@viceme-ai/cli 0.15.1 → 0.16.0

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # Changelog
 
+## [0.16.0] - 2026-08-19
+
+### Features
+
+- 自动更新 CLI 与官方 Skills (`d68d096`)
+
+### Fixes
+
+- 合并并发自动更新并重执行等待命令 (`f48d2f6`)
+
+### Other Changes
+
+- 稳定激活子进程并发测试 (`fa139f9`)
+- 注册 POC CLI 手动发布工作流 (`3e265fa`)
+- 默认使用 Agent 补全发布内容 (`ee5030e`)
+
+## [0.15.2] - 2026-08-18
+
+### Fixes
+
+- 统一认证失败详情契约 (`934139c`)
+- 覆盖官方凭据的 Profile 迁移 (`53cad42`)
+- 收口发布流程升级兼容契约 (`0aa469a`)
+- 以 API 地址确定运行环境 (`5ee2002`)
+- 合并作品详情确认与询价 (`d358466`)
+- 修复 Skill 包元数据与占位符误判 (`594c89f`)
+- 无价继续媒体与分析 (`e5bcdfb`)
+- 隐藏发布流程环境选择 (`997dfd6`)
+- 更新安装后的发布入口 (`a78db66`)
+- 固定发布环境选择优先级 (`0171135`)
+- 同步 Skill 发布摘要 (`6a76f1e`)
+- 修正 WorkBuddy 预览打开契约 (`d21330a`)
+
+### Other Changes
+
+- 同步渐进式发布流程 (`a646450`)
+
 ## [0.15.1] - 2026-08-17
 
 ### Fixes

package/README.md

@@ -30,7 +30,7 @@
   listings when a response is lost.
 - **Built for Agents and automation** — stable JSON output, error codes, dry
   runs, and explicit state transitions make every action inspectable.
-- **Safe by default** — device authorization, origin-bound profiles, local
+- **Safe by default** — browser authorization, origin-bound profiles, local
   secret checks, immutable digests, and verified uploads protect the release
   path.
 
@@ -57,18 +57,20 @@
    discover the installed Skills.
 3. Attach a local Skill directory or ZIP and ask naturally:
 
-   > Publish this Skill to ViceMe for CNY 1.00.
+   > Publish this Skill to ViceMe.
 
 The Agent checks login, keeps the selected Profile fixed throughout the
 workflow, validates the Skill, immediately uploads the private Draft, and opens
-its real Owner Preview before asking for a price.
-After ViceMe prepares the bilingual copy and media suggestions, the Agent shows
-the complete review—including the images—and asks once whether to confirm and
-publish it publicly.
+its real Owner Preview. It uploads media candidates without asking for a price,
+then the user's Agent prepares the bilingual copy and media suggestions. The Agent shows
+the complete listing—including the images—and asks one combined question for
+the price and any desired changes. It then shows the final review and asks once
+whether to confirm and publish it publicly.
 
 ```text
-Local Skill → Login → Validate and private upload → Owner Preview → Set price
-            → Platform analysis → Final review → Confirm and publish → Public URL
+Local Skill → Login → Validate and private upload → Owner Preview → Agent enrichment
+            → Complete listing details + price question → Final review
+            → Confirm and publish → Public URL
 ```
 
 The initial request to “publish” is not permission to make the listing public.
@@ -88,7 +90,15 @@ viceme auth login
 # Upload the real private draft and open its Owner Preview before pricing.
 viceme skill publish --path ./my-skill
 
