@fidacy/openclaw-plugin 0.5.5 → 0.5.7

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.5.7
+
+### Patch Changes
+
+- Four configuration mistakes that presented themselves as security verdicts, so the firewall looked broken and stopped real payments for reasons nobody could see.
+
+  - `FIDACY_MANDATE_JSON` was the last human-authored surface returned verbatim, with no validation of its caps. `"perTxMax": "10000"` built a mandate the engine had to refuse, so **every** payment came back `invalid_mandate_cap:perTxMax=10000` — a message naming 10000 as the invalid cap, when 10000 is a perfectly good number and the quotes were the whole problem. It now honours a quoted number (which means exactly one thing) and refuses anything that would need a guess, loudly, saying that the payees and caps in force are not the ones you wrote.
+  - **Fail-open, now closed:** both window checks are `now < Date.parse(...)` and `now > Date.parse(...)`, and a date that does not parse yields NaN, which makes both comparisons false. An unreadable window was not a narrow window, it was no window: the mandate never expired. An unenforceable window now denies, at the engine as well as at the override.
+  - A quoted cap in `config.json` was discarded silently, so the 2500 default applied and a 5000 payment came back `per_tx_cap_exceeded:5000>2500`, quoting a cap the operator had never set. It now follows the same rule as the environment variables, which had warned since 2026-07-24.
+  - `"currency": "usd"` denied every payment with `currency_not_allowed:USD`, naming as forbidden the exact currency it had allowed. ISO 4217 codes are case-insensitive; case was never a policy decision.
+
+  Nothing was loosened. Caps still cap, a genuinely different currency is still denied, a payee off the allowlist is still denied, and an unreadable value still falls back to the safe default rather than to no limit at all.
+
 ## 0.5.5
 
 ### Patch Changes

package/README.md

@@ -46,9 +46,11 @@ it never holds funds.
 
 ## To everyone who installed Fidacy
 
-Excluding our own test traffic, installs like yours have made about 1,600 real
-firewall decisions to date, over 99% of them blocks. Thank you. Two things worth
-a minute of your time:
+The Fidacy firewall has taken **3,099 decisions** to date, **98% of them blocks**,
+counted by the engine and public at
+[api.fidacy.com/v1/pulse](https://api.fidacy.com/v1/pulse) if you want to check the
+number yourself. Thank you for being part of it. Two things worth a minute of your
+time:
 
 1. **See and claim what YOUR install blocked.** Your install carries a private,
    anonymous id on your machine (we never learn who you are unless you choose to).

package/dist/index.js

@@ -4320,14 +4320,24 @@ function resolveMandateRules(cfg) {
     }
     return n;
   };
-  const fileNum = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 ? v : void 0;
+  const fileNum = (name, v) => {
+    if (v === void 0 || v === null) return void 0;
+    const n = typeof v === "number" ? v : typeof v === "string" ? Number(v.trim()) : NaN;
+    if (!Number.isFinite(n) || n <= 0) {
+      console.error(
+        `[fidacy] mandate.${name} in config.json is ${JSON.stringify(v)}, which is not a positive number, so it cannot be enforced as a cap. Ignoring it and using the safe default. Write it as a bare JSON number, with no quotes, thousands separator, currency symbol or unit (e.g. "${name}": 2500).`
+      );
+      return void 0;
+    }
+    return n;
+  };
   const payees = envList(process.env.FIDACY_ALLOW_PAYEES) ?? m.payees ?? [];
   return {
     payees: payees.includes(DEMO_PAYEE) ? payees : [...payees, DEMO_PAYEE],
     categories: envList(process.env.FIDACY_ALLOW_CATEGORIES) ?? m.categories ?? ["*"],
     currency: process.env.FIDACY_CURRENCY ?? m.currency ?? "USD",
-    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum(m.perTxMax) ?? 2500,
-    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum(m.maxTotal) ?? 1e4
+    perTxMax: envNum("FIDACY_PER_TX_MAX", process.env.FIDACY_PER_TX_MAX) ?? fileNum("perTxMax", m.perTxMax) ?? 2500,
+    maxTotal: envNum("FIDACY_MAX_TOTAL", process.env.FIDACY_MAX_TOTAL) ?? fileNum("maxTotal", m.maxTotal) ?? 1e4
   };
 }
 
@@ -4759,6 +4769,13 @@ function validateMandateCaps(mandate) {
     return `invalid_mandate_cap:perTxMax=${String(mandate.allow.perTxMax)}`;
   if (bad(mandate.allow.maxTotal))
     return `invalid_mandate_cap:maxTotal=${String(mandate.allow.maxTotal)}`;
+  if (!mandate.window || typeof mandate.window !== "object")
+    return "invalid_mandate:missing_window";
+  for (const campo of ["notBefore", "notAfter"]) {
+    const v = mandate.window[campo];
+    if (typeof v !== "string" || Number.isNaN(Date.parse(v)))
+      return `invalid_mandate_window:${campo}=${String(v)}`;
+  }
   return null;
 }
 function evaluate(mandate, req, spentSoFar) {
@@ -4772,7 +4789,7 @@ function evaluate(mandate, req, spentSoFar) {
     return "before_mandate_window";
   if (now > Date.parse(mandate.window.notAfter))
     return "after_mandate_window";
-  if (req.currency !== mandate.allow.currency)
+  if (req.currency.toUpperCase() !== mandate.allow.currency.toUpperCase())
     return `currency_not_allowed:${req.currency}`;
   if (req.amount <= 0)
     return "non_positive_amount";
@@ -5085,7 +5102,7 @@ var FileAuditStore = class {
 import { statSync } from "node:fs";
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.5.5" : "dev";
+var CLIENT_VERSION = true ? "0.5.7" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -5193,12 +5210,38 @@ async function flush() {
 }
 
 // ../mcp/src/core.ts
+function normalizaMandatoDeEnv(m) {
+  const allow = m.allow;
+  for (const campo of ["perTxMax", "maxTotal"]) {
+    const v = allow[campo];
+    const n = typeof v === "number" ? v : typeof v === "string" ? Number(v.trim()) : NaN;
+    if (!Number.isFinite(n) || n <= 0) {
+      return `has allow.${campo} = ${JSON.stringify(v)}, which is not a positive number, so that cap cannot be enforced. Write it as a bare JSON number, with no quotes, thousands separator, currency symbol or unit (e.g. "${campo}": 2500).`;
+    }
+    allow[campo] = n;
+  }
+  const window = m.window;
+  for (const campo of ["notBefore", "notAfter"]) {
+    const v = window[campo];
+    if (typeof v !== "string" || Number.isNaN(Date.parse(v))) {
+      return `has window.${campo} = ${JSON.stringify(v)}, which is not a readable date, so the mandate's time window cannot be enforced. Use an ISO 8601 timestamp (e.g. "${campo}": "2026-01-01T00:00:00Z").`;
+    }
+  }
+  return null;
+}
 function buildMandate() {
   if (process.env.FIDACY_MANDATE_JSON) {
     try {
       const parsed = JSON.parse(process.env.FIDACY_MANDATE_JSON);
-      if (parsed && typeof parsed === "object" && parsed.allow && parsed.window) return parsed;
-      console.error("[fidacy] FIDACY_MANDATE_JSON is missing allow/window; ignoring it and using the safe default mandate.");
+      if (parsed && typeof parsed === "object" && parsed.allow && parsed.window) {
+        const problema = normalizaMandatoDeEnv(parsed);
+        if (!problema) return parsed;
+        console.error(
+          `[fidacy] FIDACY_MANDATE_JSON ${problema} The override is being IGNORED and the safe default mandate is in force instead, so your payees and caps are NOT the ones you wrote.`
+        );
+      } else {
+        console.error("[fidacy] FIDACY_MANDATE_JSON is missing allow/window; ignoring it and using the safe default mandate.");
+      }
     } catch (err) {
       console.error(`[fidacy] FIDACY_MANDATE_JSON is not valid JSON (${err.message}); ignoring it and using the safe default mandate.`);
     }
@@ -5274,7 +5317,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.5.5" : "dev";
+var CLIENT_VERSION2 = true ? "0.5.7" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -5417,7 +5460,7 @@ function trialCountdownLine(keyOverride) {
 }
 
 // ../mcp/src/register.ts
-var CLIENT_VERSION3 = true ? "0.5.5" : "dev";
+var CLIENT_VERSION3 = true ? "0.5.7" : "dev";
 function endpoint3() {
   const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
   return `${base}/v1/register`;

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "name": "Fidacy AI Agent Firewall",
   "description": "Firewall for AI agents. Watches every action the agent takes and ends each session in a digest anyone can recompute; commands, paths and arguments never leave your machine, only counts and a hash. Blocks wrong/lookalike payee, over-cap and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default. Anonymous telemetry (counts only) can be disabled with FIDACY_DISABLE_TELEMETRY=1.",
   "icon": "https://fidacy.com/logo.png",
-  "version": "0.5.5",
+  "version": "0.5.7",
   "contracts": {
     "tools": [
       "request_payment",
@@ -25,43 +25,20 @@
     "properties": {
       "operatorEmail": {
         "type": "string",
-        "description": "Your email (optional). Ties this agent's protection history to you so it can move into a free account, and lets Fidacy reach you about this install. Never shared; remove any time."
+        "description": "Your email (optional). Ties this agent's protection history to you so it can move into a free account, and lets Fidacy reach you about this install. Never shared; remove any time. Your email (optional) Ties this agent's protection history to you so it can move into a free account, and lets Fidacy reach you about this install. Optional — the firewall works without it."
       },
       "engineApiKey": {
         "type": "string",
-        "description": "Fidacy engine API key (fky_live_/fky_test_) enabling signed verdicts via assess_action. Falls back to FIDACY_ENGINE_API_KEY."
+        "description": "Fidacy engine API key (fky_live_/fky_test_) enabling signed verdicts via assess_action. Falls back to FIDACY_ENGINE_API_KEY. Engine API key Free key at app.fidacy.com/signup. Enables signed trust verdicts (assess_action) and keeps the firewall active past the 20-decision anonymous trial."
       },
       "engineUrl": {
         "type": "string",
-        "description": "Fidacy engine base URL. Defaults to https://api.fidacy.com (or FIDACY_ENGINE_URL)."
+        "description": "Fidacy engine base URL. Defaults to https://api.fidacy.com (or FIDACY_ENGINE_URL). Engine URL"
       },
       "subject": {
         "type": "string",
-        "description": "Mandate subject identity for this agent. Defaults to agent:demo (or FIDACY_SUBJECT)."
+        "description": "Mandate subject identity for this agent. Defaults to agent:demo (or FIDACY_SUBJECT). Agent subject"
       }
     }
-  },
-  "uiHints": {
-    "operatorEmail": {
-      "label": "Your email (optional)",
-      "placeholder": "you@company.com",
-      "help": "Ties this agent's protection history to you so it can move into a free account, and lets Fidacy reach you about this install. Optional — the firewall works without it."
-    },
-    "engineApiKey": {
-      "label": "Engine API key",
-      "placeholder": "fky_live_...",
-      "sensitive": true,
-      "help": "Free key at app.fidacy.com/signup. Enables signed trust verdicts (assess_action) and keeps the firewall active past the 20-decision anonymous trial."
-    },
-    "engineUrl": {
-      "label": "Engine URL",
-      "placeholder": "https://api.fidacy.com",
-      "advanced": true
-    },
-    "subject": {
-      "label": "Agent subject",
-      "placeholder": "agent:demo",
-      "advanced": true
-    }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.5.5",
+  "version": "0.5.7",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",
@@ -57,7 +57,7 @@
     "typebox": "1.1.39",
     "typescript": "^5.6.3",
     "@fidacy/firewall": "0.1.1",
-    "@fidacy/mcp": "0.7.2"
+    "@fidacy/mcp": "0.7.4"
   },
   "scripts": {
     "build": "node scripts/bundle.mjs",