shortcutxl 0.3.92 → 0.4.0

package/BINARY-INVENTORY.json

@@ -1,17 +1,17 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-09-28T15:24:40.862Z",
+  "generatedAt": "2026-10-16T08:21:32.448Z",
   "package": "shortcutxl",
   "build": {
     "builder": "github-actions",
     "repository": "lyfegame/shortcut",
-    "sourceRef": "refs/tags/shortcutxl/v0.3.92",
-    "sourceCommit": "e570fa7e9f098635d5a8594035f1ec509d6c84f2",
-    "workflowRef": "lyfegame/shortcut/.github/workflows/release-shortcut-cli-npm-package.yml@refs/tags/shortcutxl/v0.3.92",
-    "runId": "36443042051",
+    "sourceRef": "refs/tags/v1.4.2",
+    "sourceCommit": "3219fe2c69c4af2fae45dfbefcaf3f342f0a7b16",
+    "workflowRef": "lyfegame/shortcut/.github/workflows/release-shortcut-cli-npm-package.yml@refs/tags/v1.4.2",
+    "runId": "38872922196",
     "runnerOs": "Windows",
     "runnerImage": "win25-vs2026",
-    "runnerImageVersion": "20260922.246.2"
+    "runnerImageVersion": "20261007.264.1"
   },
   "binaryExtensions": [
     ".dll",
@@ -22,7 +22,7 @@
   "files": [
     {
       "path": "xll/ShortcutPowerPoint.dll",
-      "sha256": "e74ec73ef238eff5f936ffb236610220c2c545da164a7cf58b868ae1b4fa1d45",
+      "sha256": "b8089cd4a6f2e039e7ed3d02aadf8e3fe1041a912b6f7e49e99ff3c35e53ec45",
       "source": "ShortcutXL native PowerPoint COM add-in build",
       "version": "package",
       "builtBy": "shortcut",
@@ -30,7 +30,7 @@
     },
     {
       "path": "xll/ShortcutWord.dll",
-      "sha256": "17a78ed362a9edd2dc413d6d090c37347eb68a27cb23b53e91f647c9f940fe37",
+      "sha256": "3d370fdbe2c0199570dc304134691109a308d5f34972fb3d51e8badffc6ec217",
       "source": "ShortcutXL native Word COM add-in build",
       "version": "package",
       "builtBy": "shortcut",
@@ -38,7 +38,7 @@
     },
     {
       "path": "xll/ShortcutXL.xll",
-      "sha256": "b3ea0f0ac97160f45fa4571488e3e038ef0a09bd7d5d67833eb1248f24d9ff50",
+      "sha256": "2deeb2024a16e9b2c61ae3ab21a44f895adaceff63f69b8abdb16efeb3e7371b",
       "source": "ShortcutXL native XLL build",
       "version": "package",
       "builtBy": "shortcut",
@@ -550,7 +550,7 @@
     },
     {
       "path": "xll/python/Scripts/httpx.exe",
-      "sha256": "38991b06575eecf3ed2dce55d63b5f70617a132462b6e011a05567836017458b",
+      "sha256": "0e49cb7f40f70253c02d49ab79b29be67d93063e887d7de3c8a5c899fc36e2ed",
       "source": "httpx console launcher installed into embedded Python",
       "version": "see packaged httpx distribution",
       "builtBy": "third-party",
@@ -558,7 +558,7 @@
     },
     {
       "path": "xll/python/Scripts/idna.exe",
-      "sha256": "93cfec5f08ff75bd6358ddf0427d0ed53bbdcc8c139b8feac5b96671d4e22d4f",
+      "sha256": "1f35eb0adf3a6e3e0b7d9c8ab4c67b204105c89c38d2af8d5ef0d685adc88a43",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",
@@ -566,7 +566,7 @@
     },
     {
       "path": "xll/python/Scripts/pip.exe",
-      "sha256": "417cbb3269a7e6fdfe8bdf606f56ea86f80f0fc5d939d65c7857d0f3aa263c2c",
+      "sha256": "a18ee877cdb3f3ebb4ac76f3ebc483bf88827afb1bed3ff57525a09e5fd36a78",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -574,7 +574,7 @@
     },
     {
       "path": "xll/python/Scripts/pip3.13.exe",
-      "sha256": "417cbb3269a7e6fdfe8bdf606f56ea86f80f0fc5d939d65c7857d0f3aa263c2c",
+      "sha256": "a18ee877cdb3f3ebb4ac76f3ebc483bf88827afb1bed3ff57525a09e5fd36a78",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -582,7 +582,7 @@
     },
     {
       "path": "xll/python/Scripts/pip3.exe",
-      "sha256": "417cbb3269a7e6fdfe8bdf606f56ea86f80f0fc5d939d65c7857d0f3aa263c2c",
+      "sha256": "a18ee877cdb3f3ebb4ac76f3ebc483bf88827afb1bed3ff57525a09e5fd36a78",
       "source": "pip console launcher installed into embedded Python",
       "version": "see packaged pip distribution",
       "builtBy": "third-party",
@@ -590,7 +590,7 @@
     },
     {
       "path": "xll/python/Scripts/pywin32_postinstall.exe",
-      "sha256": "e0b6ba36d80a9cd5d712e05a5b7cbe353afa05a65e51d26b60680ef75d49cc98",
+      "sha256": "92c26edfb1e998be31e193117b5127bc7e68c7e91b20f1d9f092e80dc033334b",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",
@@ -598,7 +598,7 @@
     },
     {
       "path": "xll/python/Scripts/pywin32_testall.exe",
-      "sha256": "fdac2f9fbcf98b44f89e9846f727b93c8f6f4be6fa9db2210cc62450e1e74d52",
+      "sha256": "7785f397a3a431481f87f91e5b8bd2020fdadd1358e05dab49a7f2203627fa9c",
       "source": "Python package console launcher installed into embedded Python",
       "version": "see owning Python package metadata in site-packages",
       "builtBy": "third-party",

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.4.0]
+
+- **Sign in again after upgrading** - Shortcut credentials now use an account store scoped to the selected deployment. Existing CLI and desktop users must sign in again; standalone provider keys remain available.
+
+- **Faster Windows startup with connected integrations** - Reduce credential-store work and prevent token refreshes from blocking unrelated MCP integrations during startup.
+- **Better Excel connection recovery** - Detect when Excel disconnects or restarts, refresh the connection, and report more useful native Excel failure details.
+
+- **Updated model selection and controls** - Add GPT-6.1 Sol and Claude Sonnet 5.5, update response-speed and thinking controls, and improve model selection for task agents.
+- **Continue desktop work in Shortcut Cloud** - Pause a local conversation, select a saved workbook and supporting files, and prepare a cloud continuation.
+- **Accurate desktop permission controls** - Unstarted chats show saved defaults explicitly; approval choices made before sending remain in effect when the runtime starts.
+- **Desktop navigation and file previews** - Preview linked text, images, and videos inside the app, with updated keyboard shortcuts and session controls.
+- **Account and integration routing** - Add deployment-aware account routing and user-configured private gateway support, with improved MCP login persistence and token refresh recovery.
+- **Long-running agent reliability** - Improve subagent context compaction, model transport handling, and terminal rendering.
+
 ## [0.3.92]
 
 - **Latest OpenAI and Anthropic models** - Select GPT-6 Sol, GPT-6 Luna, or Claude Opus 5.5 in the CLI and Windows app. New CLI sessions default to GPT-6 Sol.

package/dist/ai/api-registry.d.ts

@@ -11,6 +11,8 @@ interface ApiProviderInternal {
     stream: ApiStreamFunction;
     streamSimple: ApiStreamSimpleFunction;
 }
+/** The local CLI installs its verified account policy at the transport boundary. */
+export declare function setModelRequestGuard(guard: ((model: Model<Api>) => void) | undefined): void;
 export declare function registerApiProvider<TApi extends Api, TOptions extends StreamOptions>(provider: ApiProvider<TApi, TOptions>, sourceId?: string): void;
 export declare function getApiProvider(api: Api): ApiProviderInternal | undefined;
 export declare function getApiProviders(): ApiProviderInternal[];

package/dist/ai/api-registry.js

@@ -1,6 +1,12 @@
+let modelRequestGuard;
+/** The local CLI installs its verified account policy at the transport boundary. */
+export function setModelRequestGuard(guard) {
+    modelRequestGuard = guard;
+}
 const apiProviderRegistry = new Map();
 function wrapStream(api, stream) {
     return (model, context, options) => {
+        modelRequestGuard?.(model);
         if (model.api !== api) {
             throw new Error(`Mismatched api: ${model.api} expected ${api}`);
         }
@@ -9,6 +15,7 @@ function wrapStream(api, stream) {
 }
 function wrapStreamSimple(api, streamSimple) {
     return (model, context, options) => {
+        modelRequestGuard?.(model);
         if (model.api !== api) {
             throw new Error(`Mismatched api: ${model.api} expected ${api}`);
         }