@golproductions/check 3.0.4 → 3.0.6

package/README.md

@@ -11,12 +11,12 @@ No AI inside. Deterministic. Same input, same output. Every time.
 One command. Every IDE.
 
 ```
-npx @golproductions/check --install your_key
+npx @golproductions/check --install YOUR_KEY
 ```
 
-Auto-detects **Claude Code**, **Cursor**, and **Antigravity**. Writes the hook config, sets your key, done. Restart your IDE to activate.
+Auto-detects and configures **Claude Code**, **Cursor**, **Gemini CLI / Antigravity**, and MCP servers for **Windsurf / Devin Desktop**, **Continue**, **Amazon Q**, and **Roo Code**.
 
-Get your free API key (120 free checks) at [golproductions.com](https://www.golproductions.com/check.html)
+Get your free API key (120 free checks) at [golproductions.com/check](https://www.golproductions.com/check.html)
 
 ## What it catches
 
@@ -28,12 +28,64 @@ Get your free API key (120 free checks) at [golproductions.com](https://www.golp
 | **Broken syntax** | AI writes a file with mismatched brackets. **Flagged.** |
 | **Post-write integrity** | After the AI writes a file, imports and function calls are re-verified. **Two checkpoints.** |
 
+## Supported environments
+
+**Hooks (automatic, pre-execution)**
+
+| Environment | Integration |
+|-------------|-------------|
+| Claude Code | PreToolUse hook |
+| Cursor | beforeShellExecution hook |
+| Gemini CLI / Antigravity | BeforeTool hook |
+
+**MCP Server (agent-driven)**
+
+| Environment | Integration |
+|-------------|-------------|
+| Claude Code | MCP server |
+| Cursor | MCP server |
+| Windsurf / Devin Desktop | MCP server |
+| Continue | MCP server |
+| Amazon Q | MCP server |
+| Roo Code | MCP server |
+| Claude Desktop | MCP server |
+| Any MCP client | MCP server |
+
+**Editor plugins**
+
+| Editor | Install |
+|--------|---------|
+| VS Code / Cursor / Devin Desktop | [Open VSX](https://open-vsx.org/extension/golproductions/gol-check) |
+| JetBrains (IntelliJ, WebStorm, PyCharm, GoLand, Rider, PHPStorm, RubyMine) | [JetBrains Marketplace](https://plugins.jetbrains.com/plugin/com.golproductions.check) |
+| Neovim | [check.nvim](https://github.com/golproductions/check.nvim) |
+| Emacs | [check.el](https://github.com/golproductions/check.el) |
+| Sublime Text | [GOLCheck](https://github.com/golproductions/check-sublime) |
+| Zed | [check-zed](https://github.com/golproductions/check-zed) |
+
+**Direct API**
+
+```
+POST https://triage.golproductions.com/preflight
+```
+
+## MCP Server
+
+Run Check as an MCP server for direct agent integration:
+
+```
+npx @golproductions/check check-mcp
+```
+
+Exposes two tools:
+- **Check** — validates a command, returns `RUNNABLE` or `INVALID`
+- **CheckAndExecute** — validates then executes, blocking invalid commands before they reach the shell
+
 ## How it works
 
 ```
-AI writes code
+AI generates code
     ↓
-Check intercepts (pre-execution hook)
+Check intercepts (pre-execution)
     ↓
 Verifies against your actual project
     ↓
@@ -42,18 +94,18 @@ Real → allowed  |  Not real → blocked
 After file write → second verification pass
 ```
 
-Check runs as a **PreToolUse** and **PostToolUse** hook. Your AI never knows it's there. Sub-100ms response time.
+Sub-100ms. Your AI never knows it's there.
 
 ## Why not just use another guardrail?
 
-| | Check | Security firewalls (AEGIS, Pipelock) | LLM guardrails (Guardrails AI, Lakera) | Eval platforms (Galileo, Braintrust) |
+| | Check | Security firewalls | LLM guardrails | Eval platforms |
 |---|---|---|---|---|
 | **Checks code correctness** | Yes | No — checks safety | No — checks format | No — scores after |
 | **Knows your project** | Yes | No | No | No |
 | **Pre-execution** | Yes | Yes | Varies | No |
 | **Post-write verification** | Yes | No | No | No |
 | **No AI inside** | Yes | Varies | Uses LLMs | Uses LLMs |
-| **Per-check pricing** | $0.0068 AUD | Free (self-hosted) | Enterprise pricing | SaaS pricing |
+| **Per-check pricing** | $0.0068 AUD | Free (self-hosted) | Enterprise | SaaS |
 
 Every other tool checks the AI. **Check checks the code.**
 
@@ -69,27 +121,12 @@ Every other tool checks the AI. **Check checks the code.**
 | $25 | ~3,676 | $0.0068 |
 | $50 | ~7,352 | $0.0068 |
 
-## MCP Server
-
-Check also runs as an MCP (Model Context Protocol) server for direct integration:
-
-```
-check-mcp
-```
-
 ## Links
 
 - [Product page](https://www.golproductions.com/check.html)
 - [Pricing](https://www.golproductions.com/pricing.html)
 - [Updates](https://www.golproductions.com/updates.html)
-
-## Supported IDEs
-
-- Claude Code
-- Cursor
-- Antigravity
-
-More coming: Windsurf, Cline, Continue, Zed, Aider, JetBrains, GitHub Copilot.
+- [Blog](https://www.golproductions.com/blog/)
 
 ## License
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@golproductions/check",
-  "version": "3.0.4",
-  "description": "The anti-hallucination layer for AI agents. Supports Claude Code, Antigravity, and Cursor.",
+  "version": "3.0.6",
+  "description": "Anti-hallucination firewall for AI agents. Validates commands, imports, and function calls before execution. Supports Claude Code, Cursor, Gemini CLI, Windsurf, JetBrains, Neovim, Emacs, Sublime Text, Zed, and any MCP client.",
   "bin": {
     "check": "src/index.js",
     "check-mcp": "src/mcp.js"
@@ -32,6 +32,12 @@
     "cursor",
     "antigravity",
     "windsurf",
+    "devin-desktop",
+    "gemini-cli",
+    "amazon-q",
+    "continue-dev",
+    "roo-code",
+    "cline",
     "ai-guardrails",
     "llm-validation",
     "mcp",

package/src/index.js

@@ -37,6 +37,8 @@ async function install() {
   const binaryPath = join(hooksDir, "truth-gate" + ext);
   await downloadBinary(binaryPath);
 
+  const mcpEntry = { command: "npx", args: ["@golproductions/check", "--mcp"], env: { GOL_CLIENT_ID: key } };
+
   const targets = [
     {
       name: "Claude Code",
@@ -58,17 +60,19 @@ async function install() {
       }
     },
     {
-      name: "Antigravity IDE",
-      dir: join(home, ".gemini", "config"),
-      file: "hooks.json",
+      name: "Gemini CLI / Antigravity",
+      dir: join(home, ".gemini"),
+      file: "settings.json",
       config: (existing) => {
-        existing["check-gate"] = {
-          enabled: true,
-          PreToolUse: [{
-            matcher: "run_command",
-            hooks: [{ type: "command", command: "node " + scriptPath }]
-          }]
-        };
+        existing.hooks = existing.hooks || {};
+        existing.hooks.BeforeTool = existing.hooks.BeforeTool || [];
+        const hooks = existing.hooks.BeforeTool;
+        if (!hooks.find(h => h.hooks?.some(hh => hh.name === "check-gate"))) {
+          hooks.push({
+            matcher: ".*",
+            hooks: [{ type: "command", command: "node " + scriptPath, name: "check-gate" }]
+          });
+        }
         return existing;
       }
     },
@@ -102,12 +106,64 @@ async function install() {
         existing.env.GOL_CLIENT_ID = key;
         return existing;
       }
+    },
+    {
+      name: "Windsurf (MCP)",
+      dir: join(home, ".codeium", "windsurf"),
+      file: "mcp_config.json",
+      config: (existing) => {
+        existing.mcpServers = existing.mcpServers || {};
+        existing.mcpServers.Check = mcpEntry;
+        return existing;
+      }
+    },
+    {
+      name: "Continue (MCP)",
+      dir: join(process.cwd(), ".continue", "mcpServers"),
+      file: "check.json",
+      config: () => {
+        return { mcpServers: { Check: mcpEntry } };
+      }
+    },
+    {
+      name: "Amazon Q Developer (MCP)",
+      dir: join(home, ".aws", "amazonq"),
+      file: "mcp.json",
+      config: (existing) => {
+        existing.mcpServers = existing.mcpServers || {};
+        existing.mcpServers.Check = { type: "stdio", ...mcpEntry };
+        return existing;
+      }
+    },
+    {
+      name: "Roo Code (project MCP)",
+      dir: join(process.cwd(), ".roo"),
+      file: "mcp.json",
+      config: (existing) => {
+        existing.mcpServers = existing.mcpServers || {};
+        existing.mcpServers.Check = mcpEntry;
+        return existing;
+      }
+    },
+    {
+      name: "Project MCP (shared)",
+      dir: process.cwd(),
+      file: ".mcp.json",
+      config: (existing) => {
+        existing.mcpServers = existing.mcpServers || {};
+        existing.mcpServers.Check = mcpEntry;
+        return existing;
+      }
     }
   ];
 
+  const mcpTargets = ["Windsurf (MCP)", "Continue (MCP)", "Amazon Q Developer (MCP)", "Roo Code (project MCP)", "Project MCP (shared)"];
+
   let hasClaude = false;
   for (const t of targets) {
-    if (!existsSync(t.dir)) continue;
+    const isMcp = mcpTargets.includes(t.name);
+    if (!isMcp && !existsSync(t.dir)) continue;
+    if (isMcp) mkdirSync(t.dir, { recursive: true });
     const filepath = join(t.dir, t.file);
     let existing = {};
     try { existing = JSON.parse(readFileSync(filepath, "utf8")); } catch {}
@@ -147,31 +203,37 @@ if (process.argv.includes("--mcp")) { await import("./mcp.js"); process.exit(0);
 
 function detect(p) {
   if (typeof p.command === "string" && !p.tool_input) return "cursor";
-  if (p.hook_event_name === "BeforeTool") return "gemini";
-  if (p.toolCall?.argumentsJson) return "antigravity";
+  if (p.hook_event_name === "BeforeTool" || p.toolCall?.argumentsJson) return "gemini";
   return "claude";
 }
 
 function cmd(p, f) {
   if (f === "cursor") return p.command;
-  if (f === "antigravity") {
-    try {
-      const a = typeof p.toolCall.argumentsJson === "string" ? JSON.parse(p.toolCall.argumentsJson) : p.toolCall.argumentsJson;
-      return a.command || a.CommandLine || a.command_line;
-    } catch { return null; }
+  if (f === "gemini") {
+    if (p.tool_input?.command) return p.tool_input.command;
+    if (p.toolCall?.argumentsJson) {
+      try {
+        const a = typeof p.toolCall.argumentsJson === "string" ? JSON.parse(p.toolCall.argumentsJson) : p.toolCall.argumentsJson;
+        return a.command || a.CommandLine || a.command_line;
+      } catch { return null; }
+    }
+    return null;
   }
   return p.tool_input?.command;
 }
 
 function out(f, ok, reason) {
   if (ok) {
-    const r = { cursor: { permission: "allow" }, gemini: { decision: "allow" }, antigravity: { decision: "allow" }, claude: { hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "allow" } } };
-    process.stdout.write(JSON.stringify(r[f]));
+    const r = { cursor: { permission: "allow" }, gemini: { decision: "allow" }, claude: { hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "allow" } } };
+    process.stdout.write(JSON.stringify(r[f] || r.claude));
     process.exit(0);
   }
-  if (f === "gemini" || f === "antigravity") { process.stderr.write(reason + "\n"); process.exit(2); }
+  if (f === "gemini") {
+    process.stdout.write(JSON.stringify({ decision: "deny", reason }));
+    process.exit(2);
+  }
   const r = { cursor: { permission: "deny", user_message: reason, agent_message: reason }, claude: { hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: reason } } };
-  process.stdout.write(JSON.stringify(r[f]));
+  process.stdout.write(JSON.stringify(r[f] || r.claude));
   process.exit(0);
 }