@fidacy/openclaw-plugin 0.6.0 → 0.6.1

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.6.1
+
+### Patch Changes
+
+- Declaring one system no longer locks the agent out of every other one.
+
+  Found by installing the published 0.8.0 from npm and using it: declaring only the CRM immediately blocked `gmail` and `hubspot` too. Strict whitelist semantics say everything off the list falls, but "these are my systems" reads, to the person writing it, as the list of systems they want governed — not an exhaustive inventory of everything the agent touches. Someone trying Fidacy would declare one system, watch their agent break everywhere else, and uninstall before understanding why.
+
+  The default now governs what you declared. Full lockdown is one word away: `"unknownDestinations": "block"` refuses anything heading somewhere you never listed. The strong property is still there, it just stopped being a trap and became a decision you make knowingly.
+
+  The declared system is governed exactly as before either way.
+
 ## 0.6.0
 
 ### Minor Changes

package/dist/index.js

@@ -4764,6 +4764,7 @@ function readConfig() {
       // classe de defeito do teto de pagamento que era jogado fora em silêncio.
       actionClasses: raw.actionClasses && typeof raw.actionClasses === "object" ? raw.actionClasses : void 0,
       systems: Array.isArray(raw.systems) ? raw.systems : void 0,
+      unknownDestinations: raw.unknownDestinations === "block" ? "block" : void 0,
       // Install-state passthrough: dropping these on a read→write cycle would
       // reset every once-per-install nudge into an every-time nag.
       created_at: typeof raw.created_at === "string" ? raw.created_at : void 0,
@@ -4791,6 +4792,7 @@ function ensureState() {
     api_key: null,
     mandate: { payees: [], categories: ["*"], currency: "USD", perTxMax: 2500, maxTotal: 1e4 },
     systems: [],
+    unknownDestinations: "allow",
     actionClasses: Object.fromEntries(ACTION_CLASSES.map((k) => [k.id, { mode: k.defaultMode }])),
     created_at: (/* @__PURE__ */ new Date()).toISOString()
   };
@@ -5176,7 +5178,7 @@ function sessionIdOf(ctx) {
 import { statSync } from "node:fs";
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.6.0" : "dev";
+var CLIENT_VERSION = true ? "0.6.1" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -5391,7 +5393,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.6.0" : "dev";
+var CLIENT_VERSION2 = true ? "0.6.1" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -5534,7 +5536,7 @@ function trialCountdownLine(keyOverride) {
 }
 
 // ../mcp/src/register.ts
-var CLIENT_VERSION3 = true ? "0.6.0" : "dev";
+var CLIENT_VERSION3 = true ? "0.6.1" : "dev";
 function endpoint3() {
   const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
   return `${base}/v1/register`;

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "name": "Fidacy AI Agent Firewall",
   "description": "Firewall for AI agents. Watches every action the agent takes and ends each session in a digest anyone can recompute; commands, paths and arguments never leave your machine, only counts and a hash. Blocks wrong/lookalike payee, over-cap and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default. Anonymous telemetry (counts only) can be disabled with FIDACY_DISABLE_TELEMETRY=1.",
   "icon": "https://fidacy.com/logo.png",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "contracts": {
     "tools": [
       "request_payment",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",
@@ -56,8 +56,8 @@
     "openclaw": "2026.6.11",
     "typebox": "1.1.39",
     "typescript": "^5.6.3",
-    "@fidacy/mcp": "0.8.0",
-    "@fidacy/firewall": "0.1.1"
+    "@fidacy/firewall": "0.1.1",
+    "@fidacy/mcp": "0.8.1"
   },
   "scripts": {
     "build": "node scripts/bundle.mjs",