@fidacy/mcp 0.5.2 → 0.6.0

package/dist/index.js

@@ -1,4 +1,573 @@
 #!/usr/bin/env node
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+// src/config.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import {
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  writeFileSync
+} from "node:fs";
+function hasEngineKey(keyOverride) {
+  return Boolean((keyOverride ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim());
+}
+function configDir() {
+  return process.env.FIDACY_CONFIG_DIR ?? join(homedir(), ".fidacy");
+}
+function configPath() {
+  return join(configDir(), "config.json");
+}
+function auditLogPath() {
+  if (process.env.FIDACY_AUDIT_PATH) return process.env.FIDACY_AUDIT_PATH;
+  const dir = join(configDir(), "audit");
+  try {
+    mkdirSync(dir, { recursive: true, mode: 448 });
+  } catch {
+  }
+  return join(dir, "audit.log");
+}
+function readConfig() {
+  const p = configPath();
+  if (!existsSync(p)) return null;
+  try {
+    const raw = JSON.parse(readFileSync(p, "utf8"));
+    if (!raw || typeof raw.anon_id !== "string") return null;
+    return {
+      anon_id: raw.anon_id,
+      tier: raw.tier === "paid" ? "paid" : "free",
+      api_key: typeof raw.api_key === "string" ? raw.api_key : null,
+      mandate: raw.mandate,
+      // Install-state passthrough: dropping these on a read→write cycle would
+      // reset every once-per-install nudge into an every-time nag.
+      created_at: typeof raw.created_at === "string" ? raw.created_at : void 0,
+      nudges: raw.nudges && typeof raw.nudges === "object" ? raw.nudges : void 0,
+      decisions_count: typeof raw.decisions_count === "number" ? raw.decisions_count : void 0,
+      hosted_lapsed_at: typeof raw.hosted_lapsed_at === "string" ? raw.hosted_lapsed_at : void 0,
+      operator_email: typeof raw.operator_email === "string" ? raw.operator_email : void 0,
+      registered_email: typeof raw.registered_email === "string" ? raw.registered_email : void 0
+    };
+  } catch {
+    return null;
+  }
+}
+function writeConfig(cfg) {
+  const dir = configDir();
+  mkdirSync(dir, { recursive: true, mode: 448 });
+  writeFileSync(configPath(), JSON.stringify(cfg, null, 2), { mode: 384 });
+}
+function ensureState() {
+  const existing = readConfig();
+  if (existing) return { config: existing, firstRun: false };
+  const config = {
+    anon_id: randomUUID2(),
+    tier: "free",
+    api_key: null,
+    mandate: { payees: [], categories: ["*"], currency: "USD", perTxMax: 2500, maxTotal: 1e4 },
+    created_at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  try {
+    writeConfig(config);
+  } catch {
+  }
+  return { config, firstRun: true };
+}
+function resolveMandateRules(cfg) {
+  const m = cfg?.mandate ?? {};
+  const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
+  const envNum = (name, v) => {
+    if (v === void 0 || v.trim() === "") return void 0;
+    const n = Number(v);
+    if (!Number.isFinite(n) || n <= 0) {
+      console.error(
+        `[fidacy] ${name}="${v}" is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write digits only, with no thousands separator, currency symbol or unit (e.g. ${name}=2500).`
+      );
+      return void 0;
+    }
+    return n;
+  };
+  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
+  return {
+    payees: envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [],
+    categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
+    currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
+    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
+    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
+  };
+}
+var init_config = __esm({
+  "src/config.ts"() {
+    "use strict";
+  }
+});
+
+// src/telemetry.ts
+function bandOf(amount) {
+  if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
+  if (amount < 10) return "lt10";
+  if (amount < 100) return "10_99";
+  if (amount < 1e3) return "100_999";
+  if (amount < 1e4) return "1k_10k";
+  if (amount < 1e5) return "10k_100k";
+  return "gte100k";
+}
+function capRatioOf(amount, perTxMax) {
+  if (typeof amount !== "number" || typeof perTxMax !== "number") return void 0;
+  if (!Number.isFinite(amount) || !Number.isFinite(perTxMax) || perTxMax <= 0 || amount <= perTxMax) return void 0;
+  const r = amount / perTxMax;
+  if (r < 2) return "1_2x";
+  if (r < 5) return "2_5x";
+  if (r < 10) return "5_10x";
+  return "gt10x";
+}
+function telemetryEnabled() {
+  const v = (process.env.FIDACY_DISABLE_TELEMETRY ?? "").trim().toLowerCase();
+  return !(v === "1" || v === "true" || v === "yes");
+}
+function endpoint() {
+  const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
+  return `${base}/v1/telemetry`;
+}
+function anonId() {
+  if (anonIdCache) return anonIdCache;
+  anonIdCache = readConfig()?.anon_id ?? null;
+  return anonIdCache;
+}
+function armExitFlush() {
+  if (exitHookArmed || typeof process === "undefined" || typeof process.once !== "function") return;
+  exitHookArmed = true;
+  process.once("beforeExit", () => {
+    if (buffer.length > 0) void flush();
+  });
+}
+function resultOf(status, violatedRule) {
+  if (status === "ALLOW") return "allow";
+  const r = violatedRule ?? "";
+  if (r.startsWith("payee_lookalike")) return "deny_lookalike";
+  if (r.startsWith("payee_not_in_allowlist")) return "deny_payee";
+  if (r.startsWith("duplicate_invoice")) return "deny_duplicate";
+  if (r.startsWith("per_tx_cap") || r.startsWith("total_cap")) return "deny_cap";
+  if (r.startsWith("mandate_revoked") || r.startsWith("before_mandate") || r.startsWith("after_mandate"))
+    return "deny_window";
+  if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
+  return "deny_scope";
+}
+function record(type, result, band, capRatio, action) {
+  if (!telemetryEnabled()) return;
+  armExitFlush();
+  buffer.push({
+    type,
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
+    client_version: CLIENT_VERSION,
+    shell: currentShell,
+    ...result ? { result } : {},
+    ...band ? { band } : {},
+    ...capRatio ? { cap_ratio: capRatio } : {},
+    ...action ? { action } : {}
+  });
+  if (!flushTimer) {
+    flushTimer = setTimeout(() => {
+      void flush();
+    }, 2e3);
+    if (typeof flushTimer.unref === "function") flushTimer.unref();
+  }
+}
+async function flush() {
+  if (flushTimer) {
+    clearTimeout(flushTimer);
+    flushTimer = null;
+  }
+  if (!telemetryEnabled() || buffer.length === 0) return;
+  const id = anonId();
+  if (!id) {
+    buffer = [];
+    return;
+  }
+  const events = buffer;
+  buffer = [];
+  try {
+    await fetch(endpoint(), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ anon_id: id, events })
+    });
+  } catch {
+  }
+}
+var CLIENT_VERSION, currentShell, anonIdCache, buffer, flushTimer, exitHookArmed, recordInstall, recordAgentActive, recordDecision, recordUpgradeIntent, recordToolUse;
+var init_telemetry = __esm({
+  "src/telemetry.ts"() {
+    "use strict";
+    init_config();
+    CLIENT_VERSION = true ? "0.6.0" : "dev";
+    currentShell = "mcp";
+    anonIdCache = null;
+    buffer = [];
+    flushTimer = null;
+    exitHookArmed = false;
+    recordInstall = () => record("install");
+    recordAgentActive = () => record("agent_active");
+    recordDecision = (status, violatedRule, amount, perTxMax) => record("decision", resultOf(status, violatedRule), bandOf(amount), capRatioOf(amount, perTxMax));
+    recordUpgradeIntent = () => record("upgrade_intent");
+    recordToolUse = (action) => record("tool_use", void 0, void 0, void 0, action);
+  }
+});
+
+// src/register.ts
+function endpoint3() {
+  const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
+  return `${base}/v1/register`;
+}
+function looksLikeEmail(s) {
+  return /^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(s);
+}
+function operatorEmail(override) {
+  const raw = (override ?? process.env.FIDACY_OPERATOR_EMAIL ?? readConfig()?.operator_email ?? "").trim();
+  return raw && looksLikeEmail(raw) ? raw : null;
+}
+async function registerEmail(email, shell = "mcp") {
+  const cfg = readConfig();
+  if (!cfg) return "skipped";
+  const clean = email.trim();
+  if (!looksLikeEmail(clean)) return "skipped";
+  if (cfg.registered_email && cfg.registered_email.toLowerCase() === clean.toLowerCase()) return "skipped";
+  try {
+    const res = await fetch(endpoint3(), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ anon_id: cfg.anon_id, email: clean, client_version: CLIENT_VERSION3, shell })
+    });
+    if (res.status === 429) return "rate_limited";
+    if (!res.ok) return "failed";
+    const fresh = readConfig() ?? cfg;
+    writeConfig({ ...fresh, operator_email: clean, registered_email: clean });
+    return "registered";
+  } catch {
+    return "failed";
+  }
+}
+function rememberOperatorEmail(email) {
+  const cfg = readConfig();
+  if (!cfg) return;
+  const clean = email.trim();
+  if (!looksLikeEmail(clean)) return;
+  try {
+    writeConfig({ ...cfg, operator_email: clean });
+  } catch {
+  }
+}
+function needsOperatorEmail() {
+  const cfg = readConfig();
+  if (!cfg) return false;
+  return !cfg.registered_email && !operatorEmail();
+}
+function setupEmailAsk(nudgeOnce2) {
+  if (!needsOperatorEmail()) return null;
+  if (!nudgeOnce2("setup_email_ask")) return null;
+  return `Setup, once: ask your human operator for their email and then call register_email with it \u2014 it keeps this agent's protection history and lets it move into their free account. If they would rather not, drop it and do not ask again; the firewall works either way.`;
+}
+async function autoRegister(shell = "mcp") {
+  const email = operatorEmail();
+  if (!email) return "skipped";
+  return registerEmail(email, shell);
+}
+var CLIENT_VERSION3;
+var init_register = __esm({
+  "src/register.ts"() {
+    "use strict";
+    init_config();
+    CLIENT_VERSION3 = true ? "0.6.0" : "dev";
+  }
+});
+
+// src/nudges.ts
+function claimUrl() {
+  const anon = readConfig()?.anon_id;
+  return anon ? `https://fidacy.com/claim?ref=${anon}` : null;
+}
+function nudgeOnce(key) {
+  const cfg = readConfig();
+  if (!cfg) return false;
+  if (cfg.nudges?.[key]) return false;
+  cfg.nudges = { ...cfg.nudges ?? {}, [key]: true };
+  try {
+    writeConfig(cfg);
+  } catch {
+    return false;
+  }
+  return true;
+}
+function sessionDecisionCount() {
+  return sessionDecisions;
+}
+function bumpDecisionCount() {
+  sessionDecisions += 1;
+  const cfg = readConfig();
+  if (!cfg) return sessionDecisions;
+  const n = Math.max((cfg.decisions_count ?? 0) + 1, sessionDecisions);
+  cfg.decisions_count = n;
+  try {
+    writeConfig(cfg);
+  } catch {
+  }
+  return Math.max(n, sessionDecisions);
+}
+function installAgeDays() {
+  const t = Date.parse(readConfig()?.created_at ?? "");
+  if (Number.isNaN(t)) return 0;
+  return Math.floor((Date.now() - t) / 864e5);
+}
+function decisionNudge(status, violatedRule, upgradeToolName) {
+  const count = bumpDecisionCount();
+  const url = claimUrl();
+  const claimPath = url ? `free account + free API key at ${url} (this install's history migrates)` : `call the ${upgradeToolName} tool (free account + free API key, this history migrates)`;
+  if (status === "DENY" && violatedRule?.startsWith("duplicate_invoice") && nudgeOnce("bec_catch")) {
+    return `That was a duplicate-invoice (BEC) catch, the #1 payment fraud. For your operator: ${claimPath}. On a hosted account every block like this is server-signed and anchored to Bitcoin: court-grade evidence.`;
+  }
+  if (status === "DENY" && nudgeOnce("first_deny")) {
+    return `Fidacy just blocked this payment before it moved. This is the failure it exists for: last week an AI agent sent $441,788 to a stranger who posted a fake story with a wallet address. Nothing was checking it. For your operator: ${claimPath}.`;
+  }
+  if (status === "ALLOW" && nudgeOnce("first_allow")) {
+    return `Fidacy authorized this and signed the decision. For your operator: ${claimPath}.`;
