@fidacy/mcp 0.1.8 → 0.1.10

package/CHANGELOG.md

@@ -74,3 +74,14 @@ semantic versioning.
 - One install delivers both the signed verdict (assess_action) and the
   non-custodial payment firewall (request_payment), with the same signed,
   publicly verifiable proof as the SDK.
+
+## 0.1.10 — 2026-07-02
+
+- Telemetry: `shell` channel attribution (mcp | openclaw-plugin | crabtrap | sdk)
+  and `client_version` injected from package.json at build time (0.1.5 had shipped
+  stale through 0.1.9 in telemetry AND provision).
+- DENY responses now point to the `upgrade` tool (free account, signed anchored
+  proof of every block).
+- Onboarding: first-run `~/.fidacy/config.json` now writes the mandate template
+  explicitly (payees/categories/currency/caps) — adding a trusted payee is a
+  visible one-line edit; friendlier first-boot message (no more "dev mode" scare).

package/dist/core.js

@@ -213,7 +213,7 @@ var DevFidacyCore = class {
     this.priv = kp.privateKey;
     this.pubPem = publicKeyPem(kp.publicKey);
     if (kp.ephemeral)
-      console.error("[fidacy] dev mode: ephemeral signing key. Production: set FIDACY_SIGNING_KEY_B64, or FIDACY_MODE=http + FIDACY_API_URL + FIDACY_API_KEY to use the live core.");
+      console.error("[fidacy] local firewall active, deny-by-default. Grants are signed with a per-session key (fine for local use); set FIDACY_SIGNING_KEY_B64 for a stable key, or FIDACY_MODE=http to use the hosted core.");
     this.mandate = opts.mandate;
     this.store = new FileAuditStore(opts.auditLogPath ?? "./fidacy-audit.log");
     this.onDecision = opts.onDecision;
@@ -357,7 +357,8 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = "0.1.5";
+var CLIENT_VERSION = true ? "0.1.10" : "dev";
+var currentShell = "mcp";
 function telemetryEnabled() {
   const v = (process.env.FIDACY_DISABLE_TELEMETRY ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -383,7 +384,7 @@ function resultOf(status, violatedRule) {
 }
 function record(type, result) {
   if (!telemetryEnabled()) return;
-  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, ...result ? { result } : {} });
+  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, shell: currentShell, ...result ? { result } : {} });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
       void flush();

package/dist/index.js

@@ -220,7 +220,7 @@ var DevFidacyCore = class {
     this.priv = kp.privateKey;
     this.pubPem = publicKeyPem(kp.publicKey);
     if (kp.ephemeral)
-      console.error("[fidacy] dev mode: ephemeral signing key. Production: set FIDACY_SIGNING_KEY_B64, or FIDACY_MODE=http + FIDACY_API_URL + FIDACY_API_KEY to use the live core.");
+      console.error("[fidacy] local firewall active, deny-by-default. Grants are signed with a per-session key (fine for local use); set FIDACY_SIGNING_KEY_B64 for a stable key, or FIDACY_MODE=http to use the hosted core.");
     this.mandate = opts.mandate;
     this.store = new FileAuditStore(opts.auditLogPath ?? "./fidacy-audit.log");
     this.onDecision = opts.onDecision;
@@ -359,7 +359,12 @@ function writeConfig(cfg) {
 function ensureState() {
   const existing = readConfig();
   if (existing) return { config: existing, firstRun: false };
-  const config = { anon_id: randomUUID2(), tier: "free", api_key: null };
+  const config = {
+    anon_id: randomUUID2(),
+    tier: "free",
+    api_key: null,
+    mandate: { payees: [], categories: ["*"], currency: "USD", perTxMax: 2500, maxTotal: 1e4 }
+  };
   try {
     writeConfig(config);
   } catch {
@@ -380,7 +385,8 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = "0.1.5";
+var CLIENT_VERSION = true ? "0.1.10" : "dev";
+var currentShell = "mcp";
 function telemetryEnabled() {
   const v = (process.env.FIDACY_DISABLE_TELEMETRY ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -406,7 +412,7 @@ function resultOf(status, violatedRule) {
 }
 function record(type, result) {
   if (!telemetryEnabled()) return;
-  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, ...result ? { result } : {} });
+  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, shell: currentShell, ...result ? { result } : {} });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
       void flush();
@@ -603,7 +609,7 @@ async function postOnce(fetchImpl, url, headers, payload, timeoutMs) {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = "0.1.5";
+var CLIENT_VERSION2 = true ? "0.1.10" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -684,7 +690,7 @@ server.registerTool(
     const d = await core.decide(req, subject);
     const out = { status: d.status, decisionId: d.decisionId, grant: d.grant, violatedRule: d.violatedRule };
     const human = d.status === "ALLOW" ? `ALLOW (decision ${d.decisionId})${req.invoiceRef ? ` for invoice ${req.invoiceRef}` : ""}. To settle, call execute_payment with the SAME payee, amount, currency, and idempotencyKey, and set "grant" to EXACTLY this signed value:
-${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}. No grant issued, this payment cannot proceed. The denial itself is recorded in the tamper-evident, hash-chained audit: call get_audit_proof with decisionId ${d.decisionId} for the proof of what was blocked.`;
+${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}. No grant issued, this payment cannot proceed. The denial itself is recorded in the tamper-evident, hash-chained audit: call get_audit_proof with decisionId ${d.decisionId} for the proof of what was blocked. Fidacy just blocked this for you \u2014 for server-signed, anchored proof of every block (free account, local history migrates), call the upgrade tool.`;
     return { content: [{ type: "text", text: human }], structuredContent: out };
   }
 );

package/dist/lib.js

@@ -146,13 +146,34 @@ var ReferenceRail = class {
     return { railRef };
   }
 };
+function httpRedeem(coreUrl, apiKey) {
+  const base = String(coreUrl ?? "").replace(/\/+$/, "");
+  const u = new URL(base);
+  if (u.protocol !== "https:" && !(u.protocol === "http:" && (u.hostname === "localhost" || u.hostname === "127.0.0.1"))) {
+    throw new Error("core URL must be https:// (the API key is sent to it)");
+  }
+  return async (grant) => {
+    const res = await fetch(`${base}/v1/grant/redeem`, {
+      method: "POST",
+      headers: { "content-type": "application/json", authorization: `Bearer ${apiKey}` },
+      body: JSON.stringify({ grant })
+    });
+    if (res.status === 200)
+      return true;
+    if (res.status === 409)
+      return false;
+    throw new Error(`redeem -> ${res.status}`);
+  };
+}
 var GrantEnforcingExecutor = class {
   rail;
   used = /* @__PURE__ */ new Set();
   pub;
-  constructor(publicKeyPem2, rail) {
+  redeem;
+  constructor(publicKeyPem2, rail, opts) {
     this.rail = rail;
     this.pub = createPublicKey(publicKeyPem2);
+    this.redeem = opts?.redeem;
   }
   async execute(req, grant) {
     if (!grant)
@@ -183,6 +204,16 @@ var GrantEnforcingExecutor = class {
     if (req.invoiceRef != null && req.invoiceRef !== (p.invoiceRef ?? null)) {
       return { status: "REFUSED", reason: "invoice_mismatch" };
     }
+    if (this.redeem) {
+      let first;
+      try {
+        first = await this.redeem(grant);
+      } catch {
+        return { status: "REFUSED", reason: "redeem_unavailable" };
+      }
+      if (!first)
+        return { status: "REFUSED", reason: "grant_replayed" };
+    }
     this.used.add(p.decisionId);
     const { railRef } = await this.rail.execute(req);
     return { status: "EXECUTED", railRef, decisionId: p.decisionId };
@@ -308,7 +339,7 @@ var DevFidacyCore = class {
     this.priv = kp.privateKey;
     this.pubPem = publicKeyPem(kp.publicKey);
     if (kp.ephemeral)
-      console.error("[fidacy] dev mode: ephemeral signing key. Production: set FIDACY_SIGNING_KEY_B64, or FIDACY_MODE=http + FIDACY_API_URL + FIDACY_API_KEY to use the live core.");
+      console.error("[fidacy] local firewall active, deny-by-default. Grants are signed with a per-session key (fine for local use); set FIDACY_SIGNING_KEY_B64 for a stable key, or FIDACY_MODE=http to use the hosted core.");
     this.mandate = opts.mandate;
     this.store = new FileAuditStore(opts.auditLogPath ?? "./fidacy-audit.log");
     this.onDecision = opts.onDecision;
@@ -399,6 +430,7 @@ var HttpFidacyCore = class {
 };
 
 // src/config.ts
+import { randomUUID as randomUUID3 } from "node:crypto";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import {
@@ -438,6 +470,26 @@ function readConfig() {
     return null;
   }
 }
+function writeConfig(cfg) {
+  const dir = configDir();
+  mkdirSync(dir, { recursive: true, mode: 448 });
+  writeFileSync(configPath(), JSON.stringify(cfg, null, 2), { mode: 384 });
+}
+function ensureState() {
+  const existing = readConfig();
+  if (existing) return { config: existing, firstRun: false };
+  const config = {
+    anon_id: randomUUID3(),
+    tier: "free",
+    api_key: null,
+    mandate: { payees: [], categories: ["*"], currency: "USD", perTxMax: 2500, maxTotal: 1e4 }
+  };
+  try {
+    writeConfig(config);
+  } catch {
+  }
+  return { config, firstRun: true };
+}
 function resolveMandateRules(cfg) {
   const m = cfg?.mandate ?? {};
   const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
@@ -452,7 +504,11 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = "0.1.5";
+var CLIENT_VERSION = true ? "0.1.10" : "dev";
+var currentShell = "mcp";
+function setTelemetryShell(shell) {
+  currentShell = shell;
+}
 function telemetryEnabled() {
   const v = (process.env.FIDACY_DISABLE_TELEMETRY ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -478,7 +534,7 @@ function resultOf(status, violatedRule) {
 }
 function record(type, result) {
   if (!telemetryEnabled()) return;
-  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, ...result ? { result } : {} });
+  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, shell: currentShell, ...result ? { result } : {} });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
       void flush();
@@ -486,7 +542,10 @@ function record(type, result) {
     if (typeof flushTimer.unref === "function") flushTimer.unref();
   }
 }
+var recordInstall = () => record("install");
+var recordAgentActive = () => record("agent_active");
 var recordDecision = (status, violatedRule) => record("decision", resultOf(status, violatedRule));
+var recordUpgradeIntent = () => record("upgrade_intent");
 async function flush() {
   if (flushTimer) {
     clearTimeout(flushTimer);
@@ -554,22 +613,79 @@ function makeCore() {
     onDecision: (d) => recordDecision(d.status, d.violatedRule)
   });
 }
+
+// src/upgrade.ts
+function upgradeUrl() {
+  const base = (process.env.FIDACY_APP_URL ?? "https://app.fidacy.com").replace(/\/$/, "");
+  const anon = readConfig()?.anon_id ?? "";
+  return `${base}/upgrade?anon=${encodeURIComponent(anon)}`;
+}
+function requestUpgrade() {
+  recordUpgradeIntent();
+  const anonId2 = readConfig()?.anon_id ?? "";
+  return { url: upgradeUrl(), anonId: anonId2 };
+}
+
+// src/provision.ts
+var CLIENT_VERSION2 = true ? "0.1.10" : "dev";
+function provisionEnabled() {
+  const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
+  return !(v === "1" || v === "true" || v === "yes");
+}
+function endpoint2() {
+  const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
+  return `${base}/v1/provision`;
+}
+async function autoProvision() {
+  if (!provisionEnabled()) return "skipped";
+  const cfg = readConfig();
+  if (!cfg) return "skipped";
+  if (cfg.api_key) return "skipped";
+  try {
+    const res = await fetch(endpoint2(), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ anon_id: cfg.anon_id, client_version: CLIENT_VERSION2 })
+    });
+    if (res.status === 429) return "rate_limited";
+    if (!res.ok) return "failed";
+    const data = await res.json();
+    if (typeof data.api_key !== "string" || !data.api_key) return "failed";
+    writeConfig({
+      ...cfg,
+      api_key: data.api_key,
+      tier: data.tier === "paid" ? "paid" : "free"
+    });
+    return "provisioned";
+  } catch {
+    return "failed";
+  }
+}
 export {
   DevFidacyCore,
   FileAuditStore,
   GrantEnforcingExecutor,
   HttpFidacyCore,
   ReferenceRail,
+  autoProvision,
   canonInvoice,
+  ensureState,
   evaluate,
+  httpRedeem,
   loadOrGenerateKeyPair,
   lookalikePayee,
   makeCore,
   publicKeyPem,
+  readConfig,
+  recordAgentActive,
+  recordInstall,
+  requestUpgrade,
   requireHttpsBase,
+  setTelemetryShell,
   sha256,
   sign,
   stableStringify,
+  upgradeUrl,
   validateRequest,
   verify,
   verifyGrant

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",
@@ -36,12 +36,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "build": "node scripts/bundle.mjs",
-    "dev": "tsx watch src/index.ts",
-    "start": "node dist/index.js",
-    "prepublishOnly": "npm run build"
-  },
   "engines": {
     "node": ">=18"
   },
@@ -50,9 +44,19 @@
     "zod": "^3.25.0"
   },
   "devDependencies": {
-    "@fidacy/firewall": "workspace:*",
     "@types/node": "^22.10.0",
     "tsx": "^4.19.2",
-    "typescript": "^5.7.2"
+    "typescript": "^5.7.2",
+    "@fidacy/firewall": "0.1.0"
+  },
+  "mcpName": "com.fidacy/mcp",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lucaslubi/fidacy-mcp.git"
+  },
+  "scripts": {
+    "build": "node scripts/bundle.mjs",
+    "dev": "tsx watch src/index.ts",
+    "start": "node dist/index.js"
   }
-}
+}