@fidacy/mcp 0.3.1 → 0.3.2

package/dist/core.js

@@ -85,10 +85,23 @@ function lookalikePayee(payee, allowed) {
   }
   return null;
 }
+function validateMandateCaps(mandate) {
+  const bad = (v) => typeof v !== "number" || !Number.isFinite(v) || v <= 0;
+  if (!mandate.allow || typeof mandate.allow !== "object")
+    return "invalid_mandate:missing_allow";
+  if (bad(mandate.allow.perTxMax))
+    return `invalid_mandate_cap:perTxMax=${String(mandate.allow.perTxMax)}`;
+  if (bad(mandate.allow.maxTotal))
+    return `invalid_mandate_cap:maxTotal=${String(mandate.allow.maxTotal)}`;
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
     return "mandate_revoked";
+  const badCap = validateMandateCaps(mandate);
+  if (badCap)
+    return badCap;
   if (now < Date.parse(mandate.window.notBefore))
     return "before_mandate_window";
   if (now > Date.parse(mandate.window.notAfter))
@@ -450,18 +463,29 @@ function readConfig() {
 function resolveMandateRules(cfg) {
   const m = cfg?.mandate ?? {};
   const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
-  const envNum = (v) => v === void 0 || v === "" ? void 0 : Number(v);
+  const envNum = (name, v) => {
+    if (v === void 0 || v.trim() === "") return void 0;
+    const n = Number(v);
+    if (!Number.isFinite(n) || n <= 0) {
+      console.error(
+        `[fidacy] ${name}="${v}" is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write digits only, with no thousands separator, currency symbol or unit (e.g. ${name}=2500).`
+      );
+      return void 0;
+    }
+    return n;
+  };
+  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
   return {
     payees: envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [],
     categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
     currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
-    perTxMax: envNum(process.env.FIDACY_PER_TX_MAX) ?? m.perTxMax ?? 2500,
-    maxTotal: envNum(process.env.FIDACY_MAX_TOTAL) ?? m.maxTotal ?? 1e4
+    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
+    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
   };
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.3.1" : "dev";
+var CLIENT_VERSION = true ? "0.3.2" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";

package/dist/firewall/evaluate.d.ts

@@ -7,4 +7,15 @@ import { Mandate, PaymentRequest } from "./types.js";
  * min length so short, genuinely-distinct payees don't false-positive.
  */
 export declare function lookalikePayee(payee: string, allowed: string[]): string | null;
+/**
+ * The MANDATE's own caps must be finite positive numbers, for exactly the reason
+ * validateRequest() checks the request's amount: `amount > NaN` is false, so a
+ * non-numeric cap does not raise an error — it SILENTLY DISABLES the cap and the
+ * firewall fails OPEN. The caps arrive from human-authored surfaces (env vars,
+ * config.json, FIDACY_MANDATE_JSON), where `2,500`, `$2500` and `2500 USD` are
+ * all normal things to type and all coerce to NaN. Verified 2026-07-24: each of
+ * those let a 9,999 payment through a mandate whose author believed it was
+ * capped at 2,500. A cap we cannot enforce must deny, never allow.
+ */
+export declare function validateMandateCaps(mandate: Mandate): string | null;
 export declare function evaluate(mandate: Mandate, req: PaymentRequest, spentSoFar: number): string | null;

package/dist/index.js

@@ -92,10 +92,23 @@ function lookalikePayee(payee, allowed) {
   }
   return null;
 }
+function validateMandateCaps(mandate) {
+  const bad = (v) => typeof v !== "number" || !Number.isFinite(v) || v <= 0;
+  if (!mandate.allow || typeof mandate.allow !== "object")
+    return "invalid_mandate:missing_allow";
+  if (bad(mandate.allow.perTxMax))
+    return `invalid_mandate_cap:perTxMax=${String(mandate.allow.perTxMax)}`;
+  if (bad(mandate.allow.maxTotal))
+    return `invalid_mandate_cap:maxTotal=${String(mandate.allow.maxTotal)}`;
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
     return "mandate_revoked";
+  const badCap = validateMandateCaps(mandate);
+  if (badCap)
+    return badCap;
   if (now < Date.parse(mandate.window.notBefore))
     return "before_mandate_window";
   if (now > Date.parse(mandate.window.notAfter))
@@ -479,18 +492,29 @@ function ensureState() {
 function resolveMandateRules(cfg) {
   const m = cfg?.mandate ?? {};
   const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
-  const envNum = (v) => v === void 0 || v === "" ? void 0 : Number(v);
+  const envNum = (name, v) => {
+    if (v === void 0 || v.trim() === "") return void 0;
+    const n = Number(v);
+    if (!Number.isFinite(n) || n <= 0) {
+      console.error(
+        `[fidacy] ${name}="${v}" is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write digits only, with no thousands separator, currency symbol or unit (e.g. ${name}=2500).`
+      );
+      return void 0;
+    }
+    return n;
+  };
+  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
   return {
     payees: envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [],
     categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
     currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
-    perTxMax: envNum(process.env.FIDACY_PER_TX_MAX) ?? m.perTxMax ?? 2500,
-    maxTotal: envNum(process.env.FIDACY_MAX_TOTAL) ?? m.maxTotal ?? 1e4
+    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
+    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
   };
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.3.1" : "dev";
+var CLIENT_VERSION = true ? "0.3.2" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -845,7 +869,7 @@ async function findArtifacts(sha2562, cfg) {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.3.1" : "dev";
+var CLIENT_VERSION2 = true ? "0.3.2" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -1276,7 +1300,7 @@ function renderAlertLine(alerts) {
 var state = ensureState();
 var core = makeCore();
 var subject = process.env.FIDACY_SUBJECT ?? "agent:demo";
-var SERVER_VERSION = true ? "0.3.1" : "dev";
+var SERVER_VERSION = true ? "0.3.2" : "dev";
 var bootClaim = claimUrl();
 var server = new McpServer(
   { name: "fidacy", version: SERVER_VERSION },

package/dist/lib.js

@@ -123,10 +123,23 @@ function lookalikePayee(payee, allowed) {
   }
   return null;
 }
+function validateMandateCaps(mandate) {
+  const bad = (v) => typeof v !== "number" || !Number.isFinite(v) || v <= 0;
+  if (!mandate.allow || typeof mandate.allow !== "object")
+    return "invalid_mandate:missing_allow";
+  if (bad(mandate.allow.perTxMax))
+    return `invalid_mandate_cap:perTxMax=${String(mandate.allow.perTxMax)}`;
+  if (bad(mandate.allow.maxTotal))
+    return `invalid_mandate_cap:maxTotal=${String(mandate.allow.maxTotal)}`;
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
     return "mandate_revoked";
+  const badCap = validateMandateCaps(mandate);
+  if (badCap)
+    return badCap;
   if (now < Date.parse(mandate.window.notBefore))
     return "before_mandate_window";
   if (now > Date.parse(mandate.window.notAfter))
@@ -602,18 +615,29 @@ function ensureState() {
 function resolveMandateRules(cfg) {
   const m = cfg?.mandate ?? {};
   const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
-  const envNum = (v) => v === void 0 || v === "" ? void 0 : Number(v);
+  const envNum = (name, v) => {
+    if (v === void 0 || v.trim() === "") return void 0;
+    const n = Number(v);
+    if (!Number.isFinite(n) || n <= 0) {
+      console.error(
+        `[fidacy] ${name}="${v}" is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write digits only, with no thousands separator, currency symbol or unit (e.g. ${name}=2500).`
+      );
+      return void 0;
+    }
+    return n;
+  };
+  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
   return {
     payees: envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [],
     categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
     currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
-    perTxMax: envNum(process.env.FIDACY_PER_TX_MAX) ?? m.perTxMax ?? 2500,
-    maxTotal: envNum(process.env.FIDACY_MAX_TOTAL) ?? m.maxTotal ?? 1e4
+    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
+    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
   };
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.3.1" : "dev";
+var CLIENT_VERSION = true ? "0.3.2" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -801,7 +825,7 @@ function requestUpgrade() {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.3.1" : "dev";
+var CLIENT_VERSION2 = true ? "0.3.2" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -1193,6 +1217,7 @@ export {
   toRows,
   trialCountdownLine,
   upgradeUrl,
+  validateMandateCaps,
   validateRequest,
   verify,
   verifyGrant,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",
@@ -61,6 +61,7 @@
     "@types/node": "^22.10.0",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2",
+    "vitest": "^3.2.4",
     "@fidacy/firewall": "0.1.1"
   },
   "mcpName": "com.fidacy/mcp",
@@ -71,6 +72,8 @@
   "scripts": {
     "build": "node scripts/bundle.mjs",
     "dev": "tsx watch src/index.ts",
-    "start": "node dist/index.js"
+    "start": "node dist/index.js",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
   }
 }