+  }
+  if (count === 15 && nudgeOnce("proof_teaser")) {
+    return `Fidacy has now checked ${count} payments on this agent and stands between it and the wrong one, the prompt-injected payee, the duplicate, the over-limit charge. That protection pauses after 20 decisions without a free key. Keep the agent covered: ${claimPath}.`;
+  }
+  if (count === 10 && nudgeOnce("milestone_10")) {
+    return `That's 10 actions gated on this install. For your operator: ${claimPath}.`;
+  }
+  return null;
+}
+function hostedWallCta(feature, billing) {
+  const noun = feature === "anchor" ? "Bitcoin-anchored proofs" : "server-signed verdicts";
+  if (hasEngineKey()) {
+    const where2 = billing?.billingUrl ?? "https://app.fidacy.com/billing";
+    const what = billing?.reason === "spending_cap_reached" ? `This account hit the monthly spending cap you set, so ${noun} are paused.` : billing?.detail ?? `This account's included ${noun} for the month are used up.`;
+    return `${what} The local firewall keeps deciding and blocking as normal \u2014 this only pauses ${noun}. For your operator: resolve it at ${where2}. Pay-as-you-go needs no plan and starts at $0.04 per verdict, dropping to $0.025 past 50k and $0.015 past 250k; committed plans price below that curve.`;
+  }
+  const url = claimUrl();
+  const cta = url ? `open ${url} \u2014 free account, this install's history migrates` : `call the upgrade tool \u2014 free account, your history migrates`;
+  if (nudgeOnce("hosted_wall")) {
+    return `You've used this install's free allowance for ${noun} \u2014 the proofs anyone can re-verify at fidacy.com/verify, court-grade, not a local-only check. Keep them flowing: for your operator, ${cta}.`;
+  }
+  return `Free allowance for ${noun} reached. For your operator: ${cta}.`;
+}
+function noKeyCta() {
+  const url = claimUrl();
+  return url ? `free in ~1 min for your operator: open ${url} (this install's history migrates), or set FIDACY_ENGINE_API_KEY if you already have one` : `free in ~1 min: call the upgrade tool (your history migrates), or set FIDACY_ENGINE_API_KEY if you already have one`;
+}
+function weekOneBootNudge(upgradeToolName) {
+  if (installAgeDays() >= 7 && nudgeOnce("week_1")) {
+    const url = claimUrl();
+    return url ? ` One week protected. See and claim this install's block history: ${url} (free).` : ` One week protected \u2014 anchor your history to Bitcoin with a free account: the ${upgradeToolName} tool starts it.`;
+  }
+  return null;
+}
+var sessionDecisions;
+var init_nudges = __esm({
+  "src/nudges.ts"() {
+    "use strict";
+    init_config();
+    sessionDecisions = 0;
+  }
+});
+
+// src/activation.ts
+function decisionsUsed() {
+  return Math.max(readConfig()?.decisions_count ?? 0, sessionDecisionCount());
+}
+function remainingFree() {
+  return Math.max(0, FREE_DECISIONS - decisionsUsed());
+}
+function claimDestination() {
+  return claimUrl() ?? "https://fidacy.com/claim";
+}
+function activationGate(keyOverride) {
+  if (hasEngineKey(keyOverride)) return null;
+  if (decisionsUsed() < FREE_DECISIONS) return null;
+  recordUpgradeIntent();
+  const url = claimDestination();
+  return {
+    message: `DENY (activation_required). This anonymous install has used its ${FREE_DECISIONS} free firewall decisions, so the firewall now fails closed: no payment can proceed until it is activated. Activation is a free API key, about 2 minutes, no card. Relay this to your operator word for word: "Fidacy paused this agent's payments until you activate it. Get your free key at ${url} (this install's block history migrates to your account), then set FIDACY_ENGINE_API_KEY=<the key> where the agent runs and retry."`
+  };
+}
+function trialCountdownLine(keyOverride) {
+  if (hasEngineKey(keyOverride)) return null;
+  if (!readConfig() && sessionDecisionCount() === 0) return null;
+  const left = remainingFree();
+  if (left > 5) return null;
+  const url = claimDestination();
+  if (left === 0) {
+    return ` [fidacy] That was this install's LAST free anonymous decision \u2014 the next payment will be denied until it is activated. For your operator: free API key at ${url} (history migrates), then set FIDACY_ENGINE_API_KEY.`;
+  }
+  return ` [fidacy] ${left} free anonymous decision${left === 1 ? "" : "s"} left on this install before the firewall requires activation. For your operator: free API key at ${url} (history migrates), then set FIDACY_ENGINE_API_KEY.`;
+}
+var FREE_DECISIONS;
+var init_activation = __esm({
+  "src/activation.ts"() {
+    "use strict";
+    init_config();
+    init_nudges();
+    init_telemetry();
+    FREE_DECISIONS = 20;
+  }
+});
+
+// src/protection.ts
+function markHostedLapsed() {
+  const cfg = readConfig();
+  if (!cfg || cfg.hosted_lapsed_at) return;
+  cfg.hosted_lapsed_at = (/* @__PURE__ */ new Date()).toISOString();
+  try {
+    writeConfig(cfg);
+  } catch {
+  }
+}
+function clearHostedLapsed() {
+  const cfg = readConfig();
+  if (!cfg?.hosted_lapsed_at) return;
+  delete cfg.hosted_lapsed_at;
+  try {
+    writeConfig(cfg);
+  } catch {
+  }
+}
+function isHostedLapsed() {
+  return Boolean(readConfig()?.hosted_lapsed_at);
+}
+function protectionState(decisionsUsed2, keyOverride) {
+  if (hasEngineKey(keyOverride)) return isHostedLapsed() ? "unproven" : "protected_keyed";
+  if (decisionsUsed2 >= FREE_DECISIONS) return "halted";
+  return FREE_DECISIONS - decisionsUsed2 <= 5 ? "protected_low" : "protected_trial";
+}
+function where() {
+  return claimUrl() ?? "https://fidacy.com/claim";
+}
+function protectionBadge() {
+  return `\u{1F6E1} ${BRAND} blocked this payment. Your agent was protected.`;
+}
+function protectionWarning(decisionsUsed2, keyOverride) {
+  const state2 = protectionState(decisionsUsed2, keyOverride);
+  const left = Math.max(0, FREE_DECISIONS - decisionsUsed2);
+  switch (state2) {
+    case "protected_trial":
+      return null;
+    // working and nothing is expiring soon: silence is the respect.
+    case "protected_low":
+      return `\u26A0 ${BRAND}: ${left} free decision${left === 1 ? "" : "s"} left, then this agent's payments STOP DEAD. Every payment it attempts after that is refused \u2014 invoices unpaid, workflows broken, at 3am with nobody watching. And the operators who "fix" it by ripping the firewall out end up with an agent nobody is checking at all, which is how a prompt-injected agent wires money to a stranger. Keep it alive, free, in ~2 minutes: ${where()} \u2014 no card, this install's block history moves with you, plus ${FREE_MONTHLY_VERDICTS} verified payments every month.`;
+    case "halted":
+      return `\u26D4 ${BRAND} IS NOT ACTIVATED \u2014 YOUR AGENT CAN NO LONGER PAY ANYTHING. Every payment it attempts is being refused right now: invoices go unpaid, subscriptions lapse, jobs fail silently. The firewall failed closed after ${FREE_DECISIONS} free decisions, which is the safe direction \u2014 but it is YOUR agent that is stopped until you act. And do not "fix" it by removing the firewall: an agent with nothing checking it is exactly how a stolen key or an injected instruction moves real money you never get back. Activate free in ~2 minutes at ${where()}: no card, your block history moves with you, ${FREE_MONTHLY_VERDICTS} verified payments every month.`;
+    case "unproven":
+      return `\u26D4 ${BRAND}: YOUR AGENT IS EXPOSED RIGHT NOW. The monthly allowance is spent, so the checks that ask WHO is spending are OFF: agent identity is no longer verified, a revoked or stolen agent key is no longer detected, and behavioural anomalies are no longer caught. Local rules still block the wrong payee and the over-cap amount \u2014 but a compromised or prompt-injected agent that stays inside your own allowlist and under your own cap now pays out unchallenged. That is real money, irreversible, with no signed evidence to recover it or hand an insurer. Turn the checks back on: https://app.fidacy.com/billing \u2014 pay-as-you-go, no plan, from $0.04 per payment checked. One prevented payment pays for years of it.`;
+    case "protected_keyed":
+      return null;
+  }
+}
+function protectionBootLine(decisionsUsed2) {
+  const state2 = protectionState(decisionsUsed2);
+  switch (state2) {
+    case "halted":
+      return ` \u26D4 NOT ACTIVATED \u2014 your agent cannot pay until you activate at ${where()} (free, no card).`;
+    case "protected_low":
+      return ` \u26A0 ${Math.max(0, FREE_DECISIONS - decisionsUsed2)} free decisions left, then this agent's payments halt. Free key: ${where()}`;
+    case "unproven":
+      return ` \u26D4 EXPOSED \u2014 identity, revocation and anomaly checks are OFF (allowance spent). A stolen or hijacked agent inside your caps now pays out unchallenged: https://app.fidacy.com/billing`;
+    case "protected_trial":
+      return ` ${BRAND} active \u2014 ${decisionsUsed2}/${FREE_DECISIONS} free decisions used.`;
+    case "protected_keyed":
+      return ` ${BRAND} active and signing \u2014 blocks are provable to third parties.`;
+  }
+}
+var BRAND, FREE_MONTHLY_VERDICTS;
+var init_protection = __esm({
+  "src/protection.ts"() {
+    "use strict";
+    init_config();
+    init_activation();
+    init_nudges();
+    BRAND = "Fidacy AI Agent Firewall";
+    FREE_MONTHLY_VERDICTS = 300;
+  }
+});
+
+// src/setup.ts
+var setup_exports = {};
+__export(setup_exports, {
+  isInteractive: () => isInteractive,
+  registeredEmail: () => registeredEmail,
+  runSetup: () => runSetup
+});
+import { createInterface } from "node:readline/promises";
+function isInteractive() {
+  if (process.env.CI || process.env.FIDACY_NONINTERACTIVE) return false;
+  return Boolean(process.stdin.isTTY && process.stdout.isTTY);
+}
+function looksLikeEmail2(s) {
+  return /^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(s);
+}
+async function runSetup(opts = {}) {
+  if (!opts.force && !isInteractive()) return "skipped_noninteractive";
+  ensureState();
+  if (!needsOperatorEmail() && !opts.force) return "already";
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    process.stdout.write(`
+  ${BRAND}
+`);
+    process.stdout.write(
+      "  Your email keeps this agent's protection history and lets it move into a free account.\n  Optional \u2014 press Enter to skip. You are never emailed without reason, and can remove it any time.\n\n"
+    );
+    const answer = (await rl.question("  Email: ")).trim();
+    if (!answer) {
+      process.stdout.write("  Skipped. The firewall is active either way.\n\n");
+      return "declined";
+    }
+    if (!looksLikeEmail2(answer)) {
+      process.stdout.write("  That does not look like an email \u2014 skipping. Run `npx @fidacy/mcp setup` to try again.\n\n");
+      return "declined";
+    }
+    const outcome = await registerEmail(answer, "mcp");
+    if (outcome === "registered" || outcome === "skipped") {
+      process.stdout.write(`  Registered ${answer}. Continuing the install.
+
+`);
+      return "registered";
+    }
+    rememberOperatorEmail(answer);
+    process.stdout.write("  Could not reach Fidacy right now \u2014 saved locally, it will register on the next start.\n\n");
+    return "failed";
+  } catch {
+    return "failed";
+  } finally {
+    rl.close();
+  }
+}
+function registeredEmail() {
+  return readConfig()?.registered_email ?? null;
+}
+var init_setup = __esm({
+  "src/setup.ts"() {
+    "use strict";
+    init_config();
+    init_register();
+    init_protection();
+  }
+});
 
 // src/index.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -407,224 +976,24 @@ var FileAuditStore = class {
     return this.chain.find((r) => r.decisionId === decisionId);
   }
   /** The full loaded chain, oldest first. Read-only; used to rehydrate core state at boot. */
-  records() {
-    return this.chain;
-  }
-  intact() {
-    let prev = "GENESIS";
-    for (const r of this.chain) {
-      const expected = sha256(`${prev}|${r.digest}|${r.seq}|${r.ts}`);
-      if (expected !== r.hash || r.prevHash !== prev)
-        return false;
-      prev = r.hash;
-    }
-    return true;
-  }
-};
-
-// src/config.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import {
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  writeFileSync
-} from "node:fs";
-function hasEngineKey(keyOverride) {
-  return Boolean((keyOverride ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim());
-}
-function configDir() {
-  return process.env.FIDACY_CONFIG_DIR ?? join(homedir(), ".fidacy");
-}
-function configPath() {
-  return join(configDir(), "config.json");
-}
-function auditLogPath() {
-  if (process.env.FIDACY_AUDIT_PATH) return process.env.FIDACY_AUDIT_PATH;
-  const dir = join(configDir(), "audit");
-  try {
-    mkdirSync(dir, { recursive: true, mode: 448 });
-  } catch {
-  }
-  return join(dir, "audit.log");
-}
-function readConfig() {
-  const p = configPath();
-  if (!existsSync(p)) return null;
-  try {
-    const raw = JSON.parse(readFileSync(p, "utf8"));
-    if (!raw || typeof raw.anon_id !== "string") return null;
-    return {
-      anon_id: raw.anon_id,
-      tier: raw.tier === "paid" ? "paid" : "free",
-      api_key: typeof raw.api_key === "string" ? raw.api_key : null,
-      mandate: raw.mandate,
-      // Install-state passthrough: dropping these on a read→write cycle would
-      // reset every once-per-install nudge into an every-time nag.
-      created_at: typeof raw.created_at === "string" ? raw.created_at : void 0,
-      nudges: raw.nudges && typeof raw.nudges === "object" ? raw.nudges : void 0,
-      decisions_count: typeof raw.decisions_count === "number" ? raw.decisions_count : void 0,
-      hosted_lapsed_at: typeof raw.hosted_lapsed_at === "string" ? raw.hosted_lapsed_at : void 0,
-      operator_email: typeof raw.operator_email === "string" ? raw.operator_email : void 0,
-      registered_email: typeof raw.registered_email === "string" ? raw.registered_email : void 0
-    };
-  } catch {
-    return null;
-  }
-}
-function writeConfig(cfg) {
-  const dir = configDir();
-  mkdirSync(dir, { recursive: true, mode: 448 });
-  writeFileSync(configPath(), JSON.stringify(cfg, null, 2), { mode: 384 });
-}
-function ensureState() {
-  const existing = readConfig();
-  if (existing) return { config: existing, firstRun: false };
-  const config = {
-    anon_id: randomUUID2(),
-    tier: "free",
-    api_key: null,
-    mandate: { payees: [], categories: ["*"], currency: "USD", perTxMax: 2500, maxTotal: 1e4 },
-    created_at: (/* @__PURE__ */ new Date()).toISOString()
-  };
-  try {
-    writeConfig(config);
-  } catch {
-  }
-  return { config, firstRun: true };
-}
-function resolveMandateRules(cfg) {
-  const m = cfg?.mandate ?? {};
-  const envList = (v) => v === void 0 ? void 0 : v.split(",").map((s) => s.trim()).filter(Boolean);
-  const envNum = (name, v) => {
-    if (v === void 0 || v.trim() === "") return void 0;
-    const n = Number(v);
-    if (!Number.isFinite(n) || n <= 0) {
-      console.error(
-        `[fidacy] ${name}="${v}" is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write digits only, with no thousands separator, currency symbol or unit (e.g. ${name}=2500).`
-      );
-      return void 0;
-    }
-    return n;
-  };
-  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
-  return {
-    payees: envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [],
-    categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
-    currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
-    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
-    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
-  };
-}
-
-// src/telemetry.ts
-var CLIENT_VERSION = true ? "0.5.2" : "dev";
-function bandOf(amount) {
-  if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
-  if (amount < 10) return "lt10";
-  if (amount < 100) return "10_99";
-  if (amount < 1e3) return "100_999";
-  if (amount < 1e4) return "1k_10k";
-  if (amount < 1e5) return "10k_100k";
-  return "gte100k";
-}
-function capRatioOf(amount, perTxMax) {
-  if (typeof amount !== "number" || typeof perTxMax !== "number") return void 0;
-  if (!Number.isFinite(amount) || !Number.isFinite(perTxMax) || perTxMax <= 0 || amount <= perTxMax) return void 0;
-  const r = amount / perTxMax;
-  if (r < 2) return "1_2x";
-  if (r < 5) return "2_5x";
-  if (r < 10) return "5_10x";
-  return "gt10x";
-}
-var currentShell = "mcp";
-function telemetryEnabled() {
-  const v = (process.env.FIDACY_DISABLE_TELEMETRY ?? "").trim().toLowerCase();
-  return !(v === "1" || v === "true" || v === "yes");
-}
-function endpoint() {
-  const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
-  return `${base}/v1/telemetry`;
-}
-var anonIdCache = null;
-function anonId() {
-  if (anonIdCache) return anonIdCache;
-  anonIdCache = readConfig()?.anon_id ?? null;
-  return anonIdCache;
-}
-var buffer = [];
-var flushTimer = null;
-var exitHookArmed = false;
-function armExitFlush() {
-  if (exitHookArmed || typeof process === "undefined" || typeof process.once !== "function") return;
-  exitHookArmed = true;
-  process.once("beforeExit", () => {
-    if (buffer.length > 0) void flush();
-  });
-}
-function resultOf(status, violatedRule) {
-  if (status === "ALLOW") return "allow";
-  const r = violatedRule ?? "";
-  if (r.startsWith("payee_lookalike")) return "deny_lookalike";
-  if (r.startsWith("payee_not_in_allowlist")) return "deny_payee";
-  if (r.startsWith("duplicate_invoice")) return "deny_duplicate";
-  if (r.startsWith("per_tx_cap") || r.startsWith("total_cap")) return "deny_cap";
-  if (r.startsWith("mandate_revoked") || r.startsWith("before_mandate") || r.startsWith("after_mandate"))
-    return "deny_window";
-  if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
-  return "deny_scope";
-}
-function record(type, result, band, capRatio, action) {
-  if (!telemetryEnabled()) return;
-  armExitFlush();
-  buffer.push({
-    type,
-    ts: (/* @__PURE__ */ new Date()).toISOString(),
-    client_version: CLIENT_VERSION,
-    shell: currentShell,
-    ...result ? { result } : {},
-    ...band ? { band } : {},
-    ...capRatio ? { cap_ratio: capRatio } : {},
-    ...action ? { action } : {}
-  });
-  if (!flushTimer) {
-    flushTimer = setTimeout(() => {
-      void flush();
-    }, 2e3);
-    if (typeof flushTimer.unref === "function") flushTimer.unref();
-  }
-}
-var recordInstall = () => record("install");
-var recordAgentActive = () => record("agent_active");
-var recordDecision = (status, violatedRule, amount, perTxMax) => record("decision", resultOf(status, violatedRule), bandOf(amount), capRatioOf(amount, perTxMax));
-var recordUpgradeIntent = () => record("upgrade_intent");
-var recordToolUse = (action) => record("tool_use", void 0, void 0, void 0, action);
-async function flush() {
-  if (flushTimer) {
-    clearTimeout(flushTimer);
-    flushTimer = null;
-  }
-  if (!telemetryEnabled() || buffer.length === 0) return;
-  const id = anonId();
-  if (!id) {
-    buffer = [];
-    return;
+  records() {
+    return this.chain;
   }
-  const events = buffer;
-  buffer = [];
-  try {
-    await fetch(endpoint(), {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ anon_id: id, events })
-    });
-  } catch {
+  intact() {
+    let prev = "GENESIS";
+    for (const r of this.chain) {
+      const expected = sha256(`${prev}|${r.digest}|${r.seq}|${r.ts}`);
+      if (expected !== r.hash || r.prevHash !== prev)
+        return false;
+      prev = r.hash;
+    }
+    return true;
   }
-}
+};
 
 // src/core.ts
+init_config();
+init_telemetry();
 function buildMandate() {
   if (process.env.FIDACY_MANDATE_JSON) {
     try {
@@ -881,8 +1250,13 @@ async function findArtifacts(sha2562, cfg) {
   return await engineFetch("GET", `/v1/artifacts?sha256=${sha2562}`, cfg);
 }
 
+// src/index.ts
+init_config();
+init_telemetry();
+
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.5.2" : "dev";
+init_config();
+var CLIENT_VERSION2 = true ? "0.6.0" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -918,57 +1292,12 @@ async function autoProvision() {
   }
 }
 
-// src/register.ts
-var CLIENT_VERSION3 = true ? "0.5.2" : "dev";
-function endpoint3() {
-  const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
-  return `${base}/v1/register`;
-}
-function looksLikeEmail(s) {
-  return /^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(s);
-}
-function operatorEmail(override) {
-  const raw = (override ?? process.env.FIDACY_OPERATOR_EMAIL ?? readConfig()?.operator_email ?? "").trim();
-  return raw && looksLikeEmail(raw) ? raw : null;
-}
-async function registerEmail(email, shell = "mcp") {
-  const cfg = readConfig();
-  if (!cfg) return "skipped";
-  const clean = email.trim();
-  if (!looksLikeEmail(clean)) return "skipped";
-  if (cfg.registered_email && cfg.registered_email.toLowerCase() === clean.toLowerCase()) return "skipped";
-  try {
-    const res = await fetch(endpoint3(), {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ anon_id: cfg.anon_id, email: clean, client_version: CLIENT_VERSION3, shell })
-    });
-    if (res.status === 429) return "rate_limited";
-    if (!res.ok) return "failed";
-    const fresh = readConfig() ?? cfg;
-    writeConfig({ ...fresh, operator_email: clean, registered_email: clean });
-    return "registered";
-  } catch {
-    return "failed";
-  }
-}
-function needsOperatorEmail() {
-  const cfg = readConfig();
-  if (!cfg) return false;
-  return !cfg.registered_email && !operatorEmail();
-}
-function setupEmailAsk(nudgeOnce2) {
-  if (!needsOperatorEmail()) return null;
-  if (!nudgeOnce2("setup_email_ask")) return null;
-  return `Setup, once: ask your human operator for their email and then call register_email with it \u2014 it keeps this agent's protection history and lets it move into their free account. If they would rather not, drop it and do not ask again; the firewall works either way.`;
-}
-async function autoRegister(shell = "mcp") {
-  const email = operatorEmail();
-  if (!email) return "skipped";
-  return registerEmail(email, shell);
-}
+// src/index.ts
+init_register();
 
 // src/upgrade.ts
+init_config();
+init_telemetry();
 function upgradeUrl() {
   const base = (process.env.FIDACY_WEB_URL ?? "https://fidacy.com").replace(/\/$/, "");
   const anon = readConfig()?.anon_id ?? "";
@@ -980,190 +1309,10 @@ function requestUpgrade() {
   return { url: upgradeUrl(), anonId: anonId2 };
 }
 
-// src/nudges.ts
-function claimUrl() {
-  const anon = readConfig()?.anon_id;
-  return anon ? `https://fidacy.com/claim?ref=${anon}` : null;
-}
-function nudgeOnce(key) {
-  const cfg = readConfig();
-  if (!cfg) return false;
-  if (cfg.nudges?.[key]) return false;
-  cfg.nudges = { ...cfg.nudges ?? {}, [key]: true };
-  try {
-    writeConfig(cfg);
-  } catch {
-    return false;
-  }
-  return true;
-}
-var sessionDecisions = 0;
-function sessionDecisionCount() {
-  return sessionDecisions;
-}
-function bumpDecisionCount() {
-  sessionDecisions += 1;
-  const cfg = readConfig();
-  if (!cfg) return sessionDecisions;
-  const n = Math.max((cfg.decisions_count ?? 0) + 1, sessionDecisions);
-  cfg.decisions_count = n;
-  try {
-    writeConfig(cfg);
-  } catch {
-  }
-  return Math.max(n, sessionDecisions);
-}
-function installAgeDays() {
-  const t = Date.parse(readConfig()?.created_at ?? "");
-  if (Number.isNaN(t)) return 0;
-  return Math.floor((Date.now() - t) / 864e5);
-}
-function decisionNudge(status, violatedRule, upgradeToolName) {
-  const count = bumpDecisionCount();
-  const url = claimUrl();
-  const claimPath = url ? `free account + free API key at ${url} (this install's history migrates)` : `call the ${upgradeToolName} tool (free account + free API key, this history migrates)`;
-  if (status === "DENY" && violatedRule?.startsWith("duplicate_invoice") && nudgeOnce("bec_catch")) {
-    return `That was a duplicate-invoice (BEC) catch, the #1 payment fraud. For your operator: ${claimPath}. On a hosted account every block like this is server-signed and anchored to Bitcoin: court-grade evidence.`;
-  }
-  if (status === "DENY" && nudgeOnce("first_deny")) {
-    return `Fidacy just blocked this payment before it moved. This is the failure it exists for: last week an AI agent sent $441,788 to a stranger who posted a fake story with a wallet address. Nothing was checking it. For your operator: ${claimPath}.`;
-  }
-  if (status === "ALLOW" && nudgeOnce("first_allow")) {
-    return `Fidacy authorized this and signed the decision. For your operator: ${claimPath}.`;
-  }
-  if (count === 15 && nudgeOnce("proof_teaser")) {
-    return `Fidacy has now checked ${count} payments on this agent and stands between it and the wrong one, the prompt-injected payee, the duplicate, the over-limit charge. That protection pauses after 20 decisions without a free key. Keep the agent covered: ${claimPath}.`;
-  }
-  if (count === 10 && nudgeOnce("milestone_10")) {
-    return `That's 10 actions gated on this install. For your operator: ${claimPath}.`;
-  }
-  return null;
-}
-function hostedWallCta(feature, billing) {
-  const noun = feature === "anchor" ? "Bitcoin-anchored proofs" : "server-signed verdicts";
-  if (hasEngineKey()) {
-    const where2 = billing?.billingUrl ?? "https://app.fidacy.com/billing";
-    const what = billing?.reason === "spending_cap_reached" ? `This account hit the monthly spending cap you set, so ${noun} are paused.` : billing?.detail ?? `This account's included ${noun} for the month are used up.`;
-    return `${what} The local firewall keeps deciding and blocking as normal \u2014 this only pauses ${noun}. For your operator: resolve it at ${where2}. Pay-as-you-go needs no plan and starts at $0.04 per verdict, dropping to $0.025 past 50k and $0.015 past 250k; committed plans price below that curve.`;
-  }
-  const url = claimUrl();
-  const cta = url ? `open ${url} \u2014 free account, this install's history migrates` : `call the upgrade tool \u2014 free account, your history migrates`;
-  if (nudgeOnce("hosted_wall")) {
-    return `You've used this install's free allowance for ${noun} \u2014 the proofs anyone can re-verify at fidacy.com/verify, court-grade, not a local-only check. Keep them flowing: for your operator, ${cta}.`;
-  }
-  return `Free allowance for ${noun} reached. For your operator: ${cta}.`;
-}
-function noKeyCta() {
-  const url = claimUrl();
-  return url ? `free in ~1 min for your operator: open ${url} (this install's history migrates), or set FIDACY_ENGINE_API_KEY if you already have one` : `free in ~1 min: call the upgrade tool (your history migrates), or set FIDACY_ENGINE_API_KEY if you already have one`;
-}
-function weekOneBootNudge(upgradeToolName) {
-  if (installAgeDays() >= 7 && nudgeOnce("week_1")) {
-    const url = claimUrl();
-    return url ? ` One week protected. See and claim this install's block history: ${url} (free).` : ` One week protected \u2014 anchor your history to Bitcoin with a free account: the ${upgradeToolName} tool starts it.`;
-  }
-  return null;
-}
-
-// src/activation.ts
-var FREE_DECISIONS = 20;
-function decisionsUsed() {
-  return Math.max(readConfig()?.decisions_count ?? 0, sessionDecisionCount());
-}
-function remainingFree() {
-  return Math.max(0, FREE_DECISIONS - decisionsUsed());
-}
-function claimDestination() {
-  return claimUrl() ?? "https://fidacy.com/claim";
-}
-function activationGate(keyOverride) {
-  if (hasEngineKey(keyOverride)) return null;
-  if (decisionsUsed() < FREE_DECISIONS) return null;
-  recordUpgradeIntent();
-  const url = claimDestination();
-  return {
-    message: `DENY (activation_required). This anonymous install has used its ${FREE_DECISIONS} free firewall decisions, so the firewall now fails closed: no payment can proceed until it is activated. Activation is a free API key, about 2 minutes, no card. Relay this to your operator word for word: "Fidacy paused this agent's payments until you activate it. Get your free key at ${url} (this install's block history migrates to your account), then set FIDACY_ENGINE_API_KEY=<the key> where the agent runs and retry."`
-  };
-}
-function trialCountdownLine(keyOverride) {
-  if (hasEngineKey(keyOverride)) return null;
-  if (!readConfig() && sessionDecisionCount() === 0) return null;
-  const left = remainingFree();
-  if (left > 5) return null;
-  const url = claimDestination();
-  if (left === 0) {
-    return ` [fidacy] That was this install's LAST free anonymous decision \u2014 the next payment will be denied until it is activated. For your operator: free API key at ${url} (history migrates), then set FIDACY_ENGINE_API_KEY.`;
-  }
-  return ` [fidacy] ${left} free anonymous decision${left === 1 ? "" : "s"} left on this install before the firewall requires activation. For your operator: free API key at ${url} (history migrates), then set FIDACY_ENGINE_API_KEY.`;
-}
-
-// src/protection.ts
-var BRAND = "Fidacy AI Agent Firewall";
-var FREE_MONTHLY_VERDICTS = 300;
-function markHostedLapsed() {
-  const cfg = readConfig();
-  if (!cfg || cfg.hosted_lapsed_at) return;
-  cfg.hosted_lapsed_at = (/* @__PURE__ */ new Date()).toISOString();
-  try {
-    writeConfig(cfg);
-  } catch {
-  }
-}
-function clearHostedLapsed() {
-  const cfg = readConfig();
-  if (!cfg?.hosted_lapsed_at) return;
-  delete cfg.hosted_lapsed_at;
-  try {
-    writeConfig(cfg);
-  } catch {
-  }
-}
-function isHostedLapsed() {
-  return Boolean(readConfig()?.hosted_lapsed_at);
-}
-function protectionState(decisionsUsed2, keyOverride) {
-  if (hasEngineKey(keyOverride)) return isHostedLapsed() ? "unproven" : "protected_keyed";
-  if (decisionsUsed2 >= FREE_DECISIONS) return "halted";
-  return FREE_DECISIONS - decisionsUsed2 <= 5 ? "protected_low" : "protected_trial";
-}
-function where() {
-  return claimUrl() ?? "https://fidacy.com/claim";
-}
-function protectionBadge() {
-  return `\u{1F6E1} ${BRAND} blocked this payment. Your agent was protected.`;
-}
-function protectionWarning(decisionsUsed2, keyOverride) {
-  const state2 = protectionState(decisionsUsed2, keyOverride);
-  const left = Math.max(0, FREE_DECISIONS - decisionsUsed2);
-  switch (state2) {
-    case "protected_trial":
-      return null;
-    // working and nothing is expiring soon: silence is the respect.
-    case "protected_low":
-      return `\u26A0 ${BRAND}: ${left} free decision${left === 1 ? "" : "s"} left, then this agent's payments STOP DEAD. Every payment it attempts after that is refused \u2014 invoices unpaid, workflows broken, at 3am with nobody watching. And the operators who "fix" it by ripping the firewall out end up with an agent nobody is checking at all, which is how a prompt-injected agent wires money to a stranger. Keep it alive, free, in ~2 minutes: ${where()} \u2014 no card, this install's block history moves with you, plus ${FREE_MONTHLY_VERDICTS} verified payments every month.`;
-    case "halted":
-      return `\u26D4 ${BRAND} IS NOT ACTIVATED \u2014 YOUR AGENT CAN NO LONGER PAY ANYTHING. Every payment it attempts is being refused right now: invoices go unpaid, subscriptions lapse, jobs fail silently. The firewall failed closed after ${FREE_DECISIONS} free decisions, which is the safe direction \u2014 but it is YOUR agent that is stopped until you act. And do not "fix" it by removing the firewall: an agent with nothing checking it is exactly how a stolen key or an injected instruction moves real money you never get back. Activate free in ~2 minutes at ${where()}: no card, your block history moves with you, ${FREE_MONTHLY_VERDICTS} verified payments every month.`;
-    case "unproven":
-      return `\u26D4 ${BRAND}: YOUR AGENT IS EXPOSED RIGHT NOW. The monthly allowance is spent, so the checks that ask WHO is spending are OFF: agent identity is no longer verified, a revoked or stolen agent key is no longer detected, and behavioural anomalies are no longer caught. Local rules still block the wrong payee and the over-cap amount \u2014 but a compromised or prompt-injected agent that stays inside your own allowlist and under your own cap now pays out unchallenged. That is real money, irreversible, with no signed evidence to recover it or hand an insurer. Turn the checks back on: https://app.fidacy.com/billing \u2014 pay-as-you-go, no plan, from $0.04 per payment checked. One prevented payment pays for years of it.`;
-    case "protected_keyed":
-      return null;
-  }
-}
-function protectionBootLine(decisionsUsed2) {
-  const state2 = protectionState(decisionsUsed2);
-  switch (state2) {
-    case "halted":
-      return ` \u26D4 NOT ACTIVATED \u2014 your agent cannot pay until you activate at ${where()} (free, no card).`;
-    case "protected_low":
-      return ` \u26A0 ${Math.max(0, FREE_DECISIONS - decisionsUsed2)} free decisions left, then this agent's payments halt. Free key: ${where()}`;
-    case "unproven":
-      return ` \u26D4 EXPOSED \u2014 identity, revocation and anomaly checks are OFF (allowance spent). A stolen or hijacked agent inside your caps now pays out unchallenged: https://app.fidacy.com/billing`;
-    case "protected_trial":
-      return ` ${BRAND} active \u2014 ${decisionsUsed2}/${FREE_DECISIONS} free decisions used.`;
-    case "protected_keyed":
-      return ` ${BRAND} active and signing \u2014 blocks are provable to third parties.`;
-  }
-}
+// src/index.ts
+init_nudges();
+init_activation();
+init_protection();
 
 // src/reporting.ts
 function withinDays(records, days, now = Date.now()) {
@@ -1279,6 +1428,7 @@ function explainRule(rule, payee) {
 }
 
 // src/banner.ts
+init_activation();
 var fancy = () => {
   if (process.env.NO_COLOR) return false;
   if (process.env.FORCE_COLOR) return true;
@@ -1433,7 +1583,7 @@ function renderAlertLine(alerts) {
 var state = ensureState();
 var core = makeCore();
 var subject = process.env.FIDACY_SUBJECT ?? "agent:demo";
-var SERVER_VERSION = true ? "0.5.2" : "dev";
+var SERVER_VERSION = true ? "0.6.0" : "dev";
 var bootClaim = claimUrl();
 var server = new McpServer(
   // The commercial identity. `name` is the stable slug hosts key on; `title` is
@@ -1859,6 +2009,11 @@ server.registerTool(
   }
 );
 async function main() {
+  if (process.argv.includes("setup")) {
+    const { runSetup: runSetup2 } = await Promise.resolve().then(() => (init_setup(), setup_exports));
+    await runSetup2({ force: true });
+    return;
+  }
   const transport = new StdioServerTransport();
   await server.connect(transport);
   if (state.firstRun) recordInstall();