@f5xc-salesdemos/xcsh 19.7.0 → 19.9.0

package/examples/extensions/todo.ts

@@ -118,7 +118,7 @@ export default function (pi: ExtensionAPI) {
 		for (const entry of ctx.sessionManager.getBranch()) {
 			if (entry.type !== "message") continue;
 			const msg = (entry as { message?: { role?: string; toolName?: string; details?: unknown } }).message;
-			if (!msg || msg.role !== "toolResult" || msg.toolName !== "todo") continue;
+			if (msg?.role !== "toolResult" || msg.toolName !== "todo") continue;
 
 			const details = msg.details as TodoDetails | undefined;
 			if (details) {

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5xc-salesdemos/xcsh",
-	"version": "19.7.0",
+	"version": "19.9.0",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5xc-salesdemos/xcsh",
 	"author": "Can Boluk",
@@ -50,12 +50,12 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@mozilla/readability": "^0.6",
-		"@f5xc-salesdemos/xcsh-stats": "19.7.0",
-		"@f5xc-salesdemos/pi-agent-core": "19.7.0",
-		"@f5xc-salesdemos/pi-ai": "19.7.0",
-		"@f5xc-salesdemos/pi-natives": "19.7.0",
-		"@f5xc-salesdemos/pi-tui": "19.7.0",
-		"@f5xc-salesdemos/pi-utils": "19.7.0",
+		"@f5xc-salesdemos/xcsh-stats": "19.9.0",
+		"@f5xc-salesdemos/pi-agent-core": "19.9.0",
+		"@f5xc-salesdemos/pi-ai": "19.9.0",
+		"@f5xc-salesdemos/pi-natives": "19.9.0",
+		"@f5xc-salesdemos/pi-tui": "19.9.0",
+		"@f5xc-salesdemos/pi-utils": "19.9.0",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",

package/src/extensibility/plugins/marketplace/prerequisites.ts

@@ -0,0 +1,50 @@
+import type { MarketplacePluginEntry } from "./types";
+
+const cache = new Map<string, boolean>();
+
+export async function checkPrerequisite(detectCmd: string): Promise<boolean> {
+	const cached = cache.get(detectCmd);
+	if (cached !== undefined) return cached;
+
+	try {
+		const [cmd, ...args] = detectCmd.split(/\s+/);
+		const proc = Bun.spawn([cmd!, ...args], {
+			stdout: "ignore",
+			stderr: "ignore",
+		});
+		const exitCode = await proc.exited;
+		const available = exitCode === 0;
+		cache.set(detectCmd, available);
+		return available;
+	} catch {
+		cache.set(detectCmd, false);
+		return false;
+	}
+}
+
+export async function checkAllPrerequisites(
+	plugins: MarketplacePluginEntry[],
+): Promise<Map<string, { available: boolean; missing: string[] }>> {
+	const results = new Map<string, { available: boolean; missing: string[] }>();
+
+	for (const plugin of plugins) {
+		if (!plugin.prerequisites || plugin.prerequisites.length === 0) {
+			results.set(plugin.name, { available: true, missing: [] });
+			continue;
+		}
+
+		const missing: string[] = [];
+		for (const prereq of plugin.prerequisites) {
+			const ok = await checkPrerequisite(prereq.detectCmd);
+			if (!ok) missing.push(prereq.tool);
+		}
+
+		results.set(plugin.name, { available: missing.length === 0, missing });
+	}
+
+	return results;
+}
+
+export function clearPrerequisiteCache(): void {
+	cache.clear();
+}

package/src/extensibility/plugins/marketplace/types.ts

@@ -89,6 +89,8 @@ export interface MarketplacePluginEntry {
 	tags?: string[];
 	strict?: boolean;
 	defaultEnabled?: boolean;
+	recommended?: boolean;
+	prerequisites?: Array<{ tool: string; installCmd: string; detectCmd: string }>;
 	commands?: string | string[];
 	agents?: string | string[];
 	hooks?: string | Record<string, unknown>;

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.7.0",
-	"commit": "dbd20dc81eb4648b7941336222fccc8630c1200d",
-	"shortCommit": "dbd20dc",
+	"version": "19.9.0",
+	"commit": "146551aadd2d3231eb436e0f5f760c96dc3ee602",
+	"shortCommit": "146551a",
 	"branch": "main",
-	"tag": "v19.7.0",
-	"commitDate": "2026-06-04T19:13:51Z",
-	"buildDate": "2026-06-04T19:45:06.219Z",
+	"tag": "v19.9.0",
+	"commitDate": "2026-06-05T02:16:52Z",
+	"buildDate": "2026-06-05T02:38:22.277Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5xc-salesdemos/xcsh",
 	"repoSlug": "f5xc-salesdemos/xcsh",
-	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/dbd20dc81eb4648b7941336222fccc8630c1200d",
-	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.7.0"
+	"commitUrl": "https://github.com/f5xc-salesdemos/xcsh/commit/146551aadd2d3231eb436e0f5f760c96dc3ee602",
+	"releaseUrl": "https://github.com/f5xc-salesdemos/xcsh/releases/tag/v19.9.0"
 };

package/src/lsp/render.ts

@@ -110,7 +110,7 @@ export function renderResult(
 	args?: LspParams,
 ): Component {
 	const content = result.content?.[0];
-	if (!content || content.type !== "text" || !("text" in content) || !content.text) {
+	if (content?.type !== "text" || !("text" in content) || !content.text) {
 		const icon = formatStatusIcon("warning", theme, options.spinnerFrame);
 		const header = `${icon} LSP`;
 		return new Text([header, theme.fg("dim", "No result")].join("\n"), 0, 0);

package/src/mcp/oauth-flow.ts

@@ -42,7 +42,7 @@ function getUriPort(uri: URL): number {
 
 function validateRedirectConfig(config: MCPOAuthConfig, redirectUri: string | undefined): void {
 	const parsed = parseRedirectUri(redirectUri);
-	if (!parsed || parsed.protocol !== "https:" || !isLoopbackHostname(parsed.hostname)) {
+	if (parsed?.protocol !== "https:" || !isLoopbackHostname(parsed.hostname)) {
 		return;
 	}
 
@@ -63,7 +63,7 @@ function resolveCallbackPort(callbackPort: number | undefined, redirectUri: stri
 	if (callbackPort !== undefined) return callbackPort;
 
 	const parsed = parseRedirectUri(redirectUri);
-	if (!parsed || parsed.protocol !== "http:" || !isLoopbackHostname(parsed.hostname)) {
+	if (parsed?.protocol !== "http:" || !isLoopbackHostname(parsed.hostname)) {
 		return DEFAULT_PORT;
 	}
 

package/src/modes/components/agent-dashboard.ts

@@ -121,7 +121,7 @@ function matchAgent(agent: DashboardAgent, query: string): boolean {
 function extractAssistantText(messages: AgentMessage[]): string | null {
 	for (let i = messages.length - 1; i >= 0; i--) {
 		const message = messages[i];
-		if (!message || message.role !== "assistant") continue;
+		if (message?.role !== "assistant") continue;
 		const blocks = message.content;
 		if (!Array.isArray(blocks)) continue;
 		const text = blocks

package/src/modes/components/diff.ts

@@ -132,7 +132,7 @@ export function renderDiff(diffText: string, options: RenderDiffOptions = {}): s
 			const removedLines: { lineNum: string; content: string }[] = [];
 			while (i < lines.length) {
 				const p = parseDiffLine(lines[i]);
-				if (!p || p.prefix !== "-") break;
+				if (p?.prefix !== "-") break;
 				removedLines.push({ lineNum: p.lineNum, content: p.content });
 				i++;
 			}
@@ -141,7 +141,7 @@ export function renderDiff(diffText: string, options: RenderDiffOptions = {}): s
 			const addedLines: { lineNum: string; content: string }[] = [];
 			while (i < lines.length) {
 				const p = parseDiffLine(lines[i]);
-				if (!p || p.prefix !== "+") break;
+				if (p?.prefix !== "+") break;
 				addedLines.push({ lineNum: p.lineNum, content: p.content });
 				i++;
 			}

package/src/modes/components/plugins/plugin-dashboard.ts

@@ -251,7 +251,7 @@ export class PluginDashboard extends Container {
 		if (!plugin) return;
 		const tabId = this.#activeTabId();
 
-		if (tabId === "discover" && !plugin.installed) {
+		if ((tabId === "discover" || tabId === "recommended") && !plugin.installed) {
 			await this.#installPlugin(plugin);
 		} else if (tabId === "updates" && plugin.hasUpdate) {
 			await this.#upgradePlugin(plugin);
@@ -289,6 +289,35 @@ export class PluginDashboard extends Container {
 		}
 	}
 
+	async #installAllRecommended(): Promise<void> {
+		const recommended = this.#state.allPlugins.filter(p => !p.installed && p.recommended && p.marketplace);
+		if (recommended.length === 0) {
+			this.#state.notice = "All recommended plugins are already installed";
+			this.#rebuildAndRender();
+			return;
+		}
+
+		this.#state.notice = `Installing ${recommended.length} recommended plugin(s)...`;
+		this.#rebuildAndRender();
+
+		let installed = 0;
+		let failed = 0;
+		for (const plugin of recommended) {
+			try {
+				await this.#mgr.installPlugin(plugin.name, plugin.marketplace!);
+				installed++;
+			} catch {
+				failed++;
+			}
+		}
+
+		this.#state.notice =
+			failed > 0
+				? `Installed ${installed}/${recommended.length} recommended plugin(s), ${failed} failed`
+				: `Installed ${installed} recommended plugin(s)`;
+		await this.#reloadData();
+	}
+
 	async #upgradePlugin(plugin: DashboardPlugin): Promise<void> {
 		this.#state.notice = `Upgrading ${plugin.name}...`;
 		this.#rebuildAndRender();
@@ -320,6 +349,8 @@ export class PluginDashboard extends Container {
 	#getHelpText(): string {
 		const tabId = this.#activeTabId();
 		switch (tabId) {
+			case "recommended":
+				return " ↑/↓: navigate  Enter: install  A: install all  Tab: next tab  Ctrl+R: reload  Esc: close";
 			case "discover":
 				return " ↑/↓: navigate  Enter: install  Tab: next tab  Ctrl+R: reload  Esc: close";
 			case "updates":
@@ -421,6 +452,11 @@ export class PluginDashboard extends Container {
 			return;
 		}
 
+		if (data.toLowerCase() === "a" && this.#activeTabId() === "recommended") {
+			void this.#installAllRecommended();
+			return;
+		}
+
 		if (data.toLowerCase() === "u") {
 			const plugin = this.#selectedPlugin();
 			if (plugin?.hasUpdate) {

package/src/modes/components/plugins/plugin-list-pane.ts

@@ -24,9 +24,11 @@ export class PluginListPane implements Component {
 			const msg =
 				this.activeTab === "discover"
 					? "No plugins available. Add a marketplace first."
-					: this.activeTab === "updates"
-						? "All plugins are up to date."
-						: "No plugins installed.";
+					: this.activeTab === "recommended"
+						? "All recommended plugins are installed."
+						: this.activeTab === "updates"
+							? "All plugins are up to date."
+							: "No plugins installed.";
 			lines.push(theme.fg("muted", `  ${msg}`));
 			return lines;
 		}
@@ -66,6 +68,8 @@ export class PluginListPane implements Component {
 			} else {
 				parts.push(theme.fg("dim", theme.status.disabled));
 			}
+		} else if (plugin.recommended) {
+			parts.push(theme.fg("warning", "*"));
 		} else {
 			parts.push(theme.fg("dim", "·"));
 		}

package/src/modes/components/plugins/state-manager.ts

@@ -62,6 +62,8 @@ function catalogToDashboard(entry: MarketplacePluginEntry, marketplace: string):
 		installed: false,
 		enabled: false,
 		hasUpdate: false,
+		recommended: entry.recommended,
+		prerequisites: entry.prerequisites,
 	};
 }
 
@@ -98,6 +100,8 @@ export async function loadAllPlugins(mgr: MarketplaceManager, npmMgr: PluginMana
 				const existing = plugins.find(p => p.id === pluginId);
 				if (existing) {
 					existing.displayName = existing.displayName || entry.displayName;
+					existing.recommended = existing.recommended || entry.recommended;
+					existing.prerequisites = existing.prerequisites || entry.prerequisites;
 					existing.description = existing.description || entry.description;
 					existing.category = existing.category || entry.category;
 					existing.tags = existing.tags || entry.tags;
@@ -126,10 +130,14 @@ export async function loadAllPlugins(mgr: MarketplaceManager, npmMgr: PluginMana
 export function buildTabs(plugins: DashboardPlugin[]): PluginTab[] {
 	const tabs: PluginTab[] = [];
 	const installedCount = plugins.filter(p => p.installed).length;
+	const recommendedCount = plugins.filter(p => !p.installed && p.recommended).length;
 	const discoverCount = plugins.filter(p => !p.installed).length;
 	const updatesCount = plugins.filter(p => p.hasUpdate).length;
 
 	tabs.push({ id: "installed", label: "Installed", count: installedCount });
+	if (recommendedCount > 0) {
+		tabs.push({ id: "recommended", label: "Recommended", count: recommendedCount });
+	}
 	if (discoverCount > 0) {
 		tabs.push({ id: "discover", label: "Discover", count: discoverCount });
 	}
@@ -143,6 +151,8 @@ export function filterByTab(plugins: DashboardPlugin[], tabId: PluginTabId): Das
 	switch (tabId) {
 		case "installed":
 			return plugins.filter(p => p.installed);
+		case "recommended":
+			return plugins.filter(p => !p.installed && p.recommended);
 		case "discover":
 			return plugins.filter(p => !p.installed);
 		case "updates":

package/src/modes/components/plugins/types.ts

@@ -18,9 +18,11 @@ export interface DashboardPlugin {
 	shadowedBy?: "project";
 	hasUpdate: boolean;
 	updateVersion?: string;
+	recommended?: boolean;
+	prerequisites?: Array<{ tool: string; installCmd: string; detectCmd: string }>;
 }
 
-export type PluginTabId = "installed" | "discover" | "updates";
+export type PluginTabId = "installed" | "recommended" | "discover" | "updates";
 
 export interface PluginTab {
 	id: PluginTabId;

package/src/prompts/tools/xcsh-api.md

@@ -22,3 +22,34 @@ API calls to the same F5 XC tenant reuse a single TLS connection — sequential
 
 **Relationship queries**: When the batch response says "Inventory complete" and includes a `Resource relationships:` section, the specs and relationships are already fully fetched. Answer directly from that data. Do NOT make additional GET calls to read individual resources you already have from the batch.
 **Tenant-wide queries**: When asked about resources across ALL namespaces (e.g. "show all LBs in the entire tenant"), use `paths: ["*"]` with `params: {namespace: "*"}` to batch every namespace in ONE call. Do NOT list namespaces first — the wildcard handles discovery automatically.
+
+**HTTP load balancer with origin pool** — when asked to create an LB routing to a named pool, use this exact payload structure (POST to `http_loadbalancers`):
+
+```json
+{
+  "metadata": { "name": "<lb-name>", "namespace": "<ns>" },
+  "spec": {
+    "domains": ["<domain>"],
+    "advertise_on_public_default_vip": {},
+    "http": { "port": 80 },
+    "default_route_pools": [
+      { "pool": { "namespace": "<ns>", "name": "<pool-name>" }, "weight": 1, "priority": 1 }
+    ]
+  }
+}
+```
+
+For HTTPS: replace `"http": {"port": 80}` with `"https_auto_cert": {"http_redirect": true, "default_header": {}, "tls_config": {"default_security": {}}, "no_mtls": {}}`. For no pool (advertise only): omit `default_route_pools`.
+
+**Resource disambiguation**: Several F5 XC resource types have similar names but different API paths. When the user's intent maps to one of these, use the exact API path shown:
+
+|User says|Catalog category|API path segment|NOT|
+|---|---|---|---|
+|"rate limiter policy"|`rate-limiter-policys`|`rate_limiter_policys`|`policers`, `rate_limiters`|
+|"policer"|`policers`|`policers`|`rate_limiter_policys`|
+|"rate limiter"|`rate-limiters`|`rate_limiters`|`rate_limiter_policys`, `policers`|
+
+**payload schemas for rate-limiting resources:**
+- `policers` / "policer": `{"metadata":{"name":"<n>","namespace":"<ns>"},"spec":{"burst_size":<int>,"committed_information_rate":<int>}}` — network-level byte/Mbps limiting
+- `rate_limiters` / "rate limiter": `{"metadata":{"name":"<n>","namespace":"<ns>"},"spec":{"burst_size":<int>,"committed_information_rate":<int>}}` — HTTP request-level limiting (rps)
+- `rate_limiter_policys` / "rate limiter policy": requires existing `rate_limiter` reference; use `{"metadata":{"name":"<n>","namespace":"<ns>"},"spec":{"any_server":{},"rules":[{"metadata":{"name":"r"},"spec":{"any_client":{},"any_ip":{},"rate_limiter":{"namespace":"<ns>","name":"<rl-name>"}}}]}}`

package/src/session/agent-session.ts

@@ -4517,7 +4517,7 @@ export class AgentSession {
 
 	#closeCodexProviderSessionsForHistoryRewrite(): void {
 		const currentModel = this.model;
-		if (!currentModel || currentModel.api !== "openai-codex-responses") return;
+		if (currentModel?.api !== "openai-codex-responses") return;
 		this.#closeProviderSessionsForModelSwitch(currentModel, currentModel);
 	}
 
@@ -6115,7 +6115,7 @@ export class AgentSession {
 		const previousSessionFile = this.sessionFile;
 		const selectedEntry = this.sessionManager.getEntry(entryId);
 
-		if (!selectedEntry || selectedEntry.type !== "message" || selectedEntry.message.role !== "user") {
+		if (selectedEntry?.type !== "message" || selectedEntry.message.role !== "user") {
 			throw new Error("Invalid entry ID for branching");
 		}
 

package/src/slash-commands/builtin-registry.ts

@@ -875,6 +875,7 @@ const BUILTIN_SLASH_COMMAND_REGISTRY: ReadonlyArray<BuiltinSlashCommandSpec> = [
 			{ name: "discover", description: "Browse available plugins", usage: "[marketplace]" },
 			{ name: "list", description: "List all installed plugins" },
 			{ name: "validate", description: "Validate marketplace or plugin manifest", usage: "[path]" },
+			{ name: "setup", description: "Guided setup for recommended plugins" },
 			{ name: "help", description: "Show usage guide" },
 		],
 		allowArgs: true,
@@ -969,7 +970,6 @@ const BUILTIN_SLASH_COMMAND_REGISTRY: ReadonlyArray<BuiltinSlashCommandSpec> = [
 								}
 								break;
 							}
-							case "list":
 							default: {
 								const marketplaces = await mgr.listMarketplaces();
 								if (marketplaces.length === 0) {
@@ -1162,6 +1162,80 @@ const BUILTIN_SLASH_COMMAND_REGISTRY: ReadonlyArray<BuiltinSlashCommandSpec> = [
 						}
 						break;
 					}
+					// ── Setup (guided recommended plugin install) ──
+					case "setup": {
+						const { checkPrerequisite } = await import("../extensibility/plugins/marketplace/prerequisites");
+						const allPlugins = await mgr.listAvailablePlugins();
+						const recommended = allPlugins.filter(p => p.recommended);
+						if (recommended.length === 0) {
+							runtime.ctx.showStatus("No recommended plugins found in configured marketplaces");
+							break;
+						}
+
+						const installed = await mgr.listInstalledPlugins();
+						const installedIds = new Set(installed.map(p => p.id));
+						const toInstall = recommended.filter(
+							p => !Array.from(installedIds).some(id => id.startsWith(`${p.name}@`)),
+						);
+
+						if (toInstall.length === 0) {
+							runtime.ctx.showStatus("All recommended plugins are already installed");
+							break;
+						}
+
+						const lines: string[] = ["Recommended plugins setup:\n"];
+						let installedCount = 0;
+						let skippedCount = 0;
+						const skippedReasons: string[] = [];
+
+						for (const plugin of toInstall) {
+							if (plugin.prerequisites && plugin.prerequisites.length > 0) {
+								const missing: string[] = [];
+								for (const prereq of plugin.prerequisites) {
+									const ok = await checkPrerequisite(prereq.detectCmd);
+									if (!ok) missing.push(`${prereq.tool} (${prereq.installCmd})`);
+								}
+								if (missing.length > 0) {
+									lines.push(`  ⊘ ${plugin.displayName || plugin.name} — missing: ${missing.join(", ")}`);
+									skippedCount++;
+									skippedReasons.push(...missing);
+									continue;
+								}
+							}
+
+							const marketplaces = await mgr.listMarketplaces();
+							let installed = false;
+							for (const mkt of marketplaces) {
+								const available = await mgr.listAvailablePlugins(mkt.name);
+								if (available.some(a => a.name === plugin.name)) {
+									try {
+										await mgr.installPlugin(plugin.name, mkt.name);
+										lines.push(`  + ${plugin.displayName || plugin.name} — installed`);
+										installedCount++;
+										installed = true;
+									} catch (err) {
+										lines.push(
+											`  ! ${plugin.displayName || plugin.name} — ${err instanceof Error ? err.message : String(err)}`,
+										);
+										skippedCount++;
+									}
+									break;
+								}
+							}
+							if (!installed && skippedCount === 0) {
+								lines.push(`  ? ${plugin.displayName || plugin.name} — not found in any marketplace`);
+								skippedCount++;
+							}
+						}
+
+						lines.push("");
+						lines.push(`Installed ${installedCount}/${toInstall.length} recommended plugin(s)`);
+						if (skippedCount > 0) {
+							lines.push(`${skippedCount} skipped — install missing tools and run /plugin setup again`);
+						}
+						runtime.ctx.showStatus(lines.join("\n"));
+						break;
+					}
 					// ── Help ──
 					case "help": {
 						runtime.ctx.showStatus(
@@ -1180,6 +1254,7 @@ const BUILTIN_SLASH_COMMAND_REGISTRY: ReadonlyArray<BuiltinSlashCommandSpec> = [
 								"  /plugin upgrade [name@marketplace]         Upgrade plugin(s)",
 								"  /plugin list                               List installed plugins",
 								"  /plugin validate [path]                    Validate marketplace or plugin",
+								"  /plugin setup                              Guided setup for recommended plugins",
 								"",
 								"Quick start:",
 								"  /plugin marketplace add f5xc-salesdemos/marketplace",

package/src/vim/engine.ts

@@ -867,7 +867,7 @@ export class VimEngine {
 			}
 			case "r": {
 				const replacement = tokens[nextIndex + 1];
-				if (!replacement || replacement.value.length !== 1) {
+				if (replacement?.value.length !== 1) {
 					throw new VimError("Visual replace requires a literal character", opToken);
 				}
 				const visual = expandVisualOffsets(
@@ -1134,7 +1134,7 @@ export class VimEngine {
 				return nextIndex + 1;
 			case "r": {
 				const replacement = tokens[nextIndex + 1];
-				if (!replacement || replacement.value.length !== 1) {
+				if (replacement?.value.length !== 1) {
 					throw new VimError("r requires a replacement character", token);
 				}
 				await this.#applyAtomicChange(["r", replacement.value], () => {
@@ -1763,7 +1763,7 @@ export class VimEngine {
 			case "t":
 			case "T": {
 				const searchToken = tokens[index + 1];
-				if (!searchToken || searchToken.value.length !== 1) {
+				if (searchToken?.value.length !== 1) {
 					throw new VimError(`${token.value} requires a literal character`, token);
 				}
 				this.lastCharFind = { char: searchToken.value, mode: token.value as "f" | "F" | "t" | "T" };