@fidacy/openclaw-plugin 0.1.18 → 0.2.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.2.1
+
+Manifest catch-up: openclaw.plugin.json version was stale (0.1.18) in the 0.2.0
+artifact, and the engineApiKey help now points to the free key and explains it
+keeps the firewall active past the 20-decision anonymous trial. No code change.
+
+## 0.2.0
+
+Activation gate (same engine as @fidacy/mcp 0.2.0): anonymous installs get 20
+free firewall decisions, then request_payment fails closed with DENY
+(activation_required) until engineApiKey (plugin config) or
+FIDACY_ENGINE_API_KEY is set — free key at fidacy.com/claim, history migrates.
+Countdown line on the last 5 free decisions. Keyed installs unaffected.
+
 ## 0.1.14 — 2026-07-06
 
 Founder note in the README for the week-one install base: claim your install's

package/README.md

@@ -18,10 +18,10 @@ Same engine as [`@fidacy/mcp`](https://www.npmjs.com/package/@fidacy/mcp) — on
 engine, many shells. Local-first, deny-by-default, non-custodial: Fidacy authorizes,
 it never holds funds.
 
-## To everyone who installed Fidacy this week
+## To everyone who installed Fidacy
 
-You are one of ~135 installs that made 1,784 real firewall decisions in week one,
-76% of them blocks. Thank you. Two things worth a minute of your time:
+You are one of ~170 installs that have made 2,100+ real firewall decisions to
+date, over 99% of them blocks. Thank you. Two things worth a minute of your time:
 
 1. **See and claim what YOUR install blocked.** Your install carries a private,
    anonymous id on your machine (we never learn who you are unless you choose to).
@@ -35,14 +35,18 @@ You are one of ~135 installs that made 1,784 real firewall decisions in week one
 
 Lucas de Lima, founder
 
-## Install
+## Install (2 minutes)
+
+**Step 1 — get your free API key** at
+[app.fidacy.com/signup](https://app.fidacy.com/signup) (free tier, no card).
+
+**Step 2 — install and set the key:**
 
 ```bash
 openclaw plugins install @fidacy/openclaw-plugin
 ```
 
-Zero config to start (deny-unknown-payee + per-tx cap). Add trusted payees/caps in
-`~/.fidacy/config.json`. Optional plugin config (`plugins.entries.fidacy.config`):
+Plugin config (`plugins.entries.fidacy.config`):
 
 ```json
 {
@@ -52,8 +56,17 @@ Zero config to start (deny-unknown-payee + per-tx cap). Add trusted payees/caps
 }
 ```
 
-`engineApiKey` enables signed verdicts (`assess_action`). Environment variables
-(`FIDACY_ENGINE_API_KEY`, `FIDACY_ENGINE_URL`, `FIDACY_SUBJECT`) are the fallback.
+`engineApiKey` enables signed verdicts (`assess_action`) and keeps the firewall
+active past the anonymous trial. Environment variables (`FIDACY_ENGINE_API_KEY`,
+`FIDACY_ENGINE_URL`, `FIDACY_SUBJECT`) are the fallback. Decisions run locally,
+deny-by-default (deny-unknown-payee + per-tx cap); add trusted payees/caps in
+`~/.fidacy/config.json`.
+
+**No key yet?** The install works anonymously for its first **20 firewall
+decisions**, then fails closed (payments denied with `activation_required`) until
+the free key is set. Claim an anonymous install's history:
+`grep anon_id ~/.fidacy/config.json`, then open
+`https://fidacy.com/claim?ref=<that id>`.
 
 Verify any verdict yourself: https://api.fidacy.com/.well-known/jwks.json
 

package/dist/index.js

@@ -4690,7 +4690,7 @@ function resolveMandateRules(cfg) {
 }
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.18" : "dev";
+var CLIENT_VERSION = true ? "0.2.1" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -4867,7 +4867,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.1.18" : "dev";
+var CLIENT_VERSION2 = true ? "0.2.1" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -4956,6 +4956,41 @@ function noKeyCta() {
   return url ? `free in ~1 min for your operator: open ${url} (this install's history migrates), or set FIDACY_ENGINE_API_KEY if you already have one` : `free in ~1 min: call the upgrade tool (your history migrates), or set FIDACY_ENGINE_API_KEY if you already have one`;
 }
 
+// ../mcp/src/activation.ts
+var FREE_DECISIONS = 20;
+function hasEngineKey(keyOverride) {
+  return Boolean((keyOverride ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim());
+}
+function decisionsUsed() {
+  return readConfig()?.decisions_count ?? 0;
+}
+function remainingFree() {
+  return Math.max(0, FREE_DECISIONS - decisionsUsed());
+}
+function claimDestination() {
+  return claimUrl() ?? "https://fidacy.com/claim";
+}
+function activationGate(keyOverride) {
+  if (hasEngineKey(keyOverride)) return null;
+  if (decisionsUsed() < FREE_DECISIONS) return null;
+  recordUpgradeIntent();
+  const url = claimDestination();
+  return {
+    message: `DENY (activation_required). This anonymous install has used its ${FREE_DECISIONS} free firewall decisions, so the firewall now fails closed: no payment can proceed until it is activated. Activation is a free API key, about 2 minutes, no card. Relay this to your operator word for word: "Fidacy paused this agent's payments until you activate it. Get your free key at ${url} (this install's block history migrates to your account), then set FIDACY_ENGINE_API_KEY=<the key> where the agent runs and retry."`
+  };
+}
+function trialCountdownLine(keyOverride) {
+  if (hasEngineKey(keyOverride)) return null;
+  if (!readConfig()) return null;
+  const left = remainingFree();
+  if (left > 5) return null;
+  const url = claimDestination();
+  if (left === 0) {
+    return ` [fidacy] That was this install's LAST free anonymous decision \u2014 the next payment will be denied until it is activated. For your operator: free API key at ${url} (history migrates), then set FIDACY_ENGINE_API_KEY.`;
+  }
+  return ` [fidacy] ${left} free anonymous decision${left === 1 ? "" : "s"} left on this install before the firewall requires activation. For your operator: free API key at ${url} (history migrates), then set FIDACY_ENGINE_API_KEY.`;
+}
+
 // ../mcp/src/assess.ts
 var AssessError = class extends Error {
   type;
@@ -5206,11 +5241,16 @@ var index_default = defineToolPlugin({
           )
         }),
         async execute(params, config) {
+          const gate = activationGate(config.engineApiKey);
+          if (gate) {
+            return { status: "DENY", decisionId: "activation_required", violatedRule: "activation_required", message: gate.message };
+          }
           const d = await boot().decide(params, subjectOf(config));
           const base = d.status === "ALLOW" ? `ALLOW (decision ${d.decisionId})${params.invoiceRef ? ` for invoice ${params.invoiceRef}` : ""}. To settle, call the executor with the SAME payee, amount, currency, and idempotencyKey, and set "grant" to EXACTLY this signed value:
 ${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}. No grant issued, this payment cannot proceed. The denial itself is recorded in the tamper-evident, hash-chained audit: call get_audit_proof with decisionId ${d.decisionId} for the proof of what was blocked.${d.violatedRule?.startsWith("payee_not_in_allowlist") ? ` If the user trusts this payee, add "${params.payee}" to mandate.payees in ~/.fidacy/config.json and retry: the firewall picks the change up on the next call, no restart needed.` : ""}`;
           const nudge = decisionNudge(d.status, d.violatedRule, "fidacy_upgrade");
-          const message = nudge ? `${base} ${nudge}` : base;
+          const countdown = trialCountdownLine(config.engineApiKey);
+          const message = [base, nudge, countdown].filter(Boolean).join(" ");
           return { status: d.status, decisionId: d.decisionId, grant: d.grant, violatedRule: d.violatedRule, message };
         }
       }),

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "name": "Fidacy — Payment Firewall",
   "description": "A signed, independently-verifiable verdict on every money-moving agent action. Blocks wrong/lookalike payee, over-cap, and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default.",
   "icon": "https://fidacy.com/logo.png",
-  "version": "0.1.18",
+  "version": "0.2.1",
   "contracts": {
     "tools": [
       "request_payment",
@@ -38,7 +38,7 @@
       "label": "Engine API key",
       "placeholder": "fky_live_...",
       "sensitive": true,
-      "help": "Optional. Enables signed trust verdicts (assess_action) from the live Fidacy engine."
+      "help": "Free key at app.fidacy.com/signup. Enables signed trust verdicts (assess_action) and keeps the firewall active past the 20-decision anonymous trial."
     },
     "engineUrl": {
       "label": "Engine URL",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.1.18",
+  "version": "0.2.1",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",
@@ -56,7 +56,7 @@
     "typebox": "1.1.39",
     "typescript": "^5.6.3",
     "@fidacy/firewall": "0.1.1",
-    "@fidacy/mcp": "0.1.26"
+    "@fidacy/mcp": "0.2.0"
   },
   "scripts": {
     "build": "node scripts/bundle.mjs",