@viceme-ai/cli 0.33.5 → 0.33.6

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.33.6] - 2026-09-06
+
+### Fixes
+
+- 更新 CLI 时同步并修复官方 Skills (`4069758`)
+- 移除 Codex Skill 目录重复写入 (`da0d7b6`)
+- 创作者确认后发布不再探测本地预览 (`6d906dc`)
+
+### Other Changes
+
+- 按目录身份校验跨平台 Skill 安装路径 (`66dec54`)
+
 ## [0.33.5] - 2026-09-05
 
 ### Fixes

package/README.md

@@ -155,10 +155,17 @@ native user directory of every detected supported Agent:
 
 | Agent | Native directory |
 | --- | --- |
-| Codex | `~/.codex/skills` |
+| Codex | `~/.agents/skills` (shared fallback; written once) |
 | Claude Code | `~/.claude/skills` |
 | WorkBuddy | `~/.workbuddy/skills` |
 
+Codex uses the shared directory documented in [Codex Skills](https://developers.openai.com/codex/skills/).
+`--agent codex` is an alias for `agents`, including install results and doctor
+checks; it no longer writes `$CODEX_HOME/skills` (default `~/.codex/skills`).
+Existing legacy copies are left intact. Claude Code still needs its separate
+native directory: [Claude Code Skills](https://code.claude.com/docs/en/skills)
+does not list `.agents/skills` as a discovery location.
+
 Select a target explicitly with `viceme install --agent codex`, `claude`,
 `workbuddy`, or `agents`. Run `viceme doctor` after installation or repair.
 
@@ -284,7 +291,7 @@ Never copy an access token into the conversation.
 | `viceme replica resume <publication-id>` | Continue only the missing upload, verification, submission, or allowed retry step from authoritative state. |
 | `viceme replica cancel <publication-id>` | Cancel a Publication before activation and clean its local recoverable source. |
 | `viceme replica install <code> [--target <new-directory>]` | With an authenticated Profile, display the authoritative Quote before `--confirm`; add `--accept-price-cents <fen>` for anonymous checkout and `--payment-presented` only after its hosted payment page opens. Both paths atomically install the paid source. |
-| `viceme update` | Explicitly update the CLI. Refresh official Skills separately with `viceme install --agent auto`. |
+| `viceme update` | Update or repair the CLI and matching official Skills together. |
 | `viceme merchant accounts` | List ordinary MerchantAccounts where the current User is the OWNER member. |
 | `viceme merchant work ...` | Create, inspect, update, and publish Merchant Works, including Website Works. |
 | `viceme merchant page ...` | Validate, preview, publish, inspect, and roll back immutable custom Creator/Work page bundles. |
@@ -348,7 +355,7 @@ process that started the update. `meta.autoUpdate` may appear when startup
 recovery had to hand an already-started command to a newly committed CLI.
 
 After an ordinary command has emitted its response, a detached worker checks
-the stable release channel and updates only the CLI. The foreground command never waits
+the stable release channel and updates the CLI and matching official Skills. The foreground command never waits
 for release discovery or activation, and background launch, network,
 permission, or installation failures never replace its JSON response. A
 successful replacement is used by the next `viceme` process; it does not
@@ -356,10 +363,12 @@ require restarting the surrounding Codex, Claude Code, or WorkBuddy app.
 Checks are coalesced for 24 hours, while failed checks or updates become
 eligible for another background attempt after one hour.
 
-Official Skills are a separate lifecycle because an Agent usually loads them
-when a task starts. CLI auto-update therefore never rewrites Skill directories.
-Refresh them intentionally with `viceme install --agent auto`, then start a new
-Agent task when the host needs to rediscover the files.
+Both manual and automatic updates synchronize official Skills through the
+existing activation transaction. When the CLI is already current, the background
+worker checks the installed official Skills and repairs stale or missing copies;
+healthy installations are left alone. Agents may have loaded the old Skill text
+when a task started, so start a new task when the host needs to rediscover the
+refreshed files. `viceme install --agent auto` remains a Skill-only repair path.
 
 ```bash
 viceme update --check
@@ -367,17 +376,17 @@ viceme update
 viceme install --agent auto
 ```
 
-`viceme update` remains the explicit CLI repair command and keeps the same
-permission preflight and durable recovery rules. For compatibility,
-`viceme update --agent <target>` still requests a combined CLI and Skill
-repair, but new automation should keep the two commands separate.
+`viceme update` uses the `auto` Skill target by default and keeps the existing
+permission preflight and durable recovery rules. Use
+`viceme update --agent <target>` to select a specific Agent destination.
+`viceme update --check` only checks the release and does not refresh Skills.
 
 Permission preflight checks every path that the selected installation method
 will mutate before creating an activation journal. For npm this includes the
 configured cache, actual scoped global package, and launcher directories through
-Node so the host filesystem broker is preserved. For standalone CLI-only
-updates it checks the executable directory; a separate Skill install checks
-every selected Agent destination. A denied explicit-update preflight keeps the
+Node so the host filesystem broker is preserved. Standalone activation checks
+the executable directory, and Skill installation checks every selected Agent
+destination. A denied explicit-update preflight keeps the
 previous generation intact and requests host approval. A denied background
 attempt is recorded locally and does not affect the foreground command.
 Permission can still change after preflight, so any failure after an install

package/checksums.txt

@@ -1,6 +1,6 @@
-ff02d1f93ce45c935d03084837078b333a6bf6261c6faace117706e614729a36  viceme_0.33.5_darwin_amd64
-c8ce3b46be5d5e1595a1ce40fdf85a3cb58cfac201b7791d459967cb8979f5c5  viceme_0.33.5_darwin_arm64
-67eb2c4189ea58853d6297200f42163deafbb1affa1ddca31648c1927ed8c55d  viceme_0.33.5_linux_amd64
-9a34b482a4139eba3d5389734227ade5e9387632c3f864ce7ee8d4715e9b4b73  viceme_0.33.5_linux_arm64
-84da15d551b29fd7e4cbd49e782a6b4f289a43209a81e55afecd222fa4eae00f  viceme_0.33.5_windows_amd64.exe
-cf9d9cfc7f5fa4c8e9f3b35316867fd8dfd0929c4fcf32017b567550c2e01cd8  viceme_0.33.5_windows_arm64.exe
+e907915ade8d202dd392280e4355932dc7acc872faddf459364c5007e2c6279e  viceme_0.33.6_darwin_amd64
+5a5a1117c436c3b0e560ad333b5b129f85c24b10aab5db6248e52a15caa41e51  viceme_0.33.6_darwin_arm64
+4ae98b8e97d10bfa013a5551ec3122fe0bc8d6ce93518277805bae6c9dc0ed70  viceme_0.33.6_linux_amd64
+224b927601b804d99a0653f83bf6324d1669ac567be99102c47bd70f7e464778  viceme_0.33.6_linux_arm64
+a49bd49534d91154b59b22dcc93a3d173d0faae7e40bd72919edba724099b8b7  viceme_0.33.6_windows_amd64.exe
+38e73e31197be6bceed31cbd122150c76785368dfccc339168a2c3060cc585c3  viceme_0.33.6_windows_arm64.exe

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.33.5",
+  "version": "0.33.6",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {