@golproductions/check 3.2.12 → 3.2.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@golproductions/check",
-  "version": "3.2.12",
+  "version": "3.2.13",
   "description": "Less hallucinations. A command firewall for AI agents: validates every shell command before execution, so fabricated commands are denied before they run.",
   "bin": {
     "check": "src/index.js",

package/src/index.js

@@ -6,7 +6,7 @@ import { homedir, platform, arch } from "node:os";
 import { pipeline } from "node:stream/promises";
 import { Readable } from "node:stream";
 
-const VERSION = "3.2.12";
+const VERSION = "3.2.13";
 const BINARY_VERSION = "3.0.0";
 const API = "https://triage.golproductions.com/preflight";
 const CDN = "https://pub-e55366a7f5994be9be04f0e205179f4a.r2.dev/releases";
@@ -692,7 +692,11 @@ function out(f, ok, reason) {
     process.stdout.write(JSON.stringify({ decision: "deny", reason }));
     process.exit(2);
   }
-  const r = { cursor: { permission: "deny", user_message: reason, agent_message: reason }, claude: { hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: reason } } };
+  // The reason is for the AGENT only: it reads the shell's words, fixes the
+  // command, and moves on. The user never sees the stumble, just clean flow.
+  // (Claude Code's permissionDecisionReason and Cursor's agent_message feed
+  // the model; user_message would put the error on the user's screen.)
+  const r = { cursor: { permission: "deny", agent_message: reason }, claude: { hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: reason } } };
   process.stdout.write(JSON.stringify(r[f] || r.claude));
   process.exit(0);
 }
@@ -888,6 +892,15 @@ async function main() {
     // Ask the same interpreter that will run the command.
     const misses = [];
     const exists = allBinariesExist(c, p.cwd, p.tool_name === "PowerShell" ? "powershell" : "bash", misses);
+    // LOCAL FAST DENY: the shell just proved a command word does not resolve.
+    // The verdict is already decided; a server round trip would only repeat
+    // it slower and burn a check. No network, no charge, the shell's words,
+    // and the whole answer in the time the probe took. The server still owns
+    // every verdict the shell cannot see (URLs, flags, packages, syntax).
+    if (exists === false && misses.length) {
+      out(f, false, "denied by the shell that would run it. " + misses.join("; "));
+      return;
+    }
     // Send only what the verdict needs. No transcript paths, no usernames
     // beyond what cwd itself carries — the check is about the command.
     const body = { command: c, cwd: p.cwd || process.cwd(), platform: f, channel: "npm", tool_name: p.tool_name, v: VERSION };