@finchagentic/mcp 4.1.0 → 4.4.1

package/dist/tools/memory.js

@@ -47,6 +47,7 @@ const zod_1 = require("zod");
 const crypto = __importStar(require("crypto"));
 const convex_js_1 = require("../convex.js");
 const public_url_js_1 = require("../public-url.js");
+const local_vault_js_1 = require("../local-vault.js");
 const local_memory_js_1 = require("../local-memory.js");
 // memory_extract and memory_consolidate used to run their own LLM calls here
 // (and a matching pair of Convex routes did the same server-side). Both are now
@@ -89,6 +90,18 @@ function lookupRecentHash(hash) {
     }
     return hit;
 }
+// memory_delete must purge this too - otherwise a deleted memory's hash stays
+// cached (up to an hour) and re-adding the exact same content within that
+// window gets silently skipped as a "duplicate" of an id that no longer
+// exists, when there is no longer any real duplicate to skip.
+function forgetRecentHashById(id) {
+    for (const [hash, entry] of recentHashCache) {
+        if (entry.id === id) {
+            recentHashCache.delete(hash);
+            break;
+        }
+    }
+}
 // Two-tier dedup lookup: in-process cache first (catches same-session
 // dupes during eventual-consistency window), then a list call (catches
 // cross-session dupes once they've been indexed). Returns null on any
@@ -410,26 +423,6 @@ exports.MEMORY_TOOLS = [
             required: [],
         },
     },
-    {
-        name: "memory_publish",
-        description: "IRREVERSIBLE, PUBLIC. Publish a memory snippet to the Memory Marketplace — visible to " +
-            "ALL Finch users at /memory-marketplace. Reversible with vault_unpublish, but only for " +
-            "future discovery — anyone who already read it keeps what they saw. " +
-            "Requires confirm: true. Never call this on the user's behalf without them explicitly asking " +
-            "to publish; re-read the content for anything private (keys, addresses, personal details) first. " +
-            "Saved as a public vault entry (type=memory).",
-        inputSchema: {
-            type: "object",
-            properties: {
-                title: { type: "string", description: "Short title for the memory (shown publicly in the marketplace)" },
-                content: { type: "string", description: "The memory content to share — this becomes PUBLIC" },
-                tags: { type: "array", items: { type: "string" }, description: "Optional tags (e.g. ['DeFi', 'Base', 'research'])" },
-                authorName: { type: "string", description: "Public display name. Defaults to \"Anonymous\" — do NOT pass a wallet address unless the user asks to be identified." },
-                confirm: { type: "boolean", description: "Must be true to publish. Guards against accidental public disclosure." },
-            },
-            required: ["title", "content", "confirm"],
-        },
-    },
     {
         name: "memory_consolidate",
         description: "Clean up fragmented knowledge after heavy research sessions. Two-pass, no API key needed. " +
@@ -526,7 +519,7 @@ async function handleMemoryTool(name, args) {
         case "memory_add": {
             const parsed = AddSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { content, title, tags, sourceUrl, force } = parsed.data;
             // `sourceUrl` is not stored, it is fetched and indexed — by the local
             // memory server on the user's own machine when local mode is on. An
@@ -587,7 +580,7 @@ async function handleMemoryTool(name, args) {
         case "memory_search": {
             const parsed = SearchSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { query, limit = 10 } = parsed.data;
             // Over-fetch so post-decay ranking still has enough material.
             const overfetch = Math.min(50, Math.max(limit * 2, 20));
@@ -669,7 +662,7 @@ async function handleMemoryTool(name, args) {
         case "memory_context": {
             const parsed = ContextSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { topic, limit = 8 } = parsed.data;
             // v3.25.1: use hybrid retrieval so context loading picks up exact-token
             // matches (env var names, model IDs, contract addresses) that semantic-
@@ -709,7 +702,7 @@ async function handleMemoryTool(name, args) {
                 content: [{
                         type: "text",
                         text: [
-                            `🧠 **Finch Semantic Memory**`,
+                            `🧠 **Finch Memory**`,
                             ``,
                             `Space: \`${space}\``,
                             `Total memories: **${total}**`,
@@ -720,7 +713,7 @@ async function handleMemoryTool(name, args) {
                             `• memory_add (URL indexing) - ✅`,
                             `• Google Drive / Gmail / Notion - connect at finchagentic.com`,
                             ``,
-                            `**Capabilities:** Semantic search · Vector context · 81.6% LongMemEval`,
+                            `**Capabilities:** Full-text (keyword) search with 90-day time-decay ranking - not embeddings, no vector search.`,
                         ].join("\n"),
                     }],
                 structuredContent: buildMemoryProfile(data),
@@ -729,7 +722,7 @@ async function handleMemoryTool(name, args) {
         case "memory_list": {
             const parsed = ListSchema.safeParse(args ?? {});
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { limit = 20, tag } = parsed.data;
             const localList = (0, local_memory_js_1.getLocalMemoryConfig)();
             let results;
@@ -760,7 +753,7 @@ async function handleMemoryTool(name, args) {
         case "memory_delete": {
             const parsed = DeleteMemSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             if (args?.confirm !== true) {
                 return {
                     content: [{
@@ -785,20 +778,26 @@ async function handleMemoryTool(name, args) {
                 if (data?.error)
                     return { content: [{ type: "text", text: `Error: ${data.error}` }], isError: true };
             }
+            forgetRecentHashById(parsed.data.id);
             return { content: [{ type: "text", text: `🗑️ Memory deleted: \`${parsed.data.id}\`` }] };
         }
         case "memory_insight": {
             const parsed = InsightSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { topic, depth = "standard" } = parsed.data;
             const memLimit = depth === "deep" ? 15 : depth === "quick" ? 5 : 8;
             // v3.25.1: hybrid retrieval for memory side (was semantic-only) so the
             // intelligence report surfaces exact-token matches alongside meaning
-            // matches. Vault side runs in parallel as before.
+            // matches. Vault side runs in parallel as before - but only against
+            // Convex when the vault isn't local; a local vault's topic string must
+            // never leave the machine, and this never checked that before.
+            const localVault = (0, local_vault_js_1.getLocalVaultConfig)();
             const [memResults, vaultData] = await Promise.all([
                 hybridMemorySearch(topic, memLimit),
-                (0, convex_js_1.callConvex)(`/vault/search?q=${encodeURIComponent(topic)}&limit=6`, "GET", undefined, "vault_search").catch(() => ({ results: [] })),
+                localVault
+                    ? Promise.resolve((0, local_vault_js_1.localVaultSearch)(localVault, topic, { limit: 6 }))
+                    : (0, convex_js_1.callConvex)(`/vault/search?q=${encodeURIComponent(topic)}&limit=6`, "GET", undefined, "vault_search").catch(() => ({ results: [] })),
             ]);
             const vaultResults = vaultData.results ?? [];
             const total = memResults.length + vaultResults.length;
@@ -873,7 +872,7 @@ async function handleMemoryTool(name, args) {
         case "memory_extract": {
             const parsed = ExtractSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { text, facts, source = "extract" } = parsed.data;
             // ── PASS 1: hand the text back with the extraction rubric ───────────
             // Deciding what counts as a fact is judgement about *this user's*
@@ -930,7 +929,7 @@ async function handleMemoryTool(name, args) {
         case "memory_consolidate": {
             const parsed = ConsolidateSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { topic, limit = 12, summary } = parsed.data;
             const localConsolidateCfg = (0, local_memory_js_1.getLocalMemoryConfig)();
             // ── PASS 2: save the caller's merged version ────────────────────────
@@ -955,7 +954,11 @@ async function handleMemoryTool(name, args) {
                 };
             }
             // ── PASS 1: fetch every memory on the topic, numbered ───────────────
-            const rows = await searchSupermemory(topic, limit);
+            // Uses the same RRF-fused semantic+lexical retrieval as memory_search/
+            // memory_context - a plain single-source searchSupermemory() call here
+            // used to mean consolidation could miss memories only the lexical/BM25
+            // side would surface, while still claiming an exhaustive "N memories".
+            const rows = await hybridMemorySearch(topic, limit);
             if (rows.length === 0) {
                 return { content: [{ type: "text", text: `No memories found for "${topic}" to consolidate.` }], isError: true };
             }
@@ -989,61 +992,22 @@ async function handleMemoryTool(name, args) {
                     }],
             };
         }
-        case "memory_publish": {
-            const { title, content, tags, authorName, confirm } = args;
-            if (!title || !content)
-                return { content: [{ type: "text", text: "title and content are required" }], isError: true };
-            if (confirm !== true) {
-                return {
-                    content: [{
-                            type: "text",
-                            text: "Refusing to publish: this makes the content **public to all Finch users**. " +
-                                "It can be hidden again with `vault_unpublish`, but not un-read. Review the content " +
-                                "for keys, addresses and personal details, then pass `confirm: true`.",
-                        }],
-                    isError: true,
-                };
-            }
-            if (authorName && /^0x[a-fA-F0-9]{40}$/.test(authorName.trim())) {
-                return {
-                    content: [{
-                            type: "text",
-                            text: "Refusing to publish with a wallet address as the author name — that permanently " +
-                                "links your on-chain identity to this public entry. Use a handle, or omit authorName " +
-                                "to publish as \"Anonymous\".",
-                        }],
-                    isError: true,
-                };
-            }
-            const data = await (0, convex_js_1.callConvex)("/vault/save", "POST", {
-                type: "memory",
-                title,
-                content,
-                tags: tags ?? [],
-                isPublic: true,
-                authorName: authorName ?? "Anonymous",
-                commitMsg: "published to marketplace",
-            }, "vault_save");
-            if (data.error)
-                return { content: [{ type: "text", text: `Error: ${data.error}` }], isError: true };
-            return {
-                content: [{
-                        type: "text",
-                        text: [
-                            `🧠 **Memory Published**`,
-                            ``,
-                            `**Title:** ${title}`,
-                            `**Key:** \`${data.key}\``,
-                            `**Version:** ${data.version ?? 1}`,
-                            ``,
-                            `Now visible at the Memory Marketplace in the Finch app.`,
-                            ``,
-                            `Make it private again: \`vault_unpublish key: "${data.key}"\``,
-                            `That stops future discovery. Anyone who already read it keeps what they saw.`,
-                        ].join("\n"),
-                    }],
-            };
-        }
+        // memory_publish was removed - it was broken two levels deep. The tool
+        // called POST /vault/save with isPublic/authorName fields that the
+        // handler silently dropped (only type/title/content/key/contentType/
+        // agentId/tags/commitMsg/metadata are forwarded to vault.saveEntry - see
+        // app/convex/http.ts), so `published` was never actually set true; the
+        // real publishEntry mutation (POST /vault/publish) existed but this tool
+        // never called it. And even a correctly-wired publish would have done
+        // nothing observable: nothing anywhere reads the `published` field for
+        // cross-user browsing - no /vault/community route (dangling comment
+        // only, same pattern as the other removed routes), no backend query for
+        // it, no "Memory Marketplace" page in app/src. The tool asked users to
+        // accept an "IRREVERSIBLE, PUBLIC" risk for a marketplace that doesn't
+        // exist at any layer. Re-add only alongside building the actual
+        // discovery path: a community-browse query + route + UI that reads
+        // `published: true` entries. vault_unpublish is left in place - it's a
+        // correct, harmless no-op until then.
         default:
             return null;
     }

