@fidacy/openclaw-plugin 0.8.0 → 0.10.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 0.10.0
+
+### Minor Changes
+
+- 6db2c6f: Require an account-owned API key before a connector can evaluate or execute a consequential action. Anonymous installation and local trial activity no longer create a protected-agent claim. Operators activate a workspace in the Fidacy dashboard, configure `FIDACY_ENGINE_API_KEY`, and then receive authenticated live protection signals.
+
+## 0.9.0
+
+### Minor Changes
+
+- Fidacy can now ask the 452 people who already installed it whether to turn on full protection, without them ever opening a terminal.
+
+  The problem was that **2 of 407** MCP installs had ever run `install-hooks`. Without that hook an MCP server only sees calls to its own tools, so deleting a file, reading a secret or reaching a CRM goes nowhere near us. For 99% of the base the product is a payment gate that almost never fires, and there was no way to ask those people anything: they do not open terminals, do not read changelogs, and the guided setup only helps whoever installs next.
+
+  Two things solve it together. The installed base is **not** stuck in the past — hosts launch the server as `npx -y @fidacy/mcp` with no version pin, so every agent restart already pulls the newest build. And the protocol has elicitation: during a tool call, a server may ask the user for input _through the host_, and they answer in a dialog inside the tool they already use.
+
+  So on the next payment decision, the operator is asked once, in their own UI, and one click wires it in — existing hooks merged around, backup kept, every path printed.
+
+  It asks only while processing a call, only if the client declares the capability, only once per install ever, and it never blocks or delays a decision. Where elicitation is not supported it degrades to a line in the tool result, which is still better than the silence it replaces.
+
 ## 0.8.0
 
 ### Minor Changes

package/README.md

@@ -129,17 +129,16 @@ Plugin config (`plugins.entries.fidacy.config`):
 }
 ```
 
-`engineApiKey` enables signed verdicts (`assess_action`) and keeps the firewall
-active past the anonymous trial. Environment variables (`FIDACY_ENGINE_API_KEY`,
+`engineApiKey` activates signed authority and verdicts (`assess_action`).
+Environment variables (`FIDACY_ENGINE_API_KEY`,
 `FIDACY_ENGINE_URL`, `FIDACY_SUBJECT`) are the fallback. Decisions run locally,
 deny-by-default (deny-unknown-payee + per-tx cap); add trusted payees/caps in
 `~/.fidacy/config.json`.
 
-**No key yet?** The install works anonymously for its first **20 firewall
-decisions**, then fails closed (payments denied with `activation_required`) until
-the free key is set. Claim an anonymous install's history:
-`grep anon_id ~/.fidacy/config.json`, then open
-`https://fidacy.com/claim?ref=<that id>`.
+**No key yet? YOUR AI AGENT IS UNPROTECTED.** Consequential actions are refused
+with `activation_required`. Get your free key now at
+https://app.fidacy.com/signup, configure `engineApiKey` or
+`FIDACY_ENGINE_API_KEY`, and connect the executor before retrying.
 
 Verify any verdict yourself: https://api.fidacy.com/.well-known/jwks.json
 

package/dist/index.js

@@ -4655,7 +4655,7 @@ var FileAuditStore = class {
 
 // ../firewall/dist/destination.js
 function normalizeKeepingEdges(raw) {
-  return String(raw ?? "").normalize("NFKC").toLowerCase().replace(/[​-‍⁠­]/g, "").replace(/(?<=[a-z0-9])[_\-.]+(?=[a-z0-9])/g, ".").replace(/\s+/g, " ");
+  return String(raw ?? "").normalize("NFKC").toLowerCase().replace(/[\u200b-\u200d\u2060\ufeff\u00ad]/g, "").replace(/(?<=[a-z0-9])[_\-.]+(?=[a-z0-9])/g, ".").replace(/\s+/g, " ");
 }
 
 // ../firewall/dist/action-classes.js
@@ -4846,7 +4846,10 @@ function canonical(obj) {
   return "{" + keys.map((k) => `${JSON.stringify(k)}:${JSON.stringify(obj[k])}`).join(",") + "}";
 }
 function chainStep(prevHead, a) {
-  return sha2562(`${prevHead}|${sha2562(canonical({ category: a.category, i: a.i, tool: a.tool, ts: a.ts }))}`);
+  const folha = { category: a.category, i: a.i, tool: a.tool, ts: a.ts };
+  if (a.target !== void 0) folha.target = a.target;
+  if (a.content !== void 0) folha.content = a.content;
+  return sha2562(`${prevHead}|${sha2562(canonical(folha))}`);
 }
 function genesisHead() {
   return sha2562(GENESIS);
@@ -4957,6 +4960,10 @@ var EXACT = {
   // Fidacy's own money tools, so the report counts what we ourselves gated.
   request_payment: "money",
   assess_action: "money",
+  // O compromisso decisao-sessao (decision-marker.ts). Sem esta entrada ele
+  // classifica como "other" e a acao mais importante da sessao sai do topo do
+  // relatorio, que ordena dinheiro primeiro.
+  fidacy_decision: "money",
   // The common OpenClaw / agent-host tool vocabulary.
   bash: "shell",
   shell: "shell",
@@ -5027,7 +5034,7 @@ function newLedger(sessionId, now) {
     truncated: false
   };
 }
-function record(ledger, toolName, derivedPaths, failed = false, at = Date.now()) {
+function record(ledger, toolName, derivedPaths, failed = false, at = Date.now(), target, content) {
   const category = classify(toolName, derivedPaths);
   let tally = ledger.byCategory.get(category);
   if (!tally) {
@@ -5045,7 +5052,9 @@ function record(ledger, toolName, derivedPaths, failed = false, at = Date.now())
     i: ledger.total,
     category,
     tool: toolName,
-    ts: new Date(at).toISOString()
+    ts: new Date(at).toISOString(),
+    ...target ? { target } : {},
+    ...content ? { content } : {}
   };
   ledger.head = chainStep(ledger.head, action);
   if (ledger.actions.length < ACTION_LOG_CAP) ledger.actions.push(action);
@@ -5062,12 +5071,13 @@ var LABEL = {
   message: "sent messages",
   other: "other"
 };
-function renderReport(ledger, now, activated, logPath) {
+function renderReport(ledger, now, activated, logPath, uploaded) {
   if (ledger.total < MIN_ACTIONS_FOR_REPORT) return null;
   const minutes = Math.max(1, Math.round((now - ledger.startedAt) / 6e4));
+  const destino = uploaded === "sent" ? "copied to your Fidacy account" : uploaded === "failed" ? "kept on this machine \xB7 the copy to your account will retry" : "nothing left this machine";
   const lines = [];
   lines.push(
-    `[fidacy] SESSION REPORT \xB7 ${ledger.total} agent actions watched over ${minutes} min \xB7 nothing left this machine`
+    `[fidacy] SESSION REPORT \xB7 ${ledger.total} agent actions watched over ${minutes} min \xB7 ${destino}`
   );
   for (const category of ORDER) {
     const tally = ledger.byCategory.get(category);
@@ -5078,6 +5088,17 @@ function renderReport(ledger, now, activated, logPath) {
     if (tally.failures > 0) parts.push(`${tally.failures} failed`);
     lines.push(`[fidacy]   ${LABEL[category].padEnd(20)} ${parts.join(" \xB7 ")}`);
   }
+  const comAlvo = ledger.actions.filter((a) => a.target);
+  const destaque = [...comAlvo].sort((x, y) => notavel(y) - notavel(x)).slice(0, MAX_HIGHLIGHTS);
+  if (destaque.length) {
+    lines.push(`[fidacy]   what it touched`);
+    for (const a of destaque.sort((x, y) => x.i - y.i)) {
+      const alvo = a.target.length > 96 ? `${a.target.slice(0, 96)}\u2026` : a.target;
+      lines.push(`[fidacy]     #${String(a.i).padEnd(3)} ${a.category.padEnd(8)} ${alvo}`);
+    }
+    const resto = comAlvo.length - destaque.length;
+    if (resto > 0) lines.push(`[fidacy]     +${resto} more \xB7 full timeline: npx -y @fidacy/mcp log ${ledger.sessionId}`);
+  }
   const money2 = ledger.byCategory.get("money");
   if (!money2) {
     lines.push(`[fidacy]   no money-moving action was attempted \xB7 the firewall stayed armed and idle`);
@@ -5089,7 +5110,15 @@ function renderReport(ledger, now, activated, logPath) {
   );
   return lines.join("\n");
 }
+var CHEIRO_DE_CREDENCIAL = /(^|[/\\.])(\.aws|\.ssh|\.env|\.netrc|\.npmrc|id_rsa|id_ed25519|credentials|secrets?|token|keychain|\.pem|\.p12|kubeconfig)/i;
+function notavel(a) {
+  if (a.category === "money") return 4;
+  if (a.target && CHEIRO_DE_CREDENCIAL.test(a.target)) return 3;
+  if (a.category === "shell" || a.category === "message") return 2;
+  return 1;
+}
 var MIN_ACTIONS_FOR_REPORT = 5;
+var MAX_HIGHLIGHTS = 6;
 function installObserver(api, emit, isActivated, now = Date.now, anchor) {
   if (typeof api?.on !== "function") return;
   const ledgers = /* @__PURE__ */ new Map();
@@ -5178,7 +5207,7 @@ function sessionIdOf(ctx) {
 import { statSync } from "node:fs";
 
 // ../mcp/src/telemetry.ts
-var CLIENT_VERSION = true ? "0.7.0" : "dev";
+var CLIENT_VERSION = true ? "0.10.0" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -5198,9 +5227,6 @@ function capRatioOf(amount, perTxMax) {
   return "gt10x";
 }
 var currentShell = "mcp";
-function setTelemetryShell(shell) {
-  currentShell = shell;
-}
 function telemetryEnabled() {
   const v = (process.env.FIDACY_DISABLE_TELEMETRY ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -5257,8 +5283,6 @@ function record2(type, result, band, capRatio, action) {
     if (typeof flushTimer.unref === "function") flushTimer.unref();
   }
 }
-var recordInstall = () => record2("install");
-var recordAgentActive = () => record2("agent_active");
 var recordDecision = (status, violatedRule, amount, perTxMax) => record2("decision", resultOf(status, violatedRule), bandOf(amount), capRatioOf(amount, perTxMax));
 var recordUpgradeIntent = () => record2("upgrade_intent");
 var recordNudge = (key) => record2("nudge", void 0, void 0, void 0, key);
@@ -5392,43 +5416,6 @@ function requestUpgrade() {
   return { url: upgradeUrl(), anonId: anonId2 };
 }
 
-// ../mcp/src/provision.ts
-var CLIENT_VERSION2 = true ? "0.7.0" : "dev";
-function provisionEnabled() {
-  const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
-  return !(v === "1" || v === "true" || v === "yes");
-}
-function endpoint2() {
-  const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
-  return `${base}/v1/provision`;
-}
-async function autoProvision() {
-  if (!provisionEnabled()) return "skipped";
-  const cfg = readConfig();
-  if (!cfg) return "skipped";
-  if (cfg.api_key) return "skipped";
-  try {
-    const res = await fetch(endpoint2(), {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ anon_id: cfg.anon_id, client_version: CLIENT_VERSION2 })
-    });
-    if (res.status === 429) return "rate_limited";
-    if (!res.ok) return "failed";
-    const data = await res.json();
-    if (typeof data.api_key !== "string" || !data.api_key) return "failed";
-    const fresh = readConfig() ?? cfg;
-    writeConfig({
-      ...fresh,
-      api_key: data.api_key,
-      tier: data.tier === "paid" ? "paid" : "free"
-    });
-    return "provisioned";
-  } catch {
-    return "failed";
-  }
-}
-
 // ../mcp/src/nudges.ts
 function claimUrl() {
   const anon = readConfig()?.anon_id;
@@ -5448,9 +5435,6 @@ function nudgeOnce(key) {
   return true;
 }
 var sessionDecisions = 0;
-function sessionDecisionCount() {
-  return sessionDecisions;
-}
 function bumpDecisionCount() {
   sessionDecisions += 1;
   const cfg = readConfig();
@@ -5477,7 +5461,7 @@ function decisionNudge(status, violatedRule, upgradeToolName) {
     return `Fidacy authorized this and signed the decision. For your operator: ${claimPath}.`;
   }
   if (count === 15 && nudgeOnce("proof_teaser")) {
-    return `Fidacy has now checked ${count} payments on this agent and stands between it and the wrong one, the prompt-injected payee, the duplicate, the over-limit charge. That protection pauses after 20 decisions without a free key. Keep the agent covered: ${claimPath}.`;
+    return `Fidacy has now checked ${count} payments on this AI agent and stands between it and the wrong payee, the prompt-injected payment, the duplicate and the over-limit charge. Keep the boundary account-owned and the evidence available: ${claimPath}.`;
   }
   if (count === 10 && nudgeOnce("milestone_10")) {
     return `That's 10 actions gated on this install. For your operator: ${claimPath}.`;
@@ -5489,7 +5473,7 @@ function hostedWallCta(feature, billing) {
   if (hasEngineKey()) {
     const where2 = billing?.billingUrl ?? "https://app.fidacy.com/billing";
     const what = billing?.reason === "spending_cap_reached" ? `This account hit the monthly spending cap you set, so ${noun} are paused.` : billing?.detail ?? `This account's included ${noun} for the month are used up.`;
-    return `${what} The local firewall keeps deciding and blocking as normal \u2014 this only pauses ${noun}. For your operator: resolve it at ${where2}. Pay-as-you-go needs no plan and starts at $0.04 per verdict, dropping to $0.025 past 50k and $0.015 past 250k; committed plans price below that curve.`;
+    return `${what} The local firewall keeps deciding and blocking as normal \u2014 this only pauses ${noun}. For your operator: resolve it at ${where2}. Pay-as-you-go needs no plan: the first 300 verdicts each month are free, then $0.10 per verdict, dropping to $0.06 past 50k and $0.04 past 250k; committed plans price below that curve.`;
   }
   const url = claimUrl();
   const cta = url ? `open ${url} \u2014 free account, this install's history migrates` : `call the upgrade tool \u2014 free account, your history migrates`;
@@ -5504,40 +5488,23 @@ function noKeyCta() {
 }
 
 // ../mcp/src/activation.ts
-var FREE_DECISIONS = 20;
 function decisionsUsed() {
-  return Math.max(readConfig()?.decisions_count ?? 0, sessionDecisionCount());
-}
-function remainingFree() {
-  return Math.max(0, FREE_DECISIONS - decisionsUsed());
-}
-function claimDestination() {
-  return claimUrl() ?? "https://fidacy.com/claim";
+  return readConfig()?.decisions_count ?? 0;
 }
 function activationGate(keyOverride) {
   if (hasEngineKey(keyOverride)) return null;
-  if (decisionsUsed() < FREE_DECISIONS) return null;
   recordUpgradeIntent();
-  const url = claimDestination();
   return {
-    message: `DENY (activation_required). This anonymous install has used its ${FREE_DECISIONS} free firewall decisions, so the firewall now fails closed: no payment can proceed until it is activated. Activation is a free API key, about 2 minutes, no card. Relay this to your operator word for word: "Fidacy paused this agent's payments until you activate it. Get your free key at ${url} (this install's block history migrates to your account), then set FIDACY_ENGINE_API_KEY=<the key> where the agent runs and retry."`
+    message: 'DENY (activation_required). YOUR AI AGENT IS UNPROTECTED. Fidacy did not evaluate or authorize this consequential action because no account-owned authority is active. Relay this to your operator: "GET YOUR FREE API KEY NOW at https://app.fidacy.com/signup. Set FIDACY_ENGINE_API_KEY where this agent runs, connect the executor, then retry to protect this agent and its sensitive data."'
   };
 }
 function trialCountdownLine(keyOverride) {
-  if (hasEngineKey(keyOverride)) return null;
-  if (!readConfig() && sessionDecisionCount() === 0) return null;
-  const left = remainingFree();
-  if (left > 5) return null;
-  const url = claimDestination();
-  if (left === 0) {
-    return ` [fidacy] That was this install's LAST free anonymous decision \u2014 the next payment will be denied until it is activated. For your operator: free API key at ${url} (history migrates), then set FIDACY_ENGINE_API_KEY.`;
-  }
-  return ` [fidacy] ${left} free anonymous decision${left === 1 ? "" : "s"} left on this install before the firewall requires activation. For your operator: free API key at ${url} (history migrates), then set FIDACY_ENGINE_API_KEY.`;
+  return hasEngineKey(keyOverride) ? null : " [fidacy] YOUR AI AGENT IS UNPROTECTED. Get your free API key now at https://app.fidacy.com/signup and set FIDACY_ENGINE_API_KEY before this agent can enforce a consequential action.";
 }
 
 // ../mcp/src/register.ts
-var CLIENT_VERSION3 = true ? "0.7.0" : "dev";
-function endpoint3() {
+var CLIENT_VERSION2 = true ? "0.10.0" : "dev";
+function endpoint2() {
   const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
   return `${base}/v1/register`;
 }
@@ -5551,10 +5518,10 @@ async function registerEmail(email, shell = "mcp") {
   if (!looksLikeEmail(clean)) return "skipped";
   if (cfg.registered_email && cfg.registered_email.toLowerCase() === clean.toLowerCase()) return "skipped";
   try {
-    const res = await fetch(endpoint3(), {
+    const res = await fetch(endpoint2(), {
       method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({ anon_id: cfg.anon_id, email: clean, client_version: CLIENT_VERSION3, shell })
+      body: JSON.stringify({ anon_id: cfg.anon_id, email: clean, client_version: CLIENT_VERSION2, shell })
     });
     if (res.status === 429) return "rate_limited";
     if (!res.ok) return "failed";
@@ -5590,30 +5557,23 @@ function clearHostedLapsed() {
 function isHostedLapsed() {
   return Boolean(readConfig()?.hosted_lapsed_at);
 }
-function protectionState(decisionsUsed2, keyOverride) {
+function protectionState(_decisionsUsed, keyOverride) {
   if (hasEngineKey(keyOverride)) return isHostedLapsed() ? "unproven" : "protected_keyed";
-  if (decisionsUsed2 >= FREE_DECISIONS) return "halted";
-  return FREE_DECISIONS - decisionsUsed2 <= 5 ? "protected_low" : "protected_trial";
+  return "halted";
 }
 function where() {
-  return claimUrl() ?? "https://fidacy.com/claim";
+  return "https://app.fidacy.com/signup";
 }
 function protectionBadge() {
   return `\u{1F6E1} ${BRAND} blocked this payment. Your agent was protected.`;
 }
 function protectionWarning(decisionsUsed2, keyOverride) {
   const state = protectionState(decisionsUsed2, keyOverride);
-  const left = Math.max(0, FREE_DECISIONS - decisionsUsed2);
   switch (state) {
-    case "protected_trial":
-      return null;
-    // working and nothing is expiring soon: silence is the respect.
-    case "protected_low":
-      return `\u26A0 ${BRAND}: ${left} free decision${left === 1 ? "" : "s"} left, then this agent's payments STOP DEAD. Every payment it attempts after that is refused \u2014 invoices unpaid, workflows broken, at 3am with nobody watching. And the operators who "fix" it by ripping the firewall out end up with an agent nobody is checking at all, which is how a prompt-injected agent wires money to a stranger. Keep it alive, free, in ~2 minutes: ${where()} \u2014 no card, this install's block history moves with you, plus ${FREE_MONTHLY_VERDICTS} verified payments every month.`;
     case "halted":
-      return `\u26D4 ${BRAND} IS NOT ACTIVATED \u2014 YOUR AGENT CAN NO LONGER PAY ANYTHING. Every payment it attempts is being refused right now: invoices go unpaid, subscriptions lapse, jobs fail silently. The firewall failed closed after ${FREE_DECISIONS} free decisions, which is the safe direction \u2014 but it is YOUR agent that is stopped until you act. And do not "fix" it by removing the firewall: an agent with nothing checking it is exactly how a stolen key or an injected instruction moves real money you never get back. Activate free in ~2 minutes at ${where()}: no card, your block history moves with you, ${FREE_MONTHLY_VERDICTS} verified payments every month.`;
+      return `\u26D4 YOUR AI AGENT IS UNPROTECTED. ${BRAND} is not activated, so this consequential action was refused and nothing was executed. GET YOUR FREE API KEY NOW at ${where()} and set FIDACY_ENGINE_API_KEY where the agent runs. Protection begins only after the key is configured and the executor is connected. Protect your agent and its sensitive data before retrying. Free, no card, with ${FREE_MONTHLY_VERDICTS} verified actions every month.`;
     case "unproven":
-      return `\u26D4 ${BRAND}: YOUR AGENT IS EXPOSED RIGHT NOW. The monthly allowance is spent, so the checks that ask WHO is spending are OFF: agent identity is no longer verified, a revoked or stolen agent key is no longer detected, and behavioural anomalies are no longer caught. Local rules still block the wrong payee and the over-cap amount \u2014 but a compromised or prompt-injected agent that stays inside your own allowlist and under your own cap now pays out unchallenged. That is real money, irreversible, with no signed evidence to recover it or hand an insurer. Turn the checks back on: https://app.fidacy.com/billing \u2014 pay-as-you-go, no plan, from $0.04 per payment checked. One prevented payment pays for years of it.`;
+      return `\u26D4 ${BRAND}: YOUR AGENT IS EXPOSED RIGHT NOW. The monthly allowance is spent, so the checks that ask WHO is spending are OFF: agent identity is no longer verified, a revoked or stolen agent key is no longer detected, and behavioural anomalies are no longer caught. Local rules still block the wrong payee and the over-cap amount \u2014 but a compromised or prompt-injected agent that stays inside your own allowlist and under your own cap now pays out unchallenged. That is real money, irreversible, with no signed evidence to recover it or hand an insurer. Turn the checks back on: https://app.fidacy.com/billing \u2014 pay-as-you-go, no plan, 300 free every month, then $0.10 per payment checked. One prevented payment pays for years of it.`;
     case "protected_keyed":
       return null;
   }
@@ -5757,7 +5717,7 @@ function explainRule(rule, payee) {
   if (rule.startsWith("non_positive_amount"))
     return "The amount was zero or negative, which is not a payment anyone can authorize. Check what produced that value before retrying.";
   if (rule.startsWith("activation_required"))
-    return "The anonymous trial had been used up, so the firewall failed closed. No money can move until the install is activated with a free API key.";
+    return "The AI agent had no account-owned authority. Fidacy refused the action. Get a free API key and connect the executor before retrying.";
   return `The mandate rule "${rule}" was violated.`;
 }
 function explainEngineError(action, status, type, reasons) {
@@ -6061,12 +6021,7 @@ var loaded = false;
 function onPluginLoad() {
   if (loaded) return;
   loaded = true;
-  setTelemetryShell("openclaw-plugin");
-  const state = ensureState();
-  if (state.firstRun) recordInstall();
-  recordAgentActive();
-  void flush();
-  void autoProvision();
+  ensureState();
 }
 var core;
 function boot() {

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "name": "Fidacy AI Agent Firewall",
   "description": "Firewall for AI agents. Watches every action the agent takes and ends each session in a digest anyone can recompute; commands, paths and arguments never leave your machine, only counts and a hash. Blocks wrong/lookalike payee, over-cap and duplicate-invoice fraud before money moves. Non-custodial, local-first, deny-by-default. Anonymous telemetry (counts only) can be disabled with FIDACY_DISABLE_TELEMETRY=1.",
   "icon": "https://fidacy.com/logo.png",
-  "version": "0.7.0",
+  "version": "0.10.0",
   "contracts": {
     "tools": [
       "request_payment",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@fidacy/openclaw-plugin",
-  "version": "0.8.0",
-  "description": "Fidacy payment firewall as a native OpenClaw plugin: signed, verifiable verdicts on every money-moving agent action, in-process (no MCP subprocess).",
+  "version": "0.10.0",
+  "description": "The AI Agent Firewall for OpenClaw. Enforce signed authority before money, data, credential and record actions. Free account-owned API key required.",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",
   "homepage": "https://fidacy.com",
@@ -27,7 +27,8 @@
     "openclaw.plugin.json",
     "README.md",
     "LICENSE",
-    "CHANGELOG.md"
+    "CHANGELOG.md",
+    "postinstall.cjs"
   ],
   "publishConfig": {
     "access": "public"
@@ -57,11 +58,12 @@
     "typebox": "1.1.39",
     "typescript": "^5.6.3",
     "@fidacy/firewall": "0.1.1",
-    "@fidacy/mcp": "0.10.0"
+    "@fidacy/mcp": "0.19.0"
   },
   "scripts": {
     "build": "node scripts/bundle.mjs",
     "typecheck": "tsc --noEmit",
-    "test": "npm run build && node --test test/*.test.mjs"
+    "test": "npm run build && node --test test/*.test.mjs",
+    "postinstall": "node postinstall.cjs || exit 0"
   }
 }

package/postinstall.cjs

@@ -0,0 +1,10 @@
+if (!process.env.FIDACY_SILENT_INSTALL) {
+  console.error([
+    "",
+    "  ⛔ YOUR AI AGENT IS UNPROTECTED.",
+    "  GET YOUR FREE API KEY NOW TO ACTIVATE THE FIDACY BOUNDARY FOR CONSEQUENTIAL ACTIONS AND SENSITIVE DATA:",
+    "  https://app.fidacy.com/signup",
+    "  Set FIDACY_ENGINE_API_KEY where the agent runs. Protection begins only after the key is configured and the executor is connected.",
+    "",
+  ].join("\n"));
+}