-# Set CNY 1.00 on the same draft, then continue media and analysis.
+# Continue the same unpriced draft and upload media candidates.
+viceme skill publish --resume <publication-id>
+viceme publication review <publication-id>
+
+# The Agent writes a revision-protected suggestion. Platform analysis is an explicit fallback only.
+viceme publication suggest <publication-id> --input <suggestion.json>
+# viceme publication analyze <publication-id> && viceme publication wait <publication-id>
+
+# After reviewing the complete listing details, set CNY 1.00 on that draft.
 viceme skill publish --resume <publication-id> --price-minor 100
 ```
 
@@ -168,15 +178,15 @@ are not accepted.
 | Login | Browser authorization happens before protected API work. Every command remains pinned to the same Profile and API origin. |
 | Inspect | Local validation rejects unsafe paths, special files, excessive content, sensitive files, and common secret patterns. |
 | Private upload and preview | The initial publish request authorizes the private Draft upload. The real package is verified and its Owner Preview opens before pricing. |
-| Price | The user supplies an exact CNY price in fen on the same Publication. |
-| Analysis | ViceMe proposes short Chinese and English summaries, bilingual usage instructions, a cover, and an ordered gallery. Suggestions are never treated as user decisions. |
+| Agent enrichment | The user's Agent reads the Skill as untrusted source data, prepares bilingual copy, and selects verified cover and gallery uploads. Platform analysis is an explicit fallback only. |
+| Listing details and price | After enrichment, the Agent displays the exact title, bilingual copy, cover, and gallery, then asks one combined question for the CNY price in fen and any desired changes. It never asks for price by itself. |
 | Review | The Agent displays the exact copy, price, cover, and gallery images. A short summary has a maximum display width of 30; ASCII counts as 1 and Chinese/non-ASCII as 2. |
 | Publish | One explicit final confirmation authorizes review confirmation followed by immediate, irreversible public publication. |
 
 If the upload or response is interrupted, continue the existing publication:
 
 ```bash
-viceme --profile <publication-profile> skill publish --resume <publication-id>
+viceme skill publish --resume <publication-id>
 ```
 
 Never create a second publication merely because the previous response was
@@ -184,9 +194,9 @@ unknown. Query or resume the existing ID first.
 
 ## Authentication and Profiles
 
-Each Profile binds one region, one API endpoint, and one device-authorized
-account. Profiles without a custom endpoint use the selected region's official
-ViceMe API.
+Each Profile binds one explicit API endpoint and one device-authorized account.
+The separately stored distribution region selects only the CLI and bundled
+Skill download source; it never selects a publication market.
 
 ```bash
 viceme auth login
@@ -203,7 +213,6 @@ dedicated Profile before signing in:
 ```bash
 viceme profile add \
   --name private-cn \
-  --region cn \
   --api-base-url https://api.example.com \
   --use
 viceme auth login
@@ -234,10 +243,13 @@ Never copy an access token into the conversation.
 | `viceme skill listing get <listing-id>` | Read the authoritative private Listing state. |
 | `viceme skill listing bind <listing-id> --path <path>` | Explicitly bind a source to a selected owned Listing. |
 | `viceme skill publish --path <path>` | Upload the real private package and return its Owner Preview before pricing. |
-| `viceme skill publish --resume <id> --price-minor <fen>` | Price the same Draft, upload media candidates, and start analysis. |
-| `viceme publication wait <id>` | Wait for background analysis without re-uploading. |
+| `viceme skill publish --resume <id>` | Continue the same unpriced Draft and upload media candidates without starting a platform model. |
 | `viceme publication review <id>` | Read the authoritative bilingual copy, price, selected media, and review state. |
-| `viceme publication asset upload ...` | Replace or add a cover or gallery image before confirmation. |
+| `viceme publication suggest <id> --input ...` | Apply Agent-generated bilingual copy and media with Draft revision protection. |
+| `viceme publication analyze <id>` | Explicitly request platform-model analysis when the current Agent cannot perform enrichment. |
+| `viceme publication wait <id>` | Wait for an explicitly requested platform analysis without re-uploading. |
+| `viceme skill publish --resume <id> --price-minor <fen>` | Apply the reviewed CNY price to the same Draft without creating another Listing. |
+| `viceme publication asset upload ...` | Replace user-selected media, or add `--candidate-only` to stage Agent-provided media for `publication suggest`. |
 | `viceme publication update ...` | Replace the complete listing draft from a strict JSON file. |
 | `viceme publication confirm ...` | Confirm the exact current review digest. |
 | `viceme publication publish ...` | Make a confirmed listing public. |
@@ -258,6 +270,11 @@ text.
   "data": {},
   "meta": {
     "executingCliVersion": "<version>",
+    "autoUpdate": {
+      "from": "<previous-version>",
+      "to": "<executing-version>",
+      "status": "updated"
+    },
     "requestId": "optional"
   }
 }
@@ -266,21 +283,31 @@ text.
 `meta.executingCliVersion` is the version of the process that emitted the
 response. For `viceme update`, the newly installed version is reported
 separately as `data.cli_version` because the response is still emitted by the
-process that started the update.
-
-Released installations check their authoritative release channel at most once
-every 24 hours. When a newer version is available, ordinary JSON responses
-include `_notice.update` with the current version, latest version, and
-`viceme update`. Discovery is fail-open and never changes the business
-command's exit code.
+process that started the update. `meta.autoUpdate` is present only when this
+command was automatically continued by a newly activated generation.
+
+Every released installation passes through a bounded freshness gate before an
+ordinary command. A validated result is reused for five minutes so a single
+workflow does not repeatedly contact the release channel. When a newer stable
+release exists, the CLI and all detected official Skills are activated as one
+recoverable generation and the original command is automatically re-executed by
+the new CLI. Release discovery is fail-open while offline; activation failure
+stops the original command so an older process cannot perform a mutation after
+a failed generation change.
+
+An npm installation continues the original command automatically on every
+supported platform. A standalone Windows binary may return the retryable code
+`AUTO_UPDATE_RESTART_REQUIRED` once while Windows releases the old executable;
+rerunning the exact command completes under the new generation.
 
 ```bash
 viceme update --check
 viceme update
 ```
 
-The updater verifies the exact release, refreshes the matching official Skills,
-and recovers interrupted activation as one compatible local generation.
+`viceme update` remains an explicit repair command. The normal startup gate
+already verifies the exact release, refreshes the matching official Skills, and
+recovers interrupted activation as one compatible local generation.
 
 ## Security
 
@@ -291,7 +318,8 @@ and recovers interrupted activation as one compatible local generation.
 - Credentials remain in the CLI's secure local store and are scoped to a
   Profile and API origin; they are never part of Agent conversation state.
 - Presigned upload URLs are not written to the local pending-operation store.
-- Model analysis receives only filtered text, metadata, and image thumbnails.
+- Agent enrichment treats all package content as untrusted data and cannot bypass server-side package, media, ownership, or revision validation.
+- Explicit platform-model analysis receives only filtered text, metadata, and image thumbnails.
 - Public publication requires the exact reviewed copy, price, cover, and
   ordered gallery to be displayed and explicitly authorized.
 

package/README.zh.md

@@ -27,7 +27,7 @@
   也不会重复创建商品。
 - **同时适合 Agent 和自动化**——稳定 JSON、错误码、Dry Run 和明确状态让每个动作
   都可检查、可复现。
-- **默认安全**——设备码授权、绑定 Origin 的 Profile、本地 Secret 检查、不可变摘要
+- **默认安全**——浏览器授权、绑定 Origin 的 Profile、本地 Secret 检查、不可变摘要
   和已验证上传共同保护发布链路。
 
 ## 能做什么
@@ -53,15 +53,17 @@
    Skills。
 3. 附上本地 Skill 目录或 ZIP，然后直接说：
 
-   > 帮我把这个 Skill 以人民币 1 元发布到 ViceMe。
+   > 帮我把这个 Skill 发布到 ViceMe。
 
 Agent 会先检查登录状态，在整个流程中固定使用同一个 Profile，校验 Skill 后立即
-上传私有草稿并打开真实创作者预览，然后再询问价格。ViceMe 完成双语文案和素材建议后，
-Agent 会把完整成品和图片直接展示出来，最后只询问一次是否确认并立即公开发布。
+上传私有草稿并打开真实创作者预览，不询价就继续上传候选媒体。当前用户的 Agent 随后
+完成双语文案和素材建议，先把完整作品详情和图片直接展示出来，再把价格和详情修改合并成一个
+问题；应用用户答案后展示最终成品，最后只询问一次是否确认并立即公开发布。
 
