@jelou/cli 1.76.0 → 1.78.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jelou/cli",
-  "version": "1.76.0",
+  "version": "1.78.0",
   "description": "Build AI agents on the Jelou platform — from your terminal or your AI editor.",
   "author": "Jelou Inc. (https://jelou.ai)",
   "license": "SEE LICENSE IN LICENSE",
@@ -23,11 +23,11 @@
     "THIRD_PARTY_NOTICES.md"
   ],
   "optionalDependencies": {
-    "@jelou/cli-darwin-arm64": "1.76.0",
-    "@jelou/cli-darwin-x64": "1.76.0",
-    "@jelou/cli-linux-x64": "1.76.0",
-    "@jelou/cli-linux-arm64": "1.76.0",
-    "@jelou/cli-win32-x64": "1.76.0"
+    "@jelou/cli-darwin-arm64": "1.78.0",
+    "@jelou/cli-darwin-x64": "1.78.0",
+    "@jelou/cli-linux-x64": "1.78.0",
+    "@jelou/cli-linux-arm64": "1.78.0",
+    "@jelou/cli-win32-x64": "1.78.0"
   },
   "keywords": [
     "jelou",
@@ -56,43 +56,27 @@
     "access": "public"
   },
   "jelou": {
-    "minVersion": "1.73.0",
+    "minVersion": "1.78.0",
     "release_notes": {
-      "version": "1.76.0",
-      "date": "2026-07-28",
-      "headline": "Workflow audits separate scanner facts from model judgment, and 64% of false findings are gone.",
+      "version": "1.78.0",
+      "date": "2026-07-29",
+      "headline": "The agent skill catalog slimmed from 18 to 12 — same capabilities, less context per session, cleaned up automatically.",
       "highlights": [
         {
-          "type": "new",
-          "text": "`--review-packet` / `--review <file>` — the audit writes a facts-only digest of a workflow for an agent to read, then merges its verdicts back into the report. Model verdicts are reported and scored but never change the exit code."
+          "type": "improved",
+          "text": "Secrets guidance now lives in the core `jelou` skill, marketplace guidance in `jelou-project`, and everything workflow-building — creation, validation, CONNECT human-handoff, and the full build engine — in a single `jelou-build-workflows` skill."
         },
         {
-          "type": "new",
-          "text": "A 9-dimension score for the bot. A dimension nothing assessed reports `—` instead of full marks, so a scan-only run says \"28/100 over 60 assessed points\" rather than claiming a clean bill of health."
+          "type": "improved",
+          "text": "The three largest skills load much less text up front: deep-dive material moved to on-demand reference files, so agents spend fewer tokens per session with the same depth available."
         },
         {
-          "type": "new",
-          "text": "The audit reads the channel — it flags WhatsApp-only nodes wired on another channel, message types the channel cannot render, and channels with no runtime support. If the snapshot names no channel, it stays quiet rather than guessing."
-        },
-        {
-          "type": "new",
-          "text": "Two new security checks: injection through a database query, and a hardcoded encryption key in a `CODE` node. On a real bot an AES master key was invisible to every previous rule."
-        },
-        {
-          "type": "fixed",
-          "text": "The audit stopped demanding an error branch named `error` when the platform emits `failed`. On a real 14-workflow bot that alone was **130 of 203 findings — 64% noise**. An AI step that merely set a language also stopped being told to split its instructions into separate pillars (22 more false findings)."
-        },
-        {
-          "type": "fixed",
-          "text": "The review packet no longer carries credentials. Tokens, URLs with passwords and raw prompt text were handed to the model verbatim while the report redacted the same values."
-        },
-        {
-          "type": "fixed",
-          "text": "A workflow id taken from a snapshot can no longer write outside `--out-dir`, and a model's verdict can no longer flip the exit code."
+          "type": "heads_up",
+          "text": "Six standalone skills were retired: `jelou-secret`, `jelou-marketplace`, `jelou-workflow`, `jelou-connect`, `jelou-build-workflow`, and `jelou-test-whatsapp`. Their content moved into the merged skills above — except `jelou-test-whatsapp`, which was removed (the experimental `jelou test whatsapp` commands still work). Stale copies are deleted from your editors automatically on the next `jelou login` or `jelou agent install`. No CLI commands changed."
         },
         {
           "type": "heads_up",
-          "text": "Four keyword rules are gone — AI disclosure, unscoped AI, restricted content and PII consent. Each fired on good copy that happened to contain a listed word and went silent on the same defect rephrased. All four were advisory and never gated CI; the questions they asked are review lens questions now."
+          "text": "Installed CLIs below 1.78.0 now see the soft \"Update available\" prompt on their next invocation (`below_floor: true` on agent-mode envelopes). Nothing is blocked."
         }
       ]
     }