction("fill", { selector: resolvedSelector, value: val, timeout }, signal);
+						await this.#browserAction("press", { key: "Enter" }, signal);
+					}
+					break;
+				}
+				case "select": {
+					if (!resolvedSelector) throw new ToolError(`Step "${step.id}": select requires selector`);
+					// Open dropdown
+					await this.#browserAction("click", { selector: resolvedSelector, timeout }, signal);
+					// Click the option value
+					if (resolvedValue) {
+						const optionSelector = `text/${resolvedValue}`;
+						await this.#browserAction("click", { selector: optionSelector, timeout }, signal);
+					}
+					break;
+				}
+				case "assert": {
+					if (!resolvedSelector) throw new ToolError(`Step "${step.id}": assert requires selector`);
+					if (!resolvedExpected) throw new ToolError(`Step "${step.id}": assert requires expected_text`);
+					const text = await this.#browserAction("get_text", { selector: resolvedSelector, timeout }, signal);
+					if (!text.includes(resolvedExpected)) {
+						throw new ToolError(
+							`Assertion failed at step "${step.id}": expected text "${resolvedExpected}" not found in "${text.slice(0, 200)}"`,
+						);
+					}
+					break;
+				}
+				case "screenshot": {
+					const screenshotPath = options.screenshotDir
+						? path.join(options.screenshotDir, `${step.id}.png`)
+						: undefined;
+					const screenshotParams: Record<string, unknown> = {};
+					if (screenshotPath) screenshotParams.path = screenshotPath;
+					if (resolvedSelector) screenshotParams.selector = resolvedSelector;
+					await this.#browserAction("screenshot", screenshotParams, signal);
+					result.screenshotPath = screenshotPath;
+					break;
+				}
+				case "key-press": {
+					if (!step.key) throw new ToolError(`Step "${step.id}": key-press requires key`);
+					await this.#browserAction(
+						"press",
+						{ key: step.key, ...(resolvedSelector ? { selector: resolvedSelector } : {}) },
+						signal,
+					);
+					break;
+				}
+				case "wait": {
+					if (!resolvedSelector) throw new ToolError(`Step "${step.id}": wait requires selector`);
+					await this.#browserAction("wait_for_selector", { selector: resolvedSelector, timeout }, signal);
+					break;
+				}
+				default:
+					throw new ToolError(`Unknown workflow action "${step.action}" at step "${step.id}"`);
+			}
+
+			// Post-action wait_for
+			if (resolvedWaitFor && step.action !== "navigate") {
+				await this.#browserAction("wait_for_selector", { selector: resolvedWaitFor, timeout }, signal);
+			}
+
+			// Execute sub-steps (then)
+			if (step.then) {
+				for (let i = 0; i < step.then.length; i++) {
+					const subStep = step.then[i]!;
+					const subResult = await this.#executeStep(subStep, params, baseUrl, options, signal);
+					if (subResult.status === "fail") {
+						result.status = "fail";
+						result.error = `Sub-step "${subStep.id}" failed: ${subResult.error}`;
+						break;
+					}
+				}
+			}
+
+			// Observable mode: delay + screenshot
+			if (options.observable && result.status !== "fail") {
+				await new Promise(resolve => setTimeout(resolve, options.observableDelayMs));
+				if (options.screenshotDir) {
+					const obsPath = path.join(options.screenshotDir, `step-${options.stepIndex}-${step.id}.png`);
+					try {
+						await this.#browserAction("screenshot", { path: obsPath }, signal);
+						result.screenshotPath = obsPath;
+					} catch (e) {
+						logger.warn("catalog-workflow-runner: observable screenshot failed", {
+							step: step.id,
+							error: e instanceof Error ? e.message : String(e),
+						});
+					}
+				}
+			}
+		} catch (e) {
+			result.status = "fail";
+			result.error = e instanceof Error ? e.message : String(e);
+
+			// Capture failure screenshot
+			if (options.screenshotDir) {
+				const failPath = path.join(options.screenshotDir, `fail-${step.id}.png`);
+				try {
+					await this.#browserAction("screenshot", { path: failPath });
+					result.screenshotPath = failPath;
+				} catch {
+					// Best-effort screenshot on failure
+				}
+			}
+		}
+
+		result.durationMs = performance.now() - start;
+		return result;
+	}
+
+	// -------------------------------------------------------------------------
+	// Main execute
+	// -------------------------------------------------------------------------
+
+	async execute(
+		_toolCallId: string,
+		inputParams: CatalogWorkflowRunnerParams,
