hive-intelligence 1.14.0 → 1.16.0

package/build/server.js

@@ -8,7 +8,7 @@ import {
   getWalletStatus,
   refundCredits,
   refundSettled
-} from "./chunk-SMVHHINA.js";
+} from "./chunk-B53GNIWW.js";
 import {
   CategoryEndpoints,
   HERO_TOOL_NAMES,
@@ -43,19 +43,12 @@ import {
   getAllWrappedEndpoints,
   getAnalyticsWriter,
   getAvailableApis,
-  getCorsAllowedOrigins,
-  getCredentialedRateLimitMax,
-  getCsvEnv,
-  getEnvVar,
   getMcpCreditCost,
   getMcpProtocolCanaryHistory,
-  getNodeEnv,
   getOAuthLifecycleCanaryHistory,
   getOAuthRuntimeConfig,
-  getPort,
   getProviderCanaryHistory,
   getProviderRuntimeStatus,
-  getRateLimitMax,
   getRedisClient,
   getRootVisibleToolCount,
   getSharedClients,
@@ -71,12 +64,11 @@ import {
   isEndpointInvokerName,
   isFreeWriteEndpoint,
   isHiveOAuthAccessToken,
-  isProduction,
+  isHostedKeysConfigured,
+  isHostedKeysRequired,
   isRedisAvailable,
   isRedisConfigured,
   isSupabaseConfigured,
-  isUnkeyConfigured,
-  isUnkeyRequired,
   listKeys,
   materializeSubjectContext,
   normalizeInvokeArgs,
@@ -105,11 +97,22 @@ import {
   validateEndpointArgs,
   verifyApiKey,
   waitForRedisAvailability
-} from "./chunk-C4BFUIEB.js";
+} from "./chunk-QSKFAT7Z.js";
 import {
   HIVE_AGENT_SKILLS
 } from "./chunk-QYK3EWTE.js";
 import "./chunk-EPF36Q3Z.js";
+import {
+  getCorsAllowedOrigins,
+  getCredentialedRateLimitMax,
+  getCsvEnv,
+  getEnvVar,
+  getNodeEnv,
+  getPort,
+  getRateLimitMax,
+  isProduction,
+  loadEnvFile
+} from "./chunk-MYSS5SBE.js";
 import {
   PUBLIC_MCP_REGISTRY_ID,
   SERVER_NAME,
@@ -743,9 +746,6 @@ var require_ipaddr = __commonJS({
   }
 });
 
-// src/server.ts
-import dotenv from "dotenv";
-
 // src/config/trustProxy.ts
 var DEFAULT_TRUSTED_PROXY_ADDRESSES = "34.102.187.55";
 function resolveTrustedProxies(raw = getEnvVar("TRUSTED_PROXY_ADDRESSES")) {
@@ -757,7 +757,6 @@ function resolveTrustedProxies(raw = getEnvVar("TRUSTED_PROXY_ADDRESSES")) {
 import { randomUUID as randomUUID4, timingSafeEqual as timingSafeEqual6 } from "crypto";
 import { resolve } from "path";
 import { fileURLToPath } from "url";
-import { createRequire as createNodeRequire } from "module";
 import express2 from "express";
 import compression from "compression";
 import cors from "cors";
@@ -768,7 +767,56 @@ import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/
 // src/middleware/rate-limit.ts
 import { timingSafeEqual } from "crypto";
 import rateLimit from "express-rate-limit";
-import RedisStore from "rate-limit-redis";
+
+// src/utils/redisRateLimitStore.ts
+var INCREMENT_SCRIPT = `
+local windowMs = tonumber(ARGV[1])
+local timeToExpire = redis.call("PTTL", KEYS[1])
+if timeToExpire <= 0 then
+  redis.call("SET", KEYS[1], 1, "PX", windowMs)
+  return { 1, windowMs }
+end
+local totalHits = redis.call("INCR", KEYS[1])
+return { totalHits, timeToExpire }
+`;
+var RedisRateLimitStore = class {
+  constructor(redis, prefix, onError) {
+    this.redis = redis;
+    this.prefix = prefix;
+    this.onError = onError;
+  }
+  redis;
+  prefix;
+  onError;
+  windowMs = 6e4;
+  init(options) {
+    this.windowMs = options.windowMs;
+  }
+  async increment(key) {
+    try {
+      const [totalHits, timeToExpire] = await this.redis.call(
+        "EVAL",
+        INCREMENT_SCRIPT,
+        "1",
+        this.prefix + key,
+        String(this.windowMs)
+      );
+      return {
+        totalHits: Number(totalHits),
+        resetTime: new Date(Date.now() + Number(timeToExpire))
+      };
+    } catch (error) {
+      this.onError?.(error);
+      throw error;
+    }
+  }
+  async decrement(key) {
+    await this.redis.call("DECR", this.prefix + key);
+  }
+  async resetKey(key) {
+    await this.redis.call("DEL", this.prefix + key);
+  }
+};
 
 // src/utils/api-errors.ts
 function apiError(type, code, message, opts) {
@@ -874,13 +922,15 @@ var createIpRateLimiter = (opts = {}) => {
     secureLogger.info("[rate-limit] Redis configured; connection pending", {});
   }
   const storeConfig = redisClient ? {
-    store: new RedisStore({
-      sendCommand: ((...args) => redisClient.call(args[0], ...args.slice(1)).catch((error) => {
-        noteRateLimitStoreError(error);
-        throw error;
-      })),
-      prefix: lane === "credentialed" ? "rl:ip:cred:" : "rl:ip:"
-    })
+    // Surface store failures without spamming: one line per minute is
+    // enough to alert on, and the request still proceeds via
+    // passOnStoreError below. The store rethrows so express-rate-limit
+    // applies that policy itself.
+    store: new RedisRateLimitStore(
+      redisClient,
+      lane === "credentialed" ? "rl:ip:cred:" : "rl:ip:",
+      noteRateLimitStoreError
+    )
   } : {};
   return rateLimit({
     ...storeConfig,
@@ -2573,10 +2623,10 @@ function attachVerifiedContext(req, res, key, result, quotaRemaining, rateDecisi
   authReq.apiKey = key;
   authReq.apiKeyEnvironment = getKeyEnvironment(key);
   authReq.userId = result.userId;
-  authReq.unkeyKeyId = result.keyId;
+  authReq.apiKeyId = result.keyId;
   authReq.quotaRemaining = quotaRemaining ?? void 0;
   authReq.ratelimitRemaining = rateDecision.remaining;
-  authReq.unkeyResult = result;
+  authReq.apiKeyResult = result;
   if (quotaRemaining !== void 0) {
     res.setHeader(
       "X-Quota-Remaining",
@@ -2593,7 +2643,7 @@ function deferApiKeyCreditDebit(req, _res, next) {
 async function debitApiKeyCreditForExecution(req, res) {
   const authReq = req;
   if (authReq.creditDebitValidated !== true) return;
-  const result = authReq.unkeyResult;
+  const result = authReq.apiKeyResult;
   if (!result || !authReq.userId) return;
   try {
     const idempotencyKey = authReq.creditDebitIdempotencyKey ?? randomUUID();
@@ -2602,7 +2652,7 @@ async function debitApiKeyCreditForExecution(req, res) {
       cost: REQUEST_COST,
       idempotencyKey,
       requestId: req.requestId,
-      keyId: authReq.unkeyKeyId
+      keyId: authReq.apiKeyId
     });
     if (consumeResult.code === "insufficient") {
       res.setHeader("X-Quota-Remaining", String(consumeResult.balance ?? 0));
@@ -2614,9 +2664,9 @@ async function debitApiKeyCreditForExecution(req, res) {
       };
     }
     if (consumeResult.code === "no_wallet") {
-      secureLogger.warn("consume_credits returned no_wallet for valid Unkey key", {
+      secureLogger.warn("consume_credits returned no_wallet for a valid API key", {
         userId: authReq.userId,
-        keyId: authReq.unkeyKeyId
+        keyId: authReq.apiKeyId
       });
       return {
         type: "authentication_error",
@@ -2680,28 +2730,28 @@ function getRestAnalyticsTags(req) {
 }
 if (isProduction() && !getEnvVar("HIVE_API_KEYS")) {
   secureLogger.warn(
-    "HIVE_API_KEYS not set in production \u2014 protected routes will be unavailable unless Unkey is configured",
+    "HIVE_API_KEYS not set in production \u2014 protected routes will be unavailable unless hosted keys are configured",
     {}
   );
 }
 function requireApiKey(req, res, next) {
   const key = req.headers["x-api-key"] ?? (req.headers.authorization?.startsWith("Bearer ") ? req.headers.authorization.slice(7) : void 0);
-  if (isUnkeyRequired() && !isUnkeyConfigured()) {
+  if (isHostedKeysRequired() && !isHostedKeysConfigured()) {
     secureLogger.warn(
-      "HIVE_AUTH_BACKEND=unkey but UNKEY_ROOT_KEY or UNKEY_API_ID is missing. Rejecting request.",
+      "HIVE_AUTH_BACKEND=hosted but SUPABASE_URL or SUPABASE_SERVICE_ROLE_KEY is missing. Rejecting request.",
       { ip: req.ip }
     );
     res.status(503).json(
       apiError(
         "internal_error",
         "AUTH_NOT_CONFIGURED",
-        "Unkey authentication is selected but not configured. Set UNKEY_ROOT_KEY and UNKEY_API_ID, or set HIVE_AUTH_BACKEND=static with HIVE_API_KEYS.",
+        "Hosted API key authentication is selected but not configured. Set SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY, or set HIVE_AUTH_BACKEND=static with HIVE_API_KEYS.",
         { requestId: req.requestId }
       )
     );
     return;
   }
-  if (isUnkeyConfigured()) {
+  if (isHostedKeysConfigured()) {
     if (!key) {
       res.status(401).json(
         apiError(
@@ -2790,7 +2840,7 @@ function requireApiKey(req, res, next) {
         }
         if (consumeResult.code === "no_wallet") {
           secureLogger.warn(
-            "consume_credits returned no_wallet for valid Unkey key",
+            "consume_credits returned no_wallet for a valid API key",
             { userId: result.userId, keyId: result.keyId }
           );
           res.status(403).json(
@@ -2827,7 +2877,7 @@ function requireApiKey(req, res, next) {
       }
     }).catch((err) => {
       secureLogger.error(
-        "Unkey verification failed \u2014 rejecting request",
+        "API key verification failed \u2014 rejecting request",
         err,
         {
           ip: req.ip
@@ -2847,14 +2897,14 @@ function requireApiKey(req, res, next) {
   const validKeys = getValidKeySet();
   if (validKeys.size === 0) {
     secureLogger.warn(
-      "No API key backend configured (HIVE_API_KEYS / Unkey). Rejecting request.",
+      "No API key backend configured (HIVE_API_KEYS / hosted keys). Rejecting request.",
       { ip: req.ip }
     );
     res.status(503).json(
       apiError(
         "internal_error",
         "AUTH_NOT_CONFIGURED",
-        "API key authentication is not configured. Set HIVE_API_KEYS or configure Unkey.",
+        "API key authentication is not configured. Set HIVE_API_KEYS, or SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY for hosted keys.",
         { requestId: req.requestId }
       )
     );
@@ -3522,14 +3572,14 @@ var SIGNED_SUBJECT_HEADERS = [
 var SIGNATURE_PAYLOAD = 'METHOD + "\\n" + PATH + "\\n" + TENANT_ID + "\\n" + END_USER_ID + "\\n" + TIMESTAMP + ("\\n" + BODY_SHA256 when X-Hive-Subject-Body-Sha256 is sent)';
 function buildB2BReadinessPayload(args) {
   const meta = args.verifyResult?.meta;
-  const b2bEnabled = args.authBackend === "unkey" ? isB2BSubjectsEnabled(meta) : false;
-  const secretConfigured = args.authBackend === "unkey" && b2bEnabled ? hasSubjectSigningSecret(meta) : false;
+  const b2bEnabled = args.authBackend === "hosted" ? isB2BSubjectsEnabled(meta) : false;
+  const secretConfigured = args.authBackend === "hosted" && b2bEnabled ? hasSubjectSigningSecret(meta) : false;
   const warnings = [];
   let mode;
   if (args.authBackend === "static") {
     mode = "static_key";
     warnings.push(
-      "Static HIVE_API_KEYS authentication does not provide a Hive owner user_id or per-key B2B subject metadata. Use Unkey-backed Hive keys for partner/end-user state isolation."
