shortcutxl 0.3.77 → 0.3.78

package/BINARY-INVENTORY.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-07-28T23:48:58.499Z",
+  "generatedAt": "2026-07-31T01:21:34.635Z",
   "package": "shortcutxl",
   "binaryExtensions": [
     ".dll",
@@ -11,7 +11,7 @@
   "files": [
     {
       "path": "xll/ShortcutXL.xll",
-      "sha256": "47870ca8a337a4bf1c589825ff2b3c71d56db48729660a925d9a76ace4da5367",
+      "sha256": "f5fb7fe280524977d746bd2145fe6106f68af14bf252c8ec7e0531a958293d19",
       "source": "ShortcutXL native XLL build",
       "version": "package",
       "builtBy": "shortcut",
@@ -523,7 +523,7 @@
     },
     {
       "path": "xll/python/Scripts/httpx.exe",
-      "sha256": "bb9c6335b1b3f9901d072bd24324bf626a8472c4c272f1ca3c7cb2d2c9cd69fe",
+      "sha256": "ce6aa4fa98e8669779d14dfa81d7aba7659132525e38ca376cc747e5032801f5",
       "source": "httpx console launcher installed into embedded Python",
       "version": "see packaged httpx distribution",
       "builtBy": "third-party",
@@ -531,7 +531,7 @@
     },
     {
       "path": "xll/python/Scripts/idna.exe",
-      "sha256": "02a133c4c3c39adb9e83e6326fe6118bc8c5433ac7a061acf02400f2cb753311",
+      "sha256": "53fc2e979b03a27cf3c7f752a6862966469095fc5194b9e07810fc20125209b1",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",
@@ -539,7 +539,7 @@
     },
     {
       "path": "xll/python/Scripts/pip.exe",
-      "sha256": "9d872f7ca3375874562352dad0fa7dfed3098081765b3dc961f00017410d86d8",
+      "sha256": "e71df67dcf21cda30991bf1e75794ae1b0687e6585c9b181b13fa363ecf6b19c",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -547,7 +547,7 @@
     },
     {
       "path": "xll/python/Scripts/pip3.13.exe",
-      "sha256": "9d872f7ca3375874562352dad0fa7dfed3098081765b3dc961f00017410d86d8",
+      "sha256": "e71df67dcf21cda30991bf1e75794ae1b0687e6585c9b181b13fa363ecf6b19c",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -555,7 +555,7 @@
     },
     {
       "path": "xll/python/Scripts/pip3.exe",
-      "sha256": "9d872f7ca3375874562352dad0fa7dfed3098081765b3dc961f00017410d86d8",
+      "sha256": "e71df67dcf21cda30991bf1e75794ae1b0687e6585c9b181b13fa363ecf6b19c",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -563,7 +563,7 @@
     },
     {
       "path": "xll/python/Scripts/pywin32_postinstall.exe",
-      "sha256": "f86cd7eab9df33ccd6113b2728066f304afe4cb7918a74633d6c814445d78c1b",
+      "sha256": "f7f95b72e1260c6a23e2faabd4a90f067ec35e9b02587dec1a80f8d2b2bff931",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",
@@ -571,7 +571,7 @@
     },
     {
       "path": "xll/python/Scripts/pywin32_testall.exe",
-      "sha256": "9fc079ece204431434b3684bb0d2ba9fb7bb21a7a899e9a5d4aba99fb93e7ba6",
+      "sha256": "2597a03f242c12d8e4d6563ee761c7f7ee25455b83db032c6d4bfd6df46a0c4d",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.3.78]
+
+- **More performant spreadsheet operations** - Read/write operations should be much faster and less buggy.
+- **Linked local files** - Open local file links from agent responses in both the CLI and native app.
+- **Safer read-only modes** - Ask and Plan modes no longer expose shell execution, and mode switching avoids unnecessary skill scans.
+- **Native app polish** - Refreshed the native app design and improved chat autoscrolling during active sessions.
+- **Auto-update reminders** - Update reminders will be surfaced in open terminal windows.
+
 ## [0.3.77]
 
 - **Native app file mentions** - Type `@` in the native app to search and attach workspace files with the same completion behavior as the CLI.

package/dist/app/agent-session.d.ts

@@ -170,10 +170,7 @@ export declare class AgentSession {
     /** Details from the last prePromptContext call (e.g. { workbooks: string[] }). Read by TUI for annotations. */
     lastPrePromptDetails?: unknown;
     private readonly _sessionState;
-    private _collabClient;
     private _sheetPool;
-    private _collabAwareness;
-    private _collabSync;
     private _modelRegistry;
     /** Fire-and-forget tool-call summary generation. */
     private _summaryEmitter;
@@ -419,22 +416,10 @@ export declare class AgentSession {
     getFollowUpMessages(): readonly string[];
     /** Resource loader for skills, prompts, and context files used by this session. */
     get resourceLoader(): RuntimeResourceLoader;
-    /** Active collaboration client when the session is part of a collab room, otherwise null. */
-    get collabClient(): import('./collab/collab-client.js').CollabClient | null;
-    /** Attach or detach the collaboration client for this session. */
-    set collabClient(client: import('./collab/collab-client.js').CollabClient | null);
     /** Sheet-engine pool currently bound to this session, or null if unbound. */
     get sheetPool(): import('@shortcut/mog-sandbox-runtime').SheetEnginePool | null;
     /** Attach or detach the sheet-engine pool used by new-sheet flows. */
     set sheetPool(pool: import('@shortcut/mog-sandbox-runtime').SheetEnginePool | null);
-    /** Awareness layer for the active collab session (peer cursors, presence), or null. */
-    get collabAwareness(): import('./collab/awareness.js').CollabAwareness | null;
-    /** Attach or detach the collab awareness layer. */
-    set collabAwareness(awareness: import('./collab/awareness.js').CollabAwareness | null);
-    /** Collab document sync controller for this session, or null if not in a room. */
-    get collabSync(): import('./collab/collab-sync.js').CollabSync | null;
-    /** Attach or detach the collab document sync controller. */
-    set collabSync(sync: import('./collab/collab-sync.js').CollabSync | null);
     /**
      * Abort current operation and wait for agent to become idle.
      */

package/dist/app/agent-session.js

@@ -98,14 +98,8 @@ export class AgentSession {
     /** Details from the last prePromptContext call (e.g. { workbooks: string[] }). Read by TUI for annotations. */
     lastPrePromptDetails;
     _sessionState = new SessionState();
-    // Collaboration client (lazily created on first /collab use)
-    _collabClient = null;
     // Sheet engine pool (set from main.ts when new-sheet mode is active)
     _sheetPool = null;
-    // Collaboration awareness (created after joining a room with an active workbook)
-    _collabAwareness = null;
-    // CRDT sync orchestrator (created after joining a room)
-    _collabSync = null;
     // Model registry for API key resolution
     _modelRegistry;
     /** Fire-and-forget tool-call summary generation. */
@@ -614,13 +608,6 @@ export class AgentSession {
         this._disconnectFromAgent();
         this._summaryEmitter.abort();
         this._eventListeners = [];
-        // Clean up collaboration resources
-        this._collabSync?.destroy();
-        this._collabSync = null;
-        this._collabAwareness?.destroy();
-        this._collabAwareness = null;
-        this._collabClient?.destroy();
-        this._collabClient = null;
     }
     /**
      * Wait for any in-flight suggestion generation to complete.
@@ -1239,14 +1226,6 @@ export class AgentSession {
     get resourceLoader() {
         return this._resourceLoader;
     }
-    /** Active collaboration client when the session is part of a collab room, otherwise null. */
-    get collabClient() {
-        return this._collabClient;
-    }
-    /** Attach or detach the collaboration client for this session. */
-    set collabClient(client) {
-        this._collabClient = client;
-    }
     /** Sheet-engine pool currently bound to this session, or null if unbound. */
     get sheetPool() {
         return this._sheetPool;
@@ -1255,22 +1234,6 @@ export class AgentSession {
     set sheetPool(pool) {
         this._sheetPool = pool;
     }
-    /** Awareness layer for the active collab session (peer cursors, presence), or null. */
-    get collabAwareness() {
-        return this._collabAwareness;
-    }
-    /** Attach or detach the collab awareness layer. */
-    set collabAwareness(awareness) {
-        this._collabAwareness = awareness;
-    }
-    /** Collab document sync controller for this session, or null if not in a room. */
-    get collabSync() {
-        return this._collabSync;
-    }
-    /** Attach or detach the collab document sync controller. */
-    set collabSync(sync) {
-        this._collabSync = sync;
-    }
     /**
      * Abort current operation and wait for agent to become idle.
      */

package/dist/app/extensions/slash-commands.js

@@ -42,9 +42,7 @@ const ALL_BUILTIN_SLASH_COMMANDS = [
     { name: 'port-skills', description: 'Discover and register external skill roots' },
     { name: 'download-skills', description: 'Download skills from cloud' },
     { name: 'upload-skills', description: 'Upload local skills to cloud' },
-    { name: 'reload', description: 'Reload extensions, skills, prompts, and themes' },
-    // Collaboration
-    { name: 'collab', description: 'Create or join a collaboration room' }
+    { name: 'reload', description: 'Reload extensions, skills, prompts, and themes' }
 ];
 /** All builtin command names, used to prevent extension collisions. */
 export const ALL_BUILTIN_SLASH_COMMAND_NAMES = new Set(ALL_BUILTIN_SLASH_COMMANDS.map((cmd) => cmd.name));

package/dist/app/modes/action/agent.js

@@ -4,10 +4,9 @@
  * Provides the spreadsheet execution tool set for making changes to the workbook.
  * Can switch to plan or installation mode.
  */
-import { MODE } from '../../../mode-names.js';
 import { ACTION_SWITCH_MODE, BASH, EXECUTE_CODE, EXECUTE_TOOL, GET_TOOL_INFO, MCP_TOOL_NAMES, REFRESH_CONTEXT, SEND_MESSAGE, TAKE_SCREENSHOT, TASK, WRITE } from '../../../tool-names.js';
+import { ACTION_MODE_METADATA } from '../metadata.js';
 import { buildActionPrompt } from './prompt.js';
-const DESCRIPTION = 'Execute changes to the spreadsheet.';
 export const ACTION_AGENT_TOOL_NAMES = [
     BASH,
     WRITE,
@@ -24,11 +23,11 @@ export const ACTION_AGENT_TOOL_NAMES = [
 /** Construct the action-mode agent definition with the full execution toolset. */
 export function actionAgent() {
     return {
-        name: MODE.ACTION,
-        description: DESCRIPTION,
+        name: ACTION_MODE_METADATA.name,
+        description: ACTION_MODE_METADATA.description,
         systemPrompt: buildActionPrompt(),
         tools: ACTION_AGENT_TOOL_NAMES,
-        switchTo: [MODE.PLAN, MODE.INSTALLATION]
+        switchTo: ACTION_MODE_METADATA.switchTo
     };
 }
 //# sourceMappingURL=agent.js.map

package/dist/app/modes/ask/agent.js

@@ -4,12 +4,10 @@
  * Reviews, audits, and explains spreadsheet content without modification.
  * This is a sink state: the agent cannot switch out of ask mode.
  */
-import { MODE } from '../../../mode-names.js';
-import { BASH, EXECUTE_CODE, EXECUTE_TOOL, FIND, GET_TOOL_INFO, GREP, LLM_ANALYSIS, LS, MCP_TOOL_NAMES, READ, TAKE_SCREENSHOT } from '../../../tool-names.js';
+import { EXECUTE_CODE, EXECUTE_TOOL, FIND, GET_TOOL_INFO, GREP, LLM_ANALYSIS, LS, MCP_TOOL_NAMES, READ, TAKE_SCREENSHOT } from '../../../tool-names.js';
+import { ASK_MODE_METADATA } from '../metadata.js';
 import { buildAskPrompt } from './prompt.js';
-const DESCRIPTION = 'Read-only analysis mode — reviews, audits, and explains spreadsheet content. Switch to ask mode for user queries that center on audit, review, and understanding without any spreadsheet modifications.';
 const TOOLS = [
-    BASH,
     EXECUTE_CODE,
     READ,
     GREP,
@@ -23,8 +21,8 @@ const TOOLS = [
 ];
 export function askAgent() {
     return {
-        name: MODE.ASK,
-        description: DESCRIPTION,
+        name: ASK_MODE_METADATA.name,
+        description: ASK_MODE_METADATA.description,
         systemPrompt: buildAskPrompt(),
         tools: TOOLS
     };

