@finchagentic/mcp 4.7.1 → 4.7.3

package/dist/cli-setup.js

@@ -0,0 +1,270 @@
+"use strict";
+// `finch setup` - BYOK LLM provider + local memory/vault configuration wizard.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setupFlow = setupFlow;
+const readline = __importStar(require("readline"));
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const child_process = __importStar(require("child_process"));
+const config_js_1 = require("./config.js");
+const clink_input_js_1 = require("./clink-input.js");
+const cli_ui_js_1 = require("./cli-ui.js");
+const PROVIDER_CHOICES = {
+    "1": { configKey: "bankrApiKey", envVar: "BANKR_API_KEY", label: "Bankr" },
+    "2": { configKey: "anthropicApiKey", envVar: "ANTHROPIC_API_KEY", label: "Anthropic" },
+    "3": { configKey: "openaiApiKey", envVar: "OPENAI_API_KEY", label: "OpenAI" },
+};
+const LOCAL_MEMORY_INSTALL_CMD = ["npx", ["-y", "supermemory", "local"]];
+const LOCAL_MEMORY_POLL_MS = 2000;
+const LOCAL_MEMORY_POLL_MAX_MS = 45000;
+const LOCAL_MEMORY_KEY_RE = /\b(sm_[A-Za-z0-9_-]{8,})\b/;
+async function setupFlow() {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    const ask = (q) => new Promise(resolve => rl.question(q, resolve));
+    console.log(`\n  ${cli_ui_js_1.C.cyan}${cli_ui_js_1.C.bold}finch setup${cli_ui_js_1.C.reset}`);
+    console.log(`  ${cli_ui_js_1.C.dim}Bring your own LLM key and/or run memory fully local - zero cost, zero lock-in.${cli_ui_js_1.C.reset}\n`);
+    // ── Step 1: LLM provider ──────────────────────────────────────────────────
+    // Say plainly that skipping is fine. Tools return data and structure for the
+    // calling model; only `finch run` and scheduled agents need a key of
+    // their own, because nothing else is there to do the thinking.
+    console.log(`  ${cli_ui_js_1.C.dim}Optional. Every MCP tool works without a key - your client's model does the reasoning.${cli_ui_js_1.C.reset}`);
+    console.log(`  ${cli_ui_js_1.C.dim}A key is what lets finch think on its own: \`finch run\` and scheduled agents.${cli_ui_js_1.C.reset}\n`);
+    console.log(`  ${cli_ui_js_1.C.dim}[1] Bankr   [2] Anthropic   [3] OpenAI   [4] Custom endpoint (self-hosted/VPS)   [5] Skip${cli_ui_js_1.C.reset}\n`);
+    const providerChoice = (0, clink_input_js_1.dedupClinkInput)((await ask(`  Choose [1-5]: `)).trim());
+    const provider = PROVIDER_CHOICES[providerChoice];
+    // Tracks whatever key got configured in this step, regardless of which
+    // branch set it, so step 2 can forward it to the local-memory subprocess
+    // env uniformly instead of only handling the named-provider case.
+    let chosenProviderKey;
+    let chosenProviderEnvVar;
+    if (provider) {
+        const key = (0, clink_input_js_1.dedupClinkInput)((await ask(`  ${provider.label} API key: `)).trim()).replace(/[^\x20-\x7E]/g, "").trim();
+        if (key) {
+            (0, config_js_1.writeConfig)({ [provider.configKey]: key });
+            process.env[provider.envVar] = key;
+            chosenProviderKey = key;
+            chosenProviderEnvVar = provider.envVar;
+            console.log(`\n  ${cli_ui_js_1.C.green}✓${cli_ui_js_1.C.reset} Saved. ${provider.label} will be used for LLM calls in the interactive shell and MCP server.`);
+            console.log(`  ${cli_ui_js_1.C.dim}(Stored in ~/.finch/config.json, mode 0600 - same protection as your session token.)${cli_ui_js_1.C.reset}\n`);
+        }
+        else {
+            console.log(`\n  ${cli_ui_js_1.C.dim}No key entered - skipped.${cli_ui_js_1.C.reset}\n`);
+        }
+    }
+    else if (providerChoice === "4") {
+        console.log(`  ${cli_ui_js_1.C.dim}Any OpenAI Chat Completions-compatible endpoint works (LiteLLM, vLLM, Ollama, OpenRouter, your own VPS gateway).${cli_ui_js_1.C.reset}`);
+        const baseUrl = (0, clink_input_js_1.dedupClinkInput)((await ask(`  Base URL (e.g. https://your-vps:8000/v1): `)).trim()).replace(/[^\x20-\x7E]/g, "").trim().replace(/\/+$/, "");
+        if (baseUrl) {
+            const key = (0, clink_input_js_1.dedupClinkInput)((await ask(`  API key (leave blank if your endpoint doesn't need one): `)).trim()).replace(/[^\x20-\x7E]/g, "").trim();
+            (0, config_js_1.writeConfig)({ openaiBaseUrl: baseUrl, openaiApiKey: key || "local" });
+            process.env.OPENAI_BASE_URL = baseUrl;
+            process.env.OPENAI_API_KEY = key || "local";
+            chosenProviderKey = key || "local";
+            chosenProviderEnvVar = "OPENAI_API_KEY";
+            console.log(`\n  ${cli_ui_js_1.C.green}✓${cli_ui_js_1.C.reset} Saved. Requests route to ${baseUrl} using the OpenAI protocol.\n`);
+        }
+        else {
+            console.log(`\n  ${cli_ui_js_1.C.dim}No URL entered - skipped.${cli_ui_js_1.C.reset}\n`);
+        }
+    }
+    else {
+        console.log(`\n  ${cli_ui_js_1.C.dim}Skipped - using Finch proxy.${cli_ui_js_1.C.reset}\n`);
+    }
+    // ── Step 2: local memory ──────────────────────────────────────────────────
+    console.log(`  ${cli_ui_js_1.C.cyan}${cli_ui_js_1.C.bold}Local memory${cli_ui_js_1.C.reset}  ${cli_ui_js_1.C.dim}(self-hosted - your choice of backend)${cli_ui_js_1.C.reset}`);
+    console.log(`  ${cli_ui_js_1.C.dim}[1] Simple file-based (recommended) - zero dependency, JSON on disk at ~/.finch/memory/, keyword search only.${cli_ui_js_1.C.reset}`);
+    console.log(`  ${cli_ui_js_1.C.dim}[2] Supermemory server - real semantic/embedding search, but you run a separate process yourself.${cli_ui_js_1.C.reset}`);
+    console.log(`  ${cli_ui_js_1.C.dim}[3] Skip - memory tools use the Finch-hosted proxy.${cli_ui_js_1.C.reset}\n`);
+    const memChoice = (0, clink_input_js_1.dedupClinkInput)((await ask(`  Choose [1-3]: `)).trim());
+    if (memChoice === "1") {
+        (0, config_js_1.writeConfig)({ memoryBackend: "local-file" });
+        console.log(`\n  ${cli_ui_js_1.C.green}✓${cli_ui_js_1.C.reset} Local file memory enabled at ~/.finch/memory/. No server, no key - memory tools run fully local.\n`);
+    }
+    else if (memChoice === "2") {
+        const url = "http://localhost:6767";
+        console.log(`\n  ${cli_ui_js_1.C.dim}Checking ${url}...${cli_ui_js_1.C.reset}`);
+        let reachable = await isLocalMemoryReachableRaw(url);
+        let installerError;
+        if (!reachable) {
+            console.log(`  ${cli_ui_js_1.C.dim}Not running - launching \`npx -y supermemory local\` in the background...${cli_ui_js_1.C.reset}`);
+            const providerEnv = chosenProviderEnvVar && chosenProviderKey ? { [chosenProviderEnvVar]: chosenProviderKey } : {};
+            const result = await launchLocalMemoryServer(url, providerEnv);
+            reachable = result.reachable;
+            installerError = result.installerError;
+        }
+        if (reachable) {
+            const key = await readLocalMemoryKey();
+            if (key) {
+                (0, config_js_1.writeConfig)({ memoryBackend: "local", supermemoryUrl: url, supermemoryApiKey: key });
+                console.log(`\n  ${cli_ui_js_1.C.green}✓${cli_ui_js_1.C.reset} Local memory enabled at ${url}. Memory tools now run fully local - zero cost, private to this machine.\n`);
+            }
+            else {
+                console.log(`\n  ${cli_ui_js_1.C.yellow}⚠${cli_ui_js_1.C.reset}  Server is running but its API key couldn't be auto-detected.`);
+                const manualKey = (0, clink_input_js_1.dedupClinkInput)((await ask(`  Paste the key printed by the server (starts with sm_), or press Enter to skip: `)).trim());
+                if (manualKey) {
+                    (0, config_js_1.writeConfig)({ memoryBackend: "local", supermemoryUrl: url, supermemoryApiKey: manualKey });
+                    console.log(`\n  ${cli_ui_js_1.C.green}✓${cli_ui_js_1.C.reset} Local memory enabled at ${url}.\n`);
+                }
+                else {
+                    console.log(`\n  ${cli_ui_js_1.C.dim}Skipped - memory tools will keep using the Finch proxy. Run \`finch setup\` again once you have the key.${cli_ui_js_1.C.reset}\n`);
+                }
+            }
+        }
+        else if (installerError) {
+            console.log(`\n  ${cli_ui_js_1.C.yellow}⚠${cli_ui_js_1.C.reset}  Local install failed: ${installerError}`);
+            console.log(`  ${cli_ui_js_1.C.dim}Memory tools keep using the Finch proxy until this is resolved. Run \`finch setup\` again after fixing it.${cli_ui_js_1.C.reset}\n`);
+        }
+        else {
+            console.log(`\n  ${cli_ui_js_1.C.yellow}⚠${cli_ui_js_1.C.reset}  Couldn't reach a local supermemory server after ${LOCAL_MEMORY_POLL_MAX_MS / 1000}s.`);
+            console.log(`  ${cli_ui_js_1.C.dim}Install it yourself in another terminal: ${cli_ui_js_1.C.cyan}npx -y supermemory local${cli_ui_js_1.C.reset}`);
+            console.log(`  ${cli_ui_js_1.C.dim}Then run \`finch setup\` again - memory tools keep using the Finch proxy until then.${cli_ui_js_1.C.reset}\n`);
+        }
+    }
+    else {
+        console.log(`\n  ${cli_ui_js_1.C.dim}Skipped - memory tools use the Finch-hosted proxy.${cli_ui_js_1.C.reset}\n`);
+    }
+    // ── Step 3: local vault ───────────────────────────────────────────────────
+    // Unlike local memory, this needs no server - it's a plain on-disk store, so
+    // enabling it is a config flip. Data lives under ~/.finch/vault/.
+    console.log(`  ${cli_ui_js_1.C.cyan}${cli_ui_js_1.C.bold}Local vault${cli_ui_js_1.C.reset}  ${cli_ui_js_1.C.dim}(versioned artifacts on your own disk - ~/.finch/vault/)${cli_ui_js_1.C.reset}`);
+    console.log(`  ${cli_ui_js_1.C.dim}No account, no Convex, no cost. vault_save/read/search/history/diff run fully local.${cli_ui_js_1.C.reset}\n`);
+    const enableVault = (0, clink_input_js_1.dedupClinkInput)((await ask(`  Enable local vault? [y/N]: `)).trim()).toLowerCase();
+    if (enableVault === "y" || enableVault === "yes") {
+        (0, config_js_1.writeConfig)({ vaultBackend: "local" });
+        console.log(`\n  ${cli_ui_js_1.C.green}✓${cli_ui_js_1.C.reset} Local vault enabled. All vault tools now store on this machine - you own the data, no account needed.\n`);
+    }
+    else {
+        console.log(`\n  ${cli_ui_js_1.C.dim}Skipped - vault tools use the Finch-hosted store (needs \`finch login\`).${cli_ui_js_1.C.reset}\n`);
+    }
+    rl.close();
+}
+async function isLocalMemoryReachableRaw(url) {
+    try {
+        const res = await fetch(url, { signal: AbortSignal.timeout(1500) });
+        return res.status < 500;
+    }
+    catch {
+        return false;
+    }
+}
+// Spawns the local supermemory server detached so it survives after this CLI
+// process exits (same lifecycle model as a local daemon, e.g. Ollama).
+// Captures stdout briefly to look for a printed sm_... key (the binary's
+// first-boot wizard prints one), then stops watching it - the process itself
+// keeps running in the background regardless of whether we caught the key.
+let capturedLocalMemoryKey;
+// Known installer failure signatures worth surfacing verbatim instead of a
+// generic "couldn't reach" message. Confirmed on Windows: the installer
+// shells out via WSL, and fails immediately (before ever listening on the
+// port) if WSL isn't installed/registered - waiting out the full poll
+// window for that case just wastes the user's time.
+const KNOWN_INSTALLER_FAILURES = [
+    { re: /unsupported OS/i, hint: "The installer doesn't support this shell/OS directly (seen from Git Bash/MINGW on Windows)." },
+    { re: /REGDB_E_CLASSNOTREG|Class not registered/i, hint: "The installer needs WSL (Windows Subsystem for Linux) to run its install script, and WSL isn't set up on this machine. Install it with `wsl --install` (needs a restart), then try again." },
+];
+async function launchLocalMemoryServer(url, providerEnv) {
+    const [cmd, args] = LOCAL_MEMORY_INSTALL_CMD;
+    let installerError;
+    // Authoritative "did the process die" signal - independent of whether the
+    // regex hints below happen to match. A spawn failure (e.g. npx not found)
+    // emits an async 'error' event rather than throwing synchronously, so it
+    // is NOT caught by the try/catch around spawn() itself; without this
+    // listener it becomes an uncaught exception that crashes the whole CLI.
+    let exited = false;
+    // Accumulated across all chunks (not tested per-chunk) so a known error
+    // string split across two writes still matches.
+    let outputBuffer = "";
+    try {
+        const child = child_process.spawn(cmd, [...args], {
+            detached: true,
+            stdio: ["ignore", "pipe", "pipe"],
+            env: { ...process.env, ...providerEnv },
+        });
+        child.on("error", (err) => {
+            exited = true;
+            if (!installerError)
+                installerError = `Couldn't launch \`${cmd}\`: ${err.message}`;
+        });
+        child.on("exit", () => { exited = true; });
+        const onData = (chunk) => {
+            outputBuffer += chunk.toString("utf8");
+            const keyMatch = outputBuffer.match(LOCAL_MEMORY_KEY_RE);
+            if (keyMatch)
+                capturedLocalMemoryKey = keyMatch[1];
+            if (!installerError) {
+                const known = KNOWN_INSTALLER_FAILURES.find((k) => k.re.test(outputBuffer));
+                if (known)
+                    installerError = known.hint;
+            }
+        };
+        child.stdout?.on("data", onData);
+        child.stderr?.on("data", onData);
+        child.unref();
+    }
+    catch (err) {
+        return { reachable: false, installerError: `Couldn't launch \`${cmd}\`: ${err.message}` };
+    }
+    const deadline = Date.now() + LOCAL_MEMORY_POLL_MAX_MS;
+    while (Date.now() < deadline) {
+        if (await isLocalMemoryReachableRaw(url))
+            return { reachable: true };
+        // Fail fast once the process has died (confirmed via 'error'/'exit') or
+        // a known error signature was recognized - polling further won't help.
+        if (installerError || exited)
+            return { reachable: false, installerError };
+        await new Promise((r) => setTimeout(r, LOCAL_MEMORY_POLL_MS));
+    }
+    return { reachable: false, installerError };
+}
+async function readLocalMemoryKey() {
+    if (capturedLocalMemoryKey)
+        return capturedLocalMemoryKey;
+    // Fall back to the documented on-disk location ("everything lives in
+    // ./.supermemory") - exact path may need adjusting once verified against
+    // the real binary; this covers the most likely spot.
+    try {
+        const candidate = path.join(os.homedir(), ".supermemory", "config.json");
+        if (fs.existsSync(candidate)) {
+            const data = JSON.parse(fs.readFileSync(candidate, "utf8"));
+            const key = data?.apiKey ?? data?.api_key ?? data?.key;
+            if (typeof key === "string" && LOCAL_MEMORY_KEY_RE.test(key))
+                return key;
+        }
+    }
+    catch { /* best-effort only */ }
+    return undefined;
+}

package/dist/cli-ui.js

@@ -0,0 +1,168 @@
+"use strict";
+// Shared terminal UI: ANSI palette, the startup banner, post-login success
+// block, spinner, in-REPL help text, and the npm update check.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SEP = exports.C = void 0;
+exports.buildBanner = buildBanner;
+exports.printLoginSuccess = printLoginSuccess;
+exports.spinner = spinner;
+exports.printHelp = printHelp;
+exports.checkForUpdate = checkForUpdate;
+const config_js_1 = require("./config.js");
+const cli_env_js_1 = require("./cli-env.js");
+// ── ANSI ─────────────────────────────────────────────────────────────────────
+exports.C = {
+    reset: "\x1b[0m",
+    bold: "\x1b[1m",
+    dim: "\x1b[2m",
+    green: "\x1b[32m",
+    cyan: "\x1b[36m",
+    violet: "\x1b[35m",
+    red: "\x1b[31m",
+    yellow: "\x1b[33m",
+    white: "\x1b[97m",
+    bg: "\x1b[48;5;17m",
+};
+// ── Banner ────────────────────────────────────────────────────────────────────
+//
+//   ███╗   ██╗ ██████╗ ███████╗██╗      ██████╗██╗      █████╗ ██╗    ██╗
+//   ████╗  ██║██╔═══██╗██╔════╝██║     ██╔════╝██║     ██╔══██╗██║    ██║
+//   ██╔██╗ ██║██║   ██║█████╗  ██║     ██║     ██║     ███████║██║ █╗ ██║
+//   ██║╚██╗██║██║   ██║██╔══╝  ██║     ██║     ██║     ██╔══██║██║███╗██║
+//   ██║ ╚████║╚██████╔╝███████╗███████╗╚██████╗███████╗██║  ██║╚███╔███╔╝
+//   ╚═╝  ╚═══╝ ╚═════╝ ╚══════╝╚══════╝ ╚═════╝╚══════╝╚═╝  ╚═╝ ╚══╝╚══╝
+const LOGO_LINES = [
+    `  ███████╗ ██╗ ███╗   ██╗  ██████╗ ██╗  ██╗`,
+    `  ██╔════╝ ██║ ████╗  ██║ ██╔════╝ ██║  ██║`,
+    `  █████╗   ██║ ██╔██╗ ██║ ██║      ███████║`,
+    `  ██╔══╝   ██║ ██║╚██╗██║ ██║      ██╔══██║`,
+    `  ██║      ██║ ██║ ╚████║ ╚██████╗ ██║  ██║`,
+    `  ╚═╝      ╚═╝ ╚═╝  ╚═══╝  ╚═════╝ ╚═╝  ╚═╝`,
+];
+exports.SEP = `  ${"─".repeat(70)}`;
+function buildBanner() {
+    const cfg = (0, config_js_1.readConfig)();
+    // Every base_mcp_*/rh_mcp_* tool signs locally via getOrCreateWallet()
+    // (~/.finch/wallet.json) on BOTH Base and Robinhood Chain (RH reuses the
+    // same local address) - this CLI never touches the account's custodial
+    // webapp wallet. Showing that other address here would mismatch what
+    // every tool call actually reports and operates on.
