@finchagentic/mcp 4.7.2 → 4.7.4

package/dist/cli-install.js

@@ -0,0 +1,236 @@
+"use strict";
+// `finch install` - auto-configure detected MCP clients (Claude Desktop,
+// Cursor, Windsurf, VS Code, Zed).
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.installFlow = installFlow;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const config_js_1 = require("./config.js");
+const cli_ui_js_1 = require("./cli-ui.js");
+const cli_env_js_1 = require("./cli-env.js");
+function resolveClients() {
+    const home = os.homedir();
+    const plat = os.platform();
+    const appdata = process.env.APPDATA ?? path.join(home, "AppData", "Roaming");
+    const defs = [
+        {
+            name: "Claude Desktop", serversKey: "mcpServers", entryStyle: "standard",
+            paths: {
+                darwin: path.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json"),
+                win32: path.join(appdata, "Claude", "claude_desktop_config.json"),
+                linux: path.join(home, ".config", "Claude", "claude_desktop_config.json"),
+            },
+        },
+        {
+            name: "Cursor", serversKey: "mcpServers", entryStyle: "standard",
+            paths: {
+                darwin: path.join(home, ".cursor", "mcp.json"),
+                win32: path.join(home, ".cursor", "mcp.json"),
+                linux: path.join(home, ".cursor", "mcp.json"),
+            },
+        },
+        {
+            name: "Windsurf", serversKey: "mcpServers", entryStyle: "standard",
+            paths: {
+                darwin: path.join(home, ".codeium", "windsurf", "mcp_config.json"),
+                win32: path.join(home, ".codeium", "windsurf", "mcp_config.json"),
+                linux: path.join(home, ".codeium", "windsurf", "mcp_config.json"),
+            },
+        },
+        // VS Code: user-level mcp.json uses the top-level `servers` key (NOT
+        // mcpServers) and each entry needs `"type": "stdio"`.
+        {
+            name: "VS Code", serversKey: "servers", entryStyle: "vscode",
+            paths: {
+                darwin: path.join(home, "Library", "Application Support", "Code", "User", "mcp.json"),
+                win32: path.join(appdata, "Code", "User", "mcp.json"),
+                linux: path.join(home, ".config", "Code", "User", "mcp.json"),
+            },
+        },
+        {
+            name: "VS Code Insiders", serversKey: "servers", entryStyle: "vscode",
+            paths: {
+                darwin: path.join(home, "Library", "Application Support", "Code - Insiders", "User", "mcp.json"),
+                win32: path.join(appdata, "Code - Insiders", "User", "mcp.json"),
+                linux: path.join(home, ".config", "Code - Insiders", "User", "mcp.json"),
+            },
+        },
+        // Zed: MCP servers live in settings.json under `context_servers`, and each
+        // entry needs `"source": "custom"`. (Not a separate mcp.json file.)
+        {
+            name: "Zed", serversKey: "context_servers", entryStyle: "zed",
+            paths: {
+                darwin: path.join(home, ".config", "zed", "settings.json"),
+                win32: path.join(appdata, "Zed", "settings.json"),
+                linux: path.join(home, ".config", "zed", "settings.json"),
+            },
+        },
+    ];
+    return defs
+        .map((d) => {
+        const configPath = d.paths[plat] ?? d.paths.linux;
+        return { name: d.name, configPath, serversKey: d.serversKey, entryStyle: d.entryStyle };
+    })
+        .filter((c) => {
+        // Include if the config file exists OR the parent directory exists (app installed but not yet configured)
+        return fs.existsSync(c.configPath) || fs.existsSync(path.dirname(c.configPath));
+    });
+}
+// `npx -y @finchagentic/mcp@version` alone fails with "could not determine
+// executable to run" - the package ships two bins (finch, finch-mcp)
+// and neither matches the unscoped package name npx resolves by default.
+// -p ... finch-mcp names the actual MCP-protocol server explicitly
+// (not `finch`, which is the human-interactive REPL and would break the
+// JSON-RPC handshake if a host spawned it instead). Pinned to the currently
+// installed version, never @latest - matches the security boundary
+// documented in the README (wallet/credential access needs a stable,
+// reviewable version, not a moving target).
+function buildEntry(style) {
+    const base = {
+        command: "npx",
+        args: ["-y", "-p", `@finchagentic/mcp@${cli_env_js_1.PKG_VERSION}`, "finch-mcp"],
+        env: {},
+    };
+    if (style === "vscode")
+        return { type: "stdio", ...base };
+    if (style === "zed")
+        return { source: "custom", ...base };
+    return base;
+}
+// Returns "skipped" (distinct from "error") when an existing config file can't
+// be parsed - overwriting it would destroy the user's real config (VS Code
+// mcp.json and Zed settings.json are JSONC and routinely contain comments,
+// which JSON.parse rejects). In that case we leave the file untouched and the
+// caller prints a manual-add snippet instead.
+function installIntoConfig(client) {
+    try {
+        let json = {};
+        if (fs.existsSync(client.configPath)) {
+            const raw = fs.readFileSync(client.configPath, "utf8");
+            try {
+                json = JSON.parse(raw);
+            }
+            catch {
+                return "skipped"; // don't clobber an unparseable (likely JSONC) file
+            }
+        }
+        else {
+            // Ensure parent dir exists
+            fs.mkdirSync(path.dirname(client.configPath), { recursive: true });
+        }
+        const key = client.serversKey;
+        if (!json[key] || typeof json[key] !== "object")
+            json[key] = {};
+        const existed = !!json[key].finch;
+        json[key].finch = buildEntry(client.entryStyle);
+        fs.writeFileSync(client.configPath, JSON.stringify(json, null, 2), "utf8");
+        return existed ? "updated" : "added";
+    }
+    catch {
+        return "error";
+    }
+}
+async function installFlow() {
+    console.log(`\n  ${cli_ui_js_1.C.cyan}${cli_ui_js_1.C.bold}finch install${cli_ui_js_1.C.reset}\n`);
+    console.log(`  ${cli_ui_js_1.C.dim}Scanning for MCP-compatible apps...${cli_ui_js_1.C.reset}\n`);
+    const clients = resolveClients();
+    if (clients.length === 0) {
+        console.log(`  ${cli_ui_js_1.C.yellow}No MCP-compatible apps found.${cli_ui_js_1.C.reset}`);
+        console.log(`  ${cli_ui_js_1.C.dim}Install Claude Desktop, Cursor, or Windsurf, then run this again.${cli_ui_js_1.C.reset}\n`);
+        console.log(`  ${cli_ui_js_1.C.dim}Or add manually to your app's MCP config:${cli_ui_js_1.C.reset}`);
+        console.log(`  ${cli_ui_js_1.C.dim}  "finch": { "command": "npx", "args": ["-y", "-p", "@finchagentic/mcp@${cli_env_js_1.PKG_VERSION}", "finch-mcp"] }${cli_ui_js_1.C.reset}\n`);
+        return;
+    }
+    let installed = 0;
+    const toRestart = [];
+    const manual = [];
+    for (const client of clients) {
+        const result = installIntoConfig(client);
+        const short = client.configPath.replace(os.homedir(), "~");
+        if (result === "added") {
+            console.log(`  ${cli_ui_js_1.C.green}✓${cli_ui_js_1.C.reset}  ${cli_ui_js_1.C.bold}${client.name}${cli_ui_js_1.C.reset}  ${cli_ui_js_1.C.dim}→ added${cli_ui_js_1.C.reset}`);
+            console.log(`     ${cli_ui_js_1.C.dim}${short}${cli_ui_js_1.C.reset}`);
+            installed++;
+            toRestart.push(client.name);
+        }
+        else if (result === "updated") {
+            console.log(`  ${cli_ui_js_1.C.green}↑${cli_ui_js_1.C.reset}  ${cli_ui_js_1.C.bold}${client.name}${cli_ui_js_1.C.reset}  ${cli_ui_js_1.C.dim}→ updated (re-pinned to v${cli_env_js_1.PKG_VERSION})${cli_ui_js_1.C.reset}`);
+            console.log(`     ${cli_ui_js_1.C.dim}${short}${cli_ui_js_1.C.reset}`);
+            installed++;
+            toRestart.push(client.name);
+        }
+        else if (result === "skipped") {
+            // Existing config couldn't be parsed (likely has comments) - never
+            // overwrite it. Show the user exactly what to paste under which key.
+            console.log(`  ${cli_ui_js_1.C.yellow}⚠${cli_ui_js_1.C.reset}  ${cli_ui_js_1.C.bold}${client.name}${cli_ui_js_1.C.reset}  ${cli_ui_js_1.C.dim}→ has an existing config we won't overwrite${cli_ui_js_1.C.reset}`);
+            console.log(`     ${cli_ui_js_1.C.dim}${short}${cli_ui_js_1.C.reset}`);
+            manual.push(`  ${cli_ui_js_1.C.dim}${client.name}: add under ${cli_ui_js_1.C.reset}${cli_ui_js_1.C.cyan}"${client.serversKey}"${cli_ui_js_1.C.reset}${cli_ui_js_1.C.dim}:${cli_ui_js_1.C.reset}\n     ${cli_ui_js_1.C.dim}${JSON.stringify({ finch: buildEntry(client.entryStyle) })}${cli_ui_js_1.C.reset}`);
+        }
+        else {
+            console.log(`  ${cli_ui_js_1.C.yellow}✗${cli_ui_js_1.C.reset}  ${cli_ui_js_1.C.bold}${client.name}${cli_ui_js_1.C.reset}  ${cli_ui_js_1.C.dim}→ write failed (check permissions)${cli_ui_js_1.C.reset}`);
+        }
+    }
+    if (manual.length) {
+        console.log(`\n  ${cli_ui_js_1.C.dim}Add these by hand (we didn't touch your existing config):${cli_ui_js_1.C.reset}`);
+        for (const m of manual)
+            console.log(m);
+    }
+    console.log(`\n  ${cli_ui_js_1.C.dim}${"─".repeat(52)}${cli_ui_js_1.C.reset}\n`);
+    if (installed === 0) {
+        console.log(`  ${cli_ui_js_1.C.yellow}Nothing was installed. Check file permissions.${cli_ui_js_1.C.reset}\n`);
+        return;
+    }
+    console.log(`  ${cli_ui_js_1.C.green}${cli_ui_js_1.C.bold}✓ Finch installed in ${installed} app${installed === 1 ? "" : "s"}.${cli_ui_js_1.C.reset}\n`);
+    if (toRestart.length > 0) {
+        console.log(`  ${cli_ui_js_1.C.dim}Restart to activate:  ${toRestart.join("  ·  ")}${cli_ui_js_1.C.reset}`);
+    }
+    // Tool palette: the server exposes the CORE subset by default to keep the
+    // client's context lean. Everything else stays callable by name, and power
+    // users can flip on the full surface. Surfaced here so the count a user sees
+    // in their client (CORE) doesn't silently contradict the "all tools" framing.
+    console.log(`\n  ${cli_ui_js_1.C.dim}Your client will see the ${cli_env_js_1.CORE_TOOL_COUNT} core tools by default. ` +
+        `Add ${cli_ui_js_1.C.reset}${cli_ui_js_1.C.cyan}"env": { "FINCH_TOOLS": "all" }${cli_ui_js_1.C.reset}${cli_ui_js_1.C.dim} to the finch entry for all ${cli_env_js_1.TOTAL_TOOL_COUNT}.${cli_ui_js_1.C.reset}`);
+    const cfg = (0, config_js_1.readConfig)();
+    if (!cfg.sessionToken) {
+        console.log(`\n  ${cli_ui_js_1.C.dim}Next step - sign in to unlock all tools:${cli_ui_js_1.C.reset}`);
+        console.log(`  ${cli_ui_js_1.C.cyan}  finch login${cli_ui_js_1.C.reset}\n`);
+    }
+    else {
+        console.log(`\n  ${cli_ui_js_1.C.dim}Already signed in as ${cfg.email ?? "user"}.${cli_ui_js_1.C.reset}`);
+        console.log(`  ${cli_ui_js_1.C.dim}Open your MCP client and start using Finch.${cli_ui_js_1.C.reset}\n`);
+    }
+}

package/dist/cli-login.js

@@ -0,0 +1,101 @@
+"use strict";
+// `finch login` - API-key sign-in, both the interactive prompt and the
+// FINCH_API_KEY env-var fast path.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loginWithApiKey = loginWithApiKey;
+exports.loginFlow = loginFlow;
+const readline = __importStar(require("readline"));
+const config_js_1 = require("./config.js");
+const clink_input_js_1 = require("./clink-input.js");
+const cli_ui_js_1 = require("./cli-ui.js");
+const cli_env_js_1 = require("./cli-env.js");
+async function loginWithApiKey(rl) {
+    const ask = (q) => new Promise(resolve => rl.question(q, resolve));
+    console.log(`  ${cli_ui_js_1.C.dim}Generate an API key at app.finchagentic.com → Settings → API Keys${cli_ui_js_1.C.reset}`);
+    console.log(`  ${cli_ui_js_1.C.dim}Or set env var: set FINCH_API_KEY=finch_sk_... (or noel_sk_...)${cli_ui_js_1.C.reset}`);
+    let apiKey = (await ask(`  API key (finch_sk_... / noel_sk_...): `)).trim();
+    if (!apiKey)
+        return;
+    // Deduplicates doubled input from a known Clink v1.7.6 terminal bug (e.g.
+    // "finch_sk_xxfinch_sk_xx" → "finch_sk_xx"); also strips non-ASCII Clink can inject.
+    apiKey = (0, clink_input_js_1.dedupClinkInput)(apiKey).replace(/[^\x20-\x7E]/g, "").trim();
+    if (!(0, config_js_1.isApiKey)(apiKey)) {
+        console.log(`\n  ${cli_ui_js_1.C.red}✗${cli_ui_js_1.C.reset} API key must start with "finch_sk_" or "noel_sk_". Got: "${apiKey.slice(0, 20)}..."\n`);
+        return;
+    }
+    process.stdout.write(`  Authenticating...`);
+    const res = await fetch(`${cli_env_js_1.CONVEX_SITE}/auth/apikey/login`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ apiKey }),
+    });
+    const data = await res.json();
+    if (!res.ok || !data.token) {
+        console.log(`\n  ${cli_ui_js_1.C.red}✗${cli_ui_js_1.C.reset} ${data.error ?? "Invalid API key"}\n`);
+        return;
+    }
+    const email = data.email ?? "api-key-user";
+    const name = data.displayName ?? undefined;
+    (0, config_js_1.writeConfig)({ sessionToken: data.token, email, name, walletAddress: data.walletAddress });
+    (0, cli_ui_js_1.printLoginSuccess)({ email, name, walletAddress: data.walletAddress });
+}
+async function loginFlow(loginRl) {
+    const rl = loginRl ?? readline.createInterface({ input: process.stdin, output: process.stdout });
+    // Check env var first — skip prompt entirely
+    const envKey = process.env.FINCH_API_KEY;
+    if (envKey && (0, config_js_1.isApiKey)(envKey)) {
+        console.log(`\n  ${cli_ui_js_1.C.dim}Found FINCH_API_KEY in environment — authenticating...${cli_ui_js_1.C.reset}`);
+        process.stdout.write(`  Authenticating...`);
+        const res = await fetch(`${cli_env_js_1.CONVEX_SITE}/auth/apikey/login`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ apiKey: envKey }),
+        });
+        const data = await res.json();
+        if (res.ok && data.token) {
+            const email = data.email ?? "api-key-user";
+            const name = data.displayName ?? undefined;
+            (0, config_js_1.writeConfig)({ sessionToken: data.token, email, name, walletAddress: data.walletAddress });
+            (0, cli_ui_js_1.printLoginSuccess)({ email, name, walletAddress: data.walletAddress });
+            rl.close();
+            return;
+        }
+        console.log(`\n  ${cli_ui_js_1.C.red}✗${cli_ui_js_1.C.reset} Env var FINCH_API_KEY is invalid. Falling back to manual login.\n`);
+    }
+    console.log(`\n  ${cli_ui_js_1.C.cyan}${cli_ui_js_1.C.bold}Sign in to Finch${cli_ui_js_1.C.reset}\n`);
+    await loginWithApiKey(rl);
+    rl.close();
+}

package/dist/cli-orders.js

@@ -0,0 +1,175 @@
+"use strict";
+// `finch orders` - Robinhood Chain order scheduler.
+//
+// rh_dca_create/rh_bracket_create (src/tools/rh-orders.ts) only ever write a
+// LOCAL pending order - nothing executes it. Only rh_orders_tick does, and
+// per that file's own header comment, "an always-on scheduler must call
+// rh_orders_tick {execute:true} periodically" - which this package never
+// actually set up. A user who creates a daily DCA and closes their laptop
+// got nothing, silently: no error, no warning, the order just sat there.
+// These three subcommands are that missing scheduler, reusing the existing
+// tick/lock/kill-switch logic as-is - "wire up the missing piece", not
+// "build order execution from scratch".
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runOrdersTick = runOrdersTick;
+exports.installOrdersScheduler = installOrdersScheduler;
+exports.ordersFlow = ordersFlow;
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const child_process = __importStar(require("child_process"));
+const cli_ui_js_1 = require("./cli-ui.js");
+const cli_env_js_1 = require("./cli-env.js");
+async function runOrdersTick(execute) {
+    const { handleRhOrderTool } = await Promise.resolve().then(() => __importStar(require("./tools/rh-orders.js")));
+    const result = await handleRhOrderTool("rh_orders_tick", { execute });
+    const text = result?.content?.[0]?.type === "text" ? result.content[0].text : "(no output)";
+    return { text, isError: !!result?.isError };
+}
+function installOrdersScheduler() {
+    // Version-pinned npx invocation, not a hardcoded path to this process's
+    // own binary - matches this package's own "always pin the version, never
+    // @latest" security guidance (README), and survives regardless of whether
+    // the user got here via a global install or a one-off `npx -p`, whose
+    // resolved path may not exist by the time the scheduler fires later.
+    const invocation = `npx -y -p @finchagentic/mcp@${cli_env_js_1.PKG_VERSION} finch orders tick --execute`;
+    if (process.platform === "win32") {
+        const taskName = "FinchOrdersTick";
+        try {
+            child_process.execSync(`schtasks /Create /TN "${taskName}" /TR "${invocation}" /SC MINUTE /MO 15 /F`, { stdio: "pipe" });
+            console.log(`\n  ${cli_ui_js_1.C.green}✓${cli_ui_js_1.C.reset} Registered Windows Task Scheduler task "${taskName}" - ticks every 15 min, survives reboots.`);
+            console.log(`     ${cli_ui_js_1.C.dim}Remove it:${cli_ui_js_1.C.reset} schtasks /Delete /TN "${taskName}" /F`);
+        }
+        catch (err) {
+            console.error(`  ${cli_ui_js_1.C.red}✗ schtasks failed: ${err.message}${cli_ui_js_1.C.reset}`);
+            console.error(`     ${cli_ui_js_1.C.dim}Try running as Administrator, or use \`finch orders daemon\` instead.${cli_ui_js_1.C.reset}\n`);
+            process.exit(1);
+        }
+    }
+    else {
+        const logFile = path.join(os.homedir(), ".finch", "orders-tick.log");
+        const line = `*/15 * * * * ${invocation} >> ${logFile} 2>&1`;
+        try {
+            const existing = (() => {
+                try {
+                    return child_process.execSync("crontab -l", { stdio: ["pipe", "pipe", "ignore"] }).toString();
+                }
+                catch {
+                    return "";
+                } // no crontab yet for this user - not an error
+            })();
+            if (existing.includes("finch orders tick")) {
+                console.log(`\n  ${cli_ui_js_1.C.yellow}○${cli_ui_js_1.C.reset} A finch orders tick entry already exists in crontab - not adding a duplicate.\n`);
+                return;
+            }
+            const next = existing.trim().length > 0 ? `${existing.trim()}\n${line}\n` : `${line}\n`;
+            child_process.execSync("crontab -", { input: next });
+            console.log(`\n  ${cli_ui_js_1.C.green}✓${cli_ui_js_1.C.reset} Added a crontab entry - ticks every 15 min, survives reboots.`);
+            console.log(`     ${cli_ui_js_1.C.dim}Remove it:${cli_ui_js_1.C.reset} crontab -e  ${cli_ui_js_1.C.dim}(delete the finch orders line)${cli_ui_js_1.C.reset}`);
+            console.log(`     ${cli_ui_js_1.C.dim}Logs:${cli_ui_js_1.C.reset} ${logFile}`);
+        }
+        catch (err) {
+            console.error(`  ${cli_ui_js_1.C.red}✗ crontab failed: ${err.message}${cli_ui_js_1.C.reset}`);
+            console.error(`     ${cli_ui_js_1.C.dim}Try \`finch orders daemon\` instead.${cli_ui_js_1.C.reset}\n`);
+            process.exit(1);
+        }
+    }
+    console.log(`  ${cli_ui_js_1.C.dim}Only the local wallet's own default key is needed for signing - set FINCH_WALLET_PASSPHRASE as a persistent system env var (not just your shell rc file) if you use one, since scheduled tasks don't inherit an interactive shell's environment.${cli_ui_js_1.C.reset}\n`);
+}
+async function ordersFlow() {
+    const sub = process.argv[3];
+    if (sub === "tick") {
+        const execute = process.argv.includes("--execute");
+        const { text, isError } = await runOrdersTick(execute);
+        console.log(`\n${text}\n`);
+        if (isError)
+            process.exit(1);
+        return;
+    }
+    if (sub === "daemon") {
+        const intervalFlag = process.argv.indexOf("--interval");
+        const intervalMinutes = intervalFlag !== -1 ? Number(process.argv[intervalFlag + 1]) : 15;
+        if (!(intervalMinutes > 0)) {
+            console.error(`  ${cli_ui_js_1.C.red}✗ --interval must be a positive number of minutes${cli_ui_js_1.C.reset}\n`);
+            process.exit(1);
+        }
+        console.log(`\n  ${cli_ui_js_1.C.cyan}${cli_ui_js_1.C.bold}finch orders daemon${cli_ui_js_1.C.reset} ${cli_ui_js_1.C.dim}- ticking every ${intervalMinutes}m, Ctrl+C to stop${cli_ui_js_1.C.reset}`);
+        console.log(`  ${cli_ui_js_1.C.dim}Kill-switch: RH_ORDERS_DISABLED=1 or create ~/.finch/rh-orders.OFF${cli_ui_js_1.C.reset}`);
+        console.log(`  ${cli_ui_js_1.C.dim}Note: this only runs while this process stays alive - for something that${cli_ui_js_1.C.reset}`);
+        console.log(`  ${cli_ui_js_1.C.dim}survives reboots/terminal closure, use \`finch orders install-scheduler\` instead.${cli_ui_js_1.C.reset}\n`);
+        let running = false; // skip a tick if the previous one is still in flight (slow RPC), don't queue up
+        const tick = async () => {
+            if (running)
+                return;
+            running = true;
+            const ts = new Date().toISOString();
+            try {
+                const { text } = await runOrdersTick(true);
+                console.log(`  ${cli_ui_js_1.C.dim}[${ts}]${cli_ui_js_1.C.reset}`);
+                console.log(text.split("\n").map((l) => `  ${l}`).join("\n") + "\n");
+            }
+            catch (err) {
+                console.error(`  ${cli_ui_js_1.C.red}[${ts}] tick error: ${err.message ?? err}${cli_ui_js_1.C.reset}\n`);
+            }
+            finally {
+                running = false;
+            }
+        };
+        await tick();
+        const timer = setInterval(tick, intervalMinutes * 60000);
+        const shutdown = () => {
+            clearInterval(timer);
+            console.log(`\n  ${cli_ui_js_1.C.dim}Stopped.${cli_ui_js_1.C.reset}\n`);
+            process.exit(0);
+        };
+        process.on("SIGINT", shutdown);
+        process.on("SIGTERM", shutdown);
+        return; // process stays alive via the interval timer
+    }
+    if (sub === "install-scheduler") {
+        installOrdersScheduler();
+        return;
+    }
+    console.log(`
+  ${cli_ui_js_1.C.cyan}${cli_ui_js_1.C.bold}finch orders${cli_ui_js_1.C.reset}  ${cli_ui_js_1.C.dim}- Robinhood Chain DCA/TP-SL orders (rh_dca_create/rh_bracket_create)${cli_ui_js_1.C.reset}
+  ${cli_ui_js_1.C.dim}do nothing on their own until one of these is running - creating an order${cli_ui_js_1.C.reset}
+  ${cli_ui_js_1.C.dim}only ever writes it locally, nothing executes it automatically by itself.${cli_ui_js_1.C.reset}
+
+  ${cli_ui_js_1.C.cyan}Commands:${cli_ui_js_1.C.reset}
+    finch orders tick [--execute]         Run one tick now and exit (preview by default)
+    finch orders daemon [--interval N]    Run in the foreground, ticking every N min (default 15)
+    finch orders install-scheduler        Register an OS-level recurring task (Task Scheduler / cron)
+`);
+}