@finchagentic/mcp 4.7.2 → 4.7.3

package/dist/tools/scanner.js

@@ -7,6 +7,7 @@ exports.assessTokenSecurity = assessTokenSecurity;
 exports.handleScannerTool = handleScannerTool;
 const zod_1 = require("zod");
 const _http_cache_js_1 = require("../_http-cache.js");
+const _zod_helpers_js_1 = require("../_zod-helpers.js");
 // ── Constants ─────────────────────────────────────────────────────────────────
 const DEFAULT_MIN_LIQ = 50000;
 const DEFAULT_MIN_SCORE = 50;
@@ -343,9 +344,9 @@ exports.SCANNER_TOOLS = [
 async function handleScannerTool(name, args) {
     // ── score_token ────────────────────────────────────────────────────────────
     if (name === "score_token") {
-        const parsed = ScoreTokenSchema.safeParse(args);
-        if (!parsed.success)
-            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+        const parsed = (0, _zod_helpers_js_1.parseOrError)(ScoreTokenSchema, args);
+        if (!parsed.ok)
+            return parsed.error;
         const { address, minLiquidity = DEFAULT_MIN_LIQ } = parsed.data;
         const data = await fetchJson(`https://api.dexscreener.com/latest/dex/tokens/${address}`);
         const pair = (data.pairs ?? [])
@@ -412,9 +413,9 @@ async function handleScannerTool(name, args) {
     }
     // ── check_token ────────────────────────────────────────────────────────────
     if (name === "check_token") {
-        const parsed = CheckTokenSchema.safeParse(args);
-        if (!parsed.success)
-            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+        const parsed = (0, _zod_helpers_js_1.parseOrError)(CheckTokenSchema, args);
+        if (!parsed.ok)
+            return parsed.error;
         const { address } = parsed.data;
         // GoPlusLabs - chain 8453 = Base mainnet
         const data = await fetchJson(`https://api.gopluslabs.io/api/v1/token_security/8453?contract_addresses=${address}`);
@@ -474,9 +475,9 @@ async function handleScannerTool(name, args) {
     }
     // ── scan_market ────────────────────────────────────────────────────────────
     if (name === "scan_market") {
-        const parsed = ScanDipsSchema.safeParse(args ?? {});
-        if (!parsed.success)
-            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+        const parsed = (0, _zod_helpers_js_1.parseOrError)(ScanDipsSchema, args ?? {});
+        if (!parsed.ok)
+            return parsed.error;
         const input = args;
         const mode = input?.mode === "momentum" ? "momentum" : "dips";
         const { minScore = DEFAULT_MIN_SCORE, minLiquidity = DEFAULT_MIN_LIQ, limit = 40 } = parsed.data;

package/dist/tools/stake.js

@@ -7,27 +7,14 @@ const ethers_1 = require("ethers");
 const convex_js_1 = require("../convex.js");
 const config_js_1 = require("../config.js");
 const rh_mcp_js_1 = require("./rh-mcp.js");
-// FINCH staking - MCP wrapper around the EXISTING app/convex staking actions
-// (stake.ts's stakeFINCH/unstakeFINCH, stakeInternal.ts's myStakingStats/
-// globalStats). No staking logic lives here - this only parses a
-// human-friendly amount ("all", "max", "50%", "1m", "100k", a raw number)
-// into wei and calls the backend, exactly like the webapp's Stake page does.
+// FINCH staking - MCP wrapper around the existing app/convex staking
+// actions. Parses a human amount ("all", "50%", "1m") into wei and calls
+// the backend.
 //
-// IMPORTANT - custodial wallet, not the local signing wallet: unlike
-// base_mcp_swap/rh_mcp_swap (which sign and broadcast with the LOCAL
-// ~/.finch/wallet.json key and need no login), staking moves FINCH from the
-// account's CUSTODIAL wallet (the one shown on the webapp's Wallet page) -
-// stake.ts's actions resolve identity via a real logged-in session, not a
-// wallet signature. Requires `finch login` first; there is no way around
-// this without changing stake.ts's own session-based design, which is out
-// of scope here. The local wallet and the custodial wallet are DIFFERENT
-// addresses with different balances - never conflate them in output.
-//
-// SECURITY: no tool here ever returns a private key or seed phrase, and
-// none ever will - the custodial key stays server-side (Turnkey-enclave /
-// encrypted-at-rest), exactly as it already does for the webapp. "Log in,
-// then stake" is the ceiling of what this integration does; it does not,
-// and must not, add an export path.
+// Uses the CUSTODIAL wallet (session-based, requires `finch login`), not
+// the local signing wallet base_mcp_swap/rh_mcp_swap use - different
+// address, different balance, never conflate. No tool here ever returns a
+// private key or seed phrase; the custodial key stays server-side.
 const FINCH_CA = "0xce1981b0431fb495912cab057d2877a290199824";
 const FINCH_DECIMALS = 18;
 const ERC20_BALANCE_ABI = ["function balanceOf(address) view returns (uint256)"];

