shortcutxl 0.3.88 → 0.3.90

package/BINARY-INVENTORY.json

@@ -1,17 +1,17 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-08-26T00:44:20.887Z",
+  "generatedAt": "2026-09-02T05:35:16.912Z",
   "package": "shortcutxl",
   "build": {
     "builder": "github-actions",
     "repository": "lyfegame/shortcut",
-    "sourceRef": "refs/heads/shortcutxl-0.3.88-release",
-    "sourceCommit": "4c05175f061329c960c66d47ccb9ce17914a6b3d",
-    "workflowRef": "lyfegame/shortcut/.github/workflows/release-shortcut-cli-npm-package.yml@refs/heads/shortcutxl-0.3.88-release",
-    "runId": "32916156832",
+    "sourceRef": "refs/heads/codex/excel-preexecution-approval",
+    "sourceCommit": "2520273120cc4b4024d877790eacf6f41fefdd7c",
+    "workflowRef": "lyfegame/shortcut/.github/workflows/release-shortcut-cli-npm-package.yml@refs/heads/codex/excel-preexecution-approval",
+    "runId": "33595155271",
     "runnerOs": "Windows",
     "runnerImage": "win25-vs2026",
-    "runnerImageVersion": "20260818.207.1"
+    "runnerImageVersion": "20260824.214.3"
   },
   "binaryExtensions": [
     ".dll",
@@ -550,7 +550,7 @@
     },
     {
       "path": "xll/python/Scripts/httpx.exe",
-      "sha256": "0d574f52b306e89eb7939928d7619bb41d7c107eff89412c131e3de6e7452ebb",
+      "sha256": "a7f8d80085b1d17fdf993cd7246d55f05726e3eb624859a8ba3b69b76368bd4c",
       "source": "httpx console launcher installed into embedded Python",
       "version": "see packaged httpx distribution",
       "builtBy": "third-party",
@@ -558,7 +558,7 @@
     },
     {
       "path": "xll/python/Scripts/idna.exe",
-      "sha256": "ea547cc95cfe1eec850109deef6ec74bc4ee4b2f11ad3e31cc6e838b1586c9dd",
+      "sha256": "75e2f1c65f561084f603823794d6ad5877ef0a5b1ef0b1fffff096603479642a",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",
@@ -566,7 +566,7 @@
     },
     {
       "path": "xll/python/Scripts/pip.exe",
-      "sha256": "53da41241352609f82891a392c0acef488a825ec4f03d5dbae4acfb0d2579247",
+      "sha256": "f68ea8e144f74e0f9748750a5fc21b73e11d63486c905730aa474e28f3bab8e7",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -574,7 +574,7 @@
     },
     {
       "path": "xll/python/Scripts/pip3.13.exe",
-      "sha256": "53da41241352609f82891a392c0acef488a825ec4f03d5dbae4acfb0d2579247",
+      "sha256": "f68ea8e144f74e0f9748750a5fc21b73e11d63486c905730aa474e28f3bab8e7",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -582,7 +582,7 @@
     },
     {
       "path": "xll/python/Scripts/pip3.exe",
-      "sha256": "53da41241352609f82891a392c0acef488a825ec4f03d5dbae4acfb0d2579247",
+      "sha256": "f68ea8e144f74e0f9748750a5fc21b73e11d63486c905730aa474e28f3bab8e7",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -590,7 +590,7 @@
     },
     {
       "path": "xll/python/Scripts/pywin32_postinstall.exe",
-      "sha256": "b9e51257aaff6494d04854f7f9376c89cf0d4da5dd857f0d3e395d5ded820d1c",
+      "sha256": "3d5142d3d301b5b22ec9f9ba2d29c9f8a4a73bad069389a73dafbd61e2b37696",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",
@@ -598,7 +598,7 @@
     },
     {
       "path": "xll/python/Scripts/pywin32_testall.exe",
-      "sha256": "cde16abf50ca9e94a5ce78ebdb9d19b8122c0be95c5fe84e1817e7dbe58913a5",
+      "sha256": "494be3de764340437d1fb12aaaefaf8f47c5a482f14834da3a17b080c71d6e16",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [0.3.90]
+
+- **Skill Forge** - A recursive self-improvement loop for skills. Create or improve personal skills by giving Skill Forge tasks and a grading bar to train, evaluate, and refine against.
+- **Safer, more reliable Excel changes** - Shortcut now asks for approval before making workbook changes and allows longer operations to finish without timing out.
+- **Credit usage at a glance** - See today's personal credit usage for non-teams users.
+
 ## [0.3.88]
 
