@jelou/cli 1.101.2 → 1.102.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jelou/cli",
-  "version": "1.101.2",
+  "version": "1.102.0",
   "description": "Build AI agents on the Jelou platform — from your terminal or your AI editor.",
   "author": "Jelou Inc. (https://jelou.ai)",
   "license": "SEE LICENSE IN LICENSE",
@@ -23,11 +23,11 @@
     "THIRD_PARTY_NOTICES.md"
   ],
   "optionalDependencies": {
-    "@jelou/cli-darwin-arm64": "1.101.2",
-    "@jelou/cli-darwin-x64": "1.101.2",
-    "@jelou/cli-linux-x64": "1.101.2",
-    "@jelou/cli-linux-arm64": "1.101.2",
-    "@jelou/cli-win32-x64": "1.101.2"
+    "@jelou/cli-darwin-arm64": "1.102.0",
+    "@jelou/cli-darwin-x64": "1.102.0",
+    "@jelou/cli-linux-x64": "1.102.0",
+    "@jelou/cli-linux-arm64": "1.102.0",
+    "@jelou/cli-win32-x64": "1.102.0"
   },
   "keywords": [
     "jelou",
@@ -58,13 +58,25 @@
   "jelou": {
     "minVersion": "1.100.2",
     "release_notes": {
-      "version": "1.101.2",
-      "date": "2026-08-20",
-      "headline": "Fixed `jelou pull` and `jelou push` silently erasing marketplace-skill entries from `jelou.lock`.",
+      "version": "1.102.0",
+      "date": "2026-08-24",
+      "headline": "New read-only mode: `JELOU_READ_ONLY=1` lets reads through and refuses anything that changes Jelou.",
       "highlights": [
         {
-          "type": "fixed",
-          "text": "`jelou pull` and `jelou push` no longer erase the marketplace-skill entries from `jelou.lock` when rewriting it. Previously every full pull, and every push that sent changes, dropped them — leaving skills untracked until a `jelou marketplace-skill pull --all`."
+          "type": "new",
+          "text": "Read-only mode: set `JELOU_READ_ONLY=1` and reads plus local-only actions keep working — `pull`, `list`, `logs`, profile switching — while anything that runs or changes something inside Jelou is refused before it starts (exit 4, `OPERATION_NOT_ALLOWED`). One-off form: `jelou --read-only <command>`."
+        },
+        {
+          "type": "new",
+          "text": "`--describe` now reports an `access` block per leaf command: which effects it has, whether it is safe to run while only inspecting, and safer variants such as `push --dry-run`."
+        },
+        {
+          "type": "improved",
+          "text": "Installed skills now pick commands from that `access` metadata and treat a refusal as final instead of retrying it. Run `jelou agent install` to refresh skills you already installed."
+        },
+        {
+          "type": "improved",
+          "text": "The workflow-building skill now maps the AI node's Studio \"Context\" tab field by field to its config keys — initial message, message history, file uploads, documents, images, databases, and the memory tools."
         }
       ]
     }