@viceme-ai/cli 0.8.1 → 0.8.2

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [0.8.2] - 2026-07-25
+
+### Fixes
+
+- accept typed source specs (`167656c`)
+
 ## [0.8.1] - 2026-07-24
 
 ### Fixes

package/README.md

@@ -18,7 +18,7 @@ The official command-line client and Agent Skill for publishing external Skills
 - **Deterministic boundary** — the CLI performs typed protocol actions; it does not start another conversational Agent loop.
 - **Server-side compilation** — source parsing, LLM compilation, BuildRun materialization, and Release publication stay on ViceMe infrastructure.
 - **Stable publishing** — later releases of the same logical Agent keep the same share URL.
-- **Multiple source types** — accepts GitHub Skills, pasted Xiaohongshu/RedSkill expressions, archives, and local Skill folders.
+- **Multiple source types** — accepts typed GitHub and Xiaohongshu/RedSkill sources, archives, and local Skill folders.
 - **Secure by default** — on macOS, device-login credentials use AES-256-GCM encrypted files with Keychain-backed key material; other platforms retain their native credential manager. Explicit local overrides require a private profile file, public mutations require confirmation, and downloaded binaries are checksum-verified.
 - **Human and Agent login modes** — `viceme auth login` guides a person in the terminal, while Agent split-flows use explicit JSON.
 
@@ -219,14 +219,19 @@ viceme skill publish --resolution-id <resolution-id> --yes
 
 For GitHub, `--skill-root` is required and names the exact repository-relative directory containing `SKILL.md`; use `.` only for a root-level Skill. The calling Agent determines this path from the user input or read-only repository tree. ViceMe does not scan the repository to guess a Skill.
 
-### Xiaohongshu or RedSkill copied expression
+### Xiaohongshu or RedSkill
 
 ```bash
-viceme skill inspect --expression-stdin
+viceme skill inspect --source-stdin
 viceme skill publish --resolution-id <resolution-id> --yes
 ```
 
-The copied expression is untrusted data. ViceMe extracts a locator and fetches the source through an approved connector; it never executes marketplace installation text.
+The AI Host interprets the user's source intent and passes one typed JSON
+`SourceSpec` through stdin, for example
+`{"kind":"redskill","value":"ai-desk-card"}`. CLI/Core do not classify copied
+natural language with keyword or regex rules. Explicit platform intent is
+authoritative; ambiguous source requests must be clarified instead of silently
+substituting a same-name source from another provider.
 
 ### Archive or local Skill folder
 
@@ -298,7 +303,7 @@ CLI execution errors are formatted and written to **stderr** with a non-zero exi
   "error": {
     "type": "validation",
     "subtype": "source_required",
-    "message": "provide exactly one source argument or --expression-stdin"
+    "message": "provide exactly one GitHub URL argument or --source-stdin"
   }
 }
 ```
@@ -318,7 +323,7 @@ Determine local/bootstrap command success from the process exit code. For public
 ## Security and Risk Controls
 
 - **No source execution** — the CLI and compiler do not execute third-party scripts, binaries, shell fragments, marketplace commands, or copied instructions.
-- **Untrusted text stays off argv** — AI Hosts must pass copied provider expressions and natural-language Candidate edits through the explicit `--expression-stdin` and `--request-stdin` modes. Never interpolate that text into command strings, argv, environment variables, or shell pipelines.
+- **Typed source intent** — AI Hosts interpret natural-language source requests and pass only a typed `SourceSpec` through `--source-stdin`; CLI/Core never guess a provider from user phrases. Natural-language Candidate edits use `--request-stdin`. Never interpolate untrusted text into command strings, argv, environment variables, or shell pipelines.
 - **Explicit public mutation** — publishing, compiler retry, and cancellation require `--yes`; exit code `10` means the Agent must obtain confirmation, not silently retry.
 - **Safe preview** — use `--dry-run` on inspect or publish when the user needs to review the planned request without network or publication side effects.
 - **Credential isolation** — on macOS, device-login credentials stay in AES-256-GCM encrypted files, with Keychain-backed or explicitly downgraded private key material; filenames do not expose profile/origin names. Other platforms retain their native credential manager. Explicit internal-test overrides are namespaced by profile, stored only in a private `0600` config, and never emitted by CLI output.

package/README.zh.md

@@ -18,7 +18,7 @@ ViceMe 官方命令行客户端与 Agent Skill，用于将外部 Skill 发布为
 - **确定性边界** — CLI 执行类型化协议操作，不会再启动一层对话式 Agent Loop。
 - **服务端编译** — 来源解析、LLM 编译、BuildRun 固化和 Release 发布均在 ViceMe 基础设施中完成。
 - **稳定发布** — 同一个逻辑 Agent 后续发布新版本时继续使用同一个分享链接。
-- **支持多种来源** — 支持 GitHub Skill、小红书或 RedSkill 复制口令、压缩包和本地 Skill 目录。
+- **支持多种来源** — 支持结构化 GitHub 与小红书/RedSkill 来源、压缩包和本地 Skill 目录。
 - **默认安全** — 在 macOS 上，设备登录凭证保存在 AES-256-GCM 加密文件中，主密钥默认由系统 Keychain 保护；其他平台继续使用原生凭证管理器。显式本地覆盖要求私有 Profile 文件，公开变更需要确认，下载的二进制文件必须通过校验和验证。
 - **人类与 Agent 双登录模式** — `viceme auth login` 在终端中引导用户，Agent 跨回合流程则显式使用 JSON。
 
@@ -219,14 +219,16 @@ viceme skill publish --resolution-id <resolution-id> --yes
 
 GitHub 来源必须传 `--skill-root`，它是包含 `SKILL.md` 的精确仓库相对目录；只有根级 Skill 才使用 `.`。调用 Agent 根据用户输入或只读仓库文件树确定该路径，ViceMe 不扫描全仓猜测 Skill。
 
-### 小红书或 RedSkill 复制口令
+### 小红书或 RedSkill
 
 ```bash
-viceme skill inspect --expression-stdin
+viceme skill inspect --source-stdin
 viceme skill publish --resolution-id <resolution-id> --yes
 ```
 
-复制口令属于不可信数据。ViceMe 只从中提取定位信息，并通过允许的连接器获取来源；不会执行市场安装文案中的命令。
+AI Host 先理解用户的来源意图，再通过 stdin 传入唯一的结构化
+`SourceSpec`，例如 `{"kind":"redskill","value":"ai-desk-card"}`。CLI/Core
+不再用关键词或正则分类自然语言；用户明确指定的平台必须保持不变，来源存在歧义时必须先询问，不能静默替换为其他平台的同名来源。
 
 ### 压缩包或本地 Skill 目录
 
@@ -298,7 +300,7 @@ CLI 执行错误以格式化形式写入 **stderr**，退出码非零：
   "error": {
     "type": "validation",
     "subtype": "source_required",
-    "message": "provide exactly one source argument or --expression-stdin"
+    "message": "provide exactly one GitHub URL argument or --source-stdin"
   }
 }
 ```
@@ -318,7 +320,7 @@ CLI 执行错误以格式化形式写入 **stderr**，退出码非零：
 ## 安全与风险控制
 
 - **不执行来源内容** — CLI 和编译器不会执行第三方脚本、二进制文件、shell 片段、市场命令或复制口令中的指令。
-- **不让不可信文本进入 argv** — AI Host 必须通过显式的 `--expression-stdin` 和 `--request-stdin` 模式传递复制的来源表达式与 Candidate 自然语言修改要求；不得把这些文本拼入命令字符串、argv、环境变量或 shell 管道。
+- **结构化来源意图** — AI Host 负责理解自然语言来源，并只通过 `--source-stdin` 传递 typed `SourceSpec`；CLI/Core 不根据用户措辞猜 Provider。Candidate 的自然语言修改通过 `--request-stdin` 传递。不得把不可信文本拼入命令字符串、argv、环境变量或 shell 管道。
 - **公开变更需要明确确认** — 发布、编译重试和取消操作需要 `--yes`；退出码 `10` 表示 Agent 必须向用户取得确认，不能静默重试。
 - **安全预览** — 用户需要检查计划请求时，可以对 inspect 或 publish 使用 `--dry-run`，不会产生网络请求或发布副作用。
 - **凭证隔离** — 在 macOS 上，设备登录凭证保存在 AES-256-GCM 加密文件中，主密钥由 Keychain 或显式降级后的私有文件保护，文件名不会暴露 Profile/origin；其他平台继续使用原生凭证管理器。显式内部测试覆盖按 Profile 隔离，仅允许保存在 `0600` 配置中，并且不会出现在 CLI 输出中。

package/checksums.txt

@@ -1,6 +1,6 @@
-274e0db4e7e1e1896c9ecac6e5784a16f0fd2aedcb654f0f160d98d3e733af60  viceme_0.8.1_darwin_amd64
-8c5ea0d0ac40da645cce074eb78aaa33522ce29c3ed49b1161a49467580f0429  viceme_0.8.1_darwin_arm64
-83cac5e106d89b2645948937de5dba48aee5db68f377d2c8e0b2d897466f4bc6  viceme_0.8.1_linux_amd64
-29011f74d7c48bc4f7ba4fb1ce62921077c3a9c67b2cdad2b0956b898c88fb89  viceme_0.8.1_linux_arm64
-88e6592c27da508d2ca50545d96bb0e208b5b03e49fe4dbeabe67c9194109fe9  viceme_0.8.1_windows_amd64.exe
-3df41ae3c8b4bbf3cdbaf6af91132cb44dbac31d053dd20911e39ca15a1d8b4c  viceme_0.8.1_windows_arm64.exe
+b811d103fdc6ec8fd9acf4171f30fb11c2292b61de31eb4dfd807d0c1731e984  viceme_0.8.2_darwin_amd64
+f0633a3ecd5c4dea58ca519f9b704ecc04d2cb54370b9fa35c7f15261c46b150  viceme_0.8.2_darwin_arm64
+7f9b6cc67b6c6052a9d3032293f57ffbb16084abd82703b2877b87bde8f768d3  viceme_0.8.2_linux_amd64
+3e94d4896bb91a141e2269e74cd7a83f810ad65e857c1018824b95f0c83d43ae  viceme_0.8.2_linux_arm64
+b91d2b2b00734f12fdb008a002d1cb679903bd348da9c993ce5b472e850b18d5  viceme_0.8.2_windows_amd64.exe
+6dcd67f67750836ea808dae7d450cbaabd1ceef424f771c8baebab1877f16d3b  viceme_0.8.2_windows_arm64.exe

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viceme-ai/cli",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "Install and run the ViceMe CLI and ViceMe Agent Skill",
   "type": "module",
   "bin": {