@viceme-ai/cli 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.3.0] - 2026-07-20
+
+### Features
+
+- add profile management (`fec286e`)
+
+## [0.2.1] - 2026-07-20
+
+### Fixes
+
+- add verified binary mirror fallback (`efb0d83`)
+
+### Other Changes
+
+- add Feishu pull request notifications (`b6174b1`)
+
 ## [0.2.0] - 2026-07-19
 
 ### Features

package/README.md

@@ -8,9 +8,9 @@
 
 The official command-line client and Agent Skill for publishing external Skills as stable, shareable Viceme Agents. It is built for AI coding tools such as Codex and Claude Code: the Agent Skill understands user intent, while the CLI provides the deterministic authentication, upload, publication, and status protocol.
 
-[Install](#installation--quick-start) · [AI Agent Skills](#agent-skills) · [Auth](#authentication) · [Regions](#regions) · [Commands](#command-overview) · [Output contract](#json-output-contract) · [Security](#security-and-risk-controls) · [Development](#development)
+[Install](#installation--quick-start) · [AI Agent Skills](#agent-skills) · [Auth](#authentication) · [Regions & profiles](#regions--profiles) · [Commands](#command-overview) · [Output contract](#json-output-contract) · [Security](#security-and-risk-controls) · [Development](#development)
 
-> **Rollout status:** the Core publication transport and stable-link path are implemented behind a controlled allowlist. Public rollout remains blocked until the exact Candidate preview, test run, and result-confirmation gate is complete. The current `--yes` confirms the publication request; it is not proof that the user reviewed the final Candidate.
+> **Rollout status:** the Core publication transport and stable-link path are implemented. Public rollout remains blocked until the exact Candidate preview, test run, and result-confirmation gate is complete. The current `--yes` confirms the publication request; it is not proof that the user reviewed the final Candidate.
 
 ## Why Viceme CLI?
 
@@ -50,7 +50,7 @@ npm install --global @viceme-ai/cli
 viceme install
 ```
 
-Both methods persist the npm launcher, download the matching checksum-verified Go binary, and install the bundled Viceme Agent Skill. They default to the China service. For the international service:
+Both methods persist the npm launcher, download the matching checksum-verified Go binary, and install the bundled Viceme Agent Skill. Binary downloads try GitHub Release first, then a configured non-default npm registry's `/-/binary/viceme-cli/` mirror, and finally the public npmmirror binary mirror. The launcher uses system `curl`, so standard proxy environment variables are honored. They default to the China service. For the international service:
 
 ```bash
 npx --yes @viceme-ai/cli@latest install --region global
@@ -103,6 +103,7 @@ viceme auth login --device-code <device-code>
 ```
 
 If authorization is still pending, reuse the same device code before it expires. Do not start a second device flow unless the original one has expired.
+For a non-default profile, pass the same global `--profile <name>` when starting and continuing device login; the start result reports the effective `profile` and `region`.
 
 **Step 4 — Verify**
 
@@ -122,18 +123,29 @@ viceme skill inspect https://github.com/acme/poster-skill
 
 Inspection is read-only. Follow the bundled `viceme` Skill for source-specific handling, Target selection, confirmation, bounded job waiting, and result reporting. Public publication remains blocked until the exact Candidate confirmation gate described above is complete.
 
-## Regions
+## Regions & Profiles
 
-Viceme exposes one product-level region choice during installation:
+Each profile selects one Viceme region:
 
 | Region | Install command | API endpoint |
 |---|---|---|
 | China | `viceme install` | `https://api.viceme.cn` |
 | International | `viceme install --region global` | `https://api.viceme.ai` |
 
-The selected value is persisted as `region=cn|global`; later commands use it automatically. Credentials are isolated by region, so a China token is never reused against the international API, or vice versa.
+The first install creates the `default` profile. Non-sensitive configuration is stored in `~/.viceme-cli/config.json`; access tokens remain exclusively in the operating-system keychain. Credentials are isolated by both profile and region.
 
-There is no public API URL, profile, or output-format configuration. For local development only, set `VICEME_API_BASE_URL` in the terminal environment.
+```bash
+viceme profile list
+viceme profile add --name work --region global --use
+viceme profile use default
+viceme --profile work auth status
+viceme profile rename work company
+viceme profile remove company
+```
+
+`profile use` changes the persistent active profile; the global `--profile` flag overrides only one command. AI Agents must not switch or remove profiles unless the user explicitly requests it.
+
+`VICEME_CLI_CONFIG_DIR` can override the config root. Local API development still uses the process-only `VICEME_API_BASE_URL`; it is never persisted in a profile.
 
 ## Agent Skills
 
@@ -160,10 +172,10 @@ viceme skills doctor
 
 | Command | Purpose |
 |---|---|
-| `viceme auth status` | Show whether the current region is authenticated |
+| `viceme auth status` | Show whether the current profile is authenticated |
 | `viceme auth login --no-wait` | Start device authorization and return immediately |
 | `viceme auth login --device-code <code>` | Complete a previously started authorization |
-| `viceme auth logout` | Revoke and remove the current region credential |
+| `viceme auth logout` | Revoke and remove the current profile credential |
 
 Tokens are stored only in the operating-system keychain. There is no plaintext token fallback, and successful login output never contains the access or refresh token.
 
@@ -204,8 +216,9 @@ viceme skill publish --file ./poster-skill-v2.zip \
 
 | Command group | Purpose |
 |---|---|
-| `viceme install` | Install the persistent launcher, Agent Skill, and region configuration |
+| `viceme install` | Install the persistent launcher, Agent Skill, and default profile |
 | `viceme auth` | Start, complete, inspect, or revoke device authentication |
+| `viceme profile` | Add, list, switch, rename, or remove local profiles |
 | `viceme skill inspect` | Freeze and inspect a source candidate without publishing |
 | `viceme skill publish` | Create or update a stable Skill Agent publication |
 | `viceme skill target` | Resolve existing logical Agent Targets and versions |
@@ -266,10 +279,10 @@ Determine command success from the process exit code or `ok == true`. A successf
 - **No source execution** — the CLI and compiler do not execute third-party scripts, binaries, shell fragments, marketplace commands, or copied instructions.
 - **Explicit public mutation** — publishing and cancellation require `--yes`; exit code `10` means the Agent must obtain confirmation, not silently retry.
 - **Safe preview** — use `--dry-run` on inspect or publish when the user needs to review the planned request without network or publication side effects.
-- **Credential isolation** — credentials stay in the OS keychain and are namespaced by region.
+- **Credential isolation** — credentials stay in the OS keychain and are namespaced by profile and region.
 - **Immutable inputs** — inspection binds publication to an immutable source snapshot rather than re-reading a floating URL later.
 - **Bounded waiting** — `job wait` has a maximum duration and returns the latest durable state without cancelling the workflow.
-- **Verified distribution** — the npm launcher downloads the binary for its exact package version and verifies the published SHA-256 checksum before activation.
+- **Verified distribution** — the npm launcher downloads the binary for its exact package version from GitHub or a binary mirror and verifies it against the checksum manifest bundled in the npm package before activation.
 
 ## Diagnose and Update
 

package/README.zh.md

@@ -8,9 +8,9 @@
 
 Viceme 官方命令行客户端与 Agent Skill，用于将外部 Skill 发布为稳定、可分享的 Viceme Agent。它面向 Codex、Claude Code 等 AI 编程工具：Agent Skill 负责理解用户意图，CLI 负责确定性的认证、上传、发布和状态协议。
 
-[安装](#安装与快速开始) · [AI Agent Skills](#agent-skills) · [认证](#认证) · [区域](#区域) · [命令](#命令概览) · [输出契约](#json-输出契约) · [安全](#安全与风险控制) · [开发](#开发)
+[安装](#安装与快速开始) · [AI Agent Skills](#agent-skills) · [认证](#认证) · [区域与-profile](#区域与-profile) · [命令](#命令概览) · [输出契约](#json-输出契约) · [安全](#安全与风险控制) · [开发](#开发)
 
-> **开放状态：** Core 发布传输和稳定链接链路已在受控白名单后实现。正式对外开放仍取决于精确 Candidate 预览、试运行和结果确认门的完成。当前 `--yes` 只确认发起发布请求，并不代表用户已经审阅最终 Candidate。
+> **开放状态：** Core 发布传输和稳定链接链路已经实现。正式对外开放仍取决于精确 Candidate 预览、试运行和结果确认门的完成。当前 `--yes` 只确认发起发布请求，并不代表用户已经审阅最终 Candidate。
 
 ## 为什么选择 Viceme CLI？
 
@@ -50,7 +50,7 @@ npm install --global @viceme-ai/cli
 viceme install
 ```
 
-两种方式都会持久化 npm 启动器、下载匹配且通过校验和验证的 Go 二进制文件，并安装随包发布的 Viceme Agent Skill。默认使用中国区服务。使用国际区服务：
+两种方式都会持久化 npm 启动器、下载匹配且通过校验和验证的 Go 二进制文件，并安装随包发布的 Viceme Agent Skill。二进制下载依次尝试 GitHub Release、用户配置的非默认 npm registry 的 `/-/binary/viceme-cli/` 镜像，最后回退到公共 npmmirror binary 镜像。启动器使用系统 `curl`，因此会遵循标准代理环境变量。默认使用中国区服务。使用国际区服务：
 
 ```bash
 npx --yes @viceme-ai/cli@latest install --region global
@@ -103,6 +103,7 @@ viceme auth login --device-code <device-code>
 ```
 
 如果授权仍处于等待状态，应在过期前继续使用同一个 device code。只有原流程已过期时才能重新发起设备登录。
+使用非默认 Profile 时，启动和继续设备登录必须传入同一个全局 `--profile <name>`；启动结果会返回实际的 `profile` 与 `region`。
 
 **第 4 步 — 验证**
 
@@ -122,18 +123,29 @@ viceme skill inspect https://github.com/acme/poster-skill
 
 inspect 是只读操作。后续应按照随包发布的 `viceme` Skill 处理不同来源、Target 选择、用户确认、有界任务等待和结果返回。在上方所述的精确 Candidate 确认门完成前，公开发布流程仍保持关闭。
 
-## 区域
+## 区域与 Profile
 
-Viceme 在安装时只提供一个产品级区域选择：
+每个 Profile 独立选择一个 Viceme 区域：
 
 | 区域 | 安装命令 | API 地址 |
 |---|---|---|
 | 中国区 | `viceme install` | `https://api.viceme.cn` |
 | 国际区 | `viceme install --region global` | `https://api.viceme.ai` |
 
-选择结果保存为 `region=cn|global`，后续命令会自动使用。不同区域的凭证彼此隔离，中国区令牌不会用于国际区 API，反之亦然。
+首次安装会创建 `default` Profile。配置保存在 `~/.viceme-cli/config.json`，访问令牌仍只保存在操作系统密钥链中。不同 Profile 和区域的凭证彼此隔离。
 
-CLI 不提供公开的 API 地址、profile 或输出格式配置。本地开发时可以在终端环境中设置 `VICEME_API_BASE_URL`。
+```bash
+viceme profile list
+viceme profile add --name work --region global --use
+viceme profile use default
+viceme --profile work auth status
+viceme profile rename work company
+viceme profile remove company
+```
+
+`profile use` 修改持久化的当前 Profile；全局 `--profile` 只覆盖本次命令。不要让 AI Agent 在用户没有明确要求时切换或删除 Profile。
+
+可以用 `VICEME_CLI_CONFIG_DIR` 覆盖配置根目录。本地 API 联调仍使用进程环境变量 `VICEME_API_BASE_URL`，不会写入 Profile。
 
 ## Agent Skills
 
@@ -160,10 +172,10 @@ viceme skills doctor
 
 | 命令 | 用途 |
 |---|---|
-| `viceme auth status` | 查看当前区域是否已认证 |
+| `viceme auth status` | 查看当前 Profile 是否已认证 |
 | `viceme auth login --no-wait` | 启动设备授权并立即返回 |
 | `viceme auth login --device-code <code>` | 完成之前启动的设备授权 |
-| `viceme auth logout` | 撤销并删除当前区域的凭证 |
+| `viceme auth logout` | 撤销并删除当前 Profile 的凭证 |
 
 令牌只保存在操作系统密钥链中，不会回退到明文存储；登录成功的输出也不会包含访问令牌或刷新令牌。
 
@@ -204,8 +216,9 @@ viceme skill publish --file ./poster-skill-v2.zip \
 
 | 命令组 | 用途 |
 |---|---|
-| `viceme install` | 安装持久化启动器、Agent Skill 和区域配置 |
+| `viceme install` | 安装持久化启动器、Agent Skill 和默认 Profile |
 | `viceme auth` | 启动、完成、检查或撤销设备认证 |
+| `viceme profile` | 新增、列出、切换、重命名或删除本地 Profile |
 | `viceme skill inspect` | 固化并检查来源候选，不执行发布 |
 | `viceme skill publish` | 创建或更新具有稳定链接的 Skill Agent 发布 |
 | `viceme skill target` | 解析现有逻辑 Agent Target 及其版本 |
@@ -266,10 +279,10 @@ CLI 执行错误写入 **stderr**，退出码非零：
 - **不执行来源内容** — CLI 和编译器不会执行第三方脚本、二进制文件、shell 片段、市场命令或复制口令中的指令。
 - **公开变更需要明确确认** — 发布和取消操作需要 `--yes`；退出码 `10` 表示 Agent 必须向用户取得确认，不能静默重试。
 - **安全预览** — 用户需要检查计划请求时，可以对 inspect 或 publish 使用 `--dry-run`，不会产生网络请求或发布副作用。
-- **凭证隔离** — 凭证保存在操作系统密钥链中，并按区域隔离。
+- **凭证隔离** — 凭证保存在操作系统密钥链中，并按 Profile 与区域隔离。
 - **不可变输入** — inspect 会把发布绑定到不可变来源快照，而不是在之后重新读取浮动 URL。
 - **有界等待** — `job wait` 有最大等待时间；超时后返回最新持久化状态，不会取消工作流。
-- **可信分发** — npm 启动器下载与其准确包版本匹配的二进制文件，并在启用前验证发布的 SHA-256 校验和。
+- **可信分发** — npm 启动器从 GitHub 或 binary 镜像下载与其准确包版本匹配的二进制文件，并在启用前使用 npm 包内置的校验清单验证 SHA-256。
 
 ## 诊断与更新
 

package/checksums.txt

@@ -0,0 +1,6 @@
+8be3c86b43e3121fde111bc195830bfb055d4a83f3aeb2516d6c232d0668831b  viceme_0.3.0_darwin_amd64
+bb4ee6635f2a42820296827a07ccc917b470e3941e2a002ebf78eec5ad02a4e9  viceme_0.3.0_darwin_arm64
+ffcc623f6d14e9145b91a294c3903a121a54b23a0cd1b585f9a37cd16a50bbcf  viceme_0.3.0_linux_amd64
+e8635cee232fa604493548e81db75664a7a0315e829bef1d357341ee377e17d3  viceme_0.3.0_linux_arm64
+9e97ccd4834bd458d8334bb0ffe7cc613b1b83fa47d24ccca89a98d34316fc2a  viceme_0.3.0_windows_amd64.exe
+4953ef1bd354ac5885103672df9bc125c7e4410a11da0352745b687e09049e97  viceme_0.3.0_windows_arm64.exe

package/docs/releasing.md

@@ -28,7 +28,8 @@ files, create tags, write changelog entries, or run npm commands locally.
 8. A maintainer reviews and merges that same Release PR.
 9. `Release CLI and npm launcher` tags the exact reviewed `dev` head, reruns
    the quality gates, builds six platform binaries and six checksums, creates
-   the GitHub Release, publishes the npm launcher, and then sends an
+   the GitHub Release, bundles those exact checksums into the npm launcher,
+   publishes it, and then sends an
    AI-generated release summary to the release notification group in Feishu.
 
 ## One-time repository setup
@@ -73,6 +74,14 @@ its first release, add a repository secret named `NPM_TOKEN` containing a
 granular automation token limited to `@viceme-ai/cli` publication. Remove that
 secret after the package exists and trusted publishing is confirmed.
 
+The npm tarball contains `checksums.txt`, generated from the six immutable
+GitHub Release checksum assets immediately before publication. The launcher
+uses that bundled manifest as its trust root whether the matching binary is
+transported by GitHub Release, a configured npm registry binary mirror, or the
+public npmmirror binary mirror. Registering `viceme-cli` with cnpmcore enables
+the public `/-/binary/viceme-cli/` mirror; it does not create another npm
+package.
+
 `GITHUB_TOKEN` is provided by Actions and is used only to maintain the Release
 PR. `RELEASE_APP_ID` and `RELEASE_APP_PRIVATE_KEY` authenticate the narrowly
 scoped Release App. `NPM_TOKEN` is optional and should only be retained when the

package/npm/lib/installer.mjs

@@ -1,10 +1,15 @@
+import { spawn } from "node:child_process";
 import { createHash, randomUUID } from "node:crypto";
 import { access, chmod, mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
 import { constants } from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
-const RELEASE_BASE_URL = "https://github.com/ViceMe-AI/cli/releases/download";
+const GITHUB_RELEASE_BASE_URL = "https://github.com/ViceMe-AI/cli/releases/download";
+const NPM_REGISTRY_URL = "https://registry.npmjs.org";
+const NPMMIRROR_BINARY_BASE_URL =
+  "https://registry.npmmirror.com/-/binary/viceme-cli";
+const CHECKSUMS_URL = new URL("../../checksums.txt", import.meta.url);
 const VERSION_PATTERN = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
 const GENERATIONS_DIRECTORY = "generations";
 const GENERATION_PREFIX = "generation-";
@@ -40,14 +45,40 @@ export function releaseAssetName(version, platform, architecture) {
   return `viceme_${version}_${target.operatingSystem}_${target.architecture}${target.extension}`;
 }
 
+export function binaryDownloadURLs({
+  packageVersion,
+  asset,
+  environment = process.env,
+  sourceBaseURLs,
+  allowInsecureURL = false,
+}) {
+  const bases = sourceBaseURLs ?? defaultBinarySourceBaseURLs(environment);
+  const urls = [];
+  const seen = new Set();
+  for (const base of bases) {
+    const parsed = parseDownloadBaseURL(base, allowInsecureURL);
+    const normalizedBase = parsed.href.replace(/\/$/, "");
+    const url = `${normalizedBase}/v${packageVersion}/${asset}`;
+    if (!seen.has(url)) {
+      seen.add(url);
+      urls.push(url);
+    }
+  }
+  if (urls.length === 0) {
+    throw new Error("no valid binary download source is configured");
+  }
+  return urls;
+}
+
 export async function ensureBinary({
   packageVersion,
   environment = process.env,
   platform = process.platform,
   architecture = process.arch,
-  fetchImplementation = globalThis.fetch,
-  releaseBaseURL = RELEASE_BASE_URL,
+  downloadImplementation = downloadWithCurl,
+  sourceBaseURLs,
   cacheDirectory,
+  checksumsDocument,
   allowInsecureURL = false,
 }) {
   if (environment.VICEME_BINARY_PATH) {
@@ -55,8 +86,8 @@ export async function ensureBinary({
     await access(overridden, constants.X_OK);
     return overridden;
   }
-  if (typeof fetchImplementation !== "function") {
-    throw new Error("Node.js fetch support is required");
+  if (typeof downloadImplementation !== "function") {
+    throw new Error("a binary download implementation is required");
   }
   const asset = releaseAssetName(packageVersion, platform, architecture);
   const root = cacheDirectory ?? defaultCacheDirectory(environment, platform);
@@ -67,18 +98,23 @@ export async function ensureBinary({
     return cached;
   }
   await mkdir(generationsDirectory, { recursive: true, mode: 0o700 });
-  const versionURL = `${releaseBaseURL}/v${packageVersion}`;
-  const checksumURL = `${versionURL}/${asset}.sha256`;
-  const binaryURL = `${versionURL}/${asset}`;
-  const [checksumDocument, binary] = await Promise.all([
-    download(checksumURL, fetchImplementation, allowInsecureURL),
-    download(binaryURL, fetchImplementation, allowInsecureURL),
-  ]);
-  const expectedChecksum = parseChecksum(checksumDocument.toString("utf8"));
-  const actualChecksum = digest(binary);
-  if (actualChecksum !== expectedChecksum) {
-    throw new Error(`checksum mismatch for ${asset}`);
-  }
+  const checksumSource =
+    checksumsDocument ?? (await readFile(CHECKSUMS_URL, "utf8"));
+  const expectedChecksum = checksumForAsset(checksumSource, asset);
+  const urls = binaryDownloadURLs({
+    packageVersion,
+    asset,
+    environment,
+    sourceBaseURLs,
+    allowInsecureURL,
+  });
+  const binary = await downloadVerifiedBinary({
+    asset,
+    expectedChecksum,
+    urls,
+    downloadImplementation,
+    allowInsecureURL,
+  });
 
   // If another cold start finished while this process downloaded, reuse its
   // complete immutable generation. Duplicate downloads are harmless; shared
@@ -122,6 +158,130 @@ export async function ensureBinary({
   return installedBinary;
 }
 
+function defaultBinarySourceBaseURLs(environment) {
+  const sources = [GITHUB_RELEASE_BASE_URL];
+  const configuredRegistry =
+    environment.npm_config_registry ?? environment.NPM_CONFIG_REGISTRY;
+  const registryBinaryBase = customRegistryBinaryBaseURL(configuredRegistry);
+  if (registryBinaryBase) {
+    sources.push(registryBinaryBase);
+  }
+  sources.push(NPMMIRROR_BINARY_BASE_URL);
+  return sources;
+}
+
+function customRegistryBinaryBaseURL(value) {
+  if (!value) {
+    return undefined;
+  }
+  let registry;
+  try {
+    registry = new URL(value);
+  } catch {
+    return undefined;
+  }
+  if (
+    registry.protocol !== "https:" ||
+    registry.username ||
+    registry.password ||
+    registry.origin === new URL(NPM_REGISTRY_URL).origin
+  ) {
+    return undefined;
+  }
+  return `${registry.href.replace(/\/$/, "")}/-/binary/viceme-cli`;
+}
+
+function parseDownloadBaseURL(value, allowInsecureURL) {
+  let parsed;
+  try {
+    parsed = new URL(value);
+  } catch {
+    throw new Error(`invalid binary download source ${value}`);
+  }
+  if (parsed.username || parsed.password) {
+    throw new Error("binary download sources must not contain credentials");
+  }
+  if (!allowInsecureURL && parsed.protocol !== "https:") {
+    throw new Error(`refusing non-HTTPS binary download source ${value}`);
+  }
+  if (allowInsecureURL && !["http:", "https:"].includes(parsed.protocol)) {
+    throw new Error(`unsupported binary download protocol ${parsed.protocol}`);
+  }
+  return parsed;
+}
+
+async function downloadVerifiedBinary({
+  asset,
+  expectedChecksum,
+  urls,
+  downloadImplementation,
+  allowInsecureURL,
+}) {
+  const failures = [];
+  for (const url of urls) {
+    try {
+      const downloaded = await downloadImplementation(url, { allowInsecureURL });
+      const binary = Buffer.isBuffer(downloaded) ? downloaded : Buffer.from(downloaded);
+      if (digest(binary) !== expectedChecksum) {
+        throw new Error(`checksum mismatch for ${asset}`);
+      }
+      return binary;
+    } catch (error) {
+      failures.push(`- ${url}: ${errorMessage(error)}`);
+    }
+  }
+  throw new Error(
+    `could not download a verified ${asset}; attempted:\n${failures.join("\n")}`,
+  );
+}
+
+async function downloadWithCurl(url, { allowInsecureURL = false } = {}) {
+  const parsed = parseDownloadBaseURL(url, allowInsecureURL);
+  const arguments_ = [
+    "--fail",
+    "--location",
+    "--silent",
+    "--show-error",
+    "--connect-timeout",
+    "10",
+    "--max-time",
+    "120",
+    "--max-redirs",
+    "5",
+  ];
+  if (!allowInsecureURL) {
+    arguments_.push("--proto", "=https", "--proto-redir", "=https");
+  }
+  arguments_.push(parsed.href);
+  return await new Promise((resolve, reject) => {
+    const child = spawn("curl", arguments_, {
+      stdio: ["ignore", "pipe", "pipe"],
+      windowsHide: true,
+    });
+    const stdout = [];
+    let stderr = "";
+    child.stdout.on("data", (chunk) => stdout.push(chunk));
+    child.stderr.on("data", (chunk) => {
+      stderr += chunk;
+    });
+    child.on("error", (error) => {
+      if (error.code === "ENOENT") {
+        reject(new Error("curl is required to download the ViceMe CLI binary"));
+        return;
+      }
+      reject(error);
+    });
+    child.on("close", (code, signal) => {
+      if (code === 0) {
+        resolve(Buffer.concat(stdout));
+        return;
+      }
+      const reason = stderr.trim() || `curl exited ${code ?? `on signal ${signal}`}`;
+      reject(new Error(reason));
+    });
+  });
+}
+
 async function findValidGeneration(generationsDirectory, asset) {
   let entries;
   try {
@@ -170,22 +330,27 @@ async function cachedBinaryIsValid(binaryPath, checksumPath) {
   }
 }
 
-async function download(url, fetchImplementation, allowInsecureURL) {
-  const parsed = new URL(url);
-  if (!allowInsecureURL && parsed.protocol !== "https:") {
-    throw new Error(`refusing non-HTTPS release URL ${url}`);
-  }
-  const response = await fetchImplementation(url, {
-    redirect: "follow",
-    headers: { "user-agent": "@viceme-ai/cli npm launcher" },
-  });
-  if (!response.ok) {
-    throw new Error(`download failed (${response.status}) for ${url}`);
+function checksumForAsset(document, asset) {
+  let checksum;
+  for (const line of document.split(/\r?\n/)) {
+    if (line.trim() === "") {
+      continue;
+    }
+    const match = line.match(/^([a-fA-F0-9]{64})\s+([^\s]+)$/);
+    if (!match) {
+      throw new Error("bundled checksum document is invalid");
+    }
+    if (match[2] === asset) {
+      if (checksum) {
+        throw new Error(`bundled checksum document contains duplicate ${asset}`);
+      }
+      checksum = match[1].toLowerCase();
+    }
   }
-  if (!allowInsecureURL && response.url && new URL(response.url).protocol !== "https:") {
-    throw new Error(`release download redirected to a non-HTTPS URL`);
+  if (!checksum) {
+    throw new Error(`bundled checksum document does not contain ${asset}`);
   }
-  return Buffer.from(await response.arrayBuffer());
+  return checksum;
 }
 
 function parseChecksum(document) {
@@ -199,3 +364,7 @@ function parseChecksum(document) {
 function digest(buffer) {
   return createHash("sha256").update(buffer).digest("hex");
 }
+
+function errorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Install and run the Viceme CLI and Viceme Agent Skill",
   "type": "module",
   "bin": {
@@ -9,6 +9,7 @@
   "files": [
     "npm/bin/",
     "npm/lib/",
+    "checksums.txt",
     "README.md",
     "README.zh.md",
     "CHANGELOG.md",