@viceme-ai/cli 0.33.5 → 0.34.0

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## [0.34.0] - 2026-09-07
+
+### Features
+
+- 完善试用耗尽购买与对话内支付二维码 (`16ea889`)
+- 接入免登录试用购买与通用 Widget (`9a0d17e`)
+
+### Fixes
+
+- 让试用脚本在 Windows 控制台编码下输出 UTF-8 JSON (`9c14805`)
+- 做同款复制完整创作邀请文案 (`dd4b04e`)
+- 由 Agent 显式选择托管页面目录与入口 (`eeaaba6`)
+- 试用耗尽后自动停用技能入口 (`e030c2f`)
+- 修复商品技能元数据兼容与试用门禁生成 (`fbfa2a0`)
+
+### Other Changes
+
+- 明确匿名支付展示与正式入口恢复边界 (`c9d6034`)
+- 规范二维码依赖空白并更新资源摘要 (`be28721`)
+
+## [0.33.6] - 2026-09-06
+
+### Fixes
+
+- 更新 CLI 时同步并修复官方 Skills (`4069758`)
+- 移除 Codex Skill 目录重复写入 (`da0d7b6`)
+- 创作者确认后发布不再探测本地预览 (`6d906dc`)
+
+### Other Changes
+
+- 按目录身份校验跨平台 Skill 安装路径 (`66dec54`)
+
 ## [0.33.5] - 2026-09-05
 
 ### Fixes

package/README.md

@@ -155,10 +155,17 @@ native user directory of every detected supported Agent:
 
 | Agent | Native directory |
 | --- | --- |
-| Codex | `~/.codex/skills` |
+| Codex | `~/.agents/skills` (shared fallback; written once) |
 | Claude Code | `~/.claude/skills` |
 | WorkBuddy | `~/.workbuddy/skills` |
 
+Codex uses the shared directory documented in [Codex Skills](https://developers.openai.com/codex/skills/).
+`--agent codex` is an alias for `agents`, including install results and doctor
+checks; it no longer writes `$CODEX_HOME/skills` (default `~/.codex/skills`).
+Existing legacy copies are left intact. Claude Code still needs its separate
+native directory: [Claude Code Skills](https://code.claude.com/docs/en/skills)
+does not list `.agents/skills` as a discovery location.
+
 Select a target explicitly with `viceme install --agent codex`, `claude`,
 `workbuddy`, or `agents`. Run `viceme doctor` after installation or repair.
 
@@ -274,8 +281,8 @@ Never copy an access token into the conversation.
 | `viceme publication confirm ...` | Confirm the exact current review digest. |
 | `viceme publication publish ...` | Make a confirmed listing public. |
 | `viceme replica preview --url <loopback-page-url>` | Open the actual local page for the creator. The CLI validates connectivity; the creator reviews styling and the agent owns the server lifecycle. WorkBuddy flows present the page with present_files in the task preview. Missing input returns `PROVIDE_PREVIEW_URL`, without inspecting project filenames. |
-| `viceme replica publish --path <project-or-zip> --preview-url <loopback-page-url> --preview-reviewed ...` | In the CN market, validate and freeze the source after the creator has approved the button styling in the host preview. Publication does not open another browser or require agent screenshots. Missing creator approval returns `REVIEW_LOCAL_PREVIEW`; connectivity alone is not verification. ZIP inputs remain source artifacts, not inferred startup projects. Return one 30-minute final review, then rerun its exact `--confirm` command to upload and submit; `PROCESSING` means submitted but not published. |
-| `viceme replica repair-hosting --publication <ID> --path <project-or-WorkPage-ZIP>` | Review page-only hosting repair, then run the returned confirmation command. Interrupted attempts reuse the original request; source and buyer rights remain unchanged. |
+| `viceme replica publish --path <project-or-zip> --page-dir <directory> --page-entry <relative-html> --preview-reviewed ...` | Agent 明确选择可部署页面目录和 HTML 入口；CLI 不搜索 `dist/build/out`，不推断框架，不运行构建。纯静态项目可以用 `--page-dir .`，相对目录基于源码根目录（ZIP 输入基于 ZIP 所在目录）。创作者确认预览后冻结 SOURCE 与 PAGE，返回 30 分钟终审；原样执行 `--confirm` 命令上传。未提供页面选择时返回 `PREPARE_HOSTED_PAGE`；`PROCESSING` 仅表示已提交。 |
+| `viceme replica repair-hosting --publication <ID> --path <page-directory> --page-entry <relative-html>` | Agent 选择目录与入口，只修复页面托管；已有 WorkPage ZIP 则以 ZIP 为 `--path`，不传入口参数。执行返回的确认命令，中断后复用同一请求，源码和买家权益保持不变。 |
 | `viceme replica sales --replica <ID>` | Inspect the current source version, price and management permission; suspended owners retain read-only access. |
 | `viceme replica price --replica <ID> --price-cents <cents>` | Review a price change (0 is free), then run the complete returned confirmation command. No source upload is required. |
 | `viceme replica delist --replica <ID>` / `viceme replica relist --replica <ID>` | Review delisting or relisting, then run the complete returned confirmation command. Existing purchase rights remain unchanged. |
@@ -284,7 +291,7 @@ Never copy an access token into the conversation.
 | `viceme replica resume <publication-id>` | Continue only the missing upload, verification, submission, or allowed retry step from authoritative state. |
 | `viceme replica cancel <publication-id>` | Cancel a Publication before activation and clean its local recoverable source. |
 | `viceme replica install <code> [--target <new-directory>]` | With an authenticated Profile, display the authoritative Quote before `--confirm`; add `--accept-price-cents <fen>` for anonymous checkout and `--payment-presented` only after its hosted payment page opens. Both paths atomically install the paid source. |
-| `viceme update` | Explicitly update the CLI. Refresh official Skills separately with `viceme install --agent auto`. |
+| `viceme update` | Update or repair the CLI and matching official Skills together. |
 | `viceme merchant accounts` | List ordinary MerchantAccounts where the current User is the OWNER member. |
 | `viceme merchant work ...` | Create, inspect, update, and publish Merchant Works, including Website Works. |
 | `viceme merchant page ...` | Validate, preview, publish, inspect, and roll back immutable custom Creator/Work page bundles. |
@@ -348,7 +355,7 @@ process that started the update. `meta.autoUpdate` may appear when startup
 recovery had to hand an already-started command to a newly committed CLI.
 
 After an ordinary command has emitted its response, a detached worker checks
-the stable release channel and updates only the CLI. The foreground command never waits
+the stable release channel and updates the CLI and matching official Skills. The foreground command never waits
 for release discovery or activation, and background launch, network,
 permission, or installation failures never replace its JSON response. A
 successful replacement is used by the next `viceme` process; it does not
@@ -356,10 +363,12 @@ require restarting the surrounding Codex, Claude Code, or WorkBuddy app.
 Checks are coalesced for 24 hours, while failed checks or updates become
 eligible for another background attempt after one hour.
 
-Official Skills are a separate lifecycle because an Agent usually loads them
-when a task starts. CLI auto-update therefore never rewrites Skill directories.
-Refresh them intentionally with `viceme install --agent auto`, then start a new
-Agent task when the host needs to rediscover the files.
+Both manual and automatic updates synchronize official Skills through the
+existing activation transaction. When the CLI is already current, the background
+worker checks the installed official Skills and repairs stale or missing copies;
+healthy installations are left alone. Agents may have loaded the old Skill text
+when a task started, so start a new task when the host needs to rediscover the
+refreshed files. `viceme install --agent auto` remains a Skill-only repair path.
 
 ```bash
 viceme update --check
@@ -367,17 +376,17 @@ viceme update
 viceme install --agent auto
 ```
 
-`viceme update` remains the explicit CLI repair command and keeps the same
-permission preflight and durable recovery rules. For compatibility,
-`viceme update --agent <target>` still requests a combined CLI and Skill
-repair, but new automation should keep the two commands separate.
+`viceme update` uses the `auto` Skill target by default and keeps the existing
+permission preflight and durable recovery rules. Use
+`viceme update --agent <target>` to select a specific Agent destination.
+`viceme update --check` only checks the release and does not refresh Skills.
 
 Permission preflight checks every path that the selected installation method
 will mutate before creating an activation journal. For npm this includes the
 configured cache, actual scoped global package, and launcher directories through
-Node so the host filesystem broker is preserved. For standalone CLI-only
-updates it checks the executable directory; a separate Skill install checks
-every selected Agent destination. A denied explicit-update preflight keeps the
+Node so the host filesystem broker is preserved. Standalone activation checks
+the executable directory, and Skill installation checks every selected Agent
+destination. A denied explicit-update preflight keeps the
 previous generation intact and requests host approval. A denied background
 attempt is recorded locally and does not affect the foreground command.
 Permission can still change after preflight, so any failure after an install

package/README.zh.md

@@ -249,8 +249,8 @@ Endpoint 必须使用 HTTPS；只有 localhost 和 loopback 本地开发可以
 | `viceme publication confirm ...` | 确认当前精确 Review Digest。 |
 | `viceme publication publish ...` | 公开已经确认的 Listing。 |
 | `viceme replica preview --url <本地页面地址>` | 为创作者打开实际本地页面。CLI 校验本地地址及连通性；创作者查看样式，Agent 管理自有服务。WorkBuddy 流程使用 present_files 在右侧展示。缺少地址返回 `PROVIDE_PREVIEW_URL`，不检查固定项目文件名。 |
-| `viceme replica publish --path <项目或ZIP> --preview-url <本地页面地址> --preview-reviewed ...` | 在 CN 市场，先接入预览按钮，由创作者在宿主右侧预览确认样式后，校验并冻结源码。缺少创作者确认声明返回 `REVIEW_LOCAL_PREVIEW`，连通性不代表视觉验证；ZIP 作为源码制品，不推断启动方式。返回一份三十分钟终审，仅以其精确 `--confirm` 命令重跑后才上传和提交；`PROCESSING` 表示已提交但尚未发布。 |
-| `viceme replica repair-hosting --publication <ID> --path <项目或WorkPage-ZIP>` | 校验并确认仅页面托管补发；原确认命令可恢复中断，源码版本、价格和买家权益不变。 |
+| `viceme replica publish --path <项目或ZIP> --page-dir <页面目录> --page-entry <相对HTML入口> --preview-reviewed ...` | Agent 明确选择可部署页面目录和入口，CLI 不搜索 `dist/build/out`、不推断框架、不运行构建。纯静态网站可用 `--page-dir .`，相对目录基于源码根目录（ZIP 输入基于 ZIP 所在目录）。创作者确认预览后冻结 SOURCE 与 PAGE，返回三十分钟终审；原样执行确认命令才上传。缺少页面选择返回 `PREPARE_HOSTED_PAGE`；`PROCESSING` 表示已提交但尚未发布。 |
+| `viceme replica repair-hosting --publication <ID> --path <页面目录> --page-entry <相对HTML入口>` | Agent 明确选择修复后的页面目录和入口；已有 WorkPage ZIP 则以 ZIP 为 `--path`，不传入口参数。原确认命令可恢复中断，源码版本、价格和买家权益不变。 |
 | `viceme replica sales --replica <ID>` | 查看当前源码版本、销售价格与经营权限；暂停经营后仍可只读查询。 |
 | `viceme replica price --replica <ID> --price-cents <分>` | 预览改价影响，0 表示免费；执行返回的完整确认命令后修改价格，不重新上传源码。 |
 | `viceme replica delist --replica <ID>` / `viceme replica relist --replica <ID>` | 预览下架或重新上架影响，再执行返回的完整确认命令；已有购买权益不变。 |

package/checksums.txt

@@ -1,6 +1,6 @@
-ff02d1f93ce45c935d03084837078b333a6bf6261c6faace117706e614729a36  viceme_0.33.5_darwin_amd64
-c8ce3b46be5d5e1595a1ce40fdf85a3cb58cfac201b7791d459967cb8979f5c5  viceme_0.33.5_darwin_arm64
-67eb2c4189ea58853d6297200f42163deafbb1affa1ddca31648c1927ed8c55d  viceme_0.33.5_linux_amd64
-9a34b482a4139eba3d5389734227ade5e9387632c3f864ce7ee8d4715e9b4b73  viceme_0.33.5_linux_arm64
-84da15d551b29fd7e4cbd49e782a6b4f289a43209a81e55afecd222fa4eae00f  viceme_0.33.5_windows_amd64.exe
-cf9d9cfc7f5fa4c8e9f3b35316867fd8dfd0929c4fcf32017b567550c2e01cd8  viceme_0.33.5_windows_arm64.exe
+b9d3561f65c6a719b450c12084f9c4a175f4b45151346c27b037bf41878bab81  viceme_0.34.0_darwin_amd64
+ee5b87aaf030218363cda513ef822cc5ca2ddc943bf43272ccb2b00d191dc3c9  viceme_0.34.0_darwin_arm64
+d2dc699bef94c24e956cb7b6d135b3d64740e540b61e0edacec08d8b4db2dffd  viceme_0.34.0_linux_amd64
+eabd7ba85c147f8cfaf77ee533071d2cd321cfcf85ca26be5ca768c18867481c  viceme_0.34.0_linux_arm64
+a58dd1a6b063a222699f0b6c8fd0aef6a1554df90bfa251b5bf60f1d0087fef3  viceme_0.34.0_windows_amd64.exe
+0736b755e56785d0c3db4a265309585208ac1b87225ba3ad1819838744a0fb4a  viceme_0.34.0_windows_arm64.exe

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.33.5",
+  "version": "0.34.0",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {