@viceme-ai/cli 0.15.0 → 0.15.2

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## [0.15.2] - 2026-08-18
+
+### Fixes
+
+- 统一认证失败详情契约 (`934139c`)
+- 覆盖官方凭据的 Profile 迁移 (`53cad42`)
+- 收口发布流程升级兼容契约 (`0aa469a`)
+- 以 API 地址确定运行环境 (`5ee2002`)
+- 合并作品详情确认与询价 (`d358466`)
+- 修复 Skill 包元数据与占位符误判 (`594c89f`)
+- 无价继续媒体与分析 (`e5bcdfb`)
+- 隐藏发布流程环境选择 (`997dfd6`)
+- 更新安装后的发布入口 (`a78db66`)
+- 固定发布环境选择优先级 (`0171135`)
+- 同步 Skill 发布摘要 (`6a76f1e`)
+- 修正 WorkBuddy 预览打开契约 (`d21330a`)
+
+### Other Changes
+
+- 同步渐进式发布流程 (`a646450`)
+
+## [0.15.1] - 2026-08-17
+
+### Fixes
+
+- 先上传真实草稿并持续拉起预览 (`8cb4a09`)
+- 明确执行进程版本元数据 (`8b950d0`)
+
 ## [0.15.0] - 2026-08-16
 
 ### Features

package/README.md

@@ -30,7 +30,7 @@
   listings when a response is lost.
 - **Built for Agents and automation** — stable JSON output, error codes, dry
   runs, and explicit state transitions make every action inspectable.
-- **Safe by default** — device authorization, origin-bound profiles, local
+- **Safe by default** — browser authorization, origin-bound profiles, local
   secret checks, immutable digests, and verified uploads protect the release
   path.
 
@@ -57,17 +57,20 @@
    discover the installed Skills.
 3. Attach a local Skill directory or ZIP and ask naturally:
 
-   > Publish this Skill to ViceMe for CNY 1.00.
+   > Publish this Skill to ViceMe.
 
-The Agent checks login before reading the package, keeps the selected Profile
-fixed throughout the workflow, validates the Skill, and asks before uploading.
+The Agent checks login, keeps the selected Profile fixed throughout the
+workflow, validates the Skill, immediately uploads the private Draft, and opens
+its real Owner Preview. It continues media analysis without asking for a price.
 After ViceMe prepares the bilingual copy and media suggestions, the Agent shows
-the complete review—including the images—and asks once whether to confirm and
-publish it publicly.
+the complete listing—including the images—and asks one combined question for
+the price and any desired changes. It then shows the final review and asks once
+whether to confirm and publish it publicly.
 
 ```text
-Local Skill → Login → Validate → Confirm price → Upload → Platform analysis
-            → Visual review → Confirm and publish → Public product URL
+Local Skill → Login → Validate and private upload → Owner Preview → Platform analysis
+            → Complete listing details + price question → Final review
+            → Confirm and publish → Public URL
 ```
 
 The initial request to “publish” is not permission to make the listing public.
@@ -84,14 +87,16 @@ viceme auth status
 # Sign in only when auth status reports unauthenticated.
 viceme auth login
 
-# Inspect without uploading anything.
-viceme skill inspect --path ./my-skill
+# Upload the real private draft and open its Owner Preview before pricing.
+viceme skill publish --path ./my-skill
 
-# Create or recover the stable private owner preview before pricing
-viceme skill listing prepare --path ./my-skill
+# Continue the same unpriced draft, upload media, and start analysis.
+viceme skill publish --resume <publication-id>
+viceme publication wait <publication-id>
+viceme publication review <publication-id>
 
-# Preview the exact package and CNY 1.00 price plan.
-viceme skill publish --path ./my-skill --price-minor 100 --dry-run
+# After reviewing the complete listing details, set CNY 1.00 on that draft.
+viceme skill publish --resume <publication-id> --price-minor 100
 ```
 
 ## Installation
@@ -167,17 +172,18 @@ are not accepted.
 
 | Stage | Responsibility |
 | --- | --- |
-| Login | Device authorization happens before package inspection. Every command remains pinned to the same Profile and API origin. |
+| Login | Browser authorization happens before protected API work. Every command remains pinned to the same Profile and API origin. |
 | Inspect | Local validation rejects unsafe paths, special files, excessive content, sensitive files, and common secret patterns. |
-| Price and upload | The user supplies an exact CNY price in fen and explicitly allows the deterministic package to be uploaded. |
+| Private upload and preview | The initial publish request authorizes the private Draft upload. The real package is verified and its Owner Preview opens before pricing. |
 | Analysis | ViceMe proposes short Chinese and English summaries, bilingual usage instructions, a cover, and an ordered gallery. Suggestions are never treated as user decisions. |
+| Listing details and price | After analysis, the Agent displays the exact title, bilingual copy, cover, and gallery, then asks one combined question for the CNY price in fen and any desired changes. It never asks for price by itself. |
 | Review | The Agent displays the exact copy, price, cover, and gallery images. A short summary has a maximum display width of 30; ASCII counts as 1 and Chinese/non-ASCII as 2. |
 | Publish | One explicit final confirmation authorizes review confirmation followed by immediate, irreversible public publication. |
 
 If the upload or response is interrupted, continue the existing publication:
 
