@fidacy/openclaw-plugin 0.2.6 → 0.2.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +18 -0
- package/dist/index.js +2 -2
- package/package.json +10 -9
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,23 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 0.2.7
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- 1a3f504: Name the publisher in package metadata, and release through CI so the artifact
|
|
8
|
+
carries Sigstore provenance.
|
|
9
|
+
|
|
10
|
+
The `author` field was missing, which is why trust registries listed the packages
|
|
11
|
+
as authored by "Unknown". More importantly, every release so far went out as a
|
|
12
|
+
manual `npm publish` from a laptop, so no `@fidacy/*` package carried a
|
|
13
|
+
provenance attestation. Provenance is an OIDC statement from a CI runner about
|
|
14
|
+
which workflow built the artifact, so a laptop cannot produce one regardless of
|
|
15
|
+
flags. The Release workflow was already configured for it and simply had never
|
|
16
|
+
been used.
|
|
17
|
+
|
|
18
|
+
For a project whose entire claim is independently verifiable evidence, shipping
|
|
19
|
+
without supply-chain attestation was the wrong asymmetry.
|
|
20
|
+
|
|
3
21
|
## 0.2.2
|
|
4
22
|
|
|
5
23
|
README: a Security and privacy section answering the ClawHub audit point by
|
package/dist/index.js
CHANGED
|
@@ -4709,7 +4709,7 @@ function resolveMandateRules(cfg) {
|
|
|
4709
4709
|
}
|
|
4710
4710
|
|
|
4711
4711
|
// ../mcp/src/telemetry.ts
|
|
4712
|
-
var CLIENT_VERSION = true ? "0.2.
|
|
4712
|
+
var CLIENT_VERSION = true ? "0.2.7" : "dev";
|
|
4713
4713
|
function bandOf(amount) {
|
|
4714
4714
|
if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
|
|
4715
4715
|
if (amount < 10) return "lt10";
|
|
@@ -4887,7 +4887,7 @@ function requestUpgrade() {
|
|
|
4887
4887
|
}
|
|
4888
4888
|
|
|
4889
4889
|
// ../mcp/src/provision.ts
|
|
4890
|
-
var CLIENT_VERSION2 = true ? "0.2.
|
|
4890
|
+
var CLIENT_VERSION2 = true ? "0.2.7" : "dev";
|
|
4891
4891
|
function provisionEnabled() {
|
|
4892
4892
|
const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
|
|
4893
4893
|
return !(v === "1" || v === "true" || v === "yes");
|
package/package.json
CHANGED
|
@@ -1,8 +1,9 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@fidacy/openclaw-plugin",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.7",
|
|
4
4
|
"description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
|
+
"author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",
|
|
6
7
|
"homepage": "https://fidacy.com",
|
|
7
8
|
"repository": {
|
|
8
9
|
"type": "git",
|
|
@@ -46,20 +47,20 @@
|
|
|
46
47
|
"npmSpec": "@fidacy/openclaw-plugin"
|
|
47
48
|
}
|
|
48
49
|
},
|
|
49
|
-
"scripts": {
|
|
50
|
-
"build": "node scripts/bundle.mjs",
|
|
51
|
-
"typecheck": "tsc --noEmit"
|
|
52
|
-
},
|
|
53
50
|
"engines": {
|
|
54
51
|
"node": ">=20"
|
|
55
52
|
},
|
|
56
53
|
"devDependencies": {
|
|
57
|
-
"@fidacy/firewall": "workspace:*",
|
|
58
|
-
"@fidacy/mcp": "workspace:*",
|
|
59
54
|
"@types/node": "^22.10.0",
|
|
60
55
|
"esbuild": "^0.24.0",
|
|
61
56
|
"openclaw": "2026.6.11",
|
|
62
57
|
"typebox": "1.1.39",
|
|
63
|
-
"typescript": "^5.6.3"
|
|
58
|
+
"typescript": "^5.6.3",
|
|
59
|
+
"@fidacy/firewall": "0.1.1",
|
|
60
|
+
"@fidacy/mcp": "0.2.9"
|
|
61
|
+
},
|
|
62
|
+
"scripts": {
|
|
63
|
+
"build": "node scripts/bundle.mjs",
|
|
64
|
+
"typecheck": "tsc --noEmit"
|
|
64
65
|
}
|
|
65
|
-
}
|
|
66
|
+
}
|