@fidacy/openclaw-plugin 0.1.15 → 0.1.16

package/dist/index.js

@@ -4690,7 +4690,7 @@ function resolveMandateRules(cfg) {
 }
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.15" : "dev";
+var CLIENT_VERSION = true ? "0.1.16" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -4867,7 +4867,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.1.15" : "dev";
+var CLIENT_VERSION2 = true ? "0.1.16" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -4933,7 +4933,7 @@ function bumpDecisionCount() {
 function decisionNudge(status, violatedRule, upgradeToolName) {
   const count = bumpDecisionCount();
   const url = claimUrl();
-  const claimPath = url ? `open ${url} to see everything blocked on this install and claim it (free account, this history migrates)` : `call the ${upgradeToolName} tool (free account, this history migrates)`;
+  const claimPath = url ? `free account + free API key at ${url} (this install's history migrates)` : `call the ${upgradeToolName} tool (free account + free API key, this history migrates)`;
   if (status === "DENY" && violatedRule?.startsWith("duplicate_invoice") && nudgeOnce("bec_catch")) {
     return `That was a duplicate-invoice (BEC) catch, the #1 payment fraud. For your operator: ${claimPath}. On a hosted account every block like this is server-signed and anchored to Bitcoin: court-grade evidence.`;
   }
@@ -4948,6 +4948,10 @@ function decisionNudge(status, violatedRule, upgradeToolName) {
   }
   return null;
 }
+function noKeyCta() {
+  const url = claimUrl();
+  return url ? `free in ~1 min for your operator: open ${url} (this install's history migrates), or set FIDACY_ENGINE_API_KEY if you already have one` : `free in ~1 min: call the upgrade tool (your history migrates), or set FIDACY_ENGINE_API_KEY if you already have one`;
+}
 
 // ../mcp/src/assess.ts
 var AssessError = class extends Error {
@@ -5211,6 +5215,15 @@ ${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}
       async execute(_params, config) {
         const c = boot();
         const mandate = await c.getMandate(subjectOf(config));
+        const hasKey = (config.engineApiKey ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim().length > 0;
+        const claim = hasKey ? null : claimUrl();
+        if (claim) {
+          return {
+            mandate,
+            fidacyPublicKey: c.publicKey(),
+            message: `For your operator: free account + free API key, and this install's history migrates: ${claim}`
+          };
+        }
         return { mandate, fidacyPublicKey: c.publicKey() };
       }
     }),
@@ -5253,7 +5266,7 @@ ${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}
         const apiKey = (config.engineApiKey ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
         if (!apiKey) {
           throw new Error(
-            "assess_action requires an engine API key (an fky_live_/fky_test_ key with assess:write). Set plugins.entries.fidacy.config.engineApiKey or FIDACY_ENGINE_API_KEY to enable signed verdicts."
+            `assess_action needs an engine key \u2014 ${noKeyCta()}. (Or set plugins.entries.fidacy.config.engineApiKey.)`
           );
         }
         try {
@@ -5291,7 +5304,7 @@ ${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}
         const apiKey = (config.engineApiKey ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
         if (!apiKey) {
           throw new Error(
-            "anchor_artifact requires an engine API key (an fky_live_/fky_test_ key with assess:write). Set plugins.entries.fidacy.config.engineApiKey or FIDACY_ENGINE_API_KEY."
+            `anchor_artifact needs an engine key \u2014 ${noKeyCta()}. (Or set plugins.entries.fidacy.config.engineApiKey.)`
           );
         }
         if (!params.path && !params.sha256) {
@@ -5335,7 +5348,7 @@ ${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}
         const apiKey = (config.engineApiKey ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim();
         if (!apiKey) {
           throw new Error(
-            "check_artifact requires an engine API key. Set plugins.entries.fidacy.config.engineApiKey or FIDACY_ENGINE_API_KEY."
+            `check_artifact needs an engine key \u2014 ${noKeyCta()}. (Or set plugins.entries.fidacy.config.engineApiKey.)`
           );
         }
         if (!params.path && !params.sha256) {

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "name": "Fidacy \u2014 Payment Firewall",
   "description": "A signed, independently-verifiable verdict on every money-moving agent action. Blocks wrong/lookalike payee, over-cap, and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default.",
   "icon": "https://fidacy.com/logo.png",
-  "version": "0.1.15",
+  "version": "0.1.16",
   "contracts": {
     "tools": [
       "request_payment",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.1.15",
+  "version": "0.1.16",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",