@finchagentic/mcp 4.7.0 → 4.7.2

package/dist/cli.js

@@ -64,7 +64,7 @@ const CORE_TOOL_COUNT = (() => {
             process.env.FINCH_TOOLS = prev;
     }
 })();
-const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://befitting-porcupine-276.convex.site";
+const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://valuable-fish-533.convex.site";
 const PKG_VERSION = (() => {
     try {
         const raw = fs.readFileSync(path.join(__dirname, "..", "package.json"), "utf8");
@@ -896,7 +896,7 @@ async function doctorFlow() {
         checks.push({
             name: "Backend reachable", status: "✗",
             detail: `${CONVEX_SITE} → ${err.message}`,
-            fix: `Network issue or wrong URL. Default: https://befitting-porcupine-276.convex.site`,
+            fix: `Network issue or wrong URL. Default: https://valuable-fish-533.convex.site`,
         });
     }
     // 3. Auth state

package/dist/finch-status.js

@@ -1,5 +1,6 @@
 "use strict";
 const config_js_1 = require("./config.js");
+const convex_js_1 = require("./convex.js");
 exports.FINCH_STATUS_TOOL = {
     name: "finch_status",
     description: "Check Finch MCP is working - no sign-in needed. Returns the version, how many tools are available, whether the session token is configured, and a ready-to-paste MCP client config snippet. Run this FIRST if anything feels off: it tells you instantly whether the problem is auth (missing token), network (backend unreachable), or the tool itself.",
@@ -7,13 +8,35 @@ exports.FINCH_STATUS_TOOL = {
     annotations: { title: "Finch status", readOnlyHint: true, openWorldHint: false },
 };
 
-// `finch_status` handler - fully local, never touches the backend, never auths.
+// `finch_status` handler - never throws on auth; when a token is configured
+// it makes ONE cheap authed call (/memory/profile) and reports the REAL
+// auth state instead of a fake-healthy dashboard (the old Promise.allSettled
+// version swallowed 401s and showed empty-but-healthy, which hid expired
+// credentials entirely).
 exports.handleFinchStatus = async function handleFinchStatus() {
     const pkg = require("./../package.json");
     let tokenSet = false;
+    let authState = "none";
+    let authDetail = "";
     try {
         tokenSet = Boolean((0, config_js_1.getSavedToken)());
     } catch { tokenSet = false; }
+    if (tokenSet) {
+        try {
+            const data = await (0, convex_js_1.callConvex)("/memory/profile", "GET", undefined, "finch_status", 8000, true);
+            authState = (data?.status === "ok") ? "valid" : "rejected";
+            if (authState === "rejected") authDetail = "the session token was rejected by the backend - re-copy it from app.finchagentic.com";
+        } catch (err) {
+            const msg = String(err?.message ?? err);
+            if (msg.includes("Authentication required")) {
+                authState = "invalid";
+                authDetail = "the backend rejected the token as expired or invalid - re-copy it from app.finchagentic.com";
+            } else {
+                authState = "unreachable";
+                authDetail = msg.slice(0, 120);
+            }
+        }
+    }
     const configJson = JSON.stringify({
         mcpServers: {
             finch: {
@@ -23,16 +46,25 @@ exports.handleFinchStatus = async function handleFinchStatus() {
             },
         },
     }, null, 2);
-    const lines = tokenSet
+    const lines = tokenSet && authState === "valid"
         ? [
             "**Finch MCP v" + pkg.version + "** - runtime layer for agentic AI", "",
-            "- Session token: \u2705 configured",
+            "- Session token: \u2705 valid (verified against the backend)",
             "- Tools: **116** registered (surface depends on FINCH_TOOLS filter)",
             "- Resources: finch://vault/<key> - Prompts: crypto-thesis and friends",
             "- Tool presets: FINCH_PRESET=core|defi|research|memory (default core) - FINCH_TOOLS=all for everything",
             "",
             "All set. Good first calls: `memory_add` (persist a note instantly), `get_market` (live prices), `deep_research` (multi-step reports, streaming progress).",
         ]
+        : tokenSet
+        ? [
+            "**Finch MCP v" + pkg.version + "** - runtime layer for agentic AI", "",
+            `- Session token: \u26a0\ufe0f configured but **${authState}**`,
+            authDetail ? `- ${authDetail}` : "",
+            "- Tools are registered, but every backend-backed call will fail until the token is replaced.",
+            "",
+            "**Fix:** re-copy a fresh token from app.finchagentic.com, update FINCH_SESSION_TOKEN in your MCP config, restart the client.",
+        ]
         : [
             "**Finch MCP v" + pkg.version + "** - runtime layer for agentic AI", "",
             "- Session token: \u274c not set", "",

package/dist/index.js

@@ -54,7 +54,7 @@ const PKG_VERSION = (() => {
         return "unknown";
     }
 })();
-const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://befitting-porcupine-276.convex.site";
+const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://valuable-fish-533.convex.site";
 // ── ANSI helpers ──────────────────────────────────────────────────────────────
 const C = {
     cyan: "\x1b[36m",

package/dist/server.js

@@ -132,7 +132,8 @@ exports.ALL_TOOLS = [
     ...rh_orders_js_1.RH_ORDER_TOOLS, // 5 - rh_dca_create, rh_bracket_create, rh_orders_list, rh_order_cancel, rh_orders_tick (RH automated DCA/TP/SL)
     ...rh_bridge_js_1.BRIDGE_TOOLS, // 1 - rh_stock_bridge (tokenized stock vs real equity)
     ...memory_js_1.MEMORY_TOOLS, // 9 - memory_add, memory_search, memory_context, memory_profile, memory_list, memory_delete, memory_insight, memory_extract, memory_consolidate. memory_publish removed - promised a "Memory Marketplace" that doesn't exist at any layer (no browse route, no query, no UI), see tools/memory.ts
-    ...os_js_1.OS_TOOLS, // 3 - finch_status, finch_diagnostics, finch_shell_chat
+    ...os_js_1.OS_TOOLS.filter((t) => t.name !== "finch_status"), // finch_status lives in finch-status.js (dedup)
+    // 2 - finch_diagnostics, finch_shell_chat
     ...research_js_1.RESEARCH_TOOLS, // 2 - web_scrape, web_search
     ...deep_research_js_1.DEEP_RESEARCH_TOOLS, // 1 - deep_research (search → scrape → rank → cited evidence pack; caller synthesises)
     ...research_compare_js_1.RESEARCH_COMPARE_TOOLS, // 1 - research_compare (diff two reports across time)

package/dist/tools/memory.js

@@ -192,6 +192,15 @@ async function syncToSupermemory(content, metadata, sourceUrl) {
         console.error(`[memory] sync_failed: ${errMsg} | preview: "${preview}"`);
     });
 }
+// A real auth failure must never be reported as "0 results found" - that
+// reads as "your account genuinely has nothing saved" when the actual
+// problem is the token/key was rejected. Only genuinely transient errors
+// (network hiccup, the other RRF side still succeeding) degrade silently
+// to an empty contribution - an auth failure is rethrown so it reaches the
+// user instead of being swallowed.
+function isAuthFailure(err) {
+    return err instanceof Error && /Authentication required/i.test(err.message);
+}
 async function searchSupermemory(query, limit = 10) {
     try {
         const local = (0, local_memory_js_1.getLocalMemoryConfig)();
@@ -200,7 +209,9 @@ async function searchSupermemory(query, limit = 10) {
         const data = await (0, convex_js_1.callConvex)("/memory/search", "POST", { q: query, n: limit }, "memory_search");
         return data?.results ?? [];
     }
-    catch {
+    catch (err) {
+        if (isAuthFailure(err))
+            throw err;
         return [];
     }
 }
@@ -218,7 +229,9 @@ async function lexicalSearch(query, limit = 30) {
             rank: typeof r.rank === "number" ? r.rank : idx,
         }));
     }
-    catch {
+    catch (err) {
+        if (isAuthFailure(err))
+            throw err;
         return [];
     }
 }

package/dist/tools/miroshark.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.MIROSHARK_TOOLS = void 0;
 exports.handleMirosharkTool = handleMirosharkTool;
 const config_js_1 = require("../config.js");
-const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://befitting-porcupine-276.convex.site";
+const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://valuable-fish-533.convex.site";
 exports.MIROSHARK_TOOLS = [
     {
         name: "miroshark_simulate",

package/dist/tools/os.js

@@ -7,7 +7,7 @@ const token_gate_js_1 = require("../token-gate.js");
 const wallet_js_1 = require("../wallet.js");
 const local_memory_js_1 = require("../local-memory.js");
 const config_js_1 = require("../config.js");
-const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://befitting-porcupine-276.convex.site";
+const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://valuable-fish-533.convex.site";
 exports.OS_TOOLS = [
     {
         name: "finch_status",
@@ -114,7 +114,7 @@ async function handleOsTool(name, args) {
             return { content: [{ type: "text", text: lines.join("\n") }] };
         }
         case "finch_diagnostics": {
-            const CONVEX_URL = process.env.FINCH_CONVEX_URL ?? "https://befitting-porcupine-276.convex.site";
+            const CONVEX_URL = process.env.FINCH_CONVEX_URL ?? "https://valuable-fish-533.convex.site";
             // Ping root of each service — any non-5xx means the host is up
             const FC_URL = "https://api.firecrawl.dev";
             const SM_URL = "https://api.supermemory.ai";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finchagentic/mcp",
-  "version": "4.7.0",
+  "version": "4.7.2",
   "description": "The runtime layer for Agentic AI. Persistent memory, autonomous agents, and workflows that survive every session.",
   "main": "dist/index.js",
   "bin": {