@finchagentic/mcp 4.7.2 → 4.7.3

package/dist/tools/defi.js

@@ -7,6 +7,7 @@ const zod_1 = require("zod");
 const convex_js_1 = require("../convex.js");
 const wallet_js_1 = require("../wallet.js");
 const token_decimals_js_1 = require("../token-decimals.js");
+const _zod_helpers_js_1 = require("../_zod-helpers.js");
 exports.DEFI_TOOLS = [
     {
         name: "get_defi_yields",
@@ -223,9 +224,9 @@ async function handleDefiTool(name, args) {
         // list either, so this case was already unreachable dead code - no Tool
         // registers the name "analyze_wallet" for the MCP dispatcher to route to.
         case "get_defi_yields": {
-            const parsed = DefiYieldsSchema.safeParse(args ?? {});
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(DefiYieldsSchema, args ?? {});
+            if (!parsed.ok)
+                return parsed.error;
             const { token, minApy = 1, limit = 20 } = parsed.data;
             let pools;
             try {

package/dist/tools/insider.js

@@ -1,18 +1,8 @@
 "use strict";
-// Insider transactions from SEC Form 4 — parsed from the filings themselves.
-//
-// Two accuracy traps make naive versions of this actively misleading, and both
-// are handled here:
-//
-//  1. A company's filing feed contains Form 4s where that company is the
-//     REPORTING OWNER of a stake in some other issuer. Those are not insider
-//     trades in the ticker you asked about, so every filing is checked against
-//     `issuerTradingSymbol` before it counts.
-//
-//  2. Most "insider selling" is transaction code F — shares withheld to cover
-//     tax on vesting RSUs. It is automatic, not a decision, and carries no
-//     signal. Only P (open-market purchase) and S (open-market sale) reflect a
-//     choice, so they are reported separately from everything else.
+// Insider transactions from SEC Form 4. Two traps handled: (1) filings
+// where the company is REPORTING OWNER of another issuer are filtered via
+// `issuerTradingSymbol`; (2) code F (tax withholding on RSU vests, no real
+// signal) is separated from P/S (actual buy/sell decisions).
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.INSIDER_TOOLS = void 0;
 exports.buildInsiderSummary = buildInsiderSummary;

package/dist/tools/insight.js

@@ -8,6 +8,7 @@ const llm_js_1 = require("../llm.js");
 const memory_js_1 = require("./memory.js");
 const enrichment_router_js_1 = require("../enrichment-router.js");
 const signal_gate_js_1 = require("../signal-gate.js");
+const _zod_helpers_js_1 = require("../_zod-helpers.js");
 exports.INSIGHT_TOOLS = [
     {
         name: "ask_finch",
@@ -449,9 +450,9 @@ async function handleInsightTool(name, args) {
         return { content: [{ type: "text", text: contextHeader + finalAnswer }] };
     }
     if (name === "market_thesis") {
-        const parsed = MarketThesisSchema.safeParse(args);
-        if (!parsed.success)
-            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+        const parsed = (0, _zod_helpers_js_1.parseOrError)(MarketThesisSchema, args);
+        if (!parsed.ok)
+            return parsed.error;
         const { token, context } = parsed.data;
         const priceData = await fetchVerifiedPrice(token);
         // Hard guard: without a verified live price, refuse to generate. Better
@@ -517,9 +518,9 @@ async function handleInsightTool(name, args) {
         };
     }
     if (name === "trade_plan") {
-        const parsed = TradePlanSchema.safeParse(args);
-        if (!parsed.success)
-            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+        const parsed = (0, _zod_helpers_js_1.parseOrError)(TradePlanSchema, args);
+        if (!parsed.ok)
+            return parsed.error;
         const { token, side = "long", portfolioSize, riskTolerance = "moderate", timeframe } = parsed.data;
         const priceData = await fetchVerifiedPrice(token);
         // Hard guard: trade plans without verified live price = entry/SL/TP

