treeship 0.20.0 → 0.22.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +6 -5
  2. package/package.json +4 -4
package/README.md CHANGED
@@ -30,8 +30,9 @@ treeship init # one-time, per machine
30
30
  treeship session start # opens a recording session
31
31
  treeship wrap -- npm test # captures the command + exit code + file writes
32
32
  treeship session close # seals the receipt
33
- treeship session report # uploads + prints a shareable URL
34
- treeship verify <url> # anyone can verify, offline, no account
33
+ treeship session report # uploads + prints a shareable URL (requires `treeship hub attach`)
34
+ treeship verify <url> # structural check of a fetched receipt (verdict: structural-pass)
35
+ treeship verify <artifact-id> # full local verification: signatures + chain, offline
35
36
  ```
36
37
 
37
38
  ## Claude Code users
@@ -53,13 +54,13 @@ claude plugin install treeship@treeship
53
54
  - Exit code, duration, error message text on failures
54
55
  - Actor URI (e.g. `agent://claude-code`)
55
56
 
56
- What's **not** captured: raw argument values, raw output content, file contents, environment variable values, secrets. Full inventory at <https://github.com/zerkerlabs/treeship/blob/main/TREESHIP.md>.
57
+ What's **not** captured by the MCP/plugin path: raw argument values, raw output content, file contents, environment variable values, secrets. Note that `treeship wrap` records more: the (sanitized) command line, the last output line as a summary, and modified file paths. Full inventory at <https://github.com/zerkerlabs/treeship/blob/main/TREESHIP.md>.
57
58
 
58
59
  ## Where data lives
59
60
 
60
61
  - Receipts stay in `.treeship/sessions/<id>.treeship` on your machine
61
- - They leave only on explicit `treeship session report`, `treeship hub push`, or with `auto_push: true` configured
62
- - Verification (`treeship package verify`) is pure WASM, runs entirely offline, doesn't phone home
62
+ - They leave on `treeship session report`, `treeship hub push`, with `auto_push: true` configured — or automatically at session end if you use the Claude Code plugin with a hub attached (the SessionEnd hook runs `session report`)
63
+ - Verification (`treeship verify`, `treeship package verify`) runs entirely offline and doesn't phone home. Package verification authenticates the artifacts and Merkle root; the receipt's narrative fields are not signed, and the verifier says so explicitly
63
64
 
64
65
  ## Documentation
65
66
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "treeship",
3
- "version": "0.20.0",
3
+ "version": "0.22.0",
4
4
  "description": "Portable trust receipts for agent workflows",
5
5
  "bin": {
6
6
  "treeship": "./bin/treeship.js"
@@ -19,9 +19,9 @@
19
19
  "linux"
20
20
  ],
21
21
  "optionalDependencies": {
22
- "@treeship/cli-linux-x64": "0.20.0",
23
- "@treeship/cli-darwin-arm64": "0.20.0",
24
- "@treeship/cli-darwin-x64": "0.20.0"
22
+ "@treeship/cli-linux-x64": "0.22.0",
23
+ "@treeship/cli-darwin-arm64": "0.22.0",
24
+ "@treeship/cli-darwin-x64": "0.22.0"
25
25
  },
26
26
  "license": "Apache-2.0",
27
27
  "repository": {