@fidacy/openclaw-plugin 0.1.2 → 0.1.3

package/CHANGELOG.md

@@ -25,3 +25,8 @@ First release. Fidacy payment firewall as a native OpenClaw plugin:
   ClawHub-native adoption is attributable (was indistinguishable from MCP).
 - DENY responses now point to the `fidacy_upgrade` tool.
 - Inherits the self-documenting first-run config + friendlier boot line.
+
+## 0.1.3 — 2026-07-02
+
+- Same upgrade micro-trigger system as @fidacy/mcp 0.1.11 (once-per-install,
+  value-proven moments only), routed through the fidacy_upgrade tool.

package/dist/index.js

@@ -4564,7 +4564,12 @@ function readConfig() {
       anon_id: raw.anon_id,
       tier: raw.tier === "paid" ? "paid" : "free",
       api_key: typeof raw.api_key === "string" ? raw.api_key : null,
-      mandate: raw.mandate
+      mandate: raw.mandate,
+      // Install-state passthrough: dropping these on a read→write cycle would
+      // reset every once-per-install nudge into an every-time nag.
+      created_at: typeof raw.created_at === "string" ? raw.created_at : void 0,
+      nudges: raw.nudges && typeof raw.nudges === "object" ? raw.nudges : void 0,
+      decisions_count: typeof raw.decisions_count === "number" ? raw.decisions_count : void 0
     };
   } catch {
     return null;
@@ -4582,7 +4587,8 @@ function ensureState() {
     anon_id: randomUUID2(),
     tier: "free",
     api_key: null,
-    mandate: { payees: [], categories: ["*"], currency: "USD", perTxMax: 2500, maxTotal: 1e4 }
+    mandate: { payees: [], categories: ["*"], currency: "USD", perTxMax: 2500, maxTotal: 1e4 },
+    created_at: (/* @__PURE__ */ new Date()).toISOString()
   };
   try {
     writeConfig(config);
@@ -4604,7 +4610,7 @@ function resolveMandateRules(cfg) {
 }
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.2" : "dev";
+var CLIENT_VERSION = true ? "0.1.3" : "dev";
 var currentShell = "mcp";
 function setTelemetryShell(shell) {
   currentShell = shell;
@@ -4727,7 +4733,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.1.2" : "dev";
+var CLIENT_VERSION2 = true ? "0.1.3" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -4762,6 +4768,44 @@ async function autoProvision() {
   }
 }
 
+// ../mcp/src/nudges.ts
+function nudgeOnce(key) {
+  const cfg = readConfig();
+  if (!cfg) return false;
+  if (cfg.nudges?.[key]) return false;
+  cfg.nudges = { ...cfg.nudges ?? {}, [key]: true };
+  try {
+    writeConfig(cfg);
+  } catch {
+    return false;
+  }
+  return true;
+}
+function bumpDecisionCount() {
+  const cfg = readConfig();
+  if (!cfg) return 0;
+  const n = (cfg.decisions_count ?? 0) + 1;
+  cfg.decisions_count = n;
+  try {
+    writeConfig(cfg);
+  } catch {
+  }
+  return n;
+}
+function decisionNudge(status, violatedRule, upgradeToolName) {
+  const count = bumpDecisionCount();
+  if (status === "DENY" && violatedRule?.startsWith("duplicate_invoice") && nudgeOnce("bec_catch")) {
+    return `That was a duplicate-invoice (BEC) catch \u2014 the #1 payment fraud. On a free account every block like this is server-signed and anchored to Bitcoin: court-grade evidence. Call the ${upgradeToolName} tool to start.`;
+  }
+  if (status === "DENY" && nudgeOnce("first_deny")) {
+    return `Fidacy just blocked this for you \u2014 for server-signed, anchored proof of every block (free account, local history migrates), call the ${upgradeToolName} tool.`;
+  }
+  if (count === 10 && nudgeOnce("milestone_10")) {
+    return `That's 10 actions gated on this install. For a signed, Bitcoin-anchored history of all of them (free account), call the ${upgradeToolName} tool.`;
+  }
+  return null;
+}
+
 // ../mcp/src/assess.ts
 var AssessError = class extends Error {
   type;
@@ -4942,8 +4986,10 @@ var index_default = defineToolPlugin({
       }),
       async execute(params, config) {
         const d = await boot().decide(params, subjectOf(config));
-        const message = d.status === "ALLOW" ? `ALLOW (decision ${d.decisionId})${params.invoiceRef ? ` for invoice ${params.invoiceRef}` : ""}. To settle, call the executor with the SAME payee, amount, currency, and idempotencyKey, and set "grant" to EXACTLY this signed value:
-${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}. No grant issued, this payment cannot proceed. The denial itself is recorded in the tamper-evident, hash-chained audit: call get_audit_proof with decisionId ${d.decisionId} for the proof of what was blocked. Fidacy just blocked this for you \u2014 for server-signed, anchored proof of every block (free account, local history migrates), call the fidacy_upgrade tool.`;
+        const base = d.status === "ALLOW" ? `ALLOW (decision ${d.decisionId})${params.invoiceRef ? ` for invoice ${params.invoiceRef}` : ""}. To settle, call the executor with the SAME payee, amount, currency, and idempotencyKey, and set "grant" to EXACTLY this signed value:
+${d.grant}` : `DENY (decision ${d.decisionId}). Rule violated: ${d.violatedRule}. No grant issued, this payment cannot proceed. The denial itself is recorded in the tamper-evident, hash-chained audit: call get_audit_proof with decisionId ${d.decisionId} for the proof of what was blocked.`;
+        const nudge = decisionNudge(d.status, d.violatedRule, "fidacy_upgrade");
+        const message = nudge ? `${base} ${nudge}` : base;
         return { status: d.status, decisionId: d.decisionId, grant: d.grant, violatedRule: d.violatedRule, message };
       }
     }),

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "fidacy",
   "name": "Fidacy \u2014 Payment Firewall",
   "description": "A signed, independently-verifiable verdict on every money-moving agent action. Blocks wrong/lookalike payee, over-cap, and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default.",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "contracts": {
     "tools": [
       "request_payment",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",
@@ -56,7 +56,7 @@
     "typebox": "1.1.39",
     "typescript": "^5.6.3",
     "@fidacy/firewall": "0.1.0",
-    "@fidacy/mcp": "0.1.10"
+    "@fidacy/mcp": "0.1.11"
   },
   "scripts": {
     "build": "node scripts/bundle.mjs",