@clubnet/seedclub 0.2.16 → 0.2.18

package/README.md

@@ -1,9 +1,19 @@
 # seedclub
 
-The Human+ Venture Network — AI agent for deal sourcing, research, and signal tracking.
+A branded command-line agent wrapper around pi, with integrated Seed Club commands, tools, and app actions.
 
 Requirements: Node.js 22+
 
+## What it is
+
+`seedclub` is the Seed Club distribution of pi. This repo provides the `seedclub` launcher, installs the Seed Club theme and extensions, and adds Seed Club-specific workflows for connecting your account, capturing signals, sorting them, and interacting with Seed Club-backed app surfaces.
+
+This repo is the source of truth for the published package:
+
+- GitHub repo: `seedclub/seedclub-agent`
+- npm package: `@clubnet/seedclub`
+- user-facing command: `seedclub`
+
 ## Install
 
 ```bash
@@ -16,7 +26,15 @@ Then:
 seedclub
 ```
 
-Use `/login` to set up your API keys.
+### First run
+
+On a fresh install, the normal setup flow is:
+
+1. `/login` to sign in to a model provider such as Anthropic, OpenAI, or Gemini
+2. `/model` to choose the model you want to use
+3. `/connect` to connect your Seed Club account
+
+After that, run `/seedclub` to open the main Seed Club menu.
 
 ### Alternative: curl | bash
 
@@ -24,9 +42,9 @@ Use `/login` to set up your API keys.
 curl -fsSL https://raw.githubusercontent.com/seedclub/seedclub-agent/main/install.sh | bash
 ```
 
-### Team onboarding (private package)
+### Internal install auth
 
-seedclub is published to npmjs as a private package in the `@clubnet` org.
+`@clubnet/seedclub` is currently a private npm package. This auth is only for installing or updating the package from npm. It is separate from `/login` and `/connect` inside the app.
 
 Fast path:
 
@@ -44,15 +62,38 @@ echo "//registry.npmjs.org/:_authToken=YOUR_NPM_TOKEN" >> ~/.npmrc
 
 Then `npm install -g @clubnet/seedclub` works.
 
+## Core workflow
+
+The normal interactive flow is:
+
+1. Start the app with `seedclub`
+2. Complete `/login`, `/model`, and `/connect` if this is your first run
+3. Open `/seedclub`
+4. Choose whether to add signals or sort unsorted signals
+
 ## Commands
 
 | Command | What it does |
 |---|---|
-| `/seedclub` | Main menu — connect, add signals, sort signals |
-| `/add <url>` | Add a signal (any URL) |
-| `/sort` | Sort signals into angel.md values |
+| `/login` | Sign in to a model provider for the underlying agent |
+| `/model` | Choose which model to use |
+| `/connect` | Connect your Seed Club account |
+| `/seedclub` | Open the main Seed Club menu; if not connected yet, it starts the connect flow |
+| `/add <url|@handle|query>` | Add signals from URLs, X handles, bookmarks, likes, following, or search |
+| `/sort` | Review unsorted signals and sort them automatically, in the browser, or delete them |
 | `seedclub setup-auth` | Configure npm auth for npmjs private package access in `~/.npmrc` |
 
+## Auth
+
+There are two separate auth layers in the product:
+
+1. Model auth: `/login`
+   This signs you into the LLM provider you want the agent to use.
+2. Seed Club auth: `/connect`
+   This connects the CLI to your Seed Club account so Seed Club tools and commands can read and write account data.
+
+`/seedclub` is the main entry point for Seed Club actions. If you are not connected yet, it will start the Seed Club connect flow automatically.
+
 ## How it works
 
 seedclub is an npm package (`@clubnet/seedclub`) that wraps [pi](https://github.com/badlogic/pi-mono) as a dependency. Installing the package globally gives you the `seedclub` command.
@@ -126,10 +167,13 @@ Colors can be hex (`"#00C853"`), 256-color palette index (`242`), a reference to
 git clone https://github.com/seedclub/seedclub-agent.git
 cd seedclub-agent
 
-# Install locally from the repo
+# Install deps, then install locally from the repo
+npm install
 npm install -g ./
 ```
 
+For day-to-day work, run `seedclub version` after installing to confirm your shell is using this repo's wrapper build.
+
 ### Repo structure
 
 ```
@@ -152,36 +196,46 @@ The `assets/` directory contains the canonical source for extensions and themes.
 
 ### Updating pi
 
-When a new pi version comes out:
+When a new pi version comes out, upgrading it for Seed Club users means shipping a new `@clubnet/seedclub` package that depends on the newer pi release.
+
+Recommended flow:
 
-1. **Test it locally:**
+1. **Update and test locally:**
    ```bash
-   # Update the dependency
    npm install @mariozechner/pi-coding-agent@NEW_VERSION
    npm install -g ./
-   seedclub  # test everything works
+   seedclub version
+   seedclub
    ```
 
-2. **Bump versions:**
-   Update the `package.json` dependency and package version:
+   Verify the wrapper still launches, the Seed Club UI loads, and the core flows you care about still work.
+
+2. **Commit the dependency change and bump the package version:**
+   The pi version is carried by this package, so users only receive it once the Seed Club package version is bumped and released.
    ```json
    {
      "version": "0.3.0",
      "dependencies": {
-       "@mariozechner/pi-coding-agent": "0.52.12"
+       "@mariozechner/pi-coding-agent": "NEW_VERSION"
      }
    }
    ```
 
-3. **Publish:**
+3. **Push the release:**
    ```bash
    git add -A
-   git commit -m "bump pi to 0.52.12"
-   git push
-   npm publish
+   git commit -m "bump pi to NEW_VERSION"
+   npm version patch|minor|major
+   git push --follow-tags
    ```
 
-Users get the update when they run `seedclub update`.
+4. **Users pull the update:**
+   Users get the newer pi runtime when they run:
+   ```bash
+   seedclub update
+   ```
+
+   A fresh `npm install -g @clubnet/seedclub` also installs the new packaged pi version.
 
 ### Updating extensions
 
@@ -203,25 +257,31 @@ For reproducible extension dependency installs, commit `assets/extensions/seedcl
 
 ### Release process
 
-Standard order: **GitHub first, npm second**. Always publish from a tagged commit on `main`.
+Publishing is now handled by npm trusted publishing from GitHub Actions.
+
+Workflow:
 
-1. Create a branch, make changes, open PR
+1. Create a branch and make changes
 2. Merge to `main`
-3. Pull `main`, run `npm install -g ./` and smoke test (`seedclub`)
-4. Bump version: `npm version patch|minor|major` (creates a git tag)
-5. Push commits + tags: `git push --follow-tags`
-6. Publish from that tag: `npm publish`
+3. Pull `main`, run `npm install`, then `npm install -g ./`
+4. Smoke test with `seedclub version` and, if relevant, a quick interactive run
+5. Bump version: `npm version patch|minor|major`
+6. Push commits + tags: `git push --follow-tags`
+7. GitHub Actions publishes the tagged release to npm automatically via `.github/workflows/publish.yml`
 
-### Publishing
+### Trusted publishing
 
-```bash
-# One-time setup
-echo "@clubnet:registry=https://registry.npmjs.org/" >> ~/.npmrc
-echo "//registry.npmjs.org/:_authToken=YOUR_NPM_TOKEN" >> ~/.npmrc
+The npm package is configured to publish from GitHub Actions, not from long-lived local npm tokens.
 
-# Publish
-npm publish --access restricted
-```
+Trusted publisher settings for `@clubnet/seedclub`:
+
+- Provider: GitHub Actions
+- Organization or user: `seedclub`
+- Repository: `seedclub-agent`
+- Workflow filename: `publish.yml`
+- Environment name: blank
+
+Once trusted publishing is working, npm package publishing access should stay on the stricter setting that disallows token-based publishing.
 
 ## Update
 

package/assets/extensions/seedclub/commands/add.ts

@@ -218,7 +218,7 @@ function parseTwitterQuery(input: string): TwitterQuery | null {
 	if (s.match(/likes?/)) {
 		const since = parseDateFilter(s);
 		const author = parseAuthorFilter(s);
-		// Only grab a number as count if it's NOT a year and NOT part of "N months/weeks"
+		// Only grab a number as count if it is not a year and not part of "N months/weeks"
 		const countMatch = s.match(/(?:last\s+)?(\d+)\s*(?:likes?|bookmarks?)/);
 		const count = since ? 200 : countMatch ? parseInt(countMatch[1], 10) : 20;
 		return { action: "likes", count, since, author };

package/assets/extensions/seedclub/commands/sort.ts

@@ -72,7 +72,7 @@ export function registerSortCommand(pi: ExtensionAPI) {
 
 async function autoSort(pi: ExtensionAPI) {
 	pi.sendUserMessage(
-		"Sort my unsorted signals. Call leaf_get_unsorted_signals first. Then score signals in batches of 20 — for each batch, call leaf_submit_sort_scores immediately before moving to the next batch. Score each signal across all 10 buckets (0-1) based on its description/content. If the user has an angel.md, weight toward their thesis. Work fast, don't explain each score.",
+		"Sort my unsorted signals. Call leaf_get_unsorted_signals first. Then score signals in batches of 20 — for each batch, call leaf_submit_sort_scores immediately before moving to the next batch. Score each signal across all 10 buckets (0-1) based on its description/content. If the user has an angel.md, weight toward their thesis. Work fast, do not explain each score.",
 	);
 }
 
@@ -86,6 +86,6 @@ async function manualSort(pi: ExtensionAPI, ctx: any) {
 	const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
 
 	pi.exec(openCmd, [url]).catch(() => {
-		ctx.ui.notify(`Couldn't open browser. Visit:\n${url}`, "warning");
+		ctx.ui.notify(`Could not open browser. Visit:\n${url}`, "warning");
 	});
 }

package/assets/extensions/seedclub/dia-cookies.ts

@@ -1,7 +1,7 @@
 /**
- * Read Twitter cookies directly from Dia browser's cookie database.
+ * Read Twitter cookies directly from the Dia browser cookie database.
  *
- * Dia is Chromium-based (The Browser Company) but sweet-cookie doesn't
+ * Dia is Chromium-based (The Browser Company) but sweet-cookie does not
  * know about it. We read the encrypted cookies and decrypt them using
  * the macOS Keychain password, same as Chrome does.
  */
@@ -52,7 +52,7 @@ function decryptValue(encrypted: Buffer, key: Buffer): string | null {
 		const unpadded = padByte > 0 && padByte <= 16 ? result.subarray(0, result.length - padByte) : result;
 
 		// The first block (16 bytes) may be garbled due to IV mismatch.
-		// Extract the longest trailing run of printable ASCII — that's the cookie value.
+		// Extract the longest trailing run of printable ASCII — that is the cookie value.
 		const raw = unpadded.toString("binary");
 		const match = raw.match(/[\x20-\x7e]+$/);
 		return match ? match[0] : null;

package/assets/extensions/seedclub/extraction/capture.ts

@@ -3,7 +3,7 @@
  * Uses Jina Reader for articles, FxTwitter for tweets.
  */
 
-import type { ExtensionAPI } from "@mariozechner/Seed Club-coding-agent";
+import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
 
 export interface CaptureResult {
 	content: string;

package/assets/extensions/seedclub/twitter-client.ts

@@ -148,7 +148,7 @@ async function resolveTwitterCredentials(): Promise<{
 	const allWarnings: string[] = [];
 	const defaultBrowser = detectDefaultBrowser();
 
-	// Dia: sweet-cookie doesn't support it, so we read cookies directly
+	// Dia: sweet-cookie does not support it, so we read cookies directly
 	if (defaultBrowser?.bundleId === "company.thebrowser.dia" || (!defaultBrowser && isDiaAvailable())) {
 		const dia = readDiaTwitterCookies();
 		if (dia) {
@@ -170,7 +170,7 @@ async function resolveTwitterCredentials(): Promise<{
 		}
 	}
 
-	// If we know the default browser, try ONLY that browser's cookies.
+	// If we know the default browser, try only that browser cookie set.
 	if (defaultBrowser) {
 		const result = await tryBrowserInfo(defaultBrowser);
 		if (result) return result;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@clubnet/seedclub",
-  "version": "0.2.16",
-  "description": "The Human+ Venture Network — AI agent for deal sourcing, research, and signal tracking",
+  "version": "0.2.18",
+  "description": "A branded command-line agent wrapper around pi, with integrated Seed Club commands, tools, and app actions",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -17,7 +17,7 @@
     "postinstall": "node postinstall.js"
   },
   "dependencies": {
-    "@mariozechner/pi-coding-agent": "0.52.12"
+    "@mariozechner/pi-coding-agent": "0.65.2"
   },
   "engines": {
     "node": ">=22.0.0"