@fidacy/mcp 0.3.1 → 0.3.3

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.3.3
+
+### Minor Changes
+
+- The server now presents itself as **Fidacy AI Agent Firewall** (`fidacy-ai-agent-firewall`, title "Fidacy AI Agent Firewall") instead of the bare `fidacy`. The npm package is unchanged — `npx -y @fidacy/mcp` keeps working exactly as before, and no config needs editing. This is the name the product is sold under, so it is the name your client should show.
+
+### Patch Changes
+
+- Fix the wall an existing customer hits. When an install that already carries an API key exhausted its monthly allowance (or reached the spending cap it set), the server answered with an invitation to create a free account — the account they already had — and threw away everything the engine said about it. It now reports what actually happened, names the pay-as-you-go price and links straight to billing, and makes explicit that the local firewall keeps deciding and blocking throughout: only server-signed verdicts and anchored proofs pause, never the protection.
+
+## 0.3.2
+
+### Patch Changes
+
+- Security: a spending cap that failed to parse silently stopped capping. Cap values read from `FIDACY_PER_TX_MAX` / `FIDACY_MAX_TOTAL` or from `config.json` went through a bare `Number()`, so ordinary ways of writing an amount — `2,500`, `$2500`, `2500 USD` — became `NaN`. Because `amount > NaN` is false, the comparison did not raise: the cap simply stopped existing, and a firewall whose author believed it was capped at 2,500 would authorize 9,999. Two fixes: the decision engine now DENIES any mandate whose caps are not finite positive numbers (`invalid_mandate_cap`), so an unenforceable cap can never allow a payment on any path, and a cap that does not parse is now refused with an explicit message telling you what to write instead, falling back to the safe default rather than to no cap. Upgrade if you set either cap from an environment variable.
+
 ## 0.3.1
 
 ### Patch Changes

package/dist/activation.d.ts

@@ -1,3 +1,5 @@
+import { hasEngineKey } from "./config.js";
+export { hasEngineKey };
 /**
  * ACTIVATION GATE — the anonymous trial that ends in a free API key.
  *
@@ -16,8 +18,6 @@
  * real client needs anyway (it powers assess_action / anchor_artifact).
  */
 export declare const FREE_DECISIONS = 20;
-/** True when the install carries an operator-set engine key (env or shell config). */
-export declare function hasEngineKey(keyOverride?: string): boolean;
 /**
  * Payment-gate decisions taken so far on this install: the on-disk counter OR
  * the in-process one, whichever is higher. The in-process floor is what keeps

package/dist/assess.d.ts

@@ -42,16 +42,30 @@ export interface RejectionReason {
  * request body. `type` is the stable engine error code (or a client code), and
  * `status` is the HTTP status (0 for network/timeout).
  */
+/**
+ * What a 402 actually says. The engine returns `reason` (quota grace expired vs
+ * spending cap reached), a human-readable `detail` and the `billing_url` that
+ * resolves it. All of it used to be dropped on the floor, so an operator who had
+ * ALREADY signed up was told to go sign up — at the one moment they were asking
+ * to buy more. Carry it through and say the true thing instead.
+ */
+export interface BillingBlock {
+    reason?: string;
+    detail?: string;
+    billingUrl?: string;
+}
 export declare class AssessError extends Error {
     readonly type: string;
     readonly status: number;
     readonly details?: unknown;
     readonly rejection_reasons?: RejectionReason[];
+    readonly billing?: BillingBlock;
     constructor(opts: {
         type: string;
         status: number;
         details?: unknown;
         rejection_reasons?: RejectionReason[];
+        billing?: BillingBlock;
     });
 }
 export interface AssessConfig {

package/dist/assess.js

@@ -4,6 +4,7 @@ var AssessError = class extends Error {
   status;
   details;
   rejection_reasons;
+  billing;
   constructor(opts) {
     super(`Fidacy assess error (${opts.type}, HTTP ${opts.status})`);
     this.name = "AssessError";
@@ -11,6 +12,7 @@ var AssessError = class extends Error {
     this.status = opts.status;
     this.details = opts.details;
     this.rejection_reasons = opts.rejection_reasons;
+    this.billing = opts.billing;
   }
 };
 var DEFAULT_TIMEOUT = 1e4;
@@ -106,7 +108,12 @@ async function postOnce(fetchImpl, url, headers, payload, timeoutMs) {
     const type = isRecord(parsed) && typeof parsed.error === "string" && parsed.error || `http_${res.status}`;
     const details = isRecord(parsed) ? parsed.details : void 0;
     const rejection_reasons = isRecord(parsed) && Array.isArray(parsed.rejection_reasons) ? parsed.rejection_reasons : void 0;
-    throw new AssessError({ type, status: res.status, details, rejection_reasons });
+    const billing = res.status === 402 && isRecord(parsed) ? {
+      reason: typeof parsed.reason === "string" ? parsed.reason : void 0,
+      detail: typeof parsed.detail === "string" ? parsed.detail : void 0,
+      billingUrl: typeof parsed.billing_url === "string" ? parsed.billing_url : void 0
+    } : void 0;
+    throw new AssessError({ type, status: res.status, details, rejection_reasons, billing });
   }
   if (!isRecord(parsed)) {
     throw new AssessError({ type: "invalid_response", status: res.status });

package/dist/config.d.ts

@@ -37,6 +37,15 @@ export interface FidacyConfig {
     /** Payment-gate decisions taken on this install (milestone nudges). */
     decisions_count?: number;
 }
+/**
+ * True when the install carries an operator-set engine key (env, or the plugin's
+ * engineApiKey config passed as an override).
+ *
+ * Lives here rather than in activation.ts because nudges.ts needs it too, and
+ * activation.ts already imports nudges.ts — importing back would be a cycle.
+ * Reading the environment is this module's job anyway.
+ */
+export declare function hasEngineKey(keyOverride?: string): boolean;
 /** Config dir: FIDACY_CONFIG_DIR override, else ~/.fidacy (XDG-friendly enough). */
 export declare function configDir(): string;
 export declare function configPath(): string;

package/dist/core.js

@@ -85,10 +85,23 @@ function lookalikePayee(payee, allowed) {
   }
   return null;
 }
+function validateMandateCaps(mandate) {
+  const bad = (v) => typeof v !== "number" || !Number.isFinite(v) || v <= 0;
+  if (!mandate.allow || typeof mandate.allow !== "object")
+    return "invalid_mandate:missing_allow";
+  if (bad(mandate.allow.perTxMax))
+    return `invalid_mandate_cap:perTxMax=${String(mandate.allow.perTxMax)}`;
+  if (bad(mandate.allow.maxTotal))
+    return `invalid_mandate_cap:maxTotal=${String(mandate.allow.maxTotal)}`;
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
     return "mandate_revoked";
+  const badCap = validateMandateCaps(mandate);
+  if (badCap)
+    return badCap;
   if (now < Date.parse(mandate.window.notBefore))
     return "before_mandate_window";
   if (now > Date.parse(mandate.window.notAfter))
@@ -450,18 +463,29 @@ function readConfig() {
 function resolveMandateRules(cfg) {
   const m = cfg?.mandate ?? {};
   const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
-  const envNum = (v) => v === void 0 || v === "" ? void 0 : Number(v);
+  const envNum = (name, v) => {
+    if (v === void 0 || v.trim() === "") return void 0;
+    const n = Number(v);
+    if (!Number.isFinite(n) || n <= 0) {
+      console.error(
+        `[fidacy] ${name}="${v}" is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write digits only, with no thousands separator, currency symbol or unit (e.g. ${name}=2500).`
+      );
+      return void 0;
+    }
+    return n;
+  };
+  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
   return {
     payees: envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [],
     categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
     currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
-    perTxMax: envNum(process.env.FIDACY_PER_TX_MAX) ?? m.perTxMax ?? 2500,
-    maxTotal: envNum(process.env.FIDACY_MAX_TOTAL) ?? m.maxTotal ?? 1e4
+    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
+    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
   };
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.3.1" : "dev";
+var CLIENT_VERSION = true ? "0.3.3" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";

package/dist/firewall/evaluate.d.ts

@@ -7,4 +7,15 @@ import { Mandate, PaymentRequest } from "./types.js";
  * min length so short, genuinely-distinct payees don't false-positive.
  */
 export declare function lookalikePayee(payee: string, allowed: string[]): string | null;
+/**
+ * The MANDATE's own caps must be finite positive numbers, for exactly the reason
+ * validateRequest() checks the request's amount: `amount > NaN` is false, so a
+ * non-numeric cap does not raise an error — it SILENTLY DISABLES the cap and the
+ * firewall fails OPEN. The caps arrive from human-authored surfaces (env vars,
+ * config.json, FIDACY_MANDATE_JSON), where `2,500`, `$2500` and `2500 USD` are
+ * all normal things to type and all coerce to NaN. Verified 2026-07-24: each of
+ * those let a 9,999 payment through a mandate whose author believed it was
+ * capped at 2,500. A cap we cannot enforce must deny, never allow.
+ */
+export declare function validateMandateCaps(mandate: Mandate): string | null;
 export declare function evaluate(mandate: Mandate, req: PaymentRequest, spentSoFar: number): string | null;

package/dist/index.js

@@ -92,10 +92,23 @@ function lookalikePayee(payee, allowed) {
   }
   return null;
 }
+function validateMandateCaps(mandate) {
+  const bad = (v) => typeof v !== "number" || !Number.isFinite(v) || v <= 0;
+  if (!mandate.allow || typeof mandate.allow !== "object")
+    return "invalid_mandate:missing_allow";
+  if (bad(mandate.allow.perTxMax))
+    return `invalid_mandate_cap:perTxMax=${String(mandate.allow.perTxMax)}`;
+  if (bad(mandate.allow.maxTotal))
+    return `invalid_mandate_cap:maxTotal=${String(mandate.allow.maxTotal)}`;
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
     return "mandate_revoked";
+  const badCap = validateMandateCaps(mandate);
+  if (badCap)
+    return badCap;
   if (now < Date.parse(mandate.window.notBefore))
     return "before_mandate_window";
   if (now > Date.parse(mandate.window.notAfter))
@@ -419,6 +432,9 @@ import {
   readFileSync,
   writeFileSync
 } from "node:fs";
+function hasEngineKey(keyOverride) {
+  return Boolean((keyOverride ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim());
+}
 function configDir() {
   return process.env.FIDACY_CONFIG_DIR ?? join(homedir(), ".fidacy");
 }
@@ -479,18 +495,29 @@ function ensureState() {
 function resolveMandateRules(cfg) {
   const m = cfg?.mandate ?? {};
   const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
-  const envNum = (v) => v === void 0 || v === "" ? void 0 : Number(v);
+  const envNum = (name, v) => {
+    if (v === void 0 || v.trim() === "") return void 0;
+    const n = Number(v);
+    if (!Number.isFinite(n) || n <= 0) {
+      console.error(
+        `[fidacy] ${name}="${v}" is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write digits only, with no thousands separator, currency symbol or unit (e.g. ${name}=2500).`
+      );
+      return void 0;
+    }
+    return n;
+  };
+  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
   return {
     payees: envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [],
     categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
     currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
-    perTxMax: envNum(process.env.FIDACY_PER_TX_MAX) ?? m.perTxMax ?? 2500,
-    maxTotal: envNum(process.env.FIDACY_MAX_TOTAL) ?? m.maxTotal ?? 1e4
+    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
+    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
   };
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.3.1" : "dev";
+var CLIENT_VERSION = true ? "0.3.3" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -669,6 +696,7 @@ var AssessError = class extends Error {
   status;
   details;
   rejection_reasons;
+  billing;
   constructor(opts) {
     super(`Fidacy assess error (${opts.type}, HTTP ${opts.status})`);
     this.name = "AssessError";
@@ -676,6 +704,7 @@ var AssessError = class extends Error {
     this.status = opts.status;
     this.details = opts.details;
     this.rejection_reasons = opts.rejection_reasons;
+    this.billing = opts.billing;
   }
 };
 var DEFAULT_TIMEOUT = 1e4;
@@ -771,7 +800,12 @@ async function postOnce(fetchImpl, url, headers, payload, timeoutMs) {
     const type = isRecord(parsed) && typeof parsed.error === "string" && parsed.error || `http_${res.status}`;
     const details = isRecord(parsed) ? parsed.details : void 0;
     const rejection_reasons = isRecord(parsed) && Array.isArray(parsed.rejection_reasons) ? parsed.rejection_reasons : void 0;
-    throw new AssessError({ type, status: res.status, details, rejection_reasons });
+    const billing = res.status === 402 && isRecord(parsed) ? {
+      reason: typeof parsed.reason === "string" ? parsed.reason : void 0,
+      detail: typeof parsed.detail === "string" ? parsed.detail : void 0,
+      billingUrl: typeof parsed.billing_url === "string" ? parsed.billing_url : void 0
+    } : void 0;
+    throw new AssessError({ type, status: res.status, details, rejection_reasons, billing });
   }
   if (!isRecord(parsed)) {
     throw new AssessError({ type: "invalid_response", status: res.status });
@@ -845,7 +879,7 @@ async function findArtifacts(sha2562, cfg) {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.3.1" : "dev";
+var CLIENT_VERSION2 = true ? "0.3.3" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -952,10 +986,15 @@ function decisionNudge(status, violatedRule, upgradeToolName) {
   }
   return null;
 }
-function hostedWallCta(feature) {
+function hostedWallCta(feature, billing) {
+  const noun = feature === "anchor" ? "Bitcoin-anchored proofs" : "server-signed verdicts";
+  if (hasEngineKey()) {
+    const where = billing?.billingUrl ?? "https://app.fidacy.com/billing";
+    const what = billing?.reason === "spending_cap_reached" ? `This account hit the monthly spending cap you set, so ${noun} are paused.` : billing?.detail ?? `This account's included ${noun} for the month are used up.`;
+    return `${what} The local firewall keeps deciding and blocking as normal \u2014 this only pauses ${noun}. For your operator: resolve it at ${where}. Pay-as-you-go needs no plan and starts at $0.04 per verdict, dropping to $0.025 past 50k and $0.015 past 250k; committed plans price below that curve.`;
+  }
   const url = claimUrl();
   const cta = url ? `open ${url} \u2014 free account, this install's history migrates` : `call the upgrade tool \u2014 free account, your history migrates`;
-  const noun = feature === "anchor" ? "Bitcoin-anchored proofs" : "server-signed verdicts";
   if (nudgeOnce("hosted_wall")) {
     return `You've used this install's free allowance for ${noun} \u2014 the proofs anyone can re-verify at fidacy.com/verify, court-grade, not a local-only check. Keep them flowing: for your operator, ${cta}.`;
   }
@@ -975,9 +1014,6 @@ function weekOneBootNudge(upgradeToolName) {
 
 // src/activation.ts
 var FREE_DECISIONS = 20;
-function hasEngineKey(keyOverride) {
-  return Boolean((keyOverride ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim());
-}
 function decisionsUsed() {
   return Math.max(readConfig()?.decisions_count ?? 0, sessionDecisionCount());
 }
@@ -1150,8 +1186,8 @@ function rows(s) {
   return out;
 }
 function renderBanner(s) {
-  const title = "FIDACY \xB7 the payment firewall for AI agents";
-  const sub = `signs the YES and the NO \xB7 v${s.version}`;
+  const title = "FIDACY AI AGENT FIREWALL";
+  const sub = `blocks the payment, signs the YES and the NO \xB7 v${s.version}`;
   const body = rows(s);
   if (!fancy()) {
     const lines2 = [
@@ -1276,10 +1312,14 @@ function renderAlertLine(alerts) {
 var state = ensureState();
 var core = makeCore();
 var subject = process.env.FIDACY_SUBJECT ?? "agent:demo";
-var SERVER_VERSION = true ? "0.3.1" : "dev";
+var SERVER_VERSION = true ? "0.3.3" : "dev";
 var bootClaim = claimUrl();
 var server = new McpServer(
-  { name: "fidacy", version: SERVER_VERSION },
+  // The commercial identity. `name` is the stable slug hosts key on; `title` is
+  // what a human reads in the client's server list. The npm package stays
+  // @fidacy/mcp — renaming the package would split the install base and the
+  // download history for nothing, since what people SEE is this.
+  { name: "fidacy-ai-agent-firewall", title: "Fidacy AI Agent Firewall", version: SERVER_VERSION },
   {
     instructions: bootClaim ? `Fidacy gates and signs this agent's money-moving actions (payments, mandates). Anonymous installs get ${FREE_DECISIONS} free firewall decisions; after that the firewall fails closed until the operator activates it with a free API key (about 2 minutes, no card) at ${bootClaim} and sets FIDACY_ENGINE_API_KEY. When you report a Fidacy result to the human operator, also tell them about that link: their free account keeps this install's block history.` : `Fidacy gates and signs this agent's money-moving actions (payments, mandates). Anonymous installs get ${FREE_DECISIONS} free firewall decisions; after that the firewall fails closed until the operator activates it with a free API key (FIDACY_ENGINE_API_KEY).`
   }
@@ -1504,7 +1544,7 @@ server.registerTool(
     } catch (e) {
       if (e instanceof AssessError) {
         if (e.status === 402) {
-          return { content: [{ type: "text", text: hostedWallCta("verdict") }], isError: true };
+          return { content: [{ type: "text", text: hostedWallCta("verdict", e.billing) }], isError: true };
         }
         const reasons = e.rejection_reasons?.length ? " (" + e.rejection_reasons.map((x) => x.key).join(",") + ")" : "";
         return {
@@ -1569,7 +1609,7 @@ server.registerTool(
     } catch (e) {
       if (e instanceof AssessError) {
         if (e.status === 402) {
-          return { content: [{ type: "text", text: hostedWallCta("anchor") }], isError: true };
+          return { content: [{ type: "text", text: hostedWallCta("anchor", e.billing) }], isError: true };
         }
         return { content: [{ type: "text", text: `ANCHOR ${e.status}: ${e.type}` }], isError: true };
       }

