@golproductions/check 3.2.10 → 3.2.11

package/package.json

@@ -1,45 +1,45 @@
-{
-  "name": "@golproductions/check",
-  "version": "3.2.10",
-  "description": "Less hallucinations. A command firewall for AI agents: validates every shell command before execution, so fabricated commands are denied before they run.",
-  "bin": {
-    "check": "src/index.js",
-    "check-mcp": "src/mcp.js"
-  },
-  "type": "module",
-  "engines": {
-    "node": ">=18"
-  },
-  "files": [
-    "src/",
-    "LICENSE",
-    "README.md"
-  ],
-  "keywords": [
-    "anti-hallucination",
-    "ai-hallucination",
-    "ai-agents",
-    "ai-coding-agent",
-    "claude-code",
-    "cursor",
-    "windsurf",
-    "gemini-cli",
-    "amazon-q",
-    "continue-dev",
-    "roo-code",
-    "mcp",
-    "model-context-protocol",
-    "ai-safety",
-    "developer-tools"
-  ],
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.0",
-    "zod": "^3.24.0"
-  },
-  "license": "SEE LICENSE IN LICENSE",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/golproductions/check.git"
-  },
-  "homepage": "https://golproductions.com/check"
-}
+{
+  "name": "@golproductions/check",
+  "version": "3.2.11",
+  "description": "Less hallucinations. A command firewall for AI agents: validates every shell command before execution, so fabricated commands are denied before they run.",
+  "bin": {
+    "check": "src/index.js",
+    "check-mcp": "src/mcp.js"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "src/",
+    "LICENSE",
+    "README.md"
+  ],
+  "keywords": [
+    "anti-hallucination",
+    "ai-hallucination",
+    "ai-agents",
+    "ai-coding-agent",
+    "claude-code",
+    "cursor",
+    "windsurf",
+    "gemini-cli",
+    "amazon-q",
+    "continue-dev",
+    "roo-code",
+    "mcp",
+    "model-context-protocol",
+    "ai-safety",
+    "developer-tools"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "zod": "^3.24.0"
+  },
+  "license": "SEE LICENSE IN LICENSE",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/golproductions/check.git"
+  },
+  "homepage": "https://golproductions.com/check"
+}

package/src/index.js

@@ -6,7 +6,7 @@ import { homedir, platform, arch } from "node:os";
 import { pipeline } from "node:stream/promises";
 import { Readable } from "node:stream";
 
-const VERSION = "3.2.10";
+const VERSION = "3.2.11";
 const BINARY_VERSION = "3.0.0";
 const API = "https://triage.golproductions.com/preflight";
 const CDN = "https://pub-e55366a7f5994be9be04f0e205179f4a.r2.dev/releases";
@@ -888,6 +888,21 @@ async function main() {
     // (HTTP 402) falls through to the generic "denied" below and reads like
     // the command itself was rejected.
     if (!res.ok) {
+      // Rate limit is a traffic state, not a verdict. A deny must mean "your
+      // command is wrong", never "you typed too fast" — heavy agent sessions
+      // hit 60/min in normal use. Same trade as the credits wall: warn, let
+      // the command run ungated, resume when the window clears.
+      if (res.status === 429 || /rate limit/i.test(d.reason || d.error || "")) {
+        outCreditsExhausted(f, "check: rate limited (60 checks/min), command ran unverified. Check resumes automatically.");
+        return;
+      }
+      // Server-side failure is the service breaking, not the command being
+      // wrong. Same law as an unreachable network (Terms, section 5): the
+      // gate's own outage must never block the user's work.
+      if (res.status >= 500) {
+        outCreditsExhausted(f, "check: validation service error (HTTP " + res.status + "), command ran unverified. Check resumes automatically.");
+        return;
+      }
       if (res.status === 402) {
         const free = d.daily_free || 120;
         const upsell = d.upgrade || "Top up at https://www.golproductions.com/console.html";