shortcutxl 0.3.58 → 0.3.59

package/BINARY-INVENTORY.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-06-03T02:10:49.171Z",
+  "generatedAt": "2026-06-03T05:23:21.387Z",
   "package": "shortcutxl",
   "binaryExtensions": [
     ".dll",
@@ -11,7 +11,7 @@
   "files": [
     {
       "path": "xll/ShortcutXL.xll",
-      "sha256": "91d5e9bc42975aa414b3a4ac7f18ea1ba3d4bcbc94d4bee3d4d7dfcf33fbbaae",
+      "sha256": "3852e0b282c00d510c51da0501cac4971f335d4c99dba6272f15b335ad5068fd",
       "source": "ShortcutXL native XLL build",
       "version": "package",
       "builtBy": "shortcut",
@@ -523,7 +523,7 @@
     },
     {
       "path": "xll/python/Scripts/httpx.exe",
-      "sha256": "5ece6fa700d232d712b90b2e70541b1f51fcdd3e9d3dc91e7f1c44f37d30a5c3",
+      "sha256": "84a59a562fcdd84adaa995aba93673f883ad1b3dc06708fcb268ea3275f839cd",
       "source": "httpx console launcher installed into embedded Python",
       "version": "see packaged httpx distribution",
       "builtBy": "third-party",
@@ -531,7 +531,7 @@
     },
     {
       "path": "xll/python/Scripts/idna.exe",
-      "sha256": "abd6d50042c4b240cf42a5a7d6081a0cb79d15358c18641ba856b60322b2b74c",
+      "sha256": "a5bd06e740a8c4af1bd8d7883efc7ad16b0b2151b2a9e59ef6d64282c164a56b",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",
@@ -539,7 +539,7 @@
     },
     {
       "path": "xll/python/Scripts/pip.exe",
-      "sha256": "efa224c01b807029586cfbce3c40d7fb543d905b52cf765d898e9d3db1123f28",
+      "sha256": "2e4bed34ea1c99aee03259cf79f1fd9a56a9900cafd7ecb60c818c45e1125533",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -547,7 +547,7 @@
     },
     {
       "path": "xll/python/Scripts/pip3.13.exe",
-      "sha256": "efa224c01b807029586cfbce3c40d7fb543d905b52cf765d898e9d3db1123f28",
+      "sha256": "2e4bed34ea1c99aee03259cf79f1fd9a56a9900cafd7ecb60c818c45e1125533",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -555,7 +555,7 @@
     },
     {
       "path": "xll/python/Scripts/pip3.exe",
-      "sha256": "efa224c01b807029586cfbce3c40d7fb543d905b52cf765d898e9d3db1123f28",
+      "sha256": "2e4bed34ea1c99aee03259cf79f1fd9a56a9900cafd7ecb60c818c45e1125533",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -563,7 +563,7 @@
     },
     {
       "path": "xll/python/Scripts/pywin32_postinstall.exe",
-      "sha256": "84f0a317e3016c29569be3f101db2d3557914d84c4cca693a707866d12b45fdb",
+      "sha256": "7c02775810d083f1e70a026c2ea80ea086373bdaac811a9a4f1c19dad9e54e6f",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",
@@ -571,7 +571,7 @@
     },
     {
       "path": "xll/python/Scripts/pywin32_testall.exe",
-      "sha256": "3b6e27fe46b31904a8c760d3c70518d5eeb0d95b585e02daf93682fbe2c290f1",
+      "sha256": "ba14591c7c28b8e58a291040d70b0acff797598645abfc4f9eb4e2f3b6e0b9c7",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",

package/CHANGELOG.md

@@ -1,8 +1,8 @@
 # Changelog
 
-## [0.3.58]
+## [0.3.59]
 
-- **Improved update reliability** - ShortcutXL now shows clearer update errors when Windows blocks a global package upgrade.
+- **Security and model updates** - Strengthened account policy checks and updated model routing/defaults.
 
 ## [0.3.57]
 

package/dist/cli.js

@@ -167005,9 +167005,9 @@ var require_buffer_from = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/source-map-support@0.5.21/node_modules/source-map-support/source-map-support.js
+// ../../node_modules/.pnpm/source-map-support@0.5.13/node_modules/source-map-support/source-map-support.js
 var require_source_map_support = __commonJS({
-  "../../node_modules/.pnpm/source-map-support@0.5.21/node_modules/source-map-support/source-map-support.js"(exports, module) {
+  "../../node_modules/.pnpm/source-map-support@0.5.13/node_modules/source-map-support/source-map-support.js"(exports) {
     var SourceMapConsumer = require_source_map().SourceMapConsumer;
     var path21 = __require("path");
     var fs16;
@@ -167019,9 +167019,6 @@ var require_source_map_support = __commonJS({
     } catch (err) {
     }
     var bufferFrom = require_buffer_from();
-    function dynamicRequire(mod, request) {
-      return mod.require(request);
-    }
     var errorFormatterInstalled = false;
     var uncaughtShimInstalled = false;
     var emptyCacheBetweenOperations = false;
@@ -167041,23 +167038,6 @@ var require_source_map_support = __commonJS({
     function hasGlobalProcessEventEmitter() {
       return typeof process === "object" && process !== null && typeof process.on === "function";
     }
-    function globalProcessVersion() {
-      if (typeof process === "object" && process !== null) {
-        return process.version;
-      } else {
-        return "";
-      }
-    }
-    function globalProcessStderr() {
-      if (typeof process === "object" && process !== null) {
-        return process.stderr;
-      }
-    }
-    function globalProcessExit(code) {
-      if (typeof process === "object" && process !== null && typeof process.exit === "function") {
-        return process.exit(code);
-      }
-    }
     function handlerExec(list2) {
       return function(arg) {
         for (var i2 = 0; i2 < list2.length; i2++) {
@@ -167282,20 +167262,15 @@ var require_source_map_support = __commonJS({
       object3.toString = CallSiteToString;
       return object3;
     }
-    function wrapCallSite(frame, state) {
-      if (state === void 0) {
-        state = { nextPosition: null, curPosition: null };
-      }
+    function wrapCallSite(frame) {
       if (frame.isNative()) {
-        state.curPosition = null;
         return frame;
       }
       var source = frame.getFileName() || frame.getScriptNameOrSourceURL();
       if (source) {
         var line = frame.getLineNumber();
         var column = frame.getColumnNumber() - 1;
-        var noHeader = /^v(10\.1[6-9]|10\.[2-9][0-9]|10\.[0-9]{3,}|1[2-9]\d*|[2-9]\d|\d{3,}|11\.11)/;
-        var headerLength = noHeader.test(globalProcessVersion()) ? 0 : 62;
+        var headerLength = 62;
         if (line === 1 && column > headerLength && !isInBrowser() && !frame.isEval()) {
           column -= headerLength;
         }
@@ -167304,14 +167279,10 @@ var require_source_map_support = __commonJS({
           line,
           column
         });
-        state.curPosition = position;
         frame = cloneCallSite(frame);
         var originalFunctionName = frame.getFunctionName;
         frame.getFunctionName = function() {
-          if (state.nextPosition == null) {
-            return originalFunctionName();
-          }
-          return state.nextPosition.name || originalFunctionName();
+          return position.name || originalFunctionName();
         };
         frame.getFileName = function() {
           return position.source;
@@ -167346,14 +167317,9 @@ var require_source_map_support = __commonJS({
       var name = error2.name || "Error";
       var message = error2.message || "";
       var errorString = name + ": " + message;
-      var state = { nextPosition: null, curPosition: null };
-      var processedStack = [];
-      for (var i2 = stack.length - 1; i2 >= 0; i2--) {
-        processedStack.push("\n    at " + wrapCallSite(stack[i2], state));
-        state.nextPosition = state.curPosition;
-      }
-      state.curPosition = state.nextPosition = null;
-      return errorString + processedStack.reverse().join("");
+      return errorString + stack.map(function(frame) {
+        return "\n    at " + wrapCallSite(frame);
+      }).join("");
     }
     function getErrorSource(error2) {
       var match2 = /\n    at [^(]+ \((.*):(\d+):(\d+)\)/.exec(error2.stack);
@@ -167380,16 +167346,15 @@ var require_source_map_support = __commonJS({
