shortcutxl 0.3.62 → 0.3.63

package/CHANGELOG.md

@@ -1,9 +1,9 @@
 # Changelog
 
-## [0.3.62]
+## [0.3.63]
 
 - **Windows runtime security** - Updated the embedded Windows SQLite DLL used by ShortcutXL's bundled Python runtime.
-- **Default model update** - Updated the default model to Fable.
+- **Default model update** - Updated the default model to Fable for individual users, while team accounts continue to use Opus 4.8.
 
 ## [0.3.61]
 

package/binary-provenance.json

@@ -50,13 +50,13 @@
       "builtBy": "third-party",
       "verification": "Downloaded from python.org CPython release artifacts; verify upstream SHA/signature before vendoring."
     },
-    {
-      "pattern": "xll/python/sqlite3.dll",
-      "source": "SQLite official precompiled Windows x64 DLL",
-      "version": "3.53.2",
-      "builtBy": "third-party",
-      "verification": "Downloaded from sqlite.org sqlite-dll-win-x64-3530200.zip; upstream SHA3-256 is b898ced2e0627999d7d0b9d554ea53086a9b165e52ae743277d115dcd39e6868, and vendor-python.ps1 verifies extracted sqlite3.dll SHA256 73b045c910fc19a069bae2e2c7ebb5ea66fe6c85f166535a6e07e09155cd9e6d before copying."
-    },
+    {
+      "pattern": "xll/python/sqlite3.dll",
+      "source": "SQLite official precompiled Windows x64 DLL",
+      "version": "3.53.2",
+      "builtBy": "third-party",
+      "verification": "Downloaded from sqlite.org sqlite-dll-win-x64-3530200.zip; upstream SHA3-256 is b898ced2e0627999d7d0b9d554ea53086a9b165e52ae743277d115dcd39e6868, and vendor-python.ps1 verifies extracted sqlite3.dll SHA256 73b045c910fc19a069bae2e2c7ebb5ea66fe6c85f166535a6e07e09155cd9e6d before copying."
+    },
     {
       "pattern": "xll/python/vcruntime*.dll",
       "source": "Microsoft Visual C++ runtime library bundled with CPython Windows embeddable runtime",

package/dist/app/providers/model-registry.d.ts

@@ -14,6 +14,7 @@ export declare class ModelRegistry {
     private customProviderApiKeys;
     private registeredProviders;
     private registeredOAuthProviderIds;
+    private modelAvailabilityFilter;
     private loadError;
     constructor(authStorage: AuthStorage, modelsJsonPath?: string | undefined);
     /**
@@ -24,6 +25,8 @@ export declare class ModelRegistry {
      * Get any error from loading models.json (undefined if no error).
      */
     getError(): string | undefined;
+    setModelAvailabilityFilter(filter?: (model: Model<Api>) => boolean): void;
+    private getPolicyAllowedModels;
     private loadModels;
     /** Load built-in models and apply provider/model overrides */
     private loadBuiltInModels;

package/dist/app/providers/model-registry.js

@@ -169,6 +169,7 @@ export class ModelRegistry {
     customProviderApiKeys = new Map();
     registeredProviders = new Map();
     registeredOAuthProviderIds = new Set();
+    modelAvailabilityFilter = () => true;
     loadError = undefined;
     constructor(authStorage, modelsJsonPath = join(getAgentDir(), 'models.json')) {
         this.authStorage = authStorage;
@@ -207,6 +208,12 @@ export class ModelRegistry {
     getError() {
         return this.loadError;
     }
+    setModelAvailabilityFilter(filter) {
+        this.modelAvailabilityFilter = filter ?? (() => true);
+    }
+    getPolicyAllowedModels() {
+        return this.models.filter((model) => this.modelAvailabilityFilter(model));
+    }
     loadModels() {
         // Load custom models and overrides from models.json
         const { models: customModels, overrides, modelOverrides, error } = this.modelsJsonPath
@@ -403,25 +410,28 @@ export class ModelRegistry {
      * If models.json had errors, returns only built-in models.
      */
     getAll() {
-        return this.models;
+        return this.getPolicyAllowedModels();
     }
     /**
      * Get only models that have auth configured.
      * This is a fast check that doesn't refresh OAuth tokens.
      */
     getAvailable() {
-        return this.models.filter((m) => this.authStorage.hasAuth(m.provider));
+        return this.getPolicyAllowedModels().filter((m) => this.authStorage.hasAuth(m.provider));
     }
     /**
      * Find a model by provider and ID.
      */
     find(provider, modelId) {
-        return this.models.find((m) => m.provider === provider && m.id === modelId);
+        return this.getPolicyAllowedModels().find((m) => m.provider === provider && m.id === modelId);
     }
     /**
      * Get API key for a model.
      */
     async getApiKey(model) {
+        if (!this.modelAvailabilityFilter(model)) {
+            return undefined;
+        }
         return this.authStorage.getApiKey(model.provider);
     }
     /**

package/dist/app/providers/model-resolver.js

@@ -54,6 +54,12 @@ export const defaultModelPerProvider = {
     opencode: SHORTCUT_MODEL_ID.ClaudeOpus48,
     'kimi-coding': 'kimi-k2-thinking'
 };
+function getDefaultModelCandidatesForProvider(provider) {
+    if (provider === SHORTCUT_PROVIDER_ID) {
+        return [SHORTCUT_MODEL_ID.ClaudeFable5, SHORTCUT_MODEL_ID.ClaudeOpus48];
+    }
+    return [defaultModelPerProvider[provider]].filter((modelId) => !!modelId);
+}
 /**
  * Helper to check if a model ID looks like an alias (no date suffix)
  * Dates are typically in format: -20241022 or -20250929
@@ -320,10 +326,15 @@ export async function findInitialModel(options) {
     if (availableModels.length > 0) {
         // Try to find a default model from known providers
         for (const provider of Object.keys(defaultModelPerProvider)) {
-            const defaultId = defaultModelPerProvider[provider];
-            const match = availableModels.find((m) => m.provider === provider && m.id === defaultId);
-            if (match) {
-                return { model: match, thinkingLevel: DEFAULT_THINKING_LEVEL, fallbackMessage: undefined };
+            for (const defaultId of getDefaultModelCandidatesForProvider(provider)) {
+                const match = availableModels.find((m) => m.provider === provider && m.id === defaultId);
+                if (match) {
+                    return {
+                        model: match,
+                        thinkingLevel: DEFAULT_THINKING_LEVEL,
+                        fallbackMessage: undefined
+                    };
+                }
             }
         }
         // If no default found, use first available

package/dist/cli.js

@@ -39508,6 +39508,12 @@ var init_policy = __esm({
 });
 
 // src/model-ids.ts
+function isShortcutTeamRestrictedModel(model) {
+  return model?.provider === SHORTCUT_PROVIDER_ID && model.id === SHORTCUT_MODEL_ID.ClaudeFable5;
+}
+function isShortcutModelAllowedForTeamAccount(model, teamAccount) {
+  return !teamAccount || !isShortcutTeamRestrictedModel(model);
+}
 function isShortcutFastModeModel(model) {
   return model?.id === SHORTCUT_MODEL_ID.ClaudeOpus48 || model?.id === SHORTCUT_MODEL_ID.Gpt55;
 }
@@ -152736,6 +152742,7 @@ var init_model_registry = __esm({
       customProviderApiKeys = /* @__PURE__ */ new Map();
       registeredProviders = /* @__PURE__ */ new Map();
       registeredOAuthProviderIds = /* @__PURE__ */ new Set();
+      modelAvailabilityFilter = () => true;
       loadError = void 0;
       /**
        * Reload models from disk (built-in + custom from models.json).
@@ -152759,6 +152766,12 @@ var init_model_registry = __esm({
       getError() {
         return this.loadError;
       }
+      setModelAvailabilityFilter(filter2) {
+        this.modelAvailabilityFilter = filter2 ?? (() => true);
+      }
+      getPolicyAllowedModels() {
+        return this.models.filter((model) => this.modelAvailabilityFilter(model));
+      }
       loadModels() {
         const {
           models: customModels,
@@ -152958,25 +152971,28 @@ File: ${modelsJsonPath}`
        * If models.json had errors, returns only built-in models.
        */
       getAll() {
-        return this.models;
+        return this.getPolicyAllowedModels();
       }
       /**
        * Get only models that have auth configured.
        * This is a fast check that doesn't refresh OAuth tokens.
        */
       getAvailable() {
-        return this.models.filter((m3) => this.authStorage.hasAuth(m3.provider));
+        return this.getPolicyAllowedModels().filter((m3) => this.authStorage.hasAuth(m3.provider));
       }
       /**
        * Find a model by provider and ID.
        */
       find(provider, modelId) {
-        return this.models.find((m3) => m3.provider === provider && m3.id === modelId);
+        return this.getPolicyAllowedModels().find((m3) => m3.provider === provider && m3.id === modelId);
       }
       /**
        * Get API key for a model.
        */
       async getApiKey(model) {
+        if (!this.modelAvailabilityFilter(model)) {
+          return void 0;
+        }
         return this.authStorage.getApiKey(model.provider);
       }
       /**
@@ -153143,6 +153159,12 @@ function resolveExactModelRef(availableModels, requested) {
     error: `Ambiguous model "${requested}". Use one of: ${matches.map(formatModelRef).join(", ")}.`
   };
 }
+function getDefaultModelCandidatesForProvider(provider) {
+  if (provider === SHORTCUT_PROVIDER_ID) {
+    return [SHORTCUT_MODEL_ID.ClaudeFable5, SHORTCUT_MODEL_ID.ClaudeOpus48];
+  }
+  return [defaultModelPerProvider[provider]].filter((modelId) => !!modelId);
+}
 function isAlias(id) {
   if (id.endsWith("-latest")) return true;
   const datePattern = /-\d{8}$/;
@@ -153339,10 +153361,15 @@ async function findInitialModel(options2) {
   const availableModels = await modelRegistry2.getAvailable();
   if (availableModels.length > 0) {
     for (const provider of Object.keys(defaultModelPerProvider)) {
-      const defaultId = defaultModelPerProvider[provider];
-      const match2 = availableModels.find((m3) => m3.provider === provider && m3.id === defaultId);
-      if (match2) {
-        return { model: match2, thinkingLevel: DEFAULT_THINKING_LEVEL, fallbackMessage: void 0 };
+      for (const defaultId of getDefaultModelCandidatesForProvider(provider)) {
+        const match2 = availableModels.find((m3) => m3.provider === provider && m3.id === defaultId);
+        if (match2) {
+          return {
+            model: match2,
+            thinkingLevel: DEFAULT_THINKING_LEVEL,
+            fallbackMessage: void 0
+          };
+        }
       }
     }
     return {
@@ -484102,6 +484129,24 @@ function getFastModeDisabledReasonForUser(userInfo) {
 function resolvePromptEngine(userInfo) {
   return isMogRuntimeEnabledForUser(userInfo) && isMogSdkAvailable() ? "mog" : "com";
 }
+function applyShortcutModelPolicyForUser(modelRegistry2, userInfo) {
+  const teamAccount = Boolean(userInfo?.teamId);
+  modelRegistry2.setModelAvailabilityFilter(
+    (model) => isShortcutModelAllowedForTeamAccount(model, teamAccount)
+  );
+}
+async function moveSessionOffPolicyDeniedModel(session, modelRegistry2) {
+  const currentModel = session?.model;
+  if (!session || !currentModel) return;
+  if (modelRegistry2.find(currentModel.provider, currentModel.id)) return;
+  const availableModels = await modelRegistry2.getAvailable();
+  const fallback = availableModels.find(
+    (model) => model.provider === SHORTCUT_PROVIDER_ID && model.id === SHORTCUT_MODEL_ID.ClaudeOpus48
+  ) ?? availableModels.find((model) => model.provider === SHORTCUT_PROVIDER_ID) ?? availableModels[0];
+  if (fallback) {
+    await session.setModel(fallback);
+  }
+}
 async function refreshSessionForMogPolicyChange(session) {
   if (!session) return;
   await session.reload();
@@ -484179,6 +484224,7 @@ async function main(args) {
     }
   });
   let shortcutUserInfo = await refreshShortcutUserInfoLoggerContext(authStorage, clientLogger);
+  applyShortcutModelPolicyForUser(modelRegistry2, shortcutUserInfo);
   const mogConfigured = isNewSheetEnabled();
   const mogRuntimeEnabled = isMogRuntimeEnabledForUser(shortcutUserInfo);
   const mogSdkAvailable = mogRuntimeEnabled && isMogSdkAvailable();
@@ -484451,6 +484497,15 @@ async function main(args) {
     });
     if (refreshedShortcutUserInfo !== void 0) {
       shortcutUserInfo = refreshedShortcutUserInfo;
+      applyShortcutModelPolicyForUser(modelRegistry2, shortcutUserInfo);
+      if (parsed.model && sessionOptions.model && !modelRegistry2.find(sessionOptions.model.provider, sessionOptions.model.id)) {
+        console.error(
+          source_default.red(
+            `Model ${sessionOptions.model.provider}/${sessionOptions.model.id} is not available for team accounts.`
+          )
+        );
+        process.exit(1);
+      }
     }
   }
   sessionOptions.fastModeAllowed = isFastModeAllowedForUser(shortcutUserInfo);
@@ -484667,6 +484722,7 @@ async function main(args) {
         const previousMogRuntimeEnabled = isMogRuntimeEnabledForUser(shortcutUserInfo);
         const userInfo = await resolveShortcutUserInfo(authStorage);
         shortcutUserInfo = userInfo;
+        applyShortcutModelPolicyForUser(modelRegistry2, shortcutUserInfo);
         setDefaultEnginePrompts(resolvePromptEngine(shortcutUserInfo));
         const resolvedUserId = userInfo?.userId ?? userId;
         if (userInfo) {
@@ -484689,6 +484745,7 @@ async function main(args) {
           isFastModeAllowedForUser(userInfo),
           getFastModeDisabledReasonForUser(userInfo) ?? "team"
         );
+        await moveSessionOffPolicyDeniedModel(sessionRef, modelRegistry2);
         setRemoteControlTeamAccount(Boolean(userInfo?.teamId));
         if (isMogRuntimeEnabledForUser(shortcutUserInfo) !== previousMogRuntimeEnabled) {
           await refreshSessionForMogPolicyChange(sessionRef);
@@ -484722,6 +484779,7 @@ async function main(args) {
         });
         const previousMogRuntimeEnabled = isMogRuntimeEnabledForUser(shortcutUserInfo);
         shortcutUserInfo = null;
+        applyShortcutModelPolicyForUser(modelRegistry2, shortcutUserInfo);
         setDefaultEnginePrompts(resolvePromptEngine(shortcutUserInfo));
         sessionRef?.setFastModeAllowed(false, "login");
         setRemoteControlTeamAccount(false);

package/dist/embedded-agent/model-registry.d.ts

@@ -28,6 +28,7 @@ export interface CreateShortcutXLAgentModelOptions {
     readonly baseUrl?: string;
     readonly availableModelIds?: readonly string[];
     readonly gatewayModelIds?: readonly string[];
+    readonly teamAccount?: boolean;
 }
 export interface CreateShortcutXLAgentModelRegistryOptions extends CreateShortcutXLAgentModelOptions {
     getAccessToken?: () => Promise<string | undefined>;

package/dist/embedded-agent/model-registry.js

@@ -1,4 +1,4 @@
-import { SHORTCUT_MODEL_ID } from '../model-ids.js';
+import { isShortcutModelAllowedForTeamAccount, SHORTCUT_MODEL_ID } from '../model-ids.js';
 import { createShortcutPublicModelDefinitions, DEFAULT_SHORTCUT_MODEL_ID } from '../shortcut-model-catalog.js';
 /** Provider tag the registry uses to gate auth and model lookup. */
 export const ShortcutXLAgentProviderId = {
@@ -27,6 +27,34 @@ function formatGatewayModelName(modelId) {
         .join(' ');
 }
 function createGatewayModel(modelId, baseUrl) {
+    if (modelId === 'qwen/qwen3.7-max') {
+        return {
+            id: modelId,
+            name: 'Qwen 3.7 Max',
+            api: 'shortcut-llm',
+            provider: ShortcutXLAgentProviderId.Shortcut,
+            baseUrl,
+            reasoning: true,
+            input: ['text'],
+            cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+            contextWindow: 1_000_000,
+            maxTokens: 128000
+        };
+    }
+    if (modelId === 'qwen/qwen3.7-plus') {
+        return {
+            id: modelId,
+            name: 'Qwen 3.7 Plus',
+            api: 'shortcut-llm',
+            provider: ShortcutXLAgentProviderId.Shortcut,
+            baseUrl,
+            reasoning: true,
+            input: ['text', 'image'],
+            cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+            contextWindow: 1_000_000,
+            maxTokens: 128000
+        };
+    }
     return {
         id: modelId,
         name: formatGatewayModelName(modelId),
@@ -90,8 +118,10 @@ function resolveShortcutXLAgentModel(modelId, options = {}) {
             : undefined;
     }
     const selectableModels = getSelectableModels(models, options);
-    return (selectableModels.find((model) => model.id === DEFAULT_SHORTCUTXL_AGENT_MODEL_ID) ??
-        selectableModels[0]);
+    const defaultModelId = options.teamAccount
+        ? ShortcutXLAgentModelId.ClaudeOpus48
+        : DEFAULT_SHORTCUTXL_AGENT_MODEL_ID;
+    return selectableModels.find((model) => model.id === defaultModelId) ?? selectableModels[0];
 }
 /** Predicate: is this an internal-only model that should never appear in UI selectors? */
 function isInternalModel(modelId) {
@@ -101,7 +131,9 @@ function getSelectableModels(models, options = {}) {
     const availableModelIds = options.availableModelIds === undefined
         ? undefined
         : new Set(options.availableModelIds.map((modelId) => modelId.trim()).filter(Boolean));
-    return models.filter((model) => !isInternalModel(model.id) && (!availableModelIds || availableModelIds.has(model.id)));
+    return models.filter((model) => !isInternalModel(model.id) &&
+        isShortcutModelAllowedForTeamAccount(model, options.teamAccount === true) &&
+        (!availableModelIds || availableModelIds.has(model.id)));
 }
 /** Build a `AgentModelRegistry` over the ShortcutXL model catalog. */
 export function createShortcutXLAgentModelRegistry(options = {}) {

package/dist/main.js

@@ -60,7 +60,7 @@ import { SHORTCUT_API_HEADERS } from './endpoints.js';
 import { createLocalAgentSession } from './local/index.js';
 import { handleConfigCommand, handleShortcutAuthCommand, handleXllStartupStatus, isTruthyEnvFlag, prepareInitialMessage, readPipedStdin, runInteractiveShell, validateAgentMode } from './main-helpers.js';
 import { getCurrentMode, MODE, setCurrentMode } from './mode-names.js';
-import { SHORTCUT_PROVIDER_ID } from './model-ids.js';
+import { isShortcutModelAllowedForTeamAccount, SHORTCUT_MODEL_ID, SHORTCUT_PROVIDER_ID } from './model-ids.js';
 import { attachSessionUpload, BashApprovalComponent, createApprovalGate, createBatchingApprovalGate, createInteractiveSessionClient, createNetworkPrompt, createPrintModeSessionClient, createSandboxBashTool, createShortySlashCommand, ensureWslSandbox, ExcelApprovalComponent, exportFromFile, FileAccessApprovalComponent, getTraceHooks, hasCustomExtensionUI, initTheme, InteractiveMode, isDistroInstalled, isWsl2Available, KeybindingsManager, runPrintMode, SANDBOX_DISTRO, startCronStatusPolling, startDurableMemoryStatusUpdater, startLoopStatusPolling, startSkillProposalStatusUpdater, stopThemeWatcher, SwitchModeApprovalComponent, TaskSpawnApprovalComponent } from './shell/index.js';
 import { resolveStartupXll } from './startup/startup-xll.js';
 import { printTimings, time } from './startup/timings.js';
@@ -354,6 +354,24 @@ function getFastModeDisabledReasonForUser(userInfo) {
 function resolvePromptEngine(userInfo) {
     return isMogRuntimeEnabledForUser(userInfo) && isMogSdkAvailable() ? 'mog' : 'com';
 }
+function applyShortcutModelPolicyForUser(modelRegistry, userInfo) {
+    const teamAccount = Boolean(userInfo?.teamId);
+    modelRegistry.setModelAvailabilityFilter((model) => isShortcutModelAllowedForTeamAccount(model, teamAccount));
+}
+async function moveSessionOffPolicyDeniedModel(session, modelRegistry) {
+    const currentModel = session?.model;
+    if (!session || !currentModel)
+        return;
+    if (modelRegistry.find(currentModel.provider, currentModel.id))
+        return;
+    const availableModels = await modelRegistry.getAvailable();
+    const fallback = availableModels.find((model) => model.provider === SHORTCUT_PROVIDER_ID && model.id === SHORTCUT_MODEL_ID.ClaudeOpus48) ??
+        availableModels.find((model) => model.provider === SHORTCUT_PROVIDER_ID) ??
+        availableModels[0];
+    if (fallback) {
+        await session.setModel(fallback);
+    }
+}
 async function refreshSessionForMogPolicyChange(session) {
     if (!session)
         return;
@@ -441,6 +459,7 @@ export async function main(args) {
         }
     });
     let shortcutUserInfo = await refreshShortcutUserInfoLoggerContext(authStorage, clientLogger);
+    applyShortcutModelPolicyForUser(modelRegistry, shortcutUserInfo);
     const mogConfigured = isNewSheetEnabled();
     const mogRuntimeEnabled = isMogRuntimeEnabledForUser(shortcutUserInfo);
     const mogSdkAvailable = mogRuntimeEnabled && isMogSdkAvailable();
@@ -725,6 +744,13 @@ export async function main(args) {
         });
         if (refreshedShortcutUserInfo !== undefined) {
             shortcutUserInfo = refreshedShortcutUserInfo;
+            applyShortcutModelPolicyForUser(modelRegistry, shortcutUserInfo);
+            if (parsed.model &&
+                sessionOptions.model &&
+                !modelRegistry.find(sessionOptions.model.provider, sessionOptions.model.id)) {
+                console.error(chalk.red(`Model ${sessionOptions.model.provider}/${sessionOptions.model.id} is not available for team accounts.`));
+                process.exit(1);
+            }
         }
     }
     sessionOptions.fastModeAllowed = isFastModeAllowedForUser(shortcutUserInfo);
@@ -955,6 +981,7 @@ export async function main(args) {
                 const previousMogRuntimeEnabled = isMogRuntimeEnabledForUser(shortcutUserInfo);
                 const userInfo = await resolveShortcutUserInfo(authStorage);
                 shortcutUserInfo = userInfo;
+                applyShortcutModelPolicyForUser(modelRegistry, shortcutUserInfo);
                 setDefaultEnginePrompts(resolvePromptEngine(shortcutUserInfo));
                 const resolvedUserId = userInfo?.userId ?? userId;
                 if (userInfo) {
@@ -976,6 +1003,7 @@ export async function main(args) {
                     }
                 });
                 sessionRef?.setFastModeAllowed(isFastModeAllowedForUser(userInfo), getFastModeDisabledReasonForUser(userInfo) ?? 'team');
+                await moveSessionOffPolicyDeniedModel(sessionRef, modelRegistry);
                 setRemoteControlTeamAccount(Boolean(userInfo?.teamId));
                 if (isMogRuntimeEnabledForUser(shortcutUserInfo) !== previousMogRuntimeEnabled) {
                     await refreshSessionForMogPolicyChange(sessionRef);
@@ -1010,6 +1038,7 @@ export async function main(args) {
                 });
                 const previousMogRuntimeEnabled = isMogRuntimeEnabledForUser(shortcutUserInfo);
                 shortcutUserInfo = null;
+                applyShortcutModelPolicyForUser(modelRegistry, shortcutUserInfo);
                 setDefaultEnginePrompts(resolvePromptEngine(shortcutUserInfo));
                 sessionRef?.setFastModeAllowed(false, 'login');
                 setRemoteControlTeamAccount(false);

package/dist/model-ids.d.ts

@@ -15,6 +15,14 @@ export declare const SHORTCUT_MODEL_REF: {
     readonly Gpt55: "shortcut/gpt-5.5-2026-04-23";
     readonly FreeModel: "shortcut/free-model";
 };
+export declare function isShortcutTeamRestrictedModel(model: {
+    readonly provider?: string;
+    readonly id?: string;
+} | undefined): boolean;
+export declare function isShortcutModelAllowedForTeamAccount(model: {
+    readonly provider?: string;
+    readonly id?: string;
+} | undefined, teamAccount: boolean): boolean;
 export declare function isShortcutFastModeModel(model: {
     readonly provider?: string;
     readonly id?: string;

package/dist/model-ids.js

@@ -15,6 +15,12 @@ export const SHORTCUT_MODEL_REF = {
     Gpt55: `${SHORTCUT_PROVIDER_ID}/${SHORTCUT_MODEL_ID.Gpt55}`,
     FreeModel: `${SHORTCUT_PROVIDER_ID}/${SHORTCUT_MODEL_ID.FreeModel}`
 };
+export function isShortcutTeamRestrictedModel(model) {
+    return model?.provider === SHORTCUT_PROVIDER_ID && model.id === SHORTCUT_MODEL_ID.ClaudeFable5;
+}
+export function isShortcutModelAllowedForTeamAccount(model, teamAccount) {
+    return !teamAccount || !isShortcutTeamRestrictedModel(model);
+}
 export function isShortcutFastModeModel(model) {
     return model?.id === SHORTCUT_MODEL_ID.ClaudeOpus48 || model?.id === SHORTCUT_MODEL_ID.Gpt55;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shortcutxl",
-  "version": "0.3.62",
+  "version": "0.3.63",
   "license": "MIT",
   "type": "module",
   "types": "./dist/index.d.ts",