@viceme-ai/cli 0.14.2 → 0.15.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [0.15.0] - 2026-08-16
+
+### Features
+
+- 增加 Owner Preview 展示意图 (`0d5225f`)
+
+### Fixes
+
+- 修复 Agent 安装文档 UTF-8 响应头 (`ad1f9d5`)
+- 登录流程始终等待浏览器授权 (`3738239`)
+
+### Other Changes
+
+- 统一浏览器登录措辞 (`87e432b`)
+
 ## [0.14.2] - 2026-08-15
 
 ### Fixes

package/README.md

@@ -149,7 +149,7 @@ Select a target explicitly with `viceme install --agent codex`, `claude`,
 
 | Skill | Use it when you want to... |
 | --- | --- |
-| `viceme-shared` | install ViceMe, sign in with a device code, manage Profiles, update, diagnose, or repair the local setup. |
+| `viceme-shared` | install ViceMe, sign in through the browser, manage Profiles, update, diagnose, or repair the local setup. |
 | `viceme-publish` | validate, upload, review, resume, or publish a local Skill directory or ZIP as a paid ViceMe listing. |
 | `viceme-danmaku` | build or adapt the bundled production React and Tailwind CSS v4 danmaku component in an existing project. |
 
@@ -215,15 +215,12 @@ Remote custom endpoints require HTTPS; only localhost and loopback development
 may use HTTP. Credentials are isolated by Profile and API origin, and an Agent
 must never switch to another Profile merely because it is already signed in.
 
-For an Agent that cannot wait in one turn:
-
-```bash
-viceme auth login --no-wait
-viceme auth login --device-code <device-code>
-```
-
-The user completes authorization in the browser. Never copy an access token
-into the conversation.
+`viceme auth login` intentionally keeps running until browser authorization
+finishes or its bounded timeout expires. Keep the command active, show the
+one-time complete URL to the user, and wait for the final result. The page signs
+the user in when necessary and authorizes the CLI automatically; the user never
+types a device code. If the wait expires, start a fresh `viceme auth login`.
+Never copy an access token into the conversation.
 
 ## Command reference
 

package/README.zh.md

@@ -74,7 +74,7 @@ Agent 会先检查登录状态，在整个流程中固定使用同一个 Profile
 viceme doctor
 viceme auth status
 
-# 仅在未登录时发起设备码登录。
+# 仅在未登录时发起浏览器登录。
 viceme auth login
 
 # 只读校验，不上传任何内容。
@@ -140,7 +140,7 @@ npx --yes @viceme-ai/cli@latest install
 
 | Skill | 适用场景 |
 | --- | --- |
-| `viceme-shared` | 安装 ViceMe、设备码登录、管理 Profile、更新、诊断或修复本地环境。 |
+| `viceme-shared` | 安装 ViceMe、通过浏览器登录、管理 Profile、更新、诊断或修复本地环境。 |
 | `viceme-publish` | 把本地 Skill 目录或 ZIP 校验、上传、审核、恢复或发布为 ViceMe 付费商品。 |
 | `viceme-danmaku` | 在已有项目中构建或适配随包提供的生产级 React 与 Tailwind CSS v4 弹幕组件。 |
 
@@ -198,14 +198,10 @@ viceme auth login
 Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以使用 HTTP。
 凭据按 Profile 和 API Origin 隔离；Agent 不能因为另一个 Profile 已登录就擅自切换。
 
-Agent 无法在同一回合等待浏览器授权时使用分段流程：
-
-```bash
-viceme auth login --no-wait
-viceme auth login --device-code <device-code>
-```
-
-用户在浏览器完成授权。不要在对话中复制 Access Token。
+`viceme auth login` 会一直等待，直到浏览器授权完成或达到有界超时。Agent 必须保持
+命令运行，向用户展示一次性完整链接并等待最终结果。页面会在必要时先完成登录，随后
+自动授权 CLI；用户不需要输入设备码。等待超时后重新运行 `viceme auth login` 发起新
+流程。不要在对话中复制 Access Token。
 
 ## 命令参考
 

package/checksums.txt

@@ -1,6 +1,6 @@
-a5f39465c4aef0ddfdf15b6487498fbbe2909389aaaf1590269780e6ff79de90  viceme_0.14.2_darwin_amd64
-97f01a59e674279821ad6d58f7b642b7bb55bfc51e270661eccd384ee85410fd  viceme_0.14.2_darwin_arm64
-060d0879e85bebdc7ba9673fa06208a139ab13fd1e01c3f440d3f46723b4bf09  viceme_0.14.2_linux_amd64
-f607618c5e1c0a3feedbe00050c12ecb8ce1115e0993659ddafefef27c9fa747  viceme_0.14.2_linux_arm64
-5bddaa26d8dfdfa642c61356af122d6bf138ea66e0b4d9663a227a920c9a0124  viceme_0.14.2_windows_amd64.exe
-5aa0c15a0abfaa8d0128840c618180af2144b4bf5d7fdc5a12d5ed3f5e5f6165  viceme_0.14.2_windows_arm64.exe
+b71fb51997b02123a4b037c138ccaeb94541c3f3a79330d8752c805eba7c2a81  viceme_0.15.0_darwin_amd64
+2161a55792565efa14baa402c30cdaecd97c331ff89d07b10ec1eed342fda6f4  viceme_0.15.0_darwin_arm64
+7aefb24616c39798cd8a1efb95b26a3c89cd320dbba141cadba51f2b618b84f5  viceme_0.15.0_linux_amd64
+8c34bd131249448cd17b892d6b241fa5507dfd231f4e3bc955b71d735e9ce3bd  viceme_0.15.0_linux_arm64
+54c80ac055b7c46e6644a769dea381bef0a5108c90dc9e35cdf9c2b67b0566a0  viceme_0.15.0_windows_amd64.exe
+a51945e2b57a25132181578f70b9d01964a86b2855f71cc1cbef562fac3907d3  viceme_0.15.0_windows_arm64.exe

package/docs/releasing.md

@@ -117,7 +117,8 @@ Agent Manifest, signature bundle, and document.
 
 The publication job verifies both public origins after upload. It compares the
 versioned document, Manifest, and signature bundle with the release artifacts,
-checks immutable and root cache policies, compares the CN and Global root
+checks immutable and root cache policies, requires the public root Agent
+document to use `text/markdown; charset=utf-8`, compares the CN and Global root
 documents, and proves that an uploaded object outside the installation
 allowlist is not anonymously readable. Anonymous bucket listing must also stay
 disabled. The allowlist is limited to `agent-install.md`, the existing root

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.14.2",
+  "version": "0.15.0",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {