hive-intelligence 1.5.2 → 1.5.3

package/build/{chunk-MWYPLBIN.js → chunk-VZBDTSWA.js}

@@ -7,7 +7,7 @@ import {
   getSupabaseAdmin,
   resolveEndpoint,
   secureLogger
-} from "./chunk-LFNLT3YW.js";
+} from "./chunk-Y5XA3SFY.js";
 
 // src/services/wallet-service.ts
 async function consumeCredits(args) {
@@ -133,6 +133,7 @@ async function executeToolByName(toolName, args, options) {
     transport: "rest",
     requestId: options?.requestId,
     clients: getSharedClients(),
+    analytics: options?.analytics,
     beforeExecution: options?.beforeExecution
   });
   if (result.validationErrors) {

package/build/{chunk-LFNLT3YW.js → chunk-Y5XA3SFY.js}

@@ -62904,11 +62904,30 @@ function getCircuitBreaker(serviceName) {
       state: "CLOSED" /* CLOSED */,
       failures: 0,
       lastFailureTime: 0,
+      lastErrorMessage: null,
       serviceName
     });
   }
   return circuitBreakers.get(serviceName);
 }
+function failureMessage(error) {
+  let message = "";
+  if (error instanceof AxiosError) {
+    const data = error.response?.data;
+    const fromBody = [
+      data?.message,
+      data?.error,
+      data?.status?.error_message
+    ].find((value) => typeof value === "string" && value.trim());
+    message = typeof fromBody === "string" ? fromBody : error.message;
+  } else if (error instanceof Error) {
+    message = error.message;
+  } else if (error) {
+    message = String(error);
+  }
+  const compact = message.replace(/\s+/g, " ").trim();
+  return compact ? compact.slice(0, 240) : null;
+}
 function isRetryableError(error) {
   if (!error.response) {
     const retryableCodes = [
@@ -63004,7 +63023,7 @@ var ResilientHttpClient = class {
           );
         } else {
           throw new Error(
-            `Circuit breaker OPEN for ${this.config.serviceName}. Service has failed ${breaker.failures} consecutive times. Will retry in ${Math.ceil((this.config.circuitBreakerResetTimeout - (now - breaker.lastFailureTime)) / 1e3)}s`
+            `Circuit breaker OPEN for ${this.config.serviceName}. Service has failed ${breaker.failures} consecutive times. Will retry in ${Math.ceil((this.config.circuitBreakerResetTimeout - (now - breaker.lastFailureTime)) / 1e3)}s` + (breaker.lastErrorMessage ? `. Last error: ${breaker.lastErrorMessage}` : "")
           );
         }
         break;
@@ -63034,11 +63053,13 @@ var ResilientHttpClient = class {
   /**
    * Record a failed request (may open circuit breaker)
    */
-  recordFailure() {
+  recordFailure(error) {
     if (!this.config.enableCircuitBreaker) return;
     const breaker = this.circuitBreaker;
     breaker.failures++;
     breaker.lastFailureTime = Date.now();
+    const message = failureMessage(error);
+    if (message) breaker.lastErrorMessage = message;
     if (breaker.state === "HALF_OPEN" /* HALF_OPEN */) {
       breaker.state = "OPEN" /* OPEN */;
       secureLogger.warn(
@@ -63068,7 +63089,7 @@ var ResilientHttpClient = class {
       } catch (error) {
         lastError = error;
         if (error instanceof AxiosError && isRetryableError(error)) {
-          this.recordFailure();
+          this.recordFailure(error);
           if (attempt < maxRetries) {
             const delay2 = calculateBackoffDelay(
               attempt,
@@ -63091,7 +63112,7 @@ var ResilientHttpClient = class {
           if (error instanceof AxiosError) {
             const status = error.response?.status ?? 0;
             if (!status || status >= 500 || status === 429) {
-              this.recordFailure();
+              this.recordFailure(error);
             }
           }
         }
@@ -84857,7 +84878,8 @@ var ERROR_SUGGESTIONS = {
 };
 function createErrorResponse7(code, message, additionalContext) {
   const suggestion = ERROR_SUGGESTIONS[code] || ERROR_SUGGESTIONS.API_ERROR;
-  let errorText = `**Error:** ${message}
+  const bareMessage = message.replace(/^(?:\s*\*\*Error:\*\*\s*)+/, "");
+  let errorText = `**Error:** ${bareMessage}
 
 **Code:** ${code}
 
@@ -86659,6 +86681,14 @@ function isSolanaChain(chain, address) {
   if (chain) return SOLANA_CHAIN_NAMES.has(normalizeChain(chain));
   return !address.trim().toLowerCase().startsWith("0x");
 }
+function looksLikeNameService(address) {
+  return /\.[a-z]{2,}$/i.test(address.trim());
+}
+function nameServiceError(address) {
+  return errorResult3(
+    `"${address}" looks like an ENS or name-service name, which isn't supported yet. Pass a 0x address (EVM) or a base58 address (Solana).`
+  );
+}
 function errorResult3(message) {
   return {
     content: [{ type: "text", text: JSON.stringify({ error: message }) }],
@@ -86749,7 +86779,12 @@ function heroTools(endpoints, options = {}) {
         change_24h_percent: value[`${vsCurrency}_24h_change`] ?? null
       };
     }
-    return { token: query, vs_currency: vsCurrency, ...payload };
+    const tokenExists = Object.keys(payload).some((key) => key !== "_hive");
+    return {
+      token: query,
+      vs_currency: vsCurrency,
+      note: tokenExists ? `No ${vsCurrency} price available for "${query}". The quote currency may be unsupported; try vs_currency "usd".` : `No price found for "${query}". Verify the CoinGecko id or symbol, or pass chain + address for a contract token.`
+    };
   };
   const trimOnchainPrice = (address) => (payload) => {
     const data = payload.data;
@@ -86765,7 +86800,10 @@ function heroTools(endpoints, options = {}) {
         };
       }
     }
-    return { address, ...payload };
+    return {
+      address,
+      note: `No onchain price found for ${address} on this network. Verify the contract address and chain.`
+    };
   };
   const getTokenPrice = {
     metadata: {
@@ -86792,6 +86830,7 @@ function heroTools(endpoints, options = {}) {
       const vsCurrency = (parsed.data.vs_currency ?? "usd").toLowerCase();
       const format = parsed.data.response_format ?? "concise";
       if (address) {
+        if (looksLikeNameService(address)) return nameServiceError(address);
         const network = GECKO_NETWORKS[normalizeChain(chain)] ?? normalizeChain(chain);
         const result3 = await executeUnderlying("get_onchain_token_price", {
           network,
@@ -86891,6 +86930,7 @@ function heroTools(endpoints, options = {}) {
       }
       const { address, chain } = parsed.data;
       const format = parsed.data.response_format ?? "concise";
+      if (looksLikeNameService(address)) return nameServiceError(address);
       if (isSolanaChain(chain, address)) {
         const result3 = await executeUnderlying("get_solana_token_security", {
           contract_address: address
@@ -87039,6 +87079,7 @@ function heroTools(endpoints, options = {}) {
       }
       const { address, chain } = parsed.data;
       const format = parsed.data.response_format ?? "concise";
+      if (looksLikeNameService(address)) return nameServiceError(address);
       if (isSolanaChain(chain, address)) {
         const result3 = await executeUnderlying("helius_get_wallet_balances", {
           wallet: address
@@ -97537,8 +97578,9 @@ var PROVIDER_AVAILABILITY_TTL_MS = 6e4;
 var AVAILABILITY_SEVERITY = {
   ok: 0,
   degraded: 1,
-  missing_key: 2,
-  failing: 3
+  plan_required: 2,
+  missing_key: 3,
+  failing: 4
 };
 function availabilityFromRuntimeStatus(status) {
   switch (status) {
@@ -97549,7 +97591,11 @@ function availabilityFromRuntimeStatus(status) {
       return "ok";
     case "missing_key":
       return "missing_key";
+    // A lapsed or exhausted upstream plan fails deterministically until the
+    // account changes, unlike a transient rate limit or wobble, so it demotes
+    // like a missing key instead of staying ranked as merely degraded.
     case "plan_required":
+      return "plan_required";
     case "rate_limited":
     case "degraded":
       return "degraded";
@@ -97558,7 +97604,7 @@ function availabilityFromRuntimeStatus(status) {
   }
 }
 function isUnavailable(availability) {
-  return availability === "missing_key" || availability === "failing";
+  return availability === "missing_key" || availability === "plan_required" || availability === "failing";
 }
 function worseOf(left, right) {
   return AVAILABILITY_SEVERITY[right] > AVAILABILITY_SEVERITY[left] ? right : left;
@@ -98322,7 +98368,8 @@ function singularizeToken(token) {
   return token;
 }
 function parseSearchTokens(query) {
-  return query.toLowerCase().replace(/0x[a-f0-9]{20,}/g, " ").replace(/[1-9A-HJ-NP-Za-km-z]{32,}/g, " ").replace(/https?:\/\/\S+/g, " ").replace(/[\?¿!¡"'`()\[\]{}:;|/\\]+/g, " ").replace(/[-_]+/g, " ").split(/[\s,]+/).map(normalizeSearchToken).filter((token) => token.length > 1).filter((token) => !SEARCH_STOPWORDS.has(token)).map(singularizeToken);
+  const tokens = query.toLowerCase().replace(/0x[a-f0-9]{20,}/g, " ").replace(/[1-9A-HJ-NP-Za-km-z]{32,}/g, " ").replace(/https?:\/\/\S+/g, " ").replace(/[\?¿!¡"'`()\[\]{}:;|/\\]+/g, " ").replace(/[-_]+/g, " ").split(/[\s,]+/).map(normalizeSearchToken).filter((token) => token.length > 1).filter((token) => !SEARCH_STOPWORDS.has(token)).map(singularizeToken);
+  return [...new Set(tokens)];
 }
 function searchTokenVariants(token) {
   const normalized = singularizeToken(normalizeSearchToken(token));
@@ -98359,9 +98406,12 @@ function queryMatchScore(entry, query) {
     entry.provider,
     entry.summary
   ].join(" ").toLowerCase();
+  const nameTitleTokenSet = new Set(parseSearchTokens(nameTitleText));
+  const coreTextTokenSet = new Set(parseSearchTokens(coreText));
   const score = tokens.reduce((total, token) => {
-    if (exactTextMatchesSearchToken(nameTitleText, token)) return total + 24;
-    if (exactTextMatchesSearchToken(coreText, token)) return total + 14;
+    const exactToken = singularizeToken(normalizeSearchToken(token));
+    if (nameTitleTokenSet.has(exactToken)) return total + 24;
+    if (coreTextTokenSet.has(exactToken)) return total + 14;
     if (textMatchesSearchToken(nameTitleText, token)) return total + 12;
     if (textMatchesSearchToken(entry.summary, token)) return total + 6;
     if (textMatchesSearchToken(coreText, token)) return total + 4;
@@ -98603,13 +98653,13 @@ function dynamicTools(endpoints, options = {}) {
     (toolset) => toolsetCatalogEntry(toolset, providerByToolName)
   );
   const searchToolsSchema = z17.object({
-    query: z17.string().optional().describe(
+    query: z17.string().max(512).optional().describe(
       "Search text matched against tool name, title, category, provider, and summary."
     ),
-    provider: z17.string().optional().describe(
+    provider: z17.string().max(128).optional().describe(
       "Optional provider filter such as CoinGecko, Moralis, Tenderly, Helius, GoPlus, CCXT, Codex, Alchemy, DeFiLlama, Hyperliquid, or Open Data Fetch."
     ),
-    category: z17.string().optional().describe("Optional category filter, for example Portfolio & Wallet."),
+    category: z17.string().max(128).optional().describe("Optional category filter, for example Portfolio & Wallet."),
     limit: z17.number().int().min(1).max(MAX_SEARCH_LIMIT).optional().describe(`Maximum tools to return. Default ${DEFAULT_SEARCH_LIMIT}.`),
     cursor: z17.string().optional().describe("Pagination cursor from the previous response."),
     toolset_id: z17.string().max(100).optional().describe(
@@ -99509,7 +99559,7 @@ function buildServerInstructions(scope) {
     `Hive serves live crypto market data to AI agents over a compact ${ROOT_META_TOOL_COUNT}-tool root. Loop: search_tools -> get_api_endpoint_schema -> ${READ_ENDPOINT_INVOKER} for reads (${STATEFUL_WRITE_ENDPOINT_INVOKER} only after explicit user approval; validate_task_result before structured answers). Every material response carries a _hive receipt (provider, fetched_at, runtime_status, _hive.receipt_id); cite it when answering.`,
     `For the three dominant intents call the hero tools directly: get_token_price, check_token_safety, get_wallet_portfolio (response_format "concise" default, "detailed" available).`,
     `Degraded providers are reported, not hidden: search_tools marks each tool's availability, and unavailable tools return runtime_status with cause and next_action instead of data. Follow next_action; never retry an unchanged failing call in a loop.`,
-    `Discovery is free and cheap: resources hive://toolsets, hive://providers, hive://tools; the ${UNDERLYING_TOOL_COUNT}-tool catalog stays reachable through search_tools or scoped category endpoints. Use limit/page/per_page to keep responses small; a material execution costs 1 credit on the hosted service.`
+    `Discovery is free and cheap: resources hive://toolsets, hive://providers, hive://tools; the ${UNDERLYING_TOOL_COUNT}-tool catalog stays reachable through search_tools or scoped category endpoints. Use limit and cursor on search_tools, and limit/page/per_page/offset on data endpoints, to keep responses small; a material execution costs 1 credit on the hosted service.`
   ].join(" ");
 }
 function compactCanaryRun(run) {
@@ -99853,7 +99903,11 @@ var HiveMCPServer = class {
     }
   }
   getProviderStatusCatalog() {
-    return getProviderStatusCatalog();
+    const snapshot = getProviderAvailabilitySnapshot();
+    return getProviderStatusCatalog().map((provider) => {
+      const observed = snapshot.byProviderName[provider.name];
+      return provider.status === "ok" && observed && observed !== "ok" ? { ...provider, status: observed } : provider;
+    });
   }
   setupHandlers() {
     this.server.server.oninitialized = () => {
@@ -99964,6 +100018,8 @@ var HiveMCPServer = class {
                     note: `Root /mcp exposes ${ROOT_META_TOOL_COUNT} meta-tools optimized for LLM agents. Use category endpoints (/hive_*/mcp) only for specialized integrations requiring direct tool access.`,
                     runtimeStatuses: TASK_TOOLSET_RUNTIME_STATUSES,
                     runtimeStatusSemantics: RUNTIME_STATUS_SEMANTICS,
+                    availability_source: getProviderAvailabilitySnapshot().source,
+                    canary_observed_at: getProviderAvailabilitySnapshot().canaryObservedAt,
                     providers
                   },
                   null,

package/build/cli.js

@@ -3440,7 +3440,7 @@ program2.hook("preAction", (thisCommand) => {
   setCliFlags({ apiKey: opts.apiKey, noRetry: opts.retry === false });
 });
 program2.action(async () => {
-  const { startStdio } = await import("./serve-YFFG2432.js");
+  const { startStdio } = await import("./serve-NCMFZSMB.js");
   await startStdio(program2.opts().envFile);
 });
 program2.command("serve").description("Start the MCP server").option("--http", "Start HTTP server instead of stdio").option("--port <number>", "HTTP server port", "8080").action(async (opts) => {
@@ -3453,10 +3453,10 @@ program2.command("serve").description("Start the MCP server").option("--http", "
       );
       process.exit(ExitCode.INVALID_ARGS);
     }
-    const { startHttp } = await import("./serve-YFFG2432.js");
+    const { startHttp } = await import("./serve-NCMFZSMB.js");
     await startHttp(port, program2.opts().envFile);
   } else {
-    const { startStdio } = await import("./serve-YFFG2432.js");
+    const { startStdio } = await import("./serve-NCMFZSMB.js");
     await startStdio(program2.opts().envFile);
   }
 });
@@ -3666,7 +3666,7 @@ program2.command("uninstall").description(
   if (exitCode !== 0) process.exit(exitCode);
 });
 program2.command("doctor").description("Diagnose environment and server connectivity").option("--probe", "Run live API probes (slower)").action(async (opts) => {
-  const { runDoctor } = await import("./doctor-NLSZB27R.js");
+  const { runDoctor } = await import("./doctor-VRZYKQGL.js");
   await runDoctor(opts);
 });
 program2.command("upgrade").description("Update Hive to the latest published version").action(async () => {
@@ -3714,7 +3714,7 @@ program2.command("usage").description("Show your API usage and plan limits").act
   await runUsage();
 });
 program2.command("status").description("Quick health and version check").action(async () => {
-  const { runStatus } = await import("./doctor-NLSZB27R.js");
+  const { runStatus } = await import("./doctor-VRZYKQGL.js");
   await runStatus();
 });
 program2.command("open [target]").description("Open Hive dashboard, docs, status, or GitHub in browser").action(async (target) => {

package/build/{doctor-NLSZB27R.js → doctor-VRZYKQGL.js}

@@ -204,7 +204,7 @@ ${fails === 0 ? "All checks passed" : `${fails} issues found`}${warns ? ` (${war
   if (fails > 0) process.exit(1);
 }
 async function runStatus() {
-  const { SERVER_VERSION } = await import("./mcpServer-IWKTX2ZQ.js");
+  const { SERVER_VERSION } = await import("./mcpServer-DARSGHUH.js");
   const { resolveApiKey, resolveApiUrl } = await import("./config-dir-5IH7MOOT.js");
   const { getActiveProfile, maskKey } = await import("./auth-Y4GXW376.js");
   const apiUrl = resolveApiUrl();

package/build/{mcpServer-IWKTX2ZQ.js → mcpServer-DARSGHUH.js}

@@ -9,7 +9,7 @@ import {
   getToolsForScope,
   memoizedJsonSchemaToZodInputSchema,
   memoizedJsonSchemaToZodOutputSchema
-} from "./chunk-LFNLT3YW.js";
+} from "./chunk-Y5XA3SFY.js";
 import "./chunk-L326MQZP.js";
 import "./chunk-EPF36Q3Z.js";
 import {

package/build/monitor-worker.js

@@ -2,7 +2,7 @@ import { createRequire } from 'node:module'; const require = createRequire(impor
 import {
   consumeCredits,
   executeToolByName
-} from "./chunk-MWYPLBIN.js";
+} from "./chunk-VZBDTSWA.js";
 import {
   HyperliquidAPI,
   MIN_MONITOR_CADENCE_MS,
@@ -15,7 +15,7 @@ import {
   monitorCadenceIntervalMs,
   runScheduledHealthCanaries,
   secureLogger
-} from "./chunk-LFNLT3YW.js";
+} from "./chunk-Y5XA3SFY.js";
 import "./chunk-L326MQZP.js";
 import "./chunk-EPF36Q3Z.js";
 import "./chunk-ZXKFJQDE.js";

package/build/release.json

@@ -1,8 +1,8 @@
 {
   "package": "hive-intelligence",
-  "version": "1.5.2",
-  "buildSha": "d978faa93aff11daff471ee34773a8354535bb32",
-  "imageDigest": "sha256:89a2aef7b9ac0a804f08f46c264c4487d2c3a02c9cce27613afb478a24fc81a1",
+  "version": "1.5.3",
+  "buildSha": "0adb32f0c05315fa9381d143b9f2d0e89514ce63",
+  "imageDigest": "sha256:4ab4777877e1be050153bca1c1be9d72b5a7fe7d68e5439d7aabcccaa63c9806",
   "deployedUrl": "https://mcp.hiveintelligence.xyz",
-  "manifest": "https://raw.githubusercontent.com/hive-intel/hive-sdk/v1.5.2/releases/v1.5.2.json"
+  "manifest": "https://raw.githubusercontent.com/hive-intel/hive-sdk/v1.5.3/releases/v1.5.3.json"
 }

package/build/{serve-YFFG2432.js → serve-NCMFZSMB.js}

@@ -7,7 +7,7 @@ async function startStdio(envFile) {
   dotenv.config({ path: envFile || ".env", quiet: true });
   console.log = (...args) => console.error("[LOG]", ...args);
   const { StdioServerTransport } = await import("@modelcontextprotocol/sdk/server/stdio.js");
-  const { createHiveMcpServer, SERVER_NAME, SERVER_VERSION } = await import("./mcpServer-IWKTX2ZQ.js");
+  const { createHiveMcpServer, SERVER_NAME, SERVER_VERSION } = await import("./mcpServer-DARSGHUH.js");
   const { getPendingUpdateVersion } = await import("./update-check-IEXPOYYR.js");
   const transport = new StdioServerTransport();
   const pendingUpdate = getPendingUpdateVersion();

package/build/server.js

@@ -6,7 +6,7 @@ import {
   ensureWallet,
   executeToolByName,
   getWalletStatus
-} from "./chunk-MWYPLBIN.js";
+} from "./chunk-VZBDTSWA.js";
 import {
   CategoryEndpoints,
   HERO_TOOL_NAMES,
@@ -95,7 +95,7 @@ import {
   validateEndpointArgs,
   verifyApiKey,
   waitForRedisAvailability
-} from "./chunk-LFNLT3YW.js";
+} from "./chunk-Y5XA3SFY.js";
 import {
   HIVE_AGENT_SKILLS
 } from "./chunk-L326MQZP.js";
@@ -8202,6 +8202,13 @@ app.post(
       authReq.hiveSubjectContext,
       () => executeToolByName(executionToolName, endpointArgs, {
         requestId: req.requestId,
+        // Same identity context the hero branch passes — without it every
+        // non-hero keyed REST call wrote a NULL-principal analytics row.
+        analytics: {
+          principalRaw: authReq.userId,
+          authLane: "api_key",
+          isInternal: isMonitorSecretRequest(req)
+        },
         beforeExecution: keyedBeforeExecution
       })
     );

package/build/stdio.js

@@ -6,7 +6,7 @@ import {
 import {
   createHiveMcpServer,
   secureLogger
-} from "./chunk-LFNLT3YW.js";
+} from "./chunk-Y5XA3SFY.js";
 import "./chunk-L326MQZP.js";
 import "./chunk-EPF36Q3Z.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hive-intelligence",
-  "version": "1.5.2",
+  "version": "1.5.3",
   "description": "Evidence-backed crypto due diligence for AI agents, with sources, freshness, and a runtime receipt on every call.",
   "mcpName": "xyz.hiveintelligence/mcp",
   "type": "module",
@@ -169,10 +169,10 @@
       "express-rate-limit": "8.5.2"
     },
     "esbuild": "0.28.1",
-    "fast-uri": "3.1.5",
+    "fast-uri": "3.1.7",
     "hono": "4.12.34",
     "ip-address": "10.5.0",
-    "qs": "6.15.3"
+    "qs": "6.16.0"
   },
   "devDependencies": {
     "@types/cors": "^2.8.19",