@jelou/cli 1.75.2 → 1.77.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jelou/cli",
-  "version": "1.75.2",
+  "version": "1.77.0",
   "description": "Build AI agents on the Jelou platform — from your terminal or your AI editor.",
   "author": "Jelou Inc. (https://jelou.ai)",
   "license": "SEE LICENSE IN LICENSE",
@@ -23,11 +23,11 @@
     "THIRD_PARTY_NOTICES.md"
   ],
   "optionalDependencies": {
-    "@jelou/cli-darwin-arm64": "1.75.2",
-    "@jelou/cli-darwin-x64": "1.75.2",
-    "@jelou/cli-linux-x64": "1.75.2",
-    "@jelou/cli-linux-arm64": "1.75.2",
-    "@jelou/cli-win32-x64": "1.75.2"
+    "@jelou/cli-darwin-arm64": "1.77.0",
+    "@jelou/cli-darwin-x64": "1.77.0",
+    "@jelou/cli-linux-x64": "1.77.0",
+    "@jelou/cli-linux-arm64": "1.77.0",
+    "@jelou/cli-win32-x64": "1.77.0"
   },
   "keywords": [
     "jelou",
@@ -58,17 +58,33 @@
   "jelou": {
     "minVersion": "1.73.0",
     "release_notes": {
-      "version": "1.75.2",
+      "version": "1.77.0",
       "date": "2026-07-28",
-      "headline": "Build errors are finally reachable after a failed or timed-out deploy — a new `jelou functions deployments build` command surfaces the build log.",
+      "headline": "The workflow audit skill now reads and judges your bot itself, and hands back work items you can assign — grouped by security, integrity, UX, cost and maintainability.",
       "highlights": [
         {
-          "type": "new",
-          "text": "`jelou functions deployments build [slug] [id]` — prints a deploy's build log (error + warning lines; `--all` adds info lines). Defaults to the newest deployment, so a bare call answers \"why did the deploy I just ran fail?\" Reports `pending` while a build is still compiling."
+          "type": "improved",
+          "text": "The audit skill reads every workflow and the routing between them instead of running a fixed rule list. On a real bank project those rules produced 130 false findings out of 203 by demanding an error branch the platform does not emit, and missed a live API key, a dead confirmation screen, and a validation that let `-100` through as `100`."
         },
         {
-          "type": "fixed",
-          "text": "After a `BUILD_FAILED` / `BUILD_TIMEOUT`, `jelou functions deploy` now points you at `deployments build` with the full deployment id — previously it sent you to `functions info`, which only ever showed the last *good* deployment and said nothing about the build that just died. `functions info` now also flags a newer deployment that never went live and links to its build log."
+          "type": "improved",
+          "text": "Findings arrive as work items with a referenceable id — `S1` security, `I1` integrity, `U1` UX, `C1` cost, `M1` maintainability — numbered by severity, so `S1` is your project's worst security problem."
+        },
+        {
+          "type": "improved",
+          "text": "Every item shows the exact text from your workflow and the replacement text you can paste, not a description of what to change. Credentials are quoted by field with the value redacted."
+        },
+        {
+          "type": "improved",
+          "text": "Cost items come with the arithmetic: characters counted from your prompt, the model price from `jelou models show`, and conversation volume from `jelou logs conversations list`, with every assumption stated so you can redo the math with your own numbers."
+        },
+        {
+          "type": "improved",
+          "text": "The audit reports what it actually opened — workflows, nodes, and what it could not assess. A dimension it did not check scores `—`, never full marks."
+        },
+        {
+          "type": "heads_up",
+          "text": "The audit no longer returns an exit code and cannot gate a pipeline. It produces a judgment, not a build status. If you were shelling out to the skill's `bin/workflow-audit`, that binary is gone; run the audit through your agent and read `.jelou/audit/report.md` instead."
         }
       ]
     }