@jelou/cli 1.148.0 → 1.149.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jelou/cli",
-  "version": "1.148.0",
+  "version": "1.149.1",
   "description": "Build AI agents on the Jelou platform — from your terminal or your AI editor.",
   "author": "Jelou Inc. (https://jelou.ai)",
   "license": "SEE LICENSE IN LICENSE",
@@ -23,11 +23,11 @@
     "THIRD_PARTY_NOTICES.md"
   ],
   "optionalDependencies": {
-    "@jelou/cli-darwin-arm64": "1.148.0",
-    "@jelou/cli-darwin-x64": "1.148.0",
-    "@jelou/cli-linux-x64": "1.148.0",
-    "@jelou/cli-linux-arm64": "1.148.0",
-    "@jelou/cli-win32-x64": "1.148.0"
+    "@jelou/cli-darwin-arm64": "1.149.1",
+    "@jelou/cli-darwin-x64": "1.149.1",
+    "@jelou/cli-linux-x64": "1.149.1",
+    "@jelou/cli-linux-arm64": "1.149.1",
+    "@jelou/cli-win32-x64": "1.149.1"
   },
   "keywords": [
     "jelou",
@@ -56,35 +56,27 @@
     "access": "public"
   },
   "jelou": {
-    "minVersion": "1.147.0",
+    "minVersion": "1.149.1",
     "release_notes": {
-      "version": "1.148.0",
+      "version": "1.149.1",
       "date": "2026-09-21",
-      "headline": "Un tool que se corta a los 40s deja de decir \"reintenta\", los refs de graph sugieren candidatos, y `tool input add` ya puede crear un input opcional.",
+      "headline": "`jelou functions tokens create` is retired, and Functions auth guidance now matches the platform.",
       "highlights": [
         {
-          "type": "new",
-          "text": "`jelou tool input add --no-required` crea un input opcional. Antes `--required` se leía como opt-in pero omitirlo dejaba el input requerido igual, y la única salida era crearlo y después actualizarlo."
+          "type": "heads_up",
+          "text": "`jelou functions tokens create` no longer mints a runtime token — the platform retired them. It exits 2 with the migration path: create a Jelou API key in the apps configuration section of the organization that owns the function and send it as `Authorization: Bearer`. `tokens list` and `tokens revoke` still work."
         },
         {
-          "type": "fixed",
-          "text": "Un `jelou test tool` que pasa de 40s lo corta el gateway con un 500. Eso se reportaba como error transitorio con \"espera y reintenta\", así que el consejo era repetir una llamada que falla igual siempre. Ahora sale como TOOL_SYNC_TIMEOUT, no reintentable, con el tiempo real en `details.elapsedMs`."
-        },
-        {
-          "type": "fixed",
-          "text": "`jelou graph references <ref>` ya sugiere candidatos cuando el ref no resuelve: antes `error.details.candidates` volvía siempre vacío aunque el mensaje te mandara a mirarlo. El caso típico es pasar el slug pelado (`saludo`) en vez del archivo."
-        },
-        {
-          "type": "fixed",
-          "text": "La skill `jelou-logs` ya no dice que exit 3 significa bot id equivocado: es ambiguo (bot desconocido o ventana vacía), `--bot-id` toma el `referenceId` del canal y no su ULID, y la resolución de un ULID solo mira los primeros 50 canales."
+          "type": "heads_up",
+          "text": "A deploy drops any runtime tokens a function still has. Callers still sending a `jfn_rt_*` token start getting 401 after the next deploy, even one unrelated to auth."
         },
         {
           "type": "fixed",
-          "text": "La skill `jelou-test-workflows` explica cómo leer un output FAILED con `value: null` — el `executionId` viene en el envelope y `jelou logs execution <id> --failed-only` dice qué nodo lo produjo."
+          "text": "The Functions skills taught the retired runtime-token model, which led agents to blame the header name on a 401. They now teach API keys, and how to tell a rejected credential (`Invalid auth token`) from a missing one."
         },
         {
           "type": "fixed",
-          "text": "El traductor de wording ya no afirma acciones que no hizo: el verbo sale solo del campo `action`, y una entrada sin `action` conocido no suma al conteo del encabezado."
+          "text": "`jelou functions tokens list` no longer claims a deploy auto-generates a token."
         }
       ]
     }