hive-intelligence 1.5.1 → 1.5.3

package/build/{chunk-XQPEFCSY.js → chunk-VZBDTSWA.js}

@@ -7,7 +7,7 @@ import {
   getSupabaseAdmin,
   resolveEndpoint,
   secureLogger
-} from "./chunk-AGM2CIRL.js";
+} from "./chunk-Y5XA3SFY.js";
 
 // src/services/wallet-service.ts
 async function consumeCredits(args) {
@@ -133,6 +133,7 @@ async function executeToolByName(toolName, args, options) {
     transport: "rest",
     requestId: options?.requestId,
     clients: getSharedClients(),
+    analytics: options?.analytics,
     beforeExecution: options?.beforeExecution
   });
   if (result.validationErrors) {

package/build/{chunk-AGM2CIRL.js → chunk-Y5XA3SFY.js}

@@ -20827,7 +20827,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net2 = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes4, createHash: createHash8 } = __require("crypto");
+    var { randomBytes: randomBytes4, createHash: createHash9 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -21495,7 +21495,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest2 = createHash8("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash9("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest2) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -21864,7 +21864,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash8 } = __require("crypto");
+    var { createHash: createHash9 } = __require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -22171,7 +22171,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest2 = createHash8("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash9("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -62904,11 +62904,30 @@ function getCircuitBreaker(serviceName) {
       state: "CLOSED" /* CLOSED */,
       failures: 0,
       lastFailureTime: 0,
+      lastErrorMessage: null,
       serviceName
     });
   }
   return circuitBreakers.get(serviceName);
 }
+function failureMessage(error) {
+  let message = "";
+  if (error instanceof AxiosError) {
+    const data = error.response?.data;
+    const fromBody = [
+      data?.message,
+      data?.error,
+      data?.status?.error_message
+    ].find((value) => typeof value === "string" && value.trim());
+    message = typeof fromBody === "string" ? fromBody : error.message;
+  } else if (error instanceof Error) {
+    message = error.message;
+  } else if (error) {
+    message = String(error);
+  }
+  const compact = message.replace(/\s+/g, " ").trim();
+  return compact ? compact.slice(0, 240) : null;
+}
 function isRetryableError(error) {
   if (!error.response) {
     const retryableCodes = [
@@ -63004,7 +63023,7 @@ var ResilientHttpClient = class {
           );
         } else {
           throw new Error(
-            `Circuit breaker OPEN for ${this.config.serviceName}. Service has failed ${breaker.failures} consecutive times. Will retry in ${Math.ceil((this.config.circuitBreakerResetTimeout - (now - breaker.lastFailureTime)) / 1e3)}s`
+            `Circuit breaker OPEN for ${this.config.serviceName}. Service has failed ${breaker.failures} consecutive times. Will retry in ${Math.ceil((this.config.circuitBreakerResetTimeout - (now - breaker.lastFailureTime)) / 1e3)}s` + (breaker.lastErrorMessage ? `. Last error: ${breaker.lastErrorMessage}` : "")
           );
         }
         break;
@@ -63034,11 +63053,13 @@ var ResilientHttpClient = class {
   /**
    * Record a failed request (may open circuit breaker)
    */
-  recordFailure() {
+  recordFailure(error) {
     if (!this.config.enableCircuitBreaker) return;
     const breaker = this.circuitBreaker;
     breaker.failures++;
     breaker.lastFailureTime = Date.now();
+    const message = failureMessage(error);
+    if (message) breaker.lastErrorMessage = message;
     if (breaker.state === "HALF_OPEN" /* HALF_OPEN */) {
       breaker.state = "OPEN" /* OPEN */;
       secureLogger.warn(
@@ -63068,7 +63089,7 @@ var ResilientHttpClient = class {
       } catch (error) {
         lastError = error;
         if (error instanceof AxiosError && isRetryableError(error)) {
-          this.recordFailure();
+          this.recordFailure(error);
           if (attempt < maxRetries) {
             const delay2 = calculateBackoffDelay(
               attempt,
@@ -63091,7 +63112,7 @@ var ResilientHttpClient = class {
           if (error instanceof AxiosError) {
             const status = error.response?.status ?? 0;
             if (!status || status >= 500 || status === 429) {
-              this.recordFailure();
+              this.recordFailure(error);
             }
           }
         }
@@ -84857,7 +84878,8 @@ var ERROR_SUGGESTIONS = {
 };
 function createErrorResponse7(code, message, additionalContext) {
   const suggestion = ERROR_SUGGESTIONS[code] || ERROR_SUGGESTIONS.API_ERROR;
-  let errorText = `**Error:** ${message}
+  const bareMessage = message.replace(/^(?:\s*\*\*Error:\*\*\s*)+/, "");
+  let errorText = `**Error:** ${bareMessage}
 
 **Code:** ${code}
 
@@ -85678,6 +85700,147 @@ function getAnalyticsWriter() {
   return defaultWriter;
 }
 
+// src/services/posthog-sink.ts
+import { createHash as createHash5 } from "crypto";
+var POSTHOG_DISTINCT_ID_DOMAIN = "hive-posthog-principal-v1";
+var MAX_QUEUE_SIZE2 = 500;
+var FLUSH_INTERVAL_MS2 = 5e3;
+var FLUSH_BATCH_SIZE2 = 50;
+var DROP_LOG_INTERVAL_MS2 = 6e4;
+var CAPTURE_TIMEOUT_MS = 1e4;
+function posthogDistinctId(raw) {
+  return createHash5("sha256").update(`${POSTHOG_DISTINCT_ID_DOMAIN}\0${raw}`).digest("hex");
+}
+async function defaultPostBatch(url, body) {
+  const response = await fetch(url, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(body),
+    signal: AbortSignal.timeout(CAPTURE_TIMEOUT_MS)
+  });
+  return { ok: response.ok, status: response.status };
+}
+function defaultDependencies2() {
+  return {
+    projectToken: () => getEnvVar("POSTHOG_PROJECT_TOKEN"),
+    host: () => getEnvVar("POSTHOG_HOST"),
+    postBatch: defaultPostBatch,
+    maxQueueSize: MAX_QUEUE_SIZE2,
+    flushIntervalMs: FLUSH_INTERVAL_MS2,
+    flushBatchSize: FLUSH_BATCH_SIZE2
+  };
+}
+function createPosthogSink(overrides = {}) {
+  const deps = {
+    ...defaultDependencies2(),
+    ...overrides
+  };
+  const queue = [];
+  let dropped = 0;
+  let lastDropLoggedAt = 0;
+  let timer = null;
+  let flushing = null;
+  function ensureTimer() {
+    if (timer) return;
+    timer = setInterval(() => {
+      void flush();
+    }, deps.flushIntervalMs);
+    timer.unref?.();
+  }
+  async function drain() {
+    const token = deps.projectToken();
+    const host = deps.host();
+    if (!token || !host) return;
+    const batch = queue.splice(0, queue.length);
+    if (batch.length === 0) return;
+    try {
+      const { ok, status } = await deps.postBatch(
+        `${host.replace(/\/$/, "")}/batch/`,
+        { api_key: token, batch }
+      );
+      if (!ok) {
+        dropped += batch.length;
+        secureLogger.warn("PostHog batch capture failed", {
+          status,
+          eventCount: batch.length,
+          droppedTotal: dropped
+        });
+      }
+    } catch (error) {
+      dropped += batch.length;
+      secureLogger.warn("PostHog batch capture threw", {
+        eventCount: batch.length,
+        droppedTotal: dropped,
+        errorMessage: error instanceof Error ? error.message : "unknown"
+      });
+    }
+  }
+  function flush() {
+    if (flushing) return flushing;
+    flushing = drain().catch(() => void 0).finally(() => {
+      flushing = null;
+    });
+    return flushing;
+  }
+  return {
+    enqueueToolCall(event) {
+      try {
+        if (!deps.projectToken() || !deps.host()) return false;
+        if (!event.isMaterial || event.isInternal) return false;
+        if (!event.principalRaw || event.authLane === "anonymous") return false;
+        if (queue.length >= deps.maxQueueSize) {
+          dropped += 1;
+          const now = Date.now();
+          if (now - lastDropLoggedAt >= DROP_LOG_INTERVAL_MS2) {
+            lastDropLoggedAt = now;
+            secureLogger.warn(
+              "PostHog queue is full \u2014 mirror events are being dropped",
+              { queueSize: queue.length, droppedTotal: dropped }
+            );
+          }
+          return false;
+        }
+        queue.push({
+          event: "mcp_tool_call",
+          distinct_id: posthogDistinctId(event.principalRaw),
+          timestamp: event.ts ?? (/* @__PURE__ */ new Date()).toISOString(),
+          properties: {
+            source: "mcp",
+            tool_name: event.toolName,
+            success: event.success,
+            duration_ms: Math.max(0, Math.round(event.durationMs)),
+            transport: event.transport,
+            provider: event.provider ?? null,
+            category: event.category ?? null,
+            auth_lane: event.authLane ?? null,
+            client: event.clientProfile ?? null
+          }
+        });
+        ensureTimer();
+        if (queue.length >= deps.flushBatchSize) void flush();
+        return true;
+      } catch {
+        return false;
+      }
+    },
+    flush,
+    stop() {
+      if (timer) {
+        clearInterval(timer);
+        timer = null;
+      }
+    },
+    getStats() {
+      return { queued: queue.length, dropped };
+    }
+  };
+}
+var defaultSink = null;
+function getPosthogSink() {
+  if (!defaultSink) defaultSink = createPosthogSink();
+  return defaultSink;
+}
+
 // src/services/client-profile.ts
 var MCP_REMOTE_PATTERN = /^(.*?) \(via mcp-remote ([\d.]+)\)$/;
 var MAX_NAME_LENGTH = 256;
@@ -86081,6 +86244,22 @@ function logToolCall(endpoint, context, hive, success, durationMs, args, extra =
     });
   } catch {
   }
+  try {
+    getPosthogSink().enqueueToolCall({
+      toolName: endpoint.tool.name,
+      success,
+      durationMs,
+      transport: context.transport,
+      provider: getProviderNameForTool(endpoint),
+      category: getCategoryNameForTool(endpoint.tool.name),
+      principalRaw: context.analytics?.principalRaw ?? null,
+      authLane: context.analytics?.authLane ?? null,
+      clientProfile: clientProfileFromName(context.analytics?.clientName),
+      isMaterial: getMcpCreditCost(endpoint.tool.name) > 0,
+      isInternal: context.analytics?.isInternal === true || context.transport === "health"
+    });
+  } catch {
+  }
 }
 function validationErrorResult(endpoint, validationErrors, durationMs, args) {
   const errorCopy = agentErrorCopy("invalid_input", {
@@ -86502,6 +86681,14 @@ function isSolanaChain(chain, address) {
   if (chain) return SOLANA_CHAIN_NAMES.has(normalizeChain(chain));
   return !address.trim().toLowerCase().startsWith("0x");
 }
+function looksLikeNameService(address) {
+  return /\.[a-z]{2,}$/i.test(address.trim());
+}
+function nameServiceError(address) {
+  return errorResult3(
+    `"${address}" looks like an ENS or name-service name, which isn't supported yet. Pass a 0x address (EVM) or a base58 address (Solana).`
+  );
+}
 function errorResult3(message) {
   return {
     content: [{ type: "text", text: JSON.stringify({ error: message }) }],
@@ -86592,7 +86779,12 @@ function heroTools(endpoints, options = {}) {
         change_24h_percent: value[`${vsCurrency}_24h_change`] ?? null
       };
     }
-    return { token: query, vs_currency: vsCurrency, ...payload };
+    const tokenExists = Object.keys(payload).some((key) => key !== "_hive");
+    return {
+      token: query,
+      vs_currency: vsCurrency,
+      note: tokenExists ? `No ${vsCurrency} price available for "${query}". The quote currency may be unsupported; try vs_currency "usd".` : `No price found for "${query}". Verify the CoinGecko id or symbol, or pass chain + address for a contract token.`
+    };
   };
   const trimOnchainPrice = (address) => (payload) => {
     const data = payload.data;
@@ -86608,7 +86800,10 @@ function heroTools(endpoints, options = {}) {
         };
       }
     }
-    return { address, ...payload };
+    return {
+      address,
+      note: `No onchain price found for ${address} on this network. Verify the contract address and chain.`
+    };
   };
   const getTokenPrice = {
     metadata: {
@@ -86635,6 +86830,7 @@ function heroTools(endpoints, options = {}) {
       const vsCurrency = (parsed.data.vs_currency ?? "usd").toLowerCase();
       const format = parsed.data.response_format ?? "concise";
       if (address) {
+        if (looksLikeNameService(address)) return nameServiceError(address);
         const network = GECKO_NETWORKS[normalizeChain(chain)] ?? normalizeChain(chain);
         const result3 = await executeUnderlying("get_onchain_token_price", {
           network,
@@ -86734,6 +86930,7 @@ function heroTools(endpoints, options = {}) {
       }
       const { address, chain } = parsed.data;
       const format = parsed.data.response_format ?? "concise";
+      if (looksLikeNameService(address)) return nameServiceError(address);
       if (isSolanaChain(chain, address)) {
         const result3 = await executeUnderlying("get_solana_token_security", {
           contract_address: address
@@ -86882,6 +87079,7 @@ function heroTools(endpoints, options = {}) {
       }
       const { address, chain } = parsed.data;
       const format = parsed.data.response_format ?? "concise";
+      if (looksLikeNameService(address)) return nameServiceError(address);
       if (isSolanaChain(chain, address)) {
         const result3 = await executeUnderlying("helius_get_wallet_balances", {
           wallet: address
@@ -91138,7 +91336,7 @@ async function runMcpProtocolHealth(options = {}) {
 }
 
 // src/health/oauthLifecycle.ts
-import { createHash as createHash6, randomBytes as randomBytes3 } from "crypto";
+import { createHash as createHash7, randomBytes as randomBytes3 } from "crypto";
 
 // src/auth/oauth/provider.ts
 import { randomBytes as randomBytes2 } from "crypto";
@@ -91514,10 +91712,10 @@ function isHiveOAuthAccessToken(token) {
 }
 
 // src/auth/oauth/store.ts
-import { createHash as createHash5 } from "crypto";
+import { createHash as createHash6 } from "crypto";
 var REVOKED_FAMILY_TTL_SECONDS = 7776e3;
 function digest(value) {
-  return createHash5("sha256").update(value).digest("hex");
+  return createHash6("sha256").update(value).digest("hex");
 }
 function parseJson(raw) {
   if (!raw) return void 0;
@@ -91969,7 +92167,7 @@ async function operationRejects(operation) {
 }
 async function issueCanaryFamily(args) {
   const verifier = randomBytes3(48).toString("base64url");
-  const challenge = createHash6("sha256").update(verifier).digest("base64url");
+  const challenge = createHash7("sha256").update(verifier).digest("base64url");
   let consentLocation;
   const response = {
     redirect(status, location) {
@@ -92281,7 +92479,7 @@ async function runOAuthLifecycleHealth(overrides = {}) {
 import Coingecko2 from "@coingecko/coingecko-typescript";
 
 // src/tools/goplus/goplusClient.ts
-import { createHash as createHash7 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 function parsePositiveInteger(value, fallback) {
   const parsed = Number.parseInt(value || "", 10);
   return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
@@ -92375,7 +92573,7 @@ var GoPlusClient = class {
     const time = Math.floor(Date.now() / 1e3);
     const timeStr = time.toString();
     const signInput = this.appKey + timeStr + this.appSecret;
-    const sign = createHash7("sha1").update(signInput).digest("hex");
+    const sign = createHash8("sha1").update(signInput).digest("hex");
     secureLogger.info("GoPlus: requesting access token", {
       appKeyLength: this.appKey.length,
       appSecretLength: this.appSecret.length,
@@ -97380,8 +97578,9 @@ var PROVIDER_AVAILABILITY_TTL_MS = 6e4;
 var AVAILABILITY_SEVERITY = {
   ok: 0,
   degraded: 1,
-  missing_key: 2,
-  failing: 3
+  plan_required: 2,
+  missing_key: 3,
+  failing: 4
 };
 function availabilityFromRuntimeStatus(status) {
   switch (status) {
@@ -97392,7 +97591,11 @@ function availabilityFromRuntimeStatus(status) {
       return "ok";
     case "missing_key":
       return "missing_key";
+    // A lapsed or exhausted upstream plan fails deterministically until the
+    // account changes, unlike a transient rate limit or wobble, so it demotes
+    // like a missing key instead of staying ranked as merely degraded.
     case "plan_required":
+      return "plan_required";
     case "rate_limited":
     case "degraded":
       return "degraded";
@@ -97401,7 +97604,7 @@ function availabilityFromRuntimeStatus(status) {
   }
 }
 function isUnavailable(availability) {
-  return availability === "missing_key" || availability === "failing";
+  return availability === "missing_key" || availability === "plan_required" || availability === "failing";
 }
 function worseOf(left, right) {
   return AVAILABILITY_SEVERITY[right] > AVAILABILITY_SEVERITY[left] ? right : left;
@@ -98165,7 +98368,8 @@ function singularizeToken(token) {
   return token;
 }
 function parseSearchTokens(query) {
-  return query.toLowerCase().replace(/0x[a-f0-9]{20,}/g, " ").replace(/[1-9A-HJ-NP-Za-km-z]{32,}/g, " ").replace(/https?:\/\/\S+/g, " ").replace(/[\?¿!¡"'`()\[\]{}:;|/\\]+/g, " ").replace(/[-_]+/g, " ").split(/[\s,]+/).map(normalizeSearchToken).filter((token) => token.length > 1).filter((token) => !SEARCH_STOPWORDS.has(token)).map(singularizeToken);
+  const tokens = query.toLowerCase().replace(/0x[a-f0-9]{20,}/g, " ").replace(/[1-9A-HJ-NP-Za-km-z]{32,}/g, " ").replace(/https?:\/\/\S+/g, " ").replace(/[\?¿!¡"'`()\[\]{}:;|/\\]+/g, " ").replace(/[-_]+/g, " ").split(/[\s,]+/).map(normalizeSearchToken).filter((token) => token.length > 1).filter((token) => !SEARCH_STOPWORDS.has(token)).map(singularizeToken);
+  return [...new Set(tokens)];
 }
 function searchTokenVariants(token) {
   const normalized = singularizeToken(normalizeSearchToken(token));
@@ -98202,9 +98406,12 @@ function queryMatchScore(entry, query) {
     entry.provider,
     entry.summary
   ].join(" ").toLowerCase();
+  const nameTitleTokenSet = new Set(parseSearchTokens(nameTitleText));
+  const coreTextTokenSet = new Set(parseSearchTokens(coreText));
   const score = tokens.reduce((total, token) => {
-    if (exactTextMatchesSearchToken(nameTitleText, token)) return total + 24;
-    if (exactTextMatchesSearchToken(coreText, token)) return total + 14;
+    const exactToken = singularizeToken(normalizeSearchToken(token));
+    if (nameTitleTokenSet.has(exactToken)) return total + 24;
+    if (coreTextTokenSet.has(exactToken)) return total + 14;
     if (textMatchesSearchToken(nameTitleText, token)) return total + 12;
     if (textMatchesSearchToken(entry.summary, token)) return total + 6;
     if (textMatchesSearchToken(coreText, token)) return total + 4;
@@ -98446,13 +98653,13 @@ function dynamicTools(endpoints, options = {}) {
