@f5xc-salesdemos/xcsh 19.36.0 → 19.37.0

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "19.36.0",
+	"version": "19.37.0",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -51,13 +51,13 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "19.36.0",
-		"@f5xc-salesdemos/pi-agent-core": "19.36.0",
-		"@f5xc-salesdemos/pi-ai": "19.36.0",
-		"@f5xc-salesdemos/pi-natives": "19.36.0",
-		"@f5xc-salesdemos/pi-resource-management": "19.36.0",
-		"@f5xc-salesdemos/pi-tui": "19.36.0",
-		"@f5xc-salesdemos/pi-utils": "19.36.0",
+		"@f5xc-salesdemos/xcsh-stats": "19.37.0",
+		"@f5xc-salesdemos/pi-agent-core": "19.37.0",
+		"@f5xc-salesdemos/pi-ai": "19.37.0",
+		"@f5xc-salesdemos/pi-natives": "19.37.0",
+		"@f5xc-salesdemos/pi-resource-management": "19.37.0",
+		"@f5xc-salesdemos/pi-tui": "19.37.0",
+		"@f5xc-salesdemos/pi-utils": "19.37.0",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.36.0",
-	"commit": "25f2668aebf96b7025f2b1abc9646adcd929d0b0",
-	"shortCommit": "25f2668",
+	"version": "19.37.0",
+	"commit": "374149f9c6d3c1f4e51bc68d673ab27d0f2bef11",
+	"shortCommit": "374149f",
 	"branch": "main",
-	"tag": "v19.36.0",
-	"commitDate": "2026-06-19T19:08:49Z",
-	"buildDate": "2026-06-19T19:30:15.957Z",
+	"tag": "v19.37.0",
+	"commitDate": "2026-06-19T19:50:51Z",
+	"buildDate": "2026-06-19T20:12:29.074Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/25f2668aebf96b7025f2b1abc9646adcd929d0b0",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.36.0"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/374149f9c6d3c1f4e51bc68d673ab27d0f2bef11",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.37.0"
 };

package/src/prompts/system/system-prompt.md

@@ -398,6 +398,7 @@ HARD OVERRIDE — F5 Distributed Cloud Terraform Provider:
   ```
 - Authentication is supplied via environment variables (set exactly ONE method): `F5XC_API_TOKEN`; or `F5XC_P12_FILE` + `F5XC_P12_PASSWORD`; or `F5XC_CERT` + `F5XC_KEY`. Tenant URL via `F5XC_API_URL`. Keep the `provider "f5xc" {}` block empty unless the user asks to hardcode credentials.
 - Write vs run: "write a terraform plan" produces an artifact — write the `.tf`, then `terraform fmt` + `terraform init` (best-effort) + `terraform validate` to deliver a formatted, verified file. If `init` fails (e.g. `dev_overrides`/offline), still run `terraform validate` and report. Do **NOT** auto-run `terraform plan` (only on explicit plan/preview request) and **NEVER** run `terraform apply` unless the user clearly asks to create/CRUD. Writing a plan is not running it.
+- Minimum settings only: generate HCL in the same minimum-settings style as JSON/YAML export — emit ONLY the required skeleton, required fields, and any value the user explicitly asks to change. **OMIT fields the server applies by default** (e.g. `f5xc_origin_pool` `loadbalancer_algorithm = "ROUND_ROBIN"`, `endpoint_selection = "DISTRIBUTED"`; healthcheck server-default thresholds) unless the user sets a non-default value. Fields documented as "Server applies default when omitted" are safe to omit. Smaller, default-free configs are the goal.
 - Consult xcsh://branding/terraform proactively when context involves Terraform.
 
 # Skills

package/src/prompts/tools/xcsh-api.md

@@ -193,7 +193,7 @@ Swap exactly one block per oneOf group — e.g. `enable_ha {}` replaces `disable
 
 **CRITICAL — Terraform file write rule**: When asked to "Write Terraform HCL for f5xc_securemesh_site_v2", you **MUST** use the `xcsh_write_file` tool to write the complete `.tf` file to disk. Always name the file after the resource name in the request (e.g., `ar-test-smsv2-1a.tf`). Do NOT just return a coverage table — always write the actual HCL file. The file must include a `terraform { required_providers { f5xc = { source = "f5xc-salesdemos/f5xc" } } }` block, a `provider "f5xc" {}` block (**REQUIRED** — without it `terraform plan` fails with "Provider requires explicit configuration"), and the complete `resource "f5xc_securemesh_site_v2"` block with all 12 oneOf groups. After writing, verify without mutating: `terraform fmt` then `terraform init` (best-effort) + `terraform validate`; report the result. Do NOT run `terraform apply` (unless the user asks to create/CRUD) or auto-run `terraform plan`.
 
-**HTTP/HTTPS Load Balancer Terraform HCL (`f5xc_http_loadbalancer`)** — Use `resource "f5xc_http_loadbalancer"` in any namespace. Must include `terraform { required_providers { f5xc = { source = "f5xc-salesdemos/f5xc" } } }` block AND a `provider "f5xc" {}` block (**REQUIRED** — without it `terraform plan` fails with "Provider requires explicit configuration"). Always write file with `xcsh_write_file`. Name the file after the resource name (e.g., `ar-test-lb-https-1.tf`). After writing, verify without mutating: `terraform fmt` then `terraform init` (best-effort) + `terraform validate`; report the result. Do NOT run `terraform apply` (unless the user asks to create/CRUD) or auto-run `terraform plan`.
+**HTTP/HTTPS Load Balancer Terraform HCL (`f5xc_http_loadbalancer`)** — Use `resource "f5xc_http_loadbalancer"` in any namespace. Must include `terraform { required_providers { f5xc = { source = "f5xc-salesdemos/f5xc" } } }` block AND a `provider "f5xc" {}` block (**REQUIRED** — without it `terraform plan` fails with "Provider requires explicit configuration"). Always write file with `xcsh_write_file`. Name the file after the resource name (e.g., `ar-test-lb-https-1.tf`). Emit minimum settings only — include the skeleton, required fields, and user-requested values; OMIT server-default fields (e.g. default `loadbalancer_algorithm`/`endpoint_selection` on referenced pools) unless the user sets a non-default value. After writing, verify without mutating: `terraform fmt` then `terraform init` (best-effort) + `terraform validate`; report the result. Do NOT run `terraform apply` (unless the user asks to create/CRUD) or auto-run `terraform plan`.
 
 **CRITICAL — Terraform HCL single-line block rule**: A block definition like `outer { inner {} }` is INVALID when `inner {}` is itself a block (not an attribute). Nested blocks **MUST** be on their own lines:
 - WRONG: `tls_config { default_security {} }`

package/src/slash-commands/export-command.ts

@@ -29,9 +29,15 @@ export async function handleExportResourceCommand(
 	ctx.editor.addToHistory(command.text);
 	ctx.editor.setText("");
 
-	const { parseExportArgs, ResourceClient, KindResolutionError, toManifest, formatManifestOutput } = await import(
-		"@f5xc-salesdemos/pi-resource-management"
-	);
+	const {
+		parseExportArgs,
+		ResourceClient,
+		KindResolutionError,
+		toManifest,
+		formatManifestOutput,
+		buildMinimalExportFilter,
+		applyMinimalExportFilter,
+	} = await import("@f5xc-salesdemos/pi-resource-management");
 	const { kindResolver } = await import("../resource-management/index");
 
 	const parsed = parseExportArgs(command.args);
@@ -119,6 +125,15 @@ export async function handleExportResourceCommand(
 			return;
 		}
 
+		// Emit only minimum (non-default) settings: strip server-applied defaults
+		// per kind. Kinds with no defaults coverage are left untouched (full spec).
+		for (const m of manifests) {
+			const filter = buildMinimalExportFilter(m.kind);
+			if (filter) {
+				m.spec = applyMinimalExportFilter(m.spec, filter);
+			}
+		}
+
 		const output = formatManifestOutput(manifests, fmt);
 
 		if (parsed.outputFile) {