chain-insights 0.2.18 → 0.2.20

package/README.md

@@ -16,6 +16,7 @@ evidence pointers, dossiers, and reports.
 | Tool | Use it for |
 | --- | --- |
 | `address_risk` | Screen one address for risk, behavior, neighborhood context, and exchange exposure |
+| `stake_insights` | Explain Bittensor staking relationships, net stake movement, and counterparties |
 | `track_funds` | Trace victim/source funds through intermediaries to exchange deposit candidates |
 | `scam_topology` | Expand a known victim incident into reviewable scam infrastructure and label candidates |
 | `graph_query` | Run one read-only GQL/Cypher query against a GraphRAG MCP graph layer |
@@ -52,6 +53,40 @@ cd ./chain-insights-investigations
 cia init .
 ```
 
+## Configure MCP server address
+
+`cia` uses `graphMcpEndpoint` for all GraphRAG MCP calls. Configure it explicitly per environment.
+
+1. Local GraphRAG MCP (loopback HTTP allowed):
+
+```bash
+cia config set graphMcpEndpoint http://127.0.0.1:8012/mcp
+```
+
+2. Hosted staging/production GraphRAG MCP (HTTPS required):
+
+```bash
+cia config set graphMcpEndpoint https://staging-mcp.chain-insights.ai/mcp
+```
+
+3. Optional one-shot override from environment (highest precedence for that process):
+
+```bash
+export CHAIN_INSIGHTS_GRAPH_MCP_ENDPOINT=https://prod-mcp.example.com/mcp
+```
+
+Validation rules:
+
+- `http://` is accepted only for `localhost` / loopback addresses.
+- Remote hosts must use `https://`.
+- Endpoint URLs with credentials, query strings, or fragments are rejected.
+
+Configuration precedence for `graphMcpEndpoint`:
+
+1. `CHAIN_INSIGHTS_GRAPH_MCP_ENDPOINT` env var (`GRAPH_MCP_ENDPOINT` legacy alias also supported)
+2. `cia config set graphMcpEndpoint ...` saved value
+3. Local default `http://127.0.0.1:8012/mcp`
+
 Check the configured endpoint and current GraphRAG MCP capabilities:
 
 ```bash
@@ -149,6 +184,9 @@ and local case state:
 
 - `address_risk` starts a single-address screen with risk, behavior,
   neighborhood context, and exchange exposure.
+- `stake_insights` explains Bittensor coldkey-hotkey-netuid staking
+  relationships, aggregate stake movement amounts, top counterparties, first
+  and last activity, and source backend evidence.
 - `track_funds` traces trusted victim/source funds through intermediaries to
   exchange deposit candidates.
 - `scam_topology` expands from a known victim incident into reviewable

package/bin/cli.js

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 'use strict';
 
-// CJS shim — bridges the npm bin entry (CJS, no build step) to the
-// ESM dist built by tsdown. Dynamic import() is the correct bridge pattern
-// (see references/get-shit-done/bin/gsd-sdk.js for the GSD precedent).
+// CJS shim: bridges the npm bin entry to the ESM dist built by tsdown.
+// Dynamic import() is the correct bridge pattern from CommonJS to ESM.
 import('../dist/cli.mjs').catch((err) => {
   console.error('Failed to load chain-insights:', err.message);
   process.exit(1);

package/bin/install.cjs

@@ -5,7 +5,6 @@
 // Runs before node_modules exists; zero npm imports allowed.
 // Extension is .cjs (not .js) because package.json has "type": "module" —
 // a .js file would be treated as ESM and require() calls would crash.
-// Adapted from GSD reference: references/get-shit-done/bin/install.js
 
 const fs   = require('fs');
 const path = require('path');

package/dist/{app-DxlQE_P5.cjs → app-BxojXjtB.cjs}

@@ -100,7 +100,7 @@ function createApp() {
 		ts: Date.now()
 	}));
 	app.get("/status", async (c) => {
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
 		const config = await loadConfig();
 		return c.json({
 			dataDir: config.dataDir,

package/dist/{app-DdWQF_zb.mjs → app-CRd39JJ8.mjs}

@@ -97,7 +97,7 @@ function createApp() {
 		ts: Date.now()
 	}));
 	app.get("/status", async (c) => {
-		const { loadConfig } = await import("./config-9KYXaAv-.mjs").then((n) => n.t);
+		const { loadConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
 		const config = await loadConfig();
 		return c.json({
 			dataDir: config.dataDir,
@@ -152,4 +152,4 @@ function createApp() {
 //#endregion
 export { createApp as t };
 
-//# sourceMappingURL=app-DdWQF_zb.mjs.map
+//# sourceMappingURL=app-CRd39JJ8.mjs.map

package/dist/{app-DdWQF_zb.mjs.map → app-CRd39JJ8.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"app-DdWQF_zb.mjs","names":[],"sources":["../src/server/app.ts"],"sourcesContent":["import { Hono } from 'hono'\nimport { lstat, readFile, readdir, realpath } from 'node:fs/promises'\nimport path from 'node:path'\nimport os from 'node:os'\n\nconst WORKSPACE_TREE_ROOTS = ['cases', 'reports', '.chain-insights/schema']\nconst WORKSPACE_TREE_MAX_DEPTH = 4\n\ninterface WorkspaceTreeEntry {\n  path: string\n  type: 'file' | 'directory' | 'symlink'\n  size?: number\n}\n\nfunction withinRoot(root: string, target: string): boolean {\n  const relative = path.relative(path.resolve(root), path.resolve(target))\n  return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative))\n}\n\nasync function realPathWithinRoot(root: string, target: string): Promise<boolean> {\n  try {\n    const [realRoot, realTarget] = await Promise.all([realpath(root), realpath(target)])\n    return withinRoot(realRoot, realTarget)\n  } catch {\n    return false\n  }\n}\n\nfunction toWorkspaceRelative(root: string, target: string): string {\n  return path.relative(root, target).split(path.sep).join('/')\n}\n\nasync function listWorkspaceEntries(\n  workspaceRoot: string,\n  roots = WORKSPACE_TREE_ROOTS,\n  maxDepth = WORKSPACE_TREE_MAX_DEPTH\n): Promise<WorkspaceTreeEntry[]> {\n  const entries: WorkspaceTreeEntry[] = []\n  const root = path.resolve(workspaceRoot)\n\n  async function visit(target: string, depth: number): Promise<void> {\n    const resolved = path.resolve(target)\n    if (!withinRoot(root, resolved)) return\n\n    let info: Awaited<ReturnType<typeof lstat>>\n    try {\n      info = await lstat(resolved)\n    } catch {\n      return\n    }\n\n    const type = info.isSymbolicLink() ? 'symlink' : info.isDirectory() ? 'directory' : info.isFile() ? 'file' : null\n    if (!type) return\n\n    const entry: WorkspaceTreeEntry = {\n      path: toWorkspaceRelative(root, resolved),\n      type,\n    }\n    if (type === 'file') entry.size = info.size\n    entries.push(entry)\n\n    if (type !== 'directory' || depth >= maxDepth) return\n    if (!await realPathWithinRoot(root, resolved)) return\n\n    let children: string[]\n    try {\n      children = await readdir(resolved)\n    } catch {\n      return\n    }\n\n    for (const child of children.sort()) {\n      await visit(path.join(resolved, child), depth + 1)\n    }\n  }\n\n  for (const rootName of roots) {\n    const target = path.resolve(root, rootName)\n    if (withinRoot(root, target)) await visit(target, 0)\n  }\n\n  return entries\n}\n\nasync function findVizHtml(vizId: string): Promise<string | null> {\n  const home = os.homedir()\n  const filename = `${vizId}.html`\n\n  // 1. Check central standalone directory first (fast, single path)\n  const centralPath = path.join(home, '.chain-insights', 'viz', filename)\n  try {\n    return await readFile(centralPath, 'utf-8')\n  } catch { /* not found here, continue */ }\n\n  // 2. Check per-case directory using vizId prefix (case-based vizs use <caseId>_<timestamp>)\n  //    The vizId for case-based vizs is formatted as <case-id>_<timestamp>,\n  //    so extract the case-id prefix to check its directory first.\n  const underscoreIdx = vizId.lastIndexOf('_')\n  if (underscoreIdx > 0) {\n    const possibleCaseId = vizId.substring(0, underscoreIdx)\n    const casePath = path.join(home, '.chain-insights', 'cases', possibleCaseId, 'viz', filename)\n    try {\n      return await readFile(casePath, 'utf-8')\n    } catch { /* not found here, continue */ }\n  }\n\n  // 3. Fallback: scan all case directories (CONTEXT.md: ~/.chain-insights/cases/<case-id>/viz/)\n  const casesDir = path.join(home, '.chain-insights', 'cases')\n  try {\n    const cases = await readdir(casesDir)\n    for (const caseId of cases) {\n      const casePath = path.join(casesDir, caseId, 'viz', filename)\n      try {\n        return await readFile(casePath, 'utf-8')\n      } catch { /* not in this case dir */ }\n    }\n  } catch { /* cases dir doesn't exist */ }\n\n  return null\n}\n\nfunction isSafeGraphReportFilename(filename: string): boolean {\n  return (\n    filename.endsWith('.graph.json') &&\n    /^[A-Za-z0-9._-]+$/.test(filename) &&\n    !filename.includes('..') &&\n    !filename.includes('/') &&\n    !filename.includes('\\\\')\n  )\n}\n\nexport function createApp(): Hono {\n  const app = new Hono()\n\n  app.get('/health', (c) => c.json({ ok: true, ts: Date.now() }))\n\n  app.get('/status', async (c) => {\n    const { loadConfig } = await import('../config/index.js')\n    const config = await loadConfig()\n    return c.json({\n      dataDir: config.dataDir,\n      graphMcpMode: config.graphMcpMode,\n      server: 'running',\n    })\n  })\n\n  app.get('/viz/:id', async (c) => {\n    const id = c.req.param('id')\n    if (!/^[a-zA-Z0-9_-]+$/.test(id)) {\n      return c.json({ error: 'Invalid visualization ID' }, 400)\n    }\n    const html = await findVizHtml(id)\n    if (!html) {\n      return c.json({ error: 'Visualization not found' }, 404)\n    }\n    return c.html(html)\n  })\n\n  app.get('/graph-reports/:filename', async (c) => {\n    const filename = c.req.param('filename')\n    if (!isSafeGraphReportFilename(filename)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const graphPath = path.resolve(paths.reportGraphsRoot, filename)\n    if (!withinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n    if (!await realPathWithinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n\n    try {\n      const graph = await readFile(graphPath, 'utf-8')\n      return c.body(graph, 200, {\n        'Content-Type': 'application/json',\n        'Access-Control-Allow-Origin': '*',\n      })\n    } catch {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n  })\n\n  app.get('/graph-reports/*', (c) => {\n    return c.json({ error: 'Invalid graph report filename' }, 400)\n  })\n\n  app.get('/workspace/tree', async (c) => {\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const entries = await listWorkspaceEntries(paths.root, WORKSPACE_TREE_ROOTS)\n    return c.json({\n      schema: 'chain-insights.workspace-tree.v1',\n      root: paths.root,\n      entries,\n    })\n  })\n\n  app.onError((err, c) => {\n    console.error(err)\n    return c.json({ error: 'Internal server error' }, 500)\n  })\n\n  return app\n}\n"],"mappings":";;;;;AAKA,MAAM,uBAAuB;CAAC;CAAS;CAAW;AAAwB;AAC1E,MAAM,2BAA2B;AAQjC,SAAS,WAAW,MAAc,QAAyB;CACzD,MAAM,WAAW,KAAK,SAAS,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,MAAM,CAAC;CACvE,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,QAAQ;AACpF;AAEA,eAAe,mBAAmB,MAAc,QAAkC;CAChF,IAAI;EACF,MAAM,CAAC,UAAU,cAAc,MAAM,QAAQ,IAAI,CAAC,SAAS,IAAI,GAAG,SAAS,MAAM,CAAC,CAAC;EACnF,OAAO,WAAW,UAAU,UAAU;CACxC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,oBAAoB,MAAc,QAAwB;CACjE,OAAO,KAAK,SAAS,MAAM,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AAC7D;AAEA,eAAe,qBACb,eACA,QAAQ,sBACR,WAAW,0BACoB;CAC/B,MAAM,UAAgC,CAAC;CACvC,MAAM,OAAO,KAAK,QAAQ,aAAa;CAEvC,eAAe,MAAM,QAAgB,OAA8B;EACjE,MAAM,WAAW,KAAK,QAAQ,MAAM;EACpC,IAAI,CAAC,WAAW,MAAM,QAAQ,GAAG;EAEjC,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,MAAM,QAAQ;EAC7B,QAAQ;GACN;EACF;EAEA,MAAM,OAAO,KAAK,eAAe,IAAI,YAAY,KAAK,YAAY,IAAI,cAAc,KAAK,OAAO,IAAI,SAAS;EAC7G,IAAI,CAAC,MAAM;EAEX,MAAM,QAA4B;GAChC,MAAM,oBAAoB,MAAM,QAAQ;GACxC;EACF;EACA,IAAI,SAAS,QAAQ,MAAM,OAAO,KAAK;EACvC,QAAQ,KAAK,KAAK;EAElB,IAAI,SAAS,eAAe,SAAS,UAAU;EAC/C,IAAI,CAAC,MAAM,mBAAmB,MAAM,QAAQ,GAAG;EAE/C,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,QAAQ,QAAQ;EACnC,QAAQ;GACN;EACF;EAEA,KAAK,MAAM,SAAS,SAAS,KAAK,GAChC,MAAM,MAAM,KAAK,KAAK,UAAU,KAAK,GAAG,QAAQ,CAAC;CAErD;CAEA,KAAK,MAAM,YAAY,OAAO;EAC5B,MAAM,SAAS,KAAK,QAAQ,MAAM,QAAQ;EAC1C,IAAI,WAAW,MAAM,MAAM,GAAG,MAAM,MAAM,QAAQ,CAAC;CACrD;CAEA,OAAO;AACT;AAEA,eAAe,YAAY,OAAuC;CAChE,MAAM,OAAO,GAAG,QAAQ;CACxB,MAAM,WAAW,GAAG,MAAM;CAG1B,MAAM,cAAc,KAAK,KAAK,MAAM,mBAAmB,OAAO,QAAQ;CACtE,IAAI;EACF,OAAO,MAAM,SAAS,aAAa,OAAO;CAC5C,QAAQ,CAAiC;CAKzC,MAAM,gBAAgB,MAAM,YAAY,GAAG;CAC3C,IAAI,gBAAgB,GAAG;EACrB,MAAM,iBAAiB,MAAM,UAAU,GAAG,aAAa;EACvD,MAAM,WAAW,KAAK,KAAK,MAAM,mBAAmB,SAAS,gBAAgB,OAAO,QAAQ;EAC5F,IAAI;GACF,OAAO,MAAM,SAAS,UAAU,OAAO;EACzC,QAAQ,CAAiC;CAC3C;CAGA,MAAM,WAAW,KAAK,KAAK,MAAM,mBAAmB,OAAO;CAC3D,IAAI;EACF,MAAM,QAAQ,MAAM,QAAQ,QAAQ;EACpC,KAAK,MAAM,UAAU,OAAO;GAC1B,MAAM,WAAW,KAAK,KAAK,UAAU,QAAQ,OAAO,QAAQ;GAC5D,IAAI;IACF,OAAO,MAAM,SAAS,UAAU,OAAO;GACzC,QAAQ,CAA6B;EACvC;CACF,QAAQ,CAAgC;CAExC,OAAO;AACT;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,OACE,SAAS,SAAS,aAAa,KAC/B,oBAAoB,KAAK,QAAQ,KACjC,CAAC,SAAS,SAAS,IAAI,KACvB,CAAC,SAAS,SAAS,GAAG,KACtB,CAAC,SAAS,SAAS,IAAI;AAE3B;AAEA,SAAgB,YAAkB;CAChC,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,YAAY,MAAM,EAAE,KAAK;EAAE,IAAI;EAAM,IAAI,KAAK,IAAI;CAAE,CAAC,CAAC;CAE9D,IAAI,IAAI,WAAW,OAAO,MAAM;EAC9B,MAAM,EAAE,eAAe,MAAM,OAAO,yBAAA,MAAA,MAAA,EAAA,CAAA;EACpC,MAAM,SAAS,MAAM,WAAW;EAChC,OAAO,EAAE,KAAK;GACZ,SAAS,OAAO;GAChB,cAAc,OAAO;GACrB,QAAQ;EACV,CAAC;CACH,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,IAAI,CAAC,mBAAmB,KAAK,EAAE,GAC7B,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;EAE1D,MAAM,OAAO,MAAM,YAAY,EAAE;EACjC,IAAI,CAAC,MACH,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAEzD,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,4BAA4B,OAAO,MAAM;EAC/C,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;EACvC,IAAI,CAAC,0BAA0B,QAAQ,GACrC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAG/D,MAAM,EAAE,yBAAyB,MAAM,OAAO,8BAAA,MAAA,MAAA,EAAA,CAAA;EAC9C,MAAM,QAAQ,qBAAqB;EACnC,MAAM,YAAY,KAAK,QAAQ,MAAM,kBAAkB,QAAQ;EAC/D,IAAI,CAAC,WAAW,MAAM,kBAAkB,SAAS,GAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAE/D,IAAI,CAAC,MAAM,mBAAmB,MAAM,kBAAkB,SAAS,GAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EAGxD,IAAI;GACF,MAAM,QAAQ,MAAM,SAAS,WAAW,OAAO;GAC/C,OAAO,EAAE,KAAK,OAAO,KAAK;IACxB,gBAAgB;IAChB,+BAA+B;GACjC,CAAC;EACH,QAAQ;GACN,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACxD;CACF,CAAC;CAED,IAAI,IAAI,qBAAqB,MAAM;EACjC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;CAC/D,CAAC;CAED,IAAI,IAAI,mBAAmB,OAAO,MAAM;EACtC,MAAM,EAAE,yBAAyB,MAAM,OAAO,8BAAA,MAAA,MAAA,EAAA,CAAA;EAC9C,MAAM,QAAQ,qBAAqB;EACnC,MAAM,UAAU,MAAM,qBAAqB,MAAM,MAAM,oBAAoB;EAC3E,OAAO,EAAE,KAAK;GACZ,QAAQ;GACR,MAAM,MAAM;GACZ;EACF,CAAC;CACH,CAAC;CAED,IAAI,SAAS,KAAK,MAAM;EACtB,QAAQ,MAAM,GAAG;EACjB,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;CACvD,CAAC;CAED,OAAO;AACT"}
+{"version":3,"file":"app-CRd39JJ8.mjs","names":[],"sources":["../src/server/app.ts"],"sourcesContent":["import { Hono } from 'hono'\nimport { lstat, readFile, readdir, realpath } from 'node:fs/promises'\nimport path from 'node:path'\nimport os from 'node:os'\n\nconst WORKSPACE_TREE_ROOTS = ['cases', 'reports', '.chain-insights/schema']\nconst WORKSPACE_TREE_MAX_DEPTH = 4\n\ninterface WorkspaceTreeEntry {\n  path: string\n  type: 'file' | 'directory' | 'symlink'\n  size?: number\n}\n\nfunction withinRoot(root: string, target: string): boolean {\n  const relative = path.relative(path.resolve(root), path.resolve(target))\n  return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative))\n}\n\nasync function realPathWithinRoot(root: string, target: string): Promise<boolean> {\n  try {\n    const [realRoot, realTarget] = await Promise.all([realpath(root), realpath(target)])\n    return withinRoot(realRoot, realTarget)\n  } catch {\n    return false\n  }\n}\n\nfunction toWorkspaceRelative(root: string, target: string): string {\n  return path.relative(root, target).split(path.sep).join('/')\n}\n\nasync function listWorkspaceEntries(\n  workspaceRoot: string,\n  roots = WORKSPACE_TREE_ROOTS,\n  maxDepth = WORKSPACE_TREE_MAX_DEPTH\n): Promise<WorkspaceTreeEntry[]> {\n  const entries: WorkspaceTreeEntry[] = []\n  const root = path.resolve(workspaceRoot)\n\n  async function visit(target: string, depth: number): Promise<void> {\n    const resolved = path.resolve(target)\n    if (!withinRoot(root, resolved)) return\n\n    let info: Awaited<ReturnType<typeof lstat>>\n    try {\n      info = await lstat(resolved)\n    } catch {\n      return\n    }\n\n    const type = info.isSymbolicLink() ? 'symlink' : info.isDirectory() ? 'directory' : info.isFile() ? 'file' : null\n    if (!type) return\n\n    const entry: WorkspaceTreeEntry = {\n      path: toWorkspaceRelative(root, resolved),\n      type,\n    }\n    if (type === 'file') entry.size = info.size\n    entries.push(entry)\n\n    if (type !== 'directory' || depth >= maxDepth) return\n    if (!await realPathWithinRoot(root, resolved)) return\n\n    let children: string[]\n    try {\n      children = await readdir(resolved)\n    } catch {\n      return\n    }\n\n    for (const child of children.sort()) {\n      await visit(path.join(resolved, child), depth + 1)\n    }\n  }\n\n  for (const rootName of roots) {\n    const target = path.resolve(root, rootName)\n    if (withinRoot(root, target)) await visit(target, 0)\n  }\n\n  return entries\n}\n\nasync function findVizHtml(vizId: string): Promise<string | null> {\n  const home = os.homedir()\n  const filename = `${vizId}.html`\n\n  // 1. Check central standalone directory first (fast, single path)\n  const centralPath = path.join(home, '.chain-insights', 'viz', filename)\n  try {\n    return await readFile(centralPath, 'utf-8')\n  } catch { /* not found here, continue */ }\n\n  // 2. Check per-case directory using vizId prefix (case-based vizs use <caseId>_<timestamp>)\n  //    The vizId for case-based vizs is formatted as <case-id>_<timestamp>,\n  //    so extract the case-id prefix to check its directory first.\n  const underscoreIdx = vizId.lastIndexOf('_')\n  if (underscoreIdx > 0) {\n    const possibleCaseId = vizId.substring(0, underscoreIdx)\n    const casePath = path.join(home, '.chain-insights', 'cases', possibleCaseId, 'viz', filename)\n    try {\n      return await readFile(casePath, 'utf-8')\n    } catch { /* not found here, continue */ }\n  }\n\n  // 3. Fallback: scan all case directories (CONTEXT.md: ~/.chain-insights/cases/<case-id>/viz/)\n  const casesDir = path.join(home, '.chain-insights', 'cases')\n  try {\n    const cases = await readdir(casesDir)\n    for (const caseId of cases) {\n      const casePath = path.join(casesDir, caseId, 'viz', filename)\n      try {\n        return await readFile(casePath, 'utf-8')\n      } catch { /* not in this case dir */ }\n    }\n  } catch { /* cases dir doesn't exist */ }\n\n  return null\n}\n\nfunction isSafeGraphReportFilename(filename: string): boolean {\n  return (\n    filename.endsWith('.graph.json') &&\n    /^[A-Za-z0-9._-]+$/.test(filename) &&\n    !filename.includes('..') &&\n    !filename.includes('/') &&\n    !filename.includes('\\\\')\n  )\n}\n\nexport function createApp(): Hono {\n  const app = new Hono()\n\n  app.get('/health', (c) => c.json({ ok: true, ts: Date.now() }))\n\n  app.get('/status', async (c) => {\n    const { loadConfig } = await import('../config/index.js')\n    const config = await loadConfig()\n    return c.json({\n      dataDir: config.dataDir,\n      graphMcpMode: config.graphMcpMode,\n      server: 'running',\n    })\n  })\n\n  app.get('/viz/:id', async (c) => {\n    const id = c.req.param('id')\n    if (!/^[a-zA-Z0-9_-]+$/.test(id)) {\n      return c.json({ error: 'Invalid visualization ID' }, 400)\n    }\n    const html = await findVizHtml(id)\n    if (!html) {\n      return c.json({ error: 'Visualization not found' }, 404)\n    }\n    return c.html(html)\n  })\n\n  app.get('/graph-reports/:filename', async (c) => {\n    const filename = c.req.param('filename')\n    if (!isSafeGraphReportFilename(filename)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const graphPath = path.resolve(paths.reportGraphsRoot, filename)\n    if (!withinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n    if (!await realPathWithinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n\n    try {\n      const graph = await readFile(graphPath, 'utf-8')\n      return c.body(graph, 200, {\n        'Content-Type': 'application/json',\n        'Access-Control-Allow-Origin': '*',\n      })\n    } catch {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n  })\n\n  app.get('/graph-reports/*', (c) => {\n    return c.json({ error: 'Invalid graph report filename' }, 400)\n  })\n\n  app.get('/workspace/tree', async (c) => {\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const entries = await listWorkspaceEntries(paths.root, WORKSPACE_TREE_ROOTS)\n    return c.json({\n      schema: 'chain-insights.workspace-tree.v1',\n      root: paths.root,\n      entries,\n    })\n  })\n\n  app.onError((err, c) => {\n    console.error(err)\n    return c.json({ error: 'Internal server error' }, 500)\n  })\n\n  return app\n}\n"],"mappings":";;;;;AAKA,MAAM,uBAAuB;CAAC;CAAS;CAAW;AAAwB;AAC1E,MAAM,2BAA2B;AAQjC,SAAS,WAAW,MAAc,QAAyB;CACzD,MAAM,WAAW,KAAK,SAAS,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,MAAM,CAAC;CACvE,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,QAAQ;AACpF;AAEA,eAAe,mBAAmB,MAAc,QAAkC;CAChF,IAAI;EACF,MAAM,CAAC,UAAU,cAAc,MAAM,QAAQ,IAAI,CAAC,SAAS,IAAI,GAAG,SAAS,MAAM,CAAC,CAAC;EACnF,OAAO,WAAW,UAAU,UAAU;CACxC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,oBAAoB,MAAc,QAAwB;CACjE,OAAO,KAAK,SAAS,MAAM,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AAC7D;AAEA,eAAe,qBACb,eACA,QAAQ,sBACR,WAAW,0BACoB;CAC/B,MAAM,UAAgC,CAAC;CACvC,MAAM,OAAO,KAAK,QAAQ,aAAa;CAEvC,eAAe,MAAM,QAAgB,OAA8B;EACjE,MAAM,WAAW,KAAK,QAAQ,MAAM;EACpC,IAAI,CAAC,WAAW,MAAM,QAAQ,GAAG;EAEjC,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,MAAM,QAAQ;EAC7B,QAAQ;GACN;EACF;EAEA,MAAM,OAAO,KAAK,eAAe,IAAI,YAAY,KAAK,YAAY,IAAI,cAAc,KAAK,OAAO,IAAI,SAAS;EAC7G,IAAI,CAAC,MAAM;EAEX,MAAM,QAA4B;GAChC,MAAM,oBAAoB,MAAM,QAAQ;GACxC;EACF;EACA,IAAI,SAAS,QAAQ,MAAM,OAAO,KAAK;EACvC,QAAQ,KAAK,KAAK;EAElB,IAAI,SAAS,eAAe,SAAS,UAAU;EAC/C,IAAI,CAAC,MAAM,mBAAmB,MAAM,QAAQ,GAAG;EAE/C,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,QAAQ,QAAQ;EACnC,QAAQ;GACN;EACF;EAEA,KAAK,MAAM,SAAS,SAAS,KAAK,GAChC,MAAM,MAAM,KAAK,KAAK,UAAU,KAAK,GAAG,QAAQ,CAAC;CAErD;CAEA,KAAK,MAAM,YAAY,OAAO;EAC5B,MAAM,SAAS,KAAK,QAAQ,MAAM,QAAQ;EAC1C,IAAI,WAAW,MAAM,MAAM,GAAG,MAAM,MAAM,QAAQ,CAAC;CACrD;CAEA,OAAO;AACT;AAEA,eAAe,YAAY,OAAuC;CAChE,MAAM,OAAO,GAAG,QAAQ;CACxB,MAAM,WAAW,GAAG,MAAM;CAG1B,MAAM,cAAc,KAAK,KAAK,MAAM,mBAAmB,OAAO,QAAQ;CACtE,IAAI;EACF,OAAO,MAAM,SAAS,aAAa,OAAO;CAC5C,QAAQ,CAAiC;CAKzC,MAAM,gBAAgB,MAAM,YAAY,GAAG;CAC3C,IAAI,gBAAgB,GAAG;EACrB,MAAM,iBAAiB,MAAM,UAAU,GAAG,aAAa;EACvD,MAAM,WAAW,KAAK,KAAK,MAAM,mBAAmB,SAAS,gBAAgB,OAAO,QAAQ;EAC5F,IAAI;GACF,OAAO,MAAM,SAAS,UAAU,OAAO;EACzC,QAAQ,CAAiC;CAC3C;CAGA,MAAM,WAAW,KAAK,KAAK,MAAM,mBAAmB,OAAO;CAC3D,IAAI;EACF,MAAM,QAAQ,MAAM,QAAQ,QAAQ;EACpC,KAAK,MAAM,UAAU,OAAO;GAC1B,MAAM,WAAW,KAAK,KAAK,UAAU,QAAQ,OAAO,QAAQ;GAC5D,IAAI;IACF,OAAO,MAAM,SAAS,UAAU,OAAO;GACzC,QAAQ,CAA6B;EACvC;CACF,QAAQ,CAAgC;CAExC,OAAO;AACT;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,OACE,SAAS,SAAS,aAAa,KAC/B,oBAAoB,KAAK,QAAQ,KACjC,CAAC,SAAS,SAAS,IAAI,KACvB,CAAC,SAAS,SAAS,GAAG,KACtB,CAAC,SAAS,SAAS,IAAI;AAE3B;AAEA,SAAgB,YAAkB;CAChC,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,YAAY,MAAM,EAAE,KAAK;EAAE,IAAI;EAAM,IAAI,KAAK,IAAI;CAAE,CAAC,CAAC;CAE9D,IAAI,IAAI,WAAW,OAAO,MAAM;EAC9B,MAAM,EAAE,eAAe,MAAM,OAAO,yBAAA,MAAA,MAAA,EAAA,CAAA;EACpC,MAAM,SAAS,MAAM,WAAW;EAChC,OAAO,EAAE,KAAK;GACZ,SAAS,OAAO;GAChB,cAAc,OAAO;GACrB,QAAQ;EACV,CAAC;CACH,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,IAAI,CAAC,mBAAmB,KAAK,EAAE,GAC7B,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;EAE1D,MAAM,OAAO,MAAM,YAAY,EAAE;EACjC,IAAI,CAAC,MACH,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAEzD,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,4BAA4B,OAAO,MAAM;EAC/C,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;EACvC,IAAI,CAAC,0BAA0B,QAAQ,GACrC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAG/D,MAAM,EAAE,yBAAyB,MAAM,OAAO,8BAAA,MAAA,MAAA,EAAA,CAAA;EAC9C,MAAM,QAAQ,qBAAqB;EACnC,MAAM,YAAY,KAAK,QAAQ,MAAM,kBAAkB,QAAQ;EAC/D,IAAI,CAAC,WAAW,MAAM,kBAAkB,SAAS,GAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAE/D,IAAI,CAAC,MAAM,mBAAmB,MAAM,kBAAkB,SAAS,GAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EAGxD,IAAI;GACF,MAAM,QAAQ,MAAM,SAAS,WAAW,OAAO;GAC/C,OAAO,EAAE,KAAK,OAAO,KAAK;IACxB,gBAAgB;IAChB,+BAA+B;GACjC,CAAC;EACH,QAAQ;GACN,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACxD;CACF,CAAC;CAED,IAAI,IAAI,qBAAqB,MAAM;EACjC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;CAC/D,CAAC;CAED,IAAI,IAAI,mBAAmB,OAAO,MAAM;EACtC,MAAM,EAAE,yBAAyB,MAAM,OAAO,8BAAA,MAAA,MAAA,EAAA,CAAA;EAC9C,MAAM,QAAQ,qBAAqB;EACnC,MAAM,UAAU,MAAM,qBAAqB,MAAM,MAAM,oBAAoB;EAC3E,OAAO,EAAE,KAAK;GACZ,QAAQ;GACR,MAAM,MAAM;GACZ;EACF,CAAC;CACH,CAAC;CAED,IAAI,SAAS,KAAK,MAAM;EACtB,QAAQ,MAAM,GAAG;EACjB,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;CACvD,CAAC;CAED,OAAO;AACT"}

