@finchagentic/mcp 4.2.0 → 4.5.0

package/dist/tools/automation.js

@@ -44,10 +44,17 @@ function categorizeError(err) {
 exports.AUTOMATION_TOOLS = [
     {
         name: "create_automation",
-        description: "Create an automation in plain English. Supports DCA, price alerts, conditional buys/sells, and recurring market updates.",
+        description: "Create an automation in plain English. Supports DCA, price alerts, conditional buys/sells, and recurring market updates. " +
+            "A swap/send automation arms UNATTENDED, REPEATING real fund movement (a backend cron fires it going forward, not just once) - " +
+            "requires two calls. First call WITHOUT confirm: returns a preview of the parsed trigger/action, nothing is created yet. " +
+            "Show that preview to the user in plain language and get explicit confirmation. Only then call again with the SAME rawInput " +
+            "and confirm: true to actually create it. Never pass confirm: true on the first call.",
         inputSchema: {
             type: "object",
-            properties: { rawInput: { type: "string", description: "Plain English description of the automation" } },
+            properties: {
+                rawInput: { type: "string", description: "Plain English description of the automation" },
+                confirm: { type: "boolean", description: "Must be true to actually create. Omit or false to get a preview only - nothing is created." },
+            },
             required: ["rawInput"],
         },
     },
@@ -108,7 +115,7 @@ exports.AUTOMATION_TOOLS = [
         },
     },
 ];
-const CreateAutomationSchema = zod_1.z.object({ rawInput: zod_1.z.string().min(1) });
+const CreateAutomationSchema = zod_1.z.object({ rawInput: zod_1.z.string().min(1), confirm: zod_1.z.boolean().optional() });
 const AutomationIdSchema = zod_1.z.object({ automationId: zod_1.z.string().min(1) });
 const RunAutomationSchema = zod_1.z.object({ automationId: zod_1.z.string().min(1), dryRun: zod_1.z.boolean().optional() });
 const RunsSchema = zod_1.z.object({ automationId: zod_1.z.string().min(1), limit: zod_1.z.number().int().min(1).max(100).optional() });
@@ -148,15 +155,44 @@ async function handleAutomationTool(name, args) {
             const parsed = CreateAutomationSchema.safeParse(args);
             if (!parsed.success)
                 return { content: [{ type: "text", text: `Invalid input: rawInput ${parsed.error.issues[0].message}` }], isError: true };
-            const data = await (0, convex_js_1.callConvex)("/automations/create", "POST", { rawInput: parsed.data.rawInput }, "create_automation");
-            if (!data.success)
-                return { content: [{ type: "text", text: `Failed: ${data.error}` }], isError: true };
             const triggerLabel = {
                 schedule: "⏰ Schedule", price_drop_pct: "📉 Price Drop %", price_rise_pct: "📈 Price Rise %",
                 price_below: "⬇️ Price Below", price_above: "⬆️ Price Above",
                 dominance_below: "📊 Dominance Below", dominance_above: "📊 Dominance Above",
             };
             const actionLabel = { swap: "💱 Swap", send: "📤 Send", alert: "🔔 Alert" };
+            // Not confirmed yet - dry-run only (backend validates/parses but does
+            // NOT create anything - see http.ts's /automations/create dryRun
+            // branch). A swap/send automation arms unattended, repeating real
+            // fund movement, so it needs a real preview + explicit confirm, same
+            // shape as base_mcp_swap/send - not created blind on the first call.
