@fidacy/openclaw-plugin 0.6.1 → 0.8.0

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## 0.8.0
+
+### Minor Changes
+
+- `protect` now offers to turn the firewall on, because without that step none of it is enforced.
+
+  The measurement is the whole argument: **2 of 407** MCP installs had ever run `install-hooks`. The command exists, it is careful, and nobody finds it. An MCP server only ever sees calls to its own tools — deleting a file, reading a secret or reaching your CRM goes through the agent's host, not through us. So every answer someone gives about what their agent may do was being written to a firewall that was not in the path.
+
+  Asking at the end of `protect` is the difference, because it is the one moment there is a human at the terminal thinking about exactly this.
+
+  It asks; it never installs on its own. That file is someone's editor config, and writing to it without consent is both what put us in a security review on ClawHub and, more to the point, the exact thing this product exists to stop an agent from doing. Existing hooks are merged around, a backup is kept, and every path touched is printed. Say no and your answers are still saved, with the command to enforce them later.
+
+## 0.7.0
+
+### Minor Changes
+
+- `npx @fidacy/mcp protect` — a short conversation that configures the firewall, so nobody has to guess.
+
+  Found by installing the published package and looking at what a person actually sees. The boot banner talked about payees; `systems`, `actionClasses` and the modes only existed for someone who opened `config.json` and worked out the schema alone. A guard nobody finds is a guard that does not exist, and the hidden one was precisely the one that stops the agent reaching a system nobody authorised.
+
+  Seven questions, one keystroke each, in plain language. Nobody needs to know what `crm.export` means to answer "may it export your customer records?" — translating that into the engine's vocabulary is our job, not theirs.
+
+      y = yes, let it     a = ask me first     n = never
+
+  Then: which systems does this agent work with. It gets read access to those and nothing more until you say otherwise, and you choose whether anything heading elsewhere is refused too.
+
+  Offline and deterministic on purpose: no network, no model, no account. Someone who just installed can protect their machine before deciding whether they trust us.
+
+  The banner now carries the command on every boot, not just the first — anyone who installed before this version never saw a first run with it.
+
 ## 0.6.1
 
 ### Patch Changes

package/dist/index.js

@@ -5178,7 +5178,7 @@ function sessionIdOf(ctx) {
 import { statSync } from "node:fs";
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.6.1" : "dev";
+var CLIENT_VERSION = true ? "0.7.0" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -5393,7 +5393,7 @@ function requestUpgrade() {
 }
 
 // ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.6.1" : "dev";
+var CLIENT_VERSION2 = true ? "0.7.0" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -5536,7 +5536,7 @@ function trialCountdownLine(keyOverride) {
 }
 
 // ../mcp/src/register.ts
-var CLIENT_VERSION3 = true ? "0.6.1" : "dev";
+var CLIENT_VERSION3 = true ? "0.7.0" : "dev";
 function endpoint3() {
   const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
   return `${base}/v1/register`;

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "name": "Fidacy AI Agent Firewall",
   "description": "Firewall for AI agents. Watches every action the agent takes and ends each session in a digest anyone can recompute; commands, paths and arguments never leave your machine, only counts and a hash. Blocks wrong/lookalike payee, over-cap and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default. Anonymous telemetry (counts only) can be disabled with FIDACY_DISABLE_TELEMETRY=1.",
   "icon": "https://fidacy.com/logo.png",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "contracts": {
     "tools": [
       "request_payment",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.6.1",
+  "version": "0.8.0",
   "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",
@@ -57,7 +57,7 @@
     "typebox": "1.1.39",
     "typescript": "^5.6.3",
     "@fidacy/firewall": "0.1.1",
-    "@fidacy/mcp": "0.8.1"
+    "@fidacy/mcp": "0.10.0"
   },
   "scripts": {
     "build": "node scripts/bundle.mjs",