@viceme-ai/cli 0.12.2 → 0.12.4

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.12.4] - 2026-08-12
+
+### Fixes
+
+- 避免旧 Profile 阻断安装升级 (`05f9d3d`)
+
+## [0.12.3] - 2026-08-12
+
+### Fixes
+
+- 前置发布登录并支持批量清理 Profile (`73c7e85`)
+
 ## [0.12.2] - 2026-08-12
 
 ### Fixes

package/README.md

@@ -70,6 +70,16 @@ viceme profile list
 viceme profile use default
 ```
 
+To remove every legacy/test Profile and all of their local credentials before
+creating a clean test Profile:
+
+```bash
+viceme profile remove --all --yes
+```
+
+This destructive command recreates one unauthenticated `default` Profile; it
+does not leave the CLI with an invalid empty configuration.
+
 For a test or private ViceMe deployment, persist the endpoint in a dedicated
 profile before signing in:
 
@@ -104,22 +114,31 @@ sign in again after creating a profile for a different endpoint.
 The first release accepts a local directory containing `SKILL.md` or a local
 ZIP. GitHub URLs, remote downloads, and multi-Skill bundles are not accepted.
 
+Authenticate before inspecting the package, then keep every command pinned to
+the Profile returned by `auth status`. An Agent must not switch to another
+Profile merely because that Profile is already signed in.
+
+```bash
+viceme auth status
+viceme --profile <publication-profile> auth login # only when unauthenticated
+```
+
 Inspect without side effects:
 
 ```bash
-viceme skill inspect --path ./my-skill
+viceme --profile <publication-profile> skill inspect --path ./my-skill
 ```
 
 Show the exact deterministic package and price plan:
 
 ```bash
-viceme skill publish --path ./my-skill --price-minor 100 --dry-run
+viceme --profile <publication-profile> skill publish --path ./my-skill --price-minor 100 --dry-run
 ```
 
 Start the resumable upload and listing analysis:
 
 ```bash
-viceme skill publish --path ./my-skill --price-minor 100
+viceme --profile <publication-profile> skill publish --path ./my-skill --price-minor 100
 ```
 
 Then follow the authoritative publication state:
@@ -145,7 +164,7 @@ public `publish`.
 Resume after a connection loss with the same publication:
 
 ```bash
-viceme skill publish --resume <publication-id>
+viceme --profile <publication-profile> skill publish --resume <publication-id>
 ```
 
 Do not create a second publication when the server response is unknown. Query
@@ -204,9 +223,10 @@ target version; its member lock prevents a parent crash from admitting a newer
 generation while the child still commits. A committed target is only cleaned up
 after a crash—it is never reapplied or rolled back. Private
 journals can therefore only restore the complete previous generation or finish
-the complete target generation. `viceme doctor`
-validates Skill/version integrity and an unauthenticated API readiness probe
-before installation commits.
+the complete target generation. Installation commits after local Skill/version
+integrity checks; an unavailable active-profile API is reported as a warning so
+stale profile state cannot block an upgrade. `viceme doctor` remains the
+explicit network-readiness check before business commands.
 
 ## First-phase implementation status
 

package/README.zh.md

@@ -66,6 +66,15 @@ viceme profile list
 viceme profile use default
 ```
 
+需要清除历史/测试 Profile 及其本地凭据时，使用一次批量清理：
+
+```bash
+viceme profile remove --all --yes
+```
+
+该破坏性命令会重新创建一个未登录的 `default` Profile，不会让 CLI 留在无有效
+Profile 的状态。
+
 连接测试环境或私有 ViceMe 部署时，先把 Endpoint 持久化到独立 Profile，再登录：
 
 ```bash
@@ -97,22 +106,30 @@ Origin 隔离，因此为新 Endpoint 创建 Profile 后需要单独登录一次
 第一版接受包含 `SKILL.md` 的本地目录或本地 ZIP，不接受 GitHub URL、远程下载和
 多 Skill 批量包。
 
+解析 Skill 之前先完成登录，并把后续所有命令固定到 `auth status` 返回的 Profile。
+Agent 不得因为另一个 Profile 已经登录就擅自切换过去。
+
+```bash
+viceme auth status
+viceme --profile <publication-profile> auth login # 仅在未登录时执行
+```
+
 只读检查：
 
 ```bash
-viceme skill inspect --path ./my-skill
+viceme --profile <publication-profile> skill inspect --path ./my-skill
 ```
 
 查看确定性发布包和价格计划：
 
 ```bash
-viceme skill publish --path ./my-skill --price-minor 100 --dry-run
+viceme --profile <publication-profile> skill publish --path ./my-skill --price-minor 100 --dry-run
 ```
 
 开始可恢复的上传与 Listing 分析：
 
 ```bash
-viceme skill publish --path ./my-skill --price-minor 100
+viceme --profile <publication-profile> skill publish --path ./my-skill --price-minor 100
 ```
 
 之后以服务端 Publication 状态为准：
@@ -136,7 +153,7 @@ viceme publication publish <publication-id> --review-digest <digest>
 网络中断后继续同一个发布操作：
 
 ```bash
-viceme skill publish --resume <publication-id>
+viceme --profile <publication-profile> skill publish --resume <publication-id>
 ```
 
 响应未知时不能创建第二个 Publication，应先查询或恢复原 ID。
@@ -181,8 +198,9 @@ Journal 做相同仲裁，避免通过启动检查后暂停的旧进程引入第
 恢复协议混合使用。每个 Skills/配置事务都必须持有同一代际权限，或在最终提交前重新验证。
 npm 内部安装子进程必须匹配 Journal 中的一次性 nonce、目标版本和 Skill 目标；成员提交锁会阻止
 父进程崩溃后，新一代在旧子进程尚未提交完毕时进入。目标一旦越过语义提交点，崩溃恢复只能完成本地清理，不能重新联网安装或回滚。私有
-Journal 因此只能完整恢复上一代或完整完成目标版本；安装提交前，`viceme doctor` 同时校验
-Skill/版本完整性和不携带凭据的 API readiness。
+Journal 因此只能完整恢复上一代或完整完成目标版本。安装提交前必须通过本地 Skill/版本完整性
+校验；当前 Profile 的 API 不可达只产生警告，避免旧 Profile 阻断升级。正式业务命令前再用
+`viceme doctor` 明确检查网络 readiness。
 
 ## 第一阶段实施状态
 

package/checksums.txt

@@ -1,6 +1,6 @@
-239f31a4b557bbe0129af7c7b0c88e72c70d2405e0866a422ad4ffb4f8787a00  viceme_0.12.2_darwin_amd64
-f6d80b8ee5bda6d7532b10a0c249591b7cfcf281af50add82407905ab2fd46e6  viceme_0.12.2_darwin_arm64
-d6d939e89ff5236d69bbfce55ce9e9ab510786fe59e34796ced3c7e92425433e  viceme_0.12.2_linux_amd64
-cd3337a572166e219bf8ac3f5e1f524918179581aec7b88ba4bac71be809c066  viceme_0.12.2_linux_arm64
-f79b9143d030979283a4be444d0f4ddadf8db35f92293f01ad33cf86b1348c9e  viceme_0.12.2_windows_amd64.exe
-0909ae1bf1a66e3aaab6dbe2311ead847ae56afa29435b0f681cf52a656b1869  viceme_0.12.2_windows_arm64.exe
+b5332a80252b7fca1bbd0858480c4ecb6a930aaa302f6f2639367db7e18ab140  viceme_0.12.4_darwin_amd64
+483b0c62d1f2152aebd0e0fc39f58fc8833fb44dd14376bb357435275a98a0eb  viceme_0.12.4_darwin_arm64
+425b99abf6b693de528a83173f820764c17c8407d86c471418b8511776ea685d  viceme_0.12.4_linux_amd64
+4d963ac9ee5eaa2aac7922f35627d7c078b3f87fa5af7af2eb498c818ffb9d6c  viceme_0.12.4_linux_arm64
+d915728cbb43022d281970701cab848c277b2e254ce0772f3de4ccd17244f32c  viceme_0.12.4_windows_amd64.exe
+a12d40f8da67009a683727a3edbedf2696764972d4c028e3be14825f5f19b01e  viceme_0.12.4_windows_arm64.exe

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.12.2",
+  "version": "0.12.4",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {