hive-intelligence 1.5.1 → 1.5.2

package/build/{chunk-AGM2CIRL.js → chunk-LFNLT3YW.js}

@@ -20827,7 +20827,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net2 = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes4, createHash: createHash8 } = __require("crypto");
+    var { randomBytes: randomBytes4, createHash: createHash9 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -21495,7 +21495,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest2 = createHash8("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash9("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest2) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -21864,7 +21864,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash8 } = __require("crypto");
+    var { createHash: createHash9 } = __require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -22171,7 +22171,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest2 = createHash8("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash9("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -85678,6 +85678,147 @@ function getAnalyticsWriter() {
   return defaultWriter;
 }
 
+// src/services/posthog-sink.ts
+import { createHash as createHash5 } from "crypto";
+var POSTHOG_DISTINCT_ID_DOMAIN = "hive-posthog-principal-v1";
+var MAX_QUEUE_SIZE2 = 500;
+var FLUSH_INTERVAL_MS2 = 5e3;
+var FLUSH_BATCH_SIZE2 = 50;
+var DROP_LOG_INTERVAL_MS2 = 6e4;
+var CAPTURE_TIMEOUT_MS = 1e4;
+function posthogDistinctId(raw) {
+  return createHash5("sha256").update(`${POSTHOG_DISTINCT_ID_DOMAIN}\0${raw}`).digest("hex");
+}
+async function defaultPostBatch(url, body) {
+  const response = await fetch(url, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(body),
+    signal: AbortSignal.timeout(CAPTURE_TIMEOUT_MS)
+  });
+  return { ok: response.ok, status: response.status };
+}
+function defaultDependencies2() {
+  return {
+    projectToken: () => getEnvVar("POSTHOG_PROJECT_TOKEN"),
+    host: () => getEnvVar("POSTHOG_HOST"),
+    postBatch: defaultPostBatch,
+    maxQueueSize: MAX_QUEUE_SIZE2,
+    flushIntervalMs: FLUSH_INTERVAL_MS2,
+    flushBatchSize: FLUSH_BATCH_SIZE2
+  };
+}
+function createPosthogSink(overrides = {}) {
+  const deps = {
+    ...defaultDependencies2(),
+    ...overrides
+  };
+  const queue = [];
+  let dropped = 0;
+  let lastDropLoggedAt = 0;
+  let timer = null;
+  let flushing = null;
+  function ensureTimer() {
+    if (timer) return;
+    timer = setInterval(() => {
+      void flush();
+    }, deps.flushIntervalMs);
+    timer.unref?.();
+  }
+  async function drain() {
+    const token = deps.projectToken();
+    const host = deps.host();
+    if (!token || !host) return;
+    const batch = queue.splice(0, queue.length);
+    if (batch.length === 0) return;
+    try {
+      const { ok, status } = await deps.postBatch(
+        `${host.replace(/\/$/, "")}/batch/`,
+        { api_key: token, batch }
+      );
+      if (!ok) {
+        dropped += batch.length;
+        secureLogger.warn("PostHog batch capture failed", {
+          status,
+          eventCount: batch.length,
+          droppedTotal: dropped
+        });
+      }
+    } catch (error) {
+      dropped += batch.length;
+      secureLogger.warn("PostHog batch capture threw", {
+        eventCount: batch.length,
+        droppedTotal: dropped,
+        errorMessage: error instanceof Error ? error.message : "unknown"
+      });
+    }
+  }
+  function flush() {
+    if (flushing) return flushing;
+    flushing = drain().catch(() => void 0).finally(() => {
+      flushing = null;
+    });
+    return flushing;
+  }
+  return {
+    enqueueToolCall(event) {
+      try {
+        if (!deps.projectToken() || !deps.host()) return false;
+        if (!event.isMaterial || event.isInternal) return false;
+        if (!event.principalRaw || event.authLane === "anonymous") return false;
+        if (queue.length >= deps.maxQueueSize) {
+          dropped += 1;
+          const now = Date.now();
+          if (now - lastDropLoggedAt >= DROP_LOG_INTERVAL_MS2) {
+            lastDropLoggedAt = now;
+            secureLogger.warn(
+              "PostHog queue is full \u2014 mirror events are being dropped",
+              { queueSize: queue.length, droppedTotal: dropped }
+            );
+          }
+          return false;
+        }
+        queue.push({
+          event: "mcp_tool_call",
+          distinct_id: posthogDistinctId(event.principalRaw),
+          timestamp: event.ts ?? (/* @__PURE__ */ new Date()).toISOString(),
+          properties: {
+            source: "mcp",
+            tool_name: event.toolName,
+            success: event.success,
+            duration_ms: Math.max(0, Math.round(event.durationMs)),
+            transport: event.transport,
+            provider: event.provider ?? null,
+            category: event.category ?? null,
+            auth_lane: event.authLane ?? null,
+            client: event.clientProfile ?? null
+          }
+        });
+        ensureTimer();
+        if (queue.length >= deps.flushBatchSize) void flush();
+        return true;
+      } catch {
+        return false;
+      }
+    },
+    flush,
+    stop() {
+      if (timer) {
+        clearInterval(timer);
+        timer = null;
+      }
+    },
+    getStats() {
+      return { queued: queue.length, dropped };
+    }
+  };
+}
+var defaultSink = null;
+function getPosthogSink() {
+  if (!defaultSink) defaultSink = createPosthogSink();
+  return defaultSink;
+}
+
 // src/services/client-profile.ts
 var MCP_REMOTE_PATTERN = /^(.*?) \(via mcp-remote ([\d.]+)\)$/;
 var MAX_NAME_LENGTH = 256;
@@ -86081,6 +86222,22 @@ function logToolCall(endpoint, context, hive, success, durationMs, args, extra =
     });
   } catch {
   }
+  try {
+    getPosthogSink().enqueueToolCall({
+      toolName: endpoint.tool.name,
+      success,
+      durationMs,
+      transport: context.transport,
+      provider: getProviderNameForTool(endpoint),
+      category: getCategoryNameForTool(endpoint.tool.name),
+      principalRaw: context.analytics?.principalRaw ?? null,
+      authLane: context.analytics?.authLane ?? null,
+      clientProfile: clientProfileFromName(context.analytics?.clientName),
+      isMaterial: getMcpCreditCost(endpoint.tool.name) > 0,
+      isInternal: context.analytics?.isInternal === true || context.transport === "health"
+    });
+  } catch {
+  }
 }
 function validationErrorResult(endpoint, validationErrors, durationMs, args) {
   const errorCopy = agentErrorCopy("invalid_input", {
@@ -91138,7 +91295,7 @@ async function runMcpProtocolHealth(options = {}) {
 }
 
 // src/health/oauthLifecycle.ts
-import { createHash as createHash6, randomBytes as randomBytes3 } from "crypto";
+import { createHash as createHash7, randomBytes as randomBytes3 } from "crypto";
 
 // src/auth/oauth/provider.ts
 import { randomBytes as randomBytes2 } from "crypto";
@@ -91514,10 +91671,10 @@ function isHiveOAuthAccessToken(token) {
 }
 
 // src/auth/oauth/store.ts
-import { createHash as createHash5 } from "crypto";
+import { createHash as createHash6 } from "crypto";
 var REVOKED_FAMILY_TTL_SECONDS = 7776e3;
 function digest(value) {
-  return createHash5("sha256").update(value).digest("hex");
+  return createHash6("sha256").update(value).digest("hex");
 }
 function parseJson(raw) {
   if (!raw) return void 0;
@@ -91969,7 +92126,7 @@ async function operationRejects(operation) {
 }
 async function issueCanaryFamily(args) {
   const verifier = randomBytes3(48).toString("base64url");
-  const challenge = createHash6("sha256").update(verifier).digest("base64url");
+  const challenge = createHash7("sha256").update(verifier).digest("base64url");
   let consentLocation;
   const response = {
     redirect(status, location) {
@@ -92281,7 +92438,7 @@ async function runOAuthLifecycleHealth(overrides = {}) {
 import Coingecko2 from "@coingecko/coingecko-typescript";
 
 // src/tools/goplus/goplusClient.ts
-import { createHash as createHash7 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 function parsePositiveInteger(value, fallback) {
   const parsed = Number.parseInt(value || "", 10);
   return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
@@ -92375,7 +92532,7 @@ var GoPlusClient = class {
     const time = Math.floor(Date.now() / 1e3);
     const timeStr = time.toString();
     const signInput = this.appKey + timeStr + this.appSecret;
-    const sign = createHash7("sha1").update(signInput).digest("hex");
+    const sign = createHash8("sha1").update(signInput).digest("hex");
     secureLogger.info("GoPlus: requesting access token", {
       appKeyLength: this.appKey.length,
       appSecretLength: this.appSecret.length,

package/build/{chunk-XQPEFCSY.js → chunk-MWYPLBIN.js}

@@ -7,7 +7,7 @@ import {
   getSupabaseAdmin,
   resolveEndpoint,
   secureLogger
-} from "./chunk-AGM2CIRL.js";
+} from "./chunk-LFNLT3YW.js";
 
 // src/services/wallet-service.ts
 async function consumeCredits(args) {

package/build/cli.js

@@ -3440,7 +3440,7 @@ program2.hook("preAction", (thisCommand) => {
   setCliFlags({ apiKey: opts.apiKey, noRetry: opts.retry === false });
 });
 program2.action(async () => {
-  const { startStdio } = await import("./serve-PWMT5IRU.js");
+  const { startStdio } = await import("./serve-YFFG2432.js");
   await startStdio(program2.opts().envFile);
 });
 program2.command("serve").description("Start the MCP server").option("--http", "Start HTTP server instead of stdio").option("--port <number>", "HTTP server port", "8080").action(async (opts) => {
@@ -3453,10 +3453,10 @@ program2.command("serve").description("Start the MCP server").option("--http", "
       );
       process.exit(ExitCode.INVALID_ARGS);
     }
-    const { startHttp } = await import("./serve-PWMT5IRU.js");
+    const { startHttp } = await import("./serve-YFFG2432.js");
     await startHttp(port, program2.opts().envFile);
   } else {
-    const { startStdio } = await import("./serve-PWMT5IRU.js");
+    const { startStdio } = await import("./serve-YFFG2432.js");
     await startStdio(program2.opts().envFile);
   }
 });
@@ -3666,7 +3666,7 @@ program2.command("uninstall").description(
   if (exitCode !== 0) process.exit(exitCode);
 });
 program2.command("doctor").description("Diagnose environment and server connectivity").option("--probe", "Run live API probes (slower)").action(async (opts) => {
-  const { runDoctor } = await import("./doctor-XG5IQCXK.js");
+  const { runDoctor } = await import("./doctor-NLSZB27R.js");
   await runDoctor(opts);
 });
 program2.command("upgrade").description("Update Hive to the latest published version").action(async () => {
@@ -3714,7 +3714,7 @@ program2.command("usage").description("Show your API usage and plan limits").act
   await runUsage();
 });
 program2.command("status").description("Quick health and version check").action(async () => {
-  const { runStatus } = await import("./doctor-XG5IQCXK.js");
+  const { runStatus } = await import("./doctor-NLSZB27R.js");
   await runStatus();
 });
 program2.command("open [target]").description("Open Hive dashboard, docs, status, or GitHub in browser").action(async (target) => {

package/build/{doctor-XG5IQCXK.js → doctor-NLSZB27R.js}

@@ -204,7 +204,7 @@ ${fails === 0 ? "All checks passed" : `${fails} issues found`}${warns ? ` (${war
   if (fails > 0) process.exit(1);
 }
 async function runStatus() {
-  const { SERVER_VERSION } = await import("./mcpServer-XHIN5JER.js");
+  const { SERVER_VERSION } = await import("./mcpServer-IWKTX2ZQ.js");
   const { resolveApiKey, resolveApiUrl } = await import("./config-dir-5IH7MOOT.js");
   const { getActiveProfile, maskKey } = await import("./auth-Y4GXW376.js");
   const apiUrl = resolveApiUrl();

package/build/{mcpServer-XHIN5JER.js → mcpServer-IWKTX2ZQ.js}

@@ -9,7 +9,7 @@ import {
   getToolsForScope,
   memoizedJsonSchemaToZodInputSchema,
   memoizedJsonSchemaToZodOutputSchema
-} from "./chunk-AGM2CIRL.js";
+} from "./chunk-LFNLT3YW.js";
 import "./chunk-L326MQZP.js";
 import "./chunk-EPF36Q3Z.js";
 import {

package/build/monitor-worker.js

@@ -2,7 +2,7 @@ import { createRequire } from 'node:module'; const require = createRequire(impor
 import {
   consumeCredits,
   executeToolByName
-} from "./chunk-XQPEFCSY.js";
+} from "./chunk-MWYPLBIN.js";
 import {
   HyperliquidAPI,
   MIN_MONITOR_CADENCE_MS,
@@ -15,7 +15,7 @@ import {
   monitorCadenceIntervalMs,
   runScheduledHealthCanaries,
   secureLogger
-} from "./chunk-AGM2CIRL.js";
+} from "./chunk-LFNLT3YW.js";
 import "./chunk-L326MQZP.js";
 import "./chunk-EPF36Q3Z.js";
 import "./chunk-ZXKFJQDE.js";

package/build/release.json

@@ -1,8 +1,8 @@
 {
   "package": "hive-intelligence",
-  "version": "1.5.1",
-  "buildSha": "ab8276f834ef8b08bda9d320387e4390e9ab55b6",
-  "imageDigest": "sha256:9ef23428cc9d7da797e21152f4823f021ee8f0d3f3db94cf28410c8e1a72a124",
+  "version": "1.5.2",
+  "buildSha": "d978faa93aff11daff471ee34773a8354535bb32",
+  "imageDigest": "sha256:89a2aef7b9ac0a804f08f46c264c4487d2c3a02c9cce27613afb478a24fc81a1",
   "deployedUrl": "https://mcp.hiveintelligence.xyz",
-  "manifest": "https://raw.githubusercontent.com/hive-intel/hive-sdk/v1.5.1/releases/v1.5.1.json"
+  "manifest": "https://raw.githubusercontent.com/hive-intel/hive-sdk/v1.5.2/releases/v1.5.2.json"
 }

package/build/{serve-PWMT5IRU.js → serve-YFFG2432.js}

@@ -7,7 +7,7 @@ async function startStdio(envFile) {
   dotenv.config({ path: envFile || ".env", quiet: true });
   console.log = (...args) => console.error("[LOG]", ...args);
   const { StdioServerTransport } = await import("@modelcontextprotocol/sdk/server/stdio.js");
-  const { createHiveMcpServer, SERVER_NAME, SERVER_VERSION } = await import("./mcpServer-XHIN5JER.js");
+  const { createHiveMcpServer, SERVER_NAME, SERVER_VERSION } = await import("./mcpServer-IWKTX2ZQ.js");
   const { getPendingUpdateVersion } = await import("./update-check-IEXPOYYR.js");
   const transport = new StdioServerTransport();
   const pendingUpdate = getPendingUpdateVersion();

package/build/server.js

@@ -6,7 +6,7 @@ import {
   ensureWallet,
   executeToolByName,
   getWalletStatus
-} from "./chunk-XQPEFCSY.js";
+} from "./chunk-MWYPLBIN.js";
 import {
   CategoryEndpoints,
   HERO_TOOL_NAMES,
@@ -95,7 +95,7 @@ import {
   validateEndpointArgs,
   verifyApiKey,
   waitForRedisAvailability
-} from "./chunk-AGM2CIRL.js";
+} from "./chunk-LFNLT3YW.js";
 import {
   HIVE_AGENT_SKILLS
 } from "./chunk-L326MQZP.js";

package/build/stdio.js

@@ -6,7 +6,7 @@ import {
 import {
   createHiveMcpServer,
   secureLogger
-} from "./chunk-AGM2CIRL.js";
+} from "./chunk-LFNLT3YW.js";
 import "./chunk-L326MQZP.js";
 import "./chunk-EPF36Q3Z.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hive-intelligence",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "description": "Evidence-backed crypto due diligence for AI agents, with sources, freshness, and a runtime receipt on every call.",
   "mcpName": "xyz.hiveintelligence/mcp",
   "type": "module",