@f5xc-salesdemos/xcsh 19.44.2 → 19.45.0

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "19.44.2",
+	"version": "19.45.0",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -54,13 +54,13 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "19.44.2",
-		"@f5xc-salesdemos/pi-agent-core": "19.44.2",
-		"@f5xc-salesdemos/pi-ai": "19.44.2",
-		"@f5xc-salesdemos/pi-natives": "19.44.2",
-		"@f5xc-salesdemos/pi-resource-management": "19.44.2",
-		"@f5xc-salesdemos/pi-tui": "19.44.2",
-		"@f5xc-salesdemos/pi-utils": "19.44.2",
+		"@f5xc-salesdemos/xcsh-stats": "19.45.0",
+		"@f5xc-salesdemos/pi-agent-core": "19.45.0",
+		"@f5xc-salesdemos/pi-ai": "19.45.0",
+		"@f5xc-salesdemos/pi-natives": "19.45.0",
+		"@f5xc-salesdemos/pi-resource-management": "19.45.0",
+		"@f5xc-salesdemos/pi-tui": "19.45.0",
+		"@f5xc-salesdemos/pi-utils": "19.45.0",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",

package/scripts/capture-ax-fixture.ts

@@ -1,11 +1,11 @@
 #!/usr/bin/env bun
 // One-shot capture: login + open the HTTP-LB create form + snapshot the accessibility tree.
-// Creds via env (F5XC_USERNAME/F5XC_CONSOLE_PASSWORD); never hard-coded. Output is the resolver's test oracle.
+// Creds via env (XCSH_USERNAME/XCSH_CONSOLE_PASSWORD); never hard-coded. Output is the resolver's test oracle.
 import puppeteer from "puppeteer";
 
 const CHROME = process.env.CHROME_PATH;
-const BASE = process.env.F5XC_CONSOLE_URL ?? "https://nferreira.staging.volterra.us";
-const NS = process.env.F5XC_NS ?? "demo";
+const BASE = process.env.XCSH_CONSOLE_URL ?? "https://nferreira.staging.volterra.us";
+const NS = process.env.XCSH_NS ?? "demo";
 const OUT = "test/browser/fixtures/xc-http-lb-create.ax.json";
 
 const browser = await puppeteer.launch({
@@ -18,8 +18,8 @@ try {
 	await page.goto(BASE, { waitUntil: "networkidle2", timeout: 45000 }).catch(() => {});
 	if (/login-staging\.volterra\.us/.test(page.url())) {
 		await page.waitForSelector("#username", { timeout: 20000 });
-		await page.type("#username", process.env.F5XC_USERNAME ?? "");
-		await page.type("#password", process.env.F5XC_CONSOLE_PASSWORD ?? "");
+		await page.type("#username", process.env.XCSH_USERNAME ?? "");
+		await page.type("#password", process.env.XCSH_CONSOLE_PASSWORD ?? "");
 		await Promise.all([
 			page.waitForNavigation({ waitUntil: "networkidle2", timeout: 45000 }).catch(() => {}),
 			page.click("#kc-login").catch(() => page.keyboard.press("Enter")),

package/scripts/capture-login-fixture.ts

@@ -13,7 +13,7 @@
 import puppeteer from "puppeteer";
 
 const CHROME = process.env.CHROME_PATH;
-const BASE = process.env.F5XC_API_URL ?? "https://nferreira.staging.volterra.us";
+const BASE = process.env.XCSH_API_URL ?? "https://nferreira.staging.volterra.us";
 const PROFILE = "/tmp/xc-login-capture-profile";
 const LOGIN_OUT = "test/browser/fixtures/xc-login-wall.html";
 

package/scripts/extension-uat-harness.ts

@@ -15,7 +15,7 @@
  */
 import { type BridgeServer, startBridgeServer } from "../src/browser/extension-bridge";
 
-const BASE = process.env.F5XC_API_URL ?? "https://nferreira.staging.volterra.us";
+const BASE = process.env.XCSH_API_URL ?? "https://nferreira.staging.volterra.us";
 const ROUTE = `${BASE}/web/workspaces/web-app-and-api-protection/namespaces/demo/manage/load_balancers/http_loadbalancers`;
 
 let server: BridgeServer;
@@ -69,9 +69,9 @@ async function run() {
 	}
 
 	console.log("[1b] login (native F5 XC auth)");
-	const F5XC_USERNAME = process.env.F5XC_USERNAME;
-	const F5XC_CONSOLE_PASSWORD = process.env.F5XC_CONSOLE_PASSWORD;
-	if (F5XC_USERNAME && F5XC_CONSOLE_PASSWORD) {
+	const XCSH_USERNAME = process.env.XCSH_USERNAME;
+	const XCSH_CONSOLE_PASSWORD = process.env.XCSH_CONSOLE_PASSWORD;
+	if (XCSH_USERNAME && XCSH_CONSOLE_PASSWORD) {
 		try {
 			// Login directly to the target deep-link — NOT /web. Going to /web triggers
 			// an OIDC flow, then the subsequent navigate to the LB URL interrupts it
@@ -79,7 +79,7 @@ async function run() {
 			// means ONE navigation, one OIDC flow, no interruption.
 			const l = await tool(
 				"login",
-				{ email: F5XC_USERNAME, password: F5XC_CONSOLE_PASSWORD, consoleUrl: ROUTE },
+				{ email: XCSH_USERNAME, password: XCSH_CONSOLE_PASSWORD, consoleUrl: ROUTE },
 				90000,
 			);
 			(l as any)?.loggedIn
@@ -89,11 +89,11 @@ async function run() {
 			fail("login", (e as Error).message);
 		}
 	} else {
-		console.log("  ⏭ login skipped (no F5XC_USERNAME/F5XC_CONSOLE_PASSWORD env) — relying on existing session");
+		console.log("  ⏭ login skipped (no XCSH_USERNAME/XCSH_CONSOLE_PASSWORD env) — relying on existing session");
 	}
 
 	console.log("[2] navigate");
-	if (F5XC_USERNAME && F5XC_CONSOLE_PASSWORD) {
+	if (XCSH_USERNAME && XCSH_CONSOLE_PASSWORD) {
 		// Login already navigated to ROUTE — skip the redundant second navigate
 		// (two navigations to the same OIDC-protected URL in succession → CSRF).
 		pass("navigate", "skipped (login already navigated to target)");

package/scripts/generate-api-spec-index.ts

@@ -150,7 +150,7 @@ async function downloadFromRelease(): Promise<string> {
 	const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "api-specs-"));
 	downloadedTmpDir = tmpDir;
 	const tag = process.env.API_SPECS_TAG ?? (await resolveLatestTag());
-	const zipName = `f5xc-api-specs-${tag}.zip`;
+	const zipName = `xcsh-api-specs-${tag}.zip`;
 	const downloadUrl = `https://github.com/${REPO}/releases/download/${tag}/${zipName}`;
 
 	console.log(`Downloading API specs from ${downloadUrl}...`);
@@ -552,7 +552,7 @@ if (catalog) {
 		`export const API_CATALOG_INDEX: ApiCatalogIndex = {`,
 		`\tversion: ${JSON.stringify(catalog.version ?? "unknown")},`,
 		`\tdisplayName: ${JSON.stringify(catalog.displayName ?? "F5 Distributed Cloud")},`,
-		`\tservice: ${JSON.stringify(catalog.service ?? "f5xc")},`,
+		`\tservice: ${JSON.stringify(catalog.service ?? "xcsh")},`,
 		`\tcategoryCount: ${categories.length},`,
 		`\tauth: ${JSON.stringify(catalog.auth ?? {})},`,
 		`\tdefaults: ${JSON.stringify(catalog.defaults ?? {})},`,

package/scripts/generate-terraform-index.ts

@@ -9,13 +9,13 @@ const LOCAL_JSON_PATH = path.resolve(
 	"..",
 	"..",
 	"..",
-	"terraform-provider-f5xc",
+	"terraform-provider-xcsh",
 	"docs",
 	"terraform-llms-index.json",
 );
 
 const GITHUB_RAW_URL =
-	"https://raw.githubusercontent.com/f5xc-salesdemos/terraform-provider-f5xc/main/docs/terraform-llms-index.json";
+	"https://raw.githubusercontent.com/f5xc-salesdemos/terraform-provider-xcsh/main/docs/terraform-llms-index.json";
 
 async function loadTerraformIndex(): Promise<unknown> {
 	const localFile = Bun.file(LOCAL_JSON_PATH);
@@ -41,14 +41,14 @@ async function loadTerraformIndex(): Promise<unknown> {
 // Backfill provider fields that older terraform-llms-index.json revisions lack, so the
 // generated index always satisfies TerraformProvider regardless of which provider-repo
 // revision it was fetched from (the source repo is the authority once it ships them).
-const DEFAULT_CONFIG_BLOCK = 'provider "f5xc" {}';
+const DEFAULT_CONFIG_BLOCK = 'provider "xcsh" {}';
 const DEFAULT_AUTH_METHODS = [
-	'REQUIRED: every .tf must contain a `provider "f5xc" {}` block. Without it Terraform errors: "Provider requires explicit configuration. Add a provider block".',
+	'REQUIRED: every .tf must contain a `provider "xcsh" {}` block. Without it Terraform errors: "Provider requires explicit configuration. Add a provider block".',
 	"Configure exactly ONE auth method, via environment variables (preferred) or explicit arguments in the provider block:",
-	"api_token (env F5XC_API_TOKEN) — API token authentication.",
-	"api_p12_file + p12_password (env F5XC_P12_FILE + F5XC_P12_PASSWORD) — PKCS#12 certificate authentication.",
-	"api_cert + api_key (env F5XC_CERT + F5XC_KEY) — PEM certificate authentication.",
-	"api_url (env F5XC_API_URL) — tenant base URL without /api suffix, e.g. https://your-tenant.console.ves.volterra.io.",
+	"api_token (env XCSH_API_TOKEN) — API token authentication.",
+	"api_p12_file + p12_password (env XCSH_P12_FILE + XCSH_P12_PASSWORD) — PKCS#12 certificate authentication.",
+	"api_cert + api_key (env XCSH_CERT + XCSH_KEY) — PEM certificate authentication.",
+	"api_url (env XCSH_API_URL) — tenant base URL without /api suffix, e.g. https://your-tenant.console.ves.volterra.io.",
 ];
 
 function normalizeProvider(data: unknown): unknown {

package/scripts/uat-matrix-modalities.ts

@@ -108,7 +108,7 @@ export function detectRouted(stdout: string): Cell["routedTo"] {
 	if (usedConsole && !usedApi) return "console";
 	if (usedApi && !usedConsole) return "api";
 	if (usedConsole && usedApi) return "console"; // console drove it even if it also read via API
-	if (/```(hcl|terraform)|resource\s+"f5xc_/.test(stdout)) return "file";
+	if (/```(hcl|terraform)|resource\s+"xcsh_/.test(stdout)) return "file";
 	return "unknown";
 }
 
@@ -168,7 +168,7 @@ export async function runConsole(p: ConsolePhrase, cfg: MatrixConfig): Promise<C
 	const run = await runXcsh(args, {
 		timeoutMs: cfg.cellTimeoutMs,
 		bin: cfg.xcshBin,
-		env: { ...process.env, F5XC_API_URL: cfg.apiUrl },
+		env: { ...process.env, XCSH_API_URL: cfg.apiUrl },
 	});
 
 	const routedTo = detectRouted(run.stdout);
@@ -268,7 +268,7 @@ export async function runJson(p: CrudPhrase, cfg: MatrixConfig): Promise<Cell> {
 	const run = await runXcsh(["--print", "--no-session", p.phrase], {
 		timeoutMs: 120_000,
 		bin: cfg.xcshBin,
-		env: { ...process.env, F5XC_API_URL: cfg.apiUrl, F5XC_API_TOKEN: cfg.apiToken },
+		env: { ...process.env, XCSH_API_URL: cfg.apiUrl, XCSH_API_TOKEN: cfg.apiToken },
 	});
 
 	let code = await apiGet(verifyPath, cfg);
@@ -318,7 +318,7 @@ function extractHcl(stdout: string, workdir: string): string {
 	let m: RegExpExecArray | null;
 	// biome-ignore lint/suspicious/noAssignInExpressions: standard regex loop
 	while ((m = fence.exec(stdout)) !== null) {
-		if (/resource\s+"f5xc_|provider\s+"f5xc"|terraform\s*\{/.test(m[1]!)) hcl += `\n${m[1]}`;
+		if (/resource\s+"xcsh_|provider\s+"xcsh"|terraform\s*\{/.test(m[1]!)) hcl += `\n${m[1]}`;
 	}
 	return hcl.trim();
 }
@@ -330,14 +330,14 @@ async function terraformAvailable(): Promise<boolean> {
 
 export async function runHcl(p: TfPhrase, cfg: MatrixConfig, tfOk: boolean): Promise<Cell> {
 	const start = performance.now();
-	const id = `H-${(p.expect_resource ?? p.operation).replace(/^f5xc_/, "")}-${p.operation}`;
+	const id = `H-${(p.expect_resource ?? p.operation).replace(/^xcsh_/, "")}-${p.operation}`;
 	const workdir = fs.mkdtempSync(path.join(os.tmpdir(), "uat-hcl-"));
 	try {
 		const run = await runXcsh(["--print", "--no-session", p.phrase], {
 			timeoutMs: 120_000,
 			bin: cfg.xcshBin,
 			cwd: workdir,
-			env: { ...process.env, F5XC_API_URL: cfg.apiUrl },
+			env: { ...process.env, XCSH_API_URL: cfg.apiUrl },
 		});
 
