@golproductions/check 3.2.5 → 3.2.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@golproductions/check",
-  "version": "3.2.5",
+  "version": "3.2.6",
   "description": "The anti-hallucination layer for AI coding agents. Stops hallucinated commands, packages, and URLs before they run.",
   "bin": {
     "check": "src/index.js",

package/src/index.js

@@ -6,7 +6,7 @@ import { homedir, platform, arch } from "node:os";
 import { pipeline } from "node:stream/promises";
 import { Readable } from "node:stream";
 
-const VERSION = "3.2.5";
+const VERSION = "3.2.6";
 const BINARY_VERSION = "3.0.0";
 const API = "https://triage.golproductions.com/preflight";
 const CDN = "https://pub-e55366a7f5994be9be04f0e205179f4a.r2.dev/releases";
@@ -768,6 +768,23 @@ function segmentBases(command) {
 // on itself: builtins, keywords, functions, and PATH binaries all answer
 // through the exact resolution the shell will use at launch. A model of the
 // shell can drift from the shell; the shell cannot drift from itself.
+// On Windows, bare "bash" is a trap: PATH can resolve to WSL's
+// System32\bash.exe — a different operating system with a different
+// filesystem. The command will actually run in Git Bash, so the probe
+// must ask Git Bash, located explicitly. If it cannot be located,
+// abstain — never let the wrong interpreter answer for the right one.
+function bashPath() {
+  if (platform() !== "win32") return "bash";
+  const candidates = [
+    process.env.CLAUDE_CODE_GIT_BASH_PATH,
+    "C:/Program Files/Git/bin/bash.exe",
+    "C:/Program Files/Git/usr/bin/bash.exe",
+    "C:/Program Files (x86)/Git/bin/bash.exe",
+  ].filter(Boolean);
+  for (const c of candidates) { try { if (existsSync(c)) return c; } catch {} }
+  return null;
+}
+
 function shellKnows(name, cwd, shell) {
   try {
     if (shell === "powershell") {
@@ -776,7 +793,9 @@ function shellKnows(name, cwd, shell) {
         { cwd, timeout: 4000, stdio: "ignore", env: { ...process.env, CHECK_PROBE: name } });
       return r.error ? null : r.status === 0;
     }
-    const r = spawnSync("bash", ["-c", 'type -- "$1" >/dev/null 2>&1', "check", name],
+    const bash = bashPath();
+    if (!bash) return null;
+    const r = spawnSync(bash, ["-c", 'type -- "$1" >/dev/null 2>&1', "check", name],
       { cwd, timeout: 4000, stdio: "ignore" });
     return r.error ? null : r.status === 0;
   } catch { return null; }