package/dist/tools/market.js

@@ -11,6 +11,7 @@ exports.handleMarketTool = handleMarketTool;
 const zod_1 = require("zod");
 const _http_cache_js_1 = require("../_http-cache.js");
 const dex_pair_js_1 = require("../dex-pair.js");
+const _zod_helpers_js_1 = require("../_zod-helpers.js");
 const COINGECKO = "https://api.coingecko.com/api/v3";
 const SYMBOL_TO_ID = {
     BTC: "bitcoin", ETH: "ethereum", SOL: "solana", BNB: "binancecoin",
@@ -291,9 +292,9 @@ async function fetchMarketSnapshot() {
 async function handleMarketTool(name, args) {
     switch (name) {
         case "get_market_data": {
-            const parsed = GetMarketDataSchema.safeParse(args ?? {});
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(GetMarketDataSchema, args ?? {});
+            if (!parsed.ok)
+                return parsed.error;
             const { token } = parsed.data;
             if (token) {
                 const resolved = await resolveTokenId(token);
@@ -347,9 +348,9 @@ async function handleMarketTool(name, args) {
             return { content: [{ type: "text", text: lines.join("\n") }] };
         }
         case "get_token_data": {
-            const parsed = GetTokenDataSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(GetTokenDataSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const q = parsed.data.question;
             // Try to extract a known symbol first, then fall back to search
             const upperQ = q.toUpperCase();
@@ -379,9 +380,9 @@ async function handleMarketTool(name, args) {
             };
         }
         case "compare_tokens": {
-            const parsed = CompareTokensSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(CompareTokensSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const syms = parsed.data.tokens.map(t => t.toUpperCase());
             const ids = syms.map(s => SYMBOL_TO_ID[s]).filter(Boolean);
             const unknown = syms.filter(s => !SYMBOL_TO_ID[s]);
@@ -447,9 +448,9 @@ async function handleMarketTool(name, args) {
             return { content: [{ type: "text", text: lines.join("\n") }], structuredContent: buildMarketOverview(global, fg, trendCoins) };
         }
         case "token_history": {
-            const parsed = TokenHistorySchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(TokenHistorySchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const days = parsed.data.days ?? 7;
             const resolved = await resolveTokenId(parsed.data.token);
             if (!resolved)
@@ -496,9 +497,9 @@ async function handleMarketTool(name, args) {
             };
         }
         case "get_base_token_data": {
-            const parsed = GetBaseTokenDataSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(GetBaseTokenDataSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const address = parsed.data.tokenAddress.toLowerCase();
             const [pair, coingeckoId] = await Promise.all([
                 fetchDexscreenerBaseToken(address),