+		signal?: AbortSignal,
+	): Promise<AgentToolResult<CatalogWorkflowRunnerDetails>> {
+		return untilAborted(signal, async () => {
+			const totalStart = performance.now();
+
+			// Construct workflow path
+			const workflowPath = path.join(
+				inputParams.catalog_path,
+				"catalog",
+				"workflows",
+				inputParams.resource,
+				`${inputParams.operation}.yaml`,
+			);
+
+			// Load & validate
+			const workflow = this.#loadWorkflow(workflowPath);
+			const params: Record<string, unknown> = { ...inputParams.params };
+
+			// Apply defaults from workflow param definitions
+			if (workflow.params) {
+				for (const paramDef of workflow.params) {
+					if (!(paramDef.name in params) && paramDef.default !== undefined) {
+						params[paramDef.name] = paramDef.default;
+					}
+				}
+			}
+
+			this.#validateParams(workflow, params);
+
+			// Resolve base URL from params or environment
+			const baseUrl = inputParams.base_url ?? process.env.F5XC_API_URL ?? "";
+			if (!baseUrl) {
+				throw new ToolError("No base_url provided and F5XC_API_URL env var is not set");
+			}
+
+			// Options
+			const observable = inputParams.observable ?? false;
+			const observableDelayMs = inputParams.observable_delay_ms ?? DEFAULT_OBSERVABLE_DELAY_MS;
+			const screenshotDir = inputParams.screenshot_dir;
+
+			// Ensure screenshot directory exists
+			if (screenshotDir && !fs.existsSync(screenshotDir)) {
+				fs.mkdirSync(screenshotDir, { recursive: true });
+			}
+
+			// Open browser
+			await this.#browserAction("open", {}, signal);
+
+			// Execute steps
+			const stepResults: StepResult[] = [];
+			let failedAtStep: string | undefined;
+
+			for (let i = 0; i < workflow.steps.length; i++) {
+				throwIfAborted(signal);
+				const step = workflow.steps[i]!;
+				const stepResult = await this.#executeStep(
+					step,
+					params,
+					baseUrl,
+					{ observable, observableDelayMs, screenshotDir, stepIndex: i },
+					signal,
+				);
+				stepResults.push(stepResult);
+
+				if (stepResult.status === "fail") {
+					failedAtStep = step.id;
+					break;
+				}
+			}
+
+			const totalDurationMs = performance.now() - totalStart;
+			const overallStatus = failedAtStep ? "fail" : "pass";
+			const workflowId = `${inputParams.resource}-${inputParams.operation}`;
+
+			const details: CatalogWorkflowRunnerDetails = {
+				workflowId,
+				resource: inputParams.resource,
+				operation: inputParams.operation,
+				status: overallStatus,
+				totalDurationMs,
+				steps: stepResults,
+				failedAtStep,
+			};
+
+			// Format text report
+			const statusLabel = overallStatus === "pass" ? "PASS" : "FAIL";
+			const header = [
+				`Workflow: ${workflow.name} (${workflowId})`,
+				`Status: ${statusLabel}`,
+				`Duration: ${formatDuration(totalDurationMs)}`,
+				"",
+				"Steps:",
+			];
+
+			const stepLines = stepResults.map(sr => {
+				const tag = sr.status === "pass" ? "PASS" : sr.status === "fail" ? "FAIL" : "SKIPPED";
+				const desc = sr.description ?? sr.error ?? "";
+				const dur = formatDuration(sr.durationMs);
+				return `   [${tag.padEnd(7)}] ${sr.stepId.padEnd(24)} ${desc.padEnd(40).slice(0, 40)} (${dur})`;
+			});
+
+			const text = [...header, ...stepLines].join("\n");
+
+			return toolResult(details).text(text).done();
+		});
+	}
+}

package/src/tools/index.ts

@@ -25,6 +25,7 @@ import { BashTool } from "./bash";
 import { BrowserTool } from "./browser";
 import { CalculatorTool } from "./calculator";
 import { CancelJobTool } from "./cancel-job";
+import { CatalogWorkflowRunnerTool } from "./catalog-workflow-runner";
 import { type CheckpointState, CheckpointTool, RewindTool } from "./checkpoint";
 import { DebugTool } from "./debug";
 import { DisplayImageTool } from "./display-image";
@@ -64,6 +65,7 @@ export * from "./bash";
 export * from "./browser";
 export * from "./calculator";
 export * from "./cancel-job";
+export * from "./catalog-workflow-runner";
 export * from "./checkpoint";
 export * from "./debug";
 export * from "./display-image";
@@ -218,6 +220,7 @@ export const BUILTIN_TOOLS: Record<string, ToolFactory> = {
 	display_image: s => new DisplayImageTool(s),
 	inspect_image: s => new InspectImageTool(s),
 	browser: s => new BrowserTool(s),
+	catalog_workflow_runner: s => new CatalogWorkflowRunnerTool(s),
 	checkpoint: CheckpointTool.createIf,
 	rewind: RewindTool.createIf,
 	task: TaskTool.create,