 ```text
-本地 Skill → 登录 → 校验并私有上传 → 创作者预览 → 定价
-           → 平台分析 → 最终成品 → 确认并发布 → 公开商品链接
+本地 Skill → 登录 → 校验并私有上传 → 创作者预览 → Agent 补全
+           → 完整详情与价格合并询问 → 最终成品
+           → 确认并发布 → 公开商品链接
 ```
 
 最初的“帮我发布”不等于授权公开上架。只有完整审核稿已经展示、用户明确确认后，
@@ -80,7 +82,15 @@ viceme auth login
 # 定价前先上传真实私有草稿，并打开创作者预览。
 viceme skill publish --path ./my-skill
 
-# 在同一草稿上设置人民币 1 元，并继续媒体上传与分析。
+# 继续同一个未定价草稿并上传候选媒体。
+viceme skill publish --resume <publication-id>
+viceme publication review <publication-id>
+
+# Agent 提交带 Draft revision 保护的建议；平台分析只作显式 fallback。
+viceme publication suggest <publication-id> --input <suggestion.json>
+# viceme publication analyze <publication-id> && viceme publication wait <publication-id>
+
+# 查看完整作品详情后，在同一个草稿上设置人民币 1 元。
 viceme skill publish --resume <publication-id> --price-minor 100
 ```
 
@@ -154,23 +164,23 @@ Agent Skills 负责对话流程和授权规则；CLI 负责确定性本地操作
 | 登录 | 受保护 API 操作前完成浏览器授权；所有后续命令固定使用同一个 Profile 与 API Origin。 |
 | 校验 | 本地拒绝危险路径、特殊文件、超限内容、敏感文件和常见 Secret 模式。 |
 | 私有上传与预览 | 用户发起发布即授权上传私有草稿；真实包验证后先打开创作者预览。 |
-| 定价 | 用户随后在同一 Publication 上以“分”为单位提供人民币价格。 |
-| 平台分析 | ViceMe 建议中英文短简介、中英文使用说明、封面和有序画廊；建议不能替代用户决定。 |
+| Agent 补全 | 用户当前的 Agent 把 Skill 当作不可信来源数据，生成双语文案并从已验证上传中选择封面和画廊；平台分析只作显式 fallback。 |
+| 作品详情与定价 | 补全后，Agent 先展示标题、双语文案、封面和画廊，再把价格和详情修改合并成一个问题；不能单独询价。 |
 | 图文审核 | Agent 展示精确文案、价格、封面和所有画廊图片。短简介最大显示宽度为 30：ASCII 计 1，中文及其他非 ASCII 计 2。 |
 | 公开发布 | 用户只需做一次最终明确确认；随后完成审核确认并立即、不可逆地公开上架。 |
 
 上传或响应中断后，继续原来的 Publication：
 
 ```bash
-viceme --profile <publication-profile> skill publish --resume <publication-id>
+viceme skill publish --resume <publication-id>
 ```
 
