@viceme-ai/cli 0.34.0 → 0.35.1

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # Changelog
 
+## [0.35.1] - 2026-09-08
+
+### Fixes
+
+- use valid setup-node action pin (`d077d3a`)
+- tailor welcome to page state (`1d4e63d`)
+- audit import sources before preview (`bcba64e`)
+- harden onboarding and publish real previews (`a7b5bc1`)
+
+## [0.35.0] - 2026-09-07
+
+### Features
+
+- complete creator page onboarding flow (`95b5dc1`)
+- support loopback template catalog demos (`0260fab`)
+- use cloud creator template catalog (`21ed50f`)
+- fetch verified cloud creator templates (`6cc99cf`)
+- build creator template catalog artifacts (`87f5a00`)
+- guide creator page onboarding (`1cfad54`)
+
+### Fixes
+
+- 校正模板拉取验收路径 (`bc2cfda`)
+- 使用独立模板册公开桶 (`e926221`)
+- 修复模板册 CI 与错误边界 (`5f79228`)
+- 收紧模板册发布与 Mock 隔离 (`0be4b14`)
+- quote template catalog key expansion (`3b9d922`)
+- restore CLI-only update lifecycle (`8517f7c`)
+
+### Other Changes
+
+- 更新官方 Skill 发布清单 (`1f5f19b`)
+- 移除开发过程文档 (`49a9e94`)
+- define creator card update recovery (`6a5a2db`)
+- align creator template flow with cloud catalog (`9e35bcf`)
+- add development template catalog fixtures (`1183991`)
+- publish creator template catalog (`ab710f3`)
+- design cloud creator template catalog (`e95f56d`)
+
 ## [0.34.0] - 2026-09-07
 
 ### Features

package/README.md

@@ -291,7 +291,7 @@ Never copy an access token into the conversation.
 | `viceme replica resume <publication-id>` | Continue only the missing upload, verification, submission, or allowed retry step from authoritative state. |
 | `viceme replica cancel <publication-id>` | Cancel a Publication before activation and clean its local recoverable source. |
 | `viceme replica install <code> [--target <new-directory>]` | With an authenticated Profile, display the authoritative Quote before `--confirm`; add `--accept-price-cents <fen>` for anonymous checkout and `--payment-presented` only after its hosted payment page opens. Both paths atomically install the paid source. |
-| `viceme update` | Update or repair the CLI and matching official Skills together. |
+| `viceme update` | Explicitly update the CLI. Refresh official Skills separately with `viceme install --agent auto`. |
 | `viceme merchant accounts` | List ordinary MerchantAccounts where the current User is the OWNER member. |
 | `viceme merchant work ...` | Create, inspect, update, and publish Merchant Works, including Website Works. |
 | `viceme merchant page ...` | Validate, preview, publish, inspect, and roll back immutable custom Creator/Work page bundles. |
@@ -355,7 +355,7 @@ process that started the update. `meta.autoUpdate` may appear when startup
 recovery had to hand an already-started command to a newly committed CLI.
 
 After an ordinary command has emitted its response, a detached worker checks
-the stable release channel and updates the CLI and matching official Skills. The foreground command never waits
+the stable release channel and updates only the CLI. The foreground command never waits
 for release discovery or activation, and background launch, network,
 permission, or installation failures never replace its JSON response. A
 successful replacement is used by the next `viceme` process; it does not
@@ -363,12 +363,10 @@ require restarting the surrounding Codex, Claude Code, or WorkBuddy app.
 Checks are coalesced for 24 hours, while failed checks or updates become
 eligible for another background attempt after one hour.
 
-Both manual and automatic updates synchronize official Skills through the
-existing activation transaction. When the CLI is already current, the background
-worker checks the installed official Skills and repairs stale or missing copies;
-healthy installations are left alone. Agents may have loaded the old Skill text
-when a task started, so start a new task when the host needs to rediscover the
-refreshed files. `viceme install --agent auto` remains a Skill-only repair path.
+Official Skills are a separate lifecycle because an Agent usually loads them
+when a task starts. CLI auto-update therefore never rewrites Skill directories.
+Refresh them intentionally with `viceme install --agent auto`, then start a new
+Agent task when the host needs to rediscover the files.
 
 ```bash
 viceme update --check
@@ -376,17 +374,17 @@ viceme update
 viceme install --agent auto
 ```
 
-`viceme update` uses the `auto` Skill target by default and keeps the existing
-permission preflight and durable recovery rules. Use
-`viceme update --agent <target>` to select a specific Agent destination.
-`viceme update --check` only checks the release and does not refresh Skills.
+`viceme update` remains the explicit CLI repair command and keeps the same
+permission preflight and durable recovery rules. For compatibility,
+`viceme update --agent <target>` still requests a combined CLI and Skill
+repair, but new automation should keep the two commands separate.
 
 Permission preflight checks every path that the selected installation method
 will mutate before creating an activation journal. For npm this includes the
 configured cache, actual scoped global package, and launcher directories through
-Node so the host filesystem broker is preserved. Standalone activation checks
-the executable directory, and Skill installation checks every selected Agent
-destination. A denied explicit-update preflight keeps the
+Node so the host filesystem broker is preserved. For standalone CLI-only
+updates it checks the executable directory; a separate Skill install checks
+every selected Agent destination. A denied explicit-update preflight keeps the
 previous generation intact and requests host approval. A denied background
 attempt is recorded locally and does not affect the foreground command.
 Permission can still change after preflight, so any failure after an install

package/checksums.txt

@@ -1,6 +1,6 @@
-b9d3561f65c6a719b450c12084f9c4a175f4b45151346c27b037bf41878bab81  viceme_0.34.0_darwin_amd64
-ee5b87aaf030218363cda513ef822cc5ca2ddc943bf43272ccb2b00d191dc3c9  viceme_0.34.0_darwin_arm64
-d2dc699bef94c24e956cb7b6d135b3d64740e540b61e0edacec08d8b4db2dffd  viceme_0.34.0_linux_amd64
-eabd7ba85c147f8cfaf77ee533071d2cd321cfcf85ca26be5ca768c18867481c  viceme_0.34.0_linux_arm64
-a58dd1a6b063a222699f0b6c8fd0aef6a1554df90bfa251b5bf60f1d0087fef3  viceme_0.34.0_windows_amd64.exe
-0736b755e56785d0c3db4a265309585208ac1b87225ba3ad1819838744a0fb4a  viceme_0.34.0_windows_arm64.exe
+036c587002751044d2b2ef0ad57d3bedfbd15e30a8dd55ae15a3b0dba5e2d4dd  viceme_0.35.1_darwin_amd64
+33a6e2839468b0e9e8f86e1a0666008683d5899313734e82da2b41a325f89bdb  viceme_0.35.1_darwin_arm64
+ff215c8f015fab8a40b36b37394b0cd6a7151e853910b1be917299fea39f264c  viceme_0.35.1_linux_amd64
+8f2887d6b5609416c3192240759e9ae2b11de222d6d769040623037f31a839fd  viceme_0.35.1_linux_arm64
+e1a1e1517ef8e13fd1dae4c48c6cd65b18e8451a6731be1ed7c30683611756bf  viceme_0.35.1_windows_amd64.exe
+8e7cca3b51202276c6b6bffe2f189933f70ce1d1d096f22b87d8d87f4fc54f34  viceme_0.35.1_windows_arm64.exe

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.34.0",
+  "version": "0.35.1",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {