@jelou/cli 1.75.2 → 1.76.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1) hide show
  1. package/package.json +34 -10
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@jelou/cli",
3
- "version": "1.75.2",
3
+ "version": "1.76.0",
4
4
  "description": "Build AI agents on the Jelou platform — from your terminal or your AI editor.",
5
5
  "author": "Jelou Inc. (https://jelou.ai)",
6
6
  "license": "SEE LICENSE IN LICENSE",
@@ -23,11 +23,11 @@
23
23
  "THIRD_PARTY_NOTICES.md"
24
24
  ],
25
25
  "optionalDependencies": {
26
- "@jelou/cli-darwin-arm64": "1.75.2",
27
- "@jelou/cli-darwin-x64": "1.75.2",
28
- "@jelou/cli-linux-x64": "1.75.2",
29
- "@jelou/cli-linux-arm64": "1.75.2",
30
- "@jelou/cli-win32-x64": "1.75.2"
26
+ "@jelou/cli-darwin-arm64": "1.76.0",
27
+ "@jelou/cli-darwin-x64": "1.76.0",
28
+ "@jelou/cli-linux-x64": "1.76.0",
29
+ "@jelou/cli-linux-arm64": "1.76.0",
30
+ "@jelou/cli-win32-x64": "1.76.0"
31
31
  },
32
32
  "keywords": [
33
33
  "jelou",
@@ -58,17 +58,41 @@
58
58
  "jelou": {
59
59
  "minVersion": "1.73.0",
60
60
  "release_notes": {
61
- "version": "1.75.2",
61
+ "version": "1.76.0",
62
62
  "date": "2026-07-28",
63
- "headline": "Build errors are finally reachable after a failed or timed-out deploy — a new `jelou functions deployments build` command surfaces the build log.",
63
+ "headline": "Workflow audits separate scanner facts from model judgment, and 64% of false findings are gone.",
64
64
  "highlights": [
65
65
  {
66
66
  "type": "new",
67
- "text": "`jelou functions deployments build [slug] [id]` — prints a deploy's build log (error + warning lines; `--all` adds info lines). Defaults to the newest deployment, so a bare call answers \"why did the deploy I just ran fail?\" Reports `pending` while a build is still compiling."
67
+ "text": "`--review-packet` / `--review <file>` — the audit writes a facts-only digest of a workflow for an agent to read, then merges its verdicts back into the report. Model verdicts are reported and scored but never change the exit code."
68
+ },
69
+ {
70
+ "type": "new",
71
+ "text": "A 9-dimension score for the bot. A dimension nothing assessed reports `—` instead of full marks, so a scan-only run says \"28/100 over 60 assessed points\" rather than claiming a clean bill of health."
72
+ },
73
+ {
74
+ "type": "new",
75
+ "text": "The audit reads the channel — it flags WhatsApp-only nodes wired on another channel, message types the channel cannot render, and channels with no runtime support. If the snapshot names no channel, it stays quiet rather than guessing."
76
+ },
77
+ {
78
+ "type": "new",
79
+ "text": "Two new security checks: injection through a database query, and a hardcoded encryption key in a `CODE` node. On a real bot an AES master key was invisible to every previous rule."
68
80
  },
69
81
  {
70
82
  "type": "fixed",
71
- "text": "After a `BUILD_FAILED` / `BUILD_TIMEOUT`, `jelou functions deploy` now points you at `deployments build` with the full deployment id — previously it sent you to `functions info`, which only ever showed the last *good* deployment and said nothing about the build that just died. `functions info` now also flags a newer deployment that never went live and links to its build log."
83
+ "text": "The audit stopped demanding an error branch named `error` when the platform emits `failed`. On a real 14-workflow bot that alone was **130 of 203 findings — 64% noise**. An AI step that merely set a language also stopped being told to split its instructions into separate pillars (22 more false findings)."
84
+ },
85
+ {
86
+ "type": "fixed",
87
+ "text": "The review packet no longer carries credentials. Tokens, URLs with passwords and raw prompt text were handed to the model verbatim while the report redacted the same values."
88
+ },
89
+ {
90
+ "type": "fixed",
91
+ "text": "A workflow id taken from a snapshot can no longer write outside `--out-dir`, and a model's verdict can no longer flip the exit code."
92
+ },
93
+ {
94
+ "type": "heads_up",
95
+ "text": "Four keyword rules are gone — AI disclosure, unscoped AI, restricted content and PII consent. Each fired on good copy that happened to contain a listed word and went silent on the same defect rephrased. All four were advisory and never gated CI; the questions they asked are review lens questions now."
72
96
  }
73
97
  ]
74
98
  }