 不能因为上一次响应未知就创建第二个 Publication，应先查询或恢复原 ID。
 
 ## 登录与 Profile
 
-每个 Profile 绑定一个区域、一个 API Endpoint 和一个通过设备码授权的账户。没有
-自定义 Endpoint 的 Profile 使用对应区域的 ViceMe 官方 API。
+每个 Profile 绑定一个明确的 API Endpoint 和一个通过浏览器授权的账户。发布目标完全
+由当前 Profile 的 Endpoint 决定；单独的分发区域只选择 CLI 与官方 Skills 的下载来源。
 
 ```bash
 viceme auth login
@@ -186,7 +196,6 @@ viceme profile use default
 ```bash
 viceme profile add \
   --name private-cn \
-  --region cn \
   --api-base-url https://api.example.com \
   --use
 viceme auth login
@@ -214,10 +223,13 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
 | `viceme skill listing get <listing-id>` | 读取权威的私有 Listing 状态。 |
 | `viceme skill listing bind <listing-id> --path <path>` | 将来源明确绑定到用户选定且拥有的 Listing。 |
 | `viceme skill publish --path <path>` | 定价前上传真实私有包并返回创作者预览。 |
-| `viceme skill publish --resume <id> --price-minor <fen>` | 为同一 Draft 定价、上传媒体候选并启动分析。 |
-| `viceme publication wait <id>` | 等待后台分析，不重复上传。 |
+| `viceme skill publish --resume <id>` | 继续同一个未定价 Draft 并上传媒体候选，不启动平台模型。 |
 | `viceme publication review <id>` | 读取权威双语文案、价格、选定素材和审核状态。 |
-| `viceme publication asset upload ...` | 确认前替换或新增封面、画廊图片。 |
+| `viceme publication suggest <id> --input ...` | 以 Draft revision 保护提交 Agent 生成的双语文案与媒体选择。 |
+| `viceme publication analyze <id>` | 当前 Agent 无法完成补全时，显式请求平台模型分析。 |
+| `viceme publication wait <id>` | 等待已经显式请求的平台分析，不重复上传。 |
+| `viceme skill publish --resume <id> --price-minor <fen>` | 在完整详情审核后，为同一个 Draft 写入人民币价格，不新建 Listing。 |
+| `viceme publication asset upload ...` | 替换用户明确选择的媒体；加 `--candidate-only` 可暂存由 Agent 提供、随后交给 `publication suggest` 选择的媒体。 |
 | `viceme publication update ...` | 用严格 JSON 文件替换完整 Listing Draft。 |
 | `viceme publication confirm ...` | 确认当前精确 Review Digest。 |
 | `viceme publication publish ...` | 公开已经确认的 Listing。 |
@@ -236,6 +248,11 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
   "data": {},
   "meta": {
     "executingCliVersion": "<version>",
+    "autoUpdate": {
+      "from": "<previous-version>",
+      "to": "<executing-version>",
+      "status": "updated"
+    },
     "requestId": "optional"
   }
 }
@@ -243,18 +260,25 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
 
 `meta.executingCliVersion` 表示输出本次响应的进程版本。对于 `viceme update`，
 新安装版本单独由 `data.cli_version` 返回，因为最终响应仍由启动更新的旧进程输出。
+只有当本次命令由新激活的版本自动继续执行时，响应才会包含 `meta.autoUpdate`。
+
+正式安装在执行普通命令前都会经过有界的新鲜度检查。已经校验的结果会复用五分钟，
+避免同一工作流反复访问发布渠道。发现新的稳定版本时，CLI 与所有检测到的官方
+Skills 会作为一个可恢复的完整版本一起激活，随后由新 CLI 自动重新执行原命令。
+断网时发布发现会继续使用最后一个完整版本；如果版本激活失败，原命令会停止，避免
+旧进程在版本切换失败后继续执行写操作。
 
-正式安装最多每 24 小时读取一次权威发布渠道。发现新版本后，普通 JSON 响应通过
-`_notice.update` 返回当前版本、最新版本和 `viceme update`。检查失败不会改变业务
-命令的退出码。
+npm 安装在所有支持的平台都会自动继续原命令。Windows 独立二进制在等待操作系统释放
+旧可执行文件时，可能会返回一次可重试的 `AUTO_UPDATE_RESTART_REQUIRED`；原样重试
+同一个命令后会由新版本继续执行。
 
 ```bash
 viceme update --check
 viceme update
 ```
 
-更新器会校验精确 Release、刷新匹配版本的官方 Skills，并把中断的激活过程恢复成
-一个完整、兼容的本地版本。
+`viceme update` 保留为显式修复命令。正常启动检查已经会校验精确 Release、刷新匹配
+版本的官方 Skills，并把中断的激活过程恢复成一个完整、兼容的本地版本。
 
 ## 安全边界
 
@@ -264,7 +288,8 @@ viceme update
 - 凭据保存在 CLI 的本地安全存储中，并绑定 Profile 与 API Origin，不进入 Agent
   对话状态。
 - Pending operation 不保存预签名上传 URL。
-- 模型分析只接收筛选后的文本、元数据和图片缩略图。
+- Agent 补全把所有包内容视为不可信数据，且不能绕过服务端包、媒体、归属或 revision 校验。
+- 显式平台模型分析只接收筛选后的文本、元数据和图片缩略图。
 - 公开发布前必须展示并明确授权当前精确文案、价格、封面和有序画廊。
 