+            if (parsed.data.confirm !== true) {
+                const preview = await (0, convex_js_1.callConvex)("/automations/create", "POST", { rawInput: parsed.data.rawInput, dryRun: true }, "create_automation");
+                if (!preview.success)
+                    return { content: [{ type: "text", text: `Could not parse this automation: ${preview.error}` }], isError: true };
+                const moneyMoving = preview.actionType === "swap" || preview.actionType === "send";
+                return {
+                    content: [{
+                            type: "text",
+                            text: [
+                                `**Preview - nothing created yet**`, ``,
+                                `**Trigger:** ${triggerLabel[preview.triggerType] ?? preview.triggerType}`,
+                                `**Action:** ${actionLabel[preview.actionType] ?? preview.actionType}`,
+                                preview.fromToken && preview.toToken ? `**Swap:** ${preview.amountUsd ? `$${preview.amountUsd}` : `${preview.amountPct}%`} ${preview.fromToken} → ${preview.toToken}` : ``,
+                                preview.toAddress ? `**Send:** ${preview.amountUsd ? `$${preview.amountUsd}` : ""} ${preview.fromToken ?? ""} to \`${preview.toAddress}\`` : ``,
+                                preview.priceToken ? `**Price condition:** ${preview.priceToken} ${preview.triggerType?.includes("above") ? "above" : "below"} ${preview.priceThreshold}` : ``,
+                                preview.priceBaselineUsd ? `**Baseline price:** $${Number(preview.priceBaselineUsd).toLocaleString()}` : ``,
+                                moneyMoving
+                                    ? `\n⚠️ This will move real funds, repeatedly, unattended, until paused or deleted. Show this preview to the user and get explicit confirmation.`
+                                    : `\nThis is alert-only - it will not move funds.`,
+                                `\nIf this is correct, call create_automation again with the same rawInput and confirm: true.`,
+                            ].filter(Boolean).join("\n"),
+                        }],
+                };
+            }
+            const data = await (0, convex_js_1.callConvex)("/automations/create", "POST", { rawInput: parsed.data.rawInput }, "create_automation");
+            if (!data.success)
+                return { content: [{ type: "text", text: `Failed: ${data.error}` }], isError: true };
             return {
                 content: [{
                         type: "text",
@@ -265,7 +301,11 @@ async function handleAutomationTool(name, args) {
             if (!parsed.success)
                 return { content: [{ type: "text", text: `Invalid input: automationId ${parsed.error.issues[0].message}` }], isError: true };
             const { automationId, dryRun } = parsed.data;
-            const data = await (0, convex_js_1.callConvex)("/automations/run", "POST", { automationId, dryRun: !!dryRun }, "run_automation");
+            // A real (non-dryRun) trigger moves funds if the automation is a
+            // swap/send - noRetry so a lost response never risks re-sending the
+            // same trigger. A dryRun call does nothing server-side, so retrying
+            // it is harmless and stays on the default retry behavior.
+            const data = await (0, convex_js_1.callConvex)("/automations/run", "POST", { automationId, dryRun: !!dryRun }, "run_automation", 30000, !dryRun);
             if (data.error) {
                 const cat = categorizeError(data.error);
                 return {

package/dist/tools/coder.js

@@ -52,7 +52,7 @@ async function handleCoderTool(name, args) {
         return null;
     const p = AuditSchema.safeParse(args);
     if (!p.success)
-        return err(`Invalid input: ${p.error.message}`);
+        return err(p.error.issues[0].message);
     const { code, focus = [] } = p.data;
     // The pattern scan grounds the review. Without it an audit is pure model
     // opinion — someone might trust "looks safe" with nothing behind it.

package/dist/tools/deep-research.js

@@ -915,7 +915,7 @@ async function handleDeepResearch(name, args, onProgress) {
         return null;
     const parsed = InputSchema.safeParse(args);
     if (!parsed.success) {
-        return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+        return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
     }
     const { query, focus, continueFrom } = parsed.data;
     const clientQueries = parsed.data.queries ?? [];

package/dist/tools/defi.js

@@ -99,7 +99,7 @@ async function handleDefiTool(name, args) {
         case "estimate_swap": {
             const parsed = SwapSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${String(parsed.error.issues[0].path[0])} ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${String(parsed.error.issues[0].path[0])}: ${parsed.error.issues[0].message}` }], isError: true };
             const { fromToken, toToken, amount, maxSlippagePct, maxPriceImpactPct } = parsed.data;
             const slippageLimit = maxSlippagePct ?? DEFAULT_MAX_SLIPPAGE_PCT;
             const impactLimit = maxPriceImpactPct ?? DEFAULT_MAX_PRICE_IMPACT_PCT;
@@ -137,7 +137,7 @@ async function handleDefiTool(name, args) {
         case "swap_tokens": {
             const parsed = SwapSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${String(parsed.error.issues[0].path[0])} ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${String(parsed.error.issues[0].path[0])}: ${parsed.error.issues[0].message}` }], isError: true };
             const { fromToken, toToken, amount, maxSlippagePct, maxPriceImpactPct } = parsed.data;
             const slippageLimit = maxSlippagePct ?? DEFAULT_MAX_SLIPPAGE_PCT;
             const impactLimit = maxPriceImpactPct ?? DEFAULT_MAX_PRICE_IMPACT_PCT;
@@ -190,7 +190,7 @@ async function handleDefiTool(name, args) {
         case "send_token": {
             const parsed = SendSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${String(parsed.error.issues[0].path[0])} ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${String(parsed.error.issues[0].path[0])}: ${parsed.error.issues[0].message}` }], isError: true };
             const { token, toAddress, amount } = parsed.data;
             const wallet = await (0, wallet_js_1.getOrCreateWallet)();
             const result = await (0, convex_js_1.callConvex)("/mcp/defi/send", "POST", parsed.data, "send_token");
@@ -225,7 +225,7 @@ async function handleDefiTool(name, args) {
         case "get_defi_yields": {
             const parsed = DefiYieldsSchema.safeParse(args ?? {});
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { token, minApy = 1, limit = 20 } = parsed.data;
             let pools;
             try {

package/dist/tools/equity.js

@@ -183,7 +183,7 @@ async function handleEquityTool(name, args) {
         return null;
     const parsed = Schema.safeParse(args);
     if (!parsed.success) {
-        return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+        return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
     }
     const ticker = parsed.data.ticker.trim().toUpperCase();
     const periods = parsed.data.periods ?? 6;

package/dist/tools/events.js

@@ -97,7 +97,7 @@ async function handleEventTool(name, args) {
         return null;
     const parsed = Schema.safeParse(args);
     if (!parsed.success) {
-        return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+        return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
     }
     const ticker = parsed.data.ticker.trim().toUpperCase();
     const limit = parsed.data.limit ?? 15;

package/dist/tools/github.js

@@ -1,4 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.GITHUB_TOOLS = void 0;
 exports.buildRepoList = buildRepoList;
@@ -9,13 +42,30 @@ exports.buildIssueDetail = buildIssueDetail;
 exports.buildCommitList = buildCommitList;
 exports.buildCodeSearch = buildCodeSearch;
 exports.handleGithubTool = handleGithubTool;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
 const GH_BASE = "https://api.github.com";
+// Was hardcoded "finch-mcp/3.28.0" - stale the moment package.json's version
+// moved on (already 4.4.0 locally as of this fix), unlike server.ts/cli.ts/
+// index.ts which all read it from package.json at runtime per this repo's
+// own stated policy (see CLAUDE.md's mcp-server note). __dirname here is
+// dist/tools/ once built, so two levels up reaches the package root - one
+// level deeper than server.ts's own copy of this pattern (dist/).
+const PKG_VERSION = (() => {
+    try {
+        const raw = fs.readFileSync(path.join(__dirname, "..", "..", "package.json"), "utf8");
+        return JSON.parse(raw).version ?? "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+})();
 function ghHeaders() {
     const token = process.env.GITHUB_TOKEN;
     const h = {
         Accept: "application/vnd.github.v3+json",
         "X-GitHub-Api-Version": "2022-11-28",
-        "User-Agent": "finch-mcp/3.28.0",
+        "User-Agent": `finch-mcp/${PKG_VERSION}`,
     };
     if (token)
         h.Authorization = `Bearer ${token}`;

package/dist/tools/insider.js

@@ -116,7 +116,7 @@ async function handleInsiderTool(name, args) {
         return null;
     const parsed = Schema.safeParse(args);
     if (!parsed.success) {
-        return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+        return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
     }
     const ticker = parsed.data.ticker.trim().toUpperCase();
     const limit = parsed.data.limit ?? 15;

package/dist/tools/insight.js

@@ -451,7 +451,7 @@ async function handleInsightTool(name, args) {
     if (name === "market_thesis") {
         const parsed = MarketThesisSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         const { token, context } = parsed.data;
         const priceData = await fetchVerifiedPrice(token);
         // Hard guard: without a verified live price, refuse to generate. Better
@@ -519,7 +519,7 @@ async function handleInsightTool(name, args) {
     if (name === "trade_plan") {
         const parsed = TradePlanSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         const { token, side = "long", portfolioSize, riskTolerance = "moderate", timeframe } = parsed.data;
         const priceData = await fetchVerifiedPrice(token);
         // Hard guard: trade plans without verified live price = entry/SL/TP

package/dist/tools/market.js

@@ -293,7 +293,7 @@ async function handleMarketTool(name, args) {
         case "get_market_data": {
             const parsed = GetMarketDataSchema.safeParse(args ?? {});
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { token } = parsed.data;
             if (token) {
                 const resolved = await resolveTokenId(token);
@@ -349,7 +349,7 @@ async function handleMarketTool(name, args) {
         case "get_token_data": {
             const parsed = GetTokenDataSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const q = parsed.data.question;
             // Try to extract a known symbol first, then fall back to search
             const upperQ = q.toUpperCase();
@@ -381,7 +381,7 @@ async function handleMarketTool(name, args) {
         case "compare_tokens": {
             const parsed = CompareTokensSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const syms = parsed.data.tokens.map(t => t.toUpperCase());
             const ids = syms.map(s => SYMBOL_TO_ID[s]).filter(Boolean);
             const unknown = syms.filter(s => !SYMBOL_TO_ID[s]);
@@ -449,7 +449,7 @@ async function handleMarketTool(name, args) {
         case "token_history": {
             const parsed = TokenHistorySchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const days = parsed.data.days ?? 7;
             const resolved = await resolveTokenId(parsed.data.token);
             if (!resolved)
@@ -498,7 +498,7 @@ async function handleMarketTool(name, args) {
         case "get_base_token_data": {
             const parsed = GetBaseTokenDataSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const address = parsed.data.tokenAddress.toLowerCase();
             const [pair, coingeckoId] = await Promise.all([
                 fetchDexscreenerBaseToken(address),

package/dist/tools/memory.js

@@ -519,7 +519,7 @@ async function handleMemoryTool(name, args) {
         case "memory_add": {
             const parsed = AddSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { content, title, tags, sourceUrl, force } = parsed.data;
             // `sourceUrl` is not stored, it is fetched and indexed — by the local
             // memory server on the user's own machine when local mode is on. An
@@ -580,7 +580,7 @@ async function handleMemoryTool(name, args) {
         case "memory_search": {
             const parsed = SearchSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { query, limit = 10 } = parsed.data;
             // Over-fetch so post-decay ranking still has enough material.
             const overfetch = Math.min(50, Math.max(limit * 2, 20));
@@ -662,7 +662,7 @@ async function handleMemoryTool(name, args) {
         case "memory_context": {
             const parsed = ContextSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { topic, limit = 8 } = parsed.data;
             // v3.25.1: use hybrid retrieval so context loading picks up exact-token
             // matches (env var names, model IDs, contract addresses) that semantic-
@@ -722,7 +722,7 @@ async function handleMemoryTool(name, args) {
         case "memory_list": {
             const parsed = ListSchema.safeParse(args ?? {});
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { limit = 20, tag } = parsed.data;
             const localList = (0, local_memory_js_1.getLocalMemoryConfig)();
             let results;
@@ -753,7 +753,7 @@ async function handleMemoryTool(name, args) {
         case "memory_delete": {
             const parsed = DeleteMemSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             if (args?.confirm !== true) {
                 return {
                     content: [{
@@ -784,7 +784,7 @@ async function handleMemoryTool(name, args) {
         case "memory_insight": {
             const parsed = InsightSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { topic, depth = "standard" } = parsed.data;
             const memLimit = depth === "deep" ? 15 : depth === "quick" ? 5 : 8;
             // v3.25.1: hybrid retrieval for memory side (was semantic-only) so the
@@ -872,7 +872,7 @@ async function handleMemoryTool(name, args) {
         case "memory_extract": {
             const parsed = ExtractSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { text, facts, source = "extract" } = parsed.data;
             // ── PASS 1: hand the text back with the extraction rubric ───────────
             // Deciding what counts as a fact is judgement about *this user's*
@@ -929,7 +929,7 @@ async function handleMemoryTool(name, args) {
         case "memory_consolidate": {
             const parsed = ConsolidateSchema.safeParse(args);
             if (!parsed.success)
-                return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
             const { topic, limit = 12, summary } = parsed.data;
             const localConsolidateCfg = (0, local_memory_js_1.getLocalMemoryConfig)();
             // ── PASS 2: save the caller's merged version ────────────────────────

package/dist/tools/miroshark.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MIROSHARK_TOOLS = void 0;
 exports.handleMirosharkTool = handleMirosharkTool;
+const config_js_1 = require("../config.js");
 const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://befitting-porcupine-276.convex.site";
 exports.MIROSHARK_TOOLS = [
     {
@@ -50,7 +51,13 @@ exports.MIROSHARK_TOOLS = [
 ];
 // ── HTTP helpers ──────────────────────────────────────────────────────────────
 function authHeaders() {
-    const key = process.env.FINCH_API_KEY ?? process.env.FINCH_SESSION_TOKEN;
+    // Bug fix: this used to read only process.env.FINCH_API_KEY/
+    // FINCH_SESSION_TOKEN directly, bypassing getSavedToken()'s env-var-then-
+    // saved-config fallback that every other tool goes through (via
+    // callConvex/callConvexRaw in convex.ts). A user authenticated via
+    // `finch login` (writes to ~/.finch/config.json, not an env var) got a
+    // silent, unauthenticated request here while every other tool worked.
+    const key = process.env.FINCH_API_KEY ?? (0, config_js_1.getSavedToken)();
     return key ? { Authorization: `Bearer ${key}` } : {};
 }
 async function miroJson(path, method, body, timeoutMs = 90000) {

package/dist/tools/monitor.js

@@ -106,7 +106,7 @@ async function handleMonitorTool(name, args) {
     if (name === "schedule_research") {
         const parsed = CreateSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         const key = getKey();
         if (!key)
             return noKeyMsg();
@@ -284,7 +284,7 @@ async function handleMonitorTool(name, args) {
     if (name === "cancel_monitor") {
         const parsed = CancelSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         if (args?.confirm !== true) {
             return {
                 content: [{

package/dist/tools/os.js

@@ -6,6 +6,7 @@ const convex_js_1 = require("../convex.js");
 const token_gate_js_1 = require("../token-gate.js");
 const wallet_js_1 = require("../wallet.js");
 const local_memory_js_1 = require("../local-memory.js");
+const config_js_1 = require("../config.js");
 const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://befitting-porcupine-276.convex.site";
 exports.OS_TOOLS = [
     {
@@ -199,13 +200,18 @@ async function handleOsTool(name, args) {
             if (!message)
                 return { content: [{ type: "text", text: "Error: message is required" }] };
             try {
-                const res = await fetch(`${CONVEX_SITE}/noel/shell/chat`, {
+                // Bug fix: this used to read only process.env.FINCH_SESSION_TOKEN/
+                // FINCH_API_KEY directly, bypassing getSavedToken()'s fallback to
+                // ~/.finch/config.json - a user authenticated via `finch login`
+                // (not an env var) silently sent an empty Authorization header here
+                // while every other tool (which goes through callConvex) worked.
+                const res = await fetch(`${CONVEX_SITE}/finch/shell/chat`, {
                     method: "POST",
                     headers: {
                         "Content-Type": "application/json",
-                        "Authorization": `Bearer ${process.env.FINCH_SESSION_TOKEN ?? process.env.FINCH_API_KEY ?? ""}`,
+                        "Authorization": `Bearer ${(0, config_js_1.getSavedToken)() ?? process.env.FINCH_API_KEY ?? ""}`,
                     },
-                    body: JSON.stringify({ message, agentId: agent_id ?? "noel-default" }),
+                    body: JSON.stringify({ message, agentId: agent_id ?? "finch-default" }),
                     signal: AbortSignal.timeout(60000),
                 });
                 if (!res.ok) {

package/dist/tools/research-chain.js

@@ -147,7 +147,7 @@ async function handleResearchChain(name, args) {
         return null;
     const parsed = InputSchema.safeParse(args);
     if (!parsed.success) {
-        return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+        return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
     }
     const { startKey } = parsed.data;
     const maxDepth = parsed.data.maxDepth ?? 8;

package/dist/tools/research-compare.js

@@ -154,7 +154,7 @@ async function handleResearchCompare(name, args) {
         return null;
     const parsed = InputSchema.safeParse(args);
     if (!parsed.success) {
-        return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+        return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
     }
     const { keyA, keyB, focus, comparison } = parsed.data;
     const saveToVault = parsed.data.saveToVault ?? true;

package/dist/tools/research.js

@@ -100,7 +100,7 @@ async function handleResearchTool(name, args) {
     if (name === "web_scrape") {
         const parsed = ScrapeSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         const { url, focus } = parsed.data;
         const unsafe = await (0, public_url_js_1.assertPublicUrl)(url);
         if (unsafe) {
@@ -120,7 +120,7 @@ async function handleResearchTool(name, args) {
     if (name === "web_search") {
         const parsed = SearchSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         const { query, limit = 5 } = parsed.data;
         // Priority 1: user BYOK direct path. Priority 2: Finch proxy.
         // Same data shape so the formatting code below is identical for both.

package/dist/tools/rh-bridge.js

@@ -94,7 +94,7 @@ async function handleBridgeTool(name, args) {
         return null;
     const parsed = Schema.safeParse(args);
     if (!parsed.success) {
-        return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+        return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
     }
     const wanted = parsed.data.ticker?.trim().toUpperCase();
     const minGap = parsed.data.minGapPct ?? 0;

package/dist/tools/rh-mcp.js

@@ -30,6 +30,20 @@ exports.RH_RPC = process.env.ROBINHOOD_RPC_URL ??
     process.env.RH_RPC_URL ??
     process.env.FINCH_RH_RPC_URL ??
     "https://rpc.mainnet.chain.robinhood.com";
+/** Host only, for display in tool output - never the full RH_RPC. An
+ *  operator can point ROBINHOOD_RPC_URL/RH_RPC_URL at a keyed provider
+ *  (same pattern app/convex just fixed for its own Alchemy-key leak risk -
+ *  a `.../v2/<key>`-style URL echoed verbatim into a tool response lands the
+ *  key in chat transcripts/client logs). Falls back to the raw value only
+ *  if it isn't a parseable URL, which should never happen in practice. */
+function rhRpcDisplay() {
+    try {
+        return new URL(exports.RH_RPC).host;
+    }
+    catch {
+        return "(configured)";
+    }
+}
 exports.RH_EXPLORER = "https://robinhoodchain.blockscout.com";
 const NATIVE_ETH = "0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE";
 const RH_PERMIT2 = "0x000000000022D473030F116dDEE9F6B43aC78BA3";
@@ -754,7 +768,7 @@ async function fetchRhBalances(address) {
     else
         for (const h of holdings)
             lines.push(`- ${h.symbol}: ${h.bal}  \`${h.address}\``);
-    lines.push(``, `_RPC: ${exports.RH_RPC}_`, `_Explorer: ${exports.RH_EXPLORER}/address/${address}_`);
+    lines.push(``, `_RPC: ${rhRpcDisplay()}_`, `_Explorer: ${exports.RH_EXPLORER}/address/${address}_`);
     return lines.join("\n");
 }
 // ─── Onchain safety scan (Blockscout + DexScreener; free, no LLM) ─────────────
@@ -1177,7 +1191,7 @@ async function handleRhMcpTool(name, args) {
                 "",
                 `**Wallet**: \`${addr ?? "(not configured — run finch login / first tool)"}\``,
                 `**ETH on RH (gas)**: ${eth}`,
-                `**RPC**: ${exports.RH_RPC}`,
+                `**RPC**: ${rhRpcDisplay()}`,
                 `**Explorer**: ${exports.RH_EXPLORER}`,
                 `**Catalog**: ${exports.RH_STOCKS.length} stocks (AAPL…USAR) + any RH-chain crypto via DexScreener`,
                 "",

package/dist/tools/rh-orders.js

@@ -143,8 +143,11 @@ exports.RH_ORDER_TOOLS = [
         name: "rh_dca_create",
         description: "Robinhood Chain — create a DCA plan: buy a fixed ETH amount of a token every N hours, " +
             "up to a total number of buys, capped by maxSpendEth. Token by catalog symbol, crypto " +
-            "ticker, or 0x contract address (resolved via DexScreener). Does NOT execute now — the " +
-            "scheduler runs it via rh_orders_tick. Always confirm the resolved contract address first.",
+            "ticker, or 0x contract address (resolved via DexScreener). Does NOT execute now and does " +
+            "NOT run itself automatically — this only saves the plan. It fires only when something calls " +
+            "rh_orders_tick {execute:true}, which nothing does on its own. Tell the user to run " +
+            "`finch orders install-scheduler` (or `finch orders daemon`) after creating this, or the " +
+            "order will just sit there forever. Always confirm the resolved contract address first.",
         inputSchema: {
             type: "object",
             properties: {
@@ -165,9 +168,11 @@ exports.RH_ORDER_TOOLS = [
     {
         name: "rh_bracket_create",
         description: "Robinhood Chain — set take-profit and/or stop-loss on a token you HOLD. When DexScreener " +
-            "price crosses tpPriceUsd (≥) or slPriceUsd (≤), the scheduler sells sellPct% of your " +
-            "current balance for ETH via rh_orders_tick. Provide at least one of tpPriceUsd / slPriceUsd. " +
-            "Only ever sells tokens already in the wallet — never borrows or shorts.",
+            "price crosses tpPriceUsd (≥) or slPriceUsd (≤), sellPct% of the current balance sells for " +
+            "ETH — but only when something calls rh_orders_tick {execute:true}, which nothing does on " +
+            "its own by default. Tell the user to run `finch orders install-scheduler` (or `finch orders " +
+            "daemon`) after creating this, or the trigger will never actually fire. Provide at least one " +
+            "of tpPriceUsd / slPriceUsd. Only ever sells tokens already in the wallet — never borrows or shorts.",
         inputSchema: {
             type: "object",
             properties: {
@@ -209,7 +214,9 @@ exports.RH_ORDER_TOOLS = [
         description: "Robinhood Chain — evaluate all active orders and act on any that are due (DCA interval " +
             "reached) or triggered (TP/SL price crossed). PREVIEW by default; pass execute:true to " +
             "broadcast real swaps. Refuses to execute when the kill-switch is set (RH_ORDERS_DISABLED=1 " +
-            "or ~/.finch/rh-orders.OFF). This is the entry point an always-on scheduler calls.",
+            "or ~/.finch/rh-orders.OFF). Nothing calls this automatically — run `finch orders install-scheduler` " +
+            "(OS-level recurring task) or `finch orders daemon` (foreground loop) from a terminal to make " +
+            "orders actually fire unattended; calling this tool by hand only ticks once.",
         inputSchema: {
             type: "object",
             properties: {

package/dist/tools/scanner.js

@@ -345,7 +345,7 @@ async function handleScannerTool(name, args) {
     if (name === "score_token") {
         const parsed = ScoreTokenSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         const { address, minLiquidity = DEFAULT_MIN_LIQ } = parsed.data;
         const data = await fetchJson(`https://api.dexscreener.com/latest/dex/tokens/${address}`);
         const pair = (data.pairs ?? [])
@@ -414,7 +414,7 @@ async function handleScannerTool(name, args) {
     if (name === "check_token") {
         const parsed = CheckTokenSchema.safeParse(args);
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         const { address } = parsed.data;
         // GoPlusLabs - chain 8453 = Base mainnet
         const data = await fetchJson(`https://api.gopluslabs.io/api/v1/token_security/8453?contract_addresses=${address}`);
@@ -476,7 +476,7 @@ async function handleScannerTool(name, args) {
     if (name === "scan_market") {
         const parsed = ScanDipsSchema.safeParse(args ?? {});
         if (!parsed.success)
-            return { content: [{ type: "text", text: `Invalid input: ${parsed.error.issues[0].message}` }], isError: true };
+            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
         const input = args;
         const mode = input?.mode === "momentum" ? "momentum" : "dips";
         const { minScore = DEFAULT_MIN_SCORE, minLiquidity = DEFAULT_MIN_LIQ, limit = 40 } = parsed.data;