package/dist/lib.js

@@ -123,10 +123,23 @@ function lookalikePayee(payee, allowed) {
   }
   return null;
 }
+function validateMandateCaps(mandate) {
+  const bad = (v) => typeof v !== "number" || !Number.isFinite(v) || v <= 0;
+  if (!mandate.allow || typeof mandate.allow !== "object")
+    return "invalid_mandate:missing_allow";
+  if (bad(mandate.allow.perTxMax))
+    return `invalid_mandate_cap:perTxMax=${String(mandate.allow.perTxMax)}`;
+  if (bad(mandate.allow.maxTotal))
+    return `invalid_mandate_cap:maxTotal=${String(mandate.allow.maxTotal)}`;
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
     return "mandate_revoked";
+  const badCap = validateMandateCaps(mandate);
+  if (badCap)
+    return badCap;
   if (now < Date.parse(mandate.window.notBefore))
     return "before_mandate_window";
   if (now > Date.parse(mandate.window.notAfter))
@@ -542,6 +555,9 @@ import {
   readFileSync,
   writeFileSync
 } from "node:fs";
+function hasEngineKey(keyOverride) {
+  return Boolean((keyOverride ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim());
+}
 function configDir() {
   return process.env.FIDACY_CONFIG_DIR ?? join(homedir(), ".fidacy");
 }
@@ -602,18 +618,29 @@ function ensureState() {
 function resolveMandateRules(cfg) {
   const m = cfg?.mandate ?? {};
   const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
-  const envNum = (v) => v === void 0 || v === "" ? void 0 : Number(v);
+  const envNum = (name, v) => {
+    if (v === void 0 || v.trim() === "") return void 0;
+    const n = Number(v);
+    if (!Number.isFinite(n) || n <= 0) {
+      console.error(
+        `[fidacy] ${name}="${v}" is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write digits only, with no thousands separator, currency symbol or unit (e.g. ${name}=2500).`
+      );
+      return void 0;
+    }
+    return n;
+  };
+  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
   return {
     payees: envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [],
     categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
     currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
-    perTxMax: envNum(process.env.FIDACY_PER_TX_MAX) ?? m.perTxMax ?? 2500,
-    maxTotal: envNum(process.env.FIDACY_MAX_TOTAL) ?? m.maxTotal ?? 1e4
+    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
+    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
   };
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.3.1" : "dev";
+var CLIENT_VERSION = true ? "0.3.3" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -801,7 +828,7 @@ function requestUpgrade() {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.3.1" : "dev";
+var CLIENT_VERSION2 = true ? "0.3.3" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -910,9 +937,6 @@ function weekOneBootNudge(upgradeToolName) {
 
 // src/activation.ts
 var FREE_DECISIONS = 20;
-function hasEngineKey(keyOverride) {
-  return Boolean((keyOverride ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim());
-}
 function decisionsUsed() {
   return Math.max(readConfig()?.decisions_count ?? 0, sessionDecisionCount());
 }
@@ -1193,6 +1217,7 @@ export {
   toRows,
   trialCountdownLine,
   upgradeUrl,
+  validateMandateCaps,
   validateRequest,
   verify,
   verifyGrant,

package/dist/nudges.d.ts

@@ -43,7 +43,11 @@ export declare function decisionNudge(status: "ALLOW" | "DENY", violatedRule: st
  * (nudge doctrine: never nag twice), a terse line every time after — the wall is
  * a direct answer to the agent's request, so it always says SOMETHING actionable.
  */
-export declare function hostedWallCta(feature: "verdict" | "anchor"): string;
+export declare function hostedWallCta(feature: "verdict" | "anchor", billing?: {
+    reason?: string;
+    detail?: string;
+    billingUrl?: string;
+}): string;
 /** The no-key CTA for a hosted tool: route the human to a free account. */
 export declare function noKeyCta(): string;
 /** One-time boot line after a week of real protection; null otherwise. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",
@@ -61,6 +61,7 @@
     "@types/node": "^22.10.0",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2",
+    "vitest": "^3.2.4",
     "@fidacy/firewall": "0.1.1"
   },
   "mcpName": "com.fidacy/mcp",
@@ -71,6 +72,8 @@
   "scripts": {
     "build": "node scripts/bundle.mjs",
     "dev": "tsx watch src/index.ts",
-    "start": "node dist/index.js"
+    "start": "node dist/index.js",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
   }
 }