@jelou/cli 1.108.2 → 1.110.0

package/bin/postinstall.js

@@ -9,8 +9,15 @@
 //    cold-start) with a relative symlink to the platform binary itself.
 //    When npm wires `<global>/bin/jelou` -> `<wrapper>/bin/jelou`, the
 //    chain now resolves straight to the native binary, no node hop.
+// 3. Record where that shim is, and what it points at, in
+//    `~/.jelou/install-manifest.json`. The CLI cannot rediscover this at
+//    runtime: `Deno.execPath()` returns the invoked path on macOS and the
+//    resolved one on Linux, so walking up to node_modules works on one and
+//    not the other. Writing it down here is the only reliable source.
+//    Best-effort — a manifest failure must never fail an install.
 
 const fs = require("fs");
+const os = require("os");
 const path = require("path");
 const {
   PLATFORMS,
@@ -50,6 +57,71 @@ if (!fs.existsSync(binPath)) {
   process.exit(1);
 }
 
+// --- install manifest ---
+// Keyed by shim path, and merged rather than replaced: one machine can carry
+// several independent global installs (e.g. a Homebrew node prefix and a
+// user-owned ~/.local one), each with its own postinstall. A single-record
+// manifest would let the last install to run claim a shim it does not own.
+function manifestPath() {
+  const home = os.homedir();
+  return home ? path.join(home, ".jelou", "install-manifest.json") : null;
+}
+
+function readManifest(file) {
+  try {
+    const parsed = JSON.parse(fs.readFileSync(file, "utf8"));
+    if (parsed && typeof parsed === "object" && parsed.installs) return parsed;
+  } catch (_) {
+    // Missing or corrupt — start fresh rather than refusing to install.
+  }
+  return { version: 1, installs: {} };
+}
+
+function recordManifest(shimKind) {
+  const file = manifestPath();
+  if (!file) return;
+  try {
+    let wrapperVersion = null;
+    try {
+      wrapperVersion = require("../package.json").version || null;
+    } catch (_) {
+      // Version is informational; a missing one must not skip the manifest.
+    }
+
+    const manifest = readManifest(file);
+    manifest.version = 1;
+
+    // Drop entries whose shim is gone (uninstalled prefix), but never touch a
+    // live sibling install. lstat, not existsSync: existsSync follows the
+    // link, so a sibling whose target is momentarily missing — that prefix
+    // running its own install — would look gone and be pruned.
+    for (const key of Object.keys(manifest.installs)) {
+      if (key === shimPath) continue;
+      try {
+        fs.lstatSync(key);
+      } catch {
+        delete manifest.installs[key];
+      }
+    }
+
+    manifest.installs[shimPath] = {
+      shimKind: shimKind,
+      baselineTarget: relativeTarget,
+      baselineBinary: binPath,
+      version: wrapperVersion,
+      writtenAt: new Date().toISOString(),
+    };
+
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    const tmp = file + ".tmp-" + process.pid;
+    fs.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n");
+    fs.renameSync(tmp, file);
+  } catch (_) {
+    // Best-effort by design. Losing the manifest only disables background
+    // updates; failing the install here would be far worse.
+  }
+}
+
 // --- fast-shim rewrite (Unix only for now) ---
 // On Windows npm generates `.cmd` and `.ps1` shims that hardcode
 // `node "<wrapper>/bin/jelou"`; replacing the wrapper script doesn't
@@ -71,28 +143,51 @@ const relativeTarget = path.relative(wrapperBin, binPath);
 try {
   const stat = fs.lstatSync(shimPath);
   if (stat.isSymbolicLink() && fs.readlinkSync(shimPath) === relativeTarget) {
+    // The shim is already right, but the manifest still has to be refreshed:
+    // relativeTarget is identical across versions, so this branch is the one
+    // taken on every ordinary upgrade.
+    recordManifest("symlink");
     process.exit(0);
   }
 } catch (_) {
   // shim not present yet — fine, we'll create it.
 }
 
-try {
-  fs.rmSync(shimPath, { force: true });
-} catch (_) {
-  // nothing to remove
+// Write through a tmp sibling + rename so the shim is never briefly absent.
+// The old rmSync-then-symlinkSync left a window where `<wrapper>/bin/jelou`
+// did not exist, and a concurrent `jelou` invocation got ENOENT. rename(2)
+// is atomic, so a reader sees the old shim or the new one, never neither.
+const tmpPath = shimPath + ".tmp-" + process.pid;
+
+function swapIn(write) {
+  try {
+    fs.rmSync(tmpPath, { force: true });
+  } catch (_) {
+    // nothing to remove
+  }
+  write(tmpPath);
+  fs.renameSync(tmpPath, shimPath);
 }
 
+let shimKind;
 try {
-  fs.symlinkSync(relativeTarget, shimPath);
-  process.exit(0);
+  swapIn((p) => fs.symlinkSync(relativeTarget, p));
+  shimKind = "symlink";
 } catch (err) {
   // EPERM (Windows w/o developer mode), EXDEV (cross-device install),
   // EROFS (read-only FS in some sandboxes). Fall back to a tiny shell
   // wrapper. Adds ~1-3ms vs ~0ms for symlink, but still much better than
   // the 20ms node-boot hop the wrapper script costs.
+  try {
+    fs.rmSync(tmpPath, { force: true });
+  } catch (_) {
+    // nothing to remove
+  }
   const safeTarget = relativeTarget.replace(/(["\\$`])/g, "\\$1");
   const shell = `#!/bin/sh\nexec "$(dirname "$0")/${safeTarget}" "$@"\n`;
-  fs.writeFileSync(shimPath, shell, { mode: 0o755 });
-  process.exit(0);
+  swapIn((p) => fs.writeFileSync(p, shell, { mode: 0o755 }));
+  shimKind = "shell";
 }
+
+recordManifest(shimKind);
+process.exit(0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jelou/cli",
-  "version": "1.108.2",
+  "version": "1.110.0",
   "description": "Build AI agents on the Jelou platform — from your terminal or your AI editor.",
   "author": "Jelou Inc. (https://jelou.ai)",
   "license": "SEE LICENSE IN LICENSE",
@@ -23,11 +23,11 @@
     "THIRD_PARTY_NOTICES.md"
   ],
   "optionalDependencies": {
-    "@jelou/cli-darwin-arm64": "1.108.2",
-    "@jelou/cli-darwin-x64": "1.108.2",
-    "@jelou/cli-linux-x64": "1.108.2",
-    "@jelou/cli-linux-arm64": "1.108.2",
-    "@jelou/cli-win32-x64": "1.108.2"
+    "@jelou/cli-darwin-arm64": "1.110.0",
+    "@jelou/cli-darwin-x64": "1.110.0",
+    "@jelou/cli-linux-x64": "1.110.0",
+    "@jelou/cli-linux-arm64": "1.110.0",
+    "@jelou/cli-win32-x64": "1.110.0"
   },
   "keywords": [
     "jelou",
@@ -58,45 +58,17 @@
   "jelou": {
     "minVersion": "1.100.2",
     "release_notes": {
-      "version": "1.108.2",
-      "date": "2026-09-02",
-      "headline": "Cold start drops 167ms → 49ms, and an optional update no longer interrupts an agent mid-task.",
+      "version": "1.110.0",
+      "date": "2026-09-03",
+      "headline": "`jelou logs chat` now rebuilds conversations that the server returns short or empty.",
       "highlights": [
         {
           "type": "fixed",
-          "text": "Agents no longer stop what they are doing to ask about an optional CLI update. The notice is dismissed on its own and mentioned in one line at the end of the answer, so a release landing mid-session stops derailing the task."
-        },
-        {
-          "type": "fixed",
-          "text": "Answering \"Exit\" at the update prompt now actually dismisses it. Nothing was being recorded, so the prompt came back on the very next command."
-        },
-        {
-          "type": "fixed",
-          "text": "Every failure path now exits with the code it reports. Commands that returned `error.code` 4 (re-auth) or 3 (not found) still exited 1, so agents branching on the exit code took the wrong path."
-        },
-        {
-          "type": "fixed",
-          "text": "`jelou push` now reports unresolved tool output-branch warnings in the `--json` envelope. They were printed for humans and dropped for everyone else."
-        },
-        {
-          "type": "fixed",
-          "text": "`jelou changelog` reads the shipped changelog files again — section parsing looked for a heading no file actually uses."
-        },
-        {
-          "type": "improved",
-          "text": "Cold start is down from 167ms to 49ms: command groups load on demand instead of all 37 up front, and the version check no longer blocks your command on a network round trip."
+          "text": "`jelou logs chat` no longer presents a trimmed conversation as the whole story. It re-reads the executions in range that the timeline failed to account for, so messages the server drops — or cannot serve from cold storage — still appear, and a new `sources` block says where each item came from."
         },
         {
           "type": "improved",
-          "text": "The skill preamble every agent reads on each invocation shrank from ~11.5 KB to a stub, with the upgrade flow loaded only when something is actually out of date."
-        },
-        {
-          "type": "improved",
-          "text": "Skills no longer show agents examples that pass `--yes` on destructive commands."
-        },
-        {
-          "type": "heads_up",
-          "text": "Destructive commands (`jelou project delete`, the `voice` surface, `logout`, and functions removals) now fail loudly under `--agent` / `--no-input` when `--yes` is missing. They used to exit 0 having done nothing. Add `--yes` to any script that relied on the old behavior."
+          "text": "Reaching your project limit now shows the reason the platform gives, instead of a generic permission error."
         }
       ]
     }