@jelou/cli 1.37.0 → 1.37.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jelou/cli",
-  "version": "1.37.0",
+  "version": "1.37.1",
   "description": "Build AI agents on the Jelou platform — from your terminal or your AI editor.",
   "author": "Jelou Inc. (https://jelou.ai)",
   "license": "SEE LICENSE IN LICENSE",
@@ -23,11 +23,11 @@
     "THIRD_PARTY_NOTICES.md"
   ],
   "optionalDependencies": {
-    "@jelou/cli-darwin-arm64": "1.37.0",
-    "@jelou/cli-darwin-x64": "1.37.0",
-    "@jelou/cli-linux-x64": "1.37.0",
-    "@jelou/cli-linux-arm64": "1.37.0",
-    "@jelou/cli-win32-x64": "1.37.0"
+    "@jelou/cli-darwin-arm64": "1.37.1",
+    "@jelou/cli-darwin-x64": "1.37.1",
+    "@jelou/cli-linux-x64": "1.37.1",
+    "@jelou/cli-linux-arm64": "1.37.1",
+    "@jelou/cli-win32-x64": "1.37.1"
   },
   "keywords": [
     "jelou",
@@ -56,27 +56,43 @@
     "access": "public"
   },
   "jelou": {
-    "minVersion": "1.37.0",
+    "minVersion": "1.37.1",
     "release_notes": {
-      "version": "1.37.0",
-      "date": "2026-05-26",
-      "headline": "build-workflow skill now understands `CHECKPOINT`/`NOTE`/`EMPTY` node types and their Spanish builder labels.",
+      "version": "1.37.1",
+      "date": "2026-05-27",
+      "headline": "Fixed `meta.update_available.below_floor` dropping on error exits and env-var bypasses.",
       "highlights": [
         {
-          "type": "new",
-          "text": "The `jelou-build-workflow` skill now recognizes `CHECKPOINT` (_Marcador_), `NOTE` (_Notas_), and `EMPTY` (_Paso_) — workflows containing these no longer confuse the agent into picking the wrong type."
+          "type": "fixed",
+          "text": "`meta.update_available.below_floor: true` is now stamped on every agent envelope when the CLI is below the floor — including error responses (auth, input, validation). Previously ~187 `output.failWith` callsites silently terminated before the envelope meta was attached."
         },
         {
-          "type": "new",
-          "text": "New non-marketplace selection rubric in the skill catalog: a decision tree that walks the agent from \"what does this step do\" to a single node-type pick, with anti-patterns for common misuse (wiring edges to NOTEs, leaving EMPTYs in production, using CHECKPOINT for data capture)."
+          "type": "fixed",
+          "text": "`JELOU_NO_UPDATE_CHECK=1` and `JELOU_ALLOW_OUTDATED=1` no longer silence the floor signal. Both env vars remain valid for skipping network probes / suppressing stderr noise; the agent-visible flag is unconditional now."
+        },
+        {
+          "type": "fixed",
+          "text": "Hostile or middleman'd npm registry payloads with an unterminated OSC hyperlink (e.g. `\\x1b]8;;<URL>` with no `\\x07` terminator) can no longer inject visible attacker URLs into the update prompt's release-notes display."
         },
         {
           "type": "new",
-          "text": "New `references/NODE_ALIASES_ES.md` maps Spanish toolbar labels (e.g. _Marcador_ → `CHECKPOINT`, _Plantilla_ → `HSM`, _Shop_ → `ECOMMERCE`) back to canonical type IDs, so Spanish-language workflow requests resolve correctly."
+          "text": "`meta.update_available.min_version` field on the agent envelope when below floor — distinguishes the published `minVersion` floor from `latest` (registry's most-recent build). Agents can now render \"upgrade to at least X\" accurately."
+        },
+        {
+          "type": "improved",
+          "text": "Stderr footer now reads `Update required: X → Y (below minimum version Z)` when the CLI is below floor (previously used identical wording to a routine soft update)."
+        },
+        {
+          "type": "improved",
+          "text": "Audit log line under `~/.jelou/hard-stops.log` restored to `blocked outdated currentVersion=...` prefix for back-compat with anchored `^blocked` ops dashboards."
+        },
+        {
+          "type": "heads_up",
+          "text": "`minVersion` floor moves from `1.37.0` to `1.37.1`. Every CLI below `1.37.1` will see the soft \"Update available\" prompt on next invocation (within ~5 min cache TTL); `--json`/`--agent` envelopes also stamp `below_floor: true`. The CLI still runs either way — nothing is blocked."
         },
         {
           "type": "heads_up",
-          "text": "Raises the `minVersion` floor to `1.37.0`. Older CLIs hard-stop on next invocation until the user runs `jelou update`. The allow-list (`update`, `doctor`, `logout`, `--version`, `--help`) and `JELOU_ALLOW_OUTDATED=1` remain available as escape hatches."
+          "text": "`JELOU_ALLOW_OUTDATED=1` is now a no-op (emits a once-per-machine deprecation note on first use). Safe to remove from `.zshrc` / CI configs."
         }
       ]
     }