@clubnet/seedclub 0.2.15 → 0.2.17

package/README.md

@@ -4,6 +4,16 @@ The Human+ Venture Network — AI agent for deal sourcing, research, and signal
 
 Requirements: Node.js 22+
 
+## Source of truth
+
+This repo is the source of truth for the published Seed Club wrapper package:
+
+- GitHub repo: `seedclub/seedclub-agent`
+- npm package: `@clubnet/seedclub`
+- user-facing command: `seedclub`
+
+This is the Pi wrapper repo, not the older extracted full-agent monorepo.
+
 ## Install
 
 ```bash
@@ -126,10 +136,13 @@ Colors can be hex (`"#00C853"`), 256-color palette index (`242`), a reference to
 git clone https://github.com/seedclub/seedclub-agent.git
 cd seedclub-agent
 
-# Install locally from the repo
+# Install deps, then install locally from the repo
+npm install
 npm install -g ./
 ```
 
+For day-to-day work, run `seedclub version` after installing to confirm your shell is using this repo's wrapper build.
+
 ### Repo structure
 
 ```
@@ -203,25 +216,31 @@ For reproducible extension dependency installs, commit `assets/extensions/seedcl
 
 ### Release process
 
-Standard order: **GitHub first, npm second**. Always publish from a tagged commit on `main`.
+Publishing is now handled by npm trusted publishing from GitHub Actions.
+
+Workflow:
 
-1. Create a branch, make changes, open PR
+1. Create a branch and make changes
 2. Merge to `main`
-3. Pull `main`, run `npm install -g ./` and smoke test (`seedclub`)
-4. Bump version: `npm version patch|minor|major` (creates a git tag)
-5. Push commits + tags: `git push --follow-tags`
-6. Publish from that tag: `npm publish`
+3. Pull `main`, run `npm install`, then `npm install -g ./`
+4. Smoke test with `seedclub version` and, if relevant, a quick interactive run
+5. Bump version: `npm version patch|minor|major`
+6. Push commits + tags: `git push --follow-tags`
+7. GitHub Actions publishes the tagged release to npm automatically via `.github/workflows/publish.yml`
 
-### Publishing
+### Trusted publishing
 
-```bash
-# One-time setup
-echo "@clubnet:registry=https://registry.npmjs.org/" >> ~/.npmrc
-echo "//registry.npmjs.org/:_authToken=YOUR_NPM_TOKEN" >> ~/.npmrc
+The npm package is configured to publish from GitHub Actions, not from long-lived local npm tokens.
 
-# Publish
-npm publish --access restricted
-```
+Trusted publisher settings for `@clubnet/seedclub`:
+
+- Provider: GitHub Actions
+- Organization or user: `seedclub`
+- Repository: `seedclub-agent`
+- Workflow filename: `publish.yml`
+- Environment name: blank
+
+Once trusted publishing is working, npm package publishing access should stay on the stricter setting that disallows token-based publishing.
 
 ## Update
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubnet/seedclub",
-  "version": "0.2.15",
+  "version": "0.2.17",
   "description": "The Human+ Venture Network — AI agent for deal sourcing, research, and signal tracking",
   "license": "MIT",
   "repository": {