@fidacy/mcp 0.3.0 → 0.3.2

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.3.1
+
+### Patch Changes
+
+- 01f0734: Telemetry now flushes on process exit. The 2s flush timer is unref'd so a short-lived process could exit with a full buffer and silently lose it, which is exactly how plugin-channel installs went uncounted. A beforeExit hook sends the last batch, best-effort as always.
+
 ## 0.3.0
 
 ### Minor Changes

package/dist/core.js

@@ -85,10 +85,23 @@ function lookalikePayee(payee, allowed) {
   }
   return null;
 }
+function validateMandateCaps(mandate) {
+  const bad = (v) => typeof v !== "number" || !Number.isFinite(v) || v <= 0;
+  if (!mandate.allow || typeof mandate.allow !== "object")
+    return "invalid_mandate:missing_allow";
+  if (bad(mandate.allow.perTxMax))
+    return `invalid_mandate_cap:perTxMax=${String(mandate.allow.perTxMax)}`;
+  if (bad(mandate.allow.maxTotal))
+    return `invalid_mandate_cap:maxTotal=${String(mandate.allow.maxTotal)}`;
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
     return "mandate_revoked";
+  const badCap = validateMandateCaps(mandate);
+  if (badCap)
+    return badCap;
   if (now < Date.parse(mandate.window.notBefore))
     return "before_mandate_window";
   if (now > Date.parse(mandate.window.notAfter))
@@ -450,18 +463,29 @@ function readConfig() {
 function resolveMandateRules(cfg) {
   const m = cfg?.mandate ?? {};
   const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
-  const envNum = (v) => v === void 0 || v === "" ? void 0 : Number(v);
+  const envNum = (name, v) => {
+    if (v === void 0 || v.trim() === "") return void 0;
+    const n = Number(v);
+    if (!Number.isFinite(n) || n <= 0) {
+      console.error(
+        `[fidacy] ${name}="${v}" is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write digits only, with no thousands separator, currency symbol or unit (e.g. ${name}=2500).`
+      );
+      return void 0;
+    }
+    return n;
+  };
+  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
   return {
     payees: envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [],
     categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
     currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
-    perTxMax: envNum(process.env.FIDACY_PER_TX_MAX) ?? m.perTxMax ?? 2500,
-    maxTotal: envNum(process.env.FIDACY_MAX_TOTAL) ?? m.maxTotal ?? 1e4
+    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
+    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
   };
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.3.0" : "dev";
+var CLIENT_VERSION = true ? "0.3.2" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -497,6 +521,14 @@ function anonId() {
 }
 var buffer = [];
 var flushTimer = null;
+var exitHookArmed = false;
+function armExitFlush() {
+  if (exitHookArmed || typeof process === "undefined" || typeof process.once !== "function") return;
+  exitHookArmed = true;
+  process.once("beforeExit", () => {
+    if (buffer.length > 0) void flush();
+  });
+}
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
@@ -511,6 +543,7 @@ function resultOf(status, violatedRule) {
 }
 function record(type, result, band, capRatio, action) {
   if (!telemetryEnabled()) return;
+  armExitFlush();
   buffer.push({
     type,
     ts: (/* @__PURE__ */ new Date()).toISOString(),

package/dist/firewall/evaluate.d.ts

@@ -7,4 +7,15 @@ import { Mandate, PaymentRequest } from "./types.js";
  * min length so short, genuinely-distinct payees don't false-positive.
  */
 export declare function lookalikePayee(payee: string, allowed: string[]): string | null;
+/**
+ * The MANDATE's own caps must be finite positive numbers, for exactly the reason
+ * validateRequest() checks the request's amount: `amount > NaN` is false, so a
+ * non-numeric cap does not raise an error — it SILENTLY DISABLES the cap and the
+ * firewall fails OPEN. The caps arrive from human-authored surfaces (env vars,
+ * config.json, FIDACY_MANDATE_JSON), where `2,500`, `$2500` and `2500 USD` are
+ * all normal things to type and all coerce to NaN. Verified 2026-07-24: each of
+ * those let a 9,999 payment through a mandate whose author believed it was
+ * capped at 2,500. A cap we cannot enforce must deny, never allow.
+ */
+export declare function validateMandateCaps(mandate: Mandate): string | null;
 export declare function evaluate(mandate: Mandate, req: PaymentRequest, spentSoFar: number): string | null;

package/dist/index.js

@@ -92,10 +92,23 @@ function lookalikePayee(payee, allowed) {
   }
   return null;
 }
+function validateMandateCaps(mandate) {
+  const bad = (v) => typeof v !== "number" || !Number.isFinite(v) || v <= 0;
+  if (!mandate.allow || typeof mandate.allow !== "object")
+    return "invalid_mandate:missing_allow";
+  if (bad(mandate.allow.perTxMax))
+    return `invalid_mandate_cap:perTxMax=${String(mandate.allow.perTxMax)}`;
+  if (bad(mandate.allow.maxTotal))
+    return `invalid_mandate_cap:maxTotal=${String(mandate.allow.maxTotal)}`;
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
     return "mandate_revoked";
+  const badCap = validateMandateCaps(mandate);
+  if (badCap)
+    return badCap;
   if (now < Date.parse(mandate.window.notBefore))
     return "before_mandate_window";
   if (now > Date.parse(mandate.window.notAfter))
@@ -479,18 +492,29 @@ function ensureState() {
 function resolveMandateRules(cfg) {
   const m = cfg?.mandate ?? {};
   const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
-  const envNum = (v) => v === void 0 || v === "" ? void 0 : Number(v);
+  const envNum = (name, v) => {
+    if (v === void 0 || v.trim() === "") return void 0;
+    const n = Number(v);
+    if (!Number.isFinite(n) || n <= 0) {
+      console.error(
+        `[fidacy] ${name}="${v}" is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write digits only, with no thousands separator, currency symbol or unit (e.g. ${name}=2500).`
+      );
+      return void 0;
+    }
+    return n;
+  };
+  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
   return {
     payees: envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [],
     categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
     currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
-    perTxMax: envNum(process.env.FIDACY_PER_TX_MAX) ?? m.perTxMax ?? 2500,
-    maxTotal: envNum(process.env.FIDACY_MAX_TOTAL) ?? m.maxTotal ?? 1e4
+    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
+    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
   };
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.3.0" : "dev";
+var CLIENT_VERSION = true ? "0.3.2" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -526,6 +550,14 @@ function anonId() {
 }
 var buffer = [];
 var flushTimer = null;
+var exitHookArmed = false;
+function armExitFlush() {
+  if (exitHookArmed || typeof process === "undefined" || typeof process.once !== "function") return;
+  exitHookArmed = true;
+  process.once("beforeExit", () => {
+    if (buffer.length > 0) void flush();
+  });
+}
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
@@ -540,6 +572,7 @@ function resultOf(status, violatedRule) {
 }
 function record(type, result, band, capRatio, action) {
   if (!telemetryEnabled()) return;
+  armExitFlush();
   buffer.push({
     type,
     ts: (/* @__PURE__ */ new Date()).toISOString(),
@@ -836,7 +869,7 @@ async function findArtifacts(sha2562, cfg) {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.3.0" : "dev";
+var CLIENT_VERSION2 = true ? "0.3.2" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -1267,7 +1300,7 @@ function renderAlertLine(alerts) {
 var state = ensureState();
 var core = makeCore();
 var subject = process.env.FIDACY_SUBJECT ?? "agent:demo";
-var SERVER_VERSION = true ? "0.3.0" : "dev";
+var SERVER_VERSION = true ? "0.3.2" : "dev";
 var bootClaim = claimUrl();
 var server = new McpServer(
   { name: "fidacy", version: SERVER_VERSION },

package/dist/lib.d.ts

@@ -3,7 +3,7 @@ export { makeCore } from "./core.js";
 export { ensureState, readConfig } from "./config.js";
 export { requestUpgrade, upgradeUrl } from "./upgrade.js";
 export { autoProvision } from "./provision.js";
-export { recordInstall, recordAgentActive, setTelemetryShell } from "./telemetry.js";
+export { recordInstall, recordAgentActive, setTelemetryShell, flush as flushTelemetry } from "./telemetry.js";
 export { decisionNudge, weekOneBootNudge, nudgeOnce, installAgeDays, claimUrl, noKeyCta } from "./nudges.js";
 export { FREE_DECISIONS, activationGate, activationBootLine, trialCountdownLine, hasEngineKey, remainingFree } from "./activation.js";
 export { summarize, renderSummary, toRows, renderRows, explainRule, withinDays } from "./reporting.js";

package/dist/lib.js

@@ -123,10 +123,23 @@ function lookalikePayee(payee, allowed) {
   }
   return null;
 }
+function validateMandateCaps(mandate) {
+  const bad = (v) => typeof v !== "number" || !Number.isFinite(v) || v <= 0;
+  if (!mandate.allow || typeof mandate.allow !== "object")
+    return "invalid_mandate:missing_allow";
+  if (bad(mandate.allow.perTxMax))
+    return `invalid_mandate_cap:perTxMax=${String(mandate.allow.perTxMax)}`;
+  if (bad(mandate.allow.maxTotal))
+    return `invalid_mandate_cap:maxTotal=${String(mandate.allow.maxTotal)}`;
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
     return "mandate_revoked";
+  const badCap = validateMandateCaps(mandate);
+  if (badCap)
+    return badCap;
   if (now < Date.parse(mandate.window.notBefore))
     return "before_mandate_window";
   if (now > Date.parse(mandate.window.notAfter))
@@ -602,18 +615,29 @@ function ensureState() {
 function resolveMandateRules(cfg) {
   const m = cfg?.mandate ?? {};
   const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
-  const envNum = (v) => v === void 0 || v === "" ? void 0 : Number(v);
+  const envNum = (name, v) => {
+    if (v === void 0 || v.trim() === "") return void 0;
+    const n = Number(v);
+    if (!Number.isFinite(n) || n <= 0) {
+      console.error(
+        `[fidacy] ${name}="${v}" is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write digits only, with no thousands separator, currency symbol or unit (e.g. ${name}=2500).`
+      );
+      return void 0;
+    }
+    return n;
+  };
+  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
   return {
     payees: envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [],
     categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
     currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
-    perTxMax: envNum(process.env.FIDACY_PER_TX_MAX) ?? m.perTxMax ?? 2500,
-    maxTotal: envNum(process.env.FIDACY_MAX_TOTAL) ?? m.maxTotal ?? 1e4
+    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
+    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
   };
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.3.0" : "dev";
+var CLIENT_VERSION = true ? "0.3.2" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -652,6 +676,14 @@ function anonId() {
 }
 var buffer = [];
 var flushTimer = null;
+var exitHookArmed = false;
+function armExitFlush() {
+  if (exitHookArmed || typeof process === "undefined" || typeof process.once !== "function") return;
+  exitHookArmed = true;
+  process.once("beforeExit", () => {
+    if (buffer.length > 0) void flush();
+  });
+}
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
@@ -666,6 +698,7 @@ function resultOf(status, violatedRule) {
 }
 function record(type, result, band, capRatio, action) {
   if (!telemetryEnabled()) return;
+  armExitFlush();
   buffer.push({
     type,
     ts: (/* @__PURE__ */ new Date()).toISOString(),
@@ -792,7 +825,7 @@ function requestUpgrade() {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.3.0" : "dev";
+var CLIENT_VERSION2 = true ? "0.3.2" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -1156,6 +1189,7 @@ export {
   ensureState,
   evaluate,
   explainRule,
+  flush as flushTelemetry,
   hasEngineKey,
   httpRedeem,
   installAgeDays,
@@ -1183,6 +1217,7 @@ export {
   toRows,
   trialCountdownLine,
   upgradeUrl,
+  validateMandateCaps,
   validateRequest,
   verify,
   verifyGrant,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",
@@ -61,6 +61,7 @@
     "@types/node": "^22.10.0",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2",
+    "vitest": "^3.2.4",
     "@fidacy/firewall": "0.1.1"
   },
   "mcpName": "com.fidacy/mcp",
@@ -71,6 +72,8 @@
   "scripts": {
     "build": "node scripts/bundle.mjs",
     "dev": "tsx watch src/index.ts",
-    "start": "node dist/index.js"
+    "start": "node dist/index.js",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
   }
 }