package/dist/tools/memory.js

@@ -50,6 +50,7 @@ const public_url_js_1 = require("../public-url.js");
 const local_vault_js_1 = require("../local-vault.js");
 const local_memory_js_1 = require("../local-memory.js");
 const _text_search_js_1 = require("../_text-search.js");
+const _zod_helpers_js_1 = require("../_zod-helpers.js");
 // memory_extract and memory_consolidate used to run their own LLM calls here
 // (and a matching pair of Convex routes did the same server-side). Both are now
 // two-pass: the tool fetches and stores, the caller decides what the facts are
@@ -197,7 +198,9 @@ async function syncToSupermemory(content, metadata, sourceUrl) {
 // problem is the token/key was rejected. Only genuinely transient errors
 // (network hiccup, the other RRF side still succeeding) degrade silently
 // to an empty contribution - an auth failure is rethrown so it reaches the
-// user instead of being swallowed.
+// user instead of being swallowed. Found live: memory_search/memory_context/
+// memory_insight/memory_consolidate all share this retrieval path, so a
+// single fix here closes the same bug across all four tools.
 function isAuthFailure(err) {
     return err instanceof Error && /Authentication required/i.test(err.message);
 }
@@ -315,7 +318,7 @@ exports.MEMORY_TOOLS = [
             "Unlike vault_save, memory_add is instant: no versioning, no type required. " +
             "Use for notes, decisions, preferences, or anything you want to find later. " +
             "Pass sourceUrl to fetch and index any web page, GitHub repo, or Notion page automatically - " +
-            "searchable in ~30s. Retrieval is hybrid (semantic embeddings fused with keyword search, reranked by recency and pinned weight) - " +
+            "searchable in ~30s. Retrieval is full-text (keyword) search, not embeddings - " +
             "'what did I say about ETH yield?' finds notes containing those words or close variants, " +
             "not unrelated phrasing with the same meaning. " +
             "Auto-deduplicates: identical content in your recent 50 memories is skipped (override with force:true). " +
@@ -337,11 +340,11 @@ exports.MEMORY_TOOLS = [
     },
     {
         name: "memory_search",
-        description: "Search your stored memories. Hybrid retrieval: semantic embeddings fused with keyword " +
-            "search (Reciprocal Rank Fusion), reranked by recency - notes lose ~30% relevance per quarter - " +
-            "with pinned notes immune to decay. Understands meaning, not just words: 'low risk crypto yield' " +
-            "matches a note phrased as 'conservative DeFi strategies'. Exact-token lookups (env var names, " +
-            "contract addresses) also work via the lexical side.",
+        description: "Full-text (keyword) search over your stored memories, with 90-day time-decay weighting so " +
+            "recent notes outrank stale ones with similar wording. Good for exact-token lookups (env var " +
+            "names, contract addresses, IDs, specific phrases) - it does not understand meaning, so " +
+            "'low risk crypto yield' will not match a note phrased as 'conservative DeFi strategies' " +
+            "unless the words themselves overlap.",
         inputSchema: {
             type: "object",
             properties: {
@@ -355,7 +358,7 @@ exports.MEMORY_TOOLS = [
         name: "memory_context",
         description: "Retrieve the most relevant memories for a topic, formatted as AI-ready context. " +
             "Use at the start of research tasks to prime with everything stored about a topic. " +
-            "Hybrid retrieval: embeddings + keyword, fused and reranked - phrasing can differ from the note. " +
+            "Uses full-text (keyword) search, not embeddings - phrase your topic with the words " +
             "you expect were actually used when the memory was saved.",
         inputSchema: {
             type: "object",
@@ -535,9 +538,9 @@ function buildMemoryList(tag, results) {
 async function handleMemoryTool(name, args) {
     switch (name) {
         case "memory_add": {
-            const parsed = AddSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(AddSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { content, title, tags, sourceUrl, force } = parsed.data;
             // `sourceUrl` is not stored, it is fetched and indexed — by the local
             // memory server on the user's own machine when local mode is on. An
@@ -581,18 +584,9 @@ async function handleMemoryTool(name, args) {
             // dedupes even before supermemory has indexed the first one.
             if (!sourceUrl)
                 rememberRecentHash(hash, data?.id ?? "saved", title);
-            // ─── Conflict hint (not a proof) ──────────────────────────────────
-            // Finch never runs its own LLM call to judge this - "two-pass, no API
-            // key needed" is deliberate (see this file's header comment), and an
-            // autonomous contradiction call would break that. Instead this just
-            // resurfaces whatever memory_search's own retrieval already ranks as
-            // related to the content just saved, so the CALLING model - already
-            // reasoning about this exact save, in the same turn, no extra API
-            // cost - can judge for itself whether the two actually conflict and
-            // decide what to do (mark the old one superseded, fold both into
-            // memory_consolidate, or just note the new one is the current one).
-            // Best-effort: a search hiccup here must never fail or block the save
-            // that already succeeded above.
+            // Conflict hint, not a proof - no LLM call server-side (two-pass, no
+            // API key). Resurfaces related existing memories so the calling
+            // model decides. Best-effort, must never block the save above.
             let conflictNote = "";
             try {
                 const related = await hybridMemorySearch(content, 8);
@@ -636,9 +630,9 @@ async function handleMemoryTool(name, args) {
             };
         }
         case "memory_search": {
-            const parsed = SearchSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(SearchSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { query, limit = 10 } = parsed.data;
             // Over-fetch so post-decay ranking still has enough material.
             const overfetch = Math.min(50, Math.max(limit * 2, 20));
@@ -718,9 +712,9 @@ async function handleMemoryTool(name, args) {
             return { content: [{ type: "text", text: [header, "", ...rows, promotionHint].filter(Boolean).join("\n") }], structuredContent: buildMemorySearch(query, decayed) };
         }
         case "memory_context": {
-            const parsed = ContextSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(ContextSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { topic, limit = 8 } = parsed.data;
             // v3.25.1: use hybrid retrieval so context loading picks up exact-token
             // matches (env var names, model IDs, contract addresses) that semantic-
@@ -771,16 +765,16 @@ async function handleMemoryTool(name, args) {
                             `• memory_add (URL indexing) - ✅`,
                             `• Google Drive / Gmail / Notion - connect at finchagentic.com`,
                             ``,
-                            `**Capabilities:** Hybrid retrieval (semantic + keyword, RRF fusion) with time-decay ranking; pinned notes bypass decay.`,
+                            `**Capabilities:** Full-text (keyword) search with 90-day time-decay ranking - not embeddings, no vector search.`,
                         ].join("\n"),
                     }],
                 structuredContent: buildMemoryProfile(data),
             };
         }
         case "memory_list": {
-            const parsed = ListSchema.safeParse(args ?? {});
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(ListSchema, args ?? {});
+            if (!parsed.ok)
+                return parsed.error;
             const { limit = 20, tag } = parsed.data;
             const localList = (0, local_memory_js_1.getLocalMemoryConfig)();
             let results;
@@ -809,9 +803,9 @@ async function handleMemoryTool(name, args) {
             return { content: [{ type: "text", text: [header, "", ...rows].join("\n") }], structuredContent: buildMemoryList(tag, results) };
         }
         case "memory_delete": {
-            const parsed = DeleteMemSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(DeleteMemSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             if (args?.confirm !== true) {
                 return {
                     content: [{
@@ -840,9 +834,9 @@ async function handleMemoryTool(name, args) {
             return { content: [{ type: "text", text: `🗑️ Memory deleted: \`${parsed.data.id}\`` }] };
         }
         case "memory_insight": {
-            const parsed = InsightSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(InsightSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { topic, depth = "standard" } = parsed.data;
             const memLimit = depth === "deep" ? 15 : depth === "quick" ? 5 : 8;
             // v3.25.1: hybrid retrieval for memory side (was semantic-only) so the
@@ -928,9 +922,9 @@ async function handleMemoryTool(name, args) {
             return { content: [{ type: "text", text: lines.filter(l => l !== undefined).join("\n") }] };
         }
         case "memory_extract": {
-            const parsed = ExtractSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(ExtractSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { text, facts, source = "extract" } = parsed.data;
             // ── PASS 1: hand the text back with the extraction rubric ───────────
             // Deciding what counts as a fact is judgement about *this user's*
@@ -985,9 +979,9 @@ async function handleMemoryTool(name, args) {
             };
         }
         case "memory_consolidate": {
-            const parsed = ConsolidateSchema.safeParse(args);
-            if (!parsed.success)
-                return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+            const parsed = (0, _zod_helpers_js_1.parseOrError)(ConsolidateSchema, args);
+            if (!parsed.ok)
+                return parsed.error;
             const { topic, limit = 12, summary } = parsed.data;
             const localConsolidateCfg = (0, local_memory_js_1.getLocalMemoryConfig)();
             // ── PASS 2: save the caller's merged version ────────────────────────
@@ -1050,22 +1044,10 @@ async function handleMemoryTool(name, args) {
                     }],
             };
         }
-        // memory_publish was removed - it was broken two levels deep. The tool
-        // called POST /vault/save with isPublic/authorName fields that the
-        // handler silently dropped (only type/title/content/key/contentType/
-        // agentId/tags/commitMsg/metadata are forwarded to vault.saveEntry - see
-        // app/convex/http.ts), so `published` was never actually set true; the
-        // real publishEntry mutation (POST /vault/publish) existed but this tool
-        // never called it. And even a correctly-wired publish would have done
-        // nothing observable: nothing anywhere reads the `published` field for
-        // cross-user browsing - no /vault/community route (dangling comment
-        // only, same pattern as the other removed routes), no backend query for
-        // it, no "Memory Marketplace" page in app/src. The tool asked users to
-        // accept an "IRREVERSIBLE, PUBLIC" risk for a marketplace that doesn't
-        // exist at any layer. Re-add only alongside building the actual
-        // discovery path: a community-browse query + route + UI that reads
-        // `published: true` entries. vault_unpublish is left in place - it's a
-        // correct, harmless no-op until then.
+        // memory_publish removed - broken (silently dropped isPublic/authorName,
+        // never actually set `published`) AND pointless even if fixed - no
+        // Memory Marketplace page/query ever reads that field. vault_unpublish
+        // stays, it's a harmless no-op. Re-add only alongside building discovery.
         default:
             return null;
     }

package/dist/tools/monitor.js

@@ -5,6 +5,7 @@ exports.buildMonitorList = buildMonitorList;
 exports.handleMonitorTool = handleMonitorTool;
 const zod_1 = require("zod");
 const convex_js_1 = require("../convex.js");
+const _zod_helpers_js_1 = require("../_zod-helpers.js");
 const TRIGGER_BASE = "https://api.trigger.dev/api/v1";
 const MONITOR_TASK_ID = "finch-monitor";
 const MONITOR_INPUT_SCHEMA = {
@@ -104,9 +105,9 @@ function buildMonitorList(schedules, configs = {}) {
 }
 async function handleMonitorTool(name, args) {
     if (name === "schedule_research") {
-        const parsed = CreateSchema.safeParse(args);
-        if (!parsed.success)
-            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+        const parsed = (0, _zod_helpers_js_1.parseOrError)(CreateSchema, args);
+        if (!parsed.ok)
+            return parsed.error;
         const key = getKey();
         if (!key)
             return noKeyMsg();
@@ -282,9 +283,9 @@ async function handleMonitorTool(name, args) {
         }
     }
     if (name === "cancel_monitor") {
-        const parsed = CancelSchema.safeParse(args);
-        if (!parsed.success)
-            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+        const parsed = (0, _zod_helpers_js_1.parseOrError)(CancelSchema, args);
+        if (!parsed.ok)
+            return parsed.error;
         if (args?.confirm !== true) {
             return {
                 content: [{

package/dist/tools/os.js

@@ -2,20 +2,17 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OS_TOOLS = void 0;
 exports.handleOsTool = handleOsTool;
-const convex_js_1 = require("../convex.js");
-const token_gate_js_1 = require("../token-gate.js");
-const wallet_js_1 = require("../wallet.js");
 const local_memory_js_1 = require("../local-memory.js");
 const config_js_1 = require("../config.js");
 const CONVEX_SITE = process.env.FINCH_CONVEX_URL ?? "https://valuable-fish-533.convex.site";
+// finch_status moved to ../finch-status.ts (Sep 2026) - the old version here
+// made 6 Promise.allSettled backend calls and silently defaulted every field
+// to zero/basic on ANY failure (including a 401), which read as "empty but
+// healthy" instead of surfacing a real auth problem. The new one makes one
+// cheap authed call and reports the real state. Kept out of OS_TOOLS/this
+// switch entirely (not just filtered at list time) so there's exactly one
+// place this tool is defined - server.ts wires it in directly.
 exports.OS_TOOLS = [
-    {
-        name: "finch_status",
-        description: "Full runtime dashboard - memory size, persistent agents, active automations, recent vault research, " +
-            "execution scores, and your tier. Like `htop` for your AI runtime. " +
-            "Run this to see what's running and what state your runtime is currently holding.",
-        inputSchema: { type: "object", properties: {}, required: [] },
-    },
     {
         name: "finch_diagnostics",
         description: "Health check for all Finch services - Convex backend, Firecrawl, Supermemory, and configured API keys. " +
@@ -38,81 +35,6 @@ exports.OS_TOOLS = [
 ];
 async function handleOsTool(name, args) {
     switch (name) {
-        case "finch_status": {
-            // Respect local memory mode here too - querying Convex's /memory/profile
-            // when writes have been going to a local supermemory server instead
-            // would report a stale/zero count (the exact bug memory_profile's own
-            // handler was fixed to avoid).
-            const localStatusCfg = (0, local_memory_js_1.getLocalMemoryConfig)();
-            const memoryProfileCall = localStatusCfg
-                ? (0, local_memory_js_1.localMemoryProfile)(localStatusCfg)
-                : (0, convex_js_1.callConvex)("/memory/profile", "GET", undefined, "memory_profile");
-            const [tierResult, walletResult, memRes, autoRes, vaultRes, agentsRes] = await Promise.allSettled([
-                (0, token_gate_js_1.getTier)(),
-                (0, wallet_js_1.getOrCreateWallet)(),
-                memoryProfileCall,
-                (0, convex_js_1.callConvex)("/automations/list", "GET", undefined, "list_automations"),
-                (0, convex_js_1.callConvex)("/vault/list?type=research&limit=5", "GET", undefined, "vault_list"),
-                (0, convex_js_1.callConvex)("/vault/list?type=memory&limit=20", "GET", undefined, "vault_list"),
-            ]);
-            const tier = tierResult.status === "fulfilled" ? tierResult.value : "basic";
-            const wallet = walletResult.status === "fulfilled" ? walletResult.value : null;
-            const mem = memRes.status === "fulfilled" ? memRes.value : null;
-            const autos = autoRes.status === "fulfilled" ? autoRes.value : null;
-            const vault = vaultRes.status === "fulfilled" ? vaultRes.value : null;
-            const agents = agentsRes.status === "fulfilled" ? agentsRes.value : null;
-            const automations = autos?.automations ?? [];
-            const activeAutos = automations.filter((a) => a.status === "active");
-            const vaultEntries = vault?.entries ?? [];
-            // Persistent agents live in vault as type=memory with key prefix "agent/"
-            const persistentAgents = (agents?.entries ?? []).filter((e) => typeof e.key === "string" && e.key.startsWith("agent/"));
-            const memTotal = mem?.total ?? 0;
-            const memStatus = mem?.status ?? "unknown";
-            const tierLabel = tier === "holder"
-                ? "\u{1F7E2} **Holder**  - premium tools unlocked"
-                : "⚪ **Basic**   - hold FINCH on Base to unlock premium tools";
-            const walletShort = wallet
-                ? `${wallet.address.slice(0, 6)}...${wallet.address.slice(-4)}`
-                : "not configured";
-            const lines = [
-                `**Finch Runtime - System Status**`,
-                `────────────────────────────────`,
-                ``,
-                `🔑 **Tier**         ${tierLabel}`,
-                `👛 **Wallet**       ${walletShort}`,
-                ``,
-                `🧠 **Memory**       ${memStatus === "ok" ? "✅" : "⚠️"} ${memTotal} entries · Space: ${mem?.space ?? "-"}`,
-                `🤖 **Agents**       ${persistentAgents.length} persistent agent${persistentAgents.length === 1 ? "" : "s"} in vault`,
-                `⚡ **Automations**  ${activeAutos.length} active of ${automations.length} total`,
-                `📚 **Vault**        ${vaultEntries.length} recent research entries`,
-                ``,
-            ];
-            if (activeAutos.length > 0) {
-                lines.push(`**Active Automations:**`);
-                for (const a of activeAutos.slice(0, 5)) {
-                    const next = a.nextRunAt ? ` · next ${new Date(a.nextRunAt).toUTCString()}` : "";
-                    lines.push(`  • ${a.name} - ${a.triggerType}${next}`);
-                }
-                lines.push("");
-            }
-            if (persistentAgents.length > 0) {
-                lines.push(`**Persistent Agents:**`);
-                for (const a of persistentAgents.slice(0, 5)) {
-                    const name = a.key.replace(/^agent\//, "");
-                    lines.push(`  • ${name} - v${a.version ?? 1}`);
-                }
-                lines.push("");
-            }
-            if (vaultEntries.length > 0) {
-                lines.push(`**Recent Research:**`);
-                for (const e of vaultEntries) {
-                    lines.push(`  • [${e.agentId ?? "vault"}] ${e.title}`);
-                }
-                lines.push("");
-            }
-            lines.push(`💡 Run \`deep_research query: "..."\` to launch multi-agent research · \`agent_spawn\` to start a persistent agent`);
-            return { content: [{ type: "text", text: lines.join("\n") }] };
-        }
         case "finch_diagnostics": {
             const CONVEX_URL = process.env.FINCH_CONVEX_URL ?? "https://valuable-fish-533.convex.site";
             // Ping root of each service — any non-5xx means the host is up

package/dist/tools/research.js

@@ -5,6 +5,7 @@ exports.handleResearchTool = handleResearchTool;
 const zod_1 = require("zod");
 const convex_js_1 = require("../convex.js");
 const public_url_js_1 = require("../public-url.js");
+const _zod_helpers_js_1 = require("../_zod-helpers.js");
 const FC_BASE = "https://api.firecrawl.dev/v1";
 exports.RESEARCH_TOOLS = [
     {
@@ -98,9 +99,9 @@ async function basicFetch(url) {
 }
 async function handleResearchTool(name, args) {
     if (name === "web_scrape") {
-        const parsed = ScrapeSchema.safeParse(args);
-        if (!parsed.success)
-            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+        const parsed = (0, _zod_helpers_js_1.parseOrError)(ScrapeSchema, args);
+        if (!parsed.ok)
+            return parsed.error;
         const { url, focus } = parsed.data;
         const unsafe = await (0, public_url_js_1.assertPublicUrl)(url);
         if (unsafe) {
@@ -118,9 +119,9 @@ async function handleResearchTool(name, args) {
         return { content: [{ type: "text", text: `**${url}**${focusNote}${body}\n\n_Source: ${source}_` }] };
     }
     if (name === "web_search") {
-        const parsed = SearchSchema.safeParse(args);
-        if (!parsed.success)
-            return { content: [{ type: "text", text: `${parsed.error.issues[0].message}` }], isError: true };
+        const parsed = (0, _zod_helpers_js_1.parseOrError)(SearchSchema, args);
+        if (!parsed.ok)
+            return parsed.error;
         const { query, limit = 5 } = parsed.data;
         // Priority 1: user BYOK direct path. Priority 2: Finch proxy.
         // Same data shape so the formatting code below is identical for both.

package/dist/tools/rh-mcp-constants.js

@@ -0,0 +1,65 @@
+"use strict";
+// Robinhood Chain (chainId 4663) constants shared across the rh-mcp-* modules.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RH_DEX_CHAIN = exports.DEXSCREENER = exports.RH_BLOCKSCOUT_V2 = exports.RH_STOCKS = exports.USDG_DECIMALS = exports.USDG_ADDRESS = exports.RH_UNIVERSAL_ROUTER = exports.RH_PERMIT2 = exports.NATIVE_ETH = exports.RH_EXPLORER = exports.RH_RPC = exports.RH_CHAIN_ID = void 0;
+exports.rhRpcDisplay = rhRpcDisplay;
+exports.RH_CHAIN_ID = 4663;
+exports.RH_RPC = process.env.ROBINHOOD_RPC_URL ??
+    process.env.RH_RPC_URL ??
+    process.env.FINCH_RH_RPC_URL ??
+    "https://rpc.mainnet.chain.robinhood.com";
+/** Host only, for display in tool output - never the full RH_RPC. An
+ *  operator can point ROBINHOOD_RPC_URL/RH_RPC_URL at a keyed provider
+ *  (same pattern app/convex just fixed for its own Alchemy-key leak risk -
+ *  a `.../v2/<key>`-style URL echoed verbatim into a tool response lands the
+ *  key in chat transcripts/client logs). Falls back to the raw value only
+ *  if it isn't a parseable URL, which should never happen in practice. */
+function rhRpcDisplay() {
+    try {
+        return new URL(exports.RH_RPC).host;
+    }
+    catch {
+        return "(configured)";
+    }
+}
+exports.RH_EXPLORER = "https://robinhoodchain.blockscout.com";
+exports.NATIVE_ETH = "0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE";
+exports.RH_PERMIT2 = "0x000000000022D473030F116dDEE9F6B43aC78BA3";
+exports.RH_UNIVERSAL_ROUTER = "0x8876789976decbfcbbbe364623c63652db8c0904";
+/**
+ * Canonical Global Dollar (USDG) — RH chain's settlement stablecoin (same
+ * address as app/convex/_settlement.ts). Hardcoded rather than resolved via
+ * DexScreener ticker search: "USDG" is the exact symbol an imposter contract
+ * would spoof, and dexSearchByTicker ranks by pool liquidity, not authenticity
+ * — a fake pool with inflated liquidity could otherwise outrank the real token.
+ */
+exports.USDG_ADDRESS = "0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168";
+exports.USDG_DECIMALS = 6;
+/** ClawHood / Finch catalog (22 tokenized stocks — official "Robinhood Token" contracts). */
+exports.RH_STOCKS = [
+    { address: "0xaf3d76f1834a1d425780943c99ea8a608f8a93f9", symbol: "AAPL", name: "Apple" },
+    { address: "0x86923f96303d656e4aa86d9d42d1e57ad2023fdc", symbol: "AMD", name: "AMD" },
+    { address: "0x12f190a9f9d7d37a250758b26824b97ce941bf54", symbol: "AMZN", name: "Amazon" },
+    { address: "0x822cc93ffd030293e9842c30bbd678f530701867", symbol: "BE", name: "Bloom Energy" },
+    { address: "0x6330d8c3178a418788df01a47479c0ce7ccf450b", symbol: "COIN", name: "Coinbase" },
+    { address: "0x5f10a1c971b69e47e059e1dc91901b59b3fb49c3", symbol: "CRWV", name: "CoreWeave" },
+    { address: "0x1b0e319c6a659f002271b69db8a7df2f911c153e", symbol: "GME", name: "GameStop" },
+    { address: "0x2e0847e8910a9732eb3fb1bb4b70a580adad4fe3", symbol: "GOOGL", name: "Alphabet" },
+    { address: "0xc72b96e0e48ecd4dc75e1e45396e26300bc39681", symbol: "INTC", name: "Intel" },
+    { address: "0xc0d6457c16cc70d6790dd43521c899c87ce02f35", symbol: "META", name: "Meta" },
+    { address: "0xe93237c50d904957cf27e7b1133b510c669c2e74", symbol: "MSFT", name: "Microsoft" },
+    { address: "0xff080c8ce2e5feadaca0da81314ae59d232d4afd", symbol: "MU", name: "Micron" },
+    { address: "0xe0444ef8bf4ed74f74fd73686e2ddf4c1c5591e8", symbol: "NFLX", name: "Netflix" },
+    { address: "0xd0601ce157db5bdc3162bbac2a2c8af5320d9eec", symbol: "NVDA", name: "NVIDIA" },
+    { address: "0xb0992820e760d836549ba69bc7598b4af75dee03", symbol: "ORCL", name: "Oracle" },
+    { address: "0x894e1ec2d74ffe5aef8dc8a9e84686accb964f2a", symbol: "PLTR", name: "Palantir" },
+    { address: "0xd5f3879160bc7c32ebb4dc785f8a4f505888de68", symbol: "QQQ", name: "Invesco QQQ" },
+    { address: "0xb90a19ff0af67f7779aff50a882a9cff42446400", symbol: "SNDK", name: "Sandisk" },
+    { address: "0x4a0e65a3eccec6dbe60ae065f2e7bb85fae35eea", symbol: "SPCX", name: "SPACEX" },
+    { address: "0x117cc2133c37b721f49de2a7a74833232b3b4c0c", symbol: "SPY", name: "SPDR S&P 500" },
+    { address: "0x322f0929c4625ed5bad873c95208d54e1c003b2d", symbol: "TSLA", name: "Tesla" },
+    { address: "0xd917b029c761d264c6a312bbbcda868658ef86a6", symbol: "USAR", name: "USA Rare Earth" },
+];
+exports.RH_BLOCKSCOUT_V2 = "https://robinhoodchain.blockscout.com/api/v2";
+exports.DEXSCREENER = "https://api.dexscreener.com";
+exports.RH_DEX_CHAIN = "robinhood";