@fidacy/openclaw-plugin 0.2.9 → 0.2.10

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.2.10
+
+### Patch Changes
+
+- 01f0734: Two fixes proven against a real OpenClaw host. Install/active telemetry now flushes immediately at plugin load instead of on a 2s timer that died with short-lived CLI commands (openclaw plugins install/list), which is why the plugin channel reported zero despite real installs. And the manifest now declares every registered tool (spend_summary, list_decisions, sentinel_alerts, explain_decision were missing, tripping openclaw plugins doctor); the build stamps contracts.tools from the source so it can never drift again.
+
 ## 0.2.9
 
 ### Patch Changes

package/dist/index.js

@@ -4709,7 +4709,7 @@ function resolveMandateRules(cfg) {
 }
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.2.9" : "dev";
+var CLIENT_VERSION = true ? "0.2.10" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -4748,6 +4748,14 @@ function anonId() {
 }
 var buffer = [];
 var flushTimer = null;
+var exitHookArmed = false;
+function armExitFlush() {
+  if (exitHookArmed || typeof process === "undefined" || typeof process.once !== "function") return;
+  exitHookArmed = true;
+  process.once("beforeExit", () => {
+    if (buffer.length > 0) void flush();
+  });
+}
 function resultOf(status, violatedRule) {
   if (status === "ALLOW") return "allow";
   const r = violatedRule ?? "";
@@ -4762,6 +4770,7 @@ function resultOf(status, violatedRule) {
 }
 function record(type, result, band, capRatio, action) {
   if (!telemetryEnabled()) return;
+  armExitFlush();
   buffer.push({
     type,
     ts: (/* @__PURE__ */ new Date()).toISOString(),
@@ -4888,7 +4897,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.2.9" : "dev";
+var CLIENT_VERSION2 = true ? "0.2.10" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -5404,6 +5413,7 @@ function onPluginLoad() {
   const state = ensureState();
   if (state.firstRun) recordInstall();
   recordAgentActive();
+  void flush();
   void autoProvision();
 }
 var core;

package/openclaw.plugin.json

@@ -3,12 +3,16 @@
   "name": "Fidacy — Payment Firewall",
   "description": "A signed, independently-verifiable verdict on every money-moving agent action. Blocks wrong/lookalike payee, over-cap, and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default.",
   "icon": "https://fidacy.com/logo.png",
-  "version": "0.2.6",
+  "version": "0.2.10",
   "contracts": {
     "tools": [
       "request_payment",
       "verify_mandate",
       "get_audit_proof",
+      "spend_summary",
+      "list_decisions",
+      "sentinel_alerts",
+      "explain_decision",
       "assess_action",
       "anchor_artifact",
       "check_artifact",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.2.9",
+  "version": "0.2.10",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",
@@ -56,8 +56,8 @@
     "openclaw": "2026.6.11",
     "typebox": "1.1.39",
     "typescript": "^5.6.3",
-    "@fidacy/mcp": "0.3.0",
-    "@fidacy/firewall": "0.1.1"
+    "@fidacy/firewall": "0.1.1",
+    "@fidacy/mcp": "0.3.1"
   },
   "scripts": {
     "build": "node scripts/bundle.mjs",