chain-insights 0.2.16

package/dist/app-BjjuQM0B.mjs

@@ -0,0 +1,155 @@
+import path from "node:path";
+import { lstat, readFile, readdir, realpath } from "node:fs/promises";
+import os from "node:os";
+import { Hono } from "hono";
+//#region src/server/app.ts
+const WORKSPACE_TREE_ROOTS = [
+	"cases",
+	"reports",
+	".chain-insights/schema"
+];
+const WORKSPACE_TREE_MAX_DEPTH = 4;
+function withinRoot(root, target) {
+	const relative = path.relative(path.resolve(root), path.resolve(target));
+	return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
+}
+async function realPathWithinRoot(root, target) {
+	try {
+		const [realRoot, realTarget] = await Promise.all([realpath(root), realpath(target)]);
+		return withinRoot(realRoot, realTarget);
+	} catch {
+		return false;
+	}
+}
+function toWorkspaceRelative(root, target) {
+	return path.relative(root, target).split(path.sep).join("/");
+}
+async function listWorkspaceEntries(workspaceRoot, roots = WORKSPACE_TREE_ROOTS, maxDepth = WORKSPACE_TREE_MAX_DEPTH) {
+	const entries = [];
+	const root = path.resolve(workspaceRoot);
+	async function visit(target, depth) {
+		const resolved = path.resolve(target);
+		if (!withinRoot(root, resolved)) return;
+		let info;
+		try {
+			info = await lstat(resolved);
+		} catch {
+			return;
+		}
+		const type = info.isSymbolicLink() ? "symlink" : info.isDirectory() ? "directory" : info.isFile() ? "file" : null;
+		if (!type) return;
+		const entry = {
+			path: toWorkspaceRelative(root, resolved),
+			type
+		};
+		if (type === "file") entry.size = info.size;
+		entries.push(entry);
+		if (type !== "directory" || depth >= maxDepth) return;
+		if (!await realPathWithinRoot(root, resolved)) return;
+		let children;
+		try {
+			children = await readdir(resolved);
+		} catch {
+			return;
+		}
+		for (const child of children.sort()) await visit(path.join(resolved, child), depth + 1);
+	}
+	for (const rootName of roots) {
+		const target = path.resolve(root, rootName);
+		if (withinRoot(root, target)) await visit(target, 0);
+	}
+	return entries;
+}
+async function findVizHtml(vizId) {
+	const home = os.homedir();
+	const filename = `${vizId}.html`;
+	const centralPath = path.join(home, ".chain-insights", "viz", filename);
+	try {
+		return await readFile(centralPath, "utf-8");
+	} catch {}
+	const underscoreIdx = vizId.lastIndexOf("_");
+	if (underscoreIdx > 0) {
+		const possibleCaseId = vizId.substring(0, underscoreIdx);
+		const casePath = path.join(home, ".chain-insights", "cases", possibleCaseId, "viz", filename);
+		try {
+			return await readFile(casePath, "utf-8");
+		} catch {}
+	}
+	const casesDir = path.join(home, ".chain-insights", "cases");
+	try {
+		const cases = await readdir(casesDir);
+		for (const caseId of cases) {
+			const casePath = path.join(casesDir, caseId, "viz", filename);
+			try {
+				return await readFile(casePath, "utf-8");
+			} catch {}
+		}
+	} catch {}
+	return null;
+}
+function isSafeGraphReportFilename(filename) {
+	return filename.endsWith(".graph.json") && /^[A-Za-z0-9._-]+$/.test(filename) && !filename.includes("..") && !filename.includes("/") && !filename.includes("\\");
+}
+function createApp() {
+	const app = new Hono();
+	app.get("/health", (c) => c.json({
+		ok: true,
+		ts: Date.now()
+	}));
+	app.get("/status", async (c) => {
+		const { loadConfig } = await import("./config-BwrBYmiC.mjs").then((n) => n.t);
+		const config = await loadConfig();
+		return c.json({
+			dataDir: config.dataDir,
+			graphMcpMode: config.graphMcpMode,
+			server: "running"
+		});
+	});
+	app.get("/viz/:id", async (c) => {
+		const id = c.req.param("id");
+		if (!/^[a-zA-Z0-9_-]+$/.test(id)) return c.json({ error: "Invalid visualization ID" }, 400);
+		const html = await findVizHtml(id);
+		if (!html) return c.json({ error: "Visualization not found" }, 404);
+		return c.html(html);
+	});
+	app.get("/graph-reports/:filename", async (c) => {
+		const filename = c.req.param("filename");
+		if (!isSafeGraphReportFilename(filename)) return c.json({ error: "Invalid graph report filename" }, 400);
+		const { workspaceOutputPaths } = await import("./output-root-CmWM7aV2.mjs").then((n) => n.t);
+		const paths = workspaceOutputPaths();
+		const graphPath = path.resolve(paths.reportGraphsRoot, filename);
+		if (!withinRoot(paths.reportGraphsRoot, graphPath)) return c.json({ error: "Invalid graph report filename" }, 400);
+		if (!await realPathWithinRoot(paths.reportGraphsRoot, graphPath)) return c.json({ error: "Graph report not found" }, 404);
+		try {
+			const graph = await readFile(graphPath, "utf-8");
+			return c.body(graph, 200, {
+				"Content-Type": "application/json",
+				"Access-Control-Allow-Origin": "*"
+			});
+		} catch {
+			return c.json({ error: "Graph report not found" }, 404);
+		}
+	});
+	app.get("/graph-reports/*", (c) => {
+		return c.json({ error: "Invalid graph report filename" }, 400);
+	});
+	app.get("/workspace/tree", async (c) => {
+		const { workspaceOutputPaths } = await import("./output-root-CmWM7aV2.mjs").then((n) => n.t);
+		const paths = workspaceOutputPaths();
+		const entries = await listWorkspaceEntries(paths.root, WORKSPACE_TREE_ROOTS);
+		return c.json({
+			schema: "chain-insights.workspace-tree.v1",
+			root: paths.root,
+			entries
+		});
+	});
+	app.onError((err, c) => {
+		console.error(err);
+		return c.json({ error: "Internal server error" }, 500);
+	});
+	return app;
+}
+//#endregion
+export { createApp as t };
+
+//# sourceMappingURL=app-BjjuQM0B.mjs.map

package/dist/app-BjjuQM0B.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-BjjuQM0B.mjs","names":[],"sources":["../src/server/app.ts"],"sourcesContent":["import { Hono } from 'hono'\nimport { lstat, readFile, readdir, realpath } from 'node:fs/promises'\nimport path from 'node:path'\nimport os from 'node:os'\n\nconst WORKSPACE_TREE_ROOTS = ['cases', 'reports', '.chain-insights/schema']\nconst WORKSPACE_TREE_MAX_DEPTH = 4\n\ninterface WorkspaceTreeEntry {\n  path: string\n  type: 'file' | 'directory' | 'symlink'\n  size?: number\n}\n\nfunction withinRoot(root: string, target: string): boolean {\n  const relative = path.relative(path.resolve(root), path.resolve(target))\n  return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative))\n}\n\nasync function realPathWithinRoot(root: string, target: string): Promise<boolean> {\n  try {\n    const [realRoot, realTarget] = await Promise.all([realpath(root), realpath(target)])\n    return withinRoot(realRoot, realTarget)\n  } catch {\n    return false\n  }\n}\n\nfunction toWorkspaceRelative(root: string, target: string): string {\n  return path.relative(root, target).split(path.sep).join('/')\n}\n\nasync function listWorkspaceEntries(\n  workspaceRoot: string,\n  roots = WORKSPACE_TREE_ROOTS,\n  maxDepth = WORKSPACE_TREE_MAX_DEPTH\n): Promise<WorkspaceTreeEntry[]> {\n  const entries: WorkspaceTreeEntry[] = []\n  const root = path.resolve(workspaceRoot)\n\n  async function visit(target: string, depth: number): Promise<void> {\n    const resolved = path.resolve(target)\n    if (!withinRoot(root, resolved)) return\n\n    let info: Awaited<ReturnType<typeof lstat>>\n    try {\n      info = await lstat(resolved)\n    } catch {\n      return\n    }\n\n    const type = info.isSymbolicLink() ? 'symlink' : info.isDirectory() ? 'directory' : info.isFile() ? 'file' : null\n    if (!type) return\n\n    const entry: WorkspaceTreeEntry = {\n      path: toWorkspaceRelative(root, resolved),\n      type,\n    }\n    if (type === 'file') entry.size = info.size\n    entries.push(entry)\n\n    if (type !== 'directory' || depth >= maxDepth) return\n    if (!await realPathWithinRoot(root, resolved)) return\n\n    let children: string[]\n    try {\n      children = await readdir(resolved)\n    } catch {\n      return\n    }\n\n    for (const child of children.sort()) {\n      await visit(path.join(resolved, child), depth + 1)\n    }\n  }\n\n  for (const rootName of roots) {\n    const target = path.resolve(root, rootName)\n    if (withinRoot(root, target)) await visit(target, 0)\n  }\n\n  return entries\n}\n\nasync function findVizHtml(vizId: string): Promise<string | null> {\n  const home = os.homedir()\n  const filename = `${vizId}.html`\n\n  // 1. Check central standalone directory first (fast, single path)\n  const centralPath = path.join(home, '.chain-insights', 'viz', filename)\n  try {\n    return await readFile(centralPath, 'utf-8')\n  } catch { /* not found here, continue */ }\n\n  // 2. Check per-case directory using vizId prefix (case-based vizs use <caseId>_<timestamp>)\n  //    The vizId for case-based vizs is formatted as <case-id>_<timestamp>,\n  //    so extract the case-id prefix to check its directory first.\n  const underscoreIdx = vizId.lastIndexOf('_')\n  if (underscoreIdx > 0) {\n    const possibleCaseId = vizId.substring(0, underscoreIdx)\n    const casePath = path.join(home, '.chain-insights', 'cases', possibleCaseId, 'viz', filename)\n    try {\n      return await readFile(casePath, 'utf-8')\n    } catch { /* not found here, continue */ }\n  }\n\n  // 3. Fallback: scan all case directories (CONTEXT.md: ~/.chain-insights/cases/<case-id>/viz/)\n  const casesDir = path.join(home, '.chain-insights', 'cases')\n  try {\n    const cases = await readdir(casesDir)\n    for (const caseId of cases) {\n      const casePath = path.join(casesDir, caseId, 'viz', filename)\n      try {\n        return await readFile(casePath, 'utf-8')\n      } catch { /* not in this case dir */ }\n    }\n  } catch { /* cases dir doesn't exist */ }\n\n  return null\n}\n\nfunction isSafeGraphReportFilename(filename: string): boolean {\n  return (\n    filename.endsWith('.graph.json') &&\n    /^[A-Za-z0-9._-]+$/.test(filename) &&\n    !filename.includes('..') &&\n    !filename.includes('/') &&\n    !filename.includes('\\\\')\n  )\n}\n\nexport function createApp(): Hono {\n  const app = new Hono()\n\n  app.get('/health', (c) => c.json({ ok: true, ts: Date.now() }))\n\n  app.get('/status', async (c) => {\n    const { loadConfig } = await import('../config/index.js')\n    const config = await loadConfig()\n    return c.json({\n      dataDir: config.dataDir,\n      graphMcpMode: config.graphMcpMode,\n      server: 'running',\n    })\n  })\n\n  app.get('/viz/:id', async (c) => {\n    const id = c.req.param('id')\n    if (!/^[a-zA-Z0-9_-]+$/.test(id)) {\n      return c.json({ error: 'Invalid visualization ID' }, 400)\n    }\n    const html = await findVizHtml(id)\n    if (!html) {\n      return c.json({ error: 'Visualization not found' }, 404)\n    }\n    return c.html(html)\n  })\n\n  app.get('/graph-reports/:filename', async (c) => {\n    const filename = c.req.param('filename')\n    if (!isSafeGraphReportFilename(filename)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const graphPath = path.resolve(paths.reportGraphsRoot, filename)\n    if (!withinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n    if (!await realPathWithinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n\n    try {\n      const graph = await readFile(graphPath, 'utf-8')\n      return c.body(graph, 200, {\n        'Content-Type': 'application/json',\n        'Access-Control-Allow-Origin': '*',\n      })\n    } catch {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n  })\n\n  app.get('/graph-reports/*', (c) => {\n    return c.json({ error: 'Invalid graph report filename' }, 400)\n  })\n\n  app.get('/workspace/tree', async (c) => {\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const entries = await listWorkspaceEntries(paths.root, WORKSPACE_TREE_ROOTS)\n    return c.json({\n      schema: 'chain-insights.workspace-tree.v1',\n      root: paths.root,\n      entries,\n    })\n  })\n\n  app.onError((err, c) => {\n    console.error(err)\n    return c.json({ error: 'Internal server error' }, 500)\n  })\n\n  return app\n}\n"],"mappings":";;;;;AAKA,MAAM,uBAAuB;CAAC;CAAS;CAAW;CAAyB;AAC3E,MAAM,2BAA2B;AAQjC,SAAS,WAAW,MAAc,QAAyB;CACzD,MAAM,WAAW,KAAK,SAAS,KAAK,QAAQ,KAAK,EAAE,KAAK,QAAQ,OAAO,CAAC;AACxE,QAAO,aAAa,MAAO,CAAC,SAAS,WAAW,KAAK,IAAI,CAAC,KAAK,WAAW,SAAS;;AAGrF,eAAe,mBAAmB,MAAc,QAAkC;AAChF,KAAI;EACF,MAAM,CAAC,UAAU,cAAc,MAAM,QAAQ,IAAI,CAAC,SAAS,KAAK,EAAE,SAAS,OAAO,CAAC,CAAC;AACpF,SAAO,WAAW,UAAU,WAAW;SACjC;AACN,SAAO;;;AAIX,SAAS,oBAAoB,MAAc,QAAwB;AACjE,QAAO,KAAK,SAAS,MAAM,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,IAAI;;AAG9D,eAAe,qBACb,eACA,QAAQ,sBACR,WAAW,0BACoB;CAC/B,MAAM,UAAgC,EAAE;CACxC,MAAM,OAAO,KAAK,QAAQ,cAAc;CAExC,eAAe,MAAM,QAAgB,OAA8B;EACjE,MAAM,WAAW,KAAK,QAAQ,OAAO;AACrC,MAAI,CAAC,WAAW,MAAM,SAAS,CAAE;EAEjC,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,MAAM,SAAS;UACtB;AACN;;EAGF,MAAM,OAAO,KAAK,gBAAgB,GAAG,YAAY,KAAK,aAAa,GAAG,cAAc,KAAK,QAAQ,GAAG,SAAS;AAC7G,MAAI,CAAC,KAAM;EAEX,MAAM,QAA4B;GAChC,MAAM,oBAAoB,MAAM,SAAS;GACzC;GACD;AACD,MAAI,SAAS,OAAQ,OAAM,OAAO,KAAK;AACvC,UAAQ,KAAK,MAAM;AAEnB,MAAI,SAAS,eAAe,SAAS,SAAU;AAC/C,MAAI,CAAC,MAAM,mBAAmB,MAAM,SAAS,CAAE;EAE/C,IAAI;AACJ,MAAI;AACF,cAAW,MAAM,QAAQ,SAAS;UAC5B;AACN;;AAGF,OAAK,MAAM,SAAS,SAAS,MAAM,CACjC,OAAM,MAAM,KAAK,KAAK,UAAU,MAAM,EAAE,QAAQ,EAAE;;AAItD,MAAK,MAAM,YAAY,OAAO;EAC5B,MAAM,SAAS,KAAK,QAAQ,MAAM,SAAS;AAC3C,MAAI,WAAW,MAAM,OAAO,CAAE,OAAM,MAAM,QAAQ,EAAE;;AAGtD,QAAO;;AAGT,eAAe,YAAY,OAAuC;CAChE,MAAM,OAAO,GAAG,SAAS;CACzB,MAAM,WAAW,GAAG,MAAM;CAG1B,MAAM,cAAc,KAAK,KAAK,MAAM,mBAAmB,OAAO,SAAS;AACvE,KAAI;AACF,SAAO,MAAM,SAAS,aAAa,QAAQ;SACrC;CAKR,MAAM,gBAAgB,MAAM,YAAY,IAAI;AAC5C,KAAI,gBAAgB,GAAG;EACrB,MAAM,iBAAiB,MAAM,UAAU,GAAG,cAAc;EACxD,MAAM,WAAW,KAAK,KAAK,MAAM,mBAAmB,SAAS,gBAAgB,OAAO,SAAS;AAC7F,MAAI;AACF,UAAO,MAAM,SAAS,UAAU,QAAQ;UAClC;;CAIV,MAAM,WAAW,KAAK,KAAK,MAAM,mBAAmB,QAAQ;AAC5D,KAAI;EACF,MAAM,QAAQ,MAAM,QAAQ,SAAS;AACrC,OAAK,MAAM,UAAU,OAAO;GAC1B,MAAM,WAAW,KAAK,KAAK,UAAU,QAAQ,OAAO,SAAS;AAC7D,OAAI;AACF,WAAO,MAAM,SAAS,UAAU,QAAQ;WAClC;;SAEJ;AAER,QAAO;;AAGT,SAAS,0BAA0B,UAA2B;AAC5D,QACE,SAAS,SAAS,cAAc,IAChC,oBAAoB,KAAK,SAAS,IAClC,CAAC,SAAS,SAAS,KAAK,IACxB,CAAC,SAAS,SAAS,IAAI,IACvB,CAAC,SAAS,SAAS,KAAK;;AAI5B,SAAgB,YAAkB;CAChC,MAAM,MAAM,IAAI,MAAM;AAEtB,KAAI,IAAI,YAAY,MAAM,EAAE,KAAK;EAAE,IAAI;EAAM,IAAI,KAAK,KAAK;EAAE,CAAC,CAAC;AAE/D,KAAI,IAAI,WAAW,OAAO,MAAM;EAC9B,MAAM,EAAE,eAAe,MAAM,OAAO,yBAAA,MAAA,MAAA,EAAA,EAAA;EACpC,MAAM,SAAS,MAAM,YAAY;AACjC,SAAO,EAAE,KAAK;GACZ,SAAS,OAAO;GAChB,cAAc,OAAO;GACrB,QAAQ;GACT,CAAC;GACF;AAEF,KAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAC5B,MAAI,CAAC,mBAAmB,KAAK,GAAG,CAC9B,QAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,EAAE,IAAI;EAE3D,MAAM,OAAO,MAAM,YAAY,GAAG;AAClC,MAAI,CAAC,KACH,QAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,EAAE,IAAI;AAE1D,SAAO,EAAE,KAAK,KAAK;GACnB;AAEF,KAAI,IAAI,4BAA4B,OAAO,MAAM;EAC/C,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW;AACxC,MAAI,CAAC,0BAA0B,SAAS,CACtC,QAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,EAAE,IAAI;EAGhE,MAAM,EAAE,yBAAyB,MAAM,OAAO,8BAAA,MAAA,MAAA,EAAA,EAAA;EAC9C,MAAM,QAAQ,sBAAsB;EACpC,MAAM,YAAY,KAAK,QAAQ,MAAM,kBAAkB,SAAS;AAChE,MAAI,CAAC,WAAW,MAAM,kBAAkB,UAAU,CAChD,QAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,EAAE,IAAI;AAEhE,MAAI,CAAC,MAAM,mBAAmB,MAAM,kBAAkB,UAAU,CAC9D,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;AAGzD,MAAI;GACF,MAAM,QAAQ,MAAM,SAAS,WAAW,QAAQ;AAChD,UAAO,EAAE,KAAK,OAAO,KAAK;IACxB,gBAAgB;IAChB,+BAA+B;IAChC,CAAC;UACI;AACN,UAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;;GAEzD;AAEF,KAAI,IAAI,qBAAqB,MAAM;AACjC,SAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,EAAE,IAAI;GAC9D;AAEF,KAAI,IAAI,mBAAmB,OAAO,MAAM;EACtC,MAAM,EAAE,yBAAyB,MAAM,OAAO,8BAAA,MAAA,MAAA,EAAA,EAAA;EAC9C,MAAM,QAAQ,sBAAsB;EACpC,MAAM,UAAU,MAAM,qBAAqB,MAAM,MAAM,qBAAqB;AAC5E,SAAO,EAAE,KAAK;GACZ,QAAQ;GACR,MAAM,MAAM;GACZ;GACD,CAAC;GACF;AAEF,KAAI,SAAS,KAAK,MAAM;AACtB,UAAQ,MAAM,IAAI;AAClB,SAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,EAAE,IAAI;GACtD;AAEF,QAAO"}

package/dist/app-Dq1TdB6p.cjs

@@ -0,0 +1,161 @@
+const require_chunk = require("./chunk-CZWwpsFl.cjs");
+let node_path = require("node:path");
+node_path = require_chunk.__toESM(node_path, 1);
+let node_fs_promises = require("node:fs/promises");
+let node_os = require("node:os");
+node_os = require_chunk.__toESM(node_os, 1);
+let hono = require("hono");
+//#region src/server/app.ts
+const WORKSPACE_TREE_ROOTS = [
+	"cases",
+	"reports",
+	".chain-insights/schema"
+];
+const WORKSPACE_TREE_MAX_DEPTH = 4;
+function withinRoot(root, target) {
+	const relative = node_path.default.relative(node_path.default.resolve(root), node_path.default.resolve(target));
+	return relative === "" || !relative.startsWith("..") && !node_path.default.isAbsolute(relative);
+}
+async function realPathWithinRoot(root, target) {
+	try {
+		const [realRoot, realTarget] = await Promise.all([(0, node_fs_promises.realpath)(root), (0, node_fs_promises.realpath)(target)]);
+		return withinRoot(realRoot, realTarget);
+	} catch {
+		return false;
+	}
+}
+function toWorkspaceRelative(root, target) {
+	return node_path.default.relative(root, target).split(node_path.default.sep).join("/");
+}
+async function listWorkspaceEntries(workspaceRoot, roots = WORKSPACE_TREE_ROOTS, maxDepth = WORKSPACE_TREE_MAX_DEPTH) {
+	const entries = [];
+	const root = node_path.default.resolve(workspaceRoot);
+	async function visit(target, depth) {
+		const resolved = node_path.default.resolve(target);
+		if (!withinRoot(root, resolved)) return;
+		let info;
+		try {
+			info = await (0, node_fs_promises.lstat)(resolved);
+		} catch {
+			return;
+		}
+		const type = info.isSymbolicLink() ? "symlink" : info.isDirectory() ? "directory" : info.isFile() ? "file" : null;
+		if (!type) return;
+		const entry = {
+			path: toWorkspaceRelative(root, resolved),
+			type
+		};
+		if (type === "file") entry.size = info.size;
+		entries.push(entry);
+		if (type !== "directory" || depth >= maxDepth) return;
+		if (!await realPathWithinRoot(root, resolved)) return;
+		let children;
+		try {
+			children = await (0, node_fs_promises.readdir)(resolved);
+		} catch {
+			return;
+		}
+		for (const child of children.sort()) await visit(node_path.default.join(resolved, child), depth + 1);
+	}
+	for (const rootName of roots) {
+		const target = node_path.default.resolve(root, rootName);
+		if (withinRoot(root, target)) await visit(target, 0);
+	}
+	return entries;
+}
+async function findVizHtml(vizId) {
+	const home = node_os.default.homedir();
+	const filename = `${vizId}.html`;
+	const centralPath = node_path.default.join(home, ".chain-insights", "viz", filename);
+	try {
+		return await (0, node_fs_promises.readFile)(centralPath, "utf-8");
+	} catch {}
+	const underscoreIdx = vizId.lastIndexOf("_");
+	if (underscoreIdx > 0) {
+		const possibleCaseId = vizId.substring(0, underscoreIdx);
+		const casePath = node_path.default.join(home, ".chain-insights", "cases", possibleCaseId, "viz", filename);
+		try {
+			return await (0, node_fs_promises.readFile)(casePath, "utf-8");
+		} catch {}
+	}
+	const casesDir = node_path.default.join(home, ".chain-insights", "cases");
+	try {
+		const cases = await (0, node_fs_promises.readdir)(casesDir);
+		for (const caseId of cases) {
+			const casePath = node_path.default.join(casesDir, caseId, "viz", filename);
+			try {
+				return await (0, node_fs_promises.readFile)(casePath, "utf-8");
+			} catch {}
+		}
+	} catch {}
+	return null;
+}
+function isSafeGraphReportFilename(filename) {
+	return filename.endsWith(".graph.json") && /^[A-Za-z0-9._-]+$/.test(filename) && !filename.includes("..") && !filename.includes("/") && !filename.includes("\\");
+}
+function createApp() {
+	const app = new hono.Hono();
+	app.get("/health", (c) => c.json({
+		ok: true,
+		ts: Date.now()
+	}));
+	app.get("/status", async (c) => {
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-Bmdl5hdk.cjs")).then((n) => n.config_exports);
+		const config = await loadConfig();
+		return c.json({
+			dataDir: config.dataDir,
+			graphMcpMode: config.graphMcpMode,
+			server: "running"
+		});
+	});
+	app.get("/viz/:id", async (c) => {
+		const id = c.req.param("id");
+		if (!/^[a-zA-Z0-9_-]+$/.test(id)) return c.json({ error: "Invalid visualization ID" }, 400);
+		const html = await findVizHtml(id);
+		if (!html) return c.json({ error: "Visualization not found" }, 404);
+		return c.html(html);
+	});
+	app.get("/graph-reports/:filename", async (c) => {
+		const filename = c.req.param("filename");
+		if (!isSafeGraphReportFilename(filename)) return c.json({ error: "Invalid graph report filename" }, 400);
+		const { workspaceOutputPaths } = await Promise.resolve().then(() => require("./output-root-CFYms3ad.cjs")).then((n) => n.output_root_exports);
+		const paths = workspaceOutputPaths();
+		const graphPath = node_path.default.resolve(paths.reportGraphsRoot, filename);
+		if (!withinRoot(paths.reportGraphsRoot, graphPath)) return c.json({ error: "Invalid graph report filename" }, 400);
+		if (!await realPathWithinRoot(paths.reportGraphsRoot, graphPath)) return c.json({ error: "Graph report not found" }, 404);
+		try {
+			const graph = await (0, node_fs_promises.readFile)(graphPath, "utf-8");
+			return c.body(graph, 200, {
+				"Content-Type": "application/json",
+				"Access-Control-Allow-Origin": "*"
+			});
+		} catch {
+			return c.json({ error: "Graph report not found" }, 404);
+		}
+	});
+	app.get("/graph-reports/*", (c) => {
+		return c.json({ error: "Invalid graph report filename" }, 400);
+	});
+	app.get("/workspace/tree", async (c) => {
+		const { workspaceOutputPaths } = await Promise.resolve().then(() => require("./output-root-CFYms3ad.cjs")).then((n) => n.output_root_exports);
+		const paths = workspaceOutputPaths();
+		const entries = await listWorkspaceEntries(paths.root, WORKSPACE_TREE_ROOTS);
+		return c.json({
+			schema: "chain-insights.workspace-tree.v1",
+			root: paths.root,
+			entries
+		});
+	});
+	app.onError((err, c) => {
+		console.error(err);
+		return c.json({ error: "Internal server error" }, 500);
+	});
+	return app;
+}
+//#endregion
+Object.defineProperty(exports, "createApp", {
+	enumerable: true,
+	get: function() {
+		return createApp;
+	}
+});

package/dist/artifact-server-DoxJ7fCx.cjs

@@ -0,0 +1,47 @@
+require("./chunk-CZWwpsFl.cjs");
+const require_app = require("./app-Dq1TdB6p.cjs");
+let _hono_node_server = require("@hono/node-server");
+let node_timers_promises = require("node:timers/promises");
+//#region src/mcp/artifact-server.ts
+const servers = /* @__PURE__ */ new Map();
+async function isHealthy(port) {
+	const controller = new AbortController();
+	const timeout = setTimeout(() => controller.abort(), 500);
+	try {
+		return (await fetch(`http://127.0.0.1:${port}/health`, { signal: controller.signal })).ok;
+	} catch {
+		return false;
+	} finally {
+		clearTimeout(timeout);
+	}
+}
+async function waitUntilHealthy(port) {
+	for (let attempt = 0; attempt < 20; attempt += 1) {
+		if (await isHealthy(port)) return;
+		await (0, node_timers_promises.setTimeout)(50);
+	}
+	throw new Error(`Graph report server did not become healthy on 127.0.0.1:${port}`);
+}
+async function ensureArtifactServer(port) {
+	if (servers.has(port)) return;
+	if (await isHealthy(port)) return;
+	const server = (0, _hono_node_server.serve)({
+		fetch: require_app.createApp().fetch,
+		hostname: "127.0.0.1",
+		port
+	});
+	servers.set(port, server);
+	server.on("error", (err) => {
+		servers.delete(port);
+		process.stderr.write(`Chain Insights graph report server failed on 127.0.0.1:${port}: ${err.message}\n`);
+	});
+	try {
+		await waitUntilHealthy(port);
+	} catch (err) {
+		servers.delete(port);
+		server.close();
+		throw err;
+	}
+}
+//#endregion
+exports.ensureArtifactServer = ensureArtifactServer;

package/dist/artifact-server-Dxz5YbuQ.mjs

@@ -0,0 +1,48 @@
+import { t as createApp } from "./app-BjjuQM0B.mjs";
+import { serve } from "@hono/node-server";
+import { setTimeout as setTimeout$1 } from "node:timers/promises";
+//#region src/mcp/artifact-server.ts
+const servers = /* @__PURE__ */ new Map();
+async function isHealthy(port) {
+	const controller = new AbortController();
+	const timeout = setTimeout(() => controller.abort(), 500);
+	try {
+		return (await fetch(`http://127.0.0.1:${port}/health`, { signal: controller.signal })).ok;
+	} catch {
+		return false;
+	} finally {
+		clearTimeout(timeout);
+	}
+}
+async function waitUntilHealthy(port) {
+	for (let attempt = 0; attempt < 20; attempt += 1) {
+		if (await isHealthy(port)) return;
+		await setTimeout$1(50);
+	}
+	throw new Error(`Graph report server did not become healthy on 127.0.0.1:${port}`);
+}
+async function ensureArtifactServer(port) {
+	if (servers.has(port)) return;
+	if (await isHealthy(port)) return;
+	const server = serve({
+		fetch: createApp().fetch,
+		hostname: "127.0.0.1",
+		port
+	});
+	servers.set(port, server);
+	server.on("error", (err) => {
+		servers.delete(port);
+		process.stderr.write(`Chain Insights graph report server failed on 127.0.0.1:${port}: ${err.message}\n`);
+	});
+	try {
+		await waitUntilHealthy(port);
+	} catch (err) {
+		servers.delete(port);
+		server.close();
+		throw err;
+	}
+}
+//#endregion
+export { ensureArtifactServer };
+
+//# sourceMappingURL=artifact-server-Dxz5YbuQ.mjs.map

package/dist/artifact-server-Dxz5YbuQ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-server-Dxz5YbuQ.mjs","names":["delay"],"sources":["../src/mcp/artifact-server.ts"],"sourcesContent":["import { serve } from '@hono/node-server'\nimport { setTimeout as delay } from 'node:timers/promises'\nimport { createApp } from '../server/app.js'\n\ntype ArtifactServer = ReturnType<typeof serve>\n\nconst servers = new Map<number, ArtifactServer>()\n\nasync function isHealthy(port: number): Promise<boolean> {\n  const controller = new AbortController()\n  const timeout = setTimeout(() => controller.abort(), 500)\n  try {\n    const response = await fetch(`http://127.0.0.1:${port}/health`, {\n      signal: controller.signal,\n    })\n    return response.ok\n  } catch {\n    return false\n  } finally {\n    clearTimeout(timeout)\n  }\n}\n\nasync function waitUntilHealthy(port: number): Promise<void> {\n  for (let attempt = 0; attempt < 20; attempt += 1) {\n    if (await isHealthy(port)) return\n    await delay(50)\n  }\n  throw new Error(`Graph report server did not become healthy on 127.0.0.1:${port}`)\n}\n\nexport async function ensureArtifactServer(port: number): Promise<void> {\n  if (servers.has(port)) return\n  if (await isHealthy(port)) return\n\n  const app = createApp()\n  const server = serve({\n    fetch: app.fetch,\n    hostname: '127.0.0.1',\n    port,\n  })\n  servers.set(port, server)\n  server.on('error', (err) => {\n    servers.delete(port)\n    process.stderr.write(`Chain Insights graph report server failed on 127.0.0.1:${port}: ${(err as Error).message}\\n`)\n  })\n\n  try {\n    await waitUntilHealthy(port)\n  } catch (err) {\n    servers.delete(port)\n    server.close()\n    throw err\n  }\n}\n\nexport function closeArtifactServers(): void {\n  for (const [port, server] of servers.entries()) {\n    server.close()\n    servers.delete(port)\n  }\n}\n"],"mappings":";;;;AAMA,MAAM,0BAAU,IAAI,KAA6B;AAEjD,eAAe,UAAU,MAAgC;CACvD,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,UAAU,iBAAiB,WAAW,OAAO,EAAE,IAAI;AACzD,KAAI;AAIF,UAAO,MAHgB,MAAM,oBAAoB,KAAK,UAAU,EAC9D,QAAQ,WAAW,QACpB,CAAC,EACc;SACV;AACN,SAAO;WACC;AACR,eAAa,QAAQ;;;AAIzB,eAAe,iBAAiB,MAA6B;AAC3D,MAAK,IAAI,UAAU,GAAG,UAAU,IAAI,WAAW,GAAG;AAChD,MAAI,MAAM,UAAU,KAAK,CAAE;AAC3B,QAAMA,aAAM,GAAG;;AAEjB,OAAM,IAAI,MAAM,2DAA2D,OAAO;;AAGpF,eAAsB,qBAAqB,MAA6B;AACtE,KAAI,QAAQ,IAAI,KAAK,CAAE;AACvB,KAAI,MAAM,UAAU,KAAK,CAAE;CAG3B,MAAM,SAAS,MAAM;EACnB,OAFU,WAEA,CAAC;EACX,UAAU;EACV;EACD,CAAC;AACF,SAAQ,IAAI,MAAM,OAAO;AACzB,QAAO,GAAG,UAAU,QAAQ;AAC1B,UAAQ,OAAO,KAAK;AACpB,UAAQ,OAAO,MAAM,0DAA0D,KAAK,IAAK,IAAc,QAAQ,IAAI;GACnH;AAEF,KAAI;AACF,QAAM,iBAAiB,KAAK;UACrB,KAAK;AACZ,UAAQ,OAAO,KAAK;AACpB,SAAO,OAAO;AACd,QAAM"}

package/dist/call-args-DQA2QcRA.cjs

@@ -0,0 +1,27 @@
+//#region src/mcp/call-args.ts
+const NUMERIC_ARG_KEYS = new Set([
+	"per_query_timeout_seconds",
+	"incident_timestamp_ms",
+	"max_hops",
+	"per_address_limit",
+	"min_amount_sum"
+]);
+function parseMcpArgValue(key, value) {
+	const trimmed = value.trim();
+	if (!trimmed) return value;
+	if (trimmed.startsWith("{") || trimmed.startsWith("[")) return JSON.parse(trimmed);
+	if (NUMERIC_ARG_KEYS.has(key) && /^-?\d+(?:\.\d+)?$/.test(trimmed)) return Number(trimmed);
+	return value;
+}
+function parseMcpCallArgs(rawArgs) {
+	const args = {};
+	for (const pair of rawArgs) {
+		const eqIdx = pair.indexOf("=");
+		if (eqIdx === -1) throw new Error(`Invalid arg format: ${pair} (expected key=value)`);
+		const key = pair.slice(0, eqIdx);
+		args[key] = parseMcpArgValue(key, pair.slice(eqIdx + 1));
+	}
+	return args;
+}
+//#endregion
+exports.parseMcpCallArgs = parseMcpCallArgs;

package/dist/call-args-Lk_wOJxd.mjs

@@ -0,0 +1,29 @@
+//#region src/mcp/call-args.ts
+const NUMERIC_ARG_KEYS = new Set([
+	"per_query_timeout_seconds",
+	"incident_timestamp_ms",
+	"max_hops",
+	"per_address_limit",
+	"min_amount_sum"
+]);
+function parseMcpArgValue(key, value) {
+	const trimmed = value.trim();
+	if (!trimmed) return value;
+	if (trimmed.startsWith("{") || trimmed.startsWith("[")) return JSON.parse(trimmed);
+	if (NUMERIC_ARG_KEYS.has(key) && /^-?\d+(?:\.\d+)?$/.test(trimmed)) return Number(trimmed);
+	return value;
+}
+function parseMcpCallArgs(rawArgs) {
+	const args = {};
+	for (const pair of rawArgs) {
+		const eqIdx = pair.indexOf("=");
+		if (eqIdx === -1) throw new Error(`Invalid arg format: ${pair} (expected key=value)`);
+		const key = pair.slice(0, eqIdx);
+		args[key] = parseMcpArgValue(key, pair.slice(eqIdx + 1));
+	}
+	return args;
+}
+//#endregion
+export { parseMcpCallArgs };
+
+//# sourceMappingURL=call-args-Lk_wOJxd.mjs.map

package/dist/call-args-Lk_wOJxd.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-args-Lk_wOJxd.mjs","names":[],"sources":["../src/mcp/call-args.ts"],"sourcesContent":["const NUMERIC_ARG_KEYS = new Set([\n  'per_query_timeout_seconds',\n  'incident_timestamp_ms',\n  'max_hops',\n  'per_address_limit',\n  'min_amount_sum',\n])\n\nfunction parseMcpArgValue(key: string, value: string): unknown {\n  const trimmed = value.trim()\n  if (!trimmed) return value\n\n  if (trimmed.startsWith('{') || trimmed.startsWith('[')) {\n    return JSON.parse(trimmed) as unknown\n  }\n\n  if (NUMERIC_ARG_KEYS.has(key) && /^-?\\d+(?:\\.\\d+)?$/.test(trimmed)) {\n    return Number(trimmed)\n  }\n\n  return value\n}\n\nexport function parseMcpCallArgs(rawArgs: string[]): Record<string, unknown> {\n  const args: Record<string, unknown> = {}\n  for (const pair of rawArgs) {\n    const eqIdx = pair.indexOf('=')\n    if (eqIdx === -1) {\n      throw new Error(`Invalid arg format: ${pair} (expected key=value)`)\n    }\n    const key = pair.slice(0, eqIdx)\n    args[key] = parseMcpArgValue(key, pair.slice(eqIdx + 1))\n  }\n  return args\n}\n"],"mappings":";AAAA,MAAM,mBAAmB,IAAI,IAAI;CAC/B;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAS,iBAAiB,KAAa,OAAwB;CAC7D,MAAM,UAAU,MAAM,MAAM;AAC5B,KAAI,CAAC,QAAS,QAAO;AAErB,KAAI,QAAQ,WAAW,IAAI,IAAI,QAAQ,WAAW,IAAI,CACpD,QAAO,KAAK,MAAM,QAAQ;AAG5B,KAAI,iBAAiB,IAAI,IAAI,IAAI,oBAAoB,KAAK,QAAQ,CAChE,QAAO,OAAO,QAAQ;AAGxB,QAAO;;AAGT,SAAgB,iBAAiB,SAA4C;CAC3E,MAAM,OAAgC,EAAE;AACxC,MAAK,MAAM,QAAQ,SAAS;EAC1B,MAAM,QAAQ,KAAK,QAAQ,IAAI;AAC/B,MAAI,UAAU,GACZ,OAAM,IAAI,MAAM,uBAAuB,KAAK,uBAAuB;EAErE,MAAM,MAAM,KAAK,MAAM,GAAG,MAAM;AAChC,OAAK,OAAO,iBAAiB,KAAK,KAAK,MAAM,QAAQ,EAAE,CAAC;;AAE1D,QAAO"}

package/dist/capabilities-CB97WMA5.cjs

@@ -0,0 +1,83 @@
+const require_client = require("./client-D4fZgIaO.cjs");
+//#region src/mcp/capabilities.ts
+function metadataNetworksUrl(endpoint) {
+	const url = new URL(endpoint);
+	url.pathname = "/metadata/networks";
+	url.search = "";
+	url.hash = "";
+	return url;
+}
+async function fetchNetworkCapabilities(config) {
+	const request = metadataNetworksUrl(require_client.resolveGraphMcpEndpoint(config));
+	const headers = new Headers();
+	const token = config.graphMcpAuthToken?.trim() || config.mcpAuthToken?.trim();
+	if (token) {
+		headers.set("X-MCP-Debug-Token", token);
+		headers.set("Authorization", `Bearer ${token}`);
+	}
+	let response;
+	try {
+		response = await fetch(request, { headers });
+	} catch (err) {
+		throw new Error(`network capabilities unavailable at ${request}: ${err.message}`);
+	}
+	if (!response.ok) throw new Error(`network capabilities unavailable at ${request}: HTTP ${response.status}`);
+	const parsed = await response.json();
+	if (parsed.schema !== "chain-insights.network-capabilities.v1" || !Array.isArray(parsed.networks)) throw new Error("network capabilities response has unsupported schema");
+	return parsed;
+}
+function layerValue(network, layer) {
+	if (!network.layers[layer]?.enabled) return "no";
+	return "yes";
+}
+function availableToolsLabel(network) {
+	const tools = Object.entries(network.tools ?? {}).filter(([, status]) => status === "available").map(([name]) => name);
+	return tools.length > 0 ? tools.join(", ") : "none";
+}
+function shortDate(value) {
+	if (!value) return "";
+	return value.slice(0, 10);
+}
+function datasetLabel(network) {
+	const coverage = network.coverage;
+	if (!coverage) return "unknown";
+	const blockRange = coverage.from_block !== void 0 && coverage.to_block !== void 0 ? `${coverage.from_block}..${coverage.to_block}` : "blocks unknown";
+	const dateRange = coverage.from_timestamp && coverage.to_timestamp ? `${shortDate(coverage.from_timestamp)}..${shortDate(coverage.to_timestamp)}` : "dates unknown";
+	if (blockRange === "blocks unknown" && dateRange === "dates unknown") return "unknown";
+	return `${blockRange} / ${dateRange}`;
+}
+function formatNetworkCapabilities(document) {
+	if (document.networks.length === 0) return "No supported networks advertised.";
+	const headers = [
+		"Network",
+		"Topology",
+		"Facts",
+		"Risk",
+		"Dataset",
+		"Available tools"
+	];
+	const widths = [
+		14,
+		10,
+		8,
+		8,
+		38,
+		64
+	];
+	const row = (values) => values.map((value, index) => value.padEnd(widths[index])).join("  ");
+	return [
+		row(headers),
+		widths.map((width) => "-".repeat(width)).join("  "),
+		...document.networks.map((network) => row([
+			network.display_name || network.network,
+			layerValue(network, "topology"),
+			layerValue(network, "facts"),
+			layerValue(network, "risk"),
+			datasetLabel(network),
+			availableToolsLabel(network)
+		]))
+	].join("\n");
+}
+//#endregion
+exports.fetchNetworkCapabilities = fetchNetworkCapabilities;
+exports.formatNetworkCapabilities = formatNetworkCapabilities;