package/dist/tools/vault.js

@@ -10,6 +10,7 @@ const memory_js_1 = require("./memory.js");
 const local_vault_js_1 = require("../local-vault.js");
 const local_memory_js_1 = require("../local-memory.js");
 const project_js_1 = require("../project.js");
+const _zod_helpers_js_1 = require("../_zod-helpers.js");
 const VAULT_TYPES = ["research", "execution", "workflow", "prompt", "file", "memory", "code", "credential"];
 exports.VAULT_TOOLS = [
     {
@@ -366,9 +367,9 @@ async function handleVaultTool(name, args) {
     const localVault = (0, local_vault_js_1.getLocalVaultConfig)();
     switch (name) {
         case "vault_save": {
-            const parsed = SaveSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(SaveSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             if (parsed.data.type === "credential") {
                 // vault_save writes plaintext to disk/DB - "credential" is only a
                 // valid FILTER value for vault_list/search/export (which correctly
@@ -447,9 +448,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: lines.join("\n") }] };
         }
         case "code_session_save": {
-            const parsed = CodeSessionSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(CodeSessionSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { project, summary, filesChanged, decisions, nextSteps, tags } = parsed.data;
             const projectSlug = project.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 60) || "session";
             const key = `code/${projectSlug}`;
@@ -536,9 +537,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: lines.join("\n") }] };
         }
         case "vault_read": {
-            const parsed = ReadSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(ReadSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const vaultReadKey = parsed.data.key;
             let data;
             try {
@@ -619,9 +620,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: lines.join("\n") }] };
         }
         case "vault_list": {
-            const parsed = ListSchema.safeParse(args ?? {});
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(ListSchema, args ?? {});
+            if (!parsed.ok)
+                return parsed.error;
             const params = new URLSearchParams();
             if (parsed.data.type)
                 params.set("type", parsed.data.type);
@@ -651,20 +652,12 @@ async function handleVaultTool(name, args) {
             };
         }
         case "vault_search": {
-            const parsed = SearchSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
-            // Full-text search, proxied through Convex (searchSupermemory is a
-            // legacy name - it calls Finch's own /memory/search endpoint, not a
-            // third-party semantic service; there is no embedding step here). Large vault
-            // entries are indexed as multiple chunks tagged with isVaultChunk +
-            // vaultKey - group chunks back to their parent entry so the result
-            // list shows one row per entry, not one row per chunk.
-            //
-            // Skipped entirely when vaultBackend is local - a local vault's whole
-            // point is "no network," so the query string must never leave the
-            // machine, not even to check for results before falling back to the
-            // (always-local) full-text branch below.
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(SearchSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
+            // Full-text search via Convex (no embeddings). Large entries are
+            // chunked (isVaultChunk/vaultKey) - grouped back to one row per entry.
+            // Skipped entirely in local-vault mode - query must never leave the machine.
             if (!localVault) {
                 const limit = parsed.data.limit ?? 20;
                 // Over-fetch so that after chunk dedup we still have ~limit rows.
@@ -752,9 +745,9 @@ async function handleVaultTool(name, args) {
             };
         }
         case "vault_history": {
-            const parsed = HistorySchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(HistorySchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const histKey = parsed.data.key;
             let data;
             try {
@@ -792,9 +785,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: [...header, ...rows].join("\n") }] };
         }
         case "vault_diff": {
-            const parsed = DiffSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(DiffSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { key, fromVersion, toVersion } = parsed.data;
             let data;
             try {
@@ -836,9 +829,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: lines.join("\n") }] };
         }
         case "vault_export": {
-            const parsed = ExportSchema.safeParse(args ?? {});
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(ExportSchema, args ?? {});
+            if (!parsed.ok)
+                return parsed.error;
             const params = parsed.data.type ? `?type=${parsed.data.type}` : "";
             const data = localVault
                 ? (0, local_vault_js_1.localVaultExport)(localVault, parsed.data.type)
@@ -855,9 +848,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: [...header, ...rows.join("\n\n---\n\n").split("\n")].join("\n") }] };
         }
         case "vault_store_credential": {
-            const parsed = StoreCredentialSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(StoreCredentialSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const data = localVault
                 ? (0, local_vault_js_1.localVaultStoreCredential)(localVault, parsed.data.name, parsed.data.value, parsed.data.description)
                 : await (0, convex_js_1.callConvex)("/vault/credential/store", "POST", parsed.data, "vault_store_credential");
@@ -866,9 +859,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: `🔐 Credential stored: \`${data.name}\`\nKey: \`${data.key}\`\nRetrieve with: \`vault_get_credential name: "${data.name}"\`` }] };
         }
         case "vault_get_credential": {
-            const parsed = GetCredentialSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(GetCredentialSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const params = new URLSearchParams({ name: parsed.data.name });
             let data;
             try {
@@ -889,9 +882,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: lines.join("\n") }] };
         }
         case "vault_pin": {
-            const parsed = PinSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(PinSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { key, pinned = true } = parsed.data;
             const data = localVault
                 ? (0, local_vault_js_1.localVaultPin)(localVault, key, pinned)
@@ -901,9 +894,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: pinned ? `📌 Pinned: \`${key}\`` : `📌 Unpinned: \`${key}\`` }] };
         }
         case "vault_unpublish": {
-            const parsed = UnpublishSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(UnpublishSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             // Publishing is a hosted/marketplace concept - a local vault is private
             // by construction, so there is nothing to retract.
             if (localVault) {
@@ -922,9 +915,9 @@ async function handleVaultTool(name, args) {
             };
         }
         case "vault_delete": {
-            const parsed = DeleteSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(DeleteSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             if (args?.confirm !== true) {
                 return {
                     content: [{
@@ -957,9 +950,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: `🗑️ Deleted: \`${parsed.data.key}\` (${data.versionsRemoved ?? 0} versions removed${memoryNote})` }] };
         }
         case "vault_tag": {
-            const parsed = TagSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(TagSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { key, tags, replace = false } = parsed.data;
             const data = localVault
                 ? (0, local_vault_js_1.localVaultTag)(localVault, key, tags, replace)
@@ -969,9 +962,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: `🏷️ Tags ${replace ? "set" : "updated"} on \`${key}\`: ${(data.tags ?? tags).join(", ")}` }] };
         }
         case "vault_link": {
-            const parsed = LinkSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(LinkSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { fromKey, toKey, relation } = parsed.data;
             const data = localVault
                 ? (0, local_vault_js_1.localVaultLink)(localVault, fromKey, toKey, relation)
@@ -982,9 +975,9 @@ async function handleVaultTool(name, args) {
             return { content: [{ type: "text", text: `🔗 ${action}: \`${fromKey}\` -[${relation}]→ \`${toKey}\`` }] };
         }
         case "vault_related": {
-            const parsed = RelatedSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(RelatedSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { key, relation } = parsed.data;
             const params = new URLSearchParams({ key });
             if (relation)

package/package.json

@@ -1,18 +1,22 @@
 {
   "name": "@finchagentic/mcp",
-  "version": "4.7.2",
+  "version": "4.7.3",
   "description": "The runtime layer for Agentic AI. Persistent memory, autonomous agents, and workflows that survive every session.",
   "main": "dist/index.js",
   "bin": {
     "finch": "dist/cli.js",
-    "finch-mcp": "dist/index.js",
-    "@finchagentic/mcp": "dist/index.js"
+    "finch-mcp": "dist/index.js"
   },
   "preferGlobal": true,
   "scripts": {
-    "smoke": "node scripts/smoke.mjs",
-    "check:sync": "node scripts/check-registry-sync.mjs",
-    "test": "npm run smoke && npm run check:sync"
+    "build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsc",
+    "dev": "ts-node src/index.ts",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:mutation": "node scripts/mutation-check.js",
+    "prepare": "husky",
+    "prepublishOnly": "npm run build && node scripts/version-readme.js"
   },
   "lint-staged": {
     "*.{ts,tsx}": "eslint --fix"
@@ -48,7 +52,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
     "ethers": "^6.17.0",
-    "zod": "^4.6.5"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "@eslint/js": "^9.39.1",
@@ -66,6 +70,5 @@
   },
   "publishConfig": {
     "access": "public"
-  },
-  "mcpName": "io.github.finchagentic/mcp"
+  }
 }