+    const walletAddr = (0, cli_env_js_1.getLocalWalletAddress)();
+    const provider = process.env.BANKR_API_KEY ? "Bankr"
+        : process.env.ANTHROPIC_API_KEY ? "Anthropic"
+            : process.env.OPENAI_API_KEY ? "OpenAI"
+                : "Finch proxy";
+    const logo = LOGO_LINES.map(l => `${exports.C.cyan}${exports.C.bold}${l}${exports.C.reset}`).join("\n");
+    // ── meta row ──
+    const meta = `\n${exports.SEP}\n  ${exports.C.dim}v${cli_env_js_1.PKG_VERSION}  ·  ${cli_env_js_1.TOTAL_TOOL_COUNT} tools  ·  finchagentic.com${exports.C.reset}\n${exports.SEP}`;
+    // ── auth block ──
+    let authBlock;
+    if (cfg.sessionToken) {
+        const displayName = cfg.name ? `${exports.C.white}${exports.C.bold}${cfg.name}${exports.C.reset}` : "";
+        const displayEmail = cfg.email ? `${exports.C.dim}${cfg.email}${exports.C.reset}` : "";
+        const nameLine = displayName
+            ? `  ${exports.C.green}●${exports.C.reset}  ${displayName}  ${displayEmail}`
+            : `  ${exports.C.green}●${exports.C.reset}  ${displayEmail || `${exports.C.green}Signed in${exports.C.reset}`}`;
+        const walletNote = "Base + Robinhood Chain · local device wallet · keys never leave your machine";
+        const walletLine = walletAddr
+            ? `     ${exports.C.dim}Wallet${exports.C.reset}  ${exports.C.cyan}${walletAddr.slice(0, 6)}...${walletAddr.slice(-4)}${exports.C.reset}  ${exports.C.dim}· ${walletNote}${exports.C.reset}`
+            : `     ${exports.C.dim}Wallet  not created yet · auto-creates on first DeFi call${exports.C.reset}`;
+        const llmLine = `     ${exports.C.dim}LLM     ${exports.C.reset}${exports.C.green}${provider}${exports.C.reset}  ${exports.C.dim}· ${cli_env_js_1.TOTAL_TOOL_COUNT} tools active${exports.C.reset}`;
+        authBlock = `\n${nameLine}\n${walletLine}\n${llmLine}`;
+    }
+    else {
+        authBlock = [
+            ``,
+            `  ${exports.C.yellow}○${exports.C.reset}  ${exports.C.yellow}Not signed in${exports.C.reset}  ${exports.C.dim}- tools that need your account will fail${exports.C.reset}`,
+            `     ${exports.C.dim}Run ${exports.C.reset}${exports.C.cyan}/login${exports.C.reset}${exports.C.dim} to unlock all ${cli_env_js_1.TOTAL_TOOL_COUNT} tools${exports.C.reset}`,
+            `     ${exports.C.dim}LLM  ${provider}  · basic tools still work${exports.C.reset}`,
+        ].join("\n");
+    }
+    const hint = `\n${exports.SEP}\n  ${exports.C.dim}Type anything to chat · /help · Ctrl+C to exit${exports.C.reset}\n`;
+    return `\n${logo}\n${meta}\n${authBlock}\n${hint}`;
+}
+// ── Post-login success block ──────────────────────────────────────────────────
+function printLoginSuccess({ email, name }) {
+    // Always show the local per-device wallet: every base_mcp_*/rh_mcp_* tool
+    // signs with it on BOTH chains. The account's custodial webapp wallet is a
+    // separate address this CLI never touches - showing it here would mismatch
+    // what every subsequent tool call actually reports.
+    const walletAddr = (0, cli_env_js_1.getLocalWalletAddress)();
+    const displayName = name ?? "";
+    console.log(`\n${exports.SEP}`);
+    if (displayName) {
+        console.log(`  ${exports.C.green}✓${exports.C.reset}  ${exports.C.white}${exports.C.bold}${displayName}${exports.C.reset}  ${exports.C.dim}${email}${exports.C.reset}`);
+    }
+    else {
+        console.log(`  ${exports.C.green}✓${exports.C.reset}  ${exports.C.green}${exports.C.bold}Signed in${exports.C.reset}  ${exports.C.dim}as ${email}${exports.C.reset}`);
+    }
+    if (walletAddr) {
+        const note = "Base + Robinhood Chain · local device wallet";
+        console.log(`     ${exports.C.dim}Wallet${exports.C.reset}  ${exports.C.cyan}${walletAddr.slice(0, 6)}...${walletAddr.slice(-4)}${exports.C.reset}  ${exports.C.dim}· ${note}${exports.C.reset}`);
+    }
+    else {
+        console.log(`     ${exports.C.dim}Wallet  auto-creates on first DeFi tool call${exports.C.reset}`);
+    }
+    console.log(`     ${exports.C.dim}Token saved to ~/.finch/config.json${exports.C.reset}`);
+    console.log(`     ${exports.C.dim}All ${cli_env_js_1.TOTAL_TOOL_COUNT} tools unlocked${exports.C.reset}`);
+    console.log(`${exports.SEP}\n`);
+}
+// ── Spinner ───────────────────────────────────────────────────────────────────
+function spinner(label) {
+    const frames = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
+    let i = 0;
+    const iv = setInterval(() => {
+        process.stdout.write(`\r  ${exports.C.dim}${frames[i % frames.length]} ${label}${exports.C.reset}  `);
+        i++;
+    }, 80);
+    return () => {
+        clearInterval(iv);
+        process.stdout.write("\r" + " ".repeat(label.length + 12) + "\r");
+    };
+}
+// ── Help ─────────────────────────────────────────────────────────────────────
+function printHelp() {
+    const cfg = (0, config_js_1.readConfig)();
+    const authLine = cfg.email
+        ? `  ${exports.C.dim}Signed in as ${exports.C.reset}${exports.C.green}${cfg.email}${exports.C.reset}`
+        : `  ${exports.C.yellow}⚠${exports.C.reset}  ${exports.C.dim}Not signed in - run /login to unlock all tools${exports.C.reset}`;
+    console.log(`
+  ${exports.C.cyan}Commands:${exports.C.reset}
+    /login     Sign in to unlock all ${cli_env_js_1.TOTAL_TOOL_COUNT} tools
+    /logout    Sign out and clear saved token
+    /clear     Clear conversation history
+    /tools     List all available tools
+    /quit      Exit
+
+${authLine}
+
+  ${exports.C.dim}Examples:
+    remember that I prefer concise answers
+    search the web for recent AI news
+    save a note to my vault
+    research "top AI agent frameworks in 2025"
+    spawn an agent to monitor competitor releases weekly${exports.C.reset}
+`);
+}
+// ── Version check ─────────────────────────────────────────────────────────────
+async function checkForUpdate() {
+    try {
+        const res = await fetch("https://registry.npmjs.org/@finchagentic/mcp/latest", {
+            signal: AbortSignal.timeout(5000),
+        });
+        if (!res.ok)
+            return;
+        const data = await res.json();
+        const latest = data.version;
+        if (!latest || latest === cli_env_js_1.PKG_VERSION)
+            return;
+        const sep = `  ${"─".repeat(58)}`;
+        console.log(`\n${sep}`);
+        console.log(`  ${exports.C.yellow}⚠${exports.C.reset}  Update available: ${exports.C.yellow}v${cli_env_js_1.PKG_VERSION}${exports.C.reset} → ${exports.C.cyan}v${latest}${exports.C.reset}`);
+        console.log(`     ${exports.C.dim}npm install -g @finchagentic/mcp@${latest}${exports.C.reset}  ${exports.C.dim}or restart your MCP client${exports.C.reset}`);
+        console.log(`${sep}\n`);
+    }
+    catch {
+        // silently ignore
+    }
+}

package/dist/cli-vault.js

@@ -0,0 +1,75 @@
+"use strict";
+// `finch vault` - inspect the local, user-owned vault.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.vaultFlow = vaultFlow;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const config_js_1 = require("./config.js");
+const cli_ui_js_1 = require("./cli-ui.js");
+function vaultFlow() {
+    const cfg = (0, config_js_1.readConfig)();
+    const dir = path.join(os.homedir(), ".finch", "vault");
+    const shortDir = dir.replace(os.homedir(), "~");
+    const SEP_V = `  ${"─".repeat(52)}`;
+    console.log(`\n  ${cli_ui_js_1.C.cyan}${cli_ui_js_1.C.bold}finch vault${cli_ui_js_1.C.reset}\n`);
+    if (cfg.vaultBackend !== "local") {
+        console.log(`  ${cli_ui_js_1.C.yellow}○${cli_ui_js_1.C.reset}  Local vault is ${cli_ui_js_1.C.yellow}off${cli_ui_js_1.C.reset} - vault tools use the hosted store (needs \`finch login\`).`);
+        console.log(`     ${cli_ui_js_1.C.dim}Turn it on:${cli_ui_js_1.C.reset} ${cli_ui_js_1.C.cyan}finch setup${cli_ui_js_1.C.reset} ${cli_ui_js_1.C.dim}(answer "y" to local vault) - then your data lives here, on your machine.${cli_ui_js_1.C.reset}\n`);
+        return;
+    }
+    let entries = 0, versions = 0, creds = 0;
+    try {
+        const idx = JSON.parse(fs.readFileSync(path.join(dir, "index.json"), "utf8"));
+        const e = idx.entries ?? {};
+        entries = Object.keys(e).length;
+        versions = Object.values(e).reduce((n, x) => n + (x?.versions?.length ?? 0), 0);
+    }
+    catch { /* no index yet */ }
+    try {
+        creds = Object.keys(JSON.parse(fs.readFileSync(path.join(dir, "credentials.json"), "utf8"))).length;
+    }
+    catch { /* none */ }
+    console.log(`  ${cli_ui_js_1.C.green}●${cli_ui_js_1.C.reset}  Local vault is ${cli_ui_js_1.C.green}on${cli_ui_js_1.C.reset} - your data, on your machine, no account.`);
+    console.log(`${SEP_V}`);
+    console.log(`     ${cli_ui_js_1.C.dim}Location   ${cli_ui_js_1.C.reset}${shortDir}`);
+    console.log(`     ${cli_ui_js_1.C.dim}Contents   ${cli_ui_js_1.C.reset}${entries} entr${entries === 1 ? "y" : "ies"} ${cli_ui_js_1.C.dim}·${cli_ui_js_1.C.reset} ${versions} version${versions === 1 ? "" : "s"} ${cli_ui_js_1.C.dim}·${cli_ui_js_1.C.reset} ${creds} credential${creds === 1 ? "" : "s"} ${cli_ui_js_1.C.dim}(encrypted)${cli_ui_js_1.C.reset}`);
+    console.log(`${SEP_V}`);
+    console.log(`  ${cli_ui_js_1.C.dim}It's a plain folder - back it up or sync it however you like:${cli_ui_js_1.C.reset}`);
+    console.log(`     ${cli_ui_js_1.C.cyan}cp -r ${shortDir} ~/backup${cli_ui_js_1.C.reset}   ${cli_ui_js_1.C.dim}# copy${cli_ui_js_1.C.reset}`);
+    console.log(`     ${cli_ui_js_1.C.cyan}git -C ${shortDir} init${cli_ui_js_1.C.reset}      ${cli_ui_js_1.C.dim}# version-control it${cli_ui_js_1.C.reset}`);
+    console.log(`  ${cli_ui_js_1.C.dim}Nothing leaves this machine unless you move it.${cli_ui_js_1.C.reset}\n`);
+}