 - **More reliable app startup** - Fixed startup failures on slower or managed Windows computers.

package/dist/app/agent-session-runtime-adapter.js

@@ -68,9 +68,12 @@ function createAgentSessionCore(session, pendingHostToolRequests, shortyRuntime)
             session.replaceToolsByName(configuration.toolNames);
             session.agent.setSystemPrompt(configuration.systemPrompt);
         },
-        async configureReviewBuddy(enabled) {
+        async configureInspector(enabled) {
             shortyRuntime.configureInspector(enabled);
         },
+        async runReviewBuddy() {
+            shortyRuntime.runInspector();
+        },
         async runContextReview(input) {
             await shortyRuntime.runDoctor(input.trigger);
         },

package/dist/app/background-agents/shorty/fix-prompts.d.ts

@@ -1,4 +1,4 @@
-import type { AgentContextReviewRecommendation, AgentReviewBuddyFinding } from '../../../contracts/agent-api.js';
-export declare function formatInspectorFixRequest(findings: readonly AgentReviewBuddyFinding[]): string;
+import type { AgentContextReviewRecommendation, AgentInspectorFinding } from '../../../contracts/agent-api.js';
+export declare function formatInspectorFixRequest(findings: readonly AgentInspectorFinding[]): string;
 export declare function formatDoctorFixRequest(recommendations: readonly AgentContextReviewRecommendation[]): string;
 //# sourceMappingURL=fix-prompts.d.ts.map

package/dist/app/background-agents/shorty/inspector/runtime.d.ts

@@ -1,6 +1,7 @@
 import type { CreateLocalShortyRuntimeOptions, LocalShortyEvent } from '../types.js';
 export interface LocalInspectorRuntime {
     configure(enabled: boolean): void;
+    run(): void;
     dispose(): void;
 }
 export declare function createLocalInspectorRuntime(options: CreateLocalShortyRuntimeOptions, emit: (event: LocalShortyEvent) => void): LocalInspectorRuntime;

