seedcode-cli 8.2.5__tar.gz → 9.1.1__tar.gz

{seedcode_cli-8.2.5 → seedcode_cli-9.1.1}/.gitignore

@@ -63,12 +63,20 @@ Desktop.ini
 .vscode/
 .claude/
 
-# Scratch / temporary artifacts
+# Scratch / temporary artifacts (never part of a release)
+# _verify/ holds throwaway virtualenvs and clean-home install tests used while
+# validating a release build. It must stay out of the tree's package inputs:
+# hatchling's sdist includes untracked, non-ignored files, so leaving a scratch
+# venv here would otherwise end up inside the source distribution.
+_verify/
 *.tmp
 *.bak
 *.orig
 *.rej
 *.crdownload
+_scratch*
+/probe*
+errorlevel
 opencode.txt
 V6.2.0/
 newupdatec6.2.5/

{seedcode_cli-8.2.5 → seedcode_cli-9.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.5
+Metadata-Version: 2.4
 Name: seedcode-cli
-Version: 8.2.5
+Version: 9.1.1
 Summary: Seed Code — a premium terminal-based AI coding assistant. Plant ideas. Grow code.
 Project-URL: Homepage, https://github.com/Alshahriar-07/seedcode-cli
 Project-URL: Repository, https://github.com/Alshahriar-07/seedcode-cli
@@ -55,7 +55,7 @@ Description-Content-Type: text/markdown
 > *Plant ideas. Grow code.*
 
 Seed Code is a premium terminal-based AI coding assistant and task runner.
-v8.2.5 exposes exactly **two modes** — **Chat Mode** and **Agent Mode** — over a
+v9.1.1 exposes exactly **two modes** — **Chat Mode** and **Agent Mode** — over a
 multi-provider, multi-model engine, behind the Seed Code startup logo and a
 compact block of live session state.
 
@@ -95,7 +95,22 @@ remain accepted aliases, but nothing in the UI presents a third mode.
   `AI > ✓ Tests passed`) whose lines appear only when the underlying operation
   really starts. There is no manual to-do list to create or manage, and
   completing a task never closes the application.
-- **Version:** 8.2.5 (`seedcode --version`)
+- **Intent-driven, not tool-eager:** every turn is classified (conversation,
+  research, coding, computer) before anything runs, and only the capability
+  that intent actually needs is offered to the model. A question never reads
+  your project; a coding task never sees the browser tools.
+- **Chat → Agent escalation, and back:** a request sent in Chat Mode that has
+  to *execute* something runs with the agent engine and then returns to Chat
+  Mode. An explicit `/agent on` stays on until you turn it off.
+- **Internet access when it is actually needed:** a research request can search
+  and read current sources in both Chat and Agent Mode — keyless search,
+  URL-attributed and character-budgeted context, and
+  `SEEDCODE_DISABLE_INTERNET=1` to turn it off. Progress is shown while it
+  works.
+- **Permissions that stick:** the permission panel offers Allow, Allow Session
+  and Allow All, and an approved scope is no longer forgotten when a new agent
+  engine is created.
+- **Version:** 9.1.1 (`seedcode --version`)
 
 ## Installation
 
@@ -154,8 +169,8 @@ Python required) and both run the same CLI:
 
 | Download | What it is |
 | --- | --- |
-| `SeedCode-CLI-Setup-8.2.5.exe` | **Setup installer (recommended).** A wizard that installs to Program Files, adds Seed Code to the system `PATH`, creates a Start Menu shortcut with an optional desktop shortcut, verifies the installation before reporting success, and ships a clean uninstaller that never deletes your project data silently. |
-| `SeedCode-CLI-8.2.5-windows-x64.exe` | **Standalone executable.** A single portable `seedcode.exe` — no installation and no admin rights. The Windows IRM installer above downloads exactly this file. Run it directly from wherever you put it. |
+| `SeedCode-CLI-Setup-9.1.1.exe` | **Setup installer (recommended).** A wizard that installs to Program Files, adds Seed Code to the system `PATH`, creates a Start Menu shortcut with an optional desktop shortcut, verifies the installation before reporting success, and ships a clean uninstaller that never deletes your project data silently. |
+| `SeedCode-CLI-9.1.1-windows-x64.exe` | **Standalone executable.** A single portable `seedcode.exe` — no installation and no admin rights. The Windows IRM installer above downloads exactly this file. Run it directly from wherever you put it. |
 
 Both are published on the
 [Releases page](https://github.com/Alshahriar-07/seedcode-cli/releases) with
@@ -164,7 +179,7 @@ their SHA256 in `SHA256SUMS.txt`.
 After installing by any route:
 
 ```bash
-seedcode --version    # -> Seed Code CLI 8.2.5
+seedcode --version    # -> Seed Code CLI 9.1.1
 ```
 
 > **`seedcode` not recognized?** Open a *new* terminal. `PATH` changes only
@@ -187,6 +202,30 @@ seedcode
 seedcode
 ```
 
+On first launch Seed Code asks where it may work:
+
+```text
+  Select Workspace
+  --------------------------------------------------------------
+  Where should Seed Code work? Agent Mode reads, writes, indexes and
+  runs commands only inside the folder you pick.
+
+    1  Current Folder    D:\Projects\my-site
+    2  Choose a Folder   browse this PC and pick any directory
+
+  Select [1] >
+```
+
+`Current Folder` keeps the directory you launched from. `Choose a Folder` opens
+your operating system's native folder picker and makes the chosen directory the
+**workspace** — the single root for Agent Mode, file reads and writes, project
+indexing, the `.seedcode` context and `plan.md`, terminal commands and
+verification. Nothing outside that root is touched without permission.
+
+Automation is never blocked: `SEEDCODE_WORKSPACE=<dir>` selects the workspace
+directly, and `SEEDCODE_NO_WORKSPACE_PROMPT=1` (or a non-interactive host) keeps
+the launch directory.
+
 You land in the persistent Seed Code workspace: a fixed header carrying the
 Seed Code ASCII logo, a scrolling conversation region and a fixed message
 composer. The header is a live dashboard — it never scrolls away, and its
@@ -194,7 +233,7 @@ values (provider, model, mode, status, workspace, context budget and the masked
 API key) update in place the moment they change.
 
 ```text
-╭─ Seed Code CLI v8.2.5 ───────────────────────────────────────────────────────────────────────╮
+╭─ Seed Code CLI v9.1.1 ───────────────────────────────────────────────────────────────────────╮
 │    ▄█████ ▄▄▄▄▄ ▄▄▄▄▄ ▄▄▄▄    ▄█████  ▄▄▄  ▄▄▄▄  ▄▄▄▄▄   ▄█████ ██     ██                    │
 │    ▀▀▀▄▄▄ ██▄▄  ██▄▄  ██▀██   ██     ██▀██ ██▀██ ██▄▄    ██     ██     ██                    │
 │    █████▀ ██▄▄▄ ██▄▄▄ ████▀   ▀█████ ▀███▀ ████▀ ██▄▄▄   ▀█████ ██████ ██                    │
@@ -243,12 +282,12 @@ Below is the rendering used when the persistent interface is not available — a
 piped host, `SEEDCODE_NO_TUI=1`, or a console that cannot draw it:
 
 ```text
-╭─ Seed Code CLI v8.2.5 ───────────────────────────────────────────────────────────────────────╮
+╭─ Seed Code CLI v9.1.1 ───────────────────────────────────────────────────────────────────────╮
 │    ▄█████ ▄▄▄▄▄ ▄▄▄▄▄ ▄▄▄▄    ▄█████  ▄▄▄  ▄▄▄▄  ▄▄▄▄▄   ▄█████ ██     ██                    │
 │    ▀▀▀▄▄▄ ██▄▄  ██▄▄  ██▀██   ██     ██▀██ ██▀██ ██▄▄    ██     ██     ██                    │
 │    █████▀ ██▄▄▄ ██▄▄▄ ████▀   ▀█████ ▀███▀ ████▀ ██▄▄▄   ▀█████ ██████ ██                    │
 │                                                                                              │
-│ Seed Code CLI v8.2.5                                                                         │
+│ Seed Code CLI v9.1.1                                                                         │
 │ Plant ideas. Grow code.                                                                      │
 │ Provider   OpenRouter                                                                        │
 │ Model      cohere/north-mini-code:free                                                       │
@@ -281,14 +320,18 @@ own status, and its own credential slot. It resolves its credential itself,
 in this order:
 
 1. a key stored in Default's own slot (advanced/manual use);
-2. the embedded Seed Code release credential (release artifacts only);
+2. the embedded Seed Code release credential — carried by the Windows
+   standalone EXE and the Setup installer only. The wheel and sdist
+   deliberately never carry it: the build refuses to package the generated
+   credential module, so a `pip install` is always a credential-free build;
 3. `OPENROUTER_API_KEY` / `SEEDCODE_DEFAULT_API_KEY` in the environment.
 
 It never reads or writes another provider's configuration, and no other
 provider inherits Default's credential. If a build carries no built-in
-credential (a source checkout, for example), Default says so plainly instead
-of failing with an authentication error — pick OpenRouter and add your own
-key.
+credential (a source checkout or a `pip install`), Default says so plainly
+instead of failing with an authentication error — pick OpenRouter and add your
+own key. On the Windows EXE and Setup installer the credential is present, so
+a fresh install is usable on the Default provider immediately.
 
 ### Your own API key
 
@@ -314,7 +357,7 @@ configuration.
 
 | Provider | API key | Best for |
 | --- | --- | --- |
-| **Default** | not required | Working immediately on a release install (`cohere/north-mini-code:free`) |
+| **Default** | not required | Working immediately on a Windows EXE/Setup install (`cohere/north-mini-code:free`) |
 | [OpenRouter](https://openrouter.ai) | required | A broad catalogue of free and paid models |
 | FreeModel Claude | required | Claude-family models through FreeModel |
 | FreeModel Codex | required | GPT/Codex models through FreeModel |
@@ -345,6 +388,82 @@ Permission modes (view/set with `/permission`):
 | `desktop` | Add desktop automation capability after confirmation |
 | `full_system` | Allow broader computer and filesystem actions after confirmation |
 
+### Permission scopes
+
+The permission panel is a bounded TUI component shown between the conversation
+and the composer, inside the same application (never a nested prompt):
+
+```text
+╭─ Agent Action ───────────────────────────────────────────────╮
+│ Agent wants to run:                                          │
+│ npm install                                                  │
+│ Reason: Run command                                          │
+│   ❯ Allow Once       approve this action only                │
+│     Always Allow     this action type, this session          │
+│     Allow All        every action type, this session         │
+│     Deny             block this action                       │
+│   Enter allow · a allow session · A allow all · d deny        │
+╰──────────────────────────────────────────────────────────────╯
+```
+
+- **Allow Once** approves the single action.
+- **Always Allow** approves that action type until you exit.
+- **Allow All** approves every action type until you exit.
+
+Both broader scopes are in-memory session grants: they are never written to
+`config.json`, and closing Seed Code clears them. Only the agent turn waits —
+the event loop, the header and the composer stay live while you decide.
+Harmless read operations (reading project files, listing directories, searching
+sources, inspecting structure) do not prompt; consequential actions do.
+
+## Intent and capability selection
+
+Before a turn runs, Seed Code classifies it — deterministically, without calling
+the model:
+
+| Intent | Example | What it may reach for |
+| --- | --- | --- |
+| conversation | "How do I fix the provider switching bug?" | nothing; it answers |
+| research | "What changed in the latest Node.js release?" | web search and fetch |
+| coding | "Fix the provider switching bug." | project files, terminal |
+| computer | "Play this song on YouTube." | browser/desktop, web |
+
+The classification decides which tools are advertised (the **minimum-tool
+principle**), whether project context is loaded, and whether the workspace and
+desktop capabilities are available at all. Two consequences matter in practice:
+
+- **No unnecessary file access.** A question never causes your project to be
+  read; the project index and workspace context are only loaded for a turn that
+  is actually about the project.
+- **No unnecessary escalation.** A research question is answered in Chat Mode —
+  it does not turn into an agent task.
+
+When a Chat Mode request is one that executes something, that single turn is
+handed to the agent engine and control is handed back afterwards:
+
+```text
+You > Fix the provider switching bug in src/providers.py
+
+AI > [Agent assist - the request asks for a change to the project]
+     ··· the agent inspects, edits and verifies ···
+AI > [Temporary agent task finished - back to Chat Mode]
+```
+
+## Internet access
+
+Seed Code can retrieve current external information when a turn's intent needs
+it, in **both** modes:
+
+- **Chat Mode** retrieves sources before answering and shows its progress
+  (`[Accessing internet...]`, `[Reading relevant sources...]`).
+- **Agent Mode** exposes `web_search` and `web_fetch` as read-only tools to
+  research and computer turns only. A coding turn never sees them.
+
+Retrieval is keyless (no search API key is required or asked for), the retrieved
+text is attributed by URL and capped to a character budget before it reaches the
+prompt, and every failure path degrades to "no results" instead of an error.
+`SEEDCODE_DISABLE_INTERNET=1` disables the capability for a session.
+
 ## Workspace coding (part of Agent Mode)
 
 Agent Mode is a real coding agent for the current project. Your working
@@ -461,7 +580,7 @@ sequential console Agent Mode additionally shows the plan as a checklist. Both
 reflect what the agent really did:
 
 ```text
-╭─ SEEDCODE 8.2.5 • AGENT MODE ───────────────╮
+╭─ SEEDCODE 9.1.1 • AGENT MODE ───────────────╮
 │ ● RUNNING   Task 3/8   Build authentication │
 │   ████████████░░░░  72% • 4m 32s • 18 calls │
 │ → Running: pytest tests/auth                │
@@ -702,21 +821,21 @@ stage fails loudly on a version mismatch, so a stale binary can never ship.
 
 Details: [`scripts/windows/README.md`](scripts/windows/README.md).
 
-### Release artifacts (v8.2.5)
+### Release artifacts (v9.1.1)
 
-Release: [v8.2.5](https://github.com/Alshahriar-07/seedcode-cli/releases/tag/v8.2.5)
+Release: [v9.1.1](https://github.com/Alshahriar-07/seedcode-cli/releases/tag/v9.1.1)
 
 | Artifact | Purpose |
 | --- | --- |
-| `SeedCode-CLI-Setup-8.2.5.exe` | Windows installer (Inno Setup) |
-| `SeedCode-CLI-8.2.5-windows-x64.exe` | Standalone Windows EXE — downloaded by the Windows IRM installer |
-| `seedcode_cli-8.2.5-py3-none-any.whl` | Python wheel — downloaded by the Linux IRM installer |
-| `seedcode_cli-8.2.5.tar.gz` | Python source distribution |
+| `SeedCode-CLI-Setup-9.1.1.exe` | Windows installer (Inno Setup) |
+| `SeedCode-CLI-9.1.1-windows-x64.exe` | Standalone Windows EXE — downloaded by the Windows IRM installer |
+| `seedcode_cli-9.1.1-py3-none-any.whl` | Python wheel — downloaded by the Linux IRM installer |
+| `seedcode_cli-9.1.1.tar.gz` | Python source distribution |
 | `SHA256SUMS.txt` | SHA256 checksums; verified by both installers |
 
-Built artifacts are collected in `dist/release/8.2.5/` during a release
+Built artifacts are collected in `dist/release/9.1.1/` during a release
 build. Publishing (GitHub Release) is a separate step; the remote installers
-read the release named `v8.2.5`.
+read the release named `v9.1.1`.
 
 ### The remote installers
 
@@ -738,8 +857,9 @@ read the release named `v8.2.5`.
   Run `/provider`. Default needs a built-in credential (release builds have
   one); OpenRouter/FreeModel/AeroLink need your own key.
 - **Default says the built-in connection is unavailable** — this build has no
-  embedded credential. Run `/provider` and choose OpenRouter, or set
-  `OPENROUTER_API_KEY`.
+  embedded credential. The Windows EXE and Setup installer carry one; the
+  wheel and sdist deliberately do not. Run `/provider` and choose OpenRouter,
+  or set `OPENROUTER_API_KEY` (or `SEEDCODE_DEFAULT_API_KEY`).
 - **401/403 errors** — your key is invalid or lacks access; `/apikey` to
   replace it, `/doctor` for diagnostics.
 - **402 errors** — the model needs credits; `/model` and pick a free model
@@ -761,6 +881,13 @@ read the release named `v8.2.5`.
 - Keys are shown masked (`sk-or-••••••••`) or not at all — never in full,
   never in logs, never in error messages, never in a release artifact.
 - Computer actions pass permission checks, verification, and retry limits.
+- Internet retrieval is keyless, URL-attributed, character-budgeted, and
+  disableable with `SEEDCODE_DISABLE_INTERNET=1`; it never caches retrieved
+  pages to disk.
+- Permission scope grants (Allow Session / Allow All) are in-memory only and are
+  never persisted to `config.json`.
+- The built-in Default credential's state is reported as available / missing /
+  invalid / unavailable — never as a value.
 - `.seedcode/` memory refuses secret-looking fields at write time.
 - The release build consumes the local `.env` only during packaging; the
   secret never enters source control, logs, manifests, or package metadata.

{seedcode_cli-8.2.5 → seedcode_cli-9.1.1}/README.md

@@ -6,7 +6,7 @@
 > *Plant ideas. Grow code.*
 
 Seed Code is a premium terminal-based AI coding assistant and task runner.
-v8.2.5 exposes exactly **two modes** — **Chat Mode** and **Agent Mode** — over a
+v9.1.1 exposes exactly **two modes** — **Chat Mode** and **Agent Mode** — over a
 multi-provider, multi-model engine, behind the Seed Code startup logo and a
 compact block of live session state.
 
@@ -46,7 +46,22 @@ remain accepted aliases, but nothing in the UI presents a third mode.
   `AI > ✓ Tests passed`) whose lines appear only when the underlying operation
   really starts. There is no manual to-do list to create or manage, and
   completing a task never closes the application.
-- **Version:** 8.2.5 (`seedcode --version`)
+- **Intent-driven, not tool-eager:** every turn is classified (conversation,
+  research, coding, computer) before anything runs, and only the capability
+  that intent actually needs is offered to the model. A question never reads
+  your project; a coding task never sees the browser tools.
+- **Chat → Agent escalation, and back:** a request sent in Chat Mode that has
+  to *execute* something runs with the agent engine and then returns to Chat
+  Mode. An explicit `/agent on` stays on until you turn it off.
+- **Internet access when it is actually needed:** a research request can search
+  and read current sources in both Chat and Agent Mode — keyless search,
+  URL-attributed and character-budgeted context, and
+  `SEEDCODE_DISABLE_INTERNET=1` to turn it off. Progress is shown while it
+  works.
+- **Permissions that stick:** the permission panel offers Allow, Allow Session
+  and Allow All, and an approved scope is no longer forgotten when a new agent
+  engine is created.
+- **Version:** 9.1.1 (`seedcode --version`)
 
 ## Installation
 
@@ -105,8 +120,8 @@ Python required) and both run the same CLI:
 
 | Download | What it is |
 | --- | --- |
-| `SeedCode-CLI-Setup-8.2.5.exe` | **Setup installer (recommended).** A wizard that installs to Program Files, adds Seed Code to the system `PATH`, creates a Start Menu shortcut with an optional desktop shortcut, verifies the installation before reporting success, and ships a clean uninstaller that never deletes your project data silently. |
-| `SeedCode-CLI-8.2.5-windows-x64.exe` | **Standalone executable.** A single portable `seedcode.exe` — no installation and no admin rights. The Windows IRM installer above downloads exactly this file. Run it directly from wherever you put it. |
+| `SeedCode-CLI-Setup-9.1.1.exe` | **Setup installer (recommended).** A wizard that installs to Program Files, adds Seed Code to the system `PATH`, creates a Start Menu shortcut with an optional desktop shortcut, verifies the installation before reporting success, and ships a clean uninstaller that never deletes your project data silently. |
+| `SeedCode-CLI-9.1.1-windows-x64.exe` | **Standalone executable.** A single portable `seedcode.exe` — no installation and no admin rights. The Windows IRM installer above downloads exactly this file. Run it directly from wherever you put it. |
 
 Both are published on the
 [Releases page](https://github.com/Alshahriar-07/seedcode-cli/releases) with
@@ -115,7 +130,7 @@ their SHA256 in `SHA256SUMS.txt`.
 After installing by any route:
 
 ```bash
-seedcode --version    # -> Seed Code CLI 8.2.5
+seedcode --version    # -> Seed Code CLI 9.1.1
 ```
 
 > **`seedcode` not recognized?** Open a *new* terminal. `PATH` changes only
@@ -138,6 +153,30 @@ seedcode
 seedcode
 ```
 
+On first launch Seed Code asks where it may work:
+
+```text
+  Select Workspace
+  --------------------------------------------------------------
+  Where should Seed Code work? Agent Mode reads, writes, indexes and
+  runs commands only inside the folder you pick.
+
+    1  Current Folder    D:\Projects\my-site
+    2  Choose a Folder   browse this PC and pick any directory
+
+  Select [1] >
+```
+
+`Current Folder` keeps the directory you launched from. `Choose a Folder` opens
+your operating system's native folder picker and makes the chosen directory the
+**workspace** — the single root for Agent Mode, file reads and writes, project
+indexing, the `.seedcode` context and `plan.md`, terminal commands and
+verification. Nothing outside that root is touched without permission.
+
+Automation is never blocked: `SEEDCODE_WORKSPACE=<dir>` selects the workspace
+directly, and `SEEDCODE_NO_WORKSPACE_PROMPT=1` (or a non-interactive host) keeps
+the launch directory.
+
 You land in the persistent Seed Code workspace: a fixed header carrying the
 Seed Code ASCII logo, a scrolling conversation region and a fixed message
 composer. The header is a live dashboard — it never scrolls away, and its
@@ -145,7 +184,7 @@ values (provider, model, mode, status, workspace, context budget and the masked
 API key) update in place the moment they change.
 
 ```text
-╭─ Seed Code CLI v8.2.5 ───────────────────────────────────────────────────────────────────────╮
+╭─ Seed Code CLI v9.1.1 ───────────────────────────────────────────────────────────────────────╮
 │    ▄█████ ▄▄▄▄▄ ▄▄▄▄▄ ▄▄▄▄    ▄█████  ▄▄▄  ▄▄▄▄  ▄▄▄▄▄   ▄█████ ██     ██                    │
 │    ▀▀▀▄▄▄ ██▄▄  ██▄▄  ██▀██   ██     ██▀██ ██▀██ ██▄▄    ██     ██     ██                    │
 │    █████▀ ██▄▄▄ ██▄▄▄ ████▀   ▀█████ ▀███▀ ████▀ ██▄▄▄   ▀█████ ██████ ██                    │
@@ -194,12 +233,12 @@ Below is the rendering used when the persistent interface is not available — a
 piped host, `SEEDCODE_NO_TUI=1`, or a console that cannot draw it:
 
 ```text
-╭─ Seed Code CLI v8.2.5 ───────────────────────────────────────────────────────────────────────╮
+╭─ Seed Code CLI v9.1.1 ───────────────────────────────────────────────────────────────────────╮
 │    ▄█████ ▄▄▄▄▄ ▄▄▄▄▄ ▄▄▄▄    ▄█████  ▄▄▄  ▄▄▄▄  ▄▄▄▄▄   ▄█████ ██     ██                    │
 │    ▀▀▀▄▄▄ ██▄▄  ██▄▄  ██▀██   ██     ██▀██ ██▀██ ██▄▄    ██     ██     ██                    │
 │    █████▀ ██▄▄▄ ██▄▄▄ ████▀   ▀█████ ▀███▀ ████▀ ██▄▄▄   ▀█████ ██████ ██                    │
 │                                                                                              │
-│ Seed Code CLI v8.2.5                                                                         │
+│ Seed Code CLI v9.1.1                                                                         │
 │ Plant ideas. Grow code.                                                                      │
 │ Provider   OpenRouter                                                                        │
 │ Model      cohere/north-mini-code:free                                                       │
@@ -232,14 +271,18 @@ own status, and its own credential slot. It resolves its credential itself,
 in this order:
 
 1. a key stored in Default's own slot (advanced/manual use);
-2. the embedded Seed Code release credential (release artifacts only);
+2. the embedded Seed Code release credential — carried by the Windows
+   standalone EXE and the Setup installer only. The wheel and sdist
+   deliberately never carry it: the build refuses to package the generated
+   credential module, so a `pip install` is always a credential-free build;
 3. `OPENROUTER_API_KEY` / `SEEDCODE_DEFAULT_API_KEY` in the environment.
 
 It never reads or writes another provider's configuration, and no other
 provider inherits Default's credential. If a build carries no built-in
-credential (a source checkout, for example), Default says so plainly instead
-of failing with an authentication error — pick OpenRouter and add your own
-key.
+credential (a source checkout or a `pip install`), Default says so plainly
+instead of failing with an authentication error — pick OpenRouter and add your
+own key. On the Windows EXE and Setup installer the credential is present, so
+a fresh install is usable on the Default provider immediately.
 
 ### Your own API key
 
@@ -265,7 +308,7 @@ configuration.
 
 | Provider | API key | Best for |
 | --- | --- | --- |
-| **Default** | not required | Working immediately on a release install (`cohere/north-mini-code:free`) |
+| **Default** | not required | Working immediately on a Windows EXE/Setup install (`cohere/north-mini-code:free`) |
 | [OpenRouter](https://openrouter.ai) | required | A broad catalogue of free and paid models |
 | FreeModel Claude | required | Claude-family models through FreeModel |
 | FreeModel Codex | required | GPT/Codex models through FreeModel |
@@ -296,6 +339,82 @@ Permission modes (view/set with `/permission`):
 | `desktop` | Add desktop automation capability after confirmation |
 | `full_system` | Allow broader computer and filesystem actions after confirmation |
 
+### Permission scopes
+
+The permission panel is a bounded TUI component shown between the conversation
+and the composer, inside the same application (never a nested prompt):
+
+```text
+╭─ Agent Action ───────────────────────────────────────────────╮
+│ Agent wants to run:                                          │
+│ npm install                                                  │
+│ Reason: Run command                                          │
+│   ❯ Allow Once       approve this action only                │
+│     Always Allow     this action type, this session          │
+│     Allow All        every action type, this session         │
+│     Deny             block this action                       │
+│   Enter allow · a allow session · A allow all · d deny        │
+╰──────────────────────────────────────────────────────────────╯
+```
+
+- **Allow Once** approves the single action.
+- **Always Allow** approves that action type until you exit.
+- **Allow All** approves every action type until you exit.
+
+Both broader scopes are in-memory session grants: they are never written to
+`config.json`, and closing Seed Code clears them. Only the agent turn waits —
+the event loop, the header and the composer stay live while you decide.
+Harmless read operations (reading project files, listing directories, searching
+sources, inspecting structure) do not prompt; consequential actions do.
+
+## Intent and capability selection
+
+Before a turn runs, Seed Code classifies it — deterministically, without calling
+the model:
+
+| Intent | Example | What it may reach for |
+| --- | --- | --- |
+| conversation | "How do I fix the provider switching bug?" | nothing; it answers |
+| research | "What changed in the latest Node.js release?" | web search and fetch |
+| coding | "Fix the provider switching bug." | project files, terminal |
+| computer | "Play this song on YouTube." | browser/desktop, web |
+
+The classification decides which tools are advertised (the **minimum-tool
+principle**), whether project context is loaded, and whether the workspace and
+desktop capabilities are available at all. Two consequences matter in practice:
+
+- **No unnecessary file access.** A question never causes your project to be
+  read; the project index and workspace context are only loaded for a turn that
+  is actually about the project.
+- **No unnecessary escalation.** A research question is answered in Chat Mode —
+  it does not turn into an agent task.
+
+When a Chat Mode request is one that executes something, that single turn is
+handed to the agent engine and control is handed back afterwards:
+
+```text
+You > Fix the provider switching bug in src/providers.py
+
+AI > [Agent assist - the request asks for a change to the project]
+     ··· the agent inspects, edits and verifies ···
+AI > [Temporary agent task finished - back to Chat Mode]
+```
+
+## Internet access
+
+Seed Code can retrieve current external information when a turn's intent needs
+it, in **both** modes:
+
+- **Chat Mode** retrieves sources before answering and shows its progress
+  (`[Accessing internet...]`, `[Reading relevant sources...]`).
+- **Agent Mode** exposes `web_search` and `web_fetch` as read-only tools to
+  research and computer turns only. A coding turn never sees them.
+
+Retrieval is keyless (no search API key is required or asked for), the retrieved
+text is attributed by URL and capped to a character budget before it reaches the
+prompt, and every failure path degrades to "no results" instead of an error.
+`SEEDCODE_DISABLE_INTERNET=1` disables the capability for a session.
+
 ## Workspace coding (part of Agent Mode)
 
 Agent Mode is a real coding agent for the current project. Your working
@@ -412,7 +531,7 @@ sequential console Agent Mode additionally shows the plan as a checklist. Both
 reflect what the agent really did:
 
 ```text
-╭─ SEEDCODE 8.2.5 • AGENT MODE ───────────────╮
+╭─ SEEDCODE 9.1.1 • AGENT MODE ───────────────╮
 │ ● RUNNING   Task 3/8   Build authentication │
 │   ████████████░░░░  72% • 4m 32s • 18 calls │
 │ → Running: pytest tests/auth                │
@@ -653,21 +772,21 @@ stage fails loudly on a version mismatch, so a stale binary can never ship.
 
 Details: [`scripts/windows/README.md`](scripts/windows/README.md).
 
-### Release artifacts (v8.2.5)
+### Release artifacts (v9.1.1)
 
-Release: [v8.2.5](https://github.com/Alshahriar-07/seedcode-cli/releases/tag/v8.2.5)
+Release: [v9.1.1](https://github.com/Alshahriar-07/seedcode-cli/releases/tag/v9.1.1)
 
 | Artifact | Purpose |
 | --- | --- |
-| `SeedCode-CLI-Setup-8.2.5.exe` | Windows installer (Inno Setup) |
-| `SeedCode-CLI-8.2.5-windows-x64.exe` | Standalone Windows EXE — downloaded by the Windows IRM installer |
-| `seedcode_cli-8.2.5-py3-none-any.whl` | Python wheel — downloaded by the Linux IRM installer |
-| `seedcode_cli-8.2.5.tar.gz` | Python source distribution |
+| `SeedCode-CLI-Setup-9.1.1.exe` | Windows installer (Inno Setup) |
+| `SeedCode-CLI-9.1.1-windows-x64.exe` | Standalone Windows EXE — downloaded by the Windows IRM installer |
+| `seedcode_cli-9.1.1-py3-none-any.whl` | Python wheel — downloaded by the Linux IRM installer |
+| `seedcode_cli-9.1.1.tar.gz` | Python source distribution |
 | `SHA256SUMS.txt` | SHA256 checksums; verified by both installers |
 
-Built artifacts are collected in `dist/release/8.2.5/` during a release
+Built artifacts are collected in `dist/release/9.1.1/` during a release
 build. Publishing (GitHub Release) is a separate step; the remote installers
-read the release named `v8.2.5`.
+read the release named `v9.1.1`.
 
 ### The remote installers
 
@@ -689,8 +808,9 @@ read the release named `v8.2.5`.
   Run `/provider`. Default needs a built-in credential (release builds have
   one); OpenRouter/FreeModel/AeroLink need your own key.
 - **Default says the built-in connection is unavailable** — this build has no
-  embedded credential. Run `/provider` and choose OpenRouter, or set
-  `OPENROUTER_API_KEY`.
+  embedded credential. The Windows EXE and Setup installer carry one; the
+  wheel and sdist deliberately do not. Run `/provider` and choose OpenRouter,
+  or set `OPENROUTER_API_KEY` (or `SEEDCODE_DEFAULT_API_KEY`).
 - **401/403 errors** — your key is invalid or lacks access; `/apikey` to
   replace it, `/doctor` for diagnostics.
 - **402 errors** — the model needs credits; `/model` and pick a free model
@@ -712,6 +832,13 @@ read the release named `v8.2.5`.
 - Keys are shown masked (`sk-or-••••••••`) or not at all — never in full,
   never in logs, never in error messages, never in a release artifact.
 - Computer actions pass permission checks, verification, and retry limits.
+- Internet retrieval is keyless, URL-attributed, character-budgeted, and
+  disableable with `SEEDCODE_DISABLE_INTERNET=1`; it never caches retrieved
+  pages to disk.
+- Permission scope grants (Allow Session / Allow All) are in-memory only and are
+  never persisted to `config.json`.
+- The built-in Default credential's state is reported as available / missing /
+  invalid / unavailable — never as a value.
 - `.seedcode/` memory refuses secret-looking fields at write time.
 - The release build consumes the local `.env` only during packaging; the
   secret never enters source control, logs, manifests, or package metadata.

{seedcode_cli-8.2.5 → seedcode_cli-9.1.1}/npm/README.md

@@ -16,7 +16,7 @@ Releases:
 A compatibility launcher retained for users who already manage tooling through
 npm. It is a thin wrapper around the official release: on Windows it downloads
 the official `SeedCode-CLI-<version>-windows-x64.exe` for this package's
-version (currently **8.2.5**) from the GitHub release, verifies its SHA256
+version (currently **9.1.1**) from the GitHub release, verifies its SHA256
 against the release's `SHA256SUMS.txt`, caches it under `~/.seedcode/npm/`,
 and runs it — Python is never required. On Linux and macOS it defers to the
 official installer rather than shipping a binary.

{seedcode_cli-8.2.5 → seedcode_cli-9.1.1}/pyproject.toml

@@ -93,10 +93,21 @@ path = "seedcode/__init__.py"
 path = "scripts/pyproject_build_hook.py"
 require-runtime-dependencies = false
 
+# Pin Core Metadata 2.4 rather than letting hatchling emit its 2.5 default.
+# Everything this project publishes is expressible in 2.4 (PEP 639's
+# License-Expression / License-File landed in 2.4; only PEP 794's Import-Name /
+# Import-Namespace need 2.5, and this distribution declares neither), while
+# twine 6.x still *hard-caps* the metadata versions it accepts at 2.4 - it
+# monkeypatches packaging._VALID_METADATA_VERSIONS to drop 2.5. The release
+# workflow runs `python -m twine check dist/*` as a publish gate, so a 2.5
+# wheel would fail its own release. 2.4 is the newest version the whole
+# toolchain round-trips.
 [tool.hatch.build.targets.wheel]
 packages = ["seedcode"]
+core-metadata-version = "2.4"
 
 [tool.hatch.build.targets.sdist]
 # The build hook ships in the sdist: pip rebuilds the wheel from the
 # extracted sdist, and hatchling must be able to load the hook there.
 include = ["seedcode", "scripts/pyproject_build_hook.py", "README.md", "LICENSE"]
+core-metadata-version = "2.4"

{seedcode_cli-8.2.5 → seedcode_cli-9.1.1}/scripts/windows/README.md

@@ -76,7 +76,7 @@ Python runtime and every dependency inside it.
 publishes a verified copy to the repository root as the stable
 **`seedcode-cli-setup.exe`**, and stages the versioned copy for release as
 **`SeedCode-CLI-Setup-<version>.exe`** — the name attached to the GitHub
-release for that version (currently **8.2.5**), alongside the standalone
+release for that version (currently **9.1.1**), alongside the standalone
 `SeedCode-CLI-<version>-windows-x64.exe` and `SHA256SUMS.txt` (which is what
 the remote installers verify against).