@fidacy/openclaw-plugin 0.1.6 → 0.1.8

package/CHANGELOG.md

@@ -30,3 +30,24 @@ First release. Fidacy payment firewall as a native OpenClaw plugin:
 
 - Same upgrade micro-trigger system as @fidacy/mcp 0.1.11 (once-per-install,
   value-proven moments only), routed through the fidacy_upgrade tool.
+
+## 0.1.4 — 2026-07-02
+
+- Inherits @fidacy/mcp 0.1.12's restart-durable firewall state: the
+  duplicate-invoice (BEC) guard and the spend cap now rehydrate from the local
+  audit log at boot, so restarting the agent no longer re-opens a paid invoice
+  or resets the running total. Torn-tail audit logs (crash mid-append) are
+  salvaged instead of quarantined.
+
+## 0.1.5 — 2026-07-02
+
+- Version sync only: `openclaw.plugin.json` had shipped 0.1.4 with a stale
+  manifest version (Plugin Inspector `package-manifest-version-drift` warning).
+  No code changes over 0.1.4.
+
+## 0.1.7 — 2026-07-03
+
+- RESTORES the restart-durable firewall state from 0.1.4/0.1.5 (the 0.1.6 icon
+  release was built against a stale @fidacy/firewall dist and silently dropped
+  the rehydration — caught by the restart behavioral test, now part of the
+  release ritual). Keeps the 0.1.6 ClawHub card icon.

package/dist/index.js

@@ -4259,66 +4259,9 @@ function sha256(input) {
 
 // ../firewall/dist/audit-store.js
 import fs from "node:fs";
-var FileAuditStore = class {
-  path;
-  chain = [];
-  constructor(path) {
-    this.path = path;
-    this.load();
-  }
-  load() {
-    if (!fs.existsSync(this.path))
-      return;
-    try {
-      const raw = fs.readFileSync(this.path, "utf8");
-      const parsed = [];
-      for (const line of raw.split("\n")) {
-        if (!line.trim())
-          continue;
-        parsed.push(JSON.parse(line));
-      }
-      this.chain = parsed;
-      if (!this.intact())
-        throw new Error("audit chain integrity broken");
-    } catch (err) {
-      this.chain = [];
-      try {
-        const quarantine = `${this.path}.corrupt-${Date.now()}`;
-        fs.renameSync(this.path, quarantine);
-        console.error(`[fidacy] audit log at ${this.path} is unreadable/tampered (${err.message}); quarantined to ${quarantine}, starting a fresh chain.`);
-      } catch {
-        console.error(`[fidacy] audit log at ${this.path} is unreadable/tampered and could not be quarantined; starting a fresh in-memory chain.`);
-      }
-    }
-  }
-  head() {
-    return this.chain.length ? this.chain[this.chain.length - 1].hash : "GENESIS";
-  }
-  append(decision) {
-    const prevHash = this.head();
-    const seq = this.chain.length;
-    const ts = decision.ts;
-    const digest = sha256(stableStringify({ decisionId: decision.decisionId, status: decision.status, request: decision.request, violatedRule: decision.violatedRule ?? null }));
-    const hash = sha256(`${prevHash}|${digest}|${seq}|${ts}`);
-    const record2 = { seq, decisionId: decision.decisionId, status: decision.status, subject: decision.subject, digest, prevHash, hash, ts };
-    fs.appendFileSync(this.path, JSON.stringify(record2) + "\n");
-    this.chain.push(record2);
-    return record2;
-  }
-  find(decisionId) {
-    return this.chain.find((r) => r.decisionId === decisionId);
-  }
-  intact() {
-    let prev = "GENESIS";
-    for (const r of this.chain) {
-      const expected = sha256(`${prev}|${r.digest}|${r.seq}|${r.ts}`);
-      if (expected !== r.hash || r.prevHash !== prev)
-        return false;
-      prev = r.hash;
-    }
-    return true;
-  }
-};
+
+// ../firewall/dist/core.js
+import { randomUUID } from "node:crypto";
 
 // ../firewall/dist/evaluate.js
 function fold(s) {
@@ -4395,7 +4338,6 @@ function evaluate(mandate, req, spentSoFar) {
 }
 
 // ../firewall/dist/core.js
-import { randomUUID } from "node:crypto";
 function canonInvoice(ref) {
   if (typeof ref !== "string")
     return "";
@@ -4443,6 +4385,35 @@ var DevFidacyCore = class {
     this.mandate = opts.mandate;
     this.store = new FileAuditStore(opts.auditLogPath ?? "./fidacy-audit.log");
     this.onDecision = opts.onDecision;
+    this.rehydrate();
+  }
+  /**
+   * Rebuild the in-memory decision state from the persisted audit log, so a process
+   * restart cannot re-open a claimed invoice (BEC dedup) or reset the maxTotal
+   * counter. One O(records) pass at boot over the already-loaded chain:
+   *   - claimedInvoices: every ALLOW that carried an invoiceRef, regardless of age —
+   *     a paid invoice stays paid.
+   *   - spent: ALLOW amounts whose timestamp falls inside the CURRENT mandate window
+   *     and whose currency matches the mandate (the cap is defined per window/currency).
+   * Records from older versions lack the rehydration fields and are skipped.
+   */
+  rehydrate() {
+    const notBefore = Date.parse(this.mandate.window.notBefore);
+    const notAfter = Date.parse(this.mandate.window.notAfter);
+    for (const r of this.store.records()) {
+      if (r.status !== "ALLOW")
+        continue;
+      if (r.invoiceRef)
+        this.claimedInvoices.add(`${r.subject}|${r.invoiceRef}`);
+      if (typeof r.amount !== "number" || !Number.isFinite(r.amount))
+        continue;
+      if (r.currency !== this.mandate.allow.currency)
+        continue;
+      const t = Date.parse(r.ts);
+      if (!Number.isFinite(t) || t < notBefore || t > notAfter)
+        continue;
+      this.spent += r.amount;
+    }
   }
   async getMandate() {
     return this.mandate;
@@ -4529,6 +4500,96 @@ var HttpFidacyCore = class {
   }
 };
 