package/dist/app/background-agents/shorty/inspector/runtime.js

@@ -1,8 +1,8 @@
 import { AgentEventKind } from '../../../../contracts/agent-api.js';
 import { AgentLoopEventType } from '../../../../core/core-types.js';
 import { getActiveUserMessageId } from '../../../../core/user-message-id.js';
-import { REVIEW_BUDDY_QUERY, REVIEW_BUDDY_SYSTEM_PROMPT } from '../../../../embedded-agent/review/agent.js';
-import { ReviewBuddyCoordinator } from '../../../../embedded-agent/review/coordinator.js';
+import { INSPECTOR_QUERY, INSPECTOR_SYSTEM_PROMPT } from '../../../../embedded-agent/inspector/agent.js';
+import { InspectorCoordinator } from '../../../../embedded-agent/inspector/coordinator.js';
 import { EXECUTE_CODE } from '../../../../tool-names.js';
 import { convertToLlm } from '../../../messages.js';
 import { runLocalShortyAgent } from '../execution.js';
@@ -38,10 +38,10 @@ function createLinkedTimeoutSignal(parent) {
 }
 export function createLocalInspectorRuntime(options, emit) {
     const isAvailable = options.isInspectorAvailable ?? (() => true);
-    const coordinator = new ReviewBuddyCoordinator({
+    const coordinator = new InspectorCoordinator({
         enabled: options.enabled ?? false,
         emit: (event) => {
-            if (event.kind === AgentEventKind.ReviewBuddyUpdated)
+            if (event.kind === AgentEventKind.InspectorUpdated)
                 emit(event);
         },
         hasCredits: options.hasCredits ?? (() => true),
@@ -65,7 +65,7 @@ export function createLocalInspectorRuntime(options, emit) {
                 const result = await runLocalShortyAgent({
                     modelRegistry: options.modelRegistry,
                     parent: {
-                        systemPrompt: REVIEW_BUDDY_SYSTEM_PROMPT,
+                        systemPrompt: INSPECTOR_SYSTEM_PROMPT,
                         messages: convertToLlm([...input.mainContext.messages]),
                         tools: [executeCode],
                         continuationRunId: input.reviewId,
@@ -77,8 +77,8 @@ export function createLocalInspectorRuntime(options, emit) {
                         })
                     },
                     controller: {
-                        kind: 'inspector-shorty',
-                        instruction: REVIEW_BUDDY_QUERY,
+                        kind: 'inspector',
+                        instruction: INSPECTOR_QUERY,
                         effortLevel: 'low',
                         maxTurns: 6,
                         signal: timed.signal,
@@ -116,22 +116,22 @@ export function createLocalInspectorRuntime(options, emit) {
             }
         }
     });
-    let turnHadWorkbookWrite = false;
+    let inspectorTurnHadWorkbookWrite = false;
     const unsubscribeSession = options.session.subscribe((event) => {
         if (event.type === AgentLoopEventType.AgentStart) {
-            turnHadWorkbookWrite = false;
+            inspectorTurnHadWorkbookWrite = false;
             return;
         }
         if (event.type === AgentLoopEventType.ToolExecutionEnd &&
             event.toolName === EXECUTE_CODE &&
             isAvailable() &&
             hasWorkbookChanges(event.result?.details)) {
-            turnHadWorkbookWrite = true;
+            inspectorTurnHadWorkbookWrite = true;
             return;
         }
-        if (event.type !== AgentLoopEventType.AgentEnd || !turnHadWorkbookWrite)
+        if (event.type !== AgentLoopEventType.AgentEnd || !inspectorTurnHadWorkbookWrite)
             return;
-        turnHadWorkbookWrite = false;
+        inspectorTurnHadWorkbookWrite = false;
         if (!isAvailable())
             return;
         const userMessageId = getActiveUserMessageId(event.messages);
@@ -147,6 +147,19 @@ export function createLocalInspectorRuntime(options, emit) {
         configure(enabled) {
             coordinator.configure(enabled);
         },
+        run() {
+            if (!isAvailable())
+                return;
+            const messages = options.session.messages;
+            const userMessageId = getActiveUserMessageId(messages);
+            if (!userMessageId)
+                return;
+            coordinator.run({
+                continuationRunId: userMessageId,
+                userMessageId,
+                mainContext: { messages: [...messages] }
+            });
+        },
         dispose() {
             unsubscribeSession();
             coordinator.dispose();

package/dist/app/background-agents/shorty/runtime.js

@@ -17,6 +17,9 @@ export function createLocalShortyRuntime(options) {
         configureInspector(enabled) {
             inspector.configure(enabled);
         },
+        runInspector() {
+            inspector.run();
+        },
         configureDoctor(enabled) {
             doctor.configure(enabled);
         },

package/dist/app/background-agents/shorty/types.d.ts

@@ -1,12 +1,13 @@
-import type { AgentContextReviewRecommendation, AgentContextReviewTrigger, AgentContextReviewUpdatedEvent, AgentReviewBuddyUpdatedEvent } from '../../../contracts/agent-api.js';
+import type { AgentContextReviewRecommendation, AgentContextReviewTrigger, AgentContextReviewUpdatedEvent, AgentInspectorUpdatedEvent } from '../../../contracts/agent-api.js';
 import type { AgentModelRegistry } from '../../../contracts/agent-model.js';
 import type { AgentSession } from '../../agent-session.js';
-export type LocalShortyEvent = AgentContextReviewUpdatedEvent | AgentReviewBuddyUpdatedEvent;
+export type LocalShortyEvent = AgentContextReviewUpdatedEvent | AgentInspectorUpdatedEvent;
 export type LocalContextReviewDecision = 'apply_requested' | 'closed' | 'dismissed';
 export type LocalShortyEventListener = (event: LocalShortyEvent) => void;
 export interface LocalShortyRuntime {
     subscribe(listener: LocalShortyEventListener): () => void;
     configureInspector(enabled: boolean): void;
+    runInspector(): void;
     configureDoctor(enabled: boolean): void;
     runDoctor(trigger: AgentContextReviewTrigger): Promise<void>;
     runAutomaticDoctorIfDue(now?: Date): Promise<boolean>;

package/dist/app/local/tools/execute-code/approval-payload.d.ts

@@ -6,6 +6,10 @@ export interface ExcelDiffApprovalPayload {
     kind: 'diff';
     description: string;
 }
+export interface ExcelWriteApprovalPayload {
+    kind: 'write';
+    description: string;
+}
 export interface OfficeDangerousApprovalPayload {
     kind: 'dangerous';
     description: string;
@@ -13,5 +17,5 @@ export interface OfficeDangerousApprovalPayload {
     summary: string;
     operations: OfficeApprovalOperation[];
 }
-export type OfficeApprovalPayload = ExcelDiffApprovalPayload | OfficeDangerousApprovalPayload;
+export type OfficeApprovalPayload = ExcelDiffApprovalPayload | ExcelWriteApprovalPayload | OfficeDangerousApprovalPayload;
 //# sourceMappingURL=approval-payload.d.ts.map

package/dist/app/local/tools/execute-code/executor.d.ts

@@ -2,9 +2,9 @@
  * COM execute_code executor — local XLL-backed execution lifecycle.
  *
  * Owns the COM-specific execution flow:
- * 1. Send code to the local XLL via xllFetch
- * 2. Parse and validate the response
- * 3. Run the approval / revert / cleanup flow
+ * 1. Classify code and request write approval before execution
+ * 2. Send approved code to the local XLL via xllFetch
+ * 3. Parse and validate the response
  *
  * Used by:
  * - `createExcelExecTool()` (COM ToolDefinition wrapper)
@@ -23,7 +23,7 @@ export interface ComExecResult {
     cfTxId?: string;
     editMode?: boolean;
 }
-export type ApprovalOutcome = 'accepted' | 'approval-unavailable' | 'failed' | 'reverted' | 'revert-failed' | 'rejected';
+export type ApprovalOutcome = 'accepted' | 'approval-unavailable' | 'failed' | 'rejected';
 export interface LocalExecResult {
     result: ComExecResult;
     outcome: ApprovalOutcome;
@@ -33,19 +33,9 @@ export interface ExcelExecApprovalObservability {
     onRequested?: (request: ApprovalRequest<OfficeApprovalPayload>) => void;
     onAccepted?: (request: ApprovalRequest<OfficeApprovalPayload>, choice: ApprovalChoice) => void;
     onRejected?: (request: ApprovalRequest<OfficeApprovalPayload>) => void;
-    onReverted?: (request: ApprovalRequest<OfficeApprovalPayload>) => void;
-    onRevertFailed?: (request: ApprovalRequest<OfficeApprovalPayload>) => void;
-}
-interface ApprovalResolution {
-    outcome: ApprovalOutcome;
-    approvalSummaries?: string[];
 }
 /** Validate that a parsed JSON value has the COM execute result shape. */
 export declare function isComExecResult(v: unknown): v is ComExecResult;
-/**
- * Resolve approval for cell changes: show UI if needed, then revert or cleanup.
- */
-export declare function resolveApproval(result: ComExecResult, approval: ApprovalGate<OfficeApprovalPayload> | undefined, postControl: (body: object) => Promise<Response>, ctx: ExtensionContext, description?: string, observability?: ExcelExecApprovalObservability, priorApprovalSummaries?: string[]): Promise<ApprovalResolution>;
 /**
  * Execute code against the local XLL and run approval.
  *
@@ -60,5 +50,4 @@ export declare function executeComLocally(excelTarget: ExcelHostEndpoint, code:
     observability?: ExcelExecApprovalObservability;
     editModeTiming?: Partial<EditModeRetryTiming>;
 }): Promise<LocalExecResult>;
-export {};
 //# sourceMappingURL=executor.d.ts.map

