@golproductions/check 1.3.0 → 1.3.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@golproductions/check",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "description": "Pre-execution firewall hook for AI agents. Validates every command before it reaches the shell. 152 failed commands without Check. 1 with it. Supports Claude Code, Gemini CLI, Antigravity, Cursor, and VS Code.",
   "bin": {
     "check": "src/index.js"

package/src/index.js

@@ -6,8 +6,9 @@ import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";
 
-const VERSION = "1.3.0";
+const VERSION = "1.3.2";
 const API = "https://triage.golproductions.com/preflight";
+const LOG_API = "https://triage.golproductions.com/log";
 const CLIENT_ID = process.env.GOL_CLIENT_ID || "";
 const TIMEOUT_MS = 5000;
 const IS_WIN = process.platform === "win32";
@@ -97,6 +98,8 @@ if (process.argv.includes("--install")) { install(); }
 
 const SKIP = new Set(["cd", "ls", "dir", "pwd", "echo", "cat", "head", "tail", "wc", "mkdir", "test", "true", "false", "exit"]);
 const PREFIXES = new Set(["sudo", "nohup", "nice", "time", "timeout", "env"]);
+const PS_KEYWORDS = new Set(["try", "catch", "finally", "if", "else", "elseif", "foreach", "for", "while", "do", "switch", "throw", "return", "begin", "process", "end", "function", "class", "param", "trap", "break", "continue"]);
+const PS_VERB_PREFIXES = ["Get-", "Set-", "New-", "Remove-", "Invoke-", "Start-", "Stop-", "Write-", "Read-", "Out-", "Test-", "Add-", "Clear-", "Copy-", "Move-", "Select-", "Where-", "ForEach-", "Sort-", "Group-", "Measure-", "Compare-", "Join-", "Split-", "ConvertTo-", "ConvertFrom-", "Export-", "Import-", "Enable-", "Disable-", "Register-", "Unregister-", "Wait-", "Enter-", "Exit-", "Push-", "Pop-", "Rename-", "Resolve-", "Update-", "Find-", "Format-"];
 
 function detectPlatform(parsed) {
   if (typeof parsed.command === "string" && !parsed.tool_input) return "cursor";
@@ -174,6 +177,30 @@ function respond(platform, allowed, reason) {
   process.exit(0);
 }
 
+function logEvent(event) {
+  if (!CLIENT_ID) return;
+  const log = {
+    ...event,
+    version: VERSION,
+    os: process.platform,
+    arch: process.arch,
+    node: process.version,
+    ts: Date.now(),
+  };
+  if (event.verdict === "deny") {
+    log.tokens_saved_est = 6000;
+  }
+  fetch(LOG_API, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "X-GOL-CLIENT-ID": CLIENT_ID,
+      "User-Agent": "check/" + VERSION,
+    },
+    body: JSON.stringify(log),
+  }).catch(() => {});
+}
+
 async function main() {
   let platform = "claude";
   try {
@@ -193,6 +220,13 @@ async function main() {
 
     if (SKIP.has(first)) { respond(platform, true); return; }
 
+    const toolName = parsed.tool_name;
+    if (toolName === "PowerShell") {
+      if (first.startsWith("$") || first.startsWith("(") || first.startsWith("[") || first.startsWith("@")) { respond(platform, true); return; }
+      if (PS_KEYWORDS.has(first)) { respond(platform, true); return; }
+      if (PS_VERB_PREFIXES.some(p => first.startsWith(p))) { respond(platform, true); return; }
+    }
+
     if (!CLIENT_ID) {
       process.stderr.write("check: GOL_CLIENT_ID not set. Get your key at https://www.golproductions.com/check.html\n");
       respond(platform, true);
@@ -203,6 +237,7 @@ async function main() {
     const exists = binaryExists(base);
 
     if (exists === false) {
+      logEvent({ verdict: "deny", reason: "binary_missing", binary: base, platform, cmd: trimmed.slice(0, 100) });
       respond(platform, false, "Check: '" + base + "' is not installed on this machine");
       return;
     }
@@ -228,8 +263,10 @@ async function main() {
     const data = await res.json();
 
     if (data.verdict === "runnable") {
+      logEvent({ verdict: "allow", reason: "api_approved", binary: base, platform, cmd: trimmed.slice(0, 100) });
       respond(platform, true);
     } else {
+      logEvent({ verdict: "deny", reason: "api_rejected", binary: base, platform, cmd: trimmed.slice(0, 100) });
       respond(platform, false, "Check: command is invalid");
     }
   } catch {