@viceme-ai/cli 0.23.0 → 0.24.0

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # Changelog
 
+## [0.24.0] - 2026-09-02
+
+### Features
+
+- 添加网站做同款官方技能 (`d0214a8`)
+- 实现复刻源码购买安装 (`bb8348a`)
+- 添加复刻源码安全原子安装器 (`ab783dd`)
+- 实现网站源码复刻发布 (`017d439`)
+- 添加网站复刻登录权限 (`babd2bf`)
+
+### Fixes
+
+- 明确发布条目选择与免费改价影响 (`048f616`)
+- 加固复刻发布与确认边界 (`4ace44f`)
+- 加固复刻安装与支付恢复 (`9935180`)
+- 锁定复刻交易响应与恢复状态 (`1ec51ee`)
+- 收紧复刻响应关系校验 (`36e35aa`)
+- 严格校验复刻交易响应 (`1df96cb`)
+- 加固复刻源码安装恢复 (`1d99cf2`)
+- 对齐复刻包摘要格式 (`c40641c`)
+
+### Other Changes
+
+- 覆盖复刻安装崩溃恢复边界 (`ca95dea`)
+
+## [0.23.1] - 2026-09-02
+
+### Fixes
+
+- 保留可重试的凭据清理状态 (`23216f3`)
+- 移除互动接入 DNS 验证 (`1fb8bb3`)
+
+### Other Changes
+
+- 修正工作流 shellcheck 告警 (`71113ab`)
+- 避免发布准备重复运行全量检查 (`89c1b9e`)
+
 ## [0.23.0] - 2026-09-01
 
 ### Features

package/README.md

@@ -39,9 +39,9 @@
 | Capability | What ViceMe provides |
 | --- | --- |
 | Publish a Skill | Validate a local Skill directory or ZIP, set a CNY price, upload it, review platform suggestions, and publish a paid listing. |
-| Publish a website | Register and DNS-verify a creator website with a stable Website Work identity. |
+| Publish a website | Register and publish a creator website with a stable Website Work identity; verify ownership separately only for commerce, follow, or paid-access features that require it. |
 | Add creator access | Add host-native login, follow gates, and independently priced one-time feature access. |
-| Add hosted engagement | Branch between danmaku on a published, DNS-verified Website Work; open tips on any eligible published Merchant Work; or both on one verified Website Work because danmaku requires it. |
+| Add hosted engagement | Branch between danmaku on a published Website Work with an exact canonical Origin, open tips on any eligible published Merchant Work, or both; no engagement route requires DNS ownership verification. |
 | Set up an Agent | Install, authenticate, update, diagnose, and repair the CLI and official Skills as one compatible release. |
 | Recover safely | Continue the same publication after a network or process interruption without uploading a duplicate product. |
 
@@ -93,9 +93,9 @@ viceme auth login
 viceme merchant accounts
 
 # Upload the real private draft and open its Owner Preview before pricing.
-viceme skill publish --path ./my-skill
+viceme skill publish --path ./my-skill --edition-key my-skill --edition-order 0
 # With multiple active Merchant accounts, select the confirmed account:
-# viceme skill publish --path ./my-skill --merchant <merchant-account-id>
+# viceme skill publish --path ./my-skill --edition-key my-skill --edition-order 0 --merchant <merchant-account-id>
 
 # Continue the same unpriced draft and upload media candidates.
 viceme skill publish --resume <publication-id>
@@ -171,11 +171,10 @@ Select a target explicitly with `viceme install --agent codex`, `claude`,
 | `sell-a-skill` | publish or update a paid or free downloadable Skill; websites, services, and generic goods are out of scope. |
 | `viceme-skill-use` | resolve free, purchased, or purchase-required access, install the selected Skill, and continue the original task. |
 | `charge-for-your-work` | integrate an existing website access configuration into host code after the shared creator qualification check. |
-| `let-people-interact` | branch between danmaku, open tips, or both; only danmaku-bearing routes require a published, verified Website Work, while Tip can use any eligible published Merchant Work and either Mounted or Headless UI. |
+| `let-people-interact` | branch between danmaku, open tips, or both; danmaku-bearing routes require a published Website Work with an exact canonical Origin, while Tip can use any eligible published Merchant Work and either Mounted or Headless UI; none requires DNS ownership verification. |
+| `let-others-make-a-copy` | publish a complete website source ZIP with a root `VICEME-REPLICA.md`, then integrate the platform-provided replica prompt into the creator's own site. |
 
-`let-others-make-a-copy` is the reserved public name for remix delivery, but no official Skill is
-available until that product workflow is implemented. Buyer-side `viceme-skill-use` keeps its
-existing name because it is not a creator workflow.
+Buyer-side `viceme-skill-use` keeps its existing name because it is not a creator workflow.
 
 The Agent Skills own the conversational workflow and approval rules. The CLI
 owns deterministic local work and API calls. This separation lets an Agent
@@ -261,7 +260,7 @@ Never copy an access token into the conversation.
 | `viceme skill listing prepare --path <path>` | Create or recover the stable private owner preview and persist the local binding. |
 | `viceme skill listing get <listing-id>` | Read the authoritative private Listing state. |
 | `viceme skill listing bind <listing-id> --path <path>` | Explicitly bind a source to a selected owned Listing. |
-| `viceme skill publish --path <path> [--merchant <id>]` | Freeze the selected owned Merchant, upload the real private package, and return its Owner Preview before pricing. The flag is required only when multiple active Merchants exist. |
+| `viceme skill publish --path <path> --edition-key <key> --edition-order <order> [--merchant <id>]` | Freeze the selected owned Merchant, upload the real private package, and return its Owner Preview before pricing. Edition selection is always explicit; --merchant is required only when multiple active Merchants exist. |
 | `viceme skill publish --resume <id>` | Continue the same unpriced Draft and upload media candidates without starting a platform model. |
 | `viceme publication review <id>` | Read the authoritative bilingual copy, price, selected media, and review state. |
 | `viceme publication suggest <id> --input ...` | Apply Agent-generated bilingual copy and media with Draft revision protection. |
@@ -272,6 +271,8 @@ Never copy an access token into the conversation.
 | `viceme publication update ...` | Replace the complete listing draft from a strict JSON file. |
 | `viceme publication confirm ...` | Confirm the exact current review digest. |
 | `viceme publication publish ...` | Make a confirmed listing public. |
+| `viceme replica publish ...` | Validate a complete source ZIP with a root `VICEME-REPLICA.md`, publish an immutable version, and return the stable code and creator-site prompts. |
+| `viceme replica install <code> --target <new-directory>` | Create and display the authoritative Quote without an order; rerun with `--confirm` only after the buyer explicitly approves it. |
 | `viceme update` | Update the CLI and matching official Skills together. |
 | `viceme merchant accounts` | List ordinary MerchantAccounts where the current User is the OWNER member. |
 | `viceme merchant work ...` | Create, inspect, update, and publish Merchant Works, including Website Works. |
@@ -283,16 +284,18 @@ Never copy an access token into the conversation.
 
 Run `viceme <command> --help` for the full flags and JSON fields.
 
-The page hosting Tip UI and the selected Work are separate resources. A Tip-only
-integration does not register the host as a Website Work or require host-domain
-verification. DNS ownership verification still applies when the user separately
-publishes the website itself as a Website Work or enables danmaku.
-
-The combined route uses one verified Website Work only because danmaku requires
-it. Tip itself adds no domain or Commerce Application gate, and engagement does
-not create or mutate Website Widget applications. Website follow/paid access and
-its `WEBSITE_WIDGET`/`HOSTED_CHECKOUT` resources remain owned by publishing and
-the Shop platform.
+The page hosting Tip UI and the selected Work are separate resources. No
+engagement route requires Website ownership or DNS verification. A Tip-only
+integration does not register the host as a Website Work. Danmaku-only and
+combined routes still use a published Website Work whose canonical Origin
+exactly matches the deployment Origin.
+
+The combined route uses one published Website Work because danmaku requires
+that identity. Tip itself adds no domain or Commerce Application gate, and
+engagement does not create or mutate Website Widget applications. Website
+follow/paid access and its `WEBSITE_WIDGET`/`HOSTED_CHECKOUT` resources retain
+their ownership-verification rules and remain owned by publishing and the Shop
+platform.
 
 Without matching optional trusted-source attribution, ViceMe still records the
 actual browser source as an unverified Origin; it does not reject an open tip.

package/README.zh.md

@@ -35,9 +35,9 @@
 | 能力 | ViceMe 提供的内容 |
 | --- | --- |
 | 发布 Skill | 校验本地 Skill 目录或 ZIP、设置人民币价格、上传、审核平台建议，并发布付费商品。 |
-| 发布网站 | 使用稳定 Website Work 身份登记创作者网站并完成 DNS 所有权验证。 |
+| 发布网站 | 使用稳定 Website Work 身份登记并发布创作者网站；只有商务、关注或付费访问能力需要时才另行验证所有权。 |
 | 接入创作者访问 | 在原站接入登录、关注门槛和按功能独立定价的一次性访问权限。 |
-| 接入托管互动 | 先分支：弹幕使用已发布且完成 DNS 验证的 Website Work；开放赞赏可使用任意合格且已发布的 Merchant Work；组合仅因弹幕要求而共用一个已验证 Website Work。 |
+| 接入托管互动 | 先分支：弹幕使用已发布且 canonical Origin 精确匹配的 Website Work；开放赞赏可使用任意合格且已发布的 Merchant Work；组合共用同一个 Website Work；三个分支均不要求 DNS 所有权验证。 |
 | 配置 Agent | 把 CLI 与官方 Skills 作为同一个兼容版本安装、登录、更新、诊断和修复。 |
 | 安全恢复 | 网络或进程中断后继续原发布任务，不重复上传和创建商品。 |
 
@@ -82,7 +82,7 @@ viceme auth status
 viceme auth login
 
 # 定价前先上传真实私有草稿，并打开创作者预览。
-viceme skill publish --path ./my-skill
+viceme skill publish --path ./my-skill --edition-key my-skill --edition-order 0
 
 # 继续同一个未定价草稿并上传候选媒体。
 viceme skill publish --resume <publication-id>
@@ -156,9 +156,9 @@ npx --yes @viceme-ai/cli@latest install
 | `sell-a-skill` | 发布或更新可下载的付费或免费 Skill；网站、服务与普通商品不属于此 Skill。 |
 | `viceme-skill-use` | 解析免费、已购买或待购买的访问状态，安装所选 Skill，并继续原任务。 |
 | `charge-for-your-work` | 把已有网站关注或付费访问配置接入宿主代码，并复用统一的创作者资格检查。 |
-| `let-people-interact` | 分支处理仅弹幕、开放赞赏或两者；只有包含弹幕的路线要求已发布且完成验证的 Website Work，Tip 可使用任意合格且已发布的 Merchant Work，并选择 Mounted 或 Headless UI。 |
+| `let-people-interact` | 分支处理仅弹幕、开放赞赏或两者；包含弹幕的路线要求已发布且 canonical Origin 精确匹配的 Website Work，Tip 可使用任意合格且已发布的 Merchant Work，并选择 Mounted 或 Headless UI；三个分支均不要求 DNS 所有权验证。 |
+| `let-others-make-a-copy` | 发布包含根级 `VICEME-REPLICA.md` 的完整网站源码 ZIP，并把平台返回的“做同款”提示词接入创作者原站。 |
 
-`let-others-make-a-copy` 是“做同款”交付的保留公开名；对应产品流程实现前不提供官方 Skill。
 买家侧 `viceme-skill-use` 不属于创作者玩法，因此保持现有名称。
 
 Agent Skills 负责对话流程和授权规则；CLI 负责确定性本地操作与 API 调用。因此 Agent
@@ -235,7 +235,7 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
 | `viceme skill listing prepare --path <path>` | 创建或恢复稳定的创作者私有预览，并保存本地绑定。 |
 | `viceme skill listing get <listing-id>` | 读取权威的私有 Listing 状态。 |
 | `viceme skill listing bind <listing-id> --path <path>` | 将来源明确绑定到用户选定且拥有的 Listing。 |
-| `viceme skill publish --path <path>` | 定价前上传真实私有包并返回创作者预览。 |
+| `viceme skill publish --path <path> --edition-key <key> --edition-order <order>` | 明确新增或更新的 Skill 条目，定价前上传真实私有包并返回创作者预览。 |
 | `viceme skill publish --resume <id>` | 继续同一个未定价 Draft 并上传媒体候选，不启动平台模型。 |
 | `viceme publication review <id>` | 读取权威双语文案、价格、选定素材和审核状态。 |
 | `viceme publication suggest <id> --input ...` | 以 Draft revision 保护提交 Agent 生成的双语文案与媒体选择。 |
@@ -246,6 +246,8 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
 | `viceme publication update ...` | 用严格 JSON 文件替换完整 Listing Draft。 |
 | `viceme publication confirm ...` | 确认当前精确 Review Digest。 |
 | `viceme publication publish ...` | 公开已经确认的 Listing。 |
+| `viceme replica publish ...` | 校验含根级 `VICEME-REPLICA.md` 的完整源码 ZIP，发布不可变版本并返回稳定口令与自站提示词。 |
+| `viceme replica install <口令> --target <新目录>` | 创建并展示真实 Quote，不创建订单；买家明确确认后原样追加 `--confirm` 才购买并原子安装。 |
 | `viceme update` | 同时更新 CLI 与匹配版本的官方 Skills。 |
 | `viceme merchant accounts` | 列出当前 User 通过 OWNER 成员关系经营的普通 MerchantAccount。 |
 | `viceme merchant work ...` | 创建、查看、更新和发布 Merchant Work，包括 Website Work。 |
@@ -257,13 +259,14 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
 
 运行 `viceme <command> --help` 查看完整参数和 JSON 字段。
 
-承载赞赏 UI 的页面与被赞赏 Work 是两个独立资源。仅接入赞赏不会把宿主页登记为
-Website Work，也不要求验证宿主域名。只有用户另行把网站本身发布为 Website Work
-或启用弹幕时，才继续执行 DNS 所有权验证。
+承载赞赏 UI 的页面与被赞赏 Work 是两个独立资源。三个互动分支均不要求 Website
+ownership 或 DNS 验证。仅接入赞赏不会把宿主页登记为 Website Work；仅弹幕和组合
+仍使用 canonical Origin 与部署 Origin 精确匹配的已发布 Website Work。
 
-组合路线只因弹幕要求而共用一个已验证 Website Work。Tip 本身不增加域名或
+组合路线只因弹幕要求而共用一个已发布 Website Work。Tip 本身不增加域名或
 Commerce Application 门禁，互动流程也不创建或修改 Website Widget。网站关注/付费
-访问及其 `WEBSITE_WIDGET`、`HOSTED_CHECKOUT` 资源仍由发布流程和 Shop 平台负责。
+访问及其 `WEBSITE_WIDGET`、`HOSTED_CHECKOUT` 资源仍保留所有权验证规则，并由发布
+流程和 Shop 平台负责。
 
 没有匹配可选可信来源归因时，ViceMe 仍会把实际浏览器来源记录为未验证 Origin，
 不会因此拒绝开放赞赏。

package/checksums.txt

@@ -1,6 +1,6 @@
-9c449e3ba96b87714b57c53177ce04941ac60c0eb9d3570fdc789ea72ca4c660  viceme_0.23.0_darwin_amd64
-fc574ce3480c7704acf92e505a6619de7e00b01721c4b41833b96339e7278015  viceme_0.23.0_darwin_arm64
-a242883978eaf5422cdf924618d8a49055cb2fa6142aa52d8e49ae4d3d8284db  viceme_0.23.0_linux_amd64
-33643d8f6ae4d2a49e0d6790480288afe871f226f8b00eedf3bf2041395fb5d9  viceme_0.23.0_linux_arm64
-a161833605647336b08ec44a7feef03c1f8633967cfaf843a5a03bf1433d430b  viceme_0.23.0_windows_amd64.exe
-5e84f99e041b1420f388437a7db143dc6f2aad7cfeb19b8b750046a19dd54dae  viceme_0.23.0_windows_arm64.exe
+d38f8a8b740deab0c2cfcc45574ac5c229250b4ac2b01a2514cc736dd4c89e3f  viceme_0.24.0_darwin_amd64
+d66b6c38ba65e8a746b3efb5838c1eabee0fa109d39a7c79a80eda5f36301ffa  viceme_0.24.0_darwin_arm64
+0150c27dab35b77d9467f45d8fc595dab280f37064cfd5d95480df064b282c98  viceme_0.24.0_linux_amd64
+26d309b87a025e378ed934048aed4ff0203a53635cde0e0adbb418eb7df9951e  viceme_0.24.0_linux_arm64
+a991b5b29358a2552338adb8785493a25a2e79149fa0e531b9f88b57b00d496e  viceme_0.24.0_windows_amd64.exe
+b024565d036505af4b2746ff69d968892246edca9d310ba85c41ca613a28272d  viceme_0.24.0_windows_arm64.exe

package/docs/releasing.md

@@ -19,14 +19,20 @@ files, create tags, write changelog entries, or run npm commands locally.
 5. The workflow synchronizes `package.json`, `package-lock.json`, Go build
    metadata, bundled Skill metadata, release manifest digests, and
    `CHANGELOG.md`.
-6. It runs `make check` and `make npm-package-check`, creates a short-lived
+6. While this preparation is running, the initial unprepared `dev` to `main`
+   head runs only the cheap pull-request target gate. It does not start the Go,
+   npm, macOS, or Windows validation matrix.
+7. The preparation workflow runs `make check` and `make npm-package-check`, creates a short-lived
    installation token for the repository-scoped ViceMe Release GitHub App, and
-   commits only the generated files directly to protected `dev`.
-7. The existing `dev` to `main` PR synchronizes, runs its required quality
+   commits only the generated files directly to protected `dev`. The commit is
+   marked with trusted preparation and evidence trailers.
+8. The existing `dev` to `main` PR synchronizes, runs its required quality
    checks, and is updated to `chore(release): vX.Y.Z` with exact run and commit
-   evidence. No internal preparation PR is created.
-8. A maintainer reviews and merges that same Release PR.
-9. Merging the Release PR pushes its merge commit to `main`.
+   evidence. The synchronized release-preparation run validates the marked bot
+   commit and reuses the original evidence without reinstalling dependencies or
+   repeating the preparation checks. No internal preparation PR is created.
+9. A maintainer reviews and merges that same Release PR.
+10. Merging the Release PR pushes its merge commit to `main`.
    `CLI release publication` resolves that commit back to exactly one merged,
    repository-owned `dev` to `main` PR, then tags the exact reviewed `dev`
    head, reruns the quality gates, builds six platform binaries and six
@@ -89,11 +95,15 @@ when the job finishes. The workflow still stages an explicit allowlist of
 generated files and validates the complete release before pushing. No
 maintainer PAT or Deploy Key is used.
 
-The general `CLI PR checks` workflow runs for pull requests, not branch pushes. A
-Release App push synchronizes the already-open `dev` to `main` PR, producing one
-set of required checks for the exact prepared commit without duplicate generic
-push and pull-request runs. The synchronize event may run release preparation a
-second time; that run is intentionally idempotent and produces no new commit.
+The general `CLI PR checks` workflow runs for pull requests, not branch pushes.
+For a repository-owned `dev` to `main` promotion, it classifies the exact head:
+an unprepared head runs only target validation, while the marked Release Bot
+commit runs the complete required matrix. A Release App push synchronizes the
+already-open PR and cancels any older generic run for the same PR. The resulting
+full checks therefore cover the exact prepared commit once. The synchronize
+event runs release preparation again only as a fast metadata verification and
+PR update; it does not install dependencies, regenerate files, or repeat the
+preparation checks.
 
 The checks from `CLI release publication` are deliberately not required for
 merging: that workflow starts only after the release PR has been merged and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {