@fidacy/openclaw-plugin 0.2.1 → 0.2.3

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.2.2
+
+README: a Security and privacy section answering the ClawHub audit point by
+point (telemetry and provisioning opt-outs, local state paths, what
+FIDACY_SIGNING_KEY_B64 is, no hardcoded secrets in the bundle). No code change.
+
 ## 0.2.1
 
 Manifest catch-up: openclaw.plugin.json version was stale (0.1.18) in the 0.2.0

package/README.md

@@ -70,6 +70,30 @@ the free key is set. Claim an anonymous install's history:
 
 Verify any verdict yourself: https://api.fidacy.com/.well-known/jwks.json
 
+## Security and privacy, point by point
+
+This is a payment-control plugin, so audit it like one. What it actually does:
+
+- **Network calls it makes:** anonymous usage telemetry to `api.fidacy.com/v1/telemetry`
+  (an install UUID plus event enums; never payee, amount, currency, or content) and a
+  background free-key provision to `/v1/provision`. Both are opt-out:
+  `FIDACY_DISABLE_TELEMETRY=1` and `FIDACY_DISABLE_PROVISION=1`. Neither is ever on
+  the decision path; payment gating works fully offline.
+- **Local state:** `~/.fidacy/config.json` (0600; anon id, tier, your mandate rules)
+  and `~/.fidacy/audit/audit.log` (the hash-chained decision log). Nothing else.
+- **`FIDACY_SIGNING_KEY_B64`:** an OPTIONAL env var the operator sets to pin a
+  stable local Ed25519 signing key for grants. If unset, a per-session key is
+  generated. The plugin reads it; it never writes or transmits it.
+- **API keys:** read from your plugin config (`engineApiKey`) or the
+  `FIDACY_ENGINE_API_KEY` env var, sent only to your configured engine URL
+  (default `api.fidacy.com`) as a bearer token. There are no hardcoded keys or
+  secrets in the published bundle; scanner hits on those lines are pattern matches
+  on the env/config reads above, and you can verify yourself: the bundle is
+  unminified on npm and mirrored at github.com/lucaslubi/fidacy-mcp (plugin-native/).
+- **Verify our signatures, not our word:** every verdict checks against the public
+  JWKS at `api.fidacy.com/.well-known/jwks.json` with the open-source
+  [`@fidacy/verify`](https://www.npmjs.com/package/@fidacy/verify).
+
 ## Prefer MCP instead?
 
 If you'd rather run Fidacy as an MCP server (out-of-process), use

package/dist/index.js

@@ -4690,7 +4690,7 @@ function resolveMandateRules(cfg) {
 }
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.2.1" : "dev";
+var CLIENT_VERSION = true ? "0.2.3" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -4867,7 +4867,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.2.1" : "dev";
+var CLIENT_VERSION2 = true ? "0.2.3" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -4919,16 +4919,21 @@ function nudgeOnce(key) {
   }
   return true;
 }
+var sessionDecisions = 0;
+function sessionDecisionCount() {
+  return sessionDecisions;
+}
 function bumpDecisionCount() {
+  sessionDecisions += 1;
   const cfg = readConfig();
-  if (!cfg) return 0;
+  if (!cfg) return sessionDecisions;
   const n = (cfg.decisions_count ?? 0) + 1;
   cfg.decisions_count = n;
   try {
     writeConfig(cfg);
   } catch {
   }
-  return n;
+  return Math.max(n, sessionDecisions);
 }
 function decisionNudge(status, violatedRule, upgradeToolName) {
   const count = bumpDecisionCount();
@@ -4962,7 +4967,7 @@ function hasEngineKey(keyOverride) {
   return Boolean((keyOverride ?? process.env.FIDACY_ENGINE_API_KEY ?? "").trim());
 }
 function decisionsUsed() {
-  return readConfig()?.decisions_count ?? 0;
+  return Math.max(readConfig()?.decisions_count ?? 0, sessionDecisionCount());
 }
 function remainingFree() {
   return Math.max(0, FREE_DECISIONS - decisionsUsed());
@@ -4981,7 +4986,7 @@ function activationGate(keyOverride) {
 }
 function trialCountdownLine(keyOverride) {
   if (hasEngineKey(keyOverride)) return null;
-  if (!readConfig()) return null;
+  if (!readConfig() && sessionDecisionCount() === 0) return null;
   const left = remainingFree();
   if (left > 5) return null;
   const url = claimDestination();

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "name": "Fidacy — Payment Firewall",
   "description": "A signed, independently-verifiable verdict on every money-moving agent action. Blocks wrong/lookalike payee, over-cap, and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default.",
   "icon": "https://fidacy.com/logo.png",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "contracts": {
     "tools": [
       "request_payment",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",
@@ -46,20 +46,20 @@
       "npmSpec": "@fidacy/openclaw-plugin"
     }
   },
+  "scripts": {
+    "build": "node scripts/bundle.mjs",
+    "typecheck": "tsc --noEmit"
+  },
   "engines": {
     "node": ">=20"
   },
   "devDependencies": {
+    "@fidacy/firewall": "workspace:*",
+    "@fidacy/mcp": "workspace:*",
     "@types/node": "^22.10.0",
     "esbuild": "^0.24.0",
     "openclaw": "2026.6.11",
     "typebox": "1.1.39",
-    "typescript": "^5.6.3",
-    "@fidacy/firewall": "0.1.1",
-    "@fidacy/mcp": "0.2.0"
-  },
-  "scripts": {
-    "build": "node scripts/bundle.mjs",
-    "typecheck": "tsc --noEmit"
+    "typescript": "^5.6.3"
   }
-}
+}