@f5xc-salesdemos/xcsh 19.47.0 → 19.48.1

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "19.47.0",
+	"version": "19.48.1",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -54,13 +54,13 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "19.47.0",
-		"@f5xc-salesdemos/pi-agent-core": "19.47.0",
-		"@f5xc-salesdemos/pi-ai": "19.47.0",
-		"@f5xc-salesdemos/pi-natives": "19.47.0",
-		"@f5xc-salesdemos/pi-resource-management": "19.47.0",
-		"@f5xc-salesdemos/pi-tui": "19.47.0",
-		"@f5xc-salesdemos/pi-utils": "19.47.0",
+		"@f5xc-salesdemos/xcsh-stats": "19.48.1",
+		"@f5xc-salesdemos/pi-agent-core": "19.48.1",
+		"@f5xc-salesdemos/pi-ai": "19.48.1",
+		"@f5xc-salesdemos/pi-natives": "19.48.1",
+		"@f5xc-salesdemos/pi-resource-management": "19.48.1",
+		"@f5xc-salesdemos/pi-tui": "19.48.1",
+		"@f5xc-salesdemos/pi-utils": "19.48.1",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",

package/src/browser/extension-page-actions.ts

@@ -307,6 +307,14 @@ export class ExtensionPageActions implements PageActions {
 		}
 	}
 
+	async selectLabel(selector: string, value: string, _context?: string): Promise<void> {
+		// Atomic CDK-portal typeahead interaction: the extension's label_select tool
+		// handles type → poll → click in ONE handler without losing focus (the root
+		// cause of all previous label-selector failures). Uses plain Runtime.evaluate
+		// (not evaluateWithRecovery which detaches the debugger and closes the portal).
+		await this.#ext.labelSelect(selector, value);
+	}
+
 	async scrollIntoView(selector: string, _context?: string): Promise<void> {
 		// resolveCoords already does scrollIntoView.
 		await resolveCoords(this.#ext, selector);

package/src/browser/extension-provider.ts

@@ -53,6 +53,19 @@ export interface ExtensionPage {
 	clickXy(x: number, y: number): Promise<void>;
 	/** CDP Input.insertText into the focused element (genuine trusted input events). */
 	typeText(text: string): Promise<void>;
+	/** Atomically type into a CDK-portal typeahead + click the matching option.
+	 * Keeps the input focused throughout (uses plain Runtime.evaluate, not the
+	 * evaluateWithRecovery path that defocuses by detaching the debugger). */
+	labelSelect(
+		selector: string,
+		value: string,
+		waitMs?: number,
+	): Promise<{
+		selected: string;
+		matchedKind: string;
+		value: string;
+		optionCount: number;
+	}>;
 }
 
 /** Unwrap a {@link ToolResult}, throwing on the error flag. */
@@ -204,6 +217,19 @@ class BridgeExtensionPage implements ExtensionPage {
 	async typeText(text: string): Promise<void> {
 		unwrap(await this.#server.request("type_text", { text }), "type_text");
 	}
+
+	async labelSelect(
+		selector: string,
+		value: string,
+		waitMs?: number,
+	): Promise<{ selected: string; matchedKind: string; value: string; optionCount: number }> {
+		// Request timeout must exceed the handler's internal poll budget.
+		const timeout = Math.max(30_000, (waitMs ?? 8_000) + 5_000);
+		return unwrap(
+			await this.#server.request("label_select", { selector, value, wait_ms: waitMs }, timeout),
+			"label_select",
+		) as { selected: string; matchedKind: string; value: string; optionCount: number };
+	}
 }
 
 const CONNECT_TIMEOUT_MS = 30_000;

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.47.0",
-	"commit": "ae8522ac0882900baeef7e16bb63110c859dd522",
-	"shortCommit": "ae8522a",
+	"version": "19.48.1",
+	"commit": "631f2894864056abcc7f4d985ad5d4bc4b12806e",
+	"shortCommit": "631f289",
 	"branch": "main",
-	"tag": "v19.47.0",
-	"commitDate": "2026-06-25T18:51:19Z",
-	"buildDate": "2026-06-25T19:19:29.242Z",
+	"tag": "v19.48.1",
+	"commitDate": "2026-06-25T20:15:07Z",
+	"buildDate": "2026-06-25T20:36:30.697Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/ae8522ac0882900baeef7e16bb63110c859dd522",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.47.0"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/631f2894864056abcc7f4d985ad5d4bc4b12806e",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.48.1"
 };

package/src/services/xcsh-context.ts

@@ -13,6 +13,7 @@ import { XCSHApiClient } from "./xcsh-api-client";
 import {
 	deriveTenantFromUrl,
 	hasEnvOverride,
+	isInjectableContextEnvKey,
 	normalizeApiUrl,
 	RESERVED_ENV_KEYS,
 	RESERVED_ENV_MESSAGES,
@@ -1388,10 +1389,13 @@ export class ContextService {
 		// Inject context profile name for API tool identity surfacing
 		merged[XCSH_CONTEXT_NAME] = context.name;
 
-		// Inject all additional env vars from context.env map
+		// Inject additional env vars from context.env. Allowlist: only XCSH_-namespaced
+		// non-reserved keys may reach the subprocess — a project-local context file is
+		// untrusted input, so anything outside the XCSH_ namespace (LD_PRELOAD,
+		// NODE_OPTIONS, PATH, …) is refused and can never run code.
 		if (context.env) {
 			for (const [key, value] of Object.entries(context.env)) {
-				if (!process.env[key] && !(RESERVED_ENV_KEYS.has(key) && key in merged)) merged[key] = value;
+				if (isInjectableContextEnvKey(key) && !process.env[key]) merged[key] = value;
 			}
 		}
 

package/src/services/xcsh-env.ts

@@ -6,6 +6,7 @@
  */
 import {
 	AUTH_ENV_KEYS,
+	isInjectableContextEnvKey,
 	isSensitiveEnvKey,
 	RESERVED_ENV_KEYS,
 	SECRET_ENV_PATTERNS,
@@ -20,6 +21,7 @@ import {
 
 export {
 	AUTH_ENV_KEYS,
+	isInjectableContextEnvKey,
 	isSensitiveEnvKey,
 	RESERVED_ENV_KEYS,
 	SECRET_ENV_PATTERNS,