@viceme-ai/cli 0.15.2 → 0.16.1

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## [0.16.1] - 2026-08-19
+
+### Fixes
+
+- 修复安装重试与启动信号传播 (`cae2f39`)
+- unbrick npm activation recovery and anchor launcher cache to the bundled checksum manifest (`acf28b2`)
+
+## [0.16.0] - 2026-08-19
+
+### Features
+
+- 自动更新 CLI 与官方 Skills (`d68d096`)
+
+### Fixes
+
+- 合并并发自动更新并重执行等待命令 (`f48d2f6`)
+
+### Other Changes
+
+- 稳定激活子进程并发测试 (`fa139f9`)
+- 注册 POC CLI 手动发布工作流 (`3e265fa`)
+- 默认使用 Agent 补全发布内容 (`ee5030e`)
+
 ## [0.15.2] - 2026-08-18
 
 ### Fixes

package/README.md

@@ -61,14 +61,14 @@
 
 The Agent checks login, keeps the selected Profile fixed throughout the
 workflow, validates the Skill, immediately uploads the private Draft, and opens
-its real Owner Preview. It continues media analysis without asking for a price.
-After ViceMe prepares the bilingual copy and media suggestions, the Agent shows
+its real Owner Preview. It uploads media candidates without asking for a price,
+then the user's Agent prepares the bilingual copy and media suggestions. The Agent shows
 the complete listing—including the images—and asks one combined question for
 the price and any desired changes. It then shows the final review and asks once
 whether to confirm and publish it publicly.
 
 ```text
-Local Skill → Login → Validate and private upload → Owner Preview → Platform analysis
+Local Skill → Login → Validate and private upload → Owner Preview → Agent enrichment
             → Complete listing details + price question → Final review
             → Confirm and publish → Public URL
 ```
@@ -90,11 +90,14 @@ viceme auth login
 # Upload the real private draft and open its Owner Preview before pricing.
 viceme skill publish --path ./my-skill
 
-# Continue the same unpriced draft, upload media, and start analysis.
+# Continue the same unpriced draft and upload media candidates.
 viceme skill publish --resume <publication-id>
-viceme publication wait <publication-id>
 viceme publication review <publication-id>
 
+# The Agent writes a revision-protected suggestion. Platform analysis is an explicit fallback only.
+viceme publication suggest <publication-id> --input <suggestion.json>
+# viceme publication analyze <publication-id> && viceme publication wait <publication-id>
+
 # After reviewing the complete listing details, set CNY 1.00 on that draft.
 viceme skill publish --resume <publication-id> --price-minor 100
 ```
@@ -123,12 +126,14 @@ VICEME_REGION=global sh -c "$(curl -fsSL https://s3.viceme.ai/start/install.sh)"
 China:
 
 ```powershell
+[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
 irm https://s3.viceme.cn/start/install.ps1 | iex
 ```
 
 International:
 
 ```powershell
+[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
 $env:VICEME_REGION="global"; irm https://s3.viceme.ai/start/install.ps1 | iex
 ```
 
@@ -175,8 +180,8 @@ are not accepted.
 | Login | Browser authorization happens before protected API work. Every command remains pinned to the same Profile and API origin. |
 | Inspect | Local validation rejects unsafe paths, special files, excessive content, sensitive files, and common secret patterns. |
 | Private upload and preview | The initial publish request authorizes the private Draft upload. The real package is verified and its Owner Preview opens before pricing. |
-| Analysis | ViceMe proposes short Chinese and English summaries, bilingual usage instructions, a cover, and an ordered gallery. Suggestions are never treated as user decisions. |
-| Listing details and price | After analysis, the Agent displays the exact title, bilingual copy, cover, and gallery, then asks one combined question for the CNY price in fen and any desired changes. It never asks for price by itself. |
+| Agent enrichment | The user's Agent reads the Skill as untrusted source data, prepares bilingual copy, and selects verified cover and gallery uploads. Platform analysis is an explicit fallback only. |
+| Listing details and price | After enrichment, the Agent displays the exact title, bilingual copy, cover, and gallery, then asks one combined question for the CNY price in fen and any desired changes. It never asks for price by itself. |
 | Review | The Agent displays the exact copy, price, cover, and gallery images. A short summary has a maximum display width of 30; ASCII counts as 1 and Chinese/non-ASCII as 2. |
 | Publish | One explicit final confirmation authorizes review confirmation followed by immediate, irreversible public publication. |
 
@@ -240,11 +245,13 @@ Never copy an access token into the conversation.
 | `viceme skill listing get <listing-id>` | Read the authoritative private Listing state. |
 | `viceme skill listing bind <listing-id> --path <path>` | Explicitly bind a source to a selected owned Listing. |
 | `viceme skill publish --path <path>` | Upload the real private package and return its Owner Preview before pricing. |
-| `viceme skill publish --resume <id>` | Continue the same unpriced Draft, upload media candidates, and start analysis. |
-| `viceme publication wait <id>` | Wait for background analysis without re-uploading. |
+| `viceme skill publish --resume <id>` | Continue the same unpriced Draft and upload media candidates without starting a platform model. |
 | `viceme publication review <id>` | Read the authoritative bilingual copy, price, selected media, and review state. |
+| `viceme publication suggest <id> --input ...` | Apply Agent-generated bilingual copy and media with Draft revision protection. |
+| `viceme publication analyze <id>` | Explicitly request platform-model analysis when the current Agent cannot perform enrichment. |
+| `viceme publication wait <id>` | Wait for an explicitly requested platform analysis without re-uploading. |
 | `viceme skill publish --resume <id> --price-minor <fen>` | Apply the reviewed CNY price to the same Draft without creating another Listing. |
-| `viceme publication asset upload ...` | Replace or add a cover or gallery image before confirmation. |
+| `viceme publication asset upload ...` | Replace user-selected media, or add `--candidate-only` to stage Agent-provided media for `publication suggest`. |
 | `viceme publication update ...` | Replace the complete listing draft from a strict JSON file. |
 | `viceme publication confirm ...` | Confirm the exact current review digest. |
 | `viceme publication publish ...` | Make a confirmed listing public. |
@@ -265,6 +272,11 @@ text.
   "data": {},
   "meta": {
     "executingCliVersion": "<version>",
+    "autoUpdate": {
+      "from": "<previous-version>",
+      "to": "<executing-version>",
+      "status": "updated"
+    },
     "requestId": "optional"
   }
 }
@@ -273,21 +285,31 @@ text.
 `meta.executingCliVersion` is the version of the process that emitted the
 response. For `viceme update`, the newly installed version is reported
 separately as `data.cli_version` because the response is still emitted by the
-process that started the update.
-
-Released installations check their authoritative release channel at most once
-every 24 hours. When a newer version is available, ordinary JSON responses
-include `_notice.update` with the current version, latest version, and
-`viceme update`. Discovery is fail-open and never changes the business
-command's exit code.
+process that started the update. `meta.autoUpdate` is present only when this
+command was automatically continued by a newly activated generation.
+
+Every released installation passes through a bounded freshness gate before an
+ordinary command. A validated result is reused for five minutes so a single
+workflow does not repeatedly contact the release channel. When a newer stable
+release exists, the CLI and all detected official Skills are activated as one
+recoverable generation and the original command is automatically re-executed by
+the new CLI. Release discovery is fail-open while offline; activation failure
+stops the original command so an older process cannot perform a mutation after
+a failed generation change.
+
+An npm installation continues the original command automatically on every
+supported platform. A standalone Windows binary may return the retryable code
+`AUTO_UPDATE_RESTART_REQUIRED` once while Windows releases the old executable;
+rerunning the exact command completes under the new generation.
 
 ```bash
 viceme update --check
 viceme update
 ```
 
-The updater verifies the exact release, refreshes the matching official Skills,
-and recovers interrupted activation as one compatible local generation.
+`viceme update` remains an explicit repair command. The normal startup gate
+already verifies the exact release, refreshes the matching official Skills, and
+recovers interrupted activation as one compatible local generation.
 
 ## Security
 
@@ -298,7 +320,8 @@ and recovers interrupted activation as one compatible local generation.
 - Credentials remain in the CLI's secure local store and are scoped to a
   Profile and API origin; they are never part of Agent conversation state.
 - Presigned upload URLs are not written to the local pending-operation store.
-- Model analysis receives only filtered text, metadata, and image thumbnails.
+- Agent enrichment treats all package content as untrusted data and cannot bypass server-side package, media, ownership, or revision validation.
+- Explicit platform-model analysis receives only filtered text, metadata, and image thumbnails.
 - Public publication requires the exact reviewed copy, price, cover, and
   ordered gallery to be displayed and explicitly authorized.
 

package/README.zh.md

@@ -56,12 +56,12 @@
    > 帮我把这个 Skill 发布到 ViceMe。
 
 Agent 会先检查登录状态，在整个流程中固定使用同一个 Profile，校验 Skill 后立即
-上传私有草稿并打开真实创作者预览，不询价就继续媒体分析。ViceMe 完成双语文案和素材
-建议后，Agent 会先把完整作品详情和图片直接展示出来，再把价格和详情修改合并成一个
+上传私有草稿并打开真实创作者预览，不询价就继续上传候选媒体。当前用户的 Agent 随后
+完成双语文案和素材建议，先把完整作品详情和图片直接展示出来，再把价格和详情修改合并成一个
 问题；应用用户答案后展示最终成品，最后只询问一次是否确认并立即公开发布。
 
 ```text
-本地 Skill → 登录 → 校验并私有上传 → 创作者预览 → 平台分析
+本地 Skill → 登录 → 校验并私有上传 → 创作者预览 → Agent 补全
            → 完整详情与价格合并询问 → 最终成品
            → 确认并发布 → 公开商品链接
 ```
@@ -82,11 +82,14 @@ viceme auth login
 # 定价前先上传真实私有草稿，并打开创作者预览。
 viceme skill publish --path ./my-skill
 
-# 继续同一个未定价草稿，上传媒体并启动分析。
+# 继续同一个未定价草稿并上传候选媒体。
 viceme skill publish --resume <publication-id>
-viceme publication wait <publication-id>
 viceme publication review <publication-id>
 
+# Agent 提交带 Draft revision 保护的建议；平台分析只作显式 fallback。
+viceme publication suggest <publication-id> --input <suggestion.json>
+# viceme publication analyze <publication-id> && viceme publication wait <publication-id>
+
 # 查看完整作品详情后，在同一个草稿上设置人民币 1 元。
 viceme skill publish --resume <publication-id> --price-minor 100
 ```
@@ -114,12 +117,14 @@ VICEME_REGION=global sh -c "$(curl -fsSL https://s3.viceme.ai/start/install.sh)"
 中国区：
 
 ```powershell
+[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
 irm https://s3.viceme.cn/start/install.ps1 | iex
 ```
 
 海外：
 
 ```powershell
+[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
 $env:VICEME_REGION="global"; irm https://s3.viceme.ai/start/install.ps1 | iex
 ```
 
@@ -161,8 +166,8 @@ Agent Skills 负责对话流程和授权规则；CLI 负责确定性本地操作
 | 登录 | 受保护 API 操作前完成浏览器授权；所有后续命令固定使用同一个 Profile 与 API Origin。 |
 | 校验 | 本地拒绝危险路径、特殊文件、超限内容、敏感文件和常见 Secret 模式。 |
 | 私有上传与预览 | 用户发起发布即授权上传私有草稿；真实包验证后先打开创作者预览。 |
-| 平台分析 | ViceMe 建议中英文短简介、中英文使用说明、封面和有序画廊；建议不能替代用户决定。 |
-| 作品详情与定价 | 分析完成后，Agent 先展示标题、双语文案、封面和画廊，再把价格和详情修改合并成一个问题；不能单独询价。 |
+| Agent 补全 | 用户当前的 Agent 把 Skill 当作不可信来源数据，生成双语文案并从已验证上传中选择封面和画廊；平台分析只作显式 fallback。 |
+| 作品详情与定价 | 补全后，Agent 先展示标题、双语文案、封面和画廊，再把价格和详情修改合并成一个问题；不能单独询价。 |
 | 图文审核 | Agent 展示精确文案、价格、封面和所有画廊图片。短简介最大显示宽度为 30：ASCII 计 1，中文及其他非 ASCII 计 2。 |
 | 公开发布 | 用户只需做一次最终明确确认；随后完成审核确认并立即、不可逆地公开上架。 |
 
