@golproductions/check 3.1.8 → 3.2.0

package/README.md

@@ -1,6 +1,6 @@
 # Check
 
-**The anti-hallucination engine for AI agents.** Your agent invents a command, a package, a URL. Check catches it before it runs. No AI inside — deterministic, sub-100ms.
+**The anti-hallucination engine for AI agents.** Your agent invents a command, a package, a URL. Check catches it before it runs. No AI inside, deterministic, sub-100ms.
 
 **This is the one location.** Everything integrates from here:
 
@@ -9,7 +9,7 @@ npx @golproductions/check --install       # Windows, macOS, Linux
 curl check.golproductions.com | sh        # Unix shells
 ```
 
-Installing mints a free key bound to your machine — no signup, 120 free checks per day, and the same key is shared by every Check tool on the machine. Need more? Get a paid GOL API Key at [the console](https://www.golproductions.com/console.html).
+Installing mints a free key bound to your machine. No signup, 120 free checks per day, and the same key is shared by every Check tool on the machine. Need more? Get a paid GOL API Key at [the console](https://www.golproductions.com/console.html).
 
 ---
 
@@ -17,7 +17,7 @@ Installing mints a free key bound to your machine — no signup, 120 free checks
 
 Check is one primitive with four faces. Pick the one your environment speaks.
 
-### 1. Hook mode — blocks bad commands before they run
+### 1. Hook mode: blocks bad commands before they run
 
 For any tool with pre-execution hooks. `--install` wires these automatically for **Claude Code, Cursor, and Gemini CLI**; wire anything else yourself: pipe the hook JSON to the script, read the verdict.
 
@@ -29,7 +29,7 @@ echo '{"tool_input":{"command":"some command"}}' | node ~/.check/check.mjs
 
 The script auto-detects Claude Code, Cursor, and Gemini hook formats and answers in each tool's own dialect.
 
-### 2. MCP server — for anything that speaks Model Context Protocol
+### 2. MCP server: for anything that speaks Model Context Protocol
 
 Windsurf, Antigravity, Continue, Amazon Q, Roo Code, Claude Desktop, or your own agent:
 
@@ -45,9 +45,9 @@ Windsurf, Antigravity, Continue, Amazon Q, Roo Code, Claude Desktop, or your own
 }
 ```
 
-Exposes two tools: `Check` (verdict only) and `CheckAndExecute` (validate, then run if clean). MCP is advisory — the agent calls it when its rules say to. Add one line to your agent's rules: *"Before running any shell command, validate it with the `check` tool."*
+Exposes two tools: `Check` (verdict only) and `CheckAndExecute` (validate, then run if clean). MCP is advisory: the agent calls it when its rules say to. Add one line to your agent's rules: *"Before running any shell command, validate it with the `check` tool."*
 
-### 3. CLI — for scripts, CI, git hooks, anything with a shell
+### 3. CLI: for scripts, CI, git hooks, anything with a shell
 
 ```
 curl check.golproductions.com | sh       # installs the `check` command (Unix)
@@ -58,7 +58,7 @@ echo "some command" | check              # pipe mode
 
 Exit codes make it composable: gate a CI step, a git pre-push hook, a Docker entrypoint, a cron job.
 
-### 4. HTTP — for everything else, in any language
+### 4. HTTP: for everything else, in any language
 
 ```
 POST https://triage.golproductions.com/preflight
@@ -68,7 +68,7 @@ Body:   {"command": "the command to validate"}
 → {"verdict": "runnable" | "invalid", "reason": "...", "daily_remaining": 119}
 ```
 
-That is the whole contract. Rate limit 60/min. A `402` means the free tier is spent and the balance is empty — treat it as allow-with-warning, never as a verdict.
+That is the whole contract. Rate limit 60/min. A `402` means the free tier is spent and the balance is empty. Treat it as allow-with-warning, never as a verdict.
 
 ---
 
@@ -76,10 +76,10 @@ That is the whole contract. Rate limit 60/min. A `402` means the free tier is sp
 
 | Tier | What | Where |
 |------|------|-------|
-| **GOL Client ID** — free | Minted automatically on install, bound to the machine, shared by every tool on it. 120 checks/day, forever. | Nowhere — it just happens |
-| **GOL API Key** — paid | Prepaid balance ($0.0068 AUD/check after the daily 120), spend caps, dashboard, 2FA. | [Console](https://www.golproductions.com/console.html) |
+| **GOL Client ID** (free) | Minted automatically on install, bound to the machine, shared by every tool on it. 120 checks/day, forever. | Nowhere. It just happens |
+| **GOL API Key** (paid) | Prepaid balance ($0.0068 AUD/check after the daily 120), spend caps, dashboard, 2FA. | [Console](https://www.golproductions.com/console.html) |
 
-Same header, same API — the tier is just what the key can do.
+Same header, same API. The tier is just what the key can do.
 
 ## Manage
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@golproductions/check",
-  "version": "3.1.8",
+  "version": "3.2.0",
   "description": "The universal anti-hallucination engine for AI coding agents. Catches what is not real before it reaches your project.",
   "bin": {
     "check": "src/index.js",

package/src/index.js

@@ -5,7 +5,7 @@ import { homedir, platform, arch } from "node:os";
 import { pipeline } from "node:stream/promises";
 import { Readable } from "node:stream";
 
-const VERSION = "3.1.8";
+const VERSION = "3.2.0";
 const BINARY_VERSION = "3.0.0";
 const API = "https://triage.golproductions.com/preflight";
 const CDN = "https://pub-e55366a7f5994be9be04f0e205179f4a.r2.dev/releases";
@@ -764,7 +764,11 @@ async function main() {
 
     if (d.verdict === "runnable") { out(f, true); }
     else { out(f, false, d.reason || "denied — address the issue before continuing"); }
-  } catch { out(f, false, "check: verification failed, command blocked"); }
+  } catch {
+    // Network failure or timeout: fail OPEN. An unreachable validation
+    // service must never block the user's work (Terms, section 5).
+    outCreditsExhausted(f, "check: validation service unreachable, command ran unverified. Check resumes automatically.");
+  }
 }
 
 main();