@fidacy/openclaw-plugin 0.1.10 → 0.1.12

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.1.11 — 2026-07-03
+
+- Config hot-reload (shared core) + actionable `payee_not_in_allowlist` DENY.
+
 ## 0.1.10 — 2026-07-03
 
 - Artifact tools gain the `conversation` kind (chatbot session digests via

package/dist/index.js

@@ -4415,6 +4415,19 @@ var DevFidacyCore = class {
       this.spent += r.amount;
     }
   }
+  /**
+   * Swap the active mandate (shell config hot-reload: edit config.json, the next
+   * call picks it up, no host restart). Decision state is REBUILT from the audit
+   * log under the new window/currency, so a reload can never reset the BEC
+   * invoice dedup or undercount spend: a paid invoice stays paid, spent is
+   * recomputed.
+   */
+  setMandate(m) {
+    this.mandate = m;
+    this.spent = 0;
+    this.claimedInvoices.clear();
+    this.rehydrate();
+  }
   async getMandate() {
     return this.mandate;
   }
@@ -4557,6 +4570,9 @@ var FileAuditStore = class {
     const digest = sha256(stableStringify({ decisionId: decision.decisionId, status: decision.status, request: decision.request, violatedRule: decision.violatedRule ?? null }));
     const hash = sha256(`${prevHash}|${digest}|${seq}|${ts}`);
     const record2 = { seq, decisionId: decision.decisionId, status: decision.status, subject: decision.subject, digest, prevHash, hash, ts };
+    if (typeof decision.request?.purpose === "string" && decision.request.purpose.trim()) {
+      record2.purpose = decision.request.purpose.slice(0, 500);
+    }
     if (decision.status === "ALLOW") {
       const req = decision.request;
       if (typeof req?.amount === "number" && Number.isFinite(req.amount))
@@ -4590,6 +4606,9 @@ var FileAuditStore = class {
   }
 };
 
+// ../mcp/src/core.ts
+import { statSync } from "node:fs";
+
 // ../mcp/src/config.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { homedir } from "node:os";
@@ -4671,7 +4690,25 @@ function resolveMandateRules(cfg) {
 }
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.10" : "dev";
+var CLIENT_VERSION = true ? "0.1.12" : "dev";
+function bandOf(amount) {
+  if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
+  if (amount < 10) return "lt10";
+  if (amount < 100) return "10_99";
+  if (amount < 1e3) return "100_999";
+  if (amount < 1e4) return "1k_10k";
+  if (amount < 1e5) return "10k_100k";
+  return "gte100k";
+}
+function capRatioOf(amount, perTxMax) {
+  if (typeof amount !== "number" || typeof perTxMax !== "number") return void 0;
+  if (!Number.isFinite(amount) || !Number.isFinite(perTxMax) || perTxMax <= 0 || amount <= perTxMax) return void 0;
+  const r = amount / perTxMax;
+  if (r < 2) return "1_2x";
+  if (r < 5) return "2_5x";
+  if (r < 10) return "5_10x";
+  return "gt10x";
+}
 var currentShell = "mcp";
 function setTelemetryShell(shell) {
   currentShell = shell;
@@ -4704,9 +4741,17 @@ function resultOf(status, violatedRule) {
   if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
-function record(type, result) {
+function record(type, result, band, capRatio) {
   if (!telemetryEnabled()) return;
-  buffer.push({ type, ts: (/* @__PURE__ */ new Date()).toISOString(), client_version: CLIENT_VERSION, shell: currentShell, ...result ? { result } : {} });
+  buffer.push({
+    type,
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
+    client_version: CLIENT_VERSION,
+    shell: currentShell,
+    ...result ? { result } : {},
+    ...band ? { band } : {},
+    ...capRatio ? { cap_ratio: capRatio } : {}
+  });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
       void flush();
@@ -4716,7 +4761,7 @@ function record(type, result) {
 }
 var recordInstall = () => record("install");
 var recordAgentActive = () => record("agent_active");
-var recordDecision = (status, violatedRule) => record("decision", resultOf(status, violatedRule));
+var recordDecision = (status, violatedRule, amount, perTxMax) => record("decision", resultOf(status, violatedRule), bandOf(amount), capRatioOf(amount, perTxMax));
 var recordUpgradeIntent = () => record("upgrade_intent");
 async function flush() {
   if (flushTimer) {
@@ -4779,11 +4824,34 @@ function makeCore() {
     if (!url || !key) throw new Error("FIDACY_MODE=http requires FIDACY_API_URL and FIDACY_API_KEY");
     return new HttpFidacyCore(url, key, process.env.FIDACY_PUBLIC_KEY_PEM ?? "");
   }
-  return new DevFidacyCore({
-    mandate: buildMandate(),
+  let activeMandate = buildMandate();
+  const dev = new DevFidacyCore({
+    mandate: activeMandate,
     auditLogPath: auditLogPath(),
-    onDecision: (d) => recordDecision(d.status, d.violatedRule)
+    onDecision: (d) => recordDecision(d.status, d.violatedRule, d.request?.amount, activeMandate?.allow?.perTxMax)
   });
+  const mtimeOf = () => statSync(configPath(), { throwIfNoEntry: false })?.mtimeMs ?? 0;
+  let seenMtime = mtimeOf();
+  const maybeReload = () => {
+    const m = mtimeOf();
+    if (m !== seenMtime) {
+      seenMtime = m;
+      activeMandate = buildMandate();
+      dev.setMandate(activeMandate);
+    }
+  };
+  return {
+    getMandate: () => {
+      maybeReload();
+      return dev.getMandate();
+    },
+    decide: (req, subject) => {
+      maybeReload();
+      return dev.decide(req, subject);
+    },
+    getProof: (decisionId) => dev.getProof(decisionId),
+    publicKey: () => dev.publicKey()
+  };
 }
 
 // ../mcp/src/upgrade.ts
@@ -4799,7 +4867,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.1.10" : "dev";
+var CLIENT_VERSION2 = true ? "0.1.12" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -4962,7 +5030,7 @@ async function postOnce(fetchImpl, url, headers, payload, timeoutMs) {
       body: payload,
       signal: controller.signal
     });
-  } catch (err) {
+  } catch {
     const aborted = controller.signal.aborted;
     throw new AssessError({ type: aborted ? "timeout" : "network_error", status: 0 });
   } finally {
@@ -5118,7 +5186,7 @@ var index_default = defineToolPlugin({
       async execute(params, config) {
         const d = await boot().decide(params, subjectOf(config));
         const base = d.status === "ALLOW" ? `ALLOW (decision ${d.decisionId})${params.invoiceRef ? ` for invoice ${params.invoiceRef}` : ""}. To settle, call the executor with the SAME payee, amount, currency, and idempotencyKey, and set "grant" to EXACTLY this signed value:
-${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}. No grant issued, this payment cannot proceed. The denial itself is recorded in the tamper-evident, hash-chained audit: call get_audit_proof with decisionId ${d.decisionId} for the proof of what was blocked.`;
+${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}. No grant issued, this payment cannot proceed. The denial itself is recorded in the tamper-evident, hash-chained audit: call get_audit_proof with decisionId ${d.decisionId} for the proof of what was blocked.${d.violatedRule?.startsWith("payee_not_in_allowlist") ? ` If the user trusts this payee, add "${params.payee}" to mandate.payees in ~/.fidacy/config.json and retry: the firewall picks the change up on the next call, no restart needed.` : ""}`;
         const nudge = decisionNudge(d.status, d.violatedRule, "fidacy_upgrade");
         const message = nudge ? `${base} ${nudge}` : base;
         return { status: d.status, decisionId: d.decisionId, grant: d.grant, violatedRule: d.violatedRule, message };

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "name": "Fidacy \u2014 Payment Firewall",
   "description": "A signed, independently-verifiable verdict on every money-moving agent action. Blocks wrong/lookalike payee, over-cap, and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default.",
   "icon": "https://fidacy.com/logo.png",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "contracts": {
     "tools": [
       "request_payment",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",