     (toolset) => toolsetCatalogEntry(toolset, providerByToolName)
   );
   const searchToolsSchema = z17.object({
-    query: z17.string().optional().describe(
+    query: z17.string().max(512).optional().describe(
       "Search text matched against tool name, title, category, provider, and summary."
     ),
-    provider: z17.string().optional().describe(
+    provider: z17.string().max(128).optional().describe(
       "Optional provider filter such as CoinGecko, Moralis, Tenderly, Helius, GoPlus, CCXT, Codex, Alchemy, DeFiLlama, Hyperliquid, or Open Data Fetch."
     ),
-    category: z17.string().optional().describe("Optional category filter, for example Portfolio & Wallet."),
+    category: z17.string().max(128).optional().describe("Optional category filter, for example Portfolio & Wallet."),
     limit: z17.number().int().min(1).max(MAX_SEARCH_LIMIT).optional().describe(`Maximum tools to return. Default ${DEFAULT_SEARCH_LIMIT}.`),
     cursor: z17.string().optional().describe("Pagination cursor from the previous response."),
     toolset_id: z17.string().max(100).optional().describe(
@@ -99352,7 +99559,7 @@ function buildServerInstructions(scope) {
     `Hive serves live crypto market data to AI agents over a compact ${ROOT_META_TOOL_COUNT}-tool root. Loop: search_tools -> get_api_endpoint_schema -> ${READ_ENDPOINT_INVOKER} for reads (${STATEFUL_WRITE_ENDPOINT_INVOKER} only after explicit user approval; validate_task_result before structured answers). Every material response carries a _hive receipt (provider, fetched_at, runtime_status, _hive.receipt_id); cite it when answering.`,
     `For the three dominant intents call the hero tools directly: get_token_price, check_token_safety, get_wallet_portfolio (response_format "concise" default, "detailed" available).`,
     `Degraded providers are reported, not hidden: search_tools marks each tool's availability, and unavailable tools return runtime_status with cause and next_action instead of data. Follow next_action; never retry an unchanged failing call in a loop.`,
-    `Discovery is free and cheap: resources hive://toolsets, hive://providers, hive://tools; the ${UNDERLYING_TOOL_COUNT}-tool catalog stays reachable through search_tools or scoped category endpoints. Use limit/page/per_page to keep responses small; a material execution costs 1 credit on the hosted service.`
+    `Discovery is free and cheap: resources hive://toolsets, hive://providers, hive://tools; the ${UNDERLYING_TOOL_COUNT}-tool catalog stays reachable through search_tools or scoped category endpoints. Use limit and cursor on search_tools, and limit/page/per_page/offset on data endpoints, to keep responses small; a material execution costs 1 credit on the hosted service.`
   ].join(" ");
 }
 function compactCanaryRun(run) {
@@ -99696,7 +99903,11 @@ var HiveMCPServer = class {
     }
   }
   getProviderStatusCatalog() {
-    return getProviderStatusCatalog();
+    const snapshot = getProviderAvailabilitySnapshot();
+    return getProviderStatusCatalog().map((provider) => {
+      const observed = snapshot.byProviderName[provider.name];
+      return provider.status === "ok" && observed && observed !== "ok" ? { ...provider, status: observed } : provider;
+    });
   }
   setupHandlers() {
     this.server.server.oninitialized = () => {
@@ -99807,6 +100018,8 @@ var HiveMCPServer = class {
                     note: `Root /mcp exposes ${ROOT_META_TOOL_COUNT} meta-tools optimized for LLM agents. Use category endpoints (/hive_*/mcp) only for specialized integrations requiring direct tool access.`,
                     runtimeStatuses: TASK_TOOLSET_RUNTIME_STATUSES,
                     runtimeStatusSemantics: RUNTIME_STATUS_SEMANTICS,
+                    availability_source: getProviderAvailabilitySnapshot().source,
+                    canary_observed_at: getProviderAvailabilitySnapshot().canaryObservedAt,
                     providers
                   },
                   null,