@@ -220,11 +225,13 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
 | `viceme skill listing get <listing-id>` | 读取权威的私有 Listing 状态。 |
 | `viceme skill listing bind <listing-id> --path <path>` | 将来源明确绑定到用户选定且拥有的 Listing。 |
 | `viceme skill publish --path <path>` | 定价前上传真实私有包并返回创作者预览。 |
-| `viceme skill publish --resume <id>` | 继续同一个未定价 Draft，上传媒体候选并启动分析。 |
-| `viceme publication wait <id>` | 等待后台分析，不重复上传。 |
+| `viceme skill publish --resume <id>` | 继续同一个未定价 Draft 并上传媒体候选，不启动平台模型。 |
 | `viceme publication review <id>` | 读取权威双语文案、价格、选定素材和审核状态。 |
+| `viceme publication suggest <id> --input ...` | 以 Draft revision 保护提交 Agent 生成的双语文案与媒体选择。 |
+| `viceme publication analyze <id>` | 当前 Agent 无法完成补全时，显式请求平台模型分析。 |
+| `viceme publication wait <id>` | 等待已经显式请求的平台分析，不重复上传。 |
 | `viceme skill publish --resume <id> --price-minor <fen>` | 在完整详情审核后，为同一个 Draft 写入人民币价格，不新建 Listing。 |
-| `viceme publication asset upload ...` | 确认前替换或新增封面、画廊图片。 |
+| `viceme publication asset upload ...` | 替换用户明确选择的媒体；加 `--candidate-only` 可暂存由 Agent 提供、随后交给 `publication suggest` 选择的媒体。 |
 | `viceme publication update ...` | 用严格 JSON 文件替换完整 Listing Draft。 |
 | `viceme publication confirm ...` | 确认当前精确 Review Digest。 |
 | `viceme publication publish ...` | 公开已经确认的 Listing。 |
@@ -243,6 +250,11 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
   "data": {},
   "meta": {
     "executingCliVersion": "<version>",
+    "autoUpdate": {
+      "from": "<previous-version>",
+      "to": "<executing-version>",
+      "status": "updated"
+    },
     "requestId": "optional"
   }
 }
@@ -250,18 +262,25 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
 
 `meta.executingCliVersion` 表示输出本次响应的进程版本。对于 `viceme update`，
 新安装版本单独由 `data.cli_version` 返回，因为最终响应仍由启动更新的旧进程输出。
+只有当本次命令由新激活的版本自动继续执行时，响应才会包含 `meta.autoUpdate`。
+
+正式安装在执行普通命令前都会经过有界的新鲜度检查。已经校验的结果会复用五分钟，
+避免同一工作流反复访问发布渠道。发现新的稳定版本时，CLI 与所有检测到的官方
+Skills 会作为一个可恢复的完整版本一起激活，随后由新 CLI 自动重新执行原命令。
+断网时发布发现会继续使用最后一个完整版本；如果版本激活失败，原命令会停止，避免
+旧进程在版本切换失败后继续执行写操作。
 
-正式安装最多每 24 小时读取一次权威发布渠道。发现新版本后，普通 JSON 响应通过
-`_notice.update` 返回当前版本、最新版本和 `viceme update`。检查失败不会改变业务
-命令的退出码。
+npm 安装在所有支持的平台都会自动继续原命令。Windows 独立二进制在等待操作系统释放
+旧可执行文件时，可能会返回一次可重试的 `AUTO_UPDATE_RESTART_REQUIRED`；原样重试
+同一个命令后会由新版本继续执行。
 
 ```bash
 viceme update --check
 viceme update
 ```
 
-更新器会校验精确 Release、刷新匹配版本的官方 Skills，并把中断的激活过程恢复成
-一个完整、兼容的本地版本。
+`viceme update` 保留为显式修复命令。正常启动检查已经会校验精确 Release、刷新匹配
+版本的官方 Skills，并把中断的激活过程恢复成一个完整、兼容的本地版本。
 
 ## 安全边界
 
@@ -271,7 +290,8 @@ viceme update
 - 凭据保存在 CLI 的本地安全存储中，并绑定 Profile 与 API Origin，不进入 Agent
   对话状态。
 - Pending operation 不保存预签名上传 URL。
-- 模型分析只接收筛选后的文本、元数据和图片缩略图。
+- Agent 补全把所有包内容视为不可信数据，且不能绕过服务端包、媒体、归属或 revision 校验。
+- 显式平台模型分析只接收筛选后的文本、元数据和图片缩略图。
 - 公开发布前必须展示并明确授权当前精确文案、价格、封面和有序画廊。
 
 ## 开发

package/checksums.txt

@@ -1,6 +1,6 @@
-3140964b542a31aabf5deaf7037d8999e5f149f4216dceacabd4c4affc0d8c40  viceme_0.15.2_darwin_amd64
-c1eb06148eb60c947a1319b90ea7e01141bdc420697642a156ab4af754e2eb9a  viceme_0.15.2_darwin_arm64
-7c6575b8dbb7f4aef057965f403666359f99ad324a36ae34996af519d670adc3  viceme_0.15.2_linux_amd64
-56503ffbbb06b742419d90f2661bf8fa182dee77a555a5f233b90f31ebd04fa7  viceme_0.15.2_linux_arm64
-47e88c30290ebf8740f46e4f4a096f2184d66c50dc4477841ea727052614e432  viceme_0.15.2_windows_amd64.exe
-f1e8fe3b3b0f32d6afd0f8a29ffe910a3c1b7f27563ebbb3ba6fb18e1692ea96  viceme_0.15.2_windows_arm64.exe
+3d6f752fb10b3b8b90b0a76158115c74994da96d1aac71b842f4496dca245ec1  viceme_0.16.1_darwin_amd64
+310dd511ea791a37d4307efc8e7d48900fc8daf63a83288fcbc7d3b56823711c  viceme_0.16.1_darwin_arm64
+5689186a71e6cba254258f50397ea6f95872a8e2abfd56d41bdea97cf3167a9f  viceme_0.16.1_linux_amd64
+ed9d84c0a9cdc6a771a80d605b936d8aaa39ab2894270ecb962274f5729ddc10  viceme_0.16.1_linux_arm64
+bba8e0b483b27041b86983cf42922099d29deeb2aabf212b3b433cbd9492a010  viceme_0.16.1_windows_amd64.exe
+4896b58a6412f71d81b6129bcfd46ec80290799ac4aa02dd7063795ed80bef18  viceme_0.16.1_windows_arm64.exe

package/npm/bin/viceme.mjs

@@ -2,9 +2,20 @@
 
 import { spawnSync } from "node:child_process";
 import { readFile } from "node:fs/promises";
+import { constants as osConstants } from "node:os";
+import { fileURLToPath } from "node:url";
 import process from "node:process";
 
 import { ensureBinary } from "../lib/installer.mjs";
+import { launcherEnvironment } from "../lib/launcher-environment.mjs";
+
+function signalExitCode(signal) {
+  const signalNumber = osConstants.signals[signal];
+  if (!Number.isInteger(signalNumber)) {
+    throw new Error(`unsupported child termination signal ${signal}`);
+  }
+  return 128 + signalNumber;
+}
 
 export async function main(args = process.argv.slice(2), environment = process.env) {
   const packageDocument = JSON.parse(
@@ -17,13 +28,11 @@ export async function main(args = process.argv.slice(2), environment = process.e
   const child = spawnSync(binary, args, {
     stdio: "inherit",
     env: {
-      ...environment,
-      VICEME_INSTALL_METHOD:
-        environment.VICEME_INSTALL_METHOD === "npm"
-          ? "npm"
-          : environment.VICEME_BINARY_PATH
-            ? "development"
-            : "npm",
+      ...launcherEnvironment(
+        environment,
+        fileURLToPath(import.meta.url),
+        process.execPath,
+      ),
       VICEME_NPM_PACKAGE_VERSION: packageDocument.version,
     },
     windowsHide: false,
@@ -32,7 +41,7 @@ export async function main(args = process.argv.slice(2), environment = process.e
     throw child.error;
   }
   if (child.signal) {
-    return 128;
+    return signalExitCode(child.signal);
   }
   return child.status ?? 1;
 }

package/npm/lib/installer.mjs

@@ -1,6 +1,16 @@
 import { spawn } from "node:child_process";
 import { createHash, randomUUID } from "node:crypto";
-import { access, chmod, mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
+import {
+  access,
+  chmod,
+  mkdir,
+  mkdtemp,
+  readFile,
+  readdir,
+  rename,
+  rm,
+  writeFile,
+} from "node:fs/promises";
 import { constants } from "node:fs";
 import os from "node:os";
 import path from "node:path";
@@ -14,6 +24,7 @@ const VERSION_PATTERN = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
 const GENERATIONS_DIRECTORY = "generations";
 const GENERATION_PREFIX = "generation-";
 const STAGING_PREFIX = ".staging-";
+const BINARY_DOWNLOAD_TIMEOUT_MILLISECONDS = 10 * 60 * 1_000;
 
 export function releaseTarget(platform = process.platform, architecture = process.arch) {
   const operatingSystems = {
@@ -80,6 +91,7 @@ export async function ensureBinary({
   cacheDirectory,
   checksumsDocument,
   allowInsecureURL = false,
+  downloadTimeoutMilliseconds = BINARY_DOWNLOAD_TIMEOUT_MILLISECONDS,
 }) {
   if (environment.VICEME_BINARY_PATH) {
     const overridden = path.resolve(environment.VICEME_BINARY_PATH);
@@ -93,14 +105,17 @@ export async function ensureBinary({
   const root = cacheDirectory ?? defaultCacheDirectory(environment, platform);
   const destinationDirectory = path.join(root, "cli", packageVersion);
   const generationsDirectory = path.join(destinationDirectory, GENERATIONS_DIRECTORY);
-  const cached = await findValidGeneration(generationsDirectory, asset);
+  // The bundled checksum manifest is the trust root for every code path, cached
+  // generations included. A generation is only reusable when its bytes match
+  // the bundled digest, never merely a sidecar stored next to it.
+  const checksumSource =
+    checksumsDocument ?? (await readFile(CHECKSUMS_URL, "utf8"));
+  const expectedChecksum = checksumForAsset(checksumSource, asset);
+  const cached = await findValidGeneration(generationsDirectory, asset, expectedChecksum);
   if (cached) {
     return cached;
   }
   await mkdir(generationsDirectory, { recursive: true, mode: 0o700 });
-  const checksumSource =
-    checksumsDocument ?? (await readFile(CHECKSUMS_URL, "utf8"));
-  const expectedChecksum = checksumForAsset(checksumSource, asset);
   const urls = binaryDownloadURLs({
     packageVersion,
     asset,
@@ -114,12 +129,13 @@ export async function ensureBinary({
     urls,
     downloadImplementation,
     allowInsecureURL,
+    downloadTimeoutMilliseconds,
   });
 
   // If another cold start finished while this process downloaded, reuse its
   // complete immutable generation. Duplicate downloads are harmless; shared
   // partially-written binary/checksum pairs do not exist.
-  const publishedByContender = await findValidGeneration(generationsDirectory, asset);
+  const publishedByContender = await findValidGeneration(generationsDirectory, asset, expectedChecksum);
   if (publishedByContender) {
     return publishedByContender;
   }
@@ -140,7 +156,7 @@ export async function ensureBinary({
     await writeFile(stagedBinary, binary, { mode: 0o700 });
     await chmod(stagedBinary, 0o700);
     await writeFile(stagedChecksum, `${expectedChecksum}  ${asset}\n`, { mode: 0o600 });
-    if (!(await cachedBinaryIsValid(stagedBinary, stagedChecksum))) {
+    if (!(await binaryMatchesChecksum(stagedBinary, expectedChecksum))) {
       throw new Error(`staged binary verification failed for ${asset}`);
     }
 
@@ -152,7 +168,7 @@ export async function ensureBinary({
     await rm(stagingDirectory, { recursive: true, force: true });
   }
   const installedBinary = path.join(generationDirectory, asset);
-  if (!(await cachedBinaryIsValid(installedBinary, `${installedBinary}.sha256`))) {
+  if (!(await binaryMatchesChecksum(installedBinary, expectedChecksum))) {
     throw new Error(`published binary verification failed for ${asset}`);
   }
   return installedBinary;
@@ -216,11 +232,23 @@ async function downloadVerifiedBinary({
   urls,
   downloadImplementation,
   allowInsecureURL,
+  downloadTimeoutMilliseconds,
 }) {
+  if (!Number.isFinite(downloadTimeoutMilliseconds) || downloadTimeoutMilliseconds <= 0) {
+    throw new Error("binary download timeout must be greater than zero");
+  }
+  const deadline = Date.now() + downloadTimeoutMilliseconds;
   const failures = [];
   for (const url of urls) {
+    const remainingMilliseconds = deadline - Date.now();
+    if (remainingMilliseconds <= 0) {
+      break;
+    }
     try {
-      const downloaded = await downloadImplementation(url, { allowInsecureURL });
+      const downloaded = await downloadImplementation(url, {
+        allowInsecureURL,
+        timeoutMilliseconds: remainingMilliseconds,
+      });
       const binary = Buffer.isBuffer(downloaded) ? downloaded : Buffer.from(downloaded);
       if (digest(binary) !== expectedChecksum) {
         throw new Error(`checksum mismatch for ${asset}`);
@@ -235,8 +263,18 @@ async function downloadVerifiedBinary({
   );
 }
 
-async function downloadWithCurl(url, { allowInsecureURL = false } = {}) {
+export async function downloadWithCurl(
+  url,
+  {
+    allowInsecureURL = false,
+    timeoutMilliseconds = BINARY_DOWNLOAD_TIMEOUT_MILLISECONDS,
+    maxTimeSeconds = 600,
+    retryDelaySeconds = 2,
+  } = {},
+) {
   const parsed = parseDownloadBaseURL(url, allowInsecureURL);
+  const temporaryDirectory = await mkdtemp(path.join(os.tmpdir(), "viceme-curl-"));
+  const outputPath = path.join(temporaryDirectory, "download");
   const arguments_ = [
     "--fail",
     "--location",
@@ -244,45 +282,61 @@ async function downloadWithCurl(url, { allowInsecureURL = false } = {}) {
     "--show-error",
     "--connect-timeout",
     "10",
+    // The release binary is tens of megabytes, so allow one healthy transfer
+    // to use the full download budget. curl owns transient retry
+    // classification, while the Node child timeout bounds all retries and
+    // mirrors together. Only curl 7.12+ options are used.
     "--max-time",
-    "120",
+    String(maxTimeSeconds),
+    "--retry",
+    "3",
+    "--retry-delay",
+    String(retryDelaySeconds),
     "--max-redirs",
     "5",
+    // curl can reset a regular output file before retrying. A stdout pipe
+    // retains partial bytes and would concatenate them with the next attempt.
+    "--output",
+    outputPath,
   ];
   if (!allowInsecureURL) {
     arguments_.push("--proto", "=https", "--proto-redir", "=https");
   }
   arguments_.push(parsed.href);
-  return await new Promise((resolve, reject) => {
-    const child = spawn("curl", arguments_, {
-      stdio: ["ignore", "pipe", "pipe"],
-      windowsHide: true,
-    });
-    const stdout = [];
-    let stderr = "";
-    child.stdout.on("data", (chunk) => stdout.push(chunk));
-    child.stderr.on("data", (chunk) => {
-      stderr += chunk;
-    });
-    child.on("error", (error) => {
-      if (error.code === "ENOENT") {
-        reject(new Error("curl is required to download the ViceMe CLI binary"));
-        return;
-      }
-      reject(error);
-    });
-    child.on("close", (code, signal) => {
-      if (code === 0) {
-        resolve(Buffer.concat(stdout));
-        return;
-      }
-      const reason = stderr.trim() || `curl exited ${code ?? `on signal ${signal}`}`;
-      reject(new Error(reason));
+  try {
+    await new Promise((resolve, reject) => {
+      const child = spawn("curl", arguments_, {
+        stdio: ["ignore", "ignore", "pipe"],
+        timeout: Math.max(1, Math.ceil(timeoutMilliseconds)),
+        windowsHide: true,
+      });
+      let stderr = "";
+      child.stderr.on("data", (chunk) => {
+        stderr += chunk;
+      });
+      child.on("error", (error) => {
+        if (error.code === "ENOENT") {
+          reject(new Error("curl is required to download the ViceMe CLI binary"));
+          return;
+        }
+        reject(error);
+      });
+      child.on("close", (code, signal) => {
+        if (code === 0) {
+          resolve();
+          return;
+        }
+        const reason = stderr.trim() || `curl exited ${code ?? `on signal ${signal}`}`;
+        reject(new Error(reason));
+      });
     });
-  });
+    return await readFile(outputPath);
+  } finally {
+    await rm(temporaryDirectory, { recursive: true, force: true });
+  }
 }
 
-async function findValidGeneration(generationsDirectory, asset) {
+async function findValidGeneration(generationsDirectory, asset, expectedChecksum) {
   let entries;
   try {
     entries = await readdir(generationsDirectory, { withFileTypes: true });
@@ -296,7 +350,7 @@ async function findValidGeneration(generationsDirectory, asset) {
     .filter((candidate) => candidate.isDirectory() && candidate.name.startsWith(GENERATION_PREFIX))
     .sort((left, right) => left.name.localeCompare(right.name))) {
     const binaryPath = path.join(generationsDirectory, entry.name, asset);
-    if (await cachedBinaryIsValid(binaryPath, `${binaryPath}.sha256`)) {
+    if (await binaryMatchesChecksum(binaryPath, expectedChecksum)) {
       return binaryPath;
     }
   }
@@ -316,15 +370,13 @@ function defaultCacheDirectory(environment, platform) {
   return path.join(os.homedir(), ".cache", "viceme");
 }
 
-async function cachedBinaryIsValid(binaryPath, checksumPath) {
+async function binaryMatchesChecksum(binaryPath, expectedChecksum) {
   try {
-    const [binary, checksumDocument] = await Promise.all([
+    const [binary] = await Promise.all([
       readFile(binaryPath),
-      readFile(checksumPath, "utf8"),
       access(binaryPath, constants.X_OK),
     ]);
-    const expected = parseChecksum(checksumDocument);
-    return digest(binary) === expected;
+    return digest(binary) === expectedChecksum;
   } catch {
     return false;
   }
@@ -353,14 +405,6 @@ function checksumForAsset(document, asset) {
   return checksum;
 }
 
-function parseChecksum(document) {
-  const match = document.trim().match(/^([a-fA-F0-9]{64})(?:\s|$)/);
-  if (!match) {
-    throw new Error("release checksum document is invalid");
-  }
-  return match[1].toLowerCase();
-}
-
 function digest(buffer) {
   return createHash("sha256").update(buffer).digest("hex");
 }

package/npm/lib/launcher-environment.mjs

@@ -0,0 +1,13 @@
+export function launcherEnvironment(environment, launcherPath, launcherRuntime) {
+  return {
+    ...environment,
+    VICEME_INSTALL_METHOD:
+      environment.VICEME_INSTALL_METHOD === "npm"
+        ? "npm"
+        : environment.VICEME_BINARY_PATH
+          ? "development"
+          : "npm",
+    VICEME_NPM_LAUNCHER_PATH: launcherPath,
+    VICEME_NPM_LAUNCHER_RUNTIME: launcherRuntime,
+  };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.15.2",
+  "version": "0.16.1",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {