@fidacy/mcp 0.2.10 → 0.3.1

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.3.1
+
+### Patch Changes
+
+- 01f0734: Telemetry now flushes on process exit. The 2s flush timer is unref'd so a short-lived process could exit with a full buffer and silently lose it, which is exactly how plugin-channel installs went uncounted. A beforeExit hook sends the last batch, best-effort as always.
+
+## 0.3.0
+
+### Minor Changes
+
+- 0a1bf9e: Anonymous telemetry now counts tool usage: a `tool_use` event with which tool ran (assess, anchor, check, verify, explain) and nothing else. Same privacy invariant as every other event: an allowlisted enum on the wire, never the tool's content, payee, amount, hash or mandate. Opt out as always with FIDACY_DISABLE_TELEMETRY=1.
+
+### Patch Changes
+
+- 0a1bf9e: Fix the free-trial decision counter being wiped by the background auto-provision write. The provision task captured config.json before its network call and wrote that stale snapshot back after, erasing every decision counted in between, so the 20-decision anonymous trial reset on every process restart. The provision write now merges the key onto a fresh read, and the counter write self-heals from the in-process floor. The wall now holds across restarts: 20 free decisions per install, as designed.
+
 ## 0.2.10
 
 ### Patch Changes

package/dist/core.js

@@ -461,7 +461,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.2.10" : "dev";
+var CLIENT_VERSION = true ? "0.3.1" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -497,6 +497,14 @@ function anonId() {
 }
 var buffer = [];
 var flushTimer = null;
+var exitHookArmed = false;
+function armExitFlush() {
+  if (exitHookArmed || typeof process === "undefined" || typeof process.once !== "function") return;
+  exitHookArmed = true;
+  process.once("beforeExit", () => {
+    if (buffer.length > 0) void flush();
+  });
+}
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
@@ -509,8 +517,9 @@ function resultOf(status, violatedRule) {
   if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
-function record(type, result, band, capRatio) {
+function record(type, result, band, capRatio, action) {
   if (!telemetryEnabled()) return;
+  armExitFlush();
   buffer.push({
     type,
     ts: (/* @__PURE__ */ new Date()).toISOString(),
@@ -518,7 +527,8 @@ function record(type, result, band, capRatio) {
     shell: currentShell,
     ...result ? { result } : {},
     ...band ? { band } : {},
-    ...capRatio ? { cap_ratio: capRatio } : {}
+    ...capRatio ? { cap_ratio: capRatio } : {},
+    ...action ? { action } : {}
   });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {

package/dist/index.js

@@ -490,7 +490,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.2.10" : "dev";
+var CLIENT_VERSION = true ? "0.3.1" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -526,6 +526,14 @@ function anonId() {
 }
 var buffer = [];
 var flushTimer = null;
+var exitHookArmed = false;
+function armExitFlush() {
+  if (exitHookArmed || typeof process === "undefined" || typeof process.once !== "function") return;
+  exitHookArmed = true;
+  process.once("beforeExit", () => {
+    if (buffer.length > 0) void flush();
+  });
+}
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
@@ -538,8 +546,9 @@ function resultOf(status, violatedRule) {
   if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
-function record(type, result, band, capRatio) {
+function record(type, result, band, capRatio, action) {
   if (!telemetryEnabled()) return;
+  armExitFlush();
   buffer.push({
     type,
     ts: (/* @__PURE__ */ new Date()).toISOString(),
@@ -547,7 +556,8 @@ function record(type, result, band, capRatio) {
     shell: currentShell,
     ...result ? { result } : {},
     ...band ? { band } : {},
-    ...capRatio ? { cap_ratio: capRatio } : {}
+    ...capRatio ? { cap_ratio: capRatio } : {},
+    ...action ? { action } : {}
   });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
@@ -560,6 +570,7 @@ var recordInstall = () => record("install");
 var recordAgentActive = () => record("agent_active");
 var recordDecision = (status, violatedRule, amount, perTxMax) => record("decision", resultOf(status, violatedRule), bandOf(amount), capRatioOf(amount, perTxMax));
 var recordUpgradeIntent = () => record("upgrade_intent");
+var recordToolUse = (action) => record("tool_use", void 0, void 0, void 0, action);
 async function flush() {
   if (flushTimer) {
     clearTimeout(flushTimer);
@@ -834,7 +845,7 @@ async function findArtifacts(sha2562, cfg) {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.2.10" : "dev";
+var CLIENT_VERSION2 = true ? "0.3.1" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -858,8 +869,9 @@ async function autoProvision() {
     if (!res.ok) return "failed";
     const data = await res.json();
     if (typeof data.api_key !== "string" || !data.api_key) return "failed";
+    const fresh = readConfig() ?? cfg;
     writeConfig({
-      ...cfg,
+      ...fresh,
       api_key: data.api_key,
       tier: data.tier === "paid" ? "paid" : "free"
     });
@@ -906,7 +918,7 @@ function bumpDecisionCount() {
   sessionDecisions += 1;
   const cfg = readConfig();
   if (!cfg) return sessionDecisions;
-  const n = (cfg.decisions_count ?? 0) + 1;
+  const n = Math.max((cfg.decisions_count ?? 0) + 1, sessionDecisions);
   cfg.decisions_count = n;
   try {
     writeConfig(cfg);
@@ -1264,7 +1276,7 @@ function renderAlertLine(alerts) {
 var state = ensureState();
 var core = makeCore();
 var subject = process.env.FIDACY_SUBJECT ?? "agent:demo";
-var SERVER_VERSION = true ? "0.2.10" : "dev";
+var SERVER_VERSION = true ? "0.3.1" : "dev";
 var bootClaim = claimUrl();
 var server = new McpServer(
   { name: "fidacy", version: SERVER_VERSION },
@@ -1331,6 +1343,7 @@ server.registerTool(
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
   },
   async () => {
+    recordToolUse("verify");
     const m = await core.getMandate(subject);
     const payload = { mandate: m, fidacyPublicKey: core.publicKey() };
     const claim = process.env.FIDACY_ENGINE_API_KEY ? null : claimUrl();
@@ -1409,6 +1422,7 @@ server.registerTool(
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
   },
   async ({ decisionId }) => {
+    recordToolUse("explain");
     const records = await core.history(5e3);
     const record2 = records.find((r) => r.decisionId === decisionId);
     if (!record2) {
@@ -1469,6 +1483,7 @@ server.registerTool(
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }
   },
   async ({ kind, mandate, mandateType, idempotencyKey, spendingMandate, a2a }) => {
+    recordToolUse("assess");
     const engineUrl = process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com";
     const apiKey = (process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
     if (!apiKey) {
@@ -1519,6 +1534,7 @@ server.registerTool(
     annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }
   },
   async ({ path, sha256: sha2562, kind, label, subject: subj }) => {
+    recordToolUse("anchor");
     const engineUrl = process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com";
     const apiKey = (process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
     if (!apiKey) {
@@ -1573,6 +1589,7 @@ server.registerTool(
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }
   },
   async ({ path, sha256: sha2562 }) => {
+    recordToolUse("check");
     const engineUrl = process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com";
     const apiKey = (process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
     if (!apiKey) {

package/dist/lib.d.ts

@@ -3,7 +3,7 @@ export { makeCore } from "./core.js";
 export { ensureState, readConfig } from "./config.js";
 export { requestUpgrade, upgradeUrl } from "./upgrade.js";
 export { autoProvision } from "./provision.js";
-export { recordInstall, recordAgentActive, setTelemetryShell } from "./telemetry.js";
+export { recordInstall, recordAgentActive, setTelemetryShell, flush as flushTelemetry } from "./telemetry.js";
 export { decisionNudge, weekOneBootNudge, nudgeOnce, installAgeDays, claimUrl, noKeyCta } from "./nudges.js";
 export { FREE_DECISIONS, activationGate, activationBootLine, trialCountdownLine, hasEngineKey, remainingFree } from "./activation.js";
 export { summarize, renderSummary, toRows, renderRows, explainRule, withinDays } from "./reporting.js";

package/dist/lib.js

@@ -613,7 +613,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.2.10" : "dev";
+var CLIENT_VERSION = true ? "0.3.1" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -652,6 +652,14 @@ function anonId() {
 }
 var buffer = [];
 var flushTimer = null;
+var exitHookArmed = false;
+function armExitFlush() {
+  if (exitHookArmed || typeof process === "undefined" || typeof process.once !== "function") return;
+  exitHookArmed = true;
+  process.once("beforeExit", () => {
+    if (buffer.length > 0) void flush();
+  });
+}
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
@@ -664,8 +672,9 @@ function resultOf(status, violatedRule) {
   if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
-function record(type, result, band, capRatio) {
+function record(type, result, band, capRatio, action) {
   if (!telemetryEnabled()) return;
+  armExitFlush();
   buffer.push({
     type,
     ts: (/* @__PURE__ */ new Date()).toISOString(),
@@ -673,7 +682,8 @@ function record(type, result, band, capRatio) {
     shell: currentShell,
     ...result ? { result } : {},
     ...band ? { band } : {},
-    ...capRatio ? { cap_ratio: capRatio } : {}
+    ...capRatio ? { cap_ratio: capRatio } : {},
+    ...action ? { action } : {}
   });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
@@ -791,7 +801,7 @@ function requestUpgrade() {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.2.10" : "dev";
+var CLIENT_VERSION2 = true ? "0.3.1" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -815,8 +825,9 @@ async function autoProvision() {
     if (!res.ok) return "failed";
     const data = await res.json();
     if (typeof data.api_key !== "string" || !data.api_key) return "failed";
+    const fresh = readConfig() ?? cfg;
     writeConfig({
-      ...cfg,
+      ...fresh,
       api_key: data.api_key,
       tier: data.tier === "paid" ? "paid" : "free"
     });
@@ -851,7 +862,7 @@ function bumpDecisionCount() {
   sessionDecisions += 1;
   const cfg = readConfig();
   if (!cfg) return sessionDecisions;
-  const n = (cfg.decisions_count ?? 0) + 1;
+  const n = Math.max((cfg.decisions_count ?? 0) + 1, sessionDecisions);
   cfg.decisions_count = n;
   try {
     writeConfig(cfg);
@@ -1154,6 +1165,7 @@ export {
   ensureState,
   evaluate,
   explainRule,
+  flush as flushTelemetry,
   hasEngineKey,
   httpRedeem,
   installAgeDays,

package/dist/telemetry.d.ts

@@ -1,4 +1,7 @@
-export type TelemetryEventType = "install" | "agent_active" | "decision" | "upgrade_intent";
+export type TelemetryEventType = "install" | "agent_active" | "decision" | "upgrade_intent" | "tool_use";
+/** Which tool a tool_use event counts (0059). An ENUM mirrored by the ingest
+ *  allowlist: which tool ran, never what it ran on. */
+export type ToolAction = "assess" | "anchor" | "check" | "verify" | "explain";
 export type DecisionResult = "allow" | "deny_cap" | "deny_payee" | "deny_scope" | "deny_lookalike" | "deny_duplicate" | "deny_window" | "deny_invalid";
 /** Which shell this engine is embedded in. An ENUM mirrored by the ingest allowlist
  *  and the DB CHECK — never a free-form string, so it can't become a PII channel. */
@@ -18,10 +21,12 @@ export declare function telemetryEnabled(): boolean;
 /** Map a firewall violatedRule to the coarse, PII-free decision result enum. */
 export declare function resultOf(status: "ALLOW" | "DENY", violatedRule?: string): DecisionResult;
 /** Buffer an event (sync, never blocks, never throws). Auto-flushes shortly after. */
-export declare function record(type: TelemetryEventType, result?: DecisionResult, band?: AmountBand, capRatio?: CapRatioBand): void;
+export declare function record(type: TelemetryEventType, result?: DecisionResult, band?: AmountBand, capRatio?: CapRatioBand, action?: ToolAction): void;
 export declare const recordInstall: () => void;
 export declare const recordAgentActive: () => void;
 export declare const recordDecision: (status: "ALLOW" | "DENY", violatedRule?: string, amount?: number, perTxMax?: number) => void;
 export declare const recordUpgradeIntent: () => void;
+/** Count a tool invocation (which tool, never its content) — the agent-activity profile. */
+export declare const recordToolUse: (action: ToolAction) => void;
 /** Send the buffered batch fire-and-forget. Swallows all errors. Best-effort. */
 export declare function flush(): Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.2.10",
+  "version": "0.3.1",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",