@fidacy/openclaw-plugin 0.1.1 → 0.1.2

package/CHANGELOG.md

@@ -18,3 +18,10 @@ First release. Fidacy payment firewall as a native OpenClaw plugin:
   fallback; `engineApiKey` enables signed verdicts from the live engine.
 - Built against `openclaw@2026.6.11` plugin-sdk types; bundle is self-contained
   (`openclaw/plugin-sdk/*` external, engine inlined).
+
+## 0.1.2 — 2026-07-02
+
+- Telemetry: reports `shell: "openclaw-plugin"` + the plugin's own version, so
+  ClawHub-native adoption is attributable (was indistinguishable from MCP).
+- DENY responses now point to the `fidacy_upgrade` tool.
+- Inherits the self-documenting first-run config + friendlier boot line.

package/dist/index.js

@@ -4439,7 +4439,7 @@ var DevFidacyCore = class {
     this.priv = kp.privateKey;
     this.pubPem = publicKeyPem(kp.publicKey);
     if (kp.ephemeral)
-      console.error("[fidacy] dev mode: ephemeral signing key. Production: set FIDACY_SIGNING_KEY_B64, or FIDACY_MODE=http + FIDACY_API_URL + FIDACY_API_KEY to use the live core.");
+      console.error("[fidacy] local firewall active, deny-by-default. Grants are signed with a per-session key (fine for local use); set FIDACY_SIGNING_KEY_B64 for a stable key, or FIDACY_MODE=http to use the hosted core.");
     this.mandate = opts.mandate;
     this.store = new FileAuditStore(opts.auditLogPath ?? "./fidacy-audit.log");
     this.onDecision = opts.onDecision;
@@ -4578,7 +4578,12 @@ function writeConfig(cfg) {
 function ensureState() {
   const existing = readConfig();
   if (existing) return { config: existing, firstRun: false };
-  const config = { anon_id: randomUUID2(), tier: "free", api_key: null };
+  const config = {
+    anon_id: randomUUID2(),
+    tier: "free",
+    api_key: null,
+    mandate: { payees: [], categories: ["*"], currency: "USD", perTxMax: 2500, maxTotal: 1e4 }
+  };
   try {
     writeConfig(config);
   } catch {
@@ -4599,7 +4604,11 @@ function resolveMandateRules(cfg) {
 }
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = "0.1.5";
+var CLIENT_VERSION = true ? "0.1.2" : "dev";
+var currentShell = "mcp";
+function setTelemetryShell(shell) {
+  currentShell = shell;
+}
 function telemetryEnabled() {
   const v = (process.env.FIDACY_DISABLE_TELEMETRY ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -4625,7 +4634,7 @@ function resultOf(status, violatedRule) {
 }
 function record(type, result) {
   if (!telemetryEnabled()) return;
-  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, ...result ? { result } : {} });
+  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, shell: currentShell, ...result ? { result } : {} });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
       void flush();
@@ -4718,7 +4727,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = "0.1.5";
+var CLIENT_VERSION2 = true ? "0.1.2" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -4873,6 +4882,7 @@ async function postOnce(fetchImpl, url, headers, payload, timeoutMs) {
 var core;
 function boot() {
   if (!core) {
+    setTelemetryShell("openclaw-plugin");
     const state = ensureState();
     core = makeCore();
     if (state.firstRun) recordInstall();
@@ -4933,7 +4943,7 @@ var index_default = defineToolPlugin({
       async execute(params, config) {
         const d = await boot().decide(params, subjectOf(config));
         const message = d.status === "ALLOW" ? `ALLOW (decision ${d.decisionId})${params.invoiceRef ? ` for invoice ${params.invoiceRef}` : ""}. To settle, call the executor with the SAME payee, amount, currency, and idempotencyKey, and set "grant" to EXACTLY this signed value:
-${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}. No grant issued, this payment cannot proceed. The denial itself is recorded in the tamper-evident, hash-chained audit: call get_audit_proof with decisionId ${d.decisionId} for the proof of what was blocked.`;
+${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}. No grant issued, this payment cannot proceed. The denial itself is recorded in the tamper-evident, hash-chained audit: call get_audit_proof with decisionId ${d.decisionId} for the proof of what was blocked. Fidacy just blocked this for you \u2014 for server-signed, anchored proof of every block (free account, local history migrates), call the fidacy_upgrade tool.`;
         return { status: d.status, decisionId: d.decisionId, grant: d.grant, violatedRule: d.violatedRule, message };
       }
     }),

package/openclaw.plugin.json

@@ -1,8 +1,8 @@
 {
   "id": "fidacy",
-  "name": "Fidacy — Payment Firewall",
+  "name": "Fidacy \u2014 Payment Firewall",
   "description": "A signed, independently-verifiable verdict on every money-moving agent action. Blocks wrong/lookalike payee, over-cap, and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default.",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "contracts": {
     "tools": [
       "request_payment",
@@ -48,4 +48,4 @@
       "advanced": true
     }
   }
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",
@@ -55,8 +55,8 @@
     "openclaw": "2026.6.11",
     "typebox": "1.1.39",
     "typescript": "^5.6.3",
-    "@fidacy/mcp": "0.1.9",
-    "@fidacy/firewall": "0.1.0"
+    "@fidacy/firewall": "0.1.0",
+    "@fidacy/mcp": "0.1.10"
   },
   "scripts": {
     "build": "node scripts/bundle.mjs",