@golproductions/check 3.0.5 → 3.0.7

package/README.md

@@ -11,12 +11,12 @@ No AI inside. Deterministic. Same input, same output. Every time.
 One command. Every IDE.
 
 ```
-npx @golproductions/check --install your_key
+npx @golproductions/check --install YOUR_KEY
 ```
 
-Auto-detects **Claude Code**, **Cursor**, and **Antigravity**. Writes the hook config, sets your key, done. Restart your IDE to activate.
+Auto-detects and configures **Claude Code**, **Cursor**, **Gemini CLI / Antigravity**, and MCP servers for **Windsurf / Devin Desktop**, **Continue**, **Amazon Q**, and **Roo Code**.
 
-Get your free API key (120 free checks) at [golproductions.com](https://www.golproductions.com/check.html)
+Get your free API key (120 free checks) at [golproductions.com/check](https://www.golproductions.com/check.html)
 
 ## What it catches
 
@@ -28,12 +28,64 @@ Get your free API key (120 free checks) at [golproductions.com](https://www.golp
 | **Broken syntax** | AI writes a file with mismatched brackets. **Flagged.** |
 | **Post-write integrity** | After the AI writes a file, imports and function calls are re-verified. **Two checkpoints.** |
 
+## Supported environments
+
+**Hooks (automatic, pre-execution)**
+
+| Environment | Integration |
+|-------------|-------------|
+| Claude Code | PreToolUse hook |
+| Cursor | beforeShellExecution hook |
+| Gemini CLI / Antigravity | BeforeTool hook |
+
+**MCP Server (agent-driven)**
+
+| Environment | Integration |
+|-------------|-------------|
+| Claude Code | MCP server |
+| Cursor | MCP server |
+| Windsurf / Devin Desktop | MCP server |
+| Continue | MCP server |
+| Amazon Q | MCP server |
+| Roo Code | MCP server |
+| Claude Desktop | MCP server |
+| Any MCP client | MCP server |
+
+**Editor plugins**
+
+| Editor | Install |
+|--------|---------|
+| VS Code / Cursor / Devin Desktop | [Open VSX](https://open-vsx.org/extension/golproductions/gol-check) |
+| JetBrains (IntelliJ, WebStorm, PyCharm, GoLand, Rider, PHPStorm, RubyMine) | [JetBrains Marketplace](https://plugins.jetbrains.com/plugin/com.golproductions.check) |
+| Neovim | [check.nvim](https://github.com/golproductions/check.nvim) |
+| Emacs | [check.el](https://github.com/golproductions/check.el) |
+| Sublime Text | [GOLCheck](https://github.com/golproductions/check-sublime) |
+| Zed | [check-zed](https://github.com/golproductions/check-zed) |
+
+**Direct API**
+
+```
+POST https://triage.golproductions.com/preflight
+```
+
+## MCP Server
+
+Run Check as an MCP server for direct agent integration:
+
+```
+npx @golproductions/check check-mcp
+```
+
+Exposes two tools:
+- **Check** — validates a command, returns `RUNNABLE` or `INVALID`
+- **CheckAndExecute** — validates then executes, blocking invalid commands before they reach the shell
+
 ## How it works
 
 ```
-AI writes code
+AI generates code
     ↓
-Check intercepts (pre-execution hook)
+Check intercepts (pre-execution)
     ↓
 Verifies against your actual project
     ↓
@@ -42,18 +94,18 @@ Real → allowed  |  Not real → blocked
 After file write → second verification pass
 ```
 
-Check runs as a **PreToolUse** and **PostToolUse** hook. Your AI never knows it's there. Sub-100ms response time.
+Sub-100ms. Your AI never knows it's there.
 
 ## Why not just use another guardrail?
 
-| | Check | Security firewalls (AEGIS, Pipelock) | LLM guardrails (Guardrails AI, Lakera) | Eval platforms (Galileo, Braintrust) |
+| | Check | Security firewalls | LLM guardrails | Eval platforms |
 |---|---|---|---|---|
 | **Checks code correctness** | Yes | No — checks safety | No — checks format | No — scores after |
 | **Knows your project** | Yes | No | No | No |
 | **Pre-execution** | Yes | Yes | Varies | No |
 | **Post-write verification** | Yes | No | No | No |
 | **No AI inside** | Yes | Varies | Uses LLMs | Uses LLMs |
-| **Per-check pricing** | $0.0068 AUD | Free (self-hosted) | Enterprise pricing | SaaS pricing |
+| **Per-check pricing** | $0.0068 AUD | Free (self-hosted) | Enterprise | SaaS |
 
 Every other tool checks the AI. **Check checks the code.**
 
@@ -69,27 +121,12 @@ Every other tool checks the AI. **Check checks the code.**
 | $25 | ~3,676 | $0.0068 |
 | $50 | ~7,352 | $0.0068 |
 
-## MCP Server
-
-Check also runs as an MCP (Model Context Protocol) server for direct integration:
-
-```
-check-mcp
-```
-
 ## Links
 
 - [Product page](https://www.golproductions.com/check.html)
 - [Pricing](https://www.golproductions.com/pricing.html)
 - [Updates](https://www.golproductions.com/updates.html)
-
-## Supported IDEs
-
-- Claude Code
-- Cursor
-- Antigravity
-
-More coming: Windsurf, Cline, Continue, Zed, Aider, JetBrains, GitHub Copilot.
+- [Blog](https://www.golproductions.com/blog/)
 
 ## License
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@golproductions/check",
-  "version": "3.0.5",
-  "description": "The anti-hallucination firewall for AI agents. Supports Claude Code, Cursor, Gemini CLI, Windsurf, Amazon Q, Continue, Roo Code, and more.",
+  "version": "3.0.7",
+  "description": "Anti-hallucination firewall for AI agents. Validates commands, imports, and function calls before execution. Supports Claude Code, Cursor, Gemini CLI, Windsurf, JetBrains, Neovim, Emacs, Sublime Text, Zed, and any MCP client.",
   "bin": {
     "check": "src/index.js",
     "check-mcp": "src/mcp.js"

package/src/index.js

@@ -5,12 +5,30 @@ import { homedir, platform, arch } from "node:os";
 import { pipeline } from "node:stream/promises";
 import { Readable } from "node:stream";
 
-const VERSION = "3.0.2";
+const VERSION = "3.0.7";
 const BINARY_VERSION = "3.0.0";
 const API = "https://triage.golproductions.com/preflight";
 const CDN = "https://pub-e55366a7f5994be9be04f0e205179f4a.r2.dev/releases";
 const CLIENT_ID = process.env.GOL_CLIENT_ID || "";
 
+async function validateKey(key) {
+  try {
+    const res = await fetch(API, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", "X-GOL-CLIENT-ID": key, "User-Agent": "c/" + VERSION },
+      body: JSON.stringify({ command: "echo check-install-verify", cwd: process.cwd(), v: VERSION }),
+      signal: AbortSignal.timeout(10000),
+    });
+    if (res.ok) return { valid: true, expired: false };
+    let body = {};
+    try { body = await res.json(); } catch {}
+    const expired = /expir/i.test(body.reason || body.error || body.message || "");
+    return { valid: false, expired };
+  } catch {
+    return { valid: false, expired: false };
+  }
+}
+
 async function downloadBinary(dest) {
   const os = platform() === "win32" ? "win" : platform() === "darwin" ? "macos" : "linux";
   const cpu = arch() === "arm64" ? "arm64" : "x64";
@@ -23,7 +41,30 @@ async function downloadBinary(dest) {
 }
 
 async function install() {
-  const key = process.argv[3] || process.env.GOL_CLIENT_ID || "your_key";
+  const key = process.argv[3] || process.env.GOL_CLIENT_ID || "";
+
+  if (!key || key === "your_key") {
+    console.log("\n  Check requires a valid Client ID to install.\n");
+    console.log("  Get your key (free): https://golproductions.com/check\n");
+    console.log("  Then run:");
+    console.log("  npx @golproductions/check --install YOUR_KEY\n");
+    process.exit(1);
+  }
+
+  const result = await validateKey(key);
+  if (!result.valid) {
+    if (result.expired) {
+      console.log("\n  Your Client ID has expired: " + key);
+      console.log("\n  Renew your key at: https://golproductions.com/check\n");
+    } else {
+      console.log("\n  Invalid Client ID: " + key);
+      console.log("\n  Get a valid key at: https://golproductions.com/check\n");
+    }
+    process.exit(1);
+  }
+
+  console.log("\n  Key verified. Installing Check...\n");
+
   const home = homedir();
   let installed = 0;
 
@@ -249,7 +290,7 @@ async function main() {
     f = detect(p);
     const c = cmd(p, f);
     if (!c) { out(f, true); return; }
-    if (!CLIENT_ID) { process.stderr.write("check: GOL_CLIENT_ID not set. Get your key at https://www.golproductions.com/check.html\n"); out(f, true); return; }
+    if (!CLIENT_ID) { process.stderr.write("check: GOL_CLIENT_ID not set. Get your key at https://golproductions.com/check\n"); out(f, true); return; }
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), 5000);
     const res = await fetch(API, {