package/dist/tools/miroshark.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MIROSHARK_TOOLS = void 0;
 exports.handleMirosharkTool = handleMirosharkTool;
+const config_js_1 = require("../config.js");
 const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://befitting-porcupine-276.convex.site";
 exports.MIROSHARK_TOOLS = [
     {
@@ -50,7 +51,13 @@ exports.MIROSHARK_TOOLS = [
 ];
 // ── HTTP helpers ──────────────────────────────────────────────────────────────
 function authHeaders() {
-    const key = process.env.FINCH_API_KEY ?? process.env.FINCH_SESSION_TOKEN;
+    // Bug fix: this used to read only process.env.FINCH_API_KEY/
+    // FINCH_SESSION_TOKEN directly, bypassing getSavedToken()'s env-var-then-
+    // saved-config fallback that every other tool goes through (via
+    // callConvex/callConvexRaw in convex.ts). A user authenticated via
+    // `finch login` (writes to ~/.finch/config.json, not an env var) got a
+    // silent, unauthenticated request here while every other tool worked.
+    const key = process.env.FINCH_API_KEY ?? (0, config_js_1.getSavedToken)();
     return key ? { Authorization: `Bearer ${key}` } : {};
 }
 async function miroJson(path, method, body, timeoutMs = 90000) {

package/dist/tools/monitor.js

@@ -22,8 +22,8 @@ const MONITOR_INPUT_SCHEMA = {
 exports.MONITOR_TOOLS = [
     {
         name: "schedule_research",
-        description: "Schedule recurring autonomous research on any topic - runs on a cron schedule, saves findings to vault, " +
-            "and sends a Telegram notification. The agent runs completely on its own with no prompting needed. " +
+        description: "Schedule recurring autonomous research on any topic - runs on a cron schedule, saves findings to vault. " +
+            "The agent runs completely on its own with no prompting needed. " +
             "Requires TRIGGER_SECRET_KEY env var (trigger.dev). " +
             "Examples: daily morning briefing, weekly competitor analysis, hourly price alerts, monthly industry report.",
         inputSchema: MONITOR_INPUT_SCHEMA,
@@ -103,10 +103,10 @@ function buildMonitorList(schedules, configs = {}) {
     };
 }
 async function handleMonitorTool(name, args) {
-    if (name === "schedule_research" || name === "create_monitor") {
+    if (name === "schedule_research") {
         const parsed = CreateSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         const key = getKey();
         if (!key)
             return noKeyMsg();
@@ -192,7 +192,7 @@ async function handleMonitorTool(name, args) {
                     key: `monitor-config/${externalId}`,
                     agentId: "os",
                     tags: ["monitor-config"],
-                    commitMsg: "create_monitor config",
+                    commitMsg: "schedule_research config",
                 }, "vault_save");
             }
             catch {
@@ -210,7 +210,7 @@ async function handleMonitorTool(name, args) {
                             data.nextRun ? `⏭️ Next run: ${new Date(data.nextRun).toUTCString()}` : "",
                             ``,
                             configSaved
-                                ? `The agent will research "${topic}" on schedule, save findings to vault, and send a Telegram notification if configured.`
+                                ? `The agent will research "${topic}" on schedule and save findings to vault.`
                                 : `⚠️ Monitor schedule created but config save failed - the agent may use a default topic on first run. Try \`cancel_monitor\` and recreate.`,
                             `Use \`list_monitors\` to see all active monitors.`,
                         ].filter(Boolean).join("\n"),
@@ -240,7 +240,7 @@ async function handleMonitorTool(name, args) {
                 return {
                     content: [{
                             type: "text",
-                            text: `No active monitors.\n\nUse \`create_monitor\` to set up an autonomous agent that runs on a schedule.`,
+                            text: `No active monitors.\n\nUse \`schedule_research\` to set up an autonomous agent that runs on a schedule.`,
                         }],
                     structuredContent: buildMonitorList([]),
                 };
@@ -284,7 +284,7 @@ async function handleMonitorTool(name, args) {
     if (name === "cancel_monitor") {
         const parsed = CancelSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         if (args?.confirm !== true) {
             return {
                 content: [{

package/dist/tools/os.js

@@ -6,6 +6,7 @@ const convex_js_1 = require("../convex.js");
 const token_gate_js_1 = require("../token-gate.js");
 const wallet_js_1 = require("../wallet.js");
 const local_memory_js_1 = require("../local-memory.js");
+const config_js_1 = require("../config.js");
 const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://befitting-porcupine-276.convex.site";
 exports.OS_TOOLS = [
     {
@@ -138,7 +139,6 @@ async function handleOsTool(name, args) {
                 "FIRECRAWL_API_KEY": !!process.env.FIRECRAWL_API_KEY,
                 "FINCH_SESSION_TOKEN": !!process.env.FINCH_SESSION_TOKEN,
                 "FINCH_API_KEY": !!process.env.FINCH_API_KEY,
-                "TELEGRAM_BOT_TOKEN": !!process.env.TELEGRAM_BOT_TOKEN,
             };
             const localMemCfg = (0, local_memory_js_1.getLocalMemoryConfig)();
             const pingLocalMemory = async () => {
@@ -200,13 +200,18 @@ async function handleOsTool(name, args) {
             if (!message)
                 return { content: [{ type: "text", text: "Error: message is required" }] };
             try {
-                const res = await fetch(`${CONVEX_SITE}/noel/shell/chat`, {
+                // Bug fix: this used to read only process.env.FINCH_SESSION_TOKEN/
+                // FINCH_API_KEY directly, bypassing getSavedToken()'s fallback to
+                // ~/.finch/config.json - a user authenticated via `finch login`
+                // (not an env var) silently sent an empty Authorization header here
+                // while every other tool (which goes through callConvex) worked.
+                const res = await fetch(`${CONVEX_SITE}/finch/shell/chat`, {
                     method: "POST",
                     headers: {
                         "Content-Type": "application/json",
-                        "Authorization": `Bearer ${process.env.FINCH_SESSION_TOKEN ?? process.env.FINCH_API_KEY ?? ""}`,
+                        "Authorization": `Bearer ${(0, config_js_1.getSavedToken)() ?? process.env.FINCH_API_KEY ?? ""}`,
                     },
-                    body: JSON.stringify({ message, agentId: agent_id ?? "noel-default" }),
+                    body: JSON.stringify({ message, agentId: agent_id ?? "finch-default" }),
                     signal: AbortSignal.timeout(60000),
                 });
                 if (!res.ok) {

package/dist/tools/packets.js

@@ -245,8 +245,8 @@ async function handlePacket(toolName, args) {
     }
     if (toolName === "packet_share") {
         const { name, authorName, confirm } = args;
-        // Same bar as memory_publish and vault_delete: an action the user cannot
-        // fully take back needs an explicit second step, not a single call.
+        // Same bar as vault_delete: an action the user cannot fully take back
+        // needs an explicit second step, not a single call.
         if (confirm !== true) {
             return {
                 content: [{

package/dist/tools/research-chain.js

@@ -147,7 +147,7 @@ async function handleResearchChain(name, args) {
         return null;
     const parsed = InputSchema.safeParse(args);
     if (!parsed.success) {
-        return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+        return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
     }
     const { startKey } = parsed.data;
     const maxDepth = parsed.data.maxDepth ?? 8;

package/dist/tools/research-compare.js

@@ -154,7 +154,7 @@ async function handleResearchCompare(name, args) {
         return null;
     const parsed = InputSchema.safeParse(args);
     if (!parsed.success) {
-        return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+        return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
     }
     const { keyA, keyB, focus, comparison } = parsed.data;
     const saveToVault = parsed.data.saveToVault ?? true;

package/dist/tools/research.js

@@ -100,7 +100,7 @@ async function handleResearchTool(name, args) {
     if (name === "web_scrape") {
         const parsed = ScrapeSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         const { url, focus } = parsed.data;
         const unsafe = await (0, public_url_js_1.assertPublicUrl)(url);
         if (unsafe) {
@@ -120,7 +120,7 @@ async function handleResearchTool(name, args) {
     if (name === "web_search") {
         const parsed = SearchSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         const { query, limit = 5 } = parsed.data;
         // Priority 1: user BYOK direct path. Priority 2: Finch proxy.
         // Same data shape so the formatting code below is identical for both.

package/dist/tools/rh-bridge.js

@@ -94,7 +94,7 @@ async function handleBridgeTool(name, args) {
         return null;
     const parsed = Schema.safeParse(args);
     if (!parsed.success) {
-        return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+        return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
     }
     const wanted = parsed.data.ticker?.trim().toUpperCase();
     const minGap = parsed.data.minGapPct ?? 0;

package/dist/tools/rh-mcp.js

@@ -14,6 +14,7 @@ exports.dexTokenBest = dexTokenBest;
 exports.resolveTokenSmart = resolveTokenSmart;
 exports.buildRhAnalysis = buildRhAnalysis;
 exports.buildRhStocksList = buildRhStocksList;
+exports.rhProviderAsync = rhProviderAsync;
 exports.rhErc20Balance = rhErc20Balance;
 exports.rhPriceUsd = rhPriceUsd;
 exports.buildRhSafetyStructured = buildRhSafetyStructured;
@@ -29,6 +30,20 @@ exports.RH_RPC = process.env.ROBINHOOD_RPC_URL ??
     process.env.RH_RPC_URL ??
     process.env.FINCH_RH_RPC_URL ??
     "https://rpc.mainnet.chain.robinhood.com";
+/** Host only, for display in tool output - never the full RH_RPC. An
+ *  operator can point ROBINHOOD_RPC_URL/RH_RPC_URL at a keyed provider
+ *  (same pattern app/convex just fixed for its own Alchemy-key leak risk -
+ *  a `.../v2/<key>`-style URL echoed verbatim into a tool response lands the
+ *  key in chat transcripts/client logs). Falls back to the raw value only
+ *  if it isn't a parseable URL, which should never happen in practice. */
+function rhRpcDisplay() {
+    try {
+        return new URL(exports.RH_RPC).host;
+    }
+    catch {
+        return "(configured)";
+    }
+}
 exports.RH_EXPLORER = "https://robinhoodchain.blockscout.com";
 const NATIVE_ETH = "0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE";
 const RH_PERMIT2 = "0x000000000022D473030F116dDEE9F6B43aC78BA3";
@@ -753,7 +768,7 @@ async function fetchRhBalances(address) {
     else
         for (const h of holdings)
             lines.push(`- ${h.symbol}: ${h.bal}  \`${h.address}\``);
-    lines.push(``, `_RPC: ${exports.RH_RPC}_`, `_Explorer: ${exports.RH_EXPLORER}/address/${address}_`);
+    lines.push(``, `_RPC: ${rhRpcDisplay()}_`, `_Explorer: ${exports.RH_EXPLORER}/address/${address}_`);
     return lines.join("\n");
 }
 // ─── Onchain safety scan (Blockscout + DexScreener; free, no LLM) ─────────────
@@ -990,7 +1005,16 @@ async function quoteRh(args) {
         throw new Error("RH swaps route ETH ↔ token. Buy a token with ETH, or sell a token for ETH.");
     }
     const sellAmount = parseHumanToWei(args.amount, from.decimals);
-    const slippageBps = Math.round((args.maxSlippagePct ?? 2.0) * 100);
+    const slippagePct = args.maxSlippagePct ?? 2.0;
+    // Same bound defi.ts's SwapSchema already enforces for Base swaps
+    // (.positive().max(50)) - this file had no equivalent check anywhere, so a
+    // negative or absurd value flowed straight through to the backend as
+    // slippageBps, both for direct rh_mcp_swap calls and for every unattended
+    // rh_orders_tick execution of a DCA/bracket order created with a bad value.
+    if (!(slippagePct > 0) || slippagePct > 50) {
+        throw new Error(`maxSlippagePct must be greater than 0 and at most 50 (got ${args.maxSlippagePct}).`);
+    }
+    const slippageBps = Math.round(slippagePct * 100);
     const result = await (0, convex_js_1.callConvex)("/mcp/rh/quote", "POST", {
         sellToken: from.address,
         buyToken: to.address,
@@ -999,7 +1023,7 @@ async function quoteRh(args) {
         slippageBps,
         fromSymbol: from.symbol,
         toSymbol: to.symbol,
-    }, "rh_mcp_estimate");
+    }, args.toolName ?? "rh_mcp_estimate");
     if (result.error)
         throw new Error(result.error);
     return { ...result, from, to, sellAmount, slippageBps };
@@ -1167,7 +1191,7 @@ async function handleRhMcpTool(name, args) {
                 "",
                 `**Wallet**: \`${addr ?? "(not configured — run finch login / first tool)"}\``,
                 `**ETH on RH (gas)**: ${eth}`,
-                `**RPC**: ${exports.RH_RPC}`,
+                `**RPC**: ${rhRpcDisplay()}`,
                 `**Explorer**: ${exports.RH_EXPLORER}`,
                 `**Catalog**: ${exports.RH_STOCKS.length} stocks (AAPL…USAR) + any RH-chain crypto via DexScreener`,
                 "",
@@ -1269,6 +1293,7 @@ async function handleRhMcpTool(name, args) {
                     amount: String(a.amount),
                     maxSlippagePct: a.maxSlippagePct,
                     taker: wallet.address,
+                    toolName: "rh_mcp_swap",
                 });
                 const quote = q.quote ?? q;
                 const tx = quote.transaction ?? {