 		// expect_command phrases (plan/destroy explanations): keyword presence only.
@@ -427,7 +427,7 @@ export async function runI18n(p: I18nPhrase, locale: string, cfg: MatrixConfig):
 			timeoutMs: 120_000,
 			bin: cfg.xcshBin,
 			cwd: workdir,
-			env: { ...process.env, F5XC_API_URL: cfg.apiUrl },
+			env: { ...process.env, XCSH_API_URL: cfg.apiUrl },
 		});
 		const hcl = extractHcl(run.stdout, workdir);
 		const ok = hcl.includes(p.expected_resource_type) && p.expected_fields.every(f => hcl.includes(f));

package/scripts/uat-matrix.ts

@@ -13,7 +13,7 @@
  *        [--filter <regex over phrase ids>] [--no-cleanup] [--cleanup-only]
  *        [--dry-run] [--self-test-api] [--strict-nl] [--report-dir <dir>]
  *
- * Env: F5XC_API_URL, F5XC_API_TOKEN, F5XC_USERNAME, F5XC_CONSOLE_PASSWORD, F5XC_NAMESPACE=demo,
+ * Env: XCSH_API_URL, XCSH_API_TOKEN, XCSH_USERNAME, XCSH_CONSOLE_PASSWORD, XCSH_NAMESPACE=demo,
  *      XCSH_BIN=xcsh
  */
 import * as fs from "node:fs";
@@ -122,10 +122,10 @@ function applyLimitFilter<T>(items: T[], args: Args, idOf: (t: T) => string): T[
 function cfgFromEnv(args: Args): MatrixConfig {
 	return {
 		xcshBin: process.env.XCSH_BIN ?? "xcsh",
-		apiUrl: process.env.F5XC_API_URL ?? "https://nferreira.staging.volterra.us",
-		apiToken: process.env.F5XC_API_TOKEN ?? "",
-		consoleNamespace: process.env.F5XC_NAMESPACE ?? "demo",
-		tenant: (process.env.F5XC_API_URL ?? "https://nferreira.staging.volterra.us")
+		apiUrl: process.env.XCSH_API_URL ?? "https://nferreira.staging.volterra.us",
+		apiToken: process.env.XCSH_API_TOKEN ?? "",
+		consoleNamespace: process.env.XCSH_NAMESPACE ?? "demo",
+		tenant: (process.env.XCSH_API_URL ?? "https://nferreira.staging.volterra.us")
 			.replace(/^https?:\/\//, "")
 			.split(".")[0]!,
 		observable: args.observable,
@@ -152,21 +152,21 @@ async function ensureExtensionConnectedAndLogin(cfg: MatrixConfig): Promise<void
 			);
 		}
 		console.log("[console] extension connected ✅");
-		const F5XC_USERNAME = process.env.F5XC_USERNAME;
-		const F5XC_CONSOLE_PASSWORD = process.env.F5XC_CONSOLE_PASSWORD;
-		if (F5XC_USERNAME && F5XC_CONSOLE_PASSWORD) {
+		const XCSH_USERNAME = process.env.XCSH_USERNAME;
+		const XCSH_CONSOLE_PASSWORD = process.env.XCSH_CONSOLE_PASSWORD;
+		if (XCSH_USERNAME && XCSH_CONSOLE_PASSWORD) {
 			const route = `${cfg.apiUrl}/web/workspaces/web-app-and-api-protection/namespaces/${cfg.consoleNamespace}/manage/load_balancers/http_loadbalancers`;
 			console.log("[console] establishing session via login tool...");
 			const r = await server.request(
 				"login",
-				{ email: F5XC_USERNAME, password: F5XC_CONSOLE_PASSWORD, consoleUrl: route },
+				{ email: XCSH_USERNAME, password: XCSH_CONSOLE_PASSWORD, consoleUrl: route },
 				160_000,
 			);
 			if (r.is_error || !(r.content as any)?.loggedIn)
 				throw new Error(`login failed: ${JSON.stringify(r.content).slice(0, 160)}`);
 			console.log("[console] logged in ✅ (session persists across xcsh runs)");
 		} else {
-			console.log("[console] no F5XC_USERNAME/F5XC_CONSOLE_PASSWORD — relying on an existing Chrome session");
+			console.log("[console] no XCSH_USERNAME/XCSH_CONSOLE_PASSWORD — relying on an existing Chrome session");
 		}
 	} finally {
 		// Release the socket so each `xcsh --print` can own it (the extension reconnects via its alarm).
@@ -211,7 +211,7 @@ async function main() {
 	const startedAt = new Date().toISOString();
 
