@fidacy/mcp 0.1.13 → 0.1.15

package/CHANGELOG.md

@@ -118,3 +118,9 @@ semantic versioning.
 - MCP handshake now reports the real package version (was hardcoded "0.1.0"
   through 0.1.12 — same class as the client_version telemetry bug, same fix:
   injected from package.json at build time).
+
+## 0.1.14 — 2026-07-03
+
+- Granular block-type telemetry: DENY reasons now split into lookalike (BEC),
+  duplicate-invoice, payee, cap, window and invalid, so the public threat page
+  can count blocks by attack class. Still zero PII (an enum, never the rule text).

package/dist/core.js

@@ -423,7 +423,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.13" : "dev";
+var CLIENT_VERSION = true ? "0.1.15" : "dev";
 var currentShell = "mcp";
 function telemetryEnabled() {
   const v = (process.env.FIDACY_DISABLE_TELEMETRY ?? "").trim().toLowerCase();
@@ -444,8 +444,13 @@ var flushTimer = null;
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
-  if (r.startsWith("per_tx_cap") || r.startsWith("total_cap")) return "deny_cap";
+  if (r.startsWith("payee_lookalike")) return "deny_lookalike";
   if (r.startsWith("payee_not_in_allowlist")) return "deny_payee";
+  if (r.startsWith("duplicate_invoice")) return "deny_duplicate";
+  if (r.startsWith("per_tx_cap") || r.startsWith("total_cap")) return "deny_cap";
+  if (r.startsWith("mandate_revoked") || r.startsWith("before_mandate") || r.startsWith("after_mandate"))
+    return "deny_window";
+  if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
 function record(type, result) {

package/dist/index.js

@@ -452,7 +452,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.13" : "dev";
+var CLIENT_VERSION = true ? "0.1.15" : "dev";
 var currentShell = "mcp";
 function telemetryEnabled() {
   const v = (process.env.FIDACY_DISABLE_TELEMETRY ?? "").trim().toLowerCase();
@@ -473,8 +473,13 @@ var flushTimer = null;
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
-  if (r.startsWith("per_tx_cap") || r.startsWith("total_cap")) return "deny_cap";
+  if (r.startsWith("payee_lookalike")) return "deny_lookalike";
   if (r.startsWith("payee_not_in_allowlist")) return "deny_payee";
+  if (r.startsWith("duplicate_invoice")) return "deny_duplicate";
+  if (r.startsWith("per_tx_cap") || r.startsWith("total_cap")) return "deny_cap";
+  if (r.startsWith("mandate_revoked") || r.startsWith("before_mandate") || r.startsWith("after_mandate"))
+    return "deny_window";
+  if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
 function record(type, result) {
@@ -675,8 +680,72 @@ async function postOnce(fetchImpl, url, headers, payload, timeoutMs) {
   return parsed;
 }
 
+// src/artifacts.ts
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { pipeline } from "node:stream/promises";
+var ARTIFACT_KINDS = [
+  "contract",
+  "invoice",
+  "prescription",
+  "claim",
+  "document",
+  "image",
+  "audio",
+  "video",
+  "custom"
+];
+async function hashFile(path) {
+  const hash = createHash("sha256");
+  await pipeline(createReadStream(path), async function* (source) {
+    for await (const chunk of source) {
+      hash.update(chunk);
+      yield;
+    }
+  });
+  return hash.digest("hex");
+}
+async function engineFetch(method, pathAndQuery, cfg, body) {
+  const base = requireSafeBaseUrl(cfg.engineUrl);
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), 1e4);
+  let res;
+  try {
+    res = await fetch(`${base}${pathAndQuery}`, {
+      method,
+      headers: {
+        authorization: `Bearer ${cfg.apiKey}`,
+        ...body !== void 0 ? { "content-type": "application/json" } : {}
+      },
+      body: body !== void 0 ? JSON.stringify(body) : void 0,
+      signal: controller.signal
+    });
+  } catch {
+    throw new AssessError({ type: "network_error", status: 0 });
+  } finally {
+    clearTimeout(timer);
+  }
+  let json;
+  try {
+    json = await res.json();
+  } catch {
+    throw new AssessError({ type: "bad_response", status: res.status });
+  }
+  if (!res.ok) {
+    const type = typeof json?.error === "string" ? String(json.error) : "engine_error";
+    throw new AssessError({ type, status: res.status });
+  }
+  return json;
+}
+async function anchorArtifact(params, cfg) {
+  return await engineFetch("POST", "/v1/artifacts", cfg, params);
+}
+async function findArtifacts(sha2562, cfg) {
+  return await engineFetch("GET", `/v1/artifacts?sha256=${sha2562}`, cfg);
+}
+
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.1.13" : "dev";
+var CLIENT_VERSION2 = true ? "0.1.15" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -776,7 +845,7 @@ function weekOneBootNudge(upgradeToolName) {
 var state = ensureState();
 var core = makeCore();
 var subject = process.env.FIDACY_SUBJECT ?? "agent:demo";
-var SERVER_VERSION = true ? "0.1.13" : "dev";
+var SERVER_VERSION = true ? "0.1.15" : "dev";
 var server = new McpServer({ name: "fidacy", version: SERVER_VERSION });
 server.registerTool(
   "request_payment",
@@ -896,6 +965,112 @@ server.registerTool(
     }
   }
 );
+server.registerTool(
+  "anchor_artifact",
+  {
+    title: "Anchor Artifact (Bitcoin-anchored integrity proof)",
+    description: "Prove an artifact existed exactly as-is at this moment, and make any later tampering detectable. Give a file `path` (hashed locally with SHA-256 \u2014 the file itself is NEVER uploaded) or a precomputed `sha256`. The hash is registered on Fidacy's tamper-evident audit chain, which is checkpointed to the Bitcoin blockchain, and you get a signed receipt (JWS) verifiable offline against the engine JWKS. Use it for contracts, invoices, medical prescriptions, insurance claims, images, audio, video. `kind` defaults to document; optional `label` is a short reference (an invoice number, a case id \u2014 no PII).",
+    inputSchema: {
+      path: z.string().optional(),
+      sha256: z.string().regex(/^[0-9a-f]{64}$/).optional(),
+      kind: z.enum(ARTIFACT_KINDS).optional(),
+      label: z.string().max(120).optional(),
+      subject: z.string().max(120).optional()
+    },
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }
+  },
+  async ({ path, sha256: sha2562, kind, label, subject: subj }) => {
+    const engineUrl = process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com";
+    const apiKey = (process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
+    if (!apiKey) {
+      return {
+        content: [{ type: "text", text: "anchor_artifact needs an engine key \u2014 free in about a minute: call the upgrade tool, or set FIDACY_ENGINE_API_KEY if you already have one." }],
+        isError: true
+      };
+    }
+    if (!path && !sha2562) {
+      return { content: [{ type: "text", text: "Give a file `path` (hashed locally) or a precomputed `sha256`." }], isError: true };
+    }
+    let hash = sha2562 ?? "";
+    if (!hash && path) {
+      try {
+        hash = await hashFile(path);
+      } catch {
+        return { content: [{ type: "text", text: "Could not read that file locally (check the path and permissions). Nothing was sent anywhere." }], isError: true };
+      }
+    }
+    try {
+      const r = await anchorArtifact(
+        { sha256: hash, kind: kind ?? "document", ...label ? { label } : {}, ...subj ? { subject: subj } : {} },
+        { engineUrl, apiKey }
+      );
+      return {
+        content: [{
+          type: "text",
+          text: `ANCHORED ${r.kind} \xB7 sha256 ${hash.slice(0, 16)}\u2026 \xB7 audit seq ${r.audit.seq} \xB7 Bitcoin checkpoint: ${r.anchor.status}. The file never left this machine; only its hash was registered. Keep the receipt (structured output) \u2014 it verifies offline and proves this artifact existed exactly as-is, signed, at ${r.ts}.`
+        }],
+        structuredContent: r
+      };
+    } catch (e) {
+      if (e instanceof AssessError) {
+        return { content: [{ type: "text", text: `ANCHOR ${e.status}: ${e.type}` }], isError: true };
+      }
+      return { content: [{ type: "text", text: "ANCHOR failed: unexpected error" }], isError: true };
+    }
+  }
+);
+server.registerTool(
+  "check_artifact",
+  {
+    title: "Check Artifact (was this hash anchored?)",
+    description: "Check whether an artifact was anchored by this account and the state of its Bitcoin checkpoint. Give a file `path` (hashed locally, never uploaded) or a `sha256`. If the current hash of a file does NOT match any anchored record that you expected to match, the file changed since anchoring \u2014 that is exactly the tampering signal.",
+    inputSchema: {
+      path: z.string().optional(),
+      sha256: z.string().regex(/^[0-9a-f]{64}$/).optional()
+    },
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }
+  },
+  async ({ path, sha256: sha2562 }) => {
+    const engineUrl = process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com";
+    const apiKey = (process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
+    if (!apiKey) {
+      return {
+        content: [{ type: "text", text: "check_artifact needs an engine key \u2014 free in about a minute: call the upgrade tool, or set FIDACY_ENGINE_API_KEY if you already have one." }],
+        isError: true
+      };
+    }
+    if (!path && !sha2562) {
+      return { content: [{ type: "text", text: "Give a file `path` (hashed locally) or a `sha256`." }], isError: true };
+    }
+    let hash = sha2562 ?? "";
+    if (!hash && path) {
+      try {
+        hash = await hashFile(path);
+      } catch {
+        return { content: [{ type: "text", text: "Could not read that file locally (check the path and permissions). Nothing was sent anywhere." }], isError: true };
+      }
+    }
+    try {
+      const r = await findArtifacts(hash, { engineUrl, apiKey });
+      if (!r.artifacts.length) {
+        return {
+          content: [{ type: "text", text: `NOT FOUND \xB7 sha256 ${hash.slice(0, 16)}\u2026 has no anchored record in this account. If you expected a match, the file has changed since it was anchored.` }],
+          structuredContent: { sha256: hash, artifacts: [] }
+        };
+      }
+      const first = r.artifacts[0];
+      return {
+        content: [{ type: "text", text: `FOUND ${r.artifacts.length} record(s) \xB7 newest: ${String(first.kind)} anchored ${String(first.createdAt)} (audit seq ${String(first.auditSeq)}). The current content matches the anchored hash byte for byte.` }],
+        structuredContent: { sha256: hash, ...r }
+      };
+    } catch (e) {
+      if (e instanceof AssessError) {
+        return { content: [{ type: "text", text: `CHECK ${e.status}: ${e.type}` }], isError: true };
+      }
+      return { content: [{ type: "text", text: "CHECK failed: unexpected error" }], isError: true };
+    }
+  }
+);
 server.registerTool(
   "upgrade",
   {

package/dist/lib.js

@@ -571,7 +571,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.13" : "dev";
+var CLIENT_VERSION = true ? "0.1.15" : "dev";
 var currentShell = "mcp";
 function setTelemetryShell(shell) {
   currentShell = shell;
@@ -595,8 +595,13 @@ var flushTimer = null;
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
-  if (r.startsWith("per_tx_cap") || r.startsWith("total_cap")) return "deny_cap";
+  if (r.startsWith("payee_lookalike")) return "deny_lookalike";
   if (r.startsWith("payee_not_in_allowlist")) return "deny_payee";
+  if (r.startsWith("duplicate_invoice")) return "deny_duplicate";
+  if (r.startsWith("per_tx_cap") || r.startsWith("total_cap")) return "deny_cap";
+  if (r.startsWith("mandate_revoked") || r.startsWith("before_mandate") || r.startsWith("after_mandate"))
+    return "deny_window";
+  if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
 function record(type, result) {
@@ -694,7 +699,7 @@ function requestUpgrade() {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.1.13" : "dev";
+var CLIENT_VERSION2 = true ? "0.1.15" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",
@@ -36,6 +36,12 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "build": "node scripts/bundle.mjs",
+    "dev": "tsx watch src/index.ts",
+    "start": "node dist/index.js",
+    "prepublishOnly": "npm run build"
+  },
   "engines": {
     "node": ">=18"
   },
@@ -44,19 +50,14 @@
     "zod": "^3.25.0"
   },
   "devDependencies": {
+    "@fidacy/firewall": "workspace:*",
     "@types/node": "^22.10.0",
     "tsx": "^4.19.2",
-    "typescript": "^5.7.2",
-    "@fidacy/firewall": "0.1.0"
+    "typescript": "^5.7.2"
   },
   "mcpName": "com.fidacy/mcp",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/lucaslubi/fidacy-mcp.git"
-  },
-  "scripts": {
-    "build": "node scripts/bundle.mjs",
-    "dev": "tsx watch src/index.ts",
-    "start": "node dist/index.js"
   }
 }