@viceme-ai/cli 0.16.0 → 0.17.0

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # Changelog
 
+## [0.17.0] - 2026-08-25
+
+### Features
+
+- 支持公开互动能力自助接入 (#144) (`21ff78b`)
+- 支持网站功能独立定价 (`14cf4ae`)
+- 上传网站发布封面 (`af88653`)
+- 完善网站发布展示信息 (`16f8926`)
+- 统一 Skill 与网站发布流程 (`9ec8ca3`)
+- 支持网站发布补齐创作者身份 (`602bd70`)
+- 支持外部网站发布与作品售卖 (`d2f694b`)
+- 限制创作者接入 Work (`3958862`)
+- 自动选择唯一创作者作品 (`b6caeac`)
+- 一步完成创作者接入 (`832aa4d`)
+- 移除接入 Origin 配置 (`0f12281`)
+- 提供创作者网页接入命令 (`e3a0e75`)
+
+### Fixes
+
+- 更新创作者访问发布摘要 (`9d42715`)
+- 明确发布先于网站能力接入 (`fdf8b61`)
+- 接入初始化时引导完成网站发布 (`4820b26`)
+- 按发布源类型路由发布流程 (`c5fd6ae`)
+- 允许无域名发布网站作品 (`88a15dc`)
+
+### Other Changes
+
+- 同步创作者授权弹层说明 (`3959f1c`)
+- 同步创作者授权弹层交互 (`53a2a40`)
+- 更新网站授权接入规则 (`d4a038c`)
+- 支持普通用户创建 Work (`fc4d210`)
+- 同步创作者访问交互 (`4be32a6`)
+- 固定创作者接入交互样式 (`cde115d`)
+- 更新权限交互集成流程 (`3df2a0a`)
+
+## [0.16.1] - 2026-08-19
+
+### Fixes
+
+- 修复安装重试与启动信号传播 (`cae2f39`)
+- unbrick npm activation recovery and anchor launcher cache to the bundled checksum manifest (`acf28b2`)
+
 ## [0.16.0] - 2026-08-19
 
 ### Features

package/README.md

@@ -39,7 +39,7 @@
 | Capability | What ViceMe provides |
 | --- | --- |
 | Publish a Skill | Validate a local Skill directory or ZIP, set a CNY price, upload it, review platform suggestions, and publish a paid listing. |
-| Build a component | Ask an Agent to integrate the bundled production danmaku blueprint into a React and Tailwind CSS v4 project. |
+| Add website engagement | Create a creator-owned public danmaku Work, bind a tip-enabled Creator App, and install the CLI-generated hosted script. |
 | Set up an Agent | Install, authenticate, update, diagnose, and repair the CLI and official Skills as one compatible release. |
 | Recover safely | Continue the same publication after a network or process interruption without uploading a duplicate product. |
 
@@ -126,12 +126,14 @@ VICEME_REGION=global sh -c "$(curl -fsSL https://s3.viceme.ai/start/install.sh)"
 China:
 
 ```powershell
+[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
 irm https://s3.viceme.cn/start/install.ps1 | iex
 ```
 
 International:
 
 ```powershell
+[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
 $env:VICEME_REGION="global"; irm https://s3.viceme.ai/start/install.ps1 | iex
 ```
 
@@ -159,7 +161,9 @@ Select a target explicitly with `viceme install --agent codex`, `claude`,
 | --- | --- |
 | `viceme-shared` | install ViceMe, sign in through the browser, manage Profiles, update, diagnose, or repair the local setup. |
 | `viceme-publish` | validate, upload, review, resume, or publish a local Skill directory or ZIP as a paid ViceMe listing. |
-| `viceme-danmaku` | build or adapt the bundled production React and Tailwind CSS v4 danmaku component in an existing project. |
+| `viceme-danmaku` | create a public danmaku Work and install the CLI-generated hosted SDK snippet. |
+| `viceme-tip` | sign in, bind a creator work and verified domain, and add the hosted ViceMe tip checkout to one HTML page. |
+| `viceme-engagement` | create hosted danmaku, bind tips, and install one authoritative combined engagement script. |
 
 The Agent Skills own the conversational workflow and approval rules. The CLI
 owns deterministic local work and API calls. This separation lets an Agent
@@ -194,9 +198,9 @@ unknown. Query or resume the existing ID first.
 
 ## Authentication and Profiles
 
-Each Profile binds one explicit API endpoint and one device-authorized account.
-The separately stored distribution region selects only the CLI and bundled
-Skill download source; it never selects a publication market.
+Each Profile binds one API base URL, Web base URL, market region, and
+device-authorized account as one authority. The separately stored distribution
+region selects only the CLI and bundled Skill download source.
 
 ```bash
 viceme auth login
@@ -214,13 +218,16 @@ dedicated Profile before signing in:
 viceme profile add \
   --name private-cn \
   --api-base-url https://api.example.com \
+  --web-base-url https://www.example.com \
+  --market-region cn \
   --use
 viceme auth login
 ```
 
-`VICEME_API_BASE_URL` is a one-process CI/debug override, not Profile state.
+`VICEME_API_BASE_URL` is an API-only one-process CI/debug override, not Profile
+state. Persistent login and website embed generation are disabled while it is set.
 Remote custom endpoints require HTTPS; only localhost and loopback development
-may use HTTP. Credentials are isolated by Profile and API origin, and an Agent
+may use HTTP. Credentials are isolated by Profile authority, and an Agent
 must never switch to another Profile merely because it is already signed in.
 
 `viceme auth login` intentionally keeps running until browser authorization
@@ -237,7 +244,10 @@ Never copy an access token into the conversation.
 | `viceme version` | Show the CLI and bundled Skill versions. |
 | `viceme doctor` | Check the CLI, active Profile, credentials, API readiness, and installed official Skills. |
 | `viceme auth status` | Show whether the active Profile is signed in. |
-| `viceme profile list` | Show Profiles and their effective API endpoints. |
+| `viceme access init --name <name> --danmaku` | Create and activate a creator-owned public hosted danmaku Work. |
+| `viceme access inspect` / `viceme access apply` | Inspect or explicitly reconcile the Profile-bound danmaku config. |
+| `viceme creator-app show <app-id> --work-key <work-key> --locale <locale>` | Validate both owned resources and emit the authoritative combined engagement snippet for the selected `zh-CN` or `en-US` page locale. |
+| `viceme profile list` | Show Profiles and their API, Web, and market authorities. |
 | `viceme skill inspect --path <path>` | Validate a local Skill without side effects. |
 | `viceme skill listing prepare --path <path>` | Create or recover the stable private owner preview and persist the local binding. |
 | `viceme skill listing get <listing-id>` | Read the authoritative private Listing state. |

package/README.zh.md

@@ -35,7 +35,7 @@
 | 能力 | ViceMe 提供的内容 |
 | --- | --- |
 | 发布 Skill | 校验本地 Skill 目录或 ZIP、设置人民币价格、上传、审核平台建议，并发布付费商品。 |
-| 构建组件 | 让 Agent 把随包提供的生产级弹幕蓝图接入 React 与 Tailwind CSS v4 项目。 |
+| 接入网站互动 | 创建创作者自有的公开弹幕 Work，绑定支持赞赏的 Creator App，并安装 CLI 生成的托管脚本。 |
 | 配置 Agent | 把 CLI 与官方 Skills 作为同一个兼容版本安装、登录、更新、诊断和修复。 |
 | 安全恢复 | 网络或进程中断后继续原发布任务，不重复上传和创建商品。 |
 
@@ -117,12 +117,14 @@ VICEME_REGION=global sh -c "$(curl -fsSL https://s3.viceme.ai/start/install.sh)"
 中国区：
 
 ```powershell
+[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
 irm https://s3.viceme.cn/start/install.ps1 | iex
 ```
 
 海外：
 
 ```powershell
+[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
 $env:VICEME_REGION="global"; irm https://s3.viceme.ai/start/install.ps1 | iex
 ```
 
@@ -149,7 +151,9 @@ npx --yes @viceme-ai/cli@latest install
 | --- | --- |
 | `viceme-shared` | 安装 ViceMe、通过浏览器登录、管理 Profile、更新、诊断或修复本地环境。 |
 | `viceme-publish` | 把本地 Skill 目录或 ZIP 校验、上传、审核、恢复或发布为 ViceMe 付费商品。 |
-| `viceme-danmaku` | 在已有项目中构建或适配随包提供的生产级 React 与 Tailwind CSS v4 弹幕组件。 |
+| `viceme-danmaku` | 创建公开弹幕 Work，并安装 CLI 生成的托管 SDK 片段。 |
+| `viceme-tip` | 完成登录、绑定创作者作品与验证域名，并把 ViceMe 托管赞赏接入一个 HTML 页面。 |
+| `viceme-engagement` | 创建托管弹幕、绑定赞赏，并安装唯一权威的组合交互脚本。 |
 
 Agent Skills 负责对话流程和授权规则；CLI 负责确定性本地操作与 API 调用。因此 Agent
 可以解释每一步决策，而相同的命令契约仍可在终端或自动化中复现。
@@ -179,8 +183,8 @@ viceme skill publish --resume <publication-id>
 
 ## 登录与 Profile
 
-每个 Profile 绑定一个明确的 API Endpoint 和一个通过浏览器授权的账户。发布目标完全
-由当前 Profile 的 Endpoint 决定；单独的分发区域只选择 CLI 与官方 Skills 的下载来源。
+每个 Profile 把 API Base URL、Web Base URL、市场区域和浏览器授权账户绑定为一个完整
+authority；单独的分发区域只选择 CLI 与官方 Skills 的下载来源。
 
 ```bash
 viceme auth login
@@ -197,13 +201,16 @@ viceme profile use default
 viceme profile add \
   --name private-cn \
   --api-base-url https://api.example.com \
+  --web-base-url https://www.example.com \
+  --market-region cn \
   --use
 viceme auth login
 ```
 
-`VICEME_API_BASE_URL` 只是单进程 CI / 调试覆盖，不是 Profile 状态。远程自定义
+`VICEME_API_BASE_URL` 只是 API-only 的单进程 CI / 调试覆盖，不是 Profile 状态；
+设置时禁止持久化登录和生成网站嵌入片段。远程自定义
 Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以使用 HTTP。
-凭据按 Profile 和 API Origin 隔离；Agent 不能因为另一个 Profile 已登录就擅自切换。
+凭据按完整 Profile authority 隔离；Agent 不能因为另一个 Profile 已登录就擅自切换。
 
 `viceme auth login` 会一直等待，直到浏览器授权完成或达到有界超时。Agent 必须保持
 命令运行，向用户展示一次性完整链接并等待最终结果。页面会在必要时先完成登录，随后
@@ -217,7 +224,10 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
 | `viceme version` | 显示 CLI 与随包 Skills 版本。 |
 | `viceme doctor` | 检查 CLI、当前 Profile、凭据、API readiness 和已安装官方 Skills。 |
 | `viceme auth status` | 显示当前 Profile 是否已登录。 |
-| `viceme profile list` | 显示 Profile 及其实际 API Endpoint。 |
+| `viceme access init --name <名称> --danmaku` | 创建并激活创作者自有的公开托管弹幕 Work。 |
+| `viceme access inspect` / `viceme access apply` | 检查或显式协调绑定 Profile 的弹幕配置。 |
+| `viceme creator-app show <app-id> --work-key <work-key> --locale <locale>` | 校验两个自有资源，并按页面的 `zh-CN` 或 `en-US` 语言生成权威组合交互片段。 |
+| `viceme profile list` | 显示 Profile 的 API、Web 与市场 authority。 |
 | `viceme skill inspect --path <path>` | 无副作用校验本地 Skill。 |
 | `viceme skill listing prepare --path <path>` | 创建或恢复稳定的创作者私有预览，并保存本地绑定。 |
 | `viceme skill listing get <listing-id>` | 读取权威的私有 Listing 状态。 |

package/checksums.txt

@@ -1,6 +1,6 @@
-5d1a01daa98e11d4e8bbe4e06f369235f0b328b5622b413adf17d078dc19f149  viceme_0.16.0_darwin_amd64
-c5668fe1b1306a2553573cf5c9f96e80a81d2771444b5b5bde44c2ece73141fc  viceme_0.16.0_darwin_arm64
-6c2d3b2c5d6ad9fe8b1479872f08d0e8b3fe52c7ed7d6ad591542d6588da8fcf  viceme_0.16.0_linux_amd64
-0e472d484c38ac0b60acaa044d99b4913936abe96f0a4aef7e1c9e2db207fe3f  viceme_0.16.0_linux_arm64
-8ea8942c0ad36505fa46abec12177cb2f75e7eaf4bec6213aefeb6962debf4f0  viceme_0.16.0_windows_amd64.exe
-824895a0ea8b941b31944efb74ce339ba9be0782bc4b42043428146cc52df51c  viceme_0.16.0_windows_arm64.exe
+67148b7be4c9d1fb69eb753d84b0f5e9c70f6b47585c87d89439cf4d41ced00f  viceme_0.17.0_darwin_amd64
+2b5bb35058438a6a41032d49d329fe79968d53c14aa55863273b2ba2c635b16a  viceme_0.17.0_darwin_arm64
+3c5a9fe7fcd152fc9b4824ea1cf239afdbf2a04089a4a5a1c49e2bdecc971bbc  viceme_0.17.0_linux_amd64
+65800f513300e84dfd2127d982ec1eb6d55624116a2853b9bdbede0291ac2ca9  viceme_0.17.0_linux_arm64
+8885fb5dd4216d97b7a9d89aca5344bb4ba7e9fdb7ef3adda2afcd931d0b31e4  viceme_0.17.0_windows_amd64.exe
+a78eaed10b42581d65d9874b27ce93264139b99dadf8070ae3abdca5f070e752  viceme_0.17.0_windows_arm64.exe

package/npm/bin/viceme.mjs

@@ -2,12 +2,21 @@
 
 import { spawnSync } from "node:child_process";
 import { readFile } from "node:fs/promises";
+import { constants as osConstants } from "node:os";
 import { fileURLToPath } from "node:url";
 import process from "node:process";
 
 import { ensureBinary } from "../lib/installer.mjs";
 import { launcherEnvironment } from "../lib/launcher-environment.mjs";
 
+function signalExitCode(signal) {
+  const signalNumber = osConstants.signals[signal];
+  if (!Number.isInteger(signalNumber)) {
+    throw new Error(`unsupported child termination signal ${signal}`);
+  }
+  return 128 + signalNumber;
+}
+
 export async function main(args = process.argv.slice(2), environment = process.env) {
   const packageDocument = JSON.parse(
     await readFile(new URL("../../package.json", import.meta.url), "utf8"),
@@ -32,7 +41,7 @@ export async function main(args = process.argv.slice(2), environment = process.e
     throw child.error;
   }
   if (child.signal) {
-    return 128;
+    return signalExitCode(child.signal);
   }
   return child.status ?? 1;
 }

package/npm/lib/installer.mjs

@@ -1,6 +1,16 @@
 import { spawn } from "node:child_process";
 import { createHash, randomUUID } from "node:crypto";
-import { access, chmod, mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
+import {
+  access,
+  chmod,
+  mkdir,
+  mkdtemp,
+  readFile,
+  readdir,
+  rename,
+  rm,
+  writeFile,
+} from "node:fs/promises";
 import { constants } from "node:fs";
 import os from "node:os";
 import path from "node:path";
@@ -14,6 +24,7 @@ const VERSION_PATTERN = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
 const GENERATIONS_DIRECTORY = "generations";
 const GENERATION_PREFIX = "generation-";
 const STAGING_PREFIX = ".staging-";
+const BINARY_DOWNLOAD_TIMEOUT_MILLISECONDS = 10 * 60 * 1_000;
 
 export function releaseTarget(platform = process.platform, architecture = process.arch) {
   const operatingSystems = {
@@ -80,6 +91,7 @@ export async function ensureBinary({
   cacheDirectory,
   checksumsDocument,
   allowInsecureURL = false,
+  downloadTimeoutMilliseconds = BINARY_DOWNLOAD_TIMEOUT_MILLISECONDS,
 }) {
   if (environment.VICEME_BINARY_PATH) {
     const overridden = path.resolve(environment.VICEME_BINARY_PATH);
@@ -93,14 +105,17 @@ export async function ensureBinary({
   const root = cacheDirectory ?? defaultCacheDirectory(environment, platform);
   const destinationDirectory = path.join(root, "cli", packageVersion);
   const generationsDirectory = path.join(destinationDirectory, GENERATIONS_DIRECTORY);
-  const cached = await findValidGeneration(generationsDirectory, asset);
+  // The bundled checksum manifest is the trust root for every code path, cached
+  // generations included. A generation is only reusable when its bytes match
+  // the bundled digest, never merely a sidecar stored next to it.
+  const checksumSource =
+    checksumsDocument ?? (await readFile(CHECKSUMS_URL, "utf8"));
+  const expectedChecksum = checksumForAsset(checksumSource, asset);
+  const cached = await findValidGeneration(generationsDirectory, asset, expectedChecksum);
   if (cached) {
     return cached;
   }
   await mkdir(generationsDirectory, { recursive: true, mode: 0o700 });
-  const checksumSource =
-    checksumsDocument ?? (await readFile(CHECKSUMS_URL, "utf8"));
-  const expectedChecksum = checksumForAsset(checksumSource, asset);
   const urls = binaryDownloadURLs({
     packageVersion,
     asset,
@@ -114,12 +129,13 @@ export async function ensureBinary({
     urls,
     downloadImplementation,
     allowInsecureURL,
+    downloadTimeoutMilliseconds,
   });
 
   // If another cold start finished while this process downloaded, reuse its
   // complete immutable generation. Duplicate downloads are harmless; shared
   // partially-written binary/checksum pairs do not exist.
-  const publishedByContender = await findValidGeneration(generationsDirectory, asset);
+  const publishedByContender = await findValidGeneration(generationsDirectory, asset, expectedChecksum);
   if (publishedByContender) {
     return publishedByContender;
   }
@@ -140,7 +156,7 @@ export async function ensureBinary({
     await writeFile(stagedBinary, binary, { mode: 0o700 });
     await chmod(stagedBinary, 0o700);
     await writeFile(stagedChecksum, `${expectedChecksum}  ${asset}\n`, { mode: 0o600 });
-    if (!(await cachedBinaryIsValid(stagedBinary, stagedChecksum))) {
+    if (!(await binaryMatchesChecksum(stagedBinary, expectedChecksum))) {
       throw new Error(`staged binary verification failed for ${asset}`);
     }
 
@@ -152,7 +168,7 @@ export async function ensureBinary({
     await rm(stagingDirectory, { recursive: true, force: true });
   }
   const installedBinary = path.join(generationDirectory, asset);
-  if (!(await cachedBinaryIsValid(installedBinary, `${installedBinary}.sha256`))) {
+  if (!(await binaryMatchesChecksum(installedBinary, expectedChecksum))) {
     throw new Error(`published binary verification failed for ${asset}`);
   }
   return installedBinary;
@@ -216,11 +232,23 @@ async function downloadVerifiedBinary({
   urls,
   downloadImplementation,
   allowInsecureURL,
+  downloadTimeoutMilliseconds,
 }) {
+  if (!Number.isFinite(downloadTimeoutMilliseconds) || downloadTimeoutMilliseconds <= 0) {
+    throw new Error("binary download timeout must be greater than zero");
+  }
+  const deadline = Date.now() + downloadTimeoutMilliseconds;
   const failures = [];
   for (const url of urls) {
+    const remainingMilliseconds = deadline - Date.now();
+    if (remainingMilliseconds <= 0) {
+      break;
+    }
     try {
-      const downloaded = await downloadImplementation(url, { allowInsecureURL });
+      const downloaded = await downloadImplementation(url, {
+        allowInsecureURL,
+        timeoutMilliseconds: remainingMilliseconds,
+      });
       const binary = Buffer.isBuffer(downloaded) ? downloaded : Buffer.from(downloaded);
       if (digest(binary) !== expectedChecksum) {
         throw new Error(`checksum mismatch for ${asset}`);
@@ -235,8 +263,18 @@ async function downloadVerifiedBinary({
   );
 }
 
-async function downloadWithCurl(url, { allowInsecureURL = false } = {}) {
+export async function downloadWithCurl(
+  url,
+  {
+    allowInsecureURL = false,
+    timeoutMilliseconds = BINARY_DOWNLOAD_TIMEOUT_MILLISECONDS,
+    maxTimeSeconds = 600,
+    retryDelaySeconds = 2,
+  } = {},
+) {
   const parsed = parseDownloadBaseURL(url, allowInsecureURL);
+  const temporaryDirectory = await mkdtemp(path.join(os.tmpdir(), "viceme-curl-"));
+  const outputPath = path.join(temporaryDirectory, "download");
   const arguments_ = [
     "--fail",
     "--location",
@@ -244,45 +282,61 @@ async function downloadWithCurl(url, { allowInsecureURL = false } = {}) {
     "--show-error",
     "--connect-timeout",
     "10",
+    // The release binary is tens of megabytes, so allow one healthy transfer
+    // to use the full download budget. curl owns transient retry
+    // classification, while the Node child timeout bounds all retries and
+    // mirrors together. Only curl 7.12+ options are used.
     "--max-time",
-    "120",
+    String(maxTimeSeconds),
+    "--retry",
+    "3",
+    "--retry-delay",
+    String(retryDelaySeconds),
     "--max-redirs",
     "5",
+    // curl can reset a regular output file before retrying. A stdout pipe
+    // retains partial bytes and would concatenate them with the next attempt.
+    "--output",
+    outputPath,
   ];
   if (!allowInsecureURL) {
     arguments_.push("--proto", "=https", "--proto-redir", "=https");
   }
   arguments_.push(parsed.href);
-  return await new Promise((resolve, reject) => {
-    const child = spawn("curl", arguments_, {
-      stdio: ["ignore", "pipe", "pipe"],
-      windowsHide: true,
-    });
-    const stdout = [];
-    let stderr = "";
-    child.stdout.on("data", (chunk) => stdout.push(chunk));
-    child.stderr.on("data", (chunk) => {
-      stderr += chunk;
-    });
-    child.on("error", (error) => {
-      if (error.code === "ENOENT") {
-        reject(new Error("curl is required to download the ViceMe CLI binary"));
-        return;
-      }
-      reject(error);
-    });
-    child.on("close", (code, signal) => {
-      if (code === 0) {
-        resolve(Buffer.concat(stdout));
-        return;
-      }
-      const reason = stderr.trim() || `curl exited ${code ?? `on signal ${signal}`}`;
-      reject(new Error(reason));
+  try {
+    await new Promise((resolve, reject) => {
+      const child = spawn("curl", arguments_, {
+        stdio: ["ignore", "ignore", "pipe"],
+        timeout: Math.max(1, Math.ceil(timeoutMilliseconds)),
+        windowsHide: true,
+      });
+      let stderr = "";
+      child.stderr.on("data", (chunk) => {
+        stderr += chunk;
+      });
+      child.on("error", (error) => {
+        if (error.code === "ENOENT") {
+          reject(new Error("curl is required to download the ViceMe CLI binary"));
+          return;
+        }
+        reject(error);
+      });
+      child.on("close", (code, signal) => {
+        if (code === 0) {
+          resolve();
+          return;
+        }
+        const reason = stderr.trim() || `curl exited ${code ?? `on signal ${signal}`}`;
+        reject(new Error(reason));
+      });
     });
-  });
+    return await readFile(outputPath);
+  } finally {
+    await rm(temporaryDirectory, { recursive: true, force: true });
+  }
 }
 
-async function findValidGeneration(generationsDirectory, asset) {
+async function findValidGeneration(generationsDirectory, asset, expectedChecksum) {
   let entries;
   try {
     entries = await readdir(generationsDirectory, { withFileTypes: true });
@@ -296,7 +350,7 @@ async function findValidGeneration(generationsDirectory, asset) {
     .filter((candidate) => candidate.isDirectory() && candidate.name.startsWith(GENERATION_PREFIX))
     .sort((left, right) => left.name.localeCompare(right.name))) {
     const binaryPath = path.join(generationsDirectory, entry.name, asset);
-    if (await cachedBinaryIsValid(binaryPath, `${binaryPath}.sha256`)) {
+    if (await binaryMatchesChecksum(binaryPath, expectedChecksum)) {
       return binaryPath;
     }
   }
@@ -316,15 +370,13 @@ function defaultCacheDirectory(environment, platform) {
   return path.join(os.homedir(), ".cache", "viceme");
 }
 
-async function cachedBinaryIsValid(binaryPath, checksumPath) {
+async function binaryMatchesChecksum(binaryPath, expectedChecksum) {
   try {
-    const [binary, checksumDocument] = await Promise.all([
+    const [binary] = await Promise.all([
       readFile(binaryPath),
-      readFile(checksumPath, "utf8"),
       access(binaryPath, constants.X_OK),
     ]);
-    const expected = parseChecksum(checksumDocument);
-    return digest(binary) === expected;
+    return digest(binary) === expectedChecksum;
   } catch {
     return false;
   }
@@ -353,14 +405,6 @@ function checksumForAsset(document, asset) {
   return checksum;
 }
 
-function parseChecksum(document) {
-  const match = document.trim().match(/^([a-fA-F0-9]{64})(?:\s|$)/);
-  if (!match) {
-    throw new Error("release checksum document is invalid");
-  }
-  return match[1].toLowerCase();
-}
-
 function digest(buffer) {
   return createHash("sha256").update(buffer).digest("hex");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {