@viceme-ai/cli 0.24.0 → 0.25.0

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # Changelog
 
+## [0.25.0] - 2026-09-03
+
+### Features
+
+- 试用门禁置顶注入并强化跨对话遵循措辞 (`0b302c0`)
+- Skill 试用付费发布流与试用闸口 (`1a3ae5a`)
+
+### Fixes
+
+- 从已激活的 npm 全局包续跑更新命令 (`ca523aa`)
+- npm 包清单与冒烟测试同步 use-a-skill 更名 (`65a7cd7`)
+- 试用耗尽购买切换买家鉴权新链路 (`cb1b502`)
+- 对齐买家购买鉴权新端点并保留试用分支话术 (`f0a12cc`)
+- 试用耗尽购买前校验登录并修复多目录门禁清理 (`1112240`)
+
+### Other Changes
+
+- 补齐门禁注入与移除的边界单测 (`191d0fc`)
+- 官方技能 viceme-skill-use 更名为 use-a-skill (`9c6122d`)
+- rebase 后重生成 release manifest (`51b0889`)
+
+## [0.24.1] - 2026-09-02
+
+### Fixes
+
+- 修复工具购买鉴权并持久恢复同一订单 (`1e07d2a`)
+- 隐藏网站收费配置细节 (`6a146a2`)
+
+### Other Changes
+
+- 刷新官方 Skill 清单 (`87ed5f6`)
+- 说明付费解锁来源策略 (`dd838be`)
+
 ## [0.24.0] - 2026-09-02
 
 ### Features

package/README.md

@@ -169,12 +169,12 @@ Select a target explicitly with `viceme install --agent codex`, `claude`,
 | `creator-tools` | install ViceMe, sign in through the browser, manage Profiles, update, diagnose, or repair the local setup. |
 | `become-a-creator` | apply for, claim, or check creator qualification for every creator workflow. |
 | `sell-a-skill` | publish or update a paid or free downloadable Skill; websites, services, and generic goods are out of scope. |
-| `viceme-skill-use` | resolve free, purchased, or purchase-required access, install the selected Skill, and continue the original task. |
-| `charge-for-your-work` | integrate an existing website access configuration into host code after the shared creator qualification check. |
+| `use-a-skill` | resolve free, purchased, or purchase-required access, install the selected Skill, and continue the original task. |
+| `charge-for-your-work` | configure follow or paid unlock for an existing website and integrate it into host code after the shared creator qualification check; platform resources stay internal. |
 | `let-people-interact` | branch between danmaku, open tips, or both; danmaku-bearing routes require a published Website Work with an exact canonical Origin, while Tip can use any eligible published Merchant Work and either Mounted or Headless UI; none requires DNS ownership verification. |
 | `let-others-make-a-copy` | publish a complete website source ZIP with a root `VICEME-REPLICA.md`, then integrate the platform-provided replica prompt into the creator's own site. |
 
-Buyer-side `viceme-skill-use` keeps its existing name because it is not a creator workflow.
+Buyer-side `use-a-skill` keeps its existing name because it is not a creator workflow.
 
 The Agent Skills own the conversational workflow and approval rules. The CLI
 owns deterministic local work and API calls. This separation lets an Agent
@@ -288,14 +288,18 @@ The page hosting Tip UI and the selected Work are separate resources. No
 engagement route requires Website ownership or DNS verification. A Tip-only
 integration does not register the host as a Website Work. Danmaku-only and
 combined routes still use a published Website Work whose canonical Origin
-exactly matches the deployment Origin.
+exactly matches the deployment Origin. The current release likewise does not
+require DNS TXT verification or a registered embedding Origin for Website
+follow/paid access.
 
 The combined route uses one published Website Work because danmaku requires
 that identity. Tip itself adds no domain or Commerce Application gate, and
 engagement does not create or mutate Website Widget applications. Website
-follow/paid access and its `WEBSITE_WIDGET`/`HOSTED_CHECKOUT` resources retain
-their ownership-verification rules and remain owned by publishing and the Shop
-platform.
+follow/paid access and its platform-managed `WEBSITE_WIDGET` resources are
+provisioned internally by the charging flow and Shop, with no Origin/DNS or
+checkout-parent gate.
+Separately configured domain-bound `HOSTED_CHECKOUT` applications and signed
+webhooks retain their ownership-verification rules.
 
 Without matching optional trusted-source attribution, ViceMe still records the
 actual browser source as an unverified Origin; it does not reject an open tip.
@@ -339,7 +343,9 @@ stops the original command so an older process cannot perform a mutation after
 a failed generation change.
 
 An npm installation continues the original command automatically on every
-supported platform. A standalone Windows binary may return the retryable code
+supported platform, including commands started from an older `npx` cache. The
+continuation uses the activated global package after checking its exact version.
+A standalone Windows binary may return the retryable code
 `AUTO_UPDATE_RESTART_REQUIRED` once while Windows releases the old executable;
 rerunning the exact command completes under the new generation.
 

package/README.zh.md

@@ -154,12 +154,12 @@ npx --yes @viceme-ai/cli@latest install
 | `creator-tools` | 安装 ViceMe、通过浏览器登录、管理 Profile、更新、诊断或修复本地环境。 |
 | `become-a-creator` | 为所有创作者玩法申请、认领或检查创作者资格。 |
 | `sell-a-skill` | 发布或更新可下载的付费或免费 Skill；网站、服务与普通商品不属于此 Skill。 |
-| `viceme-skill-use` | 解析免费、已购买或待购买的访问状态，安装所选 Skill，并继续原任务。 |
-| `charge-for-your-work` | 把已有网站关注或付费访问配置接入宿主代码，并复用统一的创作者资格检查。 |
+| `use-a-skill` | 解析免费、已购买或待购买的访问状态，安装所选 Skill，并继续原任务。 |
+| `charge-for-your-work` | 为现有网站配置关注或付费解锁并接入宿主代码；复用统一创作者资格检查，平台资源保持为内部实现。 |
 | `let-people-interact` | 分支处理仅弹幕、开放赞赏或两者；包含弹幕的路线要求已发布且 canonical Origin 精确匹配的 Website Work，Tip 可使用任意合格且已发布的 Merchant Work，并选择 Mounted 或 Headless UI；三个分支均不要求 DNS 所有权验证。 |
 | `let-others-make-a-copy` | 发布包含根级 `VICEME-REPLICA.md` 的完整网站源码 ZIP，并把平台返回的“做同款”提示词接入创作者原站。 |
 
-买家侧 `viceme-skill-use` 不属于创作者玩法，因此保持现有名称。
+买家侧 `use-a-skill` 不属于创作者玩法，因此保持现有名称。
 
 Agent Skills 负责对话流程和授权规则；CLI 负责确定性本地操作与 API 调用。因此 Agent
 可以解释每一步决策，而相同的命令契约仍可在终端或自动化中复现。
@@ -261,12 +261,14 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
 
 承载赞赏 UI 的页面与被赞赏 Work 是两个独立资源。三个互动分支均不要求 Website
 ownership 或 DNS 验证。仅接入赞赏不会把宿主页登记为 Website Work；仅弹幕和组合
-仍使用 canonical Origin 与部署 Origin 精确匹配的已发布 Website Work。
+仍使用 canonical Origin 与部署 Origin 精确匹配的已发布 Website Work。当前版本的网站关注/付费
+解锁同样不要求 DNS TXT 或登记嵌入 Origin。
 
 组合路线只因弹幕要求而共用一个已发布 Website Work。Tip 本身不增加域名或
 Commerce Application 门禁，互动流程也不创建或修改 Website Widget。网站关注/付费
-访问及其 `WEBSITE_WIDGET`、`HOSTED_CHECKOUT` 资源仍保留所有权验证规则，并由发布
-流程和 Shop 平台负责。
+访问及其平台托管 `WEBSITE_WIDGET` 资源由收费接入流程和 Shop 在内部完成，但暂不执行 Origin/DNS
+或 checkout iframe 宿主门禁。另行配置的域名绑定 `HOSTED_CHECKOUT` 与签名 Webhook 仍保留所有权
+验证规则。
 
 没有匹配可选可信来源归因时，ViceMe 仍会把实际浏览器来源记录为未验证 Origin，
 不会因此拒绝开放赞赏。
@@ -311,6 +313,9 @@ viceme update --check
 viceme update
 ```
 
+从旧版 `npx` 缓存启动的命令也会在更新后自动继续：CLI 校验已激活全局包的精确版本，
+再通过该包的启动器续跑原命令。
+
 `viceme update` 保留为显式修复命令。正常启动检查已经会校验精确 Release、刷新匹配
 版本的官方 Skills，并把中断的激活过程恢复成一个完整、兼容的本地版本。
 

package/checksums.txt

@@ -1,6 +1,6 @@
-d38f8a8b740deab0c2cfcc45574ac5c229250b4ac2b01a2514cc736dd4c89e3f  viceme_0.24.0_darwin_amd64
-d66b6c38ba65e8a746b3efb5838c1eabee0fa109d39a7c79a80eda5f36301ffa  viceme_0.24.0_darwin_arm64
-0150c27dab35b77d9467f45d8fc595dab280f37064cfd5d95480df064b282c98  viceme_0.24.0_linux_amd64
-26d309b87a025e378ed934048aed4ff0203a53635cde0e0adbb418eb7df9951e  viceme_0.24.0_linux_arm64
-a991b5b29358a2552338adb8785493a25a2e79149fa0e531b9f88b57b00d496e  viceme_0.24.0_windows_amd64.exe
-b024565d036505af4b2746ff69d968892246edca9d310ba85c41ca613a28272d  viceme_0.24.0_windows_arm64.exe
+8fc9403ff8380ffe45359cf04a4a7ea41eece9dbf57ffbad8c4883f06c19cf36  viceme_0.25.0_darwin_amd64
+646a4681752303f334597d78e937b9663c27d304bb0aa16be4298722f69d0fe8  viceme_0.25.0_darwin_arm64
+5f420ea2dc67d36bbf4869e5c93472da1165c359f4f61ffc63ca4bd7ca6fa67d  viceme_0.25.0_linux_amd64
+c5368bdd34b07b83e21490b3c4668ac0d68f3d4d754ff6b4c1e65ba8449d850a  viceme_0.25.0_linux_arm64
+ceeb0258790905d3912b68fa94d2c819f97d4db82fb528aeefaae190a251ca10  viceme_0.25.0_windows_amd64.exe
+ad0156c97a0902b69dee5087bac10c235bca7dc743d9107a38e3efee9077a59a  viceme_0.25.0_windows_arm64.exe

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {