ViberMate 0.1.0 preview
Pre-release中文
ViberMate 0.1.0 是首个可公开安装的 macOS 预览版。它帮助 Claude Code 和 Codex CLI 用户在本机查看 AI 请求、选择上游服务与账号、应用可测试的 JavaScript 规则,并保留可审计的运行记录。
安装
brew install --cask vibe-agi/tap/vibermate也可以下载 ViberMate_0.1.0_universal.dmg,把 ViberMate 拖入“应用程序”。
首次启动后,在 设置 → 常规 → 终端命令 中安装 vibermate 命令,然后运行:
vibermate run -- claude
vibermate run -- codex默认透明模式无需先创建 Environment。通过 ViberMate 启动的 Claude/Codex 通常也无需把本机根证书安装进 macOS 系统钥匙串。
本版包含
- macOS 14+,Apple Silicon 与 Intel Universal App
- Claude Code 与 Codex CLI 的本机捕获、对话和网络证据
- Endpoint、账号、Environment 与模型路由
- 可预览、临时修改并运行样例 Turn 的 JavaScript 消息变换与账号选择器
- 断网保护、工具/网络审批、证据保留和脱敏策略
- 本机根证书生成、当前用户信任、替换与精确删除引导
安全与边界
- 独立 runner 已从只读 DMG 安装,完成 Gatekeeper 校验、两次真实启动、状态持久化和清理验证。
- 本地证据数据库没有应用层静态加密,依赖 macOS 用户权限保护。
- 你的 AI 请求仍会发往所选服务商。当前不承诺自动更新、插件、面向公网的 Server 加固或任意客户端兼容。
- 这是 0.x 预览版,不作为 GA 稳定性承诺。
完整性
- Source:
05b372b4c7397243b3644ffc2bb70812dffb2dcc - DMG SHA-256:
13fc008a8642b671f584bc286d83055f1fda192f01dcd63b7c29e2e28f2accd5 - Protected build: https://github.com/vibe-agi/vibermate/actions/runs/33817737168
SHA256SUMS覆盖 DMG、SBOM 与 evidence 包。R0 来源证据记录签名前状态;同一 evidence 包中的签名、公证和安装报告记录最终分发候选的后续验证。
English
ViberMate 0.1.0 is the first publicly installable macOS preview. It lets Claude Code and Codex CLI users inspect local AI traffic, choose upstream endpoints and accounts, apply testable JavaScript rules, and retain auditable run evidence.
Install
brew install --cask vibe-agi/tap/vibermateOr download ViberMate_0.1.0_universal.dmg and drag ViberMate into Applications. In Settings → General → Terminal command, set up the vibermate command, then run:
vibermate run -- claude
vibermate run -- codexTransparent mode needs no Environment. Claude and Codex launched through ViberMate normally receive the local root directly, so system Keychain trust is usually unnecessary.
Scope and verification
- macOS 14+, Universal Apple Silicon and Intel App.
- Independently installed from the read-only DMG and exercised across two real launches with persistence and cleanup checks.
- The local evidence database is not application-level encrypted. AI requests still go to the selected provider.
- Automatic updates, plugins, hardened public-Internet Server mode, and arbitrary-client compatibility are not claimed yet. This 0.x release is a preview, not a GA stability promise.
Source: 05b372b4c7397243b3644ffc2bb70812dffb2dcc
DMG SHA-256: 13fc008a8642b671f584bc286d83055f1fda192f01dcd63b7c29e2e28f2accd5
Protected build: https://github.com/vibe-agi/vibermate/actions/runs/33817737168
SHA256SUMS covers the DMG, standalone SBOM, and evidence bundle. The R0 source evidence describes the pre-signing state; the signing, notarization, and installed-candidate reports in the same bundle cover the final distribution candidate.