shortcutxl 0.3.80 → 0.3.82

package/BINARY-INVENTORY.json

@@ -1,17 +1,17 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-08-07T00:26:16.459Z",
+  "generatedAt": "2026-08-14T02:24:29.936Z",
   "package": "shortcutxl",
   "build": {
     "builder": "github-actions",
     "repository": "lyfegame/shortcut",
-    "sourceRef": "refs/heads/codex/shortcutxl-0.3.80-changelog",
-    "sourceCommit": "6a199532f36743871e3f650222a403fc3d207382",
-    "workflowRef": "lyfegame/shortcut/.github/workflows/release-shortcutxl.yml@refs/heads/codex/shortcutxl-0.3.80-changelog",
-    "runId": "31134569821",
+    "sourceRef": "refs/heads/fix/native-tab-lifecycle-e2e",
+    "sourceCommit": "9fd127dae6648769fa32fdb55830324ee5c4a697",
+    "workflowRef": "lyfegame/shortcut/.github/workflows/release-shortcutxl.yml@refs/heads/fix/native-tab-lifecycle-e2e",
+    "runId": "31763560794",
     "runnerOs": "Windows",
     "runnerImage": "win25-vs2026",
-    "runnerImageVersion": "20260728.188.1"
+    "runnerImageVersion": "20260803.193.1"
   },
   "binaryExtensions": [
     ".dll",
@@ -22,7 +22,7 @@
   "files": [
     {
       "path": "xll/ShortcutXL.xll",
-      "sha256": "03089f6b2f0567240d0839be1aff9cc60145348316509bf230e2a95381fa0455",
+      "sha256": "184bd94bf10a566d242761aed8036e3db819447dcf2f65c94b39a55d91985e68",
       "source": "ShortcutXL native XLL build",
       "version": "package",
       "builtBy": "shortcut",
@@ -534,7 +534,7 @@
     },
     {
       "path": "xll/python/Scripts/httpx.exe",
-      "sha256": "492a00ed48d74a8ab29af275064dba124618a7528fb3d937394a9b34242d293c",
+      "sha256": "bad169cdd079f8fb3406a85f7ba16d0164016c97c0416b8ecfb7cb20556d3570",
       "source": "httpx console launcher installed into embedded Python",
       "version": "see packaged httpx distribution",
       "builtBy": "third-party",
@@ -542,7 +542,7 @@
     },
     {
       "path": "xll/python/Scripts/idna.exe",
-      "sha256": "487383c788707ee5a2d1f9e28cdad95eecbd255216490de784892650b837b81c",
+      "sha256": "2de9014203c4efd41520931e924b8b616712380a14233b5d40cec24213844c32",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",
@@ -550,7 +550,7 @@
     },
     {
       "path": "xll/python/Scripts/pip.exe",
-      "sha256": "69a873135f5af6cfdbbea25cc9cadc5b579cb48569ed3e751640c40fc1591807",
+      "sha256": "7290ede2cd0eb8df02cd886b2e4b6fddb4b37554f686409dede62561ceb15a14",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -558,7 +558,7 @@
     },
     {
       "path": "xll/python/Scripts/pip3.13.exe",
-      "sha256": "69a873135f5af6cfdbbea25cc9cadc5b579cb48569ed3e751640c40fc1591807",
+      "sha256": "7290ede2cd0eb8df02cd886b2e4b6fddb4b37554f686409dede62561ceb15a14",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -566,7 +566,7 @@
     },
     {
       "path": "xll/python/Scripts/pip3.exe",
-      "sha256": "69a873135f5af6cfdbbea25cc9cadc5b579cb48569ed3e751640c40fc1591807",
+      "sha256": "7290ede2cd0eb8df02cd886b2e4b6fddb4b37554f686409dede62561ceb15a14",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -574,7 +574,7 @@
     },
     {
       "path": "xll/python/Scripts/pywin32_postinstall.exe",
-      "sha256": "d44daeb018223b473588a1e704dcc4dba42f8ef39e06cc6cefc6bf28a8ed7e89",
+      "sha256": "34e35cb64770e068105ba8cb830af68da90aec289a89de86e723f75e2ab1f163",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",
@@ -582,7 +582,7 @@
     },
     {
       "path": "xll/python/Scripts/pywin32_testall.exe",
-      "sha256": "942e759d93d1bba8f1d5bfb97bf5b76ad3b2cff978900425b04fccb2e427e25d",
+      "sha256": "5268485231eb0052632e91db2305af6f6a41ceac7b00b858528ae0326029299e",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## [0.3.82]
+
+- **Safer CLI and app updates**
+- **More reliable native chats for app**
+- **Drag and drop file attachments for app**
+
+## [0.3.81]
+
+- **Smoother native setup and upgrades** - `shortcut app` now guides first-run prerequisites and required Excel integration updates directly in the app.
+- **Native resources and MCP management** - The native app adds dedicated Skills, Memories, and MCP pages.
+
 ## [0.3.80]
 
 - **Shortcut app updates** - The native app now surfaces available updates, installs and restarts in place.

package/dist/ai/models.d.ts

@@ -19,6 +19,8 @@ export declare function getModelReasoningLevels<TApi extends Api>(model: Model<T
 export declare function assertModelSupportsReasoningLevel<TApi extends Api>(model: Model<TApi>, level: ReasoningLevel): void;
 /** Resolve a stale/cross-model selection to the target model's declared default. */
 export declare function resolveModelReasoningLevel<TApi extends Api>(model: Model<TApi>, requested: ReasoningLevel | undefined): ReasoningLevel;
+/** Clamp an explicit effort hint to the nearest level supported by the target model. */
+export declare function clampModelReasoningLevel<TApi extends Api>(model: Model<TApi>, requested: ReasoningLevel | undefined): ReasoningLevel;
 /**
  * Check if two models are equal by comparing both their id and provider.
  * Returns false if either model is null or undefined.

package/dist/ai/models.js

@@ -72,6 +72,29 @@ export function resolveModelReasoningLevel(model, requested) {
         return requested;
     return capabilities?.defaultLevel ?? 'off';
 }
+const REASONING_LEVEL_ORDER = [
+    'off',
+    'minimal',
+    'low',
+    'medium',
+    'high',
+    'xhigh',
+    'max'
+];
+/** Clamp an explicit effort hint to the nearest level supported by the target model. */
+export function clampModelReasoningLevel(model, requested) {
+    if (requested === undefined)
+        return resolveModelReasoningLevel(model, undefined);
+    const available = getModelReasoningLevels(model);
+    if (available.includes(requested))
+        return requested;
+    const requestedIndex = REASONING_LEVEL_ORDER.indexOf(requested);
+    return available.reduce((nearest, candidate) => {
+        const nearestDistance = Math.abs(REASONING_LEVEL_ORDER.indexOf(nearest) - requestedIndex);
+        const candidateDistance = Math.abs(REASONING_LEVEL_ORDER.indexOf(candidate) - requestedIndex);
+        return candidateDistance < nearestDistance ? candidate : nearest;
+    });
+}
 /**
  * Check if two models are equal by comparing both their id and provider.
  * Returns false if either model is null or undefined.

package/dist/ai/providers/anthropic.js

@@ -158,7 +158,10 @@ export const streamAnthropic = (model, context, options) => {
             const client = createClient(model, apiKey, options?.interleavedThinking ?? true, options?.headers, options?.fetchOptions, options?.fetch);
             const params = buildParams(model, context, options);
             options?.onPayload?.(params);
-            const anthropicStream = client.messages.stream({ ...params, stream: true }, { signal: options?.signal });
+            // Consume raw events because this provider owns accumulation. The SDK's
+            // MessageStream accumulator assumes usage is always present, but private
+            // gateways can omit initial usage from otherwise valid response streams.
+            const anthropicStream = await client.messages.create({ ...params, stream: true }, { signal: options?.signal });
             stream.push({ type: 'start', partial: output });
             const blocks = output.content;
             let uncachedInputTokens = 0;
@@ -167,10 +170,11 @@ export const streamAnthropic = (model, context, options) => {
                 if (event.type === 'message_start') {
                     // Capture initial token usage from message_start event
                     // This ensures we have input token counts even if the stream is aborted early
-                    uncachedInputTokens = event.message.usage.input_tokens || 0;
-                    output.usage.output = event.message.usage.output_tokens || 0;
-                    output.usage.cacheRead = event.message.usage.cache_read_input_tokens || 0;
-                    output.usage.cacheWrite = event.message.usage.cache_creation_input_tokens || 0;
+                    const usage = event.message.usage;
+                    uncachedInputTokens = usage?.input_tokens ?? 0;
+                    output.usage.output = usage?.output_tokens ?? 0;
+                    output.usage.cacheRead = usage?.cache_read_input_tokens ?? 0;
+                    output.usage.cacheWrite = usage?.cache_creation_input_tokens ?? 0;
                     // Anthropic doesn't provide total_tokens; usage.input is normalized
                     // to total input, including cache buckets.
                     output.usage.input =
@@ -328,17 +332,18 @@ export const streamAnthropic = (model, context, options) => {
                     }
                     // Only update usage fields if present (not null).
                     // Preserves input_tokens from message_start when proxies omit it in message_delta.
-                    if (event.usage.output_tokens != null) {
-                        output.usage.output = event.usage.output_tokens;
+                    const usage = event.usage;
+                    if (usage?.output_tokens != null) {
+                        output.usage.output = usage.output_tokens;
                     }
-                    if (event.usage.cache_read_input_tokens != null) {
-                        output.usage.cacheRead = event.usage.cache_read_input_tokens;
+                    if (usage?.cache_read_input_tokens != null) {
+                        output.usage.cacheRead = usage.cache_read_input_tokens;
                     }
-                    if (event.usage.cache_creation_input_tokens != null) {
-                        output.usage.cacheWrite = event.usage.cache_creation_input_tokens;
+                    if (usage?.cache_creation_input_tokens != null) {
+                        output.usage.cacheWrite = usage.cache_creation_input_tokens;
                     }
-                    if (event.usage.input_tokens != null) {
-                        uncachedInputTokens = event.usage.input_tokens;
+                    if (usage?.input_tokens != null) {
+                        uncachedInputTokens = usage.input_tokens;
                     }
                     // Anthropic doesn't provide total_tokens; usage.input is normalized
                     // to total input, including cache buckets.

package/dist/ai/providers/openai-reasoning.d.ts

@@ -1,5 +1,8 @@
 import type { Api, Model, ReasoningLevel } from '../types.js';
 export type OpenAIReasoningEffort = 'none' | 'minimal' | 'low' | 'medium' | 'high' | 'xhigh' | 'max';
-/** Preserve exact native effort names; explicit `off` maps to OpenAI `none`. */
+/**
+ * Preserve exact native effort names; explicit `off` maps to OpenAI `none`.
+ * Stale levels are clamped to the model contract before reaching the provider.
+ */
 export declare function resolveOpenAIReasoningEffort(model: Model<Api>, level: ReasoningLevel | undefined): OpenAIReasoningEffort | undefined;
 //# sourceMappingURL=openai-reasoning.d.ts.map

package/dist/ai/providers/openai-reasoning.js

@@ -1,5 +1,8 @@
-import { assertModelSupportsReasoningLevel } from '../models.js';
-/** Preserve exact native effort names; explicit `off` maps to OpenAI `none`. */
+import { clampModelReasoningLevel } from '../models.js';
+/**
+ * Preserve exact native effort names; explicit `off` maps to OpenAI `none`.
+ * Stale levels are clamped to the model contract before reaching the provider.
+ */
 export function resolveOpenAIReasoningEffort(model, level) {
     if (level === undefined)
         return undefined;
@@ -7,7 +10,10 @@ export function resolveOpenAIReasoningEffort(model, level) {
     // configurable wire value requires an explicit model capability contract.
     if (!model.capabilities?.reasoning)
         return undefined;
-    assertModelSupportsReasoningLevel(model, level);
-    return level === 'off' ? 'none' : level;
+    // Internal calls commonly request a cheap effort such as `off` or `low`.
+    // When a substituted model does not offer it, use the nearest supported
+    // level instead of failing or promoting the call to the model default.
+    const resolvedLevel = clampModelReasoningLevel(model, level);
+    return resolvedLevel === 'off' ? 'none' : resolvedLevel;
 }
 //# sourceMappingURL=openai-reasoning.js.map

package/dist/ai/providers/provider-error-normalization.js

@@ -66,7 +66,7 @@ function normalizedSdkErrorDetails(error, rawMessage) {
         return undefined;
     const merged = { ...classified, ...headerDetails };
     const accessAware = applyModelAccessDeniedErrorDetails(merged, rawMessage);
-    if (isContextOverflowErrorMessage(rawMessage)) {
+    if (status === 413 || isContextOverflowErrorMessage(rawMessage)) {
         return { ...accessAware, code: 'context_overflow' };
     }
     return accessAware;

package/dist/app/agent-session.d.ts

@@ -121,7 +121,6 @@ export interface AgentSessionConfig {
         info?: (input: {
             module: string;
             event: string;
-            analyticsEvent?: boolean;
             data?: Record<string, unknown>;
             duration?: number;
         }) => void;

package/dist/app/background/tool-summaries.d.ts

@@ -1,11 +1,11 @@
 /**
- * Fire-and-forget tool-call summarization via a cheap LLM (Haiku).
+ * Fire-and-forget tool-call summarization via a cheap LLM.
  *
  * Summaries are ephemeral UX — displayed to the user but never injected
  * into the LLM conversation context.
  */
 import { type ShortcutLlmProxyClient } from '../providers/shortcut-llm-proxy-client.js';
-export declare const TOOL_SUMMARY_MODEL = "claude-haiku-4-5-20251001";
+export declare const TOOL_SUMMARY_MODEL: "gpt-5.6-luna";
 interface ToolSummaryInput {
     toolName: string;
     args: unknown;
@@ -17,7 +17,7 @@ export interface ToolSummaryGenerationResult {
     httpStatus?: number;
 }
 /**
- * Call the Shortcut LLM proxy (Haiku) to generate a one-line summary of a tool call.
+ * Call the Shortcut LLM proxy to generate a one-line summary of a tool call.
  *
  * Returns the summary string, or undefined if the call fails or is aborted.
  * Never throws — errors are silently swallowed since summaries are best-effort UX.

package/dist/app/background/tool-summaries.js

@@ -1,12 +1,13 @@
 /**
- * Fire-and-forget tool-call summarization via a cheap LLM (Haiku).
+ * Fire-and-forget tool-call summarization via a cheap LLM.
  *
  * Summaries are ephemeral UX — displayed to the user but never injected
  * into the LLM conversation context.
  */
+import { SHORTCUT_MODEL_ID } from '../../model-ids.js';
 import { ShortcutLlmProxyError } from '../providers/shortcut-llm-proxy-client.js';
 import { TOOL_SUMMARY_MAX_OUTPUT_TOKENS } from '../session/tool-summary-policy.js';
-export const TOOL_SUMMARY_MODEL = 'claude-haiku-4-5-20251001';
+export const TOOL_SUMMARY_MODEL = SHORTCUT_MODEL_ID.Gpt56Luna;
 const MAX_ARGS_CHARS = 500;
 const MAX_RESULT_CHARS = 1000;
 const SUMMARY_PROMPT = 'Summarize this tool call in one sentence (under 15 words). Be specific about what was found/done, not what tool was used.';
@@ -15,7 +16,7 @@ function truncate(value, maxChars) {
     return str.length > maxChars ? str.slice(0, maxChars) + '…' : str;
 }
 /**
- * Call the Shortcut LLM proxy (Haiku) to generate a one-line summary of a tool call.
+ * Call the Shortcut LLM proxy to generate a one-line summary of a tool call.
  *
  * Returns the summary string, or undefined if the call fails or is aborted.
  * Never throws — errors are silently swallowed since summaries are best-effort UX.
@@ -35,6 +36,7 @@ export async function generateToolSummaryDetailed(input, shortcutLlmProxy, optio
                 { role: 'human', content: userContent }
             ],
             max_output_tokens: maxOutputTokens,
+            reasoning: 'off',
             llmOperation: 'summarize'
         }, {
             signal

package/dist/app/background-agents/durable-memory/coordinator.js

@@ -1,6 +1,6 @@
 import { SHORTCUT_LLM_PROXY_URL } from '../../../constants.js';
 import { getActiveUserMessageId } from '../../../core/user-message-id.js';
-import { DURABLE_MEMORY_AGENT_MODEL, DURABLE_MEMORY_AGENT_TOOLS, DURABLE_MEMORY_TURN_END_CADENCE } from '../../extensions/durable-memory/constants.js';
+import { DURABLE_MEMORY_AGENT_EFFORT, DURABLE_MEMORY_AGENT_MODEL, DURABLE_MEMORY_AGENT_TOOLS, DURABLE_MEMORY_TURN_END_CADENCE } from '../../extensions/durable-memory/constants.js';
 import { buildDurableMemoryPromptFragment } from '../../extensions/durable-memory/retrieval.js';
 import { emitDurableMemoryStatus } from '../../extensions/durable-memory/status.js';
 import { validateWorkspaceState } from '../../extensions/durable-memory/validator.js';
@@ -342,7 +342,7 @@ export class DurableMemoryCoordinator {
                 instruction: MEMORY_AGENT_INSTRUCTION,
                 traceDir: resolveForkTraceDir(run.sessionDir, run.sessionFile),
                 signal,
-                effortLevel: 'low',
+                effortLevel: DURABLE_MEMORY_AGENT_EFFORT,
                 onToolCall: emitRunningToolCall
             });
             agentResponse = summarizeAgentResponse(result.response);

package/dist/app/extensions/durable-memory/constants.d.ts

@@ -5,6 +5,8 @@ export declare const DURABLE_MEMORY_HARD_MAX_TOPIC_FILES = 15;
 export declare const DURABLE_MEMORY_TURN_END_CADENCE = 4;
 export declare const DURABLE_MEMORY_AGENT_NAME = "durable-memory";
 export declare const DURABLE_MEMORY_AGENT_DESCRIPTION = "Maintains durable memory topic files from session checkpoints.";
-export declare const DURABLE_MEMORY_AGENT_MODEL = "claude-haiku-4-5-20251001";
+export declare const DURABLE_MEMORY_AGENT_MODEL: "gpt-5.6-luna";
+/** Keep maintenance inexpensive while retaining bounded reasoning over memory changes. */
+export declare const DURABLE_MEMORY_AGENT_EFFORT: "low";
 export declare const DURABLE_MEMORY_AGENT_TOOLS: readonly ["read", "edit", "write", "grep"];
 //# sourceMappingURL=constants.d.ts.map

package/dist/app/extensions/durable-memory/constants.js

@@ -1,3 +1,4 @@
+import { SHORTCUT_MODEL_ID } from '../../../model-ids.js';
 import { EDIT, GREP, READ, WRITE } from '../../../tool-names.js';
 export const DURABLE_MEMORY_ROOT = 'memories';
 export const DURABLE_MEMORY_INDEX = 'MEMORY.md';
@@ -6,6 +7,8 @@ export const DURABLE_MEMORY_HARD_MAX_TOPIC_FILES = 15;
 export const DURABLE_MEMORY_TURN_END_CADENCE = 4;
 export const DURABLE_MEMORY_AGENT_NAME = 'durable-memory';
 export const DURABLE_MEMORY_AGENT_DESCRIPTION = 'Maintains durable memory topic files from session checkpoints.';
-export const DURABLE_MEMORY_AGENT_MODEL = 'claude-haiku-4-5-20251001';
+export const DURABLE_MEMORY_AGENT_MODEL = SHORTCUT_MODEL_ID.Gpt56Luna;
+/** Keep maintenance inexpensive while retaining bounded reasoning over memory changes. */
+export const DURABLE_MEMORY_AGENT_EFFORT = 'low';
 export const DURABLE_MEMORY_AGENT_TOOLS = [READ, EDIT, WRITE, GREP];
 //# sourceMappingURL=constants.js.map

package/dist/app/extensions/wrapper.js

@@ -4,14 +4,14 @@
  * Wraps ToolDefinitions with tool_call / tool_result event hooks so
  * extensions can block or modify tool execution.
  */
+import { cloneToolDefinition } from '../../core/tool-definition.js';
 /**
  * Wrap a tool with extension callbacks for interception.
  * - Emits tool_call event before execution (can block)
  * - Emits tool_result event after execution (can modify result)
  */
 export function wrapToolWithExtensions(tool, runner) {
-    return {
-        ...tool,
+    return cloneToolDefinition(tool, {
         execute: async (toolCallId, params, signal, onUpdate, ctx) => {
             // Emit tool_call event - extensions can block execution
             if (runner.hasHandlers('tool_call')) {
@@ -73,7 +73,7 @@ export function wrapToolWithExtensions(tool, runner) {
                 throw err;
             }
         }
-    };
+    });
 }
 /**
  * Wrap all tools with extension callbacks.

package/dist/app/mcp/index.js

@@ -11,6 +11,15 @@ import { registerHostedMcpOAuthProviders, unregisterHostedMcpOAuthProviders } fr
 import { createMcpDescribeTool } from './mcp-describe-tool.js';
 import { createMcpExecuteTool } from './mcp-execute-tool.js';
 import { isHostedServerConfig } from './types.js';
+function resolveDisplayedAuthStatus(connection, rawAuthStatus, failureKind) {
+    if (failureKind === 'auth_required' && rawAuthStatus !== 'configured') {
+        return 'not_logged_in';
+    }
+    if (connection && rawAuthStatus === 'not_logged_in') {
+        return 'unsupported';
+    }
+    return rawAuthStatus;
+}
 export async function createMcpManager(options) {
     const servers = loadMcpConfig({
         cwd: options.cwd,
@@ -25,6 +34,7 @@ export async function createMcpManager(options) {
     const failures = new Map();
     const failureKinds = new Map();
     const authStatuses = new Map();
+    let shutDown = false;
     const results = await Promise.allSettled(serverNames.map(async (name) => {
         authStatuses.set(name, await resolveMcpAuthStatus(name, servers[name], {
             authStorage: options.authStorage,
@@ -39,10 +49,14 @@ export async function createMcpManager(options) {
             const config = servers[result.value.name];
             if (isHostedServerConfig(config)) {
                 const reconnect = async () => {
-                    if (!options.authStorage) {
+                    if (!options.authStorage || shutDown)
                         return null;
-                    }
+                    options.authStorage.reload();
                     const nextConnection = await connectServer(result.value.name, config, options.cwd, options.authStorage, options.mcpOAuthStore);
+                    if (shutDown) {
+                        closeConnection(nextConnection);
+                        return null;
+                    }
                     const previousConnection = connections.get(result.value.name);
                     connections.set(result.value.name, nextConnection);
                     nextConnection.reconnect = reconnect;
@@ -63,18 +77,10 @@ export async function createMcpManager(options) {
             log.warn('mcp', `MCP server '${name}' failed to start: ${reason}`);
         }
     }
-    const catalog = buildCatalog([...connections.values()]);
-    const tools = connections.size > 0
-        ? [createMcpExecuteTool(connections, catalog), createMcpDescribeTool(connections)]
-        : [];
     const statusLine = buildStatusLine(serverNames.map((name) => {
         const connection = connections.get(name);
         const rawAuthStatus = authStatuses.get(name) ?? 'unsupported';
-        const authStatus = failureKinds.get(name) === 'auth_required'
-            ? 'not_logged_in'
-            : connection && rawAuthStatus === 'not_logged_in'
-                ? 'unsupported'
-                : rawAuthStatus;
+        const authStatus = resolveDisplayedAuthStatus(connection, rawAuthStatus, failureKinds.get(name));
         return {
             name,
             connected: connection,
@@ -92,11 +98,7 @@ export async function createMcpManager(options) {
         const failure = failures.get(name);
         const config = servers[name];
         const rawAuthStatus = authStatuses.get(name) ?? 'unsupported';
-        const authStatus = failureKinds.get(name) === 'auth_required'
-            ? 'not_logged_in'
-            : connection && rawAuthStatus === 'not_logged_in'
-                ? 'unsupported'
-                : rawAuthStatus;
+        const authStatus = resolveDisplayedAuthStatus(connection, rawAuthStatus, failureKinds.get(name));
         return {
             name,
             status: connection ? 'connected' : 'failed',
@@ -114,12 +116,48 @@ export async function createMcpManager(options) {
             ...(failure ? { error: failure } : {})
         };
     });
+    const markAuthRequired = (status) => {
+        const connection = connections.get(status.name);
+        connections.delete(status.name);
+        if (connection)
+            closeConnection(connection);
+        status.status = 'failed';
+        status.authStatus = 'not_logged_in';
+        status.failureKind = 'auth_required';
+        status.toolCount = 0;
+        status.toolNames = [];
+        status.error = 'Login required';
+    };
+    const statusByName = new Map(serverStatuses.map((status) => [status.name, status]));
+    const prepareConnection = async (name) => {
+        if (shutDown)
+            return `Unknown MCP server '${name}'.`;
+        const status = statusByName.get(name);
+        if (!status)
+            return `Unknown MCP server '${name}'.`;
+        if (status.oauthProviderId) {
+            options.authStorage?.reload();
+            if (options.authStorage?.get(status.oauthProviderId)?.type !== 'oauth') {
+                markAuthRequired(status);
+                return `MCP server '${name}' requires re-authentication. Log in and try again.`;
+            }
+        }
+        return undefined;
+    };
+    const catalog = buildCatalog([...connections.values()]);
+    const tools = connections.size > 0
+        ? [
+            createMcpExecuteTool(connections, catalog, prepareConnection),
+            createMcpDescribeTool(connections, prepareConnection)
+        ]
+        : [];
     return {
         tools,
         statusLine,
         globalConfigDir: options.globalConfigDir,
         servers: serverStatuses,
         shutdown() {
+            shutDown = true;
             for (const conn of connections.values()) {
                 closeConnection(conn);
             }

package/dist/app/mcp/mcp-describe-tool.d.ts

@@ -12,6 +12,6 @@ declare const schema: import("@sinclair/typebox").TObject<{
     tool: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
 }>;
 /** Create the `mcp_describe` tool that lists or details tools on a connected MCP server. */
-export declare function createMcpDescribeTool(connections: Map<string, McpConnection>): ToolDefinition<typeof schema>;
+export declare function createMcpDescribeTool(connections: Map<string, McpConnection>, prepareConnection?: (serverName: string) => Promise<string | undefined>): ToolDefinition<typeof schema>;
 export {};
 //# sourceMappingURL=mcp-describe-tool.d.ts.map

package/dist/app/mcp/mcp-describe-tool.js

@@ -15,7 +15,7 @@ const schema = Type.Object({
     }))
 });
 /** Create the `mcp_describe` tool that lists or details tools on a connected MCP server. */
-export function createMcpDescribeTool(connections) {
+export function createMcpDescribeTool(connections, prepareConnection) {
     return {
         name: 'mcp_describe',
         label: 'MCP Describe',
@@ -24,6 +24,9 @@ export function createMcpDescribeTool(connections) {
             '- mcp_describe(server, tool) → full JSON schema for one tool',
         parameters: schema,
         async execute(_toolCallId, params) {
+            const preparationError = await prepareConnection?.(params.server);
+            if (preparationError)
+                return errorResult(preparationError);
             const conn = resolveServer(connections, params.server);
             if (typeof conn === 'string')
                 return errorResult(conn);

package/dist/app/mcp/mcp-execute-tool.d.ts

@@ -9,6 +9,6 @@ declare const schema: import("@sinclair/typebox").TObject<{
     arguments: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
 }>;
 /** Create the `mcp` gateway tool that dispatches calls to connected MCP servers. */
-export declare function createMcpExecuteTool(connections: Map<string, McpConnection>, catalog: string): ToolDefinition<typeof schema>;
+export declare function createMcpExecuteTool(connections: Map<string, McpConnection>, catalog: string, prepareConnection?: (serverName: string) => Promise<string | undefined>): ToolDefinition<typeof schema>;
 export {};
 //# sourceMappingURL=mcp-execute-tool.d.ts.map

package/dist/app/mcp/mcp-execute-tool.js

@@ -12,13 +12,16 @@ const schema = Type.Object({
     }))
 });
 /** Create the `mcp` gateway tool that dispatches calls to connected MCP servers. */
-export function createMcpExecuteTool(connections, catalog) {
+export function createMcpExecuteTool(connections, catalog, prepareConnection) {
     return {
         name: 'mcp',
         label: 'MCP',
         description: `Call a tool on a connected MCP server.\n\n${catalog}`,
         parameters: schema,
         async execute(_toolCallId, params, signal) {
+            const preparationError = await prepareConnection?.(params.server);
+            if (preparationError)
+                return errorResult(preparationError);
             const conn = resolveServer(connections, params.server);
             if (typeof conn === 'string')
                 return errorResult(conn);

package/dist/app/modes/action/agent.d.ts

@@ -5,7 +5,7 @@
  * Can switch to plan or installation mode.
  */
 import type { AgentDefinition } from '../../agent-definition.js';
-export declare const ACTION_AGENT_TOOL_NAMES: ("write" | "execute_code" | "execute_tool" | "get_tool_info" | "mcp" | "refresh_context" | "send_message" | "take_screenshot" | "task" | "bash" | "switch_from_action_mode")[];
+export declare const ACTION_AGENT_TOOL_NAMES: ("bash" | "write" | "execute_code" | "execute_tool" | "get_tool_info" | "mcp" | "refresh_context" | "send_message" | "take_screenshot" | "task" | "switch_from_action_mode")[];
 /** Construct the action-mode agent definition with the full execution toolset. */
 export declare function actionAgent(): AgentDefinition;
 //# sourceMappingURL=agent.d.ts.map

package/dist/app/modes/index.js

@@ -10,7 +10,7 @@ export { installationAgent } from './installation/agent.js';
 export { manageAgent } from './manage/agent.js';
 export { planAgent } from './plan/agent.js';
 export { reviewAgent } from './review/agent.js';
-import { MODE } from '../../mode-names.js';
+import { isAgentMode, MODE } from '../../mode-names.js';
 import { actionAgent } from './action/agent.js';
 import { askAgent } from './ask/agent.js';
 import { installationAgent } from './installation/agent.js';
@@ -18,25 +18,24 @@ import { manageAgent } from './manage/agent.js';
 import { MODE_METADATA } from './metadata.js';
 import { planAgent } from './plan/agent.js';
 import { reviewAgent } from './review/agent.js';
-const MODE_FACTORIES = new Map([
-    [MODE.INSTALLATION, installationAgent],
-    [MODE.ACTION, actionAgent],
-    [MODE.PLAN, planAgent],
-    [MODE.ASK, askAgent],
-    [MODE.MANAGE, manageAgent],
-    [MODE.REVIEW, reviewAgent]
-]);
+const MODE_FACTORIES = {
+    [MODE.INSTALLATION]: installationAgent,
+    [MODE.ACTION]: actionAgent,
+    [MODE.PLAN]: planAgent,
+    [MODE.ASK]: askAgent,
+    [MODE.MANAGE]: manageAgent,
+    [MODE.REVIEW]: reviewAgent
+};
 export function getModes() {
     return MODE_METADATA.map((metadata) => {
-        const factory = MODE_FACTORIES.get(metadata.name);
-        if (!factory) {
+        if (!isAgentMode(metadata.name)) {
             throw new Error(`No mode factory registered for "${metadata.name}".`);
         }
-        return factory();
+        return MODE_FACTORIES[metadata.name]();
     });
 }
 export function getMode(name) {
-    return MODE_FACTORIES.get(name)?.();
+    return isAgentMode(name) ? MODE_FACTORIES[name]() : undefined;
 }
 export function getModeNames() {
     return MODE_METADATA.map((mode) => mode.name);