@treeship/sdk 0.2.1 → 0.3.1

package/dist/attest.js

@@ -13,8 +13,10 @@ export class AttestModule {
     }
     async approval(params) {
         const args = ["attest", "approval", "--approver", params.approver, "--description", params.description, "--format", "json"];
-        if (params.expiresIn)
-            args.push("--expires", params.expiresIn);
+        if (params.expires)
+            args.push("--expires", params.expires);
+        if (params.subject)
+            args.push("--subject", params.subject);
         const result = await runTreeship(args);
         return { artifactId: (result.id || result.artifact_id), nonce: result.nonce };
     }

package/dist/ship.d.ts

@@ -1,8 +1,22 @@
 import { AttestModule } from "./attest.js";
 import { VerifyModule } from "./verify.js";
 import { DockModule } from "./dock.js";
+/**
+ * Main entry point for the Treeship TypeScript SDK.
+ *
+ * This SDK shells out to the `treeship` CLI binary, which must be installed
+ * and available on your PATH.  Use {@link Ship.checkCli} to verify the
+ * binary is reachable before calling other methods.
+ */
 export declare class Ship {
     readonly attest: AttestModule;
     readonly verify: VerifyModule;
     readonly dock: DockModule;
+    /**
+     * Checks that the `treeship` CLI binary is available and returns its
+     * version string (e.g. "0.4.1").
+     *
+     * Throws a descriptive error if the binary is not found on PATH.
+     */
+    static checkCli(): Promise<string>;
 }

package/dist/ship.js

@@ -1,8 +1,41 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
 import { AttestModule } from "./attest.js";
 import { VerifyModule } from "./verify.js";
 import { DockModule } from "./dock.js";
+const exec = promisify(execFile);
+/**
+ * Main entry point for the Treeship TypeScript SDK.
+ *
+ * This SDK shells out to the `treeship` CLI binary, which must be installed
+ * and available on your PATH.  Use {@link Ship.checkCli} to verify the
+ * binary is reachable before calling other methods.
+ */
 export class Ship {
     attest = new AttestModule();
     verify = new VerifyModule();
     dock = new DockModule();
+    /**
+     * Checks that the `treeship` CLI binary is available and returns its
+     * version string (e.g. "0.4.1").
+     *
+     * Throws a descriptive error if the binary is not found on PATH.
+     */
+    static async checkCli() {
+        try {
+            const { stdout } = await exec("treeship", ["version"], {
+                timeout: 5_000,
+                env: { ...process.env },
+            });
+            return stdout.trim();
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (msg.includes("ENOENT") || msg.includes("not found")) {
+                throw new Error("treeship CLI binary not found on PATH. " +
+                    "Install it from https://treeship.dev/docs/install before using the SDK.");
+            }
+            throw new Error(`Failed to run 'treeship version': ${msg}`);
+        }
+    }
 }

package/dist/types.d.ts

@@ -8,8 +8,10 @@ export interface ActionParams {
 export interface ApprovalParams {
     approver: string;
     description: string;
-    expiresIn?: string;
-    scope?: string;
+    /** ISO-8601 timestamp when the approval expires (e.g. "2026-12-31T00:00:00Z"). */
+    expires?: string;
+    /** Maps to the CLI --subject flag. Identifies what this approval covers. */
+    subject?: string;
 }
 export interface HandoffParams {
     from: string;

package/dist/verify.js

@@ -1,11 +1,58 @@
-import { runTreeship } from "./exec.js";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+const exec = promisify(execFile);
 export class VerifyModule {
     async verify(id) {
-        const result = await runTreeship(["verify", id, "--format", "json"]);
-        return {
-            outcome: result.outcome === "pass" ? "pass" : result.outcome === "error" ? "error" : "fail",
-            chain: (result.total || result.chain || 1),
-            target: id,
-        };
+        let stdout = "";
+        let stderr = "";
+        try {
+            const result = await exec("treeship", ["verify", id, "--format", "json"], {
+                timeout: 10_000,
+                env: { ...process.env },
+            });
+            stdout = result.stdout;
+        }
+        catch (err) {
+            // Binary not found -- re-throw as operational error
+            if (err instanceof Error && (err.message.includes("ENOENT") || err.message.includes("not found"))) {
+                throw err;
+            }
+            // Non-zero exit: try to parse stdout/stderr for structured output.
+            // The CLI writes JSON to stdout even on verification failure.
+            const execErr = err;
+            stdout = execErr.stdout || "";
+            stderr = execErr.stderr || "";
+            if (!stdout) {
+                // No JSON output at all -- this is an operational error, not a verification failure.
+                throw new Error(`treeship verify failed: ${stderr || (err instanceof Error ? err.message : String(err))}`);
+            }
+        }
+        // Parse the JSON output from the CLI.
+        let parsed;
+        try {
+            parsed = JSON.parse(stdout);
+        }
+        catch {
+            throw new Error(`treeship verify returned invalid JSON: ${stdout.slice(0, 200)}`);
+        }
+        const outcome = parsed.outcome;
+        if (outcome === "pass") {
+            return {
+                outcome: "pass",
+                chain: (parsed.passed || parsed.total || 1),
+                target: id,
+            };
+        }
+        else if (outcome === "fail") {
+            return {
+                outcome: "fail",
+                chain: (parsed.failed || 0),
+                target: id,
+            };
+        }
+        else {
+            // outcome: "error" or unknown -- propagate as operational error
+            throw new Error(`treeship verify error: ${parsed.message || JSON.stringify(parsed)}`);
+        }
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeship/sdk",
-  "version": "0.2.1",
+  "version": "0.3.1",
   "description": "TypeScript SDK for Treeship - portable trust receipts for agent workflows",
   "license": "Apache-2.0",
   "repository": {