@fidacy/openclaw-plugin 0.2.8 → 0.2.10

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.2.10
+
+### Patch Changes
+
+- 01f0734: Two fixes proven against a real OpenClaw host. Install/active telemetry now flushes immediately at plugin load instead of on a 2s timer that died with short-lived CLI commands (openclaw plugins install/list), which is why the plugin channel reported zero despite real installs. And the manifest now declares every registered tool (spend_summary, list_decisions, sentinel_alerts, explain_decision were missing, tripping openclaw plugins doctor); the build stamps contracts.tools from the source so it can never drift again.
+
+## 0.2.9
+
+### Patch Changes
+
+- 48e1a28: Rebundle with @fidacy/mcp 0.3.0: the free-trial decision counter now survives the background auto-provision write (it was being wiped, resetting the 20-decision anonymous trial on every restart), and anonymous telemetry counts tool usage (tool_use event, allowlisted tool name only, never content).
+
 ## 0.2.8
 
 ### Patch Changes

package/dist/index.js

@@ -4709,7 +4709,7 @@ function resolveMandateRules(cfg) {
 }
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.2.8" : "dev";
+var CLIENT_VERSION = true ? "0.2.10" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -4748,6 +4748,14 @@ function anonId() {
 }
 var buffer = [];
 var flushTimer = null;
+var exitHookArmed = false;
+function armExitFlush() {
+  if (exitHookArmed || typeof process === "undefined" || typeof process.once !== "function") return;
+  exitHookArmed = true;
+  process.once("beforeExit", () => {
+    if (buffer.length > 0) void flush();
+  });
+}
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
@@ -4760,8 +4768,9 @@ function resultOf(status, violatedRule) {
   if (r.startsWith("non_positive_amount") || r.startsWith("invalid_")) return "deny_invalid";
   return "deny_scope";
 }
-function record(type, result, band, capRatio) {
+function record(type, result, band, capRatio, action) {
   if (!telemetryEnabled()) return;
+  armExitFlush();
   buffer.push({
     type,
     ts: (/* @__PURE__ */ new Date()).toISOString(),
@@ -4769,7 +4778,8 @@ function record(type, result, band, capRatio) {
     shell: currentShell,
     ...result ? { result } : {},
     ...band ? { band } : {},
-    ...capRatio ? { cap_ratio: capRatio } : {}
+    ...capRatio ? { cap_ratio: capRatio } : {},
+    ...action ? { action } : {}
   });
   if (!flushTimer) {
     flushTimer = setTimeout(() => {
@@ -4887,7 +4897,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.2.8" : "dev";
+var CLIENT_VERSION2 = true ? "0.2.10" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -4911,8 +4921,9 @@ async function autoProvision() {
     if (!res.ok) return "failed";
     const data = await res.json();
     if (typeof data.api_key !== "string" || !data.api_key) return "failed";
+    const fresh = readConfig() ?? cfg;
     writeConfig({
-      ...cfg,
+      ...fresh,
       api_key: data.api_key,
       tier: data.tier === "paid" ? "paid" : "free"
     });
@@ -4947,7 +4958,7 @@ function bumpDecisionCount() {
   sessionDecisions += 1;
   const cfg = readConfig();
   if (!cfg) return sessionDecisions;
-  const n = (cfg.decisions_count ?? 0) + 1;
+  const n = Math.max((cfg.decisions_count ?? 0) + 1, sessionDecisions);
   cfg.decisions_count = n;
   try {
     writeConfig(cfg);
@@ -5402,6 +5413,7 @@ function onPluginLoad() {
   const state = ensureState();
   if (state.firstRun) recordInstall();
   recordAgentActive();
+  void flush();
   void autoProvision();
 }
 var core;

package/openclaw.plugin.json

@@ -3,12 +3,16 @@
   "name": "Fidacy — Payment Firewall",
   "description": "A signed, independently-verifiable verdict on every money-moving agent action. Blocks wrong/lookalike payee, over-cap, and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default.",
   "icon": "https://fidacy.com/logo.png",
-  "version": "0.2.6",
+  "version": "0.2.10",
   "contracts": {
     "tools": [
       "request_payment",
       "verify_mandate",
       "get_audit_proof",
+      "spend_summary",
+      "list_decisions",
+      "sentinel_alerts",
+      "explain_decision",
       "assess_action",
       "anchor_artifact",
       "check_artifact",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.2.8",
+  "version": "0.2.10",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",
@@ -57,7 +57,7 @@
     "typebox": "1.1.39",
     "typescript": "^5.6.3",
     "@fidacy/firewall": "0.1.1",
-    "@fidacy/mcp": "0.2.10"
+    "@fidacy/mcp": "0.3.1"
   },
   "scripts": {
     "build": "node scripts/bundle.mjs",