+// ../firewall/dist/audit-store.js
+var FileAuditStore = class {
+  path;
+  chain = [];
+  constructor(path) {
+    this.path = path;
+    this.load();
+  }
+  load() {
+    if (!fs.existsSync(this.path))
+      return;
+    try {
+      const raw = fs.readFileSync(this.path, "utf8");
+      const lines = raw.split("\n");
+      const parsed = [];
+      let torn = false;
+      for (let i = 0; i < lines.length; i++) {
+        if (!lines[i].trim())
+          continue;
+        try {
+          parsed.push(JSON.parse(lines[i]));
+        } catch {
+          if (lines.slice(i + 1).some((l) => l.trim()))
+            throw new Error(`unparseable record at line ${i + 1}`);
+          torn = true;
+          break;
+        }
+      }
+      this.chain = parsed;
+      if (!this.intact())
+        throw new Error("audit chain integrity broken");
+      if (torn) {
+        const clean = parsed.map((r) => JSON.stringify(r)).join("\n") + (parsed.length ? "\n" : "");
+        fs.writeFileSync(this.path, clean);
+        console.error(`[fidacy] audit log at ${this.path} had a torn trailing line (crash during append?); salvaged ${parsed.length} intact records and truncated the tail.`);
+      }
+    } catch (err) {
+      this.chain = [];
+      try {
+        const quarantine = `${this.path}.corrupt-${Date.now()}`;
+        fs.renameSync(this.path, quarantine);
+        console.error(`[fidacy] audit log at ${this.path} is unreadable/tampered (${err.message}); quarantined to ${quarantine}, starting a fresh chain.`);
+      } catch {
+        console.error(`[fidacy] audit log at ${this.path} is unreadable/tampered and could not be quarantined; starting a fresh in-memory chain.`);
+      }
+    }
+  }
+  head() {
+    return this.chain.length ? this.chain[this.chain.length - 1].hash : "GENESIS";
+  }
+  append(decision) {
+    const prevHash = this.head();
+    const seq = this.chain.length;
+    const ts = decision.ts;
+    const digest = sha256(stableStringify({ decisionId: decision.decisionId, status: decision.status, request: decision.request, violatedRule: decision.violatedRule ?? null }));
+    const hash = sha256(`${prevHash}|${digest}|${seq}|${ts}`);
+    const record2 = { seq, decisionId: decision.decisionId, status: decision.status, subject: decision.subject, digest, prevHash, hash, ts };
+    if (decision.status === "ALLOW") {
+      const req = decision.request;
+      if (typeof req?.amount === "number" && Number.isFinite(req.amount))
+        record2.amount = req.amount;
+      if (typeof req?.currency === "string")
+        record2.currency = req.currency;
+      const invoice = canonInvoice(req?.invoiceRef);
+      if (invoice)
+        record2.invoiceRef = invoice;
+    }
+    fs.appendFileSync(this.path, JSON.stringify(record2) + "\n");
+    this.chain.push(record2);
+    return record2;
+  }
+  find(decisionId) {
+    return this.chain.find((r) => r.decisionId === decisionId);
+  }
+  /** The full loaded chain, oldest first. Read-only; used to rehydrate core state at boot. */
+  records() {
+    return this.chain;
+  }
+  intact() {
+    let prev = "GENESIS";
+    for (const r of this.chain) {
+      const expected = sha256(`${prev}|${r.digest}|${r.seq}|${r.ts}`);
+      if (expected !== r.hash || r.prevHash !== prev)
+        return false;
+      prev = r.hash;
+    }
+    return true;
+  }
+};
+
 // ../mcp/src/config.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { homedir } from "node:os";
@@ -4610,7 +4671,7 @@ function resolveMandateRules(cfg) {
 }
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.1.6" : "dev";
+var CLIENT_VERSION = true ? "0.1.8" : "dev";
 var currentShell = "mcp";
 function setTelemetryShell(shell) {
   currentShell = shell;
@@ -4634,8 +4695,13 @@ var flushTimer = null;
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
-  if (r.startsWith("per_tx_cap") || r.startsWith("total_cap")) return "deny_cap";
+  if (r.startsWith("payee_lookalike")) return "deny_lookalike";
   if (r.startsWith("payee_not_in_allowlist")) return "deny_payee";
+  if (r.startsWith("duplicate_invoice")) return "deny_duplicate";
+  if (r.startsWith("per_tx_cap") || r.startsWith("total_cap")) return "deny_cap";
+  if (r.startsWith("mandate_revoked") || r.startsWith("before_mandate") || r.startsWith("after_mandate"))
+    return "deny_window";
+  if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
 function record(type, result) {
@@ -4733,7 +4799,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.1.6" : "dev";
+var CLIENT_VERSION2 = true ? "0.1.8" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "name": "Fidacy \u2014 Payment Firewall",
   "description": "A signed, independently-verifiable verdict on every money-moving agent action. Blocks wrong/lookalike payee, over-cap, and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default.",
   "icon": "https://fidacy.com/logo.png",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "contracts": {
     "tools": [
       "request_payment",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",
@@ -56,7 +56,7 @@
     "typebox": "1.1.39",
     "typescript": "^5.6.3",
     "@fidacy/firewall": "0.1.0",
-    "@fidacy/mcp": "0.1.11"
+    "@fidacy/mcp": "0.1.14"
   },
   "scripts": {
     "build": "node scripts/bundle.mjs",