     }
     function printErrorAndExit(error2) {
       var source = getErrorSource(error2);
-      var stderr = globalProcessStderr();
-      if (stderr && stderr._handle && stderr._handle.setBlocking) {
-        stderr._handle.setBlocking(true);
+      if (process.stderr._handle && process.stderr._handle.setBlocking) {
+        process.stderr._handle.setBlocking(true);
       }
       if (source) {
         console.error();
         console.error(source);
       }
       console.error(error2.stack);
-      globalProcessExit(1);
+      process.exit(1);
     }
     function shimEmitUncaughtException() {
       var origEmit = process.emit;
@@ -167431,7 +167396,11 @@ var require_source_map_support = __commonJS({
         retrieveMapHandlers.unshift(options2.retrieveSourceMap);
       }
       if (options2.hookRequire && !isInBrowser()) {
-        var Module2 = dynamicRequire(module, "module");
+        var Module2;
+        try {
+          Module2 = __require("module");
+        } catch (err) {
+        }
         var $compile = Module2.prototype._compile;
         if (!$compile.__sourceMapSupport) {
           Module2.prototype._compile = function(content, filename) {
@@ -167451,13 +167420,6 @@ var require_source_map_support = __commonJS({
       }
       if (!uncaughtShimInstalled) {
         var installHandler = "handleUncaughtExceptions" in options2 ? options2.handleUncaughtExceptions : true;
-        try {
-          var worker_threads = dynamicRequire(module, "worker_threads");
-          if (worker_threads.isMainThread === false) {
-            installHandler = false;
-          }
-        } catch (e2) {
-        }
         if (installHandler && hasGlobalProcessEventEmitter()) {
           uncaughtShimInstalled = true;
           shimEmitUncaughtException();
@@ -474973,7 +474935,7 @@ function syncXll() {
     try {
       const { updated, staleLocked } = syncDir(shippedDir, stableDir);
       totalUpdated += updated;
-      hasStaleLockedFiles = staleLocked;
+      hasStaleLockedFiles = hasStaleLockedFiles || staleLocked;
       if (staleLocked) {
         console.warn(
           "Warning: A ShortcutXL update is available but Excel has files locked. Please close Excel and restart the Shortcut agent to apply it."
@@ -478818,26 +478780,26 @@ async function runForegroundUpdate(request, deps = {}) {
         kind: "failed",
         exitCode,
         signal,
-        message: summarizeUpdateFailure(capturedOutput),
+        message: summarizeUpdateFailure(capturedOutput, request.command),
         logPath
       });
     });
   });
 }
-function summarizeUpdateFailure(output) {
+function summarizeUpdateFailure(output, updateCommand) {
   if (/EEXIST[\s\S]*shortcut\.cmd/i.test(output) || /File exists:[\s\S]*shortcut\.cmd/i.test(output)) {
     return [
       "ShortcutXL could not update because an existing global `shortcut` command blocked npm from replacing it.",
-      "Close any running ShortcutXL terminals, then run `npm uninstall -g shortcutxl` followed by `npm install -g shortcutxl@latest`."
+      `Close any running ShortcutXL terminals, remove the existing global ShortcutXL package, then retry \`${updateCommand}\`.`
     ].join(" ");
   }
   if (/EPERM|ENOTEMPTY|ENOENT/i.test(output) && /AppData[\\/]+Roaming[\\/]+npm[\\/]+node_modules[\\/]+shortcutxl/i.test(output)) {
     return [
       "ShortcutXL could not update because npm could not clean up the previous global install.",
-      "Close ShortcutXL terminals and retry `npm install -g shortcutxl@latest`."
+      `Close ShortcutXL terminals and retry \`${updateCommand}\`.`
     ].join(" ");
   }
-  return "ShortcutXL could not update automatically. Retry with `npm install -g shortcutxl@latest`.";
+  return `ShortcutXL could not update automatically. Retry with \`${updateCommand}\`.`;
 }
 function writeUpdateFailureLog({
   command,
@@ -481210,7 +481172,9 @@ async function main(args) {
       process.exit(updateResult.exitCode ?? 1);
     }
     console.log(source_default.green(`Update to v${updatePromptOutcome.update.latestVersion} succeeded.`));
-    console.log(source_default.green("Launching ShortcutXL..."));
+    console.log(source_default.green("Restart ShortcutXL to finish applying the update:"));
+    console.log(source_default.bold("  shortcut"));
+    process.exit(0);
   }
   initTheme(settingsManager.getTheme(), isInteractive);
   sessionManager = await createSessionManager2(parsed, cwd);

package/dist/main.js

@@ -678,7 +678,9 @@ export async function main(args) {
             process.exit(updateResult.exitCode ?? 1);
         }
         console.log(chalk.green(`Update to v${updatePromptOutcome.update.latestVersion} succeeded.`));
-        console.log(chalk.green('Launching ShortcutXL...'));
+        console.log(chalk.green('Restart ShortcutXL to finish applying the update:'));
+        console.log(chalk.bold('  shortcut'));
+        process.exit(0);
     }
     initTheme(settingsManager.getTheme(), isInteractive);
     // Create session manager based on CLI flags

package/dist/startup/sync-xll.js

@@ -178,7 +178,7 @@ export function syncXll() {
         try {
             const { updated, staleLocked } = syncDir(shippedDir, stableDir);
             totalUpdated += updated;
-            hasStaleLockedFiles = staleLocked;
+            hasStaleLockedFiles = hasStaleLockedFiles || staleLocked;
             if (staleLocked) {
                 console.warn('Warning: A ShortcutXL update is available but Excel has files locked. ' +
                     'Please close Excel and restart the Shortcut agent to apply it.');

package/dist/startup/update-action.js

@@ -63,28 +63,28 @@ export async function runForegroundUpdate(request, deps = {}) {
                 kind: 'failed',
                 exitCode,
                 signal,
-                message: summarizeUpdateFailure(capturedOutput),
+                message: summarizeUpdateFailure(capturedOutput, request.command),
                 logPath
             });
         });
     });
 }
-function summarizeUpdateFailure(output) {
+function summarizeUpdateFailure(output, updateCommand) {
     if (/EEXIST[\s\S]*shortcut\.cmd/i.test(output) ||
         /File exists:[\s\S]*shortcut\.cmd/i.test(output)) {
         return [
             'ShortcutXL could not update because an existing global `shortcut` command blocked npm from replacing it.',
-            'Close any running ShortcutXL terminals, then run `npm uninstall -g shortcutxl` followed by `npm install -g shortcutxl@latest`.'
+            `Close any running ShortcutXL terminals, remove the existing global ShortcutXL package, then retry \`${updateCommand}\`.`
         ].join(' ');
     }
     if (/EPERM|ENOTEMPTY|ENOENT/i.test(output) &&
         /AppData[\\/]+Roaming[\\/]+npm[\\/]+node_modules[\\/]+shortcutxl/i.test(output)) {
         return [
             'ShortcutXL could not update because npm could not clean up the previous global install.',
-            'Close ShortcutXL terminals and retry `npm install -g shortcutxl@latest`.'
+            `Close ShortcutXL terminals and retry \`${updateCommand}\`.`
         ].join(' ');
     }
-    return 'ShortcutXL could not update automatically. Retry with `npm install -g shortcutxl@latest`.';
+    return `ShortcutXL could not update automatically. Retry with \`${updateCommand}\`.`;
 }
 function writeUpdateFailureLog({ command, exitCode, signal, output, truncated, resolveLogPath }) {
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shortcutxl",
-  "version": "0.3.58",
+  "version": "0.3.59",
   "license": "MIT",
   "type": "module",
   "types": "./dist/index.d.ts",

package/xll/python/Lib/site-packages/httpx-0.28.1.dist-info/RECORD

@@ -1,4 +1,4 @@
-../../Scripts/httpx.exe,sha256=Xs5vpwDSMtcSuQsucFQbH1H83T6dPckefxxE830wpcM,108375
+../../Scripts/httpx.exe,sha256=hKWaVi_N2EraqZWrqTZz-IOtGz3AZwj8smjqMnX4Oc0,108375
 httpx-0.28.1.dist-info/INSTALLER,sha256=zuuue4knoyJ-UwPPXg8fezS7VCrXJQrAP7zeNuwvFQg,4
 httpx-0.28.1.dist-info/METADATA,sha256=_rubD48-gNV8gZnDBPNcQzboWB0dGNeYPJJ2a4J5OyU,7052
 httpx-0.28.1.dist-info/RECORD,,

package/xll/python/Lib/site-packages/idna-3.18.dist-info/RECORD

@@ -1,4 +1,4 @@
-../../Scripts/idna.exe,sha256=q9bVAELEskDPQqWn1ggaDLedFTWMGGQbqFa2AyKyt0w,108378
+../../Scripts/idna.exe,sha256=pb0G50CoxK8b2NeIPvx60WsLIVGyqeWe9tZCgsFkpWs,108378
 idna-3.18.dist-info/INSTALLER,sha256=zuuue4knoyJ-UwPPXg8fezS7VCrXJQrAP7zeNuwvFQg,4
 idna-3.18.dist-info/METADATA,sha256=Rt_m5axGLQ9oDs2avPZugptqIzSCS02eOXmzETXK8oE,6119
 idna-3.18.dist-info/RECORD,,

package/xll/python/Lib/site-packages/pip-26.1.2.dist-info/RECORD

@@ -1,6 +1,6 @@
-../../Scripts/pip.exe,sha256=76IkwBuAcClYbPvOPEDX-1Q9kFtSz3ZdiY6dPbESPyg,108392
-../../Scripts/pip3.13.exe,sha256=76IkwBuAcClYbPvOPEDX-1Q9kFtSz3ZdiY6dPbESPyg,108392
-../../Scripts/pip3.exe,sha256=76IkwBuAcClYbPvOPEDX-1Q9kFtSz3ZdiY6dPbESPyg,108392
+../../Scripts/pip.exe,sha256=LkvtNOocma7gMlnPefH9mlapkAyv1-y2DIGMReESVTM,108392
+../../Scripts/pip3.13.exe,sha256=LkvtNOocma7gMlnPefH9mlapkAyv1-y2DIGMReESVTM,108392
+../../Scripts/pip3.exe,sha256=LkvtNOocma7gMlnPefH9mlapkAyv1-y2DIGMReESVTM,108392
 pip-26.1.2.dist-info/INSTALLER,sha256=zuuue4knoyJ-UwPPXg8fezS7VCrXJQrAP7zeNuwvFQg,4
 pip-26.1.2.dist-info/METADATA,sha256=F4Mt5Htdwj5GJTuhZGJSADbyjZon1cMBV3hJUspOabI,4566
 pip-26.1.2.dist-info/RECORD,,

package/xll/python/Lib/site-packages/pywin32-311.dist-info/RECORD

@@ -1,8 +1,8 @@
 ../../Scripts/__pycache__/pywin32_postinstall.cpython-313.pyc,,
 ../../Scripts/__pycache__/pywin32_testall.cpython-313.pyc,,
-../../Scripts/pywin32_postinstall.exe,sha256=hPCjF-MBbClWm-PxAdstNVeRTYTEzKaTpweGbRK0X9s,108403
+../../Scripts/pywin32_postinstall.exe,sha256=fAJ3WBDQg_HnCgJsLqgOoIY3O9qsgRqaTxwZ2tnlTm8,108403
 ../../Scripts/pywin32_postinstall.py,sha256=mx4WVp1hD_8xgkSXttNtto1BVDECZOc3FCClrR1SjFM,25736
-../../Scripts/pywin32_testall.exe,sha256=O24n_kazGQSox2DTxwUY1e6w2VtYXgLa-TaC--LCkPE,108399
+../../Scripts/pywin32_testall.exe,sha256=uhRZHHwouOWKKRBA1wsKz_eXWYZFq_xPnrTi87bgucc,108399
 ../../Scripts/pywin32_testall.py,sha256=hyGLMKILn3_W0q-McP1VJnNFW_z5yk_gesTMQDlUocM,3847
 PyWin32.chm,sha256=S3fN4iKEUFyW4IIm3Zf5jtdrlTJLh93MzIrT9wX3z9o,2646518
 __pycache__/pythoncom.cpython-313.pyc,,