@fidacy/mcp 0.1.23 → 0.1.25

package/dist/core.js

@@ -442,7 +442,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.23" : "dev";
+var CLIENT_VERSION = true ? "0.1.25" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";

package/dist/index.js

@@ -471,7 +471,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.23" : "dev";
+var CLIENT_VERSION = true ? "0.1.25" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -814,7 +814,7 @@ async function findArtifacts(sha2562, cfg) {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.1.23" : "dev";
+var CLIENT_VERSION2 = true ? "0.1.25" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -897,7 +897,7 @@ function installAgeDays() {
 function decisionNudge(status, violatedRule, upgradeToolName) {
   const count = bumpDecisionCount();
   const url = claimUrl();
-  const claimPath = url ? `open ${url} to see everything blocked on this install and claim it (free account, this history migrates)` : `call the ${upgradeToolName} tool (free account, this history migrates)`;
+  const claimPath = url ? `free account + free API key at ${url} (this install's history migrates)` : `call the ${upgradeToolName} tool (free account + free API key, this history migrates)`;
   if (status === "DENY" && violatedRule?.startsWith("duplicate_invoice") && nudgeOnce("bec_catch")) {
     return `That was a duplicate-invoice (BEC) catch, the #1 payment fraud. For your operator: ${claimPath}. On a hosted account every block like this is server-signed and anchored to Bitcoin: court-grade evidence.`;
   }
@@ -912,6 +912,19 @@ function decisionNudge(status, violatedRule, upgradeToolName) {
   }
   return null;
 }
+function hostedWallCta(feature) {
+  const url = claimUrl();
+  const cta = url ? `open ${url} \u2014 free account, this install's history migrates` : `call the upgrade tool \u2014 free account, your history migrates`;
+  const noun = feature === "anchor" ? "Bitcoin-anchored proofs" : "server-signed verdicts";
+  if (nudgeOnce("hosted_wall")) {
+    return `You've used this install's free allowance for ${noun} \u2014 the proofs anyone can re-verify at fidacy.com/verify, court-grade, not a local-only check. Keep them flowing: for your operator, ${cta}.`;
+  }
+  return `Free allowance for ${noun} reached. For your operator: ${cta}.`;
+}
+function noKeyCta() {
+  const url = claimUrl();
+  return url ? `free in ~1 min for your operator: open ${url} (this install's history migrates), or set FIDACY_ENGINE_API_KEY if you already have one` : `free in ~1 min: call the upgrade tool (your history migrates), or set FIDACY_ENGINE_API_KEY if you already have one`;
+}
 function weekOneBootNudge(upgradeToolName) {
   if (installAgeDays() >= 7 && nudgeOnce("week_1")) {
     const url = claimUrl();
@@ -924,7 +937,7 @@ function weekOneBootNudge(upgradeToolName) {
 var state = ensureState();
 var core = makeCore();
 var subject = process.env.FIDACY_SUBJECT ?? "agent:demo";
-var SERVER_VERSION = true ? "0.1.23" : "dev";
+var SERVER_VERSION = true ? "0.1.25" : "dev";
 var server = new McpServer({ name: "fidacy", version: SERVER_VERSION });
 server.registerTool(
   "request_payment",
@@ -974,7 +987,11 @@ server.registerTool(
   async () => {
     const m = await core.getMandate(subject);
     const payload = { mandate: m, fidacyPublicKey: core.publicKey() };
-    const text = JSON.stringify(payload, null, 2) + "\n\nThis mandate is local (free tier). Hosted mandates add team governance and server-signed verdicts \u2014 the upgrade tool starts a free account.";
+    const claim = process.env.FIDACY_ENGINE_API_KEY ? null : claimUrl();
+    const claimLine = claim ? `
+
+For your operator: free account + free API key, and this install's history migrates: ${claim}` : "";
+    const text = JSON.stringify(payload, null, 2) + "\n\nThis mandate is local (free tier). Hosted mandates add team governance and server-signed verdicts; a free account starts it." + claimLine;
     return { content: [{ type: "text", text }], structuredContent: payload };
   }
 );
@@ -1013,12 +1030,7 @@ server.registerTool(
     const apiKey = (process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
     if (!apiKey) {
       return {
-        content: [
-          {
-            type: "text",
-            text: "assess_action needs an engine key \u2014 free in about a minute: call the upgrade tool (your usage history migrates), or set FIDACY_ENGINE_API_KEY if you already have one."
-          }
-        ],
+        content: [{ type: "text", text: `assess_action needs an engine key \u2014 ${noKeyCta()}.` }],
         isError: true
       };
     }
@@ -1033,6 +1045,9 @@ server.registerTool(
       };
     } catch (e) {
       if (e instanceof AssessError) {
+        if (e.status === 402) {
+          return { content: [{ type: "text", text: hostedWallCta("verdict") }], isError: true };
+        }
         const reasons = e.rejection_reasons?.length ? " (" + e.rejection_reasons.map((x) => x.key).join(",") + ")" : "";
         return {
           content: [{ type: "text", text: `ASSESS ${e.status}: ${e.type}${reasons}` }],
@@ -1065,7 +1080,7 @@ server.registerTool(
     const apiKey = (process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
     if (!apiKey) {
       return {
-        content: [{ type: "text", text: "anchor_artifact needs an engine key \u2014 free in about a minute: call the upgrade tool, or set FIDACY_ENGINE_API_KEY if you already have one." }],
+        content: [{ type: "text", text: `anchor_artifact needs an engine key \u2014 ${noKeyCta()}.` }],
         isError: true
       };
     }
@@ -1094,6 +1109,9 @@ server.registerTool(
       };
     } catch (e) {
       if (e instanceof AssessError) {
+        if (e.status === 402) {
+          return { content: [{ type: "text", text: hostedWallCta("anchor") }], isError: true };
+        }
         return { content: [{ type: "text", text: `ANCHOR ${e.status}: ${e.type}` }], isError: true };
       }
       return { content: [{ type: "text", text: "ANCHOR failed: unexpected error" }], isError: true };
@@ -1180,7 +1198,8 @@ async function main() {
     void flush();
   });
   void autoProvision();
-  const verdictHint = process.env.FIDACY_ENGINE_API_KEY ? "" : " Verdicts: provisioning a free anonymous key in the background; to use your own, set FIDACY_ENGINE_API_KEY (get one at app.fidacy.com).";
+  const claim = claimUrl();
+  const verdictHint = process.env.FIDACY_ENGINE_API_KEY ? "" : claim ? ` This install is anonymous. Free account + free API key, and it keeps every block made here: ${claim} (or set FIDACY_ENGINE_API_KEY if you already have one).` : " Verdicts: provisioning a free anonymous key in the background; to use your own, set FIDACY_ENGINE_API_KEY (get one at app.fidacy.com).";
   const tierHint = state.firstRun ? " First run: free local tier active (deny-unknown payee + cap). Add trusted payees in ~/.fidacy/config.json." : ` Tier: ${state.config.tier} (local-first).`;
   const weekNudge = weekOneBootNudge("upgrade") ?? "";
   console.error("[fidacy] @fidacy/mcp ready on stdio: signed verdict + payment firewall." + tierHint + verdictHint + weekNudge);

package/dist/lib.js

@@ -594,7 +594,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.23" : "dev";
+var CLIENT_VERSION = true ? "0.1.25" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -771,7 +771,7 @@ function requestUpgrade() {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.1.23" : "dev";
+var CLIENT_VERSION2 = true ? "0.1.25" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -842,7 +842,7 @@ function installAgeDays() {
 function decisionNudge(status, violatedRule, upgradeToolName) {
   const count = bumpDecisionCount();
   const url = claimUrl();
-  const claimPath = url ? `open ${url} to see everything blocked on this install and claim it (free account, this history migrates)` : `call the ${upgradeToolName} tool (free account, this history migrates)`;
+  const claimPath = url ? `free account + free API key at ${url} (this install's history migrates)` : `call the ${upgradeToolName} tool (free account + free API key, this history migrates)`;
   if (status === "DENY" && violatedRule?.startsWith("duplicate_invoice") && nudgeOnce("bec_catch")) {
     return `That was a duplicate-invoice (BEC) catch, the #1 payment fraud. For your operator: ${claimPath}. On a hosted account every block like this is server-signed and anchored to Bitcoin: court-grade evidence.`;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.1.23",
+  "version": "0.1.25",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",