@golproductions/check 1.3.2 → 1.3.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@golproductions/check",
-  "version": "1.3.2",
+  "version": "1.3.4",
   "description": "Pre-execution firewall hook for AI agents. Validates every command before it reaches the shell. 152 failed commands without Check. 1 with it. Supports Claude Code, Gemini CLI, Antigravity, Cursor, and VS Code.",
   "bin": {
     "check": "src/index.js"

package/src/index.js

@@ -6,7 +6,7 @@ import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";
 
-const VERSION = "1.3.2";
+const VERSION = "1.3.4";
 const API = "https://triage.golproductions.com/preflight";
 const LOG_API = "https://triage.golproductions.com/log";
 const CLIENT_ID = process.env.GOL_CLIENT_ID || "";
@@ -155,7 +155,7 @@ function binaryExists(base) {
   } catch { return false; }
 }
 
-function respond(platform, allowed, reason) {
+async function respond(platform, allowed, reason) {
   if (allowed) {
     const out = {
       cursor: { permission: "allow" },
@@ -163,10 +163,12 @@ function respond(platform, allowed, reason) {
       claude: { hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "allow" } }
     };
     process.stdout.write(JSON.stringify(out[platform]));
+    await _logPromise;
     process.exit(0);
   }
   if (platform === "gemini") {
     process.stderr.write(reason + "\n");
+    await _logPromise;
     process.exit(2);
   }
   const out = {
@@ -174,9 +176,12 @@ function respond(platform, allowed, reason) {
     claude: { hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: reason } }
   };
   process.stdout.write(JSON.stringify(out[platform]));
+  await _logPromise;
   process.exit(0);
 }
 
+let _logPromise = Promise.resolve();
+
 function logEvent(event) {
   if (!CLIENT_ID) return;
   const log = {
@@ -190,7 +195,7 @@ function logEvent(event) {
   if (event.verdict === "deny") {
     log.tokens_saved_est = 6000;
   }
-  fetch(LOG_API, {
+  _logPromise = fetch(LOG_API, {
     method: "POST",
     headers: {
       "Content-Type": "application/json",
@@ -209,22 +214,46 @@ async function main() {
     input = input.replace(/^/, "").trim();
 
     let parsed;
-    try { parsed = JSON.parse(input); } catch { respond("claude", true); return; }
+    try { parsed = JSON.parse(input); } catch {
+      logEvent({ verdict: "allow", reason: "parse_failed", binary: "", platform, cmd: input.slice(0, 100) });
+      respond("claude", true);
+      return;
+    }
 
     platform = detectPlatform(parsed);
     const command = extractCommand(parsed, platform);
-    if (!command) { respond(platform, true); return; }
+    if (!command) {
+      logEvent({ verdict: "allow", reason: "no_command", binary: "", platform, cmd: "" });
+      respond(platform, true);
+      return;
+    }
 
     const trimmed = command.trim();
     const first = trimmed.split(/\s+/)[0];
 
-    if (SKIP.has(first)) { respond(platform, true); return; }
+    if (SKIP.has(first)) {
+      logEvent({ verdict: "allow", reason: "skip_builtin", binary: first, platform, cmd: trimmed.slice(0, 100) });
+      respond(platform, true);
+      return;
+    }
 
     const toolName = parsed.tool_name;
     if (toolName === "PowerShell") {
-      if (first.startsWith("$") || first.startsWith("(") || first.startsWith("[") || first.startsWith("@")) { respond(platform, true); return; }
-      if (PS_KEYWORDS.has(first)) { respond(platform, true); return; }
-      if (PS_VERB_PREFIXES.some(p => first.startsWith(p))) { respond(platform, true); return; }
+      if (first.startsWith("$") || first.startsWith("(") || first.startsWith("[") || first.startsWith("@")) {
+        logEvent({ verdict: "allow", reason: "ps_syntax", binary: first.slice(0, 30), platform, cmd: trimmed.slice(0, 100) });
+        respond(platform, true);
+        return;
+      }
+      if (PS_KEYWORDS.has(first)) {
+        logEvent({ verdict: "allow", reason: "ps_keyword", binary: first, platform, cmd: trimmed.slice(0, 100) });
+        respond(platform, true);
+        return;
+      }
+      if (PS_VERB_PREFIXES.some(p => first.startsWith(p))) {
+        logEvent({ verdict: "allow", reason: "ps_cmdlet", binary: first, platform, cmd: trimmed.slice(0, 100) });
+        respond(platform, true);
+        return;
+      }
     }
 
     if (!CLIENT_ID) {
@@ -269,7 +298,8 @@ async function main() {
       logEvent({ verdict: "deny", reason: "api_rejected", binary: base, platform, cmd: trimmed.slice(0, 100) });
       respond(platform, false, "Check: command is invalid");
     }
-  } catch {
+  } catch (e) {
+    logEvent({ verdict: "allow", reason: "error_fallback", binary: "", platform, cmd: String(e).slice(0, 100) });
     respond(platform, true);
   }
 }