@fidacy/mcp 0.2.9 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## 0.3.0
+
+### Minor Changes
+
+- 0a1bf9e: Anonymous telemetry now counts tool usage: a `tool_use` event with which tool ran (assess, anchor, check, verify, explain) and nothing else. Same privacy invariant as every other event: an allowlisted enum on the wire, never the tool's content, payee, amount, hash or mandate. Opt out as always with FIDACY_DISABLE_TELEMETRY=1.
+
+### Patch Changes
+
+- 0a1bf9e: Fix the free-trial decision counter being wiped by the background auto-provision write. The provision task captured config.json before its network call and wrote that stale snapshot back after, erasing every decision counted in between, so the 20-decision anonymous trial reset on every process restart. The provision write now merges the key onto a fresh read, and the counter write self-heals from the in-process floor. The wall now holds across restarts: 20 free decisions per install, as designed.
+
+## 0.2.10
+
+### Patch Changes
+
+- 2e846a7: Funnel: move the strongest claim nudge before the activation wall, and make the
+  first-block nudge scary-but-true.
+
+  The proof-teaser nudge fired at decision 25, stranded behind the 20-decision
+  activation wall: once the firewall fails closed at 20, denied calls stop
+  advancing the counter, so 25 was never reached and the single strongest reason
+  to claim (the history you already built) never showed. It now fires at 15, five
+  decisions before the wall — carrot before stick, which is the highest-converting
+  moment the PLG research points to.
+
+  The first-deny nudge now cites the real $441,788 agent incident. Grounded fear,
+  never manufactured: for a company whose pitch is verify-don't-trust, a cited
+  fact converts and a fabricated panic would be self-refuting.
+
 ## 0.2.9
 
 ### Patch Changes

package/dist/core.js

@@ -461,7 +461,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.2.9" : "dev";
+var CLIENT_VERSION = true ? "0.3.0" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -509,7 +509,7 @@ function resultOf(status, violatedRule) {
   if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
-function record(type, result, band, capRatio) {
+function record(type, result, band, capRatio, action) {
   if (!telemetryEnabled()) return;
   buffer.push({
     type,
@@ -518,7 +518,8 @@ function record(type, result, band, capRatio) {
     shell: currentShell,
     ...result ? { result } : {},
     ...band ? { band } : {},
-    ...capRatio ? { cap_ratio: capRatio } : {}
+    ...capRatio ? { cap_ratio: capRatio } : {},
+    ...action ? { action } : {}
   });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {

package/dist/index.js

@@ -490,7 +490,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.2.9" : "dev";
+var CLIENT_VERSION = true ? "0.3.0" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -538,7 +538,7 @@ function resultOf(status, violatedRule) {
   if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
-function record(type, result, band, capRatio) {
+function record(type, result, band, capRatio, action) {
   if (!telemetryEnabled()) return;
   buffer.push({
     type,
@@ -547,7 +547,8 @@ function record(type, result, band, capRatio) {
     shell: currentShell,
     ...result ? { result } : {},
     ...band ? { band } : {},
-    ...capRatio ? { cap_ratio: capRatio } : {}
+    ...capRatio ? { cap_ratio: capRatio } : {},
+    ...action ? { action } : {}
   });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
@@ -560,6 +561,7 @@ var recordInstall = () => record("install");
 var recordAgentActive = () => record("agent_active");
 var recordDecision = (status, violatedRule, amount, perTxMax) => record("decision", resultOf(status, violatedRule), bandOf(amount), capRatioOf(amount, perTxMax));
 var recordUpgradeIntent = () => record("upgrade_intent");
+var recordToolUse = (action) => record("tool_use", void 0, void 0, void 0, action);
 async function flush() {
   if (flushTimer) {
     clearTimeout(flushTimer);
@@ -834,7 +836,7 @@ async function findArtifacts(sha2562, cfg) {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.2.9" : "dev";
+var CLIENT_VERSION2 = true ? "0.3.0" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -858,8 +860,9 @@ async function autoProvision() {
     if (!res.ok) return "failed";
     const data = await res.json();
     if (typeof data.api_key !== "string" || !data.api_key) return "failed";
+    const fresh = readConfig() ?? cfg;
     writeConfig({
-      ...cfg,
+      ...fresh,
       api_key: data.api_key,
       tier: data.tier === "paid" ? "paid" : "free"
     });
@@ -906,7 +909,7 @@ function bumpDecisionCount() {
   sessionDecisions += 1;
   const cfg = readConfig();
   if (!cfg) return sessionDecisions;
-  const n = (cfg.decisions_count ?? 0) + 1;
+  const n = Math.max((cfg.decisions_count ?? 0) + 1, sessionDecisions);
   cfg.decisions_count = n;
   try {
     writeConfig(cfg);
@@ -927,13 +930,13 @@ function decisionNudge(status, violatedRule, upgradeToolName) {
     return `That was a duplicate-invoice (BEC) catch, the #1 payment fraud. For your operator: ${claimPath}. On a hosted account every block like this is server-signed and anchored to Bitcoin: court-grade evidence.`;
   }
   if (status === "DENY" && nudgeOnce("first_deny")) {
-    return `Fidacy just blocked this for you. For your operator: ${claimPath}.`;
+    return `Fidacy just blocked this payment before it moved. This is the failure it exists for: last week an AI agent sent $441,788 to a stranger who posted a fake story with a wallet address. Nothing was checking it. For your operator: ${claimPath}.`;
   }
   if (status === "ALLOW" && nudgeOnce("first_allow")) {
     return `Fidacy authorized this and signed the decision. For your operator: ${claimPath}.`;
   }
-  if (count === 25 && nudgeOnce("proof_teaser")) {
-    return `Your local chain now holds ${count} decisions only you can read. Anchor them and anyone can verify at fidacy.com/verify, no account needed on their side. For your operator: ${claimPath}.`;
+  if (count === 15 && nudgeOnce("proof_teaser")) {
+    return `Fidacy has now checked ${count} payments on this agent and stands between it and the wrong one, the prompt-injected payee, the duplicate, the over-limit charge. That protection pauses after 20 decisions without a free key. Keep the agent covered: ${claimPath}.`;
   }
   if (count === 10 && nudgeOnce("milestone_10")) {
     return `That's 10 actions gated on this install. For your operator: ${claimPath}.`;
@@ -1264,7 +1267,7 @@ function renderAlertLine(alerts) {
 var state = ensureState();
 var core = makeCore();
 var subject = process.env.FIDACY_SUBJECT ?? "agent:demo";
-var SERVER_VERSION = true ? "0.2.9" : "dev";
+var SERVER_VERSION = true ? "0.3.0" : "dev";
 var bootClaim = claimUrl();
 var server = new McpServer(
   { name: "fidacy", version: SERVER_VERSION },
@@ -1331,6 +1334,7 @@ server.registerTool(
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
   },
   async () => {
+    recordToolUse("verify");
     const m = await core.getMandate(subject);
     const payload = { mandate: m, fidacyPublicKey: core.publicKey() };
     const claim = process.env.FIDACY_ENGINE_API_KEY ? null : claimUrl();
@@ -1409,6 +1413,7 @@ server.registerTool(
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
   },
   async ({ decisionId }) => {
+    recordToolUse("explain");
     const records = await core.history(5e3);
     const record2 = records.find((r) => r.decisionId === decisionId);
     if (!record2) {
@@ -1469,6 +1474,7 @@ server.registerTool(
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }
   },
   async ({ kind, mandate, mandateType, idempotencyKey, spendingMandate, a2a }) => {
+    recordToolUse("assess");
     const engineUrl = process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com";
     const apiKey = (process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
     if (!apiKey) {
@@ -1519,6 +1525,7 @@ server.registerTool(
     annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }
   },
   async ({ path, sha256: sha2562, kind, label, subject: subj }) => {
+    recordToolUse("anchor");
     const engineUrl = process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com";
     const apiKey = (process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
     if (!apiKey) {
@@ -1573,6 +1580,7 @@ server.registerTool(
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }
   },
   async ({ path, sha256: sha2562 }) => {
+    recordToolUse("check");
     const engineUrl = process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com";
     const apiKey = (process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
     if (!apiKey) {

package/dist/lib.js

@@ -613,7 +613,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.2.9" : "dev";
+var CLIENT_VERSION = true ? "0.3.0" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -664,7 +664,7 @@ function resultOf(status, violatedRule) {
   if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
-function record(type, result, band, capRatio) {
+function record(type, result, band, capRatio, action) {
   if (!telemetryEnabled()) return;
   buffer.push({
     type,
@@ -673,7 +673,8 @@ function record(type, result, band, capRatio) {
     shell: currentShell,
     ...result ? { result } : {},
     ...band ? { band } : {},
-    ...capRatio ? { cap_ratio: capRatio } : {}
+    ...capRatio ? { cap_ratio: capRatio } : {},
+    ...action ? { action } : {}
   });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
@@ -791,7 +792,7 @@ function requestUpgrade() {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.2.9" : "dev";
+var CLIENT_VERSION2 = true ? "0.3.0" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -815,8 +816,9 @@ async function autoProvision() {
     if (!res.ok) return "failed";
     const data = await res.json();
     if (typeof data.api_key !== "string" || !data.api_key) return "failed";
+    const fresh = readConfig() ?? cfg;
     writeConfig({
-      ...cfg,
+      ...fresh,
       api_key: data.api_key,
       tier: data.tier === "paid" ? "paid" : "free"
     });
@@ -851,7 +853,7 @@ function bumpDecisionCount() {
   sessionDecisions += 1;
   const cfg = readConfig();
   if (!cfg) return sessionDecisions;
-  const n = (cfg.decisions_count ?? 0) + 1;
+  const n = Math.max((cfg.decisions_count ?? 0) + 1, sessionDecisions);
   cfg.decisions_count = n;
   try {
     writeConfig(cfg);
@@ -872,13 +874,13 @@ function decisionNudge(status, violatedRule, upgradeToolName) {
     return `That was a duplicate-invoice (BEC) catch, the #1 payment fraud. For your operator: ${claimPath}. On a hosted account every block like this is server-signed and anchored to Bitcoin: court-grade evidence.`;
   }
   if (status === "DENY" && nudgeOnce("first_deny")) {
-    return `Fidacy just blocked this for you. For your operator: ${claimPath}.`;
+    return `Fidacy just blocked this payment before it moved. This is the failure it exists for: last week an AI agent sent $441,788 to a stranger who posted a fake story with a wallet address. Nothing was checking it. For your operator: ${claimPath}.`;
   }
   if (status === "ALLOW" && nudgeOnce("first_allow")) {
     return `Fidacy authorized this and signed the decision. For your operator: ${claimPath}.`;
   }
-  if (count === 25 && nudgeOnce("proof_teaser")) {
-    return `Your local chain now holds ${count} decisions only you can read. Anchor them and anyone can verify at fidacy.com/verify, no account needed on their side. For your operator: ${claimPath}.`;
+  if (count === 15 && nudgeOnce("proof_teaser")) {
+    return `Fidacy has now checked ${count} payments on this agent and stands between it and the wrong one, the prompt-injected payee, the duplicate, the over-limit charge. That protection pauses after 20 decisions without a free key. Keep the agent covered: ${claimPath}.`;
   }
   if (count === 10 && nudgeOnce("milestone_10")) {
     return `That's 10 actions gated on this install. For your operator: ${claimPath}.`;

package/dist/telemetry.d.ts

@@ -1,4 +1,7 @@
-export type TelemetryEventType = "install" | "agent_active" | "decision" | "upgrade_intent";
+export type TelemetryEventType = "install" | "agent_active" | "decision" | "upgrade_intent" | "tool_use";
+/** Which tool a tool_use event counts (0059). An ENUM mirrored by the ingest
+ *  allowlist: which tool ran, never what it ran on. */
+export type ToolAction = "assess" | "anchor" | "check" | "verify" | "explain";
 export type DecisionResult = "allow" | "deny_cap" | "deny_payee" | "deny_scope" | "deny_lookalike" | "deny_duplicate" | "deny_window" | "deny_invalid";
 /** Which shell this engine is embedded in. An ENUM mirrored by the ingest allowlist
  *  and the DB CHECK — never a free-form string, so it can't become a PII channel. */
@@ -18,10 +21,12 @@ export declare function telemetryEnabled(): boolean;
 /** Map a firewall violatedRule to the coarse, PII-free decision result enum. */
 export declare function resultOf(status: "ALLOW" | "DENY", violatedRule?: string): DecisionResult;
 /** Buffer an event (sync, never blocks, never throws). Auto-flushes shortly after. */
-export declare function record(type: TelemetryEventType, result?: DecisionResult, band?: AmountBand, capRatio?: CapRatioBand): void;
+export declare function record(type: TelemetryEventType, result?: DecisionResult, band?: AmountBand, capRatio?: CapRatioBand, action?: ToolAction): void;
 export declare const recordInstall: () => void;
 export declare const recordAgentActive: () => void;
 export declare const recordDecision: (status: "ALLOW" | "DENY", violatedRule?: string, amount?: number, perTxMax?: number) => void;
 export declare const recordUpgradeIntent: () => void;
+/** Count a tool invocation (which tool, never its content) — the agent-activity profile. */
+export declare const recordToolUse: (action: ToolAction) => void;
 /** Send the buffered batch fire-and-forget. Swallows all errors. Best-effort. */
 export declare function flush(): Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.2.9",
+  "version": "0.3.0",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",