package/dist/app/local/tools/execute-code/executor.js

@@ -2,14 +2,13 @@
  * COM execute_code executor — local XLL-backed execution lifecycle.
  *
  * Owns the COM-specific execution flow:
- * 1. Send code to the local XLL via xllFetch
- * 2. Parse and validate the response
- * 3. Run the approval / revert / cleanup flow
+ * 1. Classify code and request write approval before execution
+ * 2. Send approved code to the local XLL via xllFetch
+ * 3. Parse and validate the response
  *
  * Used by:
  * - `createExcelExecTool()` (COM ToolDefinition wrapper)
  */
-import { log } from '../../../../shared/logging/agent-log.js';
 import { INTERACTIVE_APPROVAL_UNAVAILABLE_MESSAGE } from '../../../approvals/approval-errors.js';
 import { APPROVAL } from '../../../approvals/types.js';
 import { getApprovalSurface, resolveApprovalExecutionDecision } from '../../../permissions/approval-surface.js';
@@ -31,13 +30,6 @@ export function isComExecResult(v) {
         (r.error === undefined || typeof r.error === 'string') &&
         (r.editMode === undefined || typeof r.editMode === 'boolean'));
 }
-// ---------------------------------------------------------------------------
-// Control constants
-// ---------------------------------------------------------------------------
-const CONTROL = {
-    REVERT: 'revert',
-    CLEANUP: 'cleanup'
-};
 function describeExcelApprovalChoice(choice) {
     switch (choice) {
         case APPROVAL.ACCEPT:
@@ -97,95 +89,41 @@ async function requestAlwaysConfirmApproval(approval, ctx, description, dangerou
     return { choice, unavailable: false };
 }
 // ---------------------------------------------------------------------------
-// Approval resolution
+// Pre-execution write approval
 // ---------------------------------------------------------------------------
-/**
- * Resolve approval for cell changes: show UI if needed, then revert or cleanup.
- */
-export async function resolveApproval(result, approval, postControl, ctx, description, observability, priorApprovalSummaries) {
-    const { diff, cfTxId } = result;
-    let approvalSummaries = priorApprovalSummaries;
-    if (diff) {
-        const request = {
-            kind: 'execute_code',
-            title: 'Review Excel changes',
-            choices: [APPROVAL.ACCEPT, APPROVAL.ACCEPT_ALL, APPROVAL.REJECT],
-            payload: {
-                kind: 'diff',
-                description: description?.trim() || 'Updating Excel'
-            }
-        };
-        const decision = resolveApprovalExecutionDecision({
-            surface: getApprovalSurface(ctx),
-            gateAvailable: approval !== undefined,
-            isSafe: false,
-            isAutoApproved: approval?.isAutoApproved() ?? false,
-            alwaysRequireExplicitApproval: false,
-            allowHeadlessApproval: ctx.permissionPolicy?.office.allowHeadlessApproval ?? false
-        });
-        if (decision === 'prompt') {
-            if (!approval) {
-                observability?.onRejected?.(request);
-                try {
-                    await postControl({ control: CONTROL.REVERT, cfTxId });
-                    observability?.onReverted?.(request);
-                    return { outcome: 'reverted' };
-                }
-                catch {
-                    if (cfTxId != null) {
-                        await postControl({ control: CONTROL.CLEANUP, cfTxId }).catch(() => { });
-                    }
-                    observability?.onRevertFailed?.(request);
-                    return { outcome: 'revert-failed' };
-                }
-            }
-            observability?.onRequested?.(request);
-            const choice = await approval.requestApproval(request, ctx);
-            if (choice === APPROVAL.REJECT || choice === undefined) {
-                observability?.onRejected?.(request);
-                try {
-                    await postControl({ control: CONTROL.REVERT, cfTxId });
-                    observability?.onReverted?.(request);
-                    return { outcome: 'rejected' };
-                }
-                catch {
-                    if (cfTxId != null) {
-                        await postControl({ control: CONTROL.CLEANUP, cfTxId }).catch(() => { });
-                    }
-                    observability?.onRevertFailed?.(request);
-                    return { outcome: 'revert-failed' };
-                }
-            }
-            observability?.onAccepted?.(request, choice);
-            if (choice === APPROVAL.ACCEPT_ALL) {
-                approval.onAcceptAll();
-            }
-            approvalSummaries = appendApprovalSummary(approvalSummaries, choice);
-        }
-        else if (decision === 'deny') {
-            observability?.onRejected?.(request);
-            try {
-                await postControl({ control: CONTROL.REVERT, cfTxId });
-                observability?.onReverted?.(request);
-                return { outcome: 'reverted' };
-            }
-            catch {
-                if (cfTxId != null) {
-                    await postControl({ control: CONTROL.CLEANUP, cfTxId }).catch(() => { });
-                }
-                observability?.onRevertFailed?.(request);
-                return { outcome: 'revert-failed' };
-            }
+async function requestWriteApproval(approval, ctx, description, observability) {
+    const request = {
+        kind: 'execute_code',
+        title: 'Review Excel changes',
+        choices: [APPROVAL.ACCEPT, APPROVAL.ACCEPT_ALL, APPROVAL.REJECT],
+        payload: {
+            kind: 'write',
+            description: description?.trim() || 'Updating Excel'
         }
+    };
+    const decision = resolveApprovalExecutionDecision({
+        surface: getApprovalSurface(ctx),
+        gateAvailable: approval !== undefined,
+        isSafe: false,
+        isAutoApproved: approval?.isAutoApproved() ?? false,
+        alwaysRequireExplicitApproval: false,
+        allowHeadlessApproval: ctx?.permissionPolicy?.office.allowHeadlessApproval ?? false
+    });
+    if (decision === 'allow') {
+        return { choice: APPROVAL.ACCEPT, unavailable: false, prompted: false };
     }
-    // Accepted (explicitly or auto) — clean up CF highlights.
-    if (cfTxId != null) {
-        await postControl({ control: CONTROL.CLEANUP, cfTxId }).catch((e) => {
-            const msg = e instanceof Error ? e.message : String(e);
-            log.error('excel-exec', `CF cleanup failed for tx ${cfTxId}: ${msg}`);
-        });
+    if (decision === 'deny' || !approval || !ctx) {
+        observability?.onRejected?.(request);
+        return { choice: APPROVAL.REJECT, unavailable: true, prompted: false };
+    }
+    observability?.onRequested?.(request);
+    const choice = await approval.requestApproval(request, ctx);
+    if (choice === APPROVAL.REJECT || choice === undefined) {
+        observability?.onRejected?.(request);
+        return { choice, unavailable: false, prompted: true };
     }
-    return { outcome: 'accepted', approvalSummaries };
+    observability?.onAccepted?.(request, choice);
+    return { choice, unavailable: false, prompted: true };
 }
 // ---------------------------------------------------------------------------
 // Core executor
@@ -200,7 +138,7 @@ export async function executeComLocally(excelTarget, code, options) {
     const resolvedExcelHttpUrl = excelTarget.url;
     const { approval, ctx, description, signal, observability, editModeTiming } = options ?? {};
     let approvalSummaries;
-    const postControl = (body, sig) => xllFetch(`${resolvedExcelHttpUrl}/exec`, {
+    const postExec = (body, sig) => xllFetch(`${resolvedExcelHttpUrl}/exec`, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json' },
         body: JSON.stringify(body),
@@ -224,7 +162,7 @@ export async function executeComLocally(excelTarget, code, options) {
     const sendExecRequest = async () => {
         let response;
         try {
-            response = await postControl({ code, autoApprove }, signal);
+            response = await postExec({ code, autoApprove: true }, signal);
         }
         catch (e) {
             if (signal?.aborted || isEditModeAbortError(e)) {
@@ -237,7 +175,6 @@ export async function executeComLocally(excelTarget, code, options) {
     };
     // Static analysis: skip approval for code with no detectable writes.
     const analysis = analyzeComWriteCode(code);
-    const dangerousLifecycleBypassed = analysis.alwaysRequireApproval && isDangerousExcelLifecycleBypassed(ctx);
     if (analysis.alwaysRequireApproval) {
         const approvalResult = await requestAlwaysConfirmApproval(approval, ctx, description, analysis.dangerousOperations, observability);
         const { choice } = approvalResult;
@@ -257,25 +194,26 @@ export async function executeComLocally(excelTarget, code, options) {
         }
         approvalSummaries = appendApprovalSummary(approvalSummaries, choice);
     }
-    const autoApprove = analysis.isReadOnly || analysis.alwaysRequireApproval || (approval?.isAutoApproved() ?? false);
-    const executionDecision = dangerousLifecycleBypassed
-        ? 'allow'
-        : resolveApprovalExecutionDecision({
-            surface: getApprovalSurface(ctx),
-            gateAvailable: approval !== undefined,
-            isSafe: analysis.isReadOnly,
-            isAutoApproved: approval?.isAutoApproved() ?? false,
-            alwaysRequireExplicitApproval: false,
-            allowHeadlessApproval: ctx?.permissionPolicy?.office.allowHeadlessApproval ?? false
-        });
-    if (executionDecision === 'deny') {
-        return {
-            result: {
-                ok: true,
-                output: INTERACTIVE_APPROVAL_UNAVAILABLE_MESSAGE
-            },
-            outcome: 'approval-unavailable'
-        };
+    else if (!analysis.isReadOnly) {
+        const approvalResult = await requestWriteApproval(approval, ctx, description, observability);
+        const { choice } = approvalResult;
+        if (choice !== APPROVAL.ACCEPT && choice !== APPROVAL.ACCEPT_ALL) {
+            return {
+                result: {
+                    ok: true,
+                    output: approvalResult.unavailable
+                        ? INTERACTIVE_APPROVAL_UNAVAILABLE_MESSAGE
+                        : 'Excel operation rejected by user.'
+                },
+                outcome: approvalResult.unavailable ? 'approval-unavailable' : 'rejected'
+            };
+        }
+        if (approvalResult.prompted && choice === APPROVAL.ACCEPT_ALL) {
+            approval?.onAcceptAll();
+        }
+        if (approvalResult.prompted) {
+            approvalSummaries = appendApprovalSummary(approvalSummaries, choice);
+        }
     }
     let result = await sendExecRequest();
     if (result.editMode) {
@@ -289,34 +227,6 @@ export async function executeComLocally(excelTarget, code, options) {
     if (!result.ok) {
         return { result, outcome: 'failed' };
     }
-    if (ctx) {
-        const { outcome, approvalSummaries: resolvedApprovalSummaries } = await resolveApproval(result, approval, (b) => postControl(b), ctx, description, observability, approvalSummaries);
-        return { result, outcome, approvalSummaries: resolvedApprovalSummaries };
-    }
-    if (result.diff) {
-        try {
-            await postControl({ control: CONTROL.REVERT, cfTxId: result.cfTxId });
-            return {
-                result: { ...result, output: 'Excel operation rejected by user.' },
-                outcome: 'reverted'
-            };
-        }
-        catch {
-            if (result.cfTxId != null) {
-                await postControl({ control: CONTROL.CLEANUP, cfTxId: result.cfTxId }).catch(() => { });
-            }
-            return {
-                result: { ...result, output: 'Excel operation rejected by user.' },
-                outcome: 'revert-failed'
-            };
-        }
-    }
-    if (result.cfTxId != null) {
-        await postControl({ control: CONTROL.CLEANUP, cfTxId: result.cfTxId }).catch((e) => {
-            const msg = e instanceof Error ? e.message : String(e);
-            log.error('excel-exec', `CF cleanup failed for tx ${result.cfTxId}: ${msg}`);
-        });
-    }
     return { result, outcome: 'accepted', approvalSummaries };
 }
 //# sourceMappingURL=executor.js.map