package/dist/app/modes/index.js

@@ -9,29 +9,39 @@ export { askAgent } from './ask/agent.js';
 export { installationAgent } from './installation/agent.js';
 export { manageAgent } from './manage/agent.js';
 export { planAgent } from './plan/agent.js';
+import { MODE } from '../../mode-names.js';
 import { actionAgent } from './action/agent.js';
 import { askAgent } from './ask/agent.js';
 import { installationAgent } from './installation/agent.js';
 import { manageAgent } from './manage/agent.js';
+import { MODE_METADATA } from './metadata.js';
 import { planAgent } from './plan/agent.js';
-function buildModes() {
-    return [installationAgent(), actionAgent(), planAgent(), askAgent(), manageAgent()];
-}
+const MODE_FACTORIES = new Map([
+    [MODE.INSTALLATION, installationAgent],
+    [MODE.ACTION, actionAgent],
+    [MODE.PLAN, planAgent],
+    [MODE.ASK, askAgent],
+    [MODE.MANAGE, manageAgent]
+]);
 export function getModes() {
-    return buildModes();
+    return MODE_METADATA.map((metadata) => {
+        const factory = MODE_FACTORIES.get(metadata.name);
+        if (!factory) {
+            throw new Error(`No mode factory registered for "${metadata.name}".`);
+        }
+        return factory();
+    });
 }
 export function getMode(name) {
-    return buildModes().find((mode) => mode.name === name);
+    return MODE_FACTORIES.get(name)?.();
 }
 export function getModeNames() {
-    return buildModes().map((mode) => mode.name);
+    return MODE_METADATA.map((mode) => mode.name);
 }
 export function buildModeList() {
-    return buildModes()
-        .map((mode) => {
+    return MODE_METADATA.map((mode) => {
         const targets = mode.switchTo?.join(', ') ?? 'none';
         return `- **${mode.name}**: ${mode.description} (can switch to: ${targets})`;
-    })
-        .join('\n');
+    }).join('\n');
 }
 //# sourceMappingURL=index.js.map

package/dist/app/modes/installation/agent.js

@@ -6,8 +6,8 @@
  * Accepts optional preflight log entries to communicate what the deterministic
  * preflight script already accomplished before the agent took over.
  */
-import { MODE } from '../../../mode-names.js';
 import { BASH, EDIT, EXECUTE_CODE, GREP, INSTALLATION_SWITCH_MODE, READ, WRITE } from '../../../tool-names.js';
+import { INSTALLATION_MODE_METADATA } from '../metadata.js';
 import { buildMacInstallationPrompt } from './prompt-mac.js';
 import { buildWindowsInstallationPrompt } from './prompt-windows.js';
 function buildInstallationPrompt(preflightLog) {
@@ -16,15 +16,14 @@ function buildInstallationPrompt(preflightLog) {
     }
     return buildWindowsInstallationPrompt(preflightLog);
 }
-const DESCRIPTION = 'First-time setup for ShortcutXL.';
 const TOOLS = [READ, BASH, EDIT, WRITE, GREP, EXECUTE_CODE, INSTALLATION_SWITCH_MODE];
 export function installationAgent(preflightLog) {
     return {
-        name: MODE.INSTALLATION,
-        description: DESCRIPTION,
+        name: INSTALLATION_MODE_METADATA.name,
+        description: INSTALLATION_MODE_METADATA.description,
         systemPrompt: buildInstallationPrompt(preflightLog),
         tools: TOOLS,
-        switchTo: [MODE.ACTION]
+        switchTo: INSTALLATION_MODE_METADATA.switchTo
     };
 }
 //# sourceMappingURL=agent.js.map

package/dist/app/modes/manage/agent.js

@@ -4,16 +4,15 @@
  * Delegates workbook work to subagents, with bash for coordination files and inspection.
  * Explicit /manage can enter it, but it does not switch out again.
  */
-import { MODE } from '../../../mode-names.js';
 import { BASH, EXECUTE_TOOL, GET_TOOL_INFO, MCP_TOOL_NAMES, SEND_MESSAGE, TASK } from '../../../tool-names.js';
+import { MANAGE_MODE_METADATA } from '../metadata.js';
 import { buildManagePrompt } from './prompt.js';
-const DESCRIPTION = 'Orchestration mode — decomposes complex tasks, delegates to subagents in parallel, and synthesizes results.';
 const TOOLS = [TASK, SEND_MESSAGE, GET_TOOL_INFO, EXECUTE_TOOL, BASH, ...MCP_TOOL_NAMES];
 /** Construct the manage-mode agent definition that orchestrates work via subagents. */
 export function manageAgent() {
     return {
-        name: MODE.MANAGE,
-        description: DESCRIPTION,
+        name: MANAGE_MODE_METADATA.name,
+        description: MANAGE_MODE_METADATA.description,
         systemPrompt: buildManagePrompt(),
         tools: TOOLS
     };

package/dist/app/modes/manage/prompt.js

@@ -4,7 +4,6 @@
  * Pure orchestration mode: decomposes tasks, delegates to subagents,
  * and synthesizes results. No direct file/spreadsheet access.
  */
-import { buildCurrentSkillsSection } from '../../prompts/shared-guidelines.js';
 const MANAGE_BASE = `\
 You are Shortcut in Manage Mode — an orchestrator. You decompose tasks, delegate workbook/document work to subagents via the task tool, use bash for coordination files and lightweight inspection, and synthesize results.
 
@@ -79,6 +78,6 @@ Every task query to a subagent must include:
 
 `;
 export function buildManagePrompt() {
-    return [MANAGE_BASE, buildCurrentSkillsSection()].join('\n\n');
+    return MANAGE_BASE;
 }
 //# sourceMappingURL=prompt.js.map

package/dist/app/modes/metadata.d.ts

@@ -0,0 +1,31 @@
+export interface ModeMetadata {
+    readonly name: string;
+    readonly description: string;
+    readonly switchTo?: readonly string[];
+}
+export declare const INSTALLATION_MODE_METADATA: {
+    readonly name: "installation";
+    readonly description: "First-time setup for ShortcutXL.";
+    readonly switchTo: readonly ["action"];
+};
+export declare const ACTION_MODE_METADATA: {
+    readonly name: "action";
+    readonly description: "Execute changes to the spreadsheet.";
+    readonly switchTo: readonly ["plan", "installation"];
+};
+export declare const PLAN_MODE_METADATA: {
+    readonly name: "plan";
+    readonly description: "Read-only planning mode for exploration, clarifying requirements and drafting an implementation plan.";
+    readonly switchTo: readonly ["action"];
+};
+export declare const ASK_MODE_METADATA: {
+    readonly name: "ask";
+    readonly description: "Read-only analysis mode — reviews, audits, and explains spreadsheet content. Switch to ask mode for user queries that center on audit, review, and understanding without any spreadsheet modifications.";
+};
+export declare const MANAGE_MODE_METADATA: {
+    readonly name: "manage";
+    readonly description: "Orchestration mode — decomposes complex tasks, delegates to subagents in parallel, and synthesizes results.";
+};
+export declare const MODE_METADATA: readonly ModeMetadata[];
+export declare function getModeMetadata(name: string): ModeMetadata | undefined;
+//# sourceMappingURL=metadata.d.ts.map

package/dist/app/modes/metadata.js

@@ -0,0 +1,35 @@
+import { MODE } from '../../mode-names.js';
+export const INSTALLATION_MODE_METADATA = {
+    name: MODE.INSTALLATION,
+    description: 'First-time setup for ShortcutXL.',
+    switchTo: [MODE.ACTION]
+};
+export const ACTION_MODE_METADATA = {
+    name: MODE.ACTION,
+    description: 'Execute changes to the spreadsheet.',
+    switchTo: [MODE.PLAN, MODE.INSTALLATION]
+};
+export const PLAN_MODE_METADATA = {
+    name: MODE.PLAN,
+    description: 'Read-only planning mode for exploration, clarifying requirements and drafting an implementation plan.',
+    switchTo: [MODE.ACTION]
+};
+export const ASK_MODE_METADATA = {
+    name: MODE.ASK,
+    description: 'Read-only analysis mode — reviews, audits, and explains spreadsheet content. Switch to ask mode for user queries that center on audit, review, and understanding without any spreadsheet modifications.'
+};
+export const MANAGE_MODE_METADATA = {
+    name: MODE.MANAGE,
+    description: 'Orchestration mode — decomposes complex tasks, delegates to subagents in parallel, and synthesizes results.'
+};
+export const MODE_METADATA = [
+    INSTALLATION_MODE_METADATA,
+    ACTION_MODE_METADATA,
+    PLAN_MODE_METADATA,
+    ASK_MODE_METADATA,
+    MANAGE_MODE_METADATA
+];
+export function getModeMetadata(name) {
+    return MODE_METADATA.find((mode) => mode.name === name);
+}
+//# sourceMappingURL=metadata.js.map

package/dist/app/modes/plan/agent.js

@@ -4,13 +4,10 @@
  * Explores the workbook, asks clarifying questions, and produces an
  * implementation plan before switching to action mode for execution.
  */
-import { MODE } from '../../../mode-names.js';
-import { BASH, EXECUTE_CODE, EXECUTE_TOOL, FIND, GET_TOOL_INFO, GREP, LLM_ANALYSIS, LS, MCP_TOOL_NAMES, PLAN_SWITCH_MODE, READ, TAKE_SCREENSHOT } from '../../../tool-names.js';
+import { EXECUTE_CODE, EXECUTE_TOOL, FIND, GET_TOOL_INFO, GREP, LLM_ANALYSIS, LS, MCP_TOOL_NAMES, PLAN_SWITCH_MODE, READ, TAKE_SCREENSHOT } from '../../../tool-names.js';
+import { PLAN_MODE_METADATA } from '../metadata.js';
 import { buildPlanPrompt } from './prompt.js';
-const DESCRIPTION = `\
-Read-only planning mode for exploration, clarifying requirements and drafting an implementation plan.`;
 const TOOLS = [
-    BASH,
     EXECUTE_CODE,
     READ,
     GREP,
@@ -25,11 +22,11 @@ const TOOLS = [
 ];
 export function planAgent() {
     return {
-        name: MODE.PLAN,
-        description: DESCRIPTION,
+        name: PLAN_MODE_METADATA.name,
+        description: PLAN_MODE_METADATA.description,
         systemPrompt: buildPlanPrompt(),
         tools: TOOLS,
-        switchTo: [MODE.ACTION]
+        switchTo: PLAN_MODE_METADATA.switchTo
     };
 }
 //# sourceMappingURL=agent.js.map

package/dist/app/modes/plan/prompt.js

@@ -37,7 +37,7 @@ ${engine.execTool}
 1. Gauge user experience: If unclear from their query, ASK about their spreadsheet familiarity first - then adapt all explanations accordingly (beginners need more context, experts want concise trade-offs)
 2. After exploration: State (1) task understanding (MAX 3-4 lines), (2) list ALL open questions upfront with a brief description of each (e.g., "I need to clarify 3 things: 1) how to handle missing data, 2) whether to use formulas or static values, 3) where to place output"), (3) first question
 3. ONE question per response. Before each question, state which open items remain (e.g., "Still need to resolve: output location, formula vs static values."). If a user's answer resolves multiple items, acknowledge that and move on. Do NOT re-count or renumber — just reference the open items by topic.
-4. Write the final plan as markdown to a file under /tmp, then call switch_from_plan_mode(mode: "action", documentPath: "<that file path>").
+4. Pass the final plan directly to switch_from_plan_mode(mode: "action", reason: "<the full plan>").
 5. If plan rejected: Restart question cycle to understand needed changes
 
 **Critical Rules:**
@@ -66,7 +66,7 @@ Structure:
 - **[Bold question]?**
 
 **Final Plan Format:**
-Write the full plan as markdown to a file under /tmp. Then call switch_from_plan_mode(mode: "action", documentPath: "<that file path>").
+Pass the full plan as markdown directly in the reason argument to switch_from_plan_mode(mode: "action", reason: "<the full plan>").
 
 \`\`\`
 Task: [One sentence]
@@ -83,7 +83,7 @@ Things to Watch Out For:
 - [Key considerations and edge cases]
 \`\`\`
 
-MUST call switch_from_plan_mode(mode: "action", documentPath: "<that file path>") - do NOT output plan directly.
+MUST call switch_from_plan_mode(mode: "action", reason: "<the full plan>") - do NOT output plan directly.
 `;
 // ---------------------------------------------------------------------------
 // Assembly

package/dist/app/prompts/com-api.js

@@ -52,7 +52,7 @@ Multiple agents may operate on the same Excel instance concurrently. Follow thes
 
 ### Guidelines
 - Use wb.getWorkbookSummary() to get sheet names and used ranges for a workbook before deeper reads
-- Use wrappers over raw COM when wrappers are available, and use COM for everything else
+- Use wrapper methods for cell writes so their exact destination ranges are tracked; raw COM writes execute but do not produce cell diffs. Use COM when no wrapper exists
 - NEVER use Sheet.Copy — it silently creates new workbooks via pywin32. Use range.Copy for data transfer
 - NEVER use Sheet.Move with keyword args (After=x, Before=x) — pywin32 bug creates new workbooks. Use wb.moveSheet(name, index) instead
 - Watch out for indexing: COM collections are 1-based (ws.Cells(1,1) is A1), but Python tuples are 0-based

package/dist/app/prompts/shared-guidelines.js

@@ -31,6 +31,10 @@ const COM_RUNTIME_TROUBLESHOOTING = `## Debugging HTTP server health
 - if a single Excel process is running and execute_code fails, it could be due to pop-up blockage. Confirm and debug however you can and then stop. Don't do anything fancy, just tell the user that nothing can proceed until popups are gone
 - if that did not work, we need to close the excel process and restart it. Ask the user to save work, close Excel, and then re-open
 - always wait ~2 seconds to health check`;
+const LOCAL_FILE_LINKS = `
+- Markdown file links will be rendered such that the user can click and open the file in their OS.
+- For auditability, you MUST ALWAYS expose local filesystem changes to the user using Markdown links whose destination is the canonical absolute file URL. 
+- Keep the visible label concise while preserving the full path in the destination.`;
 /**
  * Return the correct engine prompts for the given engine.
  *
@@ -112,10 +116,10 @@ export function buildCurrentSkillsSection(options = {}) {
 // ---------------------------------------------------------------------------
 /** Append action-mode shared guidelines + engine API reference to a sections array. */
 export function pushActionSharedGuidelines(sections, engine) {
-    sections.push(TASK_EXECUTION, COMMUNICATION, WRITING_CODE, DATA_FORMATTING, engine.apiGuidelines);
+    sections.push(TASK_EXECUTION, COMMUNICATION, LOCAL_FILE_LINKS, WRITING_CODE, DATA_FORMATTING, engine.apiGuidelines);
 }
 /** Append read-only shared guidelines + engine API reference to a sections array. */
 export function pushReadOnlySharedGuidelines(sections, engine) {
-    sections.push(COMMUNICATION, engine.apiGuidelines);
+    sections.push(COMMUNICATION, LOCAL_FILE_LINKS, engine.apiGuidelines);
 }
 //# sourceMappingURL=shared-guidelines.js.map

