@fidacy/openclaw-plugin 0.2.7 → 0.2.8

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 0.2.8
+
+### Patch Changes
+
+- 2e846a7: Funnel: move the strongest claim nudge before the activation wall, and make the
+  first-block nudge scary-but-true.
+
+  The proof-teaser nudge fired at decision 25, stranded behind the 20-decision
+  activation wall: once the firewall fails closed at 20, denied calls stop
+  advancing the counter, so 25 was never reached and the single strongest reason
+  to claim (the history you already built) never showed. It now fires at 15, five
+  decisions before the wall — carrot before stick, which is the highest-converting
+  moment the PLG research points to.
+
+  The first-deny nudge now cites the real $441,788 agent incident. Grounded fear,
+  never manufactured: for a company whose pitch is verify-don't-trust, a cited
+  fact converts and a fabricated panic would be self-refuting.
+
 ## 0.2.7
 
 ### Patch Changes

package/dist/index.js

@@ -4709,7 +4709,7 @@ function resolveMandateRules(cfg) {
 }
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.2.7" : "dev";
+var CLIENT_VERSION = true ? "0.2.8" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -4887,7 +4887,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.2.7" : "dev";
+var CLIENT_VERSION2 = true ? "0.2.8" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -4963,13 +4963,13 @@ function decisionNudge(status, violatedRule, upgradeToolName) {
     return `That was a duplicate-invoice (BEC) catch, the #1 payment fraud. For your operator: ${claimPath}. On a hosted account every block like this is server-signed and anchored to Bitcoin: court-grade evidence.`;
   }
   if (status === "DENY" && nudgeOnce("first_deny")) {
-    return `Fidacy just blocked this for you. For your operator: ${claimPath}.`;
+    return `Fidacy just blocked this payment before it moved. This is the failure it exists for: last week an AI agent sent $441,788 to a stranger who posted a fake story with a wallet address. Nothing was checking it. For your operator: ${claimPath}.`;
   }
   if (status === "ALLOW" && nudgeOnce("first_allow")) {
     return `Fidacy authorized this and signed the decision. For your operator: ${claimPath}.`;
   }
-  if (count === 25 && nudgeOnce("proof_teaser")) {
-    return `Your local chain now holds ${count} decisions only you can read. Anchor them and anyone can verify at fidacy.com/verify, no account needed on their side. For your operator: ${claimPath}.`;
+  if (count === 15 && nudgeOnce("proof_teaser")) {
+    return `Fidacy has now checked ${count} payments on this agent and stands between it and the wrong one, the prompt-injected payee, the duplicate, the over-limit charge. That protection pauses after 20 decisions without a free key. Keep the agent covered: ${claimPath}.`;
   }
   if (count === 10 && nudgeOnce("milestone_10")) {
     return `That's 10 actions gated on this install. For your operator: ${claimPath}.`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",
@@ -57,7 +57,7 @@
     "typebox": "1.1.39",
     "typescript": "^5.6.3",
     "@fidacy/firewall": "0.1.1",
-    "@fidacy/mcp": "0.2.9"
+    "@fidacy/mcp": "0.2.10"
   },
   "scripts": {
     "build": "node scripts/bundle.mjs",