package/dist/app/local/tools/execute-code/observability.js

@@ -31,26 +31,6 @@ export function createExecuteCodeApprovalObservability(clientLogger) {
                     approval_kind: request.payload.kind
                 }
             });
-        },
-        onReverted: (request) => {
-            clientLogger.info({
-                module: 'tool',
-                event: 'tool_approval_reverted',
-                data: {
-                    tool_name: TOOL_NAME,
-                    approval_kind: request.payload.kind
-                }
-            });
-        },
-        onRevertFailed: (request) => {
-            clientLogger.error({
-                module: 'tool',
-                event: 'tool_approval_revert_failed',
-                data: {
-                    tool_name: TOOL_NAME,
-                    approval_kind: request.payload.kind
-                }
-            });
         }
     };
 }

package/dist/app/local/tools/execute-code/tool.js

@@ -81,23 +81,6 @@ export function createExcelExecTool(resolveTarget, approval, observability) {
                 ctx: ctx,
                 signal: signal ?? undefined
             });
-            if (outcome === 'revert-failed') {
-                return {
-                    content: [
-                        {
-                            type: 'text',
-                            text: 'Revert failed — changes are still applied in Excel. You may need to undo manually (Ctrl+Z).'
-                        }
-                    ],
-                    details: result
-                };
-            }
-            if (outcome === 'reverted') {
-                return {
-                    content: [{ type: 'text', text: 'Changes reverted by user.' }],
-                    details: result
-                };
-            }
             if (outcome === 'rejected') {
                 return {
                     content: [{ type: 'text', text: USER_REJECTED_APPROVAL_MESSAGE }],

package/dist/app/local/tools/execute-code/write-analyzer.js

@@ -47,8 +47,10 @@ const RAW_COM_WRITES = [
     /\.ClearComments\s*\(/,
     /\.ClearNotes\s*\(/,
     /\.Copy\s*\(/,
+    /\.Cut\s*\(/,
     /\.PasteSpecial\s*\(/,
     /\.AutoFill\s*\(/,
+    /\.Resize\s*\(/,
     /\.Merge\s*\(/,
     /\.UnMerge\s*\(/,
     /\.Move\s*\(/,