 ```bash
-viceme --profile <publication-profile> skill publish --resume <publication-id>
+viceme skill publish --resume <publication-id>
 ```
 
 Never create a second publication merely because the previous response was
@@ -185,9 +191,9 @@ unknown. Query or resume the existing ID first.
 
 ## Authentication and Profiles
 
-Each Profile binds one region, one API endpoint, and one device-authorized
-account. Profiles without a custom endpoint use the selected region's official
-ViceMe API.
+Each Profile binds one explicit API endpoint and one device-authorized account.
+The separately stored distribution region selects only the CLI and bundled
+Skill download source; it never selects a publication market.
 
 ```bash
 viceme auth login
@@ -204,7 +210,6 @@ dedicated Profile before signing in:
 ```bash
 viceme profile add \
   --name private-cn \
-  --region cn \
   --api-base-url https://api.example.com \
   --use
 viceme auth login
@@ -234,10 +239,11 @@ Never copy an access token into the conversation.
 | `viceme skill listing prepare --path <path>` | Create or recover the stable private owner preview and persist the local binding. |
 | `viceme skill listing get <listing-id>` | Read the authoritative private Listing state. |
 | `viceme skill listing bind <listing-id> --path <path>` | Explicitly bind a source to a selected owned Listing. |
-| `viceme skill publish --path <path> --price-minor <fen> --dry-run` | Preview the exact deterministic package and price. |
-| `viceme skill publish --path <path> --price-minor <fen>` | Upload the package and start listing analysis. |
+| `viceme skill publish --path <path>` | Upload the real private package and return its Owner Preview before pricing. |
+| `viceme skill publish --resume <id>` | Continue the same unpriced Draft, upload media candidates, and start analysis. |
 | `viceme publication wait <id>` | Wait for background analysis without re-uploading. |
 | `viceme publication review <id>` | Read the authoritative bilingual copy, price, selected media, and review state. |
+| `viceme skill publish --resume <id> --price-minor <fen>` | Apply the reviewed CNY price to the same Draft without creating another Listing. |
 | `viceme publication asset upload ...` | Replace or add a cover or gallery image before confirmation. |
 | `viceme publication update ...` | Replace the complete listing draft from a strict JSON file. |
 | `viceme publication confirm ...` | Confirm the exact current review digest. |
@@ -258,12 +264,17 @@ text.
   "ok": true,
   "data": {},
   "meta": {
-    "cliVersion": "<version>",
+    "executingCliVersion": "<version>",
     "requestId": "optional"
   }
 }
 ```
 
+`meta.executingCliVersion` is the version of the process that emitted the
+response. For `viceme update`, the newly installed version is reported
+separately as `data.cli_version` because the response is still emitted by the
+process that started the update.
+
 Released installations check their authoritative release channel at most once
 every 24 hours. When a newer version is available, ordinary JSON responses
 include `_notice.update` with the current version, latest version, and

package/README.zh.md

@@ -27,7 +27,7 @@
   也不会重复创建商品。
 - **同时适合 Agent 和自动化**——稳定 JSON、错误码、Dry Run 和明确状态让每个动作
   都可检查、可复现。
-- **默认安全**——设备码授权、绑定 Origin 的 Profile、本地 Secret 检查、不可变摘要
+- **默认安全**——浏览器授权、绑定 Origin 的 Profile、本地 Secret 检查、不可变摘要
   和已验证上传共同保护发布链路。
 
 ## 能做什么
@@ -53,15 +53,17 @@
    Skills。
 3. 附上本地 Skill 目录或 ZIP，然后直接说：
 
-   > 帮我把这个 Skill 以人民币 1 元发布到 ViceMe。
+   > 帮我把这个 Skill 发布到 ViceMe。
 
-Agent 会先检查登录状态，在整个流程中固定使用同一个 Profile，再校验 Skill，并在
-上传前询问许可。ViceMe 完成双语文案和素材建议后，Agent 会把完整审核稿和图片直接
-展示出来，最后只询问一次是否确认并立即公开发布。
+Agent 会先检查登录状态，在整个流程中固定使用同一个 Profile，校验 Skill 后立即
+上传私有草稿并打开真实创作者预览，不询价就继续媒体分析。ViceMe 完成双语文案和素材
+建议后，Agent 会先把完整作品详情和图片直接展示出来，再把价格和详情修改合并成一个
+问题；应用用户答案后展示最终成品，最后只询问一次是否确认并立即公开发布。
 
 ```text
-本地 Skill → 登录 → 校验 → 确认价格 → 上传 → 平台分析
-           → 图文审核 → 确认并发布 → 公开商品链接
+本地 Skill → 登录 → 校验并私有上传 → 创作者预览 → 平台分析
+           → 完整详情与价格合并询问 → 最终成品
+           → 确认并发布 → 公开商品链接
 ```
 
 最初的“帮我发布”不等于授权公开上架。只有完整审核稿已经展示、用户明确确认后，
@@ -77,14 +79,16 @@ viceme auth status
 # 仅在未登录时发起浏览器登录。
 viceme auth login
 
-# 只读校验，不上传任何内容。
-viceme skill inspect --path ./my-skill
+# 定价前先上传真实私有草稿，并打开创作者预览。
+viceme skill publish --path ./my-skill
 
-# 定价前先创建或恢复稳定的创作者私有预览
-viceme skill listing prepare --path ./my-skill
+# 继续同一个未定价草稿，上传媒体并启动分析。
+viceme skill publish --resume <publication-id>
+viceme publication wait <publication-id>
+viceme publication review <publication-id>
 
-# 预览确定性发布包与人民币 1 元的价格计划。
-viceme skill publish --path ./my-skill --price-minor 100 --dry-run
+# 查看完整作品详情后，在同一个草稿上设置人民币 1 元。
+viceme skill publish --resume <publication-id> --price-minor 100
 ```
 
 ## 安装
@@ -154,25 +158,26 @@ Agent Skills 负责对话流程和授权规则；CLI 负责确定性本地操作
 
 | 阶段 | 责任边界 |
 | --- | --- |
-| 登录 | 解析包之前先完成设备码授权；所有后续命令固定使用同一个 Profile 与 API Origin。 |
+| 登录 | 受保护 API 操作前完成浏览器授权；所有后续命令固定使用同一个 Profile 与 API Origin。 |
 | 校验 | 本地拒绝危险路径、特殊文件、超限内容、敏感文件和常见 Secret 模式。 |
-| 定价与上传 | 用户以“分”为单位提供人民币价格，并明确允许上传确定性发布包。 |
+| 私有上传与预览 | 用户发起发布即授权上传私有草稿；真实包验证后先打开创作者预览。 |
 | 平台分析 | ViceMe 建议中英文短简介、中英文使用说明、封面和有序画廊；建议不能替代用户决定。 |
+| 作品详情与定价 | 分析完成后，Agent 先展示标题、双语文案、封面和画廊，再把价格和详情修改合并成一个问题；不能单独询价。 |
 | 图文审核 | Agent 展示精确文案、价格、封面和所有画廊图片。短简介最大显示宽度为 30：ASCII 计 1，中文及其他非 ASCII 计 2。 |
 | 公开发布 | 用户只需做一次最终明确确认；随后完成审核确认并立即、不可逆地公开上架。 |
 
 上传或响应中断后，继续原来的 Publication：
 
 ```bash
-viceme --profile <publication-profile> skill publish --resume <publication-id>
+viceme skill publish --resume <publication-id>
 ```
 
 不能因为上一次响应未知就创建第二个 Publication，应先查询或恢复原 ID。
 
 ## 登录与 Profile
 
-每个 Profile 绑定一个区域、一个 API Endpoint 和一个通过设备码授权的账户。没有
-自定义 Endpoint 的 Profile 使用对应区域的 ViceMe 官方 API。
+每个 Profile 绑定一个明确的 API Endpoint 和一个通过浏览器授权的账户。发布目标完全
+由当前 Profile 的 Endpoint 决定；单独的分发区域只选择 CLI 与官方 Skills 的下载来源。
 