 	if (args.cleanupOnly) {
-		if (!cfg.apiToken) throw new Error("F5XC_API_TOKEN required for cleanup");
+		if (!cfg.apiToken) throw new Error("XCSH_API_TOKEN required for cleanup");
 		await cleanup(cfg);
 		return;
 	}
@@ -244,7 +244,7 @@ async function main() {
 
 	// --- API self-test ---
 	if (args.selfTestApi) {
-		if (!cfg.apiToken) throw new Error("F5XC_API_TOKEN required");
+		if (!cfg.apiToken) throw new Error("XCSH_API_TOKEN required");
 		const present = await apiGet(`/api/config/namespaces/${cfg.consoleNamespace}/healthchecks`, cfg);
 		const absent = await apiGet(
 			`/api/config/namespaces/${cfg.consoleNamespace}/healthchecks/uat-definitely-absent-xyz`,
@@ -254,7 +254,7 @@ async function main() {
 		process.exit(present === "200" && absent === "404" ? 0 : 1);
 	}
 
-	if (!cfg.apiToken) throw new Error("F5XC_API_TOKEN required for verification");
+	if (!cfg.apiToken) throw new Error("XCSH_API_TOKEN required for verification");
 
 	// --- Console FIRST (human watching) ---
 	if (args.modalities.has("console")) {

package/src/browser/extension-page-actions.ts

@@ -43,6 +43,7 @@ function roleToSelector(role){
     case'link':return'a[href],[role=link]';
     case'tab':return'[role=tab]';
     case'textbox':return'input:not([type=checkbox]):not([type=radio]):not([type=submit]):not([type=button]),textarea,[role=textbox]';
+    case'textarea':return'textarea';
     case'spinbutton':return'input[type=number],[role=spinbutton]';
     case'checkbox':return'input[type=checkbox],[role=checkbox]';
     case'radio':return'input[type=radio],[role=radio]';
@@ -169,7 +170,7 @@ function buildFillScript(selector: string, value: string): string {
 	const val = JSON.stringify(value);
 	return `(()=>{
 const sel=${sel};
-function roleToSel(r){const m={button:'button,input[type=button],input[type=submit],[role=button]',link:'a[href],[role=link]',tab:'[role=tab]',textbox:'input:not([type=checkbox]):not([type=radio]):not([type=submit]):not([type=button]),textarea,[role=textbox]',spinbutton:'input[type=number],[role=spinbutton]',checkbox:'input[type=checkbox],[role=checkbox]',combobox:'select,[role=combobox]',listbox:'[role=listbox],select',option:'[role=option],option',heading:'h1,h2,h3,h4,h5,h6,[role=heading]'};return m[r]||'[role='+r+']';}
+function roleToSel(r){const m={button:'button,input[type=button],input[type=submit],[role=button]',link:'a[href],[role=link]',tab:'[role=tab]',textbox:'input:not([type=checkbox]):not([type=radio]):not([type=submit]):not([type=button]),textarea,[role=textbox]',textarea:'textarea',spinbutton:'input[type=number],[role=spinbutton]',checkbox:'input[type=checkbox],[role=checkbox]',combobox:'select,[role=combobox]',listbox:'[role=listbox],select',option:'[role=option],option',heading:'h1,h2,h3,h4,h5,h6,[role=heading]'};return m[r]||'[role='+r+']';}
 function norm(t){return t.replace(/\\u0421/g,'C').replace(/\\s+/g,' ').trim();}
 function findText(text,rSel){return(rSel?[...document.querySelectorAll(rSel)]:[...document.querySelectorAll('*')]).find(e=>{const n=norm(e.textContent||'');return n===norm(text)||n.includes(norm(text));});}
 function findRoleName(role,name){const cs=[...document.querySelectorAll(roleToSel(role))];const w=norm(name);return cs.find(e=>norm(e.getAttribute('aria-label')||e.getAttribute('name')||e.getAttribute('placeholder')||e.textContent||'').includes(w))||(role==='textbox'?cs.find(e=>norm((e.closest('[class*=form-group],[class*=field],.row')||{}).textContent||'').includes(w)):null);}
@@ -239,7 +240,13 @@ export class ExtensionPageActions implements PageActions {
 		if (!probe?.found) {
 			throw new Error(`fill("${selector}"): ${probe?.error ?? "selector not found"}`);
 		}
-		if (probe.inGrid) {
+		// Two element classes need REAL CDP keystrokes, not a synthetic value-setter:
+		//  - ngx-datatable inline cells (probe.inGrid) — commit on Enter.
+		//  - <textarea> inside vsui secret/Blindfold sub-forms (container_registry's
+		//    "Secret to Blindfold") — the native setter leaves them empty/required.
+		// For textareas we must NOT press Enter (it inserts a newline); Tab blurs.
+		const isTextarea = probe.tag === "TEXTAREA";
+		if (probe.inGrid || isTextarea) {
 			await this.#ext.clickXy(probe.x as number, probe.y as number);
 			await new Promise(r => setTimeout(r, 200));
 			// Clear any pre-existing text (Backspace ×N) so re-fills are clean —
@@ -248,8 +255,7 @@ export class ExtensionPageActions implements PageActions {
 			for (let i = 0; i < curLen; i++) await this.#ext.keyPress("Backspace").catch(() => {});
 			await this.#ext.typeText(value);
 			await new Promise(r => setTimeout(r, 200));
-			// Enter commits the inline row to the model; Angular marks it ng-valid.
-			await this.#ext.keyPress("Enter").catch(() => {});
+			await this.#ext.keyPress(probe.inGrid && !isTextarea ? "Enter" : "Tab").catch(() => {});
 			await new Promise(r => setTimeout(r, 300));
 			const after = await evalJson(this.#ext, buildResolverScript(selector));
 			if (typeof after?.val === "string" && after.val.includes(value)) return;

package/src/browser/extension-provider.ts

@@ -252,13 +252,13 @@ export class ExtensionBrowserProvider implements BrowserProvider {
 
 		const page: ExtensionPage = new BridgeExtensionPage(server);
 
-		// Auto-login: if F5XC_USERNAME + F5XC_CONSOLE_PASSWORD are available (set by
+		// Auto-login: if XCSH_USERNAME + XCSH_CONSOLE_PASSWORD are available (set by
 		// ContextService from the context's env map), login automatically — the login
 		// tool handles "already authenticated" (instant return) so calling it every
 		// time is cheap and guarantees a valid session. Falls back to navigate-only
 		// (co-drive) if credentials aren't available.
-		const email = process.env.F5XC_USERNAME;
-		const password = process.env.F5XC_CONSOLE_PASSWORD;
+		const email = process.env.XCSH_USERNAME;
+		const password = process.env.XCSH_CONSOLE_PASSWORD;
 		if (email && password) {
 			await page.login(email, password, consoleUrl);
 		} else {

package/src/browser/input-commit.ts

@@ -2,7 +2,7 @@
  * Commit a value into a form control so that a framework which patched the
  * element's `value` descriptor still observes the change.
  *
- * Why this exists: the F5XC console's `vsui-input` (e.g. over the HTTP-LB
+ * Why this exists: the XCSH console's `vsui-input` (e.g. over the HTTP-LB
  * "Domains" ngx-datatable cell) overrides the native `<input>` `value`
  * descriptor with its own accessor. Typing real keystrokes — or assigning
  * `el.value = …` directly — leaves the text in the DOM but never reaches the

package/src/cli/chrome-cli.ts

@@ -18,7 +18,7 @@ export type ChromeAction = "status" | "relaunch" | "setup";
 export const EXTENSION_ID = "klajkjdoehjidngligegnpknogmjjhkc";
 export const EXTENSION_IDS = [EXTENSION_ID];
 
-const NATIVE_HOST_NAME = "com.f5xc.xcsh.chrome_host";
+const NATIVE_HOST_NAME = "com.xcsh.xcsh.chrome_host";
 
 function nativeHostDir(platform: NodeJS.Platform, home: string): string {
 	if (platform === "darwin")

package/src/config/context-schema.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://raw.githubusercontent.com/f5xc-salesdemos/xcsh/main/packages/coding-agent/src/config/context-schema.json",
   "title": "F5 XC Context",
-  "description": "Schema for F5 XC context files stored in ~/.config/f5xc/contexts/<name>.json. Validated at load, create, and import time.",
+  "description": "Schema for F5 XC context files stored in ~/.config/xcsh/contexts/<name>.json. Validated at load, create, and import time.",
   "type": "object",
   "required": ["apiUrl", "apiToken"],
   "additionalProperties": false,
@@ -39,7 +39,7 @@
       "type": "string",
       "minLength": 1,
       "default": "default",
-      "description": "Default namespace for CRUD operations. Projected as F5XC_NAMESPACE in bash environment. Use /context namespace to change."
+      "description": "Default namespace for CRUD operations. Projected as XCSH_NAMESPACE in bash environment. Use /context namespace to change."
     },
     "env": {
       "type": "object",
@@ -55,7 +55,7 @@
           },
           {
             "not": {
-              "enum": ["F5XC_NAMESPACE", "F5XC_API_URL", "F5XC_API_TOKEN", "F5XC_TENANT"]
+              "enum": ["XCSH_NAMESPACE", "XCSH_API_URL", "XCSH_API_TOKEN", "XCSH_TENANT"]
             },
             "description": "Reserved keys have dedicated top-level fields and must not appear in env."
           }

package/src/config/settings-schema.ts

@@ -76,7 +76,7 @@ export type StatusLineSegmentId =
 	| "cache_read"
 	| "cache_write"
 	| "session_name"
-	| "context_f5xc"
+	| "context_xcsh"
 	| "os_icon";
 
 interface UiMetadata {
@@ -1904,14 +1904,14 @@ export const SETTINGS_SCHEMA = {
 	"thinkingBudgets.xhigh": { type: "number", default: 32768 },
 
 	// ────────────────────────────────────────────────────────────────────────
-	// Fork-specific settings (xcsh / f5xc)
+	// Fork-specific settings (xcsh / xcsh)
 	// ────────────────────────────────────────────────────────────────────────
 
-	/** Per-session environment variables injected into bash (used by f5xc context system) */
+	/** Per-session environment variables injected into bash (used by xcsh context system) */
 	"bash.environment": { type: "record", default: {} as Record<string, string> },
 
-	/** Sensitive env var key names from the active f5xc context (populated by ContextService) */
-	"f5xc.sensitiveKeys": { type: "array", default: [] as string[] },
+	/** Sensitive env var key names from the active xcsh context (populated by ContextService) */
+	"xcsh.sensitiveKeys": { type: "array", default: [] as string[] },
 
 	/** Clear terminal on startup */
 	"startup.clearScreen": { type: "boolean", default: false },

package/src/internal-urls/api-catalog-resolve.ts

@@ -252,7 +252,7 @@ function renderCatalogDetail(cat: ApiCatalogCategory, index: ApiCatalogIndex, op
 		// Universal reference format hint — shown even in compact mode
 		if (op.method.toUpperCase() === "POST" || op.method.toUpperCase() === "PUT") {
 			sections.push(
-				'Object references: `{"namespace": "$F5XC_NAMESPACE", "name": "<name>"}`. Pool arrays: `[{"pool": {"namespace": "$F5XC_NAMESPACE", "name": "<name>"}, "weight": 1, "priority": 1}]`.',
+				'Object references: `{"namespace": "$XCSH_NAMESPACE", "name": "<name>"}`. Pool arrays: `[{"pool": {"namespace": "$XCSH_NAMESPACE", "name": "<name>"}, "weight": 1, "priority": 1}]`.',
 			);
 		}
 
@@ -340,13 +340,13 @@ async function fetchNamespaceInventory(
 	data: Readonly<Record<string, ApiCatalogCategory>>,
 	url: InternalUrl,
 ): Promise<string> {
-	const apiBase = (process.env.F5XC_API_URL ?? "").replace(/\/+$/, "");
-	const apiToken = process.env.F5XC_API_TOKEN ?? "";
+	const apiBase = (process.env.XCSH_API_URL ?? "").replace(/\/+$/, "");
+	const apiToken = process.env.XCSH_API_TOKEN ?? "";
 	if (!apiBase || !apiToken) {
-		return "# Namespace Inventory\n\nError: No API credentials configured. Set F5XC_API_URL and F5XC_API_TOKEN, or activate a context.\n";
+		return "# Namespace Inventory\n\nError: No API credentials configured. Set XCSH_API_URL and XCSH_API_TOKEN, or activate a context.\n";
 	}
 
