@viceme-ai/cli 0.40.0 → 0.42.0

package/CHANGELOG.md

@@ -1,5 +1,52 @@
 # Changelog
 
+## [0.42.0] - 2026-09-14
+
+### Features
+
+- 支持网站提示词发布与已购版本下载 (`8de6af6`)
+- 支持独立管理作品说明与在线视频教程 (`4e32c71`)
+- 试用支付呈现按调用平台分支并抽出共享环境探测（重提评审） (`a5e14d0`)
+- 豆包工作平台探测与支付呈现分支 (`4a66c74`)
+- 接入做同款逐级再分发与授权告知 (`4004990`)
+- 支持创作者申请可选个人信息 (`d5b4b9f`)
+- 接通个人主页制作与发布 (`ca1b572`)
+- 关联网站同款邀请启动与原单安装回执 (`1356034`)
+
+### Fixes
+
+- 统一托管支付展示并保护付款后的恢复 (`6bac769`)
+- 按宿主实际能力选择试用支付展示通道 (`c8a4da2`)
+- 随包支付指引与平台分支对齐并隔离测试环境标记 (`4c7d734`)
+- 分离原站入口修改并简化做同款发布步骤 (`0495990`)
+- 将预览刷新限定为做同款 (`d3b44c2`)
+- 完善 WorkBuddy 本地预览刷新规则 (`f4925d9`)
+- trial-purchase 耗尽 hint 接入平台分支 (`7949b81`)
+- 试用支付呈现按调用平台分支并抽出共享环境探测 (`abc8261`)
+- 去重软链重合的 Agent 安装目标 (`5af8cc3`)
+- 消除申请资料能力探测冲突 (`a9eaa66`)
+- 对齐创作者资料兼容边界 (`c720aa7`)
+- 规范创作者用户名中的 @ (`31288ce`)
+- 独立保存埋点以兼容旧版原单恢复 (`4fcd05b`)
+- 锁定 npm launcher 安装前缀 (`ea21ae2`)
+
+### Other Changes
+
+- 补充提示词发布购买指引并更新技能清单 (`93d095d`)
+- 撤回未经评审合并的试用支付分平台分支 (`20ae6e8`)
+- 跳过 Windows POSIX 前缀断言 (`4ca9bf3`)
+
+## [0.41.0] - 2026-09-11
+
+### Features
+
+- 支持国际站美元免费做同款 (`b340424`)
+- 支持自主收入提现与原单恢复 (`37f3495`)
+
+### Fixes
+
+- 简化 Windows Agent 安装与定位 (`66dc16d`)
+
 ## [0.40.0] - 2026-09-10
 
 ### Features

package/README.md

@@ -174,8 +174,8 @@ Select a target explicitly with `viceme install --agent codex`, `claude`,
 | Skill | Use it when you want to... |
 | --- | --- |
 | `creator-tools` | install ViceMe, sign in through the browser, manage Profiles, update, diagnose, or repair the local setup. |
-| `become-a-creator` | apply for or check creator qualification for every creator workflow. |
-| `customize-your-profile-page` | use AI to create, preview, publish, update, or roll back a creator profile page. |
+| `become-a-creator` | apply for or check creator qualification for merchant-only workflows; personal profile publishing stays independent. |
+| `customize-your-profile-page` | use AI to create, locally preview, publish, update, or roll back any signed-in user's personal profile page. |
 | `customize-your-work-page` | use AI to redesign or import a downloadable Skill work page, including its visible actions and final preview. |
 | `sell-a-skill` | publish or update a paid or free downloadable Skill; websites, services, and generic goods are out of scope. |
 | `use-a-skill` | resolve free, purchased, or purchase-required access, install the selected Skill, and continue the original task. |
@@ -275,6 +275,9 @@ Never copy an access token into the conversation.
 | `viceme doctor` | Check the CLI, active Profile, credentials, API readiness, and installed official Skills. |
 | `viceme auth status` | Show whether the active Profile is signed in. |
 | `viceme profile list` | Show Profiles and their API, Web, and market authorities. |
+| `viceme profile page describe` | Resolve the signed-in user's server-authoritative personal profile URL and supported page capabilities. |
+| `viceme profile page upload ...` | Validate and upload a static personal profile bundle together with its owner-only editable source, without Merchant or an online preview. |
+| `viceme profile page status/source/publish/activate ...` | Inspect, restore, publish, or roll back the current user's immutable personal profile releases with concurrency protection. |
 | `viceme skill inspect --path <path>` | Validate a local Skill without side effects. |
 | `viceme skill listing prepare --path <path>` | Create or recover the stable private owner preview and persist the local binding. |
 | `viceme skill listing get <listing-id>` | Read the authoritative private Listing state. |
@@ -439,3 +442,34 @@ make release-manifest
 The CLI and official Agent Skills are versioned and released together. GitHub,
 npm, `s3.viceme.cn`, and `s3.viceme.ai` artifacts come from the same reviewed
 commit.
+
+## 创作者收入提现
+
+国内站登录后，可由 Agent 调用官方 `withdraw-income` Skill 自主提现；旧凭证首次使用时重新运行 `viceme auth login`。
+
+```sh
+viceme withdraw context
+viceme withdraw create --request-id <稳定任务标识>
+viceme withdraw create --request-id <稳定任务标识> --amount 100.00
+viceme withdraw status --request-id <原任务标识>
+```
+
+`--amount` 的单位是人民币元；省略时按可提现收入、渠道上限和剩余当日额度选择金额。
+每个新任务使用新请求标识；首次办理、重新登录和网络失败后沿用原标识及原参数恢复。
+CLI 在当前账号与 Profile 下保存请求，确保恢复时不会重新选额或换账户。
+渠道需要本人实名签约、绑定或确认收款时，Skill 展示现有网站入口，完成后继续原单。
+`PENDING` 与 `ACTION_REQUIRED` 均不代表到账；只有 `SUCCEEDED` 表示全部提现成功。
+定期触发和长时间跟踪由上层 Agent 负责。
+
+## 网站创作提示词教程
+
+`merchant work tutorial publish <work-id>` 从 `--input tutorial.json` 发布教程；必填 `--merchant`、`--request-id`、`--expected-version`、`--preview-steps`、`--price-cents`。重试复用原请求 ID 和完整输入，价格 0 表示全文公开。教程与网站源码分别授权，版本发布后不可修改。
+
+```bash
+viceme tutorial preview <work-id>
+viceme tutorial read <work-id> --version 1
+viceme tutorial buy <work-id> --version 1
+viceme tutorial download <work-id> --version 1 --output tutorial-v1.json
+```
+
+预览无需登录；读取、购买入口和下载使用当前 CLI 账号。`buy` 返回网站结账入口，需在网站使用相同账号完成支付；不自动扣款。下载仅导出已解锁的指定版本 JSON，拒绝覆盖已有文件。网站托管预览沿用 `replica publish --page-dir ... --page-entry ...`，无需新增上传机制。需要先部署 Shop 的教程 API，再使用这些命令。

package/checksums.txt

@@ -1,6 +1,6 @@
-e7f2c5fb390468526f1861ba35b9b6da18ae3e40d1e5a3ef7d6c88672c3caf57  viceme_0.40.0_darwin_amd64
-5de6c7279e51339c40e74dc57ce0b559442a46f85e9eaf47834926bf6455acab  viceme_0.40.0_darwin_arm64
-5c9d01e1d2ba9ea1539d7aa107037bd5f1fe044be351c9412b2340935432469c  viceme_0.40.0_linux_amd64
-801c2c5b4011cc9c54180b176f6b68093d70974cd9bc6de380b36977d562f7a6  viceme_0.40.0_linux_arm64
-8ba24e4d3e565cf7ffd2a7e5b24e94b83ebfa4fb6b9ee493b5ff32cfb4e5ed42  viceme_0.40.0_windows_amd64.exe
-6e5861071c9563bd50399d6112812eac1c2465c270a6e636b194d991123e467b  viceme_0.40.0_windows_arm64.exe
+dffb44831d3ff81361fb98962a5d41107ac1f102c2c6c5fb7876c450997f9839  viceme_0.42.0_darwin_amd64
+65d3651434dfe5250b57adaa5be04fef4aad2c5216dd18e45da34857dc9a4db3  viceme_0.42.0_darwin_arm64
+1618aba2721d3ae8cce3d01d77828334ead3c719ebe52e52a1b9902e3387a227  viceme_0.42.0_linux_amd64
+62346947012236d3cd074f2d5be364c20e565bc12ac556b147e3774e351b01aa  viceme_0.42.0_linux_arm64
+cd193fe6089eedf169c4689e389fd19a7163b3ead87de919cd022ee028978b4a  viceme_0.42.0_windows_amd64.exe
+dfb044876c7a1d003e8f44a162fdcae6f7cc19c3f4c093c174ca42881f3d3c33  viceme_0.42.0_windows_arm64.exe

package/docs/releasing.md

@@ -159,8 +159,11 @@ Every release renders two public Agent contracts with the exact stable version:
 
 - `release/agent-install.md.tmpl` is the narrow CLI Runtime bootstrap. It
   installs or updates one verified CLI plus official-Skill generation, runs
-  `viceme doctor`, and then returns control to its caller. It does not know a
-  Product stable name or install a merchant Product Skill.
+  `viceme doctor`, and then returns control to its caller. Windows Agents verify
+  the Manifest-selected executable and invoke the executable's own
+  `bootstrap activate` entrypoint directly, so a POSIX-only host such as WorkBuddy does not need to
+  escape into PowerShell or npm. It does not know a Product stable name or
+  install a merchant Product Skill.
 - `release/commerce-skill-install.md.tmpl` is the generic Product Skill
   activation contract. It first uses an already healthy Commerce Runtime and
   delegates to the same-region `agent-install.md` only when the Runtime is

package/npm/lib/launcher-environment.mjs

@@ -1,6 +1,45 @@
+import path from "node:path";
+
+export function installedNPMPrefix(launcherPath, platform = process.platform) {
+  if (typeof launcherPath !== "string" || launcherPath === "") {
+    return undefined;
+  }
+  // A POSIX global npm package has one unambiguous layout. Derive the prefix
+  // from the launcher that is actually executing so a foreign Node/npm on PATH
+  // cannot redirect an update into another global installation. npx caches do
+  // not include lib/node_modules and intentionally keep npm's configured
+  // global prefix for activation and re-execution.
+  if (platform === "win32") {
+    return undefined;
+  }
+  const normalized = path.posix.normalize(launcherPath);
+  const suffix = path.posix.join(
+    "lib",
+    "node_modules",
+    "@viceme-ai",
+    "cli",
+    "npm",
+    "bin",
+    "viceme.mjs",
+  );
+  const marker = `${path.posix.sep}${suffix}`;
+  if (!path.posix.isAbsolute(normalized) || !normalized.endsWith(marker)) {
+    return undefined;
+  }
+  const prefix = normalized.slice(0, -marker.length);
+  return prefix || path.posix.sep;
+}
+
 export function launcherEnvironment(environment, launcherPath, launcherRuntime) {
+  const npmPrefix = installedNPMPrefix(launcherPath);
   return {
     ...environment,
+    ...(npmPrefix
+      ? {
+          NPM_CONFIG_PREFIX: npmPrefix,
+          npm_config_prefix: npmPrefix,
+        }
+      : {}),
     VICEME_INSTALL_METHOD:
       environment.VICEME_INSTALL_METHOD === "npm"
         ? "npm"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.40.0",
+  "version": "0.42.0",
   "description": "Install the ViceMe creator CLI and official Agent Skills",
   "type": "module",
   "bin": {