@golproductions/check 3.0.6 → 3.0.8

package/README.md

@@ -1,125 +1,34 @@
-# Check — The Anti-Hallucination Firewall for AI Coding Agents
+# Check -- The Universal Anti-Hallucination Engine
 
-**Your AI hallucinates commands, imports, and function calls. Check catches them before execution.**
+AI agents hallucinate. Check catches it before it reaches your project.
 
-Check sits between your AI and your project. Every command is verified before it runs. Every import is checked against your actual dependencies. Every function call is matched against your real source files. What doesn't exist gets blocked.
-
-No AI inside. Deterministic. Same input, same output. Every time.
+No AI inside. Deterministic. Sub-100ms.
 
 ## Install
 
-One command. Every IDE.
-
 ```
 npx @golproductions/check --install YOUR_KEY
 ```
 
-Auto-detects and configures **Claude Code**, **Cursor**, **Gemini CLI / Antigravity**, and MCP servers for **Windsurf / Devin Desktop**, **Continue**, **Amazon Q**, and **Roo Code**.
-
-Get your free API key (120 free checks) at [golproductions.com/check](https://www.golproductions.com/check.html)
-
-## What it catches
+One command. Auto-detects your environment and configures everything.
 
-| Type | What happens |
-|------|-------------|
-| **Phantom commands** | AI runs `git stash apply 3` — stash doesn't exist. **Blocked.** |
-| **Hallucinated imports** | AI writes `import cache from "express-session"` — not installed. **Blocked.** |
-| **Invented functions** | AI calls `db.findUserByEmail()` — doesn't exist in your project. **Blocked.** |
-| **Broken syntax** | AI writes a file with mismatched brackets. **Flagged.** |
-| **Post-write integrity** | After the AI writes a file, imports and function calls are re-verified. **Two checkpoints.** |
+120 free checks on signup at [golproductions.com/check](https://www.golproductions.com/check.html)
 
 ## Supported environments
 
-**Hooks (automatic, pre-execution)**
-
-| Environment | Integration |
-|-------------|-------------|
-| Claude Code | PreToolUse hook |
-| Cursor | beforeShellExecution hook |
-| Gemini CLI / Antigravity | BeforeTool hook |
-
-**MCP Server (agent-driven)**
-
-| Environment | Integration |
-|-------------|-------------|
-| Claude Code | MCP server |
-| Cursor | MCP server |
-| Windsurf / Devin Desktop | MCP server |
-| Continue | MCP server |
-| Amazon Q | MCP server |
-| Roo Code | MCP server |
-| Claude Desktop | MCP server |
-| Any MCP client | MCP server |
-
-**Editor plugins**
-
-| Editor | Install |
-|--------|---------|
-| VS Code / Cursor / Devin Desktop | [Open VSX](https://open-vsx.org/extension/golproductions/gol-check) |
-| JetBrains (IntelliJ, WebStorm, PyCharm, GoLand, Rider, PHPStorm, RubyMine) | [JetBrains Marketplace](https://plugins.jetbrains.com/plugin/com.golproductions.check) |
-| Neovim | [check.nvim](https://github.com/golproductions/check.nvim) |
-| Emacs | [check.el](https://github.com/golproductions/check.el) |
-| Sublime Text | [GOLCheck](https://github.com/golproductions/check-sublime) |
-| Zed | [check-zed](https://github.com/golproductions/check-zed) |
-
-**Direct API**
-
-```
-POST https://triage.golproductions.com/preflight
-```
-
-## MCP Server
-
-Run Check as an MCP server for direct agent integration:
-
-```
-npx @golproductions/check check-mcp
-```
-
-Exposes two tools:
-- **Check** — validates a command, returns `RUNNABLE` or `INVALID`
-- **CheckAndExecute** — validates then executes, blocking invalid commands before they reach the shell
-
-## How it works
-
-```
-AI generates code
-    ↓
-Check intercepts (pre-execution)
-    ↓
-Verifies against your actual project
-    ↓
-Real → allowed  |  Not real → blocked
-    ↓
-After file write → second verification pass
-```
-
-Sub-100ms. Your AI never knows it's there.
-
-## Why not just use another guardrail?
-
-| | Check | Security firewalls | LLM guardrails | Eval platforms |
-|---|---|---|---|---|
-| **Checks code correctness** | Yes | No — checks safety | No — checks format | No — scores after |
-| **Knows your project** | Yes | No | No | No |
-| **Pre-execution** | Yes | Yes | Varies | No |
-| **Post-write verification** | Yes | No | No | No |
-| **No AI inside** | Yes | Varies | Uses LLMs | Uses LLMs |
-| **Per-check pricing** | $0.0068 AUD | Free (self-hosted) | Enterprise | SaaS |
-
-Every other tool checks the AI. **Check checks the code.**
+Claude Code, Cursor, Gemini CLI, Windsurf, Devin Desktop, Continue, Amazon Q, Roo Code, Claude Desktop, JetBrains, VS Code, Neovim, Emacs, Sublime Text, Zed, and any MCP client.
 
 ## Pricing
 
-**$0.0068 AUD per check.** 120 free checks on signup. Prepaid wallet — no subscription, no monthly fee. Credits never expire.
+$0.0068 AUD per check. No subscription. Credits never expire.
 
-| Tier | Checks | Cost per check |
-|------|--------|---------------|
-| Free | 120 | $0.00 |
-| $5 | ~735 | $0.0068 |
-| $10 | ~1,470 | $0.0068 |
-| $25 | ~3,676 | $0.0068 |
-| $50 | ~7,352 | $0.0068 |
+| Tier | Checks |
+|------|--------|
+| Free | 120 |
+| $5 | ~735 |
+| $10 | ~1,470 |
+| $25 | ~3,676 |
+| $50 | ~7,352 |
 
 ## Links
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@golproductions/check",
-  "version": "3.0.6",
-  "description": "Anti-hallucination firewall for AI agents. Validates commands, imports, and function calls before execution. Supports Claude Code, Cursor, Gemini CLI, Windsurf, JetBrains, Neovim, Emacs, Sublime Text, Zed, and any MCP client.",
+  "version": "3.0.8",
+  "description": "The universal anti-hallucination engine for AI coding agents. Catches what is not real before it reaches your project.",
   "bin": {
     "check": "src/index.js",
     "check-mcp": "src/mcp.js"
@@ -18,35 +18,19 @@
   "keywords": [
     "anti-hallucination",
     "ai-hallucination",
-    "hallucination-detection",
-    "ai-firewall",
     "ai-agents",
-    "ai-code-validation",
-    "command-validation",
-    "import-validation",
-    "function-verification",
-    "code-integrity",
-    "pre-execution",
-    "deterministic-verification",
+    "ai-coding-agent",
     "claude-code",
     "cursor",
-    "antigravity",
     "windsurf",
-    "devin-desktop",
     "gemini-cli",
     "amazon-q",
     "continue-dev",
     "roo-code",
-    "cline",
-    "ai-guardrails",
-    "llm-validation",
     "mcp",
     "model-context-protocol",
-    "ai-coding-agent",
-    "code-verification",
     "ai-safety",
-    "developer-tools",
-    "devtools"
+    "developer-tools"
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",
@@ -57,5 +41,5 @@
     "type": "git",
     "url": "git+https://github.com/golproductions/check.git"
   },
-  "homepage": "https://www.golproductions.com/check.html"
+  "homepage": "https://golproductions.com/check"
 }

package/src/index.js

@@ -5,12 +5,30 @@ import { homedir, platform, arch } from "node:os";
 import { pipeline } from "node:stream/promises";
 import { Readable } from "node:stream";
 
-const VERSION = "3.0.2";
+const VERSION = "3.0.8";
 const BINARY_VERSION = "3.0.0";
 const API = "https://triage.golproductions.com/preflight";
 const CDN = "https://pub-e55366a7f5994be9be04f0e205179f4a.r2.dev/releases";
 const CLIENT_ID = process.env.GOL_CLIENT_ID || "";
 
+async function validateKey(key) {
+  try {
+    const res = await fetch(API, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", "X-GOL-CLIENT-ID": key, "User-Agent": "c/" + VERSION },
+      body: JSON.stringify({ command: "echo check-install-verify", cwd: process.cwd(), v: VERSION }),
+      signal: AbortSignal.timeout(10000),
+    });
+    if (res.ok) return { valid: true, expired: false };
+    let body = {};
+    try { body = await res.json(); } catch {}
+    const expired = /expir/i.test(body.reason || body.error || body.message || "");
+    return { valid: false, expired };
+  } catch {
+    return { valid: false, expired: false };
+  }
+}
+
 async function downloadBinary(dest) {
   const os = platform() === "win32" ? "win" : platform() === "darwin" ? "macos" : "linux";
   const cpu = arch() === "arm64" ? "arm64" : "x64";
@@ -23,7 +41,30 @@ async function downloadBinary(dest) {
 }
 
 async function install() {
-  const key = process.argv[3] || process.env.GOL_CLIENT_ID || "your_key";
+  const key = process.argv[3] || process.env.GOL_CLIENT_ID || "";
+
+  if (!key || key === "your_key") {
+    console.log("\n  Check requires a valid Client ID to install.\n");
+    console.log("  Get your key (free): https://golproductions.com/check\n");
+    console.log("  Then run:");
+    console.log("  npx @golproductions/check --install YOUR_KEY\n");
+    process.exit(1);
+  }
+
+  const result = await validateKey(key);
+  if (!result.valid) {
+    if (result.expired) {
+      console.log("\n  Your Client ID has expired: " + key);
+      console.log("\n  Renew your key at: https://golproductions.com/check\n");
+    } else {
+      console.log("\n  Invalid Client ID: " + key);
+      console.log("\n  Get a valid key at: https://golproductions.com/check\n");
+    }
+    process.exit(1);
+  }
+
+  console.log("\n  Key verified. Installing Check...\n");
+
   const home = homedir();
   let installed = 0;
 
@@ -249,7 +290,7 @@ async function main() {
     f = detect(p);
     const c = cmd(p, f);
     if (!c) { out(f, true); return; }
-    if (!CLIENT_ID) { process.stderr.write("check: GOL_CLIENT_ID not set. Get your key at https://www.golproductions.com/check.html\n"); out(f, true); return; }
+    if (!CLIENT_ID) { out(f, false, "check: GOL_CLIENT_ID not set. Get your key at https://golproductions.com/check"); return; }
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), 5000);
     const res = await fetch(API, {
@@ -262,7 +303,7 @@ async function main() {
     const d = await res.json();
     if (d.verdict === "runnable") { out(f, true); }
     else { out(f, false, d.reason || "denied — address the issue before continuing"); }
-  } catch { out(f, true); }
+  } catch { out(f, false, "check: verification failed, command blocked"); }
 }
 
 main();

package/src/mcp.js

@@ -6,7 +6,7 @@ import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 
 const execFileAsync = promisify(execFile);
-const VERSION = "2.4.0";
+const VERSION = "3.0.8";
 const API = "https://triage.golproductions.com/preflight";
 const CLIENT_ID = process.env.GOL_CLIENT_ID;
 const IS_WIN = process.platform === "win32";