hive-intelligence 1.14.0 → 1.16.0

package/README.md

@@ -42,7 +42,7 @@ provider keys.
 - Bundled agent skills that teach assistants the right Hive workflow:
   discovery -> schema lookup -> bounded execution -> evidence receipt.
 - A broad provider catalog remains available behind discovery for agents that
-  need a long-tail endpoint. The current catalog contains 435 tools, but that
+  need a long-tail endpoint. The current catalog contains 439 tools, but that
   coverage is not the primary product contract.
 
 ## Quickstart
@@ -494,9 +494,10 @@ tool lists:
 | Helius          | Solana RPC, DAS, priority fees, wallet history, and Parsed Events                  | `HELIUS_API_KEY`                                                                                                                                |
 | Tenderly        | EVM simulation, tracing, gas estimation, and read-only Node RPC                    | REST: `TENDERLY_API_KEY` + `TENDERLY_ACCOUNT_SLUG` + `TENDERLY_PROJECT_SLUG`; Node: `TENDERLY_NODE_ACCESS_KEY` or `TENDERLY_GATEWAY_ACCESS_KEY` |
 | Hyperliquid     | Full /info surface: perp/spot markets, order books, user state, vaults, staking, borrow/lend, HIP-4 outcome markets | Free                                                                                                                                            |
-| RWA Perps       | Keyless five-venue fan-out for tokenized-asset perps (`rwa_` tools): Hyperliquid HIP-3 builder dexes, Ostium, Avantis, Lighter, Extended | Free                                                                                                                                            |
-| Hive Archive    | Supabase-backed derivatives history (`archive_` tools) served by Hive              | None (Hive-hosted)                                                                                                                              |
+| RWA Perps       | Keyless three-venue fan-out for tokenized-asset perps (`rwa_` tools): Hyperliquid HIP-3 builder dexes, Lighter, Extended                   | Free                                                                                                                                            |
+| Hive Archive    | ClickHouse-backed derivatives history (`archive_` tools) served by Hive            | None (Hive-hosted)                                                                                                                              |
 | Polymarket      | Prediction markets: market and event search, market-implied odds, order books, odds history, wallet positions | Free (keyless)                                                                                                        |
+| Kalshi          | Prediction markets: market and event search, market-implied odds, order books, trades, candlestick history | Free (keyless)                                                                                                        |
 | Alternative.me  | Crypto Fear and Greed Index, current plus daily history                            | Free (keyless)                                                                                                        |
 | Blockchain.com  | Daily Bitcoin on-chain charts: hash rate, active addresses, transaction count      | Free (keyless)                                                                                                        |
 | Blockscout      | EVM token holder counts by USD balance tier (`get_token_holder_distribution`)      | Free (keyless); optional `BLOCKSCOUT_API_KEY` for the PRO API                                                         |

package/agent-skills/packs/hive/SKILL.md

@@ -338,8 +338,8 @@ file.
 ## Capability boundaries
 
 Hive does not place trades, hold funds, sign transactions, give investment
-advice, or predict prices. It has no equities, options, social-sentiment, or
-Kalshi provider: say so plainly instead of approximating with the wrong tool, then
+advice, or predict prices. It has no equities, options, or social-sentiment
+provider: say so plainly instead of approximating with the wrong tool, then
 offer `report_feedback` for the gap. Provider coverage is live in
 `hive://providers` and `hive tools list`; do not quote tool counts from
 memory.

package/agent-skills/packs/hive-prediction-markets/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hive-prediction-markets
-description: Use this skill when the user asks about prediction markets, meaning Polymarket events, markets, outcomes, odds, prices, order books, liquidity, odds history, or a wallet's positions and trades, including "what are the odds of X", "find markets about Y", or Kalshi questions (answer from Polymarket and say Kalshi is not covered). Use it whenever live prediction-market evidence is needed. Never present market probability as ground truth.
+description: Use this skill when the user asks about prediction markets, meaning Polymarket or Kalshi events, markets, outcomes, odds, prices, order books, liquidity, odds history, trades, or a Polymarket wallet's positions and trades, including "what are the odds of X" and "find markets about Y". Use it whenever live prediction-market evidence is needed. Never present market probability as ground truth.
 license: MIT
 metadata:
   package: "@hiveintelligence/agent-skills"
@@ -11,13 +11,11 @@ version: 1.7.0
 
 # hive-prediction-markets: Prediction Markets
 
-Discover and analyze Polymarket prediction markets with prices, order books,
-odds history, and wallet positions and trades, always framed as
-market-implied odds rather than truth. Polymarket's Gamma, CLOB, and Data
-APIs are keyless, so these tools work on the keyless lane. Kalshi is not
-covered: its developer agreement requires a data license Hive does not hold,
-so answer Kalshi questions from Polymarket where a matching market exists and
-say plainly that the Kalshi side is unavailable.
+Discover and analyze Polymarket and Kalshi prediction markets with prices,
+order books, odds history and trades, plus Polymarket wallet positions, always
+framed as market-implied odds rather than truth. Polymarket's Gamma, CLOB, and
+Data APIs and Kalshi's public Trade API are keyless, so these tools work on the
+keyless lane.
 
 ## Task toolset and identifiers
 
@@ -30,6 +28,9 @@ budget, phases, fallback condition, and stop conditions.
   `polymarket_get_price_history` and `polymarket_get_orderbook` (CLOB token
   id), `polymarket_get_wallet_positions` and `polymarket_get_wallet_activity`
   (EVM wallet address).
+- Kalshi: `kalshi_search_markets` (query, status or event ticker),
+  `kalshi_get_events`, and by market ticker `kalshi_get_market`,
+  `kalshi_get_orderbook`, `kalshi_get_trades`, `kalshi_get_price_history`.
 - Required: a market slug, condition id, token id, wallet address, or a
   search query, depending on the request.
 - Optional: status filter, limit, interval, depth, outcome.

package/build/{api-client-POBN6Y5S.js → api-client-MK3CVNCH.js}

@@ -8,8 +8,8 @@ import {
   getAnonQuota,
   getUsage,
   postFeedback
-} from "./chunk-RNVZIPNY.js";
-import "./chunk-ZSPPJW4G.js";
+} from "./chunk-VO6NWVJD.js";
+import "./chunk-4U4IL5KA.js";
 import "./chunk-ZXKFJQDE.js";
 import "./chunk-6PC3HUAK.js";
 import "./chunk-OMO7XLC5.js";

package/build/{auth-6XVL5CE3.js → auth-TZQC54EJ.js}

@@ -12,7 +12,7 @@ import {
   runWhoami,
   saveProfile,
   switchProfile
-} from "./chunk-KQVPKTEO.js";
+} from "./chunk-AVTIJGWS.js";
 import "./chunk-6PC3HUAK.js";
 import "./chunk-OMO7XLC5.js";
 export {

package/build/{call-args-BUB6YNHW.js → call-args-4YRVKOLV.js}

@@ -10,8 +10,8 @@ import {
   parseFlagTokens,
   planToolCall,
   reservedOptionNames
-} from "./chunk-AZFOTKS2.js";
-import "./chunk-ZSPPJW4G.js";
+} from "./chunk-WZ2NMSV3.js";
+import "./chunk-4U4IL5KA.js";
 import "./chunk-OMO7XLC5.js";
 export {
   ALWAYS_RESERVED_OPTIONS,

package/build/{chunk-ZSPPJW4G.js → chunk-4U4IL5KA.js}

@@ -1,7 +1,6 @@
 import { createRequire } from 'node:module'; const require = createRequire(import.meta.url);
 
 // src/cli/errors.ts
-import { distance } from "fastest-levenshtein";
 var ExitCode = {
   SUCCESS: 0,
   GENERAL_ERROR: 1,
@@ -109,6 +108,21 @@ function classifyError(error, toolName) {
   }
   return new CliError("API_ERROR", msg);
 }
+function distance(a, b) {
+  let prev = Array.from({ length: b.length + 1 }, (_, j) => j);
+  for (let i = 1; i <= a.length; i++) {
+    const cur = [i];
+    for (let j = 1; j <= b.length; j++) {
+      cur[j] = Math.min(
+        prev[j] + 1,
+        cur[j - 1] + 1,
+        prev[j - 1] + (a[i - 1] === b[j - 1] ? 0 : 1)
+      );
+    }
+    prev = cur;
+  }
+  return prev[b.length];
+}
 function suggestSimilarTools(input, toolNames, maxDistance = 3) {
   return toolNames.map((name) => ({ name, dist: distance(input, name) })).filter((entry) => entry.dist <= maxDistance).sort((a, b) => a.dist - b.dist).slice(0, 3).map((entry) => entry.name);
 }

package/build/{chunk-KQVPKTEO.js → chunk-AVTIJGWS.js}

@@ -294,11 +294,11 @@ async function runSwitch(name) {
   }
 }
 async function runUsage() {
-  const { getUsage } = await import("./api-client-POBN6Y5S.js");
+  const { getUsage } = await import("./api-client-MK3CVNCH.js");
   const result = await getUsage();
   if (!result.ok) {
     const { outputError } = await import("./output-BBHBJI32.js");
-    const { CliError, classifyError } = await import("./errors-YQAVCXXO.js");
+    const { CliError, classifyError } = await import("./errors-BPXK3KCR.js");
     const code = result.error?.code;
     const err = code === "AUTH_REQUIRED" || code === "INVALID_TOKEN" ? new CliError(
       "AUTH_REQUIRED",

package/build/{chunk-SMVHHINA.js → chunk-B53GNIWW.js}

@@ -7,7 +7,7 @@ import {
   getSupabaseAdmin,
   resolveEndpoint,
   secureLogger
-} from "./chunk-C4BFUIEB.js";
+} from "./chunk-QSKFAT7Z.js";
 
 // src/services/wallet-service.ts
 async function consumeCredits(args) {

package/build/chunk-MYSS5SBE.js

@@ -0,0 +1,71 @@
+import { createRequire } from 'node:module'; const require = createRequire(import.meta.url);
+
+// src/config/env.ts
+import { z } from "zod";
+var nodeEnvSchema = z.enum(["development", "production", "test"]).catch("development");
+var logLevelSchema = z.enum(["debug", "info", "warn", "error"]).catch("info");
+var portSchema = z.coerce.number().int().min(1).max(65535);
+var rateLimitMaxSchema = z.coerce.number().int().min(1).max(1e4);
+function getEnvVar(name) {
+  const value = process.env[name]?.trim();
+  return value ? value : void 0;
+}
+function getRequiredEnvVar(name, message) {
+  const value = getEnvVar(name);
+  if (!value) {
+    throw new Error(message ?? `Missing required environment variable: ${name}`);
+  }
+  return value;
+}
+function hasEnvVars(...names) {
+  return names.every((name) => Boolean(getEnvVar(name)));
+}
+function loadEnvFile(path) {
+  try {
+    process.loadEnvFile(path);
+  } catch {
+  }
+}
+function getCsvEnv(name) {
+  const value = getEnvVar(name);
+  if (!value) return [];
+  return value.split(",").map((part) => part.trim()).filter(Boolean);
+}
+function getNodeEnv() {
+  return nodeEnvSchema.parse(process.env.NODE_ENV);
+}
+function isProduction() {
+  return getNodeEnv() === "production";
+}
+function getLogLevel() {
+  return logLevelSchema.parse(process.env.LOG_LEVEL);
+}
+function getPort() {
+  return portSchema.parse(process.env.PORT ?? 8080);
+}
+function getRateLimitMax() {
+  return rateLimitMaxSchema.parse(process.env.RATE_LIMIT_MAX ?? 30);
+}
+function getCredentialedRateLimitMax() {
+  return rateLimitMaxSchema.parse(
+    process.env.CREDENTIALED_RATE_LIMIT_MAX ?? 1500
+  );
+}
+function getCorsAllowedOrigins() {
+  return getCsvEnv("CORS_ALLOWED_ORIGINS");
+}
+
+export {
+  getEnvVar,
+  getRequiredEnvVar,
+  hasEnvVars,
+  loadEnvFile,
+  getCsvEnv,
+  getNodeEnv,
+  isProduction,
+  getLogLevel,
+  getPort,
+  getRateLimitMax,
+  getCredentialedRateLimitMax,
+  getCorsAllowedOrigins
+};

package/build/{chunk-YLHNUAFT.js → chunk-O5YKCM67.js}

@@ -4,17 +4,19 @@ import {
 } from "./chunk-XN3T6YOG.js";
 import {
   executeRemoteTool
-} from "./chunk-RNVZIPNY.js";
+} from "./chunk-VO6NWVJD.js";
 import {
   trackCommand
 } from "./chunk-RU6QOFHH.js";
 import {
   ExitCode
-} from "./chunk-ZSPPJW4G.js";
+} from "./chunk-4U4IL5KA.js";
 import {
   debug,
   dim,
+  green,
   isQuiet,
+  red,
   shouldOutputJson,
   writeOutput
 } from "./chunk-ZDXMZPC6.js";
@@ -22,9 +24,6 @@ import {
   resolveApiKey
 } from "./chunk-6PC3HUAK.js";
 
-// src/cli/execute.ts
-import ora from "ora";
-
 // src/cli/keyless-heroes.ts
 var CHAIN_ID_TO_NAME = {
   "1": "ethereum",
@@ -115,6 +114,23 @@ function creditFooter(meta, keyed) {
   if (typeof meta.quota_remaining !== "number") return null;
   return `free calls left today: ${meta.quota_remaining} (run \`hive auth login\` for a full key)`;
 }
+function startSpinner(text) {
+  const frames = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+  let frame = 0;
+  const draw = () => process.stderr.write(`\r${frames[frame++ % frames.length]} ${text}`);
+  draw();
+  const timer = setInterval(draw, 80);
+  timer.unref();
+  const stop = (symbol, message) => {
+    clearInterval(timer);
+    process.stderr.write(`\r\x1B[2K${symbol} ${message}
+`);
+  };
+  return {
+    succeed: (message) => stop(green("\u2714"), message),
+    fail: (message) => stop(red("\u2716"), message)
+  };
+}
 async function executeTool(toolName, args, timeoutMs = 3e4) {
   const keyed = Boolean(resolveApiKey());
   if (!keyed) {
@@ -127,7 +143,7 @@ async function executeTool(toolName, args, timeoutMs = 3e4) {
   }
   debug(`Executing ${toolName} remotely`);
   const showSpinner = !shouldOutputJson() && !!process.stderr.isTTY;
-  const spinner = showSpinner ? ora({ text: `Calling ${toolName}...`, stream: process.stderr }).start() : null;
+  const spinner = showSpinner ? startSpinner(`Calling ${toolName}...`) : null;
   const startMs = Date.now();
   let response;
   try {

package/build/{chunk-APBLB62S.js → chunk-PODCJTBV.js}

@@ -2,7 +2,7 @@ import { createRequire } from 'node:module'; const require = createRequire(impor
 import {
   CliError,
   ExitCode
-} from "./chunk-ZSPPJW4G.js";
+} from "./chunk-4U4IL5KA.js";
 import {
   errorEnvelope,
   info,