 ## 开发

package/checksums.txt

@@ -1,6 +1,6 @@
-60176995905d6d4f1f845d94d0138ee53c41d20c76c233a0b7c3c4dfd1a7e2d7  viceme_0.15.1_darwin_amd64
-2a1e28a6719f3bc4b94a611ae2baf8609879abfbad56e97962c7c6198c281bd9  viceme_0.15.1_darwin_arm64
-fc1ac1aa5ab83ca94ee6d03c371d2dcf797a57e1cc57d3031c8ffefcc3ea43db  viceme_0.15.1_linux_amd64
-3f1ac9fc26e9197a8f94296a6c8b7690b581c7de3afac3dec2dc5f09701dbdde  viceme_0.15.1_linux_arm64
-b3ac5a42207913326cd7079098f2c69b1078990918fea802cbc64cc0ec276d2b  viceme_0.15.1_windows_amd64.exe
-c6943ba2d4ad2bdd2cfb8bec7e3501e9f257be15181716ff0f7ff93477591afa  viceme_0.15.1_windows_arm64.exe
+5d1a01daa98e11d4e8bbe4e06f369235f0b328b5622b413adf17d078dc19f149  viceme_0.16.0_darwin_amd64
+c5668fe1b1306a2553573cf5c9f96e80a81d2771444b5b5bde44c2ece73141fc  viceme_0.16.0_darwin_arm64
+6c2d3b2c5d6ad9fe8b1479872f08d0e8b3fe52c7ed7d6ad591542d6588da8fcf  viceme_0.16.0_linux_amd64
+0e472d484c38ac0b60acaa044d99b4913936abe96f0a4aef7e1c9e2db207fe3f  viceme_0.16.0_linux_arm64
+8ea8942c0ad36505fa46abec12177cb2f75e7eaf4bec6213aefeb6962debf4f0  viceme_0.16.0_windows_amd64.exe
+824895a0ea8b941b31944efb74ce339ba9be0782bc4b42043428146cc52df51c  viceme_0.16.0_windows_arm64.exe

package/npm/bin/viceme.mjs

@@ -2,9 +2,11 @@
 
 import { spawnSync } from "node:child_process";
 import { readFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
 import process from "node:process";
 
 import { ensureBinary } from "../lib/installer.mjs";
+import { launcherEnvironment } from "../lib/launcher-environment.mjs";
 
 export async function main(args = process.argv.slice(2), environment = process.env) {
   const packageDocument = JSON.parse(
@@ -17,13 +19,11 @@ export async function main(args = process.argv.slice(2), environment = process.e
   const child = spawnSync(binary, args, {
     stdio: "inherit",
     env: {
-      ...environment,
-      VICEME_INSTALL_METHOD:
-        environment.VICEME_INSTALL_METHOD === "npm"
-          ? "npm"
-          : environment.VICEME_BINARY_PATH
-            ? "development"
-            : "npm",
+      ...launcherEnvironment(
+        environment,
+        fileURLToPath(import.meta.url),
+        process.execPath,
+      ),
       VICEME_NPM_PACKAGE_VERSION: packageDocument.version,
     },
     windowsHide: false,

package/npm/lib/launcher-environment.mjs

@@ -0,0 +1,13 @@
+export function launcherEnvironment(environment, launcherPath, launcherRuntime) {
+  return {
+    ...environment,
+    VICEME_INSTALL_METHOD:
+      environment.VICEME_INSTALL_METHOD === "npm"
+        ? "npm"
+        : environment.VICEME_BINARY_PATH
+          ? "development"
+          : "npm",
+    VICEME_NPM_LAUNCHER_PATH: launcherPath,
+    VICEME_NPM_LAUNCHER_RUNTIME: launcherRuntime,
+  };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.15.1",
+  "version": "0.16.0",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {