@fidacy/mcp 0.1.18 → 0.1.20

package/dist/core.js

@@ -442,7 +442,25 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.18" : "dev";
+var CLIENT_VERSION = true ? "0.1.20" : "dev";
+function bandOf(amount) {
+  if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
+  if (amount < 10) return "lt10";
+  if (amount < 100) return "10_99";
+  if (amount < 1e3) return "100_999";
+  if (amount < 1e4) return "1k_10k";
+  if (amount < 1e5) return "10k_100k";
+  return "gte100k";
+}
+function capRatioOf(amount, perTxMax) {
+  if (typeof amount !== "number" || typeof perTxMax !== "number") return void 0;
+  if (!Number.isFinite(amount) || !Number.isFinite(perTxMax) || perTxMax <= 0 || amount <= perTxMax) return void 0;
+  const r = amount / perTxMax;
+  if (r < 2) return "1_2x";
+  if (r < 5) return "2_5x";
+  if (r < 10) return "5_10x";
+  return "gt10x";
+}
 var currentShell = "mcp";
 function telemetryEnabled() {
   const v = (process.env.FIDACY_DISABLE_TELEMETRY ?? "").trim().toLowerCase();
@@ -472,9 +490,17 @@ function resultOf(status, violatedRule) {
   if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
-function record(type, result) {
+function record(type, result, band, capRatio) {
   if (!telemetryEnabled()) return;
-  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, shell: currentShell, ...result ? { result } : {} });
+  buffer.push({
+    type,
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
+    client_version: CLIENT_VERSION,
+    shell: currentShell,
+    ...result ? { result } : {},
+    ...band ? { band } : {},
+    ...capRatio ? { cap_ratio: capRatio } : {}
+  });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
       void flush();
@@ -482,7 +508,7 @@ function record(type, result) {
     if (typeof flushTimer.unref === "function") flushTimer.unref();
   }
 }
-var recordDecision = (status, violatedRule) => record("decision", resultOf(status, violatedRule));
+var recordDecision = (status, violatedRule, amount, perTxMax) => record("decision", resultOf(status, violatedRule), bandOf(amount), capRatioOf(amount, perTxMax));
 async function flush() {
   if (flushTimer) {
     clearTimeout(flushTimer);
@@ -544,10 +570,11 @@ function makeCore() {
     if (!url || !key) throw new Error("FIDACY_MODE=http requires FIDACY_API_URL and FIDACY_API_KEY");
     return new HttpFidacyCore(url, key, process.env.FIDACY_PUBLIC_KEY_PEM ?? "");
   }
+  let activeMandate = buildMandate();
   const dev = new DevFidacyCore({
-    mandate: buildMandate(),
+    mandate: activeMandate,
     auditLogPath: auditLogPath(),
-    onDecision: (d) => recordDecision(d.status, d.violatedRule)
+    onDecision: (d) => recordDecision(d.status, d.violatedRule, d.request?.amount, activeMandate?.allow?.perTxMax)
   });
   const mtimeOf = () => statSync(configPath(), { throwIfNoEntry: false })?.mtimeMs ?? 0;
   let seenMtime = mtimeOf();
@@ -555,7 +582,8 @@ function makeCore() {
     const m = mtimeOf();
     if (m !== seenMtime) {
       seenMtime = m;
-      dev.setMandate(buildMandate());
+      activeMandate = buildMandate();
+      dev.setMandate(activeMandate);
     }
   };
   return {

package/dist/index.js

@@ -471,7 +471,25 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.18" : "dev";
+var CLIENT_VERSION = true ? "0.1.20" : "dev";
+function bandOf(amount) {
+  if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
+  if (amount < 10) return "lt10";
+  if (amount < 100) return "10_99";
+  if (amount < 1e3) return "100_999";
+  if (amount < 1e4) return "1k_10k";
+  if (amount < 1e5) return "10k_100k";
+  return "gte100k";
+}
+function capRatioOf(amount, perTxMax) {
+  if (typeof amount !== "number" || typeof perTxMax !== "number") return void 0;
+  if (!Number.isFinite(amount) || !Number.isFinite(perTxMax) || perTxMax <= 0 || amount <= perTxMax) return void 0;
+  const r = amount / perTxMax;
+  if (r < 2) return "1_2x";
+  if (r < 5) return "2_5x";
+  if (r < 10) return "5_10x";
+  return "gt10x";
+}
 var currentShell = "mcp";
 function telemetryEnabled() {
   const v = (process.env.FIDACY_DISABLE_TELEMETRY ?? "").trim().toLowerCase();
@@ -501,9 +519,17 @@ function resultOf(status, violatedRule) {
   if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
-function record(type, result) {
+function record(type, result, band, capRatio) {
   if (!telemetryEnabled()) return;
-  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, shell: currentShell, ...result ? { result } : {} });
+  buffer.push({
+    type,
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
+    client_version: CLIENT_VERSION,
+    shell: currentShell,
+    ...result ? { result } : {},
+    ...band ? { band } : {},
+    ...capRatio ? { cap_ratio: capRatio } : {}
+  });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
       void flush();
@@ -513,7 +539,7 @@ function record(type, result) {
 }
 var recordInstall = () => record("install");
 var recordAgentActive = () => record("agent_active");
-var recordDecision = (status, violatedRule) => record("decision", resultOf(status, violatedRule));
+var recordDecision = (status, violatedRule, amount, perTxMax) => record("decision", resultOf(status, violatedRule), bandOf(amount), capRatioOf(amount, perTxMax));
 var recordUpgradeIntent = () => record("upgrade_intent");
 async function flush() {
   if (flushTimer) {
@@ -576,10 +602,11 @@ function makeCore() {
     if (!url || !key) throw new Error("FIDACY_MODE=http requires FIDACY_API_URL and FIDACY_API_KEY");
     return new HttpFidacyCore(url, key, process.env.FIDACY_PUBLIC_KEY_PEM ?? "");
   }
+  let activeMandate = buildMandate();
   const dev = new DevFidacyCore({
-    mandate: buildMandate(),
+    mandate: activeMandate,
     auditLogPath: auditLogPath(),
-    onDecision: (d) => recordDecision(d.status, d.violatedRule)
+    onDecision: (d) => recordDecision(d.status, d.violatedRule, d.request?.amount, activeMandate?.allow?.perTxMax)
   });
   const mtimeOf = () => statSync(configPath(), { throwIfNoEntry: false })?.mtimeMs ?? 0;
   let seenMtime = mtimeOf();
@@ -587,7 +614,8 @@ function makeCore() {
     const m = mtimeOf();
     if (m !== seenMtime) {
       seenMtime = m;
-      dev.setMandate(buildMandate());
+      activeMandate = buildMandate();
+      dev.setMandate(activeMandate);
     }
   };
   return {
@@ -786,7 +814,7 @@ async function findArtifacts(sha2562, cfg) {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.1.18" : "dev";
+var CLIENT_VERSION2 = true ? "0.1.20" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -870,6 +898,9 @@ function decisionNudge(status, violatedRule, upgradeToolName) {
   if (status === "DENY" && nudgeOnce("first_deny")) {
     return `Fidacy just blocked this for you \u2014 for server-signed, anchored proof of every block (free account, local history migrates), call the ${upgradeToolName} tool.`;
   }
+  if (count === 25 && nudgeOnce("proof_teaser")) {
+    return `Your local chain now holds ${count} decisions only you can read. Anchor them and anyone can verify at fidacy.com/verify, no account needed on their side. Call the ${upgradeToolName} tool (free) to make your history portable.`;
+  }
   if (count === 10 && nudgeOnce("milestone_10")) {
     return `That's 10 actions gated on this install. For a signed, Bitcoin-anchored history of all of them (free account), call the ${upgradeToolName} tool.`;
   }
@@ -886,7 +917,7 @@ function weekOneBootNudge(upgradeToolName) {
 var state = ensureState();
 var core = makeCore();
 var subject = process.env.FIDACY_SUBJECT ?? "agent:demo";
-var SERVER_VERSION = true ? "0.1.18" : "dev";
+var SERVER_VERSION = true ? "0.1.20" : "dev";
 var server = new McpServer({ name: "fidacy", version: SERVER_VERSION });
 server.registerTool(
   "request_payment",

package/dist/lib.js

@@ -594,7 +594,25 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.18" : "dev";
+var CLIENT_VERSION = true ? "0.1.20" : "dev";
+function bandOf(amount) {
+  if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
+  if (amount < 10) return "lt10";
+  if (amount < 100) return "10_99";
+  if (amount < 1e3) return "100_999";
+  if (amount < 1e4) return "1k_10k";
+  if (amount < 1e5) return "10k_100k";
+  return "gte100k";
+}
+function capRatioOf(amount, perTxMax) {
+  if (typeof amount !== "number" || typeof perTxMax !== "number") return void 0;
+  if (!Number.isFinite(amount) || !Number.isFinite(perTxMax) || perTxMax <= 0 || amount <= perTxMax) return void 0;
+  const r = amount / perTxMax;
+  if (r < 2) return "1_2x";
+  if (r < 5) return "2_5x";
+  if (r < 10) return "5_10x";
+  return "gt10x";
+}
 var currentShell = "mcp";
 function setTelemetryShell(shell) {
   currentShell = shell;
@@ -627,9 +645,17 @@ function resultOf(status, violatedRule) {
   if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
-function record(type, result) {
+function record(type, result, band, capRatio) {
   if (!telemetryEnabled()) return;
-  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, shell: currentShell, ...result ? { result } : {} });
+  buffer.push({
+    type,
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
+    client_version: CLIENT_VERSION,
+    shell: currentShell,
+    ...result ? { result } : {},
+    ...band ? { band } : {},
+    ...capRatio ? { cap_ratio: capRatio } : {}
+  });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
       void flush();
@@ -639,7 +665,7 @@ function record(type, result) {
 }
 var recordInstall = () => record("install");
 var recordAgentActive = () => record("agent_active");
-var recordDecision = (status, violatedRule) => record("decision", resultOf(status, violatedRule));
+var recordDecision = (status, violatedRule, amount, perTxMax) => record("decision", resultOf(status, violatedRule), bandOf(amount), capRatioOf(amount, perTxMax));
 var recordUpgradeIntent = () => record("upgrade_intent");
 async function flush() {
   if (flushTimer) {
@@ -702,10 +728,11 @@ function makeCore() {
     if (!url || !key) throw new Error("FIDACY_MODE=http requires FIDACY_API_URL and FIDACY_API_KEY");
     return new HttpFidacyCore(url, key, process.env.FIDACY_PUBLIC_KEY_PEM ?? "");
   }
+  let activeMandate = buildMandate();
   const dev = new DevFidacyCore({
-    mandate: buildMandate(),
+    mandate: activeMandate,
     auditLogPath: auditLogPath(),
-    onDecision: (d) => recordDecision(d.status, d.violatedRule)
+    onDecision: (d) => recordDecision(d.status, d.violatedRule, d.request?.amount, activeMandate?.allow?.perTxMax)
   });
   const mtimeOf = () => statSync(configPath(), { throwIfNoEntry: false })?.mtimeMs ?? 0;
   let seenMtime = mtimeOf();
@@ -713,7 +740,8 @@ function makeCore() {
     const m = mtimeOf();
     if (m !== seenMtime) {
       seenMtime = m;
-      dev.setMandate(buildMandate());
+      activeMandate = buildMandate();
+      dev.setMandate(activeMandate);
     }
   };
   return {
@@ -743,7 +771,7 @@ function requestUpgrade() {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.1.18" : "dev";
+var CLIENT_VERSION2 = true ? "0.1.20" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -815,6 +843,9 @@ function decisionNudge(status, violatedRule, upgradeToolName) {
   if (status === "DENY" && nudgeOnce("first_deny")) {
     return `Fidacy just blocked this for you \u2014 for server-signed, anchored proof of every block (free account, local history migrates), call the ${upgradeToolName} tool.`;
   }
+  if (count === 25 && nudgeOnce("proof_teaser")) {
+    return `Your local chain now holds ${count} decisions only you can read. Anchor them and anyone can verify at fidacy.com/verify, no account needed on their side. Call the ${upgradeToolName} tool (free) to make your history portable.`;
+  }
   if (count === 10 && nudgeOnce("milestone_10")) {
     return `That's 10 actions gated on this install. For a signed, Bitcoin-anchored history of all of them (free account), call the ${upgradeToolName} tool.`;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.1.18",
+  "version": "0.1.20",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",