package/build/cli.js

@@ -3440,7 +3440,7 @@ program2.hook("preAction", (thisCommand) => {
   setCliFlags({ apiKey: opts.apiKey, noRetry: opts.retry === false });
 });
 program2.action(async () => {
-  const { startStdio } = await import("./serve-PWMT5IRU.js");
+  const { startStdio } = await import("./serve-NCMFZSMB.js");
   await startStdio(program2.opts().envFile);
 });
 program2.command("serve").description("Start the MCP server").option("--http", "Start HTTP server instead of stdio").option("--port <number>", "HTTP server port", "8080").action(async (opts) => {
@@ -3453,10 +3453,10 @@ program2.command("serve").description("Start the MCP server").option("--http", "
       );
       process.exit(ExitCode.INVALID_ARGS);
     }
-    const { startHttp } = await import("./serve-PWMT5IRU.js");
+    const { startHttp } = await import("./serve-NCMFZSMB.js");
     await startHttp(port, program2.opts().envFile);
   } else {
-    const { startStdio } = await import("./serve-PWMT5IRU.js");
+    const { startStdio } = await import("./serve-NCMFZSMB.js");
     await startStdio(program2.opts().envFile);
   }
 });
@@ -3666,7 +3666,7 @@ program2.command("uninstall").description(
   if (exitCode !== 0) process.exit(exitCode);
 });
 program2.command("doctor").description("Diagnose environment and server connectivity").option("--probe", "Run live API probes (slower)").action(async (opts) => {
-  const { runDoctor } = await import("./doctor-XG5IQCXK.js");
+  const { runDoctor } = await import("./doctor-VRZYKQGL.js");
   await runDoctor(opts);
 });
 program2.command("upgrade").description("Update Hive to the latest published version").action(async () => {
@@ -3714,7 +3714,7 @@ program2.command("usage").description("Show your API usage and plan limits").act
   await runUsage();
 });
 program2.command("status").description("Quick health and version check").action(async () => {
-  const { runStatus } = await import("./doctor-XG5IQCXK.js");
+  const { runStatus } = await import("./doctor-VRZYKQGL.js");
   await runStatus();
 });
 program2.command("open [target]").description("Open Hive dashboard, docs, status, or GitHub in browser").action(async (target) => {

package/build/{doctor-XG5IQCXK.js → doctor-VRZYKQGL.js}

@@ -204,7 +204,7 @@ ${fails === 0 ? "All checks passed" : `${fails} issues found`}${warns ? ` (${war
   if (fails > 0) process.exit(1);
 }
 async function runStatus() {
-  const { SERVER_VERSION } = await import("./mcpServer-XHIN5JER.js");
+  const { SERVER_VERSION } = await import("./mcpServer-DARSGHUH.js");
   const { resolveApiKey, resolveApiUrl } = await import("./config-dir-5IH7MOOT.js");
   const { getActiveProfile, maskKey } = await import("./auth-Y4GXW376.js");
   const apiUrl = resolveApiUrl();

package/build/{mcpServer-XHIN5JER.js → mcpServer-DARSGHUH.js}

@@ -9,7 +9,7 @@ import {
   getToolsForScope,
   memoizedJsonSchemaToZodInputSchema,
   memoizedJsonSchemaToZodOutputSchema
-} from "./chunk-AGM2CIRL.js";
+} from "./chunk-Y5XA3SFY.js";
 import "./chunk-L326MQZP.js";
 import "./chunk-EPF36Q3Z.js";
 import {

package/build/monitor-worker.js

@@ -2,7 +2,7 @@ import { createRequire } from 'node:module'; const require = createRequire(impor
 import {
   consumeCredits,
   executeToolByName
-} from "./chunk-XQPEFCSY.js";
+} from "./chunk-VZBDTSWA.js";
 import {
   HyperliquidAPI,
   MIN_MONITOR_CADENCE_MS,
@@ -15,7 +15,7 @@ import {
   monitorCadenceIntervalMs,
   runScheduledHealthCanaries,
   secureLogger
-} from "./chunk-AGM2CIRL.js";
+} from "./chunk-Y5XA3SFY.js";
 import "./chunk-L326MQZP.js";
 import "./chunk-EPF36Q3Z.js";
 import "./chunk-ZXKFJQDE.js";

package/build/release.json

@@ -1,8 +1,8 @@
 {
   "package": "hive-intelligence",
-  "version": "1.5.1",
-  "buildSha": "ab8276f834ef8b08bda9d320387e4390e9ab55b6",
-  "imageDigest": "sha256:9ef23428cc9d7da797e21152f4823f021ee8f0d3f3db94cf28410c8e1a72a124",
+  "version": "1.5.3",
+  "buildSha": "0adb32f0c05315fa9381d143b9f2d0e89514ce63",
+  "imageDigest": "sha256:4ab4777877e1be050153bca1c1be9d72b5a7fe7d68e5439d7aabcccaa63c9806",
   "deployedUrl": "https://mcp.hiveintelligence.xyz",
-  "manifest": "https://raw.githubusercontent.com/hive-intel/hive-sdk/v1.5.1/releases/v1.5.1.json"
+  "manifest": "https://raw.githubusercontent.com/hive-intel/hive-sdk/v1.5.3/releases/v1.5.3.json"
 }

package/build/{serve-PWMT5IRU.js → serve-NCMFZSMB.js}

@@ -7,7 +7,7 @@ async function startStdio(envFile) {
   dotenv.config({ path: envFile || ".env", quiet: true });
   console.log = (...args) => console.error("[LOG]", ...args);
   const { StdioServerTransport } = await import("@modelcontextprotocol/sdk/server/stdio.js");
-  const { createHiveMcpServer, SERVER_NAME, SERVER_VERSION } = await import("./mcpServer-XHIN5JER.js");
+  const { createHiveMcpServer, SERVER_NAME, SERVER_VERSION } = await import("./mcpServer-DARSGHUH.js");
   const { getPendingUpdateVersion } = await import("./update-check-IEXPOYYR.js");
   const transport = new StdioServerTransport();
   const pendingUpdate = getPendingUpdateVersion();

package/build/server.js

@@ -6,7 +6,7 @@ import {
   ensureWallet,
   executeToolByName,
   getWalletStatus
-} from "./chunk-XQPEFCSY.js";
+} from "./chunk-VZBDTSWA.js";
 import {
   CategoryEndpoints,
   HERO_TOOL_NAMES,
@@ -95,7 +95,7 @@ import {
   validateEndpointArgs,
   verifyApiKey,
   waitForRedisAvailability
-} from "./chunk-AGM2CIRL.js";
+} from "./chunk-Y5XA3SFY.js";
 import {
   HIVE_AGENT_SKILLS
 } from "./chunk-L326MQZP.js";
@@ -8202,6 +8202,13 @@ app.post(
       authReq.hiveSubjectContext,
       () => executeToolByName(executionToolName, endpointArgs, {
         requestId: req.requestId,
+        // Same identity context the hero branch passes — without it every
+        // non-hero keyed REST call wrote a NULL-principal analytics row.
+        analytics: {
+          principalRaw: authReq.userId,
+          authLane: "api_key",
+          isInternal: isMonitorSecretRequest(req)
+        },
         beforeExecution: keyedBeforeExecution
       })
     );

package/build/stdio.js

@@ -6,7 +6,7 @@ import {
 import {
   createHiveMcpServer,
   secureLogger
-} from "./chunk-AGM2CIRL.js";
+} from "./chunk-Y5XA3SFY.js";
 import "./chunk-L326MQZP.js";
 import "./chunk-EPF36Q3Z.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hive-intelligence",
-  "version": "1.5.1",
+  "version": "1.5.3",
   "description": "Evidence-backed crypto due diligence for AI agents, with sources, freshness, and a runtime receipt on every call.",
   "mcpName": "xyz.hiveintelligence/mcp",
   "type": "module",
@@ -169,10 +169,10 @@
       "express-rate-limit": "8.5.2"
     },
     "esbuild": "0.28.1",
-    "fast-uri": "3.1.5",
+    "fast-uri": "3.1.7",
     "hono": "4.12.34",
     "ip-address": "10.5.0",
-    "qs": "6.15.3"
+    "qs": "6.16.0"
   },
   "devDependencies": {
     "@types/cors": "^2.8.19",