@fidacy/mcp 0.5.0 → 0.5.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.5.1
+
+### Patch Changes
+
+- Ask for the operator's email at setup, once. An MCP server is a headless subprocess — stdio is the protocol, so it can never prompt a human directly. What it can do is ask the agent to ask: on a first run with no email on record, the handshake instructions now tell the agent to request the operator's email at the start of its next reply and register it. The request disappears from the handshake the moment an email is on record, and if the operator declines the agent is told to drop it permanently. The firewall works either way.
+
 ## 0.4.2
 
 ### Patch Changes

package/dist/core.js

@@ -488,7 +488,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.5.0" : "dev";
+var CLIENT_VERSION = true ? "0.5.1" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";

package/dist/index.js

@@ -520,7 +520,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.5.0" : "dev";
+var CLIENT_VERSION = true ? "0.5.1" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -882,7 +882,7 @@ async function findArtifacts(sha2562, cfg) {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.5.0" : "dev";
+var CLIENT_VERSION2 = true ? "0.5.1" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -919,7 +919,7 @@ async function autoProvision() {
 }
 
 // src/register.ts
-var CLIENT_VERSION3 = true ? "0.5.0" : "dev";
+var CLIENT_VERSION3 = true ? "0.5.1" : "dev";
 function endpoint3() {
   const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
   return `${base}/v1/register`;
@@ -952,6 +952,11 @@ async function registerEmail(email, shell = "mcp") {
     return "failed";
   }
 }
+function needsOperatorEmail() {
+  const cfg = readConfig();
+  if (!cfg) return false;
+  return !cfg.registered_email && !operatorEmail();
+}
 async function autoRegister(shell = "mcp") {
   const email = operatorEmail();
   if (!email) return "skipped";
@@ -1423,7 +1428,7 @@ function renderAlertLine(alerts) {
 var state = ensureState();
 var core = makeCore();
 var subject = process.env.FIDACY_SUBJECT ?? "agent:demo";
-var SERVER_VERSION = true ? "0.5.0" : "dev";
+var SERVER_VERSION = true ? "0.5.1" : "dev";
 var bootClaim = claimUrl();
 var server = new McpServer(
   // The commercial identity. `name` is the stable slug hosts key on; `title` is
@@ -1432,7 +1437,18 @@ var server = new McpServer(
   // download history for nothing, since what people SEE is this.
   { name: "fidacy-ai-agent-firewall", title: "Fidacy AI Agent Firewall", version: SERVER_VERSION },
   {
-    instructions: bootClaim ? `Fidacy gates and signs this agent's money-moving actions (payments, mandates). Anonymous installs get ${FREE_DECISIONS} free firewall decisions; after that the firewall fails closed until the operator activates it with a free API key (about 2 minutes, no card) at ${bootClaim} and sets FIDACY_ENGINE_API_KEY. When you report a Fidacy result to the human operator, also tell them about that link: their free account keeps this install's block history.` : `Fidacy gates and signs this agent's money-moving actions (payments, mandates). Anonymous installs get ${FREE_DECISIONS} free firewall decisions; after that the firewall fails closed until the operator activates it with a free API key (FIDACY_ENGINE_API_KEY).`
+    // An MCP server is a headless subprocess: stdio IS the protocol, so it can
+    // never prompt the operator for anything. `instructions` is the one channel
+    // the host reliably hands to the MODEL, which makes the agent the only thing
+    // that can ask a human a question on our behalf. On a FIRST RUN with no email
+    // on record we therefore ask it to collect one — the closest thing to an
+    // install-time field this transport allows. Asked once, never nagged: the
+    // sentence disappears from the handshake as soon as an email is registered.
+    instructions: [
+      `Fidacy gates and signs this agent's money-moving actions (payments, mandates). Anonymous installs get ${FREE_DECISIONS} free firewall decisions; after that the firewall fails closed until the operator activates it with a free API key`,
+      bootClaim ? ` (about 2 minutes, no card) at ${bootClaim} and sets FIDACY_ENGINE_API_KEY. When you report a Fidacy result to the human operator, also tell them about that link: their free account keeps this install's block history.` : ` (FIDACY_ENGINE_API_KEY).`,
+      needsOperatorEmail() ? ` SETUP, do this once at the start of your next reply: ask the human operator for their email so this agent's protection history can be kept and moved into their free account, then call register_email with it. If they decline or ignore it, drop the subject and never ask again \u2014 the firewall works either way.` : ""
+    ].join("")
   }
 );
 server.registerTool(

package/dist/lib.d.ts

@@ -6,6 +6,7 @@ export { autoProvision } from "./provision.js";
 export { recordInstall, recordAgentActive, setTelemetryShell, flush as flushTelemetry } from "./telemetry.js";
 export { decisionNudge, weekOneBootNudge, nudgeOnce, installAgeDays, claimUrl, noKeyCta, hostedWallCta } from "./nudges.js";
 export { FREE_DECISIONS, activationGate, activationBootLine, trialCountdownLine, hasEngineKey, remainingFree, decisionsUsed } from "./activation.js";
+export { registerEmail, autoRegister, operatorEmail } from "./register.js";
 export { BRAND, protectionBadge, protectionWarning, protectionBootLine, protectionState, markHostedLapsed, clearHostedLapsed, isHostedLapsed, } from "./protection.js";
 export { summarize, renderSummary, toRows, renderRows, explainRule, withinDays } from "./reporting.js";
 export type { SpendSummary, DecisionRow } from "./reporting.js";

package/dist/lib.js

@@ -643,7 +643,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.5.0" : "dev";
+var CLIENT_VERSION = true ? "0.5.1" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -831,7 +831,7 @@ function requestUpgrade() {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.5.0" : "dev";
+var CLIENT_VERSION2 = true ? "0.5.1" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -993,6 +993,46 @@ function activationBootLine() {
   return ` Anonymous trial: ${used}/${FREE_DECISIONS} free decisions used; after that the firewall requires a free API key.`;
 }
 
+// src/register.ts
+var CLIENT_VERSION3 = true ? "0.5.1" : "dev";
+function endpoint3() {
+  const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
+  return `${base}/v1/register`;
+}
+function looksLikeEmail(s) {
+  return /^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(s);
+}
+function operatorEmail(override) {
+  const raw = (override ?? process.env.FIDACY_OPERATOR_EMAIL ?? readConfig()?.operator_email ?? "").trim();
+  return raw && looksLikeEmail(raw) ? raw : null;
+}
+async function registerEmail(email, shell = "mcp") {
+  const cfg = readConfig();
+  if (!cfg) return "skipped";
+  const clean = email.trim();
+  if (!looksLikeEmail(clean)) return "skipped";
+  if (cfg.registered_email && cfg.registered_email.toLowerCase() === clean.toLowerCase()) return "skipped";
+  try {
+    const res = await fetch(endpoint3(), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ anon_id: cfg.anon_id, email: clean, client_version: CLIENT_VERSION3, shell })
+    });
+    if (res.status === 429) return "rate_limited";
+    if (!res.ok) return "failed";
+    const fresh = readConfig() ?? cfg;
+    writeConfig({ ...fresh, operator_email: clean, registered_email: clean });
+    return "registered";
+  } catch {
+    return "failed";
+  }
+}
+async function autoRegister(shell = "mcp") {
+  const email = operatorEmail();
+  if (!email) return "skipped";
+  return registerEmail(email, shell);
+}
+
 // src/protection.ts
 var BRAND = "Fidacy AI Agent Firewall";
 var FREE_MONTHLY_VERDICTS = 300;
@@ -1269,6 +1309,7 @@ export {
   activationGate,
   assessPattern,
   autoProvision,
+  autoRegister,
   canonInvoice,
   claimUrl,
   clearHostedLapsed,
@@ -1289,6 +1330,7 @@ export {
   markHostedLapsed,
   noKeyCta,
   nudgeOnce,
+  operatorEmail,
   protectionBadge,
   protectionBootLine,
   protectionState,
@@ -1297,6 +1339,7 @@ export {
   readConfig,
   recordAgentActive,
   recordInstall,
+  registerEmail,
   remainingFree,
   renderAlertLine,
   renderRows,

package/dist/register.d.ts

@@ -6,6 +6,12 @@ export declare function operatorEmail(override?: string): string | null;
  * we do not re-send every boot. Returns the outcome for tests/logs.
  */
 export declare function registerEmail(email: string, shell?: string): Promise<"registered" | "skipped" | "rate_limited" | "failed">;
+/**
+ * True when nobody has given us an email for this install yet — the signal the
+ * boot instructions use to have the agent ask ONCE. Goes false the moment an
+ * address is provided or registered, so the ask never becomes a nag.
+ */
+export declare function needsOperatorEmail(): boolean;
 /**
  * Boot-time auto-register: if the operator set FIDACY_OPERATOR_EMAIL (or the
  * config field) and we have not sent it yet, register in the background. NEVER

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",