@golproductions/check 1.3.1 → 1.3.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@golproductions/check",
-  "version": "1.3.1",
+  "version": "1.3.3",
   "description": "Pre-execution firewall hook for AI agents. Validates every command before it reaches the shell. 152 failed commands without Check. 1 with it. Supports Claude Code, Gemini CLI, Antigravity, Cursor, and VS Code.",
   "bin": {
     "check": "src/index.js"

package/src/index.js

@@ -6,8 +6,9 @@ import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";
 
-const VERSION = "1.3.0";
+const VERSION = "1.3.3";
 const API = "https://triage.golproductions.com/preflight";
+const LOG_API = "https://triage.golproductions.com/log";
 const CLIENT_ID = process.env.GOL_CLIENT_ID || "";
 const TIMEOUT_MS = 5000;
 const IS_WIN = process.platform === "win32";
@@ -176,6 +177,30 @@ function respond(platform, allowed, reason) {
   process.exit(0);
 }
 
+function logEvent(event) {
+  if (!CLIENT_ID) return;
+  const log = {
+    ...event,
+    version: VERSION,
+    os: process.platform,
+    arch: process.arch,
+    node: process.version,
+    ts: Date.now(),
+  };
+  if (event.verdict === "deny") {
+    log.tokens_saved_est = 6000;
+  }
+  fetch(LOG_API, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "X-GOL-CLIENT-ID": CLIENT_ID,
+      "User-Agent": "check/" + VERSION,
+    },
+    body: JSON.stringify(log),
+  }).catch(() => {});
+}
+
 async function main() {
   let platform = "claude";
   try {
@@ -184,22 +209,46 @@ async function main() {
     input = input.replace(/^/, "").trim();
 
     let parsed;
-    try { parsed = JSON.parse(input); } catch { respond("claude", true); return; }
+    try { parsed = JSON.parse(input); } catch {
+      logEvent({ verdict: "allow", reason: "parse_failed", binary: "", platform, cmd: input.slice(0, 100) });
+      respond("claude", true);
+      return;
+    }
 
     platform = detectPlatform(parsed);
     const command = extractCommand(parsed, platform);
-    if (!command) { respond(platform, true); return; }
+    if (!command) {
+      logEvent({ verdict: "allow", reason: "no_command", binary: "", platform, cmd: "" });
+      respond(platform, true);
+      return;
+    }
 
     const trimmed = command.trim();
     const first = trimmed.split(/\s+/)[0];
 
-    if (SKIP.has(first)) { respond(platform, true); return; }
+    if (SKIP.has(first)) {
+      logEvent({ verdict: "allow", reason: "skip_builtin", binary: first, platform, cmd: trimmed.slice(0, 100) });
+      respond(platform, true);
+      return;
+    }
 
     const toolName = parsed.tool_name;
     if (toolName === "PowerShell") {
-      if (first.startsWith("$") || first.startsWith("(") || first.startsWith("[") || first.startsWith("@")) { respond(platform, true); return; }
-      if (PS_KEYWORDS.has(first)) { respond(platform, true); return; }
-      if (PS_VERB_PREFIXES.some(p => first.startsWith(p))) { respond(platform, true); return; }
+      if (first.startsWith("$") || first.startsWith("(") || first.startsWith("[") || first.startsWith("@")) {
+        logEvent({ verdict: "allow", reason: "ps_syntax", binary: first.slice(0, 30), platform, cmd: trimmed.slice(0, 100) });
+        respond(platform, true);
+        return;
+      }
+      if (PS_KEYWORDS.has(first)) {
+        logEvent({ verdict: "allow", reason: "ps_keyword", binary: first, platform, cmd: trimmed.slice(0, 100) });
+        respond(platform, true);
+        return;
+      }
+      if (PS_VERB_PREFIXES.some(p => first.startsWith(p))) {
+        logEvent({ verdict: "allow", reason: "ps_cmdlet", binary: first, platform, cmd: trimmed.slice(0, 100) });
+        respond(platform, true);
+        return;
+      }
     }
 
     if (!CLIENT_ID) {
@@ -212,6 +261,7 @@ async function main() {
     const exists = binaryExists(base);
 
     if (exists === false) {
+      logEvent({ verdict: "deny", reason: "binary_missing", binary: base, platform, cmd: trimmed.slice(0, 100) });
       respond(platform, false, "Check: '" + base + "' is not installed on this machine");
       return;
     }
@@ -237,11 +287,14 @@ async function main() {
     const data = await res.json();
 
     if (data.verdict === "runnable") {
+      logEvent({ verdict: "allow", reason: "api_approved", binary: base, platform, cmd: trimmed.slice(0, 100) });
       respond(platform, true);
     } else {
+      logEvent({ verdict: "deny", reason: "api_rejected", binary: base, platform, cmd: trimmed.slice(0, 100) });
       respond(platform, false, "Check: command is invalid");
     }
-  } catch {
+  } catch (e) {
+    logEvent({ verdict: "allow", reason: "error_fallback", binary: "", platform, cmd: String(e).slice(0, 100) });
     respond(platform, true);
   }
 }