package/dist/app/providers/register-shortcut-provider.js

@@ -58,6 +58,9 @@ function createShortcutApiV2AttributionHeaders(options) {
     };
     const userMessageId = headerValue(attribution?.userMessageId);
     const continuationRunId = headerValue(attribution?.continuationRunId) ?? userMessageId;
+    const sessionId = headerValue(attribution?.sessionId);
+    if (sessionId)
+        headers['X-Session-Id'] = sessionId;
     if (continuationRunId)
         headers['X-Agent-Run-Id'] = continuationRunId;
     if (userMessageId)
@@ -139,6 +142,7 @@ export function createShortcutApiV2Dispatcher(getExtraHeaders) {
 export function registerShortcutProvider(modelRegistry, apiV2Url, options) {
     const getExtraHeaders = () => ({
         'X-Client-Platform': 'shortcutxl',
+        'X-Client-Version': VERSION,
         // Override the provider SDK's default User-Agent (e.g. "Anthropic/JS <ver>").
         // The api-v2 gateway's WAF blocks provider-SDK user-agents to prevent the
         // gateway being used as a raw upstream proxy, which otherwise surfaces to

package/dist/app/tools/bash.js

@@ -19,7 +19,7 @@ const TOOL_DESCRIPTION_BASE = `
 Execute a bash command in the current working directory. Returns stdout and stderr. 
 Output is truncated to ${DEFAULT_MAX_CHARS} characters. If truncated, full output is saved to a temp file. 
 For external APIs, prefer Python packages over raw curl (e.g. yfinance for market data). pip install if missing.
-Default timeout is 30 seconds. Override with the timeout parameter for long-running commands.
+Default timeout is 60 seconds. Override with the timeout parameter for long-running commands.
 `;
 const WINDOWS_SECTION = `
 Python and pip are available for data processing, scripting, and package installation.
@@ -75,7 +75,7 @@ const bashSchema = Type.Object({
     }),
     command: Type.String({ description: 'Bash command to execute' }),
     timeout: Type.Optional(Type.Number({
-        description: 'Timeout in seconds (default: 30). Increase for long-running commands.'
+        description: 'Timeout in seconds (default: 60). Increase for long-running commands.'
     })),
     connections: Type.Optional(Type.Array(Type.String(), {
         description: 'Names of configured connections whose credentials should be injected as environment variables for this command. ' +
@@ -209,7 +209,7 @@ export function createBashTool(cwd, options) {
         parameters: bashSchema,
         execute: async (_toolCallId, { command, timeout: explicitTimeout, connections }, signal, onUpdate, ctx) => {
             assertShellPolicy(command, ctx);
-            const timeout = explicitTimeout ?? 30;
+            const timeout = explicitTimeout ?? 60;
             const resolvedCommand = commandPrefix ? `${commandPrefix}\n${command}` : command;
             // Resolve connection credentials into env vars for this subprocess only
             let connectionEnv;

package/dist/app/tools/switch-mode.js

@@ -15,13 +15,13 @@ import { readFile } from 'node:fs/promises';
 import { MODE } from '../../mode-names.js';
 import { ACTION_SWITCH_MODE, INSTALLATION_SWITCH_MODE, PLAN_SWITCH_MODE } from '../../tool-names.js';
 import { APPROVAL } from '../approvals/types.js';
-import { getMode } from '../modes/index.js';
+import { getModeMetadata } from '../modes/metadata.js';
 import { switchMode } from '../modes/switch-mode.js';
 function buildDescription(sourceModeName, allowedTargets) {
     const modeList = allowedTargets.length > 0
         ? allowedTargets
             .map((modeName) => {
-            const mode = getMode(modeName);
+            const mode = getModeMetadata(modeName);
             return `- **${modeName}**: ${mode?.description ?? ''}`;
         })
             .join('\n')