+      "Static HIVE_API_KEYS authentication does not provide a Hive owner user_id or per-key B2B subject metadata. Use hosted Hive keys for partner/end-user state isolation."
     );
   } else if (b2bEnabled) {
     mode = "b2b_enabled";
@@ -3545,7 +3595,7 @@ function buildB2BReadinessPayload(args) {
     );
   }
   return {
-    b2b_adapter_ready: args.authBackend === "unkey" && b2bEnabled && secretConfigured,
+    b2b_adapter_ready: args.authBackend === "hosted" && b2bEnabled && secretConfigured,
     mode,
     auth_backend: args.authBackend,
     api_key: {
@@ -3558,7 +3608,7 @@ function buildB2BReadinessPayload(args) {
       subject_signing_secret_configured: secretConfigured
     },
     state: {
-      stateful_tools_supported: args.authBackend === "unkey",
+      stateful_tools_supported: args.authBackend === "hosted",
       direct_user_subject: "default_self",
       signed_subjects_required_for_stateful_writes: b2bEnabled,
       isolation_boundary: "owner_user_id + subject_id"
@@ -3609,17 +3659,17 @@ router5.get(
         )
       );
     }
-    if (isUnkeyRequired() && !isUnkeyConfigured()) {
+    if (isHostedKeysRequired() && !isHostedKeysConfigured()) {
       return res.status(503).json(
         apiError(
           "internal_error",
           "AUTH_NOT_CONFIGURED",
-          "Unkey authentication is selected but not configured. Set UNKEY_ROOT_KEY and UNKEY_API_ID, or set HIVE_AUTH_BACKEND=static with HIVE_API_KEYS.",
+          "Hosted API key authentication is selected but not configured. Set SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY, or set HIVE_AUTH_BACKEND=static with HIVE_API_KEYS.",
           { requestId: req.requestId }
         )
       );
     }
-    if (isUnkeyConfigured()) {
+    if (isHostedKeysConfigured()) {
       const result = await verifyApiKey(key, [
         "service=hive",
         "transport=rest",
@@ -3652,7 +3702,7 @@ router5.get(
       return res.json({
         ok: true,
         data: buildB2BReadinessPayload({
-          authBackend: "unkey",
+          authBackend: "hosted",
           verifyResult: result,
           // Optional in the payload: a plan lookup failure must not fail the
           // readiness check, so it omits plan_id instead.
@@ -3666,7 +3716,7 @@ router5.get(
         apiError(
           "internal_error",
           "AUTH_NOT_CONFIGURED",
-          "API key authentication is not configured. Set HIVE_API_KEYS or configure Unkey.",
+          "API key authentication is not configured. Set HIVE_API_KEYS, or SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY for hosted keys.",
           { requestId: req.requestId }
         )
       );
@@ -4040,12 +4090,12 @@ var BILLING_UNAVAILABLE = apiError(
 function requireBillingPrincipal(req, res, next) {
   const apiKeyHeader = req.headers["x-api-key"];
   if (typeof apiKeyHeader === "string" && apiKeyHeader.length > 0) {
-    if (!isUnkeyConfigured()) {
+    if (!isHostedKeysConfigured()) {
       res.status(503).json(
         apiError(
           "internal_error",
           "AUTH_NOT_CONFIGURED",
-          "API-key billing requires Unkey-backed keys. Next action: sign in to the dashboard and upgrade from the billing tab."
+          "API-key billing requires hosted Hive keys. Next action: sign in to the dashboard and upgrade from the billing tab."
         )
       );
       return;
@@ -5832,7 +5882,6 @@ function buildServerCard() {
 import { timingSafeEqual as timingSafeEqual5 } from "crypto";
 import express from "express";
 import rateLimit2 from "express-rate-limit";
-import RedisStore2 from "rate-limit-redis";
 import { z as z4 } from "zod";
 import {
   createOAuthMetadata,
@@ -5873,15 +5922,7 @@ function metadataHeaders(res) {
 function oauthRateLimitOptions(prefix) {
   const redis = getRedisClient();
   return {
-    ...redis ? {
-      store: new RedisStore2({
-        sendCommand: ((...args) => redis.call(
-          args[0],
-          ...args.slice(1)
-        )),
-        prefix
-      })
-    } : {},
+    ...redis ? { store: new RedisRateLimitStore(redis, prefix) } : {},
     keyGenerator: (req) => ipRateLimitKeyFromRequest(req)
   };
 }
@@ -6617,7 +6658,7 @@ async function recordOAuthFirstMaterialReceipt(input, overrides = {}) {
 }
 
 // src/server.ts
-dotenv.config({ quiet: true });
+loadEnvFile();
 var isShuttingDown = false;
 var activeRequests = 0;
 var app = express2();
@@ -6628,6 +6669,10 @@ function createHttpApp() {
 }
 app.set("trust proxy", resolveTrustedProxies());
 app.use(requestIdMiddleware);
+app.use((_req, res, next) => {
+  res.setHeader("X-Robots-Tag", "noindex, nofollow");
+  next();
+});
 app.use((_req, res, next) => {
   if (isShuttingDown) {
     res.setHeader("Connection", "close");
@@ -7015,15 +7060,15 @@ function extractApiKey(req) {
 }
 async function validateMcpApiKey(req) {
   const key = extractApiKey(req);
-  if (isUnkeyRequired() && !isUnkeyConfigured()) {
+  if (isHostedKeysRequired() && !isHostedKeysConfigured()) {
     return {
       ok: false,
       code: "AUTH_NOT_CONFIGURED",
       retryable: false,
-      error: "Unkey authentication is selected but not configured. Set UNKEY_ROOT_KEY and UNKEY_API_ID, or set HIVE_AUTH_BACKEND=static with HIVE_API_KEYS."
+      error: "Hosted API key authentication is selected but not configured. Set SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY, or set HIVE_AUTH_BACKEND=static with HIVE_API_KEYS."
     };
   }
-  if (isUnkeyConfigured()) {
+  if (isHostedKeysConfigured()) {
     if (!key)
       return {
         ok: false,
@@ -7035,10 +7080,10 @@ async function validateMcpApiKey(req) {
     try {
       result = await withTimeout(
         verifyApiKey(key, getMcpAnalyticsTags(req)),
-        500
+        2e3
       );
     } catch (err) {
-      secureLogger.warn("MCP Unkey verifyApiKey timeout/failure", {
+      secureLogger.warn("MCP verifyApiKey timeout/failure", {
         error: err instanceof Error ? err.message : String(err)
       });
       return {
@@ -7341,8 +7386,8 @@ async function resolveRestSubjectContextMiddleware(req, res, next) {
   const requiresSignedSubject = isHiveStatefulWriteTool(hiveToolName);
   const subject = await resolveSubjectContext({
     userId: authReq.userId,
-    keyId: authReq.unkeyKeyId,
-    keyMeta: authReq.unkeyResult?.meta,
+    keyId: authReq.apiKeyId,
+    keyMeta: authReq.apiKeyResult?.meta,
     method: req.method,
     path: req.path,
     // The official B2B adapter signs both reads and writes. Writes require a
@@ -8558,7 +8603,7 @@ app.post(
         toolName: endpoint.tool.name,
         userId: authReq.userId,
         subjectContext: authReq.hiveSubjectContext,
-        keyId: authReq.unkeyKeyId,
+        keyId: authReq.apiKeyId,
         // REST is the API-key transport; OAuth tokens are MCP-only.
         authMethod: "api_key",
         requestId: req.requestId
@@ -8662,42 +8707,8 @@ app.post("/api/v1/telemetry", (req, res) => {
 app.get("/api/openapi.json", (_req, res) => {
   res.json(generateOpenApiSpec());
 });
-var require2 = createNodeRequire(import.meta.url);
-var swaggerUiAssetPath = require2("swagger-ui-dist/absolute-path.js")();
-app.use(
-  "/docs/assets",
-  express2.static(swaggerUiAssetPath, {
-    dotfiles: "deny",
-    fallthrough: false,
-    immutable: true,
-    index: false,
-    maxAge: "1y"
-  })
-);
 app.get("/docs", (_req, res) => {
-  const nonce = res.locals.cspNonce;
-  res.setHeader("Content-Type", "text/html");
-  res.send(`<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <title>Hive API Docs</title>
-  <link rel="stylesheet" href="/docs/assets/swagger-ui.css">
-</head>
-<body>
-  <div id="swagger-ui"></div>
-  <script src="/docs/assets/swagger-ui-bundle.js"></script>
-  <script nonce="${nonce}">
-    SwaggerUIBundle({
-      url: '/api/openapi.json',
-      dom_id: '#swagger-ui',
-      deepLinking: true,
-      presets: [SwaggerUIBundle.presets.apis, SwaggerUIBundle.SwaggerUIStandalonePreset],
-      layout: 'BaseLayout',
-    });
-  </script>
-</body>
-</html>`);
+  res.redirect(301, "https://docs.hiveintelligence.xyz");
 });
 app.get("/", (_req, res) => {
   res.json({

package/build/stdio.js

@@ -6,9 +6,10 @@ import {
 import {
   createHiveMcpServer,
   secureLogger
-} from "./chunk-C4BFUIEB.js";
+} from "./chunk-QSKFAT7Z.js";
 import "./chunk-QYK3EWTE.js";
 import "./chunk-EPF36Q3Z.js";
+import "./chunk-MYSS5SBE.js";
 import {
   SERVER_NAME,
   SERVER_VERSION

package/build/{tools-K2P77L4T.js → tools-NSHQSUIK.js}

@@ -1,12 +1,12 @@
 import { createRequire } from 'node:module'; const require = createRequire(import.meta.url);
 import {
   fetchToolCatalog
-} from "./chunk-RNVZIPNY.js";
+} from "./chunk-VO6NWVJD.js";
 import {
   canonicalParamName,
   describeParameters
-} from "./chunk-AZFOTKS2.js";
-import "./chunk-ZSPPJW4G.js";
+} from "./chunk-WZ2NMSV3.js";
+import "./chunk-4U4IL5KA.js";
 import "./chunk-ZXKFJQDE.js";
 import {
   info,
@@ -25,7 +25,7 @@ async function loadToolCatalog() {
   const response = await fetchToolCatalog();
   if (!response.ok) {
     const msg = response.error && typeof response.error === "object" && "message" in response.error ? String(response.error.message) : "Failed to fetch tool catalog";
-    const { CliError } = await import("./errors-YQAVCXXO.js");
+    const { CliError } = await import("./errors-BPXK3KCR.js");
     const { outputError } = await import("./output-BBHBJI32.js");
     await outputError(new CliError("API_ERROR", msg, "Check: hive doctor"), {});
     return [];
@@ -177,7 +177,7 @@ async function toolInfo(name, reservedNames = /* @__PURE__ */ new Set()) {
   const allTools = await loadToolCatalog();
   const tool = allTools.find((t) => t.name === name);
   if (!tool) {
-    const { CliError, suggestSimilarTools } = await import("./errors-YQAVCXXO.js");
+    const { CliError, suggestSimilarTools } = await import("./errors-BPXK3KCR.js");
     const { outputError } = await import("./output-BBHBJI32.js");
     const similar = suggestSimilarTools(
       name,

package/build/{uninstall-I6ERJ2ED.js → uninstall-CECLA5YZ.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-5J4CWTI5.js";
 import {
   removeRecordedRoutingBlocks
-} from "./chunk-APBLB62S.js";
+} from "./chunk-PODCJTBV.js";
 import {
   removeClaudeCodeUserConfig,
   removeClaudeDesktopConfig,
@@ -15,7 +15,7 @@ import {
   removeVscodeConfig,
   removeWindsurfConfig
 } from "./chunk-QDZ7MAVN.js";
-import "./chunk-ZSPPJW4G.js";
+import "./chunk-4U4IL5KA.js";
 import "./chunk-QYK3EWTE.js";
 import {
   bold,

package/build/{watch-BUSEPVDM.js → watch-4VHBLAL6.js}

@@ -1,11 +1,11 @@
 import { createRequire } from 'node:module'; const require = createRequire(import.meta.url);
 import {
   executeTool
-} from "./chunk-YLHNUAFT.js";
+} from "./chunk-O5YKCM67.js";
 import "./chunk-XN3T6YOG.js";
-import "./chunk-RNVZIPNY.js";
+import "./chunk-VO6NWVJD.js";
 import "./chunk-RU6QOFHH.js";
-import "./chunk-ZSPPJW4G.js";
+import "./chunk-4U4IL5KA.js";
 import "./chunk-EPF36Q3Z.js";
 import "./chunk-ZXKFJQDE.js";
 import "./chunk-ZDXMZPC6.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hive-intelligence",
-  "version": "1.14.0",
+  "version": "1.16.0",
   "description": "Evidence-backed crypto due diligence for AI agents, with sources, freshness, and a runtime receipt on every call.",
   "mcpName": "xyz.hiveintelligence/mcp",
   "type": "module",
@@ -20,8 +20,8 @@
     "inspector": "npx @modelcontextprotocol/inspector --cli --config '{\"mcpServers\":{\"hive\":{\"url\":\"http://localhost:8080/mcp\"}}}'",
     "start:http": "tsx src/server.ts",
     "dev:http": "tsx src/server.ts",
-    "start": "cross-env SERVER_MODE=MCP tsx src/stdio.ts",
-    "dev": "cross-env SERVER_MODE=MCP tsx src/stdio.ts",
+    "start": "SERVER_MODE=MCP tsx src/stdio.ts",
+    "dev": "SERVER_MODE=MCP tsx src/stdio.ts",
     "test": "vitest run",
     "test:client": "npm --workspace hive-mcp-client run test",
     "test:watch": "vitest",
@@ -128,30 +128,19 @@
     "node": ">=22.12.0"
   },
   "dependencies": {
-    "@cloudflare/cabidela": "^0.2.4",
     "@coingecko/coingecko-typescript": "^8.0.0",
     "@modelcontextprotocol/sdk": "1.32.1",
     "@supabase/supabase-js": "^2.115.0",
-    "@types/compression": "^1.8.1",
-    "@unkey/api": "2.5.0",
     "ajv": "^8.18.0",
     "ajv-formats": "^3.0.1",
-    "axios": "^1.20.0",
     "ccxt": "^4.5.77",
     "commander": "^15.0.0",
     "compression": "^1.8.2",
     "cors": "2.8.6",
-    "dotenv": "17.4.2",
     "express": "^5.2.1",
     "express-rate-limit": "^8.5.2",
-    "fastest-levenshtein": "^1.0.16",
     "helmet": "^8.2.0",
     "ioredis": "^5.11.1",
-    "ora": "^9.4.1",
-    "rate-limit-redis": "^5.0.0",
-    "swagger-ui-dist": "5.32.8",
-    "tsx": "4.23.0",
-    "winston": "3.19.0",
     "zod": "^4.6.7"
   },
   "overrides": {
@@ -168,13 +157,14 @@
     "source-map-js": "1.2.2"
   },
   "devDependencies": {
+    "@types/compression": "^1.8.1",
     "@types/cors": "^2.8.19",
     "@types/express": "^5.0.6",
     "@types/node": "^24.13.3",
     "@vitest/coverage-v8": "4.1.11",
-    "cross-env": "10.1.0",
     "github-actionlint": "1.7.12",
     "tsup": "8.5.1",
+    "tsx": "4.23.0",
     "typescript": "^7.0.2",
     "vitest": "^4.1.11"
   },