 ```bash
 viceme auth login
@@ -188,7 +193,6 @@ viceme profile use default
 ```bash
 viceme profile add \
   --name private-cn \
-  --region cn \
   --api-base-url https://api.example.com \
   --use
 viceme auth login
@@ -215,10 +219,11 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
 | `viceme skill listing prepare --path <path>` | 创建或恢复稳定的创作者私有预览，并保存本地绑定。 |
 | `viceme skill listing get <listing-id>` | 读取权威的私有 Listing 状态。 |
 | `viceme skill listing bind <listing-id> --path <path>` | 将来源明确绑定到用户选定且拥有的 Listing。 |
-| `viceme skill publish --path <path> --price-minor <fen> --dry-run` | 预览确定性发布包与价格。 |
-| `viceme skill publish --path <path> --price-minor <fen>` | 上传发布包并启动 Listing 分析。 |
+| `viceme skill publish --path <path>` | 定价前上传真实私有包并返回创作者预览。 |
+| `viceme skill publish --resume <id>` | 继续同一个未定价 Draft，上传媒体候选并启动分析。 |
 | `viceme publication wait <id>` | 等待后台分析，不重复上传。 |
 | `viceme publication review <id>` | 读取权威双语文案、价格、选定素材和审核状态。 |
+| `viceme skill publish --resume <id> --price-minor <fen>` | 在完整详情审核后，为同一个 Draft 写入人民币价格，不新建 Listing。 |
 | `viceme publication asset upload ...` | 确认前替换或新增封面、画廊图片。 |
 | `viceme publication update ...` | 用严格 JSON 文件替换完整 Listing Draft。 |
 | `viceme publication confirm ...` | 确认当前精确 Review Digest。 |
@@ -237,12 +242,15 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
   "ok": true,
   "data": {},
   "meta": {
-    "cliVersion": "<version>",
+    "executingCliVersion": "<version>",
     "requestId": "optional"
   }
 }
 ```
 
+`meta.executingCliVersion` 表示输出本次响应的进程版本。对于 `viceme update`，
+新安装版本单独由 `data.cli_version` 返回，因为最终响应仍由启动更新的旧进程输出。
+
 正式安装最多每 24 小时读取一次权威发布渠道。发现新版本后，普通 JSON 响应通过
 `_notice.update` 返回当前版本、最新版本和 `viceme update`。检查失败不会改变业务
 命令的退出码。

package/checksums.txt

@@ -1,6 +1,6 @@
-b71fb51997b02123a4b037c138ccaeb94541c3f3a79330d8752c805eba7c2a81  viceme_0.15.0_darwin_amd64
-2161a55792565efa14baa402c30cdaecd97c331ff89d07b10ec1eed342fda6f4  viceme_0.15.0_darwin_arm64
-7aefb24616c39798cd8a1efb95b26a3c89cd320dbba141cadba51f2b618b84f5  viceme_0.15.0_linux_amd64
-8c34bd131249448cd17b892d6b241fa5507dfd231f4e3bc955b71d735e9ce3bd  viceme_0.15.0_linux_arm64
-54c80ac055b7c46e6644a769dea381bef0a5108c90dc9e35cdf9c2b67b0566a0  viceme_0.15.0_windows_amd64.exe
-a51945e2b57a25132181578f70b9d01964a86b2855f71cc1cbef562fac3907d3  viceme_0.15.0_windows_arm64.exe
+3140964b542a31aabf5deaf7037d8999e5f149f4216dceacabd4c4affc0d8c40  viceme_0.15.2_darwin_amd64
+c1eb06148eb60c947a1319b90ea7e01141bdc420697642a156ab4af754e2eb9a  viceme_0.15.2_darwin_arm64
+7c6575b8dbb7f4aef057965f403666359f99ad324a36ae34996af519d670adc3  viceme_0.15.2_linux_amd64
+56503ffbbb06b742419d90f2661bf8fa182dee77a555a5f233b90f31ebd04fa7  viceme_0.15.2_linux_arm64
+47e88c30290ebf8740f46e4f4a096f2184d66c50dc4477841ea727052614e432  viceme_0.15.2_windows_amd64.exe
+f1e8fe3b3b0f32d6afd0f8a29ffe910a3c1b7f27563ebbb3ba6fb18e1692ea96  viceme_0.15.2_windows_arm64.exe

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.15.0",
+  "version": "0.15.2",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {