@finchagentic/mcp 4.0.0 → 4.2.0

package/dist/tools/memory.js

@@ -47,6 +47,7 @@ const zod_1 = require("zod");
 const crypto = __importStar(require("crypto"));
 const convex_js_1 = require("../convex.js");
 const public_url_js_1 = require("../public-url.js");
+const local_vault_js_1 = require("../local-vault.js");
 const local_memory_js_1 = require("../local-memory.js");
 // memory_extract and memory_consolidate used to run their own LLM calls here
 // (and a matching pair of Convex routes did the same server-side). Both are now
@@ -89,6 +90,18 @@ function lookupRecentHash(hash) {
     }
     return hit;
 }
+// memory_delete must purge this too - otherwise a deleted memory's hash stays
+// cached (up to an hour) and re-adding the exact same content within that
+// window gets silently skipped as a "duplicate" of an id that no longer
+// exists, when there is no longer any real duplicate to skip.
+function forgetRecentHashById(id) {
+    for (const [hash, entry] of recentHashCache) {
+        if (entry.id === id) {
+            recentHashCache.delete(hash);
+            break;
+        }
+    }
+}
 // Two-tier dedup lookup: in-process cache first (catches same-session
 // dupes during eventual-consistency window), then a list call (catches
 // cross-session dupes once they've been indexed). Returns null on any
@@ -101,7 +114,7 @@ async function findDuplicateMemory(hash) {
         const local = (0, local_memory_js_1.getLocalMemoryConfig)();
         const results = local
             ? await (0, local_memory_js_1.localMemoryList)(local, 50)
-            : ((await (0, convex_js_1.callConvex)("/memory/list", "POST", { n: 50 }))?.results ?? []);
+            : ((await (0, convex_js_1.callConvex)("/memory/list", "POST", { n: 50 }, "memory_list"))?.results ?? []);
         const match = results.find((r) => r.metadata?.contentHash === hash);
         if (!match)
             return null;
@@ -154,7 +167,7 @@ async function syncToSupermemory(content, metadata, sourceUrl) {
     };
     for (let attempt = 0; attempt <= SYNC_RETRY_DELAYS_MS.length; attempt++) {
         try {
-            await (0, convex_js_1.callConvex)("/memory/add", "POST", payload);
+            await (0, convex_js_1.callConvex)("/memory/add", "POST", payload, "memory_add");
             return;
         }
         catch (err) {
@@ -183,7 +196,7 @@ async function searchSupermemory(query, limit = 10) {
         const local = (0, local_memory_js_1.getLocalMemoryConfig)();
         if (local)
             return await (0, local_memory_js_1.localMemorySearch)(local, query, limit);
-        const data = await (0, convex_js_1.callConvex)("/memory/search", "POST", { q: query, n: limit });
+        const data = await (0, convex_js_1.callConvex)("/memory/search", "POST", { q: query, n: limit }, "memory_search");
         return data?.results ?? [];
     }
     catch {
@@ -195,7 +208,7 @@ async function searchSupermemory(query, limit = 10) {
 // directly without re-normalizing raw scores.
 async function lexicalSearch(query, limit = 30) {
     try {
-        const data = await (0, convex_js_1.callConvex)("/memory/lexical", "POST", { q: query, n: limit });
+        const data = await (0, convex_js_1.callConvex)("/memory/lexical", "POST", { q: query, n: limit }, "memory_search");
         const rows = (data?.results ?? []);
         return rows.map((r, idx) => ({
             id: r.id,
@@ -284,12 +297,13 @@ async function hybridMemorySearch(query, limit = 30) {
 exports.MEMORY_TOOLS = [
     {
         name: "memory_add",
-        description: "Add content to your Finch semantic memory - no setup needed, no extra API keys. " +
+        description: "Add content to your Finch memory - no setup needed, no extra API keys. " +
             "Unlike vault_save, memory_add is instant: no versioning, no type required. " +
-            "Use for notes, decisions, preferences, or anything you want to find later with natural language. " +
+            "Use for notes, decisions, preferences, or anything you want to find later. " +
             "Pass sourceUrl to fetch and index any web page, GitHub repo, or Notion page automatically - " +
-            "searchable in ~30s. Memory is indexed semantically - 'what did I say about ETH yield?' " +
-            "will find it even without exact keywords. " +
+            "searchable in ~30s. Retrieval is full-text (keyword) search, not embeddings - " +
+            "'what did I say about ETH yield?' finds notes containing those words or close variants, " +
+            "not unrelated phrasing with the same meaning. " +
             "Auto-deduplicates: identical content in your recent 50 memories is skipped (override with force:true).",
         inputSchema: {
             type: "object",
@@ -305,10 +319,11 @@ exports.MEMORY_TOOLS = [
     },
     {
         name: "memory_search",
-        description: "Hybrid memory search - fuses semantic (embedding) + lexical (full-text BM25) retrieval via Reciprocal Rank Fusion. " +
-            "Catches both meaning matches ('low risk crypto yield' → 'conservative DeFi strategies') and exact-token lookups (env var names, contract addresses, IDs) that pure semantic search misses. " +
-            "90-day time-decay weighting on top so recent precise notes outrank stale ones. " +
-            "Falls back to semantic-only for memories added before v3.24 (no lexical mirror).",
+        description: "Full-text (keyword) search over your stored memories, with 90-day time-decay weighting so " +
+            "recent notes outrank stale ones with similar wording. Good for exact-token lookups (env var " +
+            "names, contract addresses, IDs, specific phrases) - it does not understand meaning, so " +
+            "'low risk crypto yield' will not match a note phrased as 'conservative DeFi strategies' " +
+            "unless the words themselves overlap.",
         inputSchema: {
             type: "object",
             properties: {
@@ -320,9 +335,10 @@ exports.MEMORY_TOOLS = [
     },
     {
         name: "memory_context",
-        description: "Retrieve the most semantically relevant memories for a topic, formatted as AI-ready context. " +
+        description: "Retrieve the most relevant memories for a topic, formatted as AI-ready context. " +
             "Use at the start of research tasks to prime with everything stored about a topic. " +
-            "Uses vector search - finds semantically related content, not just exact keyword matches.",
+            "Uses full-text (keyword) search, not embeddings - phrase your topic with the words " +
+            "you expect were actually used when the memory was saved.",
         inputSchema: {
             type: "object",
             properties: {
@@ -334,7 +350,7 @@ exports.MEMORY_TOOLS = [
     },
     {
         name: "memory_profile",
-        description: "Show your semantic memory stats - total memories stored, your memory space, and connected sources. " +
+        description: "Show your memory stats - total memories stored, your memory space, and connected sources. " +
             "Useful for auditing what Finch knows about you.",
         inputSchema: {
             type: "object",
@@ -373,7 +389,7 @@ exports.MEMORY_TOOLS = [
     },
     {
         name: "memory_insight",
-        description: "Get a full intelligence report on any topic - combines semantic memory AND vault entries, " +
+        description: "Get a full intelligence report on any topic - combines memory AND vault entries, " +
             "then identifies knowledge gaps and suggests next actions. " +
             "Use this before starting any research or trade decision to see everything Finch already knows. " +
             "Returns: confidence level, what you know, coverage timeline, gaps, and recommended next steps.",
@@ -388,7 +404,7 @@ exports.MEMORY_TOOLS = [
     },
     {
         name: "memory_extract",
-        description: "Save discrete facts, preferences and decisions to semantic memory as individually searchable atoms " +
+        description: "Save discrete facts, preferences and decisions to memory as individually searchable atoms " +
             "instead of one wall of text. Two-pass, no API key needed. " +
             "PASS 1 — call with `text`: returns the text with the extraction rubric. " +
             "PASS 2 — call with `facts: [...]`: stores each fact separately, deduped. " +
@@ -407,26 +423,6 @@ exports.MEMORY_TOOLS = [
             required: [],
         },
     },
-    {
-        name: "memory_publish",
-        description: "IRREVERSIBLE, PUBLIC. Publish a memory snippet to the Memory Marketplace — visible to " +
-            "ALL Finch users at /memory-marketplace. Reversible with vault_unpublish, but only for " +
-            "future discovery — anyone who already read it keeps what they saw. " +
-            "Requires confirm: true. Never call this on the user's behalf without them explicitly asking " +
-            "to publish; re-read the content for anything private (keys, addresses, personal details) first. " +
-            "Saved as a public vault entry (type=memory).",
-        inputSchema: {
-            type: "object",
-            properties: {
-                title: { type: "string", description: "Short title for the memory (shown publicly in the marketplace)" },
-                content: { type: "string", description: "The memory content to share — this becomes PUBLIC" },
-                tags: { type: "array", items: { type: "string" }, description: "Optional tags (e.g. ['DeFi', 'Base', 'research'])" },
-                authorName: { type: "string", description: "Public display name. Defaults to \"Anonymous\" — do NOT pass a wallet address unless the user asks to be identified." },
-                confirm: { type: "boolean", description: "Must be true to publish. Guards against accidental public disclosure." },
-            },
-            required: ["title", "content", "confirm"],
-        },
-    },
     {
         name: "memory_consolidate",
         description: "Clean up fragmented knowledge after heavy research sessions. Two-pass, no API key needed. " +
@@ -560,7 +556,7 @@ async function handleMemoryTool(name, args) {
             const localAdd = (0, local_memory_js_1.getLocalMemoryConfig)();
             const data = localAdd
                 ? await (0, local_memory_js_1.localMemoryAdd)(localAdd, content, addMetadata, sourceUrl).catch((err) => ({ error: err.message }))
-                : await (0, convex_js_1.callConvex)("/memory/add", "POST", { content, metadata: addMetadata, ...(sourceUrl ? { sourceUrl } : {}) }).catch((err) => ({ error: err.message }));
+                : await (0, convex_js_1.callConvex)("/memory/add", "POST", { content, metadata: addMetadata, ...(sourceUrl ? { sourceUrl } : {}) }, "memory_add").catch((err) => ({ error: err.message }));
             if (data?.error)
                 return { content: [{ type: "text", text: `Error: ${data.error}` }], isError: true };
             // Cache the hash so an immediate second call with identical content
@@ -588,11 +584,12 @@ async function handleMemoryTool(name, args) {
             const { query, limit = 10 } = parsed.data;
             // Over-fetch so post-decay ranking still has enough material.
             const overfetch = Math.min(50, Math.max(limit * 2, 20));
-            // ─── Hybrid retrieval ────────────────────────────────────────────
-            // Fan out semantic (Supermemory embedding) + lexical (Convex full-text)
-            // in parallel, fuse via Reciprocal Rank Fusion. Falls back gracefully:
-            // if lexical is empty (e.g. user has only pre-v3.24 memories) the
-            // fused list equals semantic.
+            // ─── Retrieval ───────────────────────────────────────────────────
+            // Fan out two full-text queries (searchSupermemory and lexicalSearch -
+            // both call Convex full-text search under different names, there is no
+            // embedding step despite the "semantic"/"Supermemory" naming) in
+            // parallel, fuse via Reciprocal Rank Fusion so results present in both
+            // rank highest.
             const fused = await hybridMemorySearch(query, overfetch);
             const raw = fused;
             if (!raw.length)
@@ -697,7 +694,7 @@ async function handleMemoryTool(name, args) {
             const localProfileCfg = (0, local_memory_js_1.getLocalMemoryConfig)();
             const data = localProfileCfg
                 ? await (0, local_memory_js_1.localMemoryProfile)(localProfileCfg).catch(() => null)
-                : await (0, convex_js_1.callConvex)("/memory/profile", "GET").catch(() => null);
+                : await (0, convex_js_1.callConvex)("/memory/profile", "GET", undefined, "memory_profile").catch(() => null);
             const total = data?.total ?? 0;
             const status = data?.status ?? "unknown";
             const space = data?.space ?? "-";
@@ -705,7 +702,7 @@ async function handleMemoryTool(name, args) {
                 content: [{
                         type: "text",
                         text: [
-                            `🧠 **Finch Semantic Memory**`,
+                            `🧠 **Finch Memory**`,
                             ``,
                             `Space: \`${space}\``,
                             `Total memories: **${total}**`,
@@ -716,7 +713,7 @@ async function handleMemoryTool(name, args) {
                             `• memory_add (URL indexing) - ✅`,
                             `• Google Drive / Gmail / Notion - connect at finchagentic.com`,
                             ``,
-                            `**Capabilities:** Semantic search · Vector context · 81.6% LongMemEval`,
+                            `**Capabilities:** Full-text (keyword) search with 90-day time-decay ranking - not embeddings, no vector search.`,
                         ].join("\n"),
                     }],
                 structuredContent: buildMemoryProfile(data),
@@ -738,7 +735,7 @@ async function handleMemoryTool(name, args) {
                 }
             }
             else {
-                const data = await (0, convex_js_1.callConvex)("/memory/list", "POST", { n: limit, tag }).catch((err) => ({ error: err.message }));
+                const data = await (0, convex_js_1.callConvex)("/memory/list", "POST", { n: limit, tag }, "memory_list").catch((err) => ({ error: err.message }));
                 if (data?.error)
                     return { content: [{ type: "text", text: `Error: ${data.error}` }], isError: true };
                 results = data?.results ?? [];
@@ -777,10 +774,11 @@ async function handleMemoryTool(name, args) {
                 }
             }
             else {
-                const data = await (0, convex_js_1.callConvex)("/memory/delete", "POST", { id: parsed.data.id }).catch((err) => ({ error: err.message }));
+                const data = await (0, convex_js_1.callConvex)("/memory/delete", "POST", { id: parsed.data.id }, "memory_delete").catch((err) => ({ error: err.message }));
                 if (data?.error)
                     return { content: [{ type: "text", text: `Error: ${data.error}` }], isError: true };
             }
+            forgetRecentHashById(parsed.data.id);
             return { content: [{ type: "text", text: `🗑️ Memory deleted: \`${parsed.data.id}\`` }] };
         }
         case "memory_insight": {
@@ -791,10 +789,15 @@ async function handleMemoryTool(name, args) {
             const memLimit = depth === "deep" ? 15 : depth === "quick" ? 5 : 8;
             // v3.25.1: hybrid retrieval for memory side (was semantic-only) so the
             // intelligence report surfaces exact-token matches alongside meaning
-            // matches. Vault side runs in parallel as before.
+            // matches. Vault side runs in parallel as before - but only against
+            // Convex when the vault isn't local; a local vault's topic string must
+            // never leave the machine, and this never checked that before.
+            const localVault = (0, local_vault_js_1.getLocalVaultConfig)();
             const [memResults, vaultData] = await Promise.all([
                 hybridMemorySearch(topic, memLimit),
-                (0, convex_js_1.callConvex)(`/vault/search?q=${encodeURIComponent(topic)}&limit=6`, "GET", undefined, "memory_insight").catch(() => ({ results: [] })),
+                localVault
+                    ? Promise.resolve((0, local_vault_js_1.localVaultSearch)(localVault, topic, { limit: 6 }))
+                    : (0, convex_js_1.callConvex)(`/vault/search?q=${encodeURIComponent(topic)}&limit=6`, "GET", undefined, "vault_search").catch(() => ({ results: [] })),
             ]);
             const vaultResults = vaultData.results ?? [];
             const total = memResults.length + vaultResults.length;
@@ -905,7 +908,7 @@ async function handleMemoryTool(name, args) {
             const metaFor = () => ({ source, addedAt: Date.now() });
             const results = await Promise.allSettled(facts.map((fact) => localExtractCfg
                 ? (0, local_memory_js_1.localMemoryAdd)(localExtractCfg, fact, metaFor())
-                : (0, convex_js_1.callConvex)("/memory/add", "POST", { content: fact, metadata: metaFor() })));
+                : (0, convex_js_1.callConvex)("/memory/add", "POST", { content: fact, metadata: metaFor() }, "memory_add")));
             const saved = results.filter((r) => r.status === "fulfilled").length;
             const failed = results.length - saved;
             return {
@@ -934,7 +937,7 @@ async function handleMemoryTool(name, args) {
                 const meta = { title: `Consolidated: ${topic}`, source: "memory_consolidate", addedAt: Date.now() };
                 const saved = localConsolidateCfg
                     ? await (0, local_memory_js_1.localMemoryAdd)(localConsolidateCfg, summary, meta).catch((err) => ({ error: err.message }))
-                    : await (0, convex_js_1.callConvex)("/memory/add", "POST", { content: summary, metadata: meta }).catch((err) => ({ error: err.message }));
+                    : await (0, convex_js_1.callConvex)("/memory/add", "POST", { content: summary, metadata: meta }, "memory_add").catch((err) => ({ error: err.message }));
                 if (saved?.error) {
                     return { content: [{ type: "text", text: `Error saving consolidated memory: ${saved.error}` }], isError: true };
                 }
@@ -951,7 +954,11 @@ async function handleMemoryTool(name, args) {
                 };
             }
             // ── PASS 1: fetch every memory on the topic, numbered ───────────────
-            const rows = await searchSupermemory(topic, limit);
+            // Uses the same RRF-fused semantic+lexical retrieval as memory_search/
+            // memory_context - a plain single-source searchSupermemory() call here
+            // used to mean consolidation could miss memories only the lexical/BM25
+            // side would surface, while still claiming an exhaustive "N memories".
+            const rows = await hybridMemorySearch(topic, limit);
             if (rows.length === 0) {
                 return { content: [{ type: "text", text: `No memories found for "${topic}" to consolidate.` }], isError: true };
             }
@@ -985,61 +992,22 @@ async function handleMemoryTool(name, args) {
                     }],
             };
         }
-        case "memory_publish": {
-            const { title, content, tags, authorName, confirm } = args;
-            if (!title || !content)
-                return { content: [{ type: "text", text: "title and content are required" }], isError: true };
-            if (confirm !== true) {
-                return {
-                    content: [{
-                            type: "text",
-                            text: "Refusing to publish: this makes the content **public to all Finch users**. " +
-                                "It can be hidden again with `vault_unpublish`, but not un-read. Review the content " +
-                                "for keys, addresses and personal details, then pass `confirm: true`.",
-                        }],
-                    isError: true,
-                };
-            }
-            if (authorName && /^0x[a-fA-F0-9]{40}$/.test(authorName.trim())) {
-                return {
-                    content: [{
-                            type: "text",
-                            text: "Refusing to publish with a wallet address as the author name — that permanently " +
-                                "links your on-chain identity to this public entry. Use a handle, or omit authorName " +
-                                "to publish as \"Anonymous\".",
-                        }],
-                    isError: true,
-                };
-            }
-            const data = await (0, convex_js_1.callConvex)("/vault/save", "POST", {
-                type: "memory",
-                title,
-                content,
-                tags: tags ?? [],
-                isPublic: true,
-                authorName: authorName ?? "Anonymous",
-                commitMsg: "published to marketplace",
-            }, "vault_save");
-            if (data.error)
-                return { content: [{ type: "text", text: `Error: ${data.error}` }], isError: true };
-            return {
-                content: [{
-                        type: "text",
-                        text: [
-                            `🧠 **Memory Published**`,
-                            ``,
-                            `**Title:** ${title}`,
-                            `**Key:** \`${data.key}\``,
-                            `**Version:** ${data.version ?? 1}`,
-                            ``,
-                            `Now visible at the Memory Marketplace in the Finch app.`,
-                            ``,
-                            `Make it private again: \`vault_unpublish key: "${data.key}"\``,
-                            `That stops future discovery. Anyone who already read it keeps what they saw.`,
-                        ].join("\n"),
-                    }],
-            };
-        }
+        // memory_publish was removed - it was broken two levels deep. The tool
+        // called POST /vault/save with isPublic/authorName fields that the
+        // handler silently dropped (only type/title/content/key/contentType/
+        // agentId/tags/commitMsg/metadata are forwarded to vault.saveEntry - see
+        // app/convex/http.ts), so `published` was never actually set true; the
+        // real publishEntry mutation (POST /vault/publish) existed but this tool
+        // never called it. And even a correctly-wired publish would have done
+        // nothing observable: nothing anywhere reads the `published` field for
+        // cross-user browsing - no /vault/community route (dangling comment
+        // only, same pattern as the other removed routes), no backend query for
+        // it, no "Memory Marketplace" page in app/src. The tool asked users to
+        // accept an "IRREVERSIBLE, PUBLIC" risk for a marketplace that doesn't
+        // exist at any layer. Re-add only alongside building the actual
+        // discovery path: a community-browse query + route + UI that reads
+        // `published: true` entries. vault_unpublish is left in place - it's a
+        // correct, harmless no-op until then.
         default:
             return null;
     }

package/dist/tools/monitor.js

@@ -22,8 +22,8 @@ const MONITOR_INPUT_SCHEMA = {
 exports.MONITOR_TOOLS = [
     {
         name: "schedule_research",
-        description: "Schedule recurring autonomous research on any topic - runs on a cron schedule, saves findings to vault, " +
-            "and sends a Telegram notification. The agent runs completely on its own with no prompting needed. " +
+        description: "Schedule recurring autonomous research on any topic - runs on a cron schedule, saves findings to vault. " +
+            "The agent runs completely on its own with no prompting needed. " +
             "Requires TRIGGER_SECRET_KEY env var (trigger.dev). " +
             "Examples: daily morning briefing, weekly competitor analysis, hourly price alerts, monthly industry report.",
         inputSchema: MONITOR_INPUT_SCHEMA,
@@ -103,7 +103,7 @@ function buildMonitorList(schedules, configs = {}) {
     };
 }
 async function handleMonitorTool(name, args) {
-    if (name === "schedule_research" || name === "create_monitor") {
+    if (name === "schedule_research") {
         const parsed = CreateSchema.safeParse(args);
         if (!parsed.success)
             return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
@@ -117,7 +117,7 @@ async function handleMonitorTool(name, args) {
         // created 4× by an over-eager agent loop, which is what produced the
         // duplicate Telegram briefings users complained about.
         try {
-            const existingMonitors = await (0, convex_js_1.callConvex)("/vault/list", "POST", { type: "workflow", tags: ["monitor-config"] }, "list_monitors_for_dedup");
+            const existingMonitors = await (0, convex_js_1.callConvex)("/vault/list", "POST", { type: "workflow", tags: ["monitor-config"] }, "vault_list");
             const duplicates = (existingMonitors?.entries ?? []).filter((e) => {
                 try {
                     const cfg = JSON.parse(e.content ?? "{}");
@@ -192,7 +192,7 @@ async function handleMonitorTool(name, args) {
                     key: `monitor-config/${externalId}`,
                     agentId: "os",
                     tags: ["monitor-config"],
-                    commitMsg: "create_monitor config",
+                    commitMsg: "schedule_research config",
                 }, "vault_save");
             }
             catch {
@@ -210,7 +210,7 @@ async function handleMonitorTool(name, args) {
                             data.nextRun ? `⏭️ Next run: ${new Date(data.nextRun).toUTCString()}` : "",
                             ``,
                             configSaved
-                                ? `The agent will research "${topic}" on schedule, save findings to vault, and send a Telegram notification if configured.`
+                                ? `The agent will research "${topic}" on schedule and save findings to vault.`
                                 : `⚠️ Monitor schedule created but config save failed - the agent may use a default topic on first run. Try \`cancel_monitor\` and recreate.`,
                             `Use \`list_monitors\` to see all active monitors.`,
                         ].filter(Boolean).join("\n"),
@@ -240,7 +240,7 @@ async function handleMonitorTool(name, args) {
                 return {
                     content: [{
                             type: "text",
-                            text: `No active monitors.\n\nUse \`create_monitor\` to set up an autonomous agent that runs on a schedule.`,
+                            text: `No active monitors.\n\nUse \`schedule_research\` to set up an autonomous agent that runs on a schedule.`,
                         }],
                     structuredContent: buildMonitorList([]),
                 };

package/dist/tools/os.js

@@ -45,14 +45,14 @@ async function handleOsTool(name, args) {
             const localStatusCfg = (0, local_memory_js_1.getLocalMemoryConfig)();
             const memoryProfileCall = localStatusCfg
                 ? (0, local_memory_js_1.localMemoryProfile)(localStatusCfg)
-                : (0, convex_js_1.callConvex)("/memory/profile", "GET");
+                : (0, convex_js_1.callConvex)("/memory/profile", "GET", undefined, "memory_profile");
             const [tierResult, walletResult, memRes, autoRes, vaultRes, agentsRes] = await Promise.allSettled([
                 (0, token_gate_js_1.getTier)(),
                 (0, wallet_js_1.getOrCreateWallet)(),
                 memoryProfileCall,
                 (0, convex_js_1.callConvex)("/automations/list", "GET", undefined, "list_automations"),
-                (0, convex_js_1.callConvex)("/vault/list?type=research&limit=5", "GET", undefined, "finch_status"),
-                (0, convex_js_1.callConvex)("/vault/list?type=memory&limit=20", "GET", undefined, "finch_status"),
+                (0, convex_js_1.callConvex)("/vault/list?type=research&limit=5", "GET", undefined, "vault_list"),
+                (0, convex_js_1.callConvex)("/vault/list?type=memory&limit=20", "GET", undefined, "vault_list"),
             ]);
             const tier = tierResult.status === "fulfilled" ? tierResult.value : "basic";
             const wallet = walletResult.status === "fulfilled" ? walletResult.value : null;
@@ -138,7 +138,6 @@ async function handleOsTool(name, args) {
                 "FIRECRAWL_API_KEY": !!process.env.FIRECRAWL_API_KEY,
                 "FINCH_SESSION_TOKEN": !!process.env.FINCH_SESSION_TOKEN,
                 "FINCH_API_KEY": !!process.env.FINCH_API_KEY,
-                "TELEGRAM_BOT_TOKEN": !!process.env.TELEGRAM_BOT_TOKEN,
             };
             const localMemCfg = (0, local_memory_js_1.getLocalMemoryConfig)();
             const pingLocalMemory = async () => {
@@ -171,8 +170,13 @@ async function handleOsTool(name, args) {
                 hints.push(`→ No FIRECRAWL_API_KEY — deep_research falls back to Finch proxy (requires session token).`);
             if (!localMemCfg)
                 hints.push(`→ Memory tools use the Finch-hosted proxy. Run \`finch setup\` for free, self-hosted local memory.`);
-            else if (localSmStatus !== "ok")
+            else if (localMemCfg.kind === "supermemory" && localSmStatus !== "ok")
                 hints.push(`→ Local memory configured but ${localMemCfg.url} isn't reachable — memory tools will fail. Run \`npx -y supermemory local\`.`);
+            const localMemLabel = !localMemCfg
+                ? "not configured — run `finch setup`"
+                : localMemCfg.kind === "file"
+                    ? "file-based at ~/.finch/memory"
+                    : localSmStatus === "ok" ? `reachable at ${localMemCfg.url}` : `configured but unreachable at ${localMemCfg.url}`;
             const lines = [
                 `## 🩺 Finch Diagnostics`,
                 ``,
@@ -180,7 +184,7 @@ async function handleOsTool(name, args) {
                 `  ${statusIcon(convexStatus)}  Convex backend       ${convexStatus === "ok" ? "reachable" : "unreachable — check FINCH_CONVEX_URL"}`,
                 `  ${statusIcon(fcStatus)}  Firecrawl            ${fcStatus === "ok" ? "reachable" : fcStatus === "unconfigured" ? "no FIRECRAWL_API_KEY — deep_research will use proxy" : "unreachable"}`,
                 `  ${statusIcon(smStatus)}  Supermemory (cloud)  ${localMemCfg ? "not used — local memory active" : smStatus === "ok" ? "reachable" : "unreachable — memory tools may fail"}`,
-                `  ${statusIcon(localSmStatus)}  Supermemory (local)  ${localMemCfg ? (localSmStatus === "ok" ? `reachable at ${localMemCfg.url}` : `configured but unreachable at ${localMemCfg.url}`) : "not configured — run `finch setup`"}`,
+                `  ${statusIcon(localSmStatus)}  Local memory         ${localMemLabel}`,
                 ``,
                 `**API Keys configured:** _(none of the LLM keys are required — see below)_`,
                 ...Object.entries(envKeys).map(([k, v]) => `  ${v ? "✅" : "⚪"}  ${k}`),

package/dist/tools/packets.js

@@ -134,7 +134,7 @@ async function handlePacket(toolName, args) {
             content,
             contentType: "json",
             tags: ["packet", ...(tags ?? [])],
-        }, "packet_create");
+        }, "vault_save");
         return {
             content: [{
                     type: "text",
@@ -153,7 +153,7 @@ async function handlePacket(toolName, args) {
     }
     if (toolName === "packet_run") {
         const { name } = args;
-        const data = await (0, convex_js_1.callConvex)(`/vault/entry?key=${encodeURIComponent(packetKey(name))}`, "GET", undefined, "packet_run");
+        const data = await (0, convex_js_1.callConvex)(`/vault/entry?key=${encodeURIComponent(packetKey(name))}`, "GET", undefined, "vault_read");
         if (!data?.content || data?.error) {
             return {
                 content: [{ type: "text", text: `Packet \`${name}\` not found. Use \`packet_list\` to see available packets.` }],
@@ -245,8 +245,8 @@ async function handlePacket(toolName, args) {
     }
     if (toolName === "packet_share") {
         const { name, authorName, confirm } = args;
-        // Same bar as memory_publish and vault_delete: an action the user cannot
-        // fully take back needs an explicit second step, not a single call.
+        // Same bar as vault_delete: an action the user cannot fully take back
+        // needs an explicit second step, not a single call.
         if (confirm !== true) {
             return {
                 content: [{
@@ -271,7 +271,7 @@ async function handlePacket(toolName, args) {
         const data = await (0, convex_js_1.callConvex)("/vault/publish", "POST", {
             key: packetKey(name),
             authorName: authorName ?? "anonymous",
-        }, "packet_share");
+        }, "vault_publish");
         if (data.error)
             return { content: [{ type: "text", text: `Error: ${data.error}` }], isError: true };
         return {

package/dist/tools/research.js

@@ -68,7 +68,7 @@ async function firecrawlScrape(url) {
     // FIRECRAWL_API_KEY set either, in which case web_scrape silently falls
     // through to basicFetch below.
     try {
-        const data = await (0, convex_js_1.callConvex)("/research/firecrawl-scrape", "POST", { url }, "web_scrape_proxy", 25000);
+        const data = await (0, convex_js_1.callConvex)("/research/firecrawl-scrape", "POST", { url }, "web_scrape", 25000);
         if (data?.markdown)
             return data.markdown;
     }
@@ -149,7 +149,7 @@ async function handleResearchTool(name, args) {
         }
         if (!results) {
             try {
-                const data = await (0, convex_js_1.callConvex)("/research/firecrawl-search", "POST", { query, limit }, "web_search_proxy", 30000);
+                const data = await (0, convex_js_1.callConvex)("/research/firecrawl-search", "POST", { query, limit }, "web_search", 30000);
                 results = data?.results ?? [];
             }
             catch (err) {

package/dist/tools/rh-mcp.js

@@ -14,6 +14,7 @@ exports.dexTokenBest = dexTokenBest;
 exports.resolveTokenSmart = resolveTokenSmart;
 exports.buildRhAnalysis = buildRhAnalysis;
 exports.buildRhStocksList = buildRhStocksList;
+exports.rhProviderAsync = rhProviderAsync;
 exports.rhErc20Balance = rhErc20Balance;
 exports.rhPriceUsd = rhPriceUsd;
 exports.buildRhSafetyStructured = buildRhSafetyStructured;
@@ -33,6 +34,15 @@ exports.RH_EXPLORER = "https://robinhoodchain.blockscout.com";
 const NATIVE_ETH = "0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE";
 const RH_PERMIT2 = "0x000000000022D473030F116dDEE9F6B43aC78BA3";
 const RH_UNIVERSAL_ROUTER = "0x8876789976decbfcbbbe364623c63652db8c0904";
+/**
+ * Canonical Global Dollar (USDG) — RH chain's settlement stablecoin (same
+ * address as app/convex/_settlement.ts). Hardcoded rather than resolved via
+ * DexScreener ticker search: "USDG" is the exact symbol an imposter contract
+ * would spoof, and dexSearchByTicker ranks by pool liquidity, not authenticity
+ * — a fake pool with inflated liquidity could otherwise outrank the real token.
+ */
+const USDG_ADDRESS = "0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168";
+const USDG_DECIMALS = 6;
 /** ClawHood / Finch catalog (22 tokenized stocks — official "Robinhood Token" contracts). */
 exports.RH_STOCKS = [
     { address: "0xaf3d76f1834a1d425780943c99ea8a608f8a93f9", symbol: "AAPL", name: "Apple" },
@@ -336,6 +346,9 @@ async function resolveTokenSmart(input) {
     if (isEth(input))
         return { kind: "eth", address: NATIVE_ETH, symbol: "ETH", decimals: 18 };
     const t = input.trim();
+    if (t.toUpperCase() === "USDG") {
+        return { kind: "token", address: USDG_ADDRESS, symbol: "USDG", name: "Global Dollar", decimals: USDG_DECIMALS };
+    }
     // 1) catalog symbol fast-path (22 tokenized stocks, all 18-decimals)
     const cat = exports.RH_STOCKS.find((s) => s.symbol === t.toUpperCase());
     if (cat)
@@ -978,7 +991,16 @@ async function quoteRh(args) {
         throw new Error("RH swaps route ETH ↔ token. Buy a token with ETH, or sell a token for ETH.");
     }
     const sellAmount = parseHumanToWei(args.amount, from.decimals);
-    const slippageBps = Math.round((args.maxSlippagePct ?? 2.0) * 100);
+    const slippagePct = args.maxSlippagePct ?? 2.0;
+    // Same bound defi.ts's SwapSchema already enforces for Base swaps
+    // (.positive().max(50)) - this file had no equivalent check anywhere, so a
+    // negative or absurd value flowed straight through to the backend as
+    // slippageBps, both for direct rh_mcp_swap calls and for every unattended
+    // rh_orders_tick execution of a DCA/bracket order created with a bad value.
+    if (!(slippagePct > 0) || slippagePct > 50) {
+        throw new Error(`maxSlippagePct must be greater than 0 and at most 50 (got ${args.maxSlippagePct}).`);
+    }
+    const slippageBps = Math.round(slippagePct * 100);
     const result = await (0, convex_js_1.callConvex)("/mcp/rh/quote", "POST", {
         sellToken: from.address,
         buyToken: to.address,
@@ -987,7 +1009,7 @@ async function quoteRh(args) {
         slippageBps,
         fromSymbol: from.symbol,
         toSymbol: to.symbol,
-    }, "rh_mcp_estimate");
+    }, args.toolName ?? "rh_mcp_estimate");
     if (result.error)
         throw new Error(result.error);
     return { ...result, from, to, sellAmount, slippageBps };
@@ -1257,6 +1279,7 @@ async function handleRhMcpTool(name, args) {
                     amount: String(a.amount),
                     maxSlippagePct: a.maxSlippagePct,
                     taker: wallet.address,
+                    toolName: "rh_mcp_swap",
                 });
                 const quote = q.quote ?? q;
                 const tx = quote.transaction ?? {