-	const ns = url.searchParams.get("ns") ?? process.env.F5XC_NAMESPACE ?? "default";
+	const ns = url.searchParams.get("ns") ?? process.env.XCSH_NAMESPACE ?? "default";
 	const CONFIG_PREFIX = "/api/config/namespaces/{namespace}/";
 	const APP_KW =
 		/loadbalancer|pool|firewall|_policys|setting|type|mitigation|identification|network|route|host|definition|rate_limiter|prefix_set|cdn|waf|api_/i;

package/src/internal-urls/branding-index.generated.ts

@@ -31,21 +31,21 @@ export const BRANDING_DEPRECATIONS = {
 			note: "Still live on registry with no deprecation notice. High risk of AI model recommendation due to training data prevalence.\n",
 		},
 		canonical: {
-			registry: "registry.terraform.io/providers/f5xc-salesdemos/f5xc",
-			source: "f5xc-salesdemos/f5xc",
-			github: "github.com/f5xc-salesdemos/terraform-provider-f5xc",
-			docs: "https://f5xc-salesdemos.github.io/terraform-provider-f5xc/",
-			llms_txt: "https://f5xc-salesdemos.github.io/terraform-provider-f5xc/llms.txt",
+			registry: "registry.terraform.io/providers/f5xc-salesdemos/xcsh",
+			source: "f5xc-salesdemos/xcsh",
+			github: "github.com/f5xc-salesdemos/terraform-provider-xcsh",
+			docs: "https://f5xc-salesdemos.github.io/terraform-provider-xcsh/",
+			llms_txt: "https://f5xc-salesdemos.github.io/terraform-provider-xcsh/llms.txt",
 		},
 		required_providers_block:
-			'terraform {\n  required_providers {\n    f5xc = {\n      source = "f5xc-salesdemos/f5xc"\n    }\n  }\n}\n',
+			'terraform {\n  required_providers {\n    xcsh = {\n      source = "f5xc-salesdemos/xcsh"\n    }\n  }\n}\n',
 	},
 	api_endpoint: {
 		deprecated: {
 			url: "console.ves.volterra.io",
 		},
 		canonical: {
-			note: "Tenant-specific. No hardcoded default. Require F5XC_API_URL env var.",
+			note: "Tenant-specific. No hardcoded default. Require XCSH_API_URL env var.",
 		},
 	},
 	documentation: {
@@ -53,7 +53,7 @@ export const BRANDING_DEPRECATIONS = {
 			note: "docs.cloud.f5.com references to Volterra provider point to the deprecated volterraedge/volterra registry.\n",
 		},
 		canonical: {
-			url: "https://f5xc-salesdemos.github.io/terraform-provider-f5xc/",
+			url: "https://f5xc-salesdemos.github.io/terraform-provider-xcsh/",
 		},
 	},
 } as const;

package/src/internal-urls/build-info-runtime.ts

@@ -1,7 +1,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { $ } from "bun";
-import type { ContextStatus } from "../services/f5xc-context";
+import type { ContextStatus } from "../services/xcsh-context";
 import { BUILD_INFO, type BuildInfo } from "./build-info.generated";
 
 export type BuildInfoSource = "compiled" | "live-git" | "embedded-fallback";
@@ -114,7 +114,7 @@ function renderAuthStatusLine(context: ContextStatus, nowMs: number): string {
 }
 
 function renderPlatformContext(context: ContextStatus | null, nowMs: number): string {
-	// xcsh can be connected via a named context OR via F5XC_API_URL / F5XC_API_TOKEN env vars.
+	// xcsh can be connected via a named context OR via XCSH_API_URL / XCSH_API_TOKEN env vars.
 	// In the env-only case, activeContextName is null but activeContextTenant (derived from the
 	// env URL) and credentialSource ("environment") are still populated. Guard on tenant, not
 	// name, so env-backed deployments see the configured state instead of the unconfigured copy.

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.44.2",
-	"commit": "6e93a54c64e7bdd78d54b56b0c0237025aa420c7",
-	"shortCommit": "6e93a54",
+	"version": "19.45.0",
+	"commit": "60deceedc40dbe381063bb844f14f02c993ca9f7",
+	"shortCommit": "60decee",
 	"branch": "main",
-	"tag": "v19.44.2",
-	"commitDate": "2026-06-25T00:16:19Z",
-	"buildDate": "2026-06-25T00:38:03.351Z",
+	"tag": "v19.45.0",
+	"commitDate": "2026-06-25T15:02:43Z",
+	"buildDate": "2026-06-25T15:51:07.484Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/6e93a54c64e7bdd78d54b56b0c0237025aa420c7",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.44.2"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/60deceedc40dbe381063bb844f14f02c993ca9f7",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.45.0"
 };