package/dist/{artifact-server-4DiMvwhC.mjs → artifact-server-CP6LXQ9d.mjs}

@@ -1,4 +1,4 @@
-import { t as createApp } from "./app-DdWQF_zb.mjs";
+import { t as createApp } from "./app-CRd39JJ8.mjs";
 import { serve } from "@hono/node-server";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 //#region src/mcp/artifact-server.ts
@@ -45,4 +45,4 @@ async function ensureArtifactServer(port) {
 //#endregion
 export { ensureArtifactServer };
 
-//# sourceMappingURL=artifact-server-4DiMvwhC.mjs.map
+//# sourceMappingURL=artifact-server-CP6LXQ9d.mjs.map

package/dist/{artifact-server-4DiMvwhC.mjs.map → artifact-server-CP6LXQ9d.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"artifact-server-4DiMvwhC.mjs","names":["delay"],"sources":["../src/mcp/artifact-server.ts"],"sourcesContent":["import { serve } from '@hono/node-server'\nimport { setTimeout as delay } from 'node:timers/promises'\nimport { createApp } from '../server/app.js'\n\ntype ArtifactServer = ReturnType<typeof serve>\n\nconst servers = new Map<number, ArtifactServer>()\n\nasync function isHealthy(port: number): Promise<boolean> {\n  const controller = new AbortController()\n  const timeout = setTimeout(() => controller.abort(), 500)\n  try {\n    const response = await fetch(`http://127.0.0.1:${port}/health`, {\n      signal: controller.signal,\n    })\n    return response.ok\n  } catch {\n    return false\n  } finally {\n    clearTimeout(timeout)\n  }\n}\n\nasync function waitUntilHealthy(port: number): Promise<void> {\n  for (let attempt = 0; attempt < 20; attempt += 1) {\n    if (await isHealthy(port)) return\n    await delay(50)\n  }\n  throw new Error(`Graph report server did not become healthy on 127.0.0.1:${port}`)\n}\n\nexport async function ensureArtifactServer(port: number): Promise<void> {\n  if (servers.has(port)) return\n  if (await isHealthy(port)) return\n\n  const app = createApp()\n  const server = serve({\n    fetch: app.fetch,\n    hostname: '127.0.0.1',\n    port,\n  })\n  servers.set(port, server)\n  server.on('error', (err) => {\n    servers.delete(port)\n    process.stderr.write(`Chain Insights graph report server failed on 127.0.0.1:${port}: ${(err as Error).message}\\n`)\n  })\n\n  try {\n    await waitUntilHealthy(port)\n  } catch (err) {\n    servers.delete(port)\n    server.close()\n    throw err\n  }\n}\n\nexport function closeArtifactServers(): void {\n  for (const [port, server] of servers.entries()) {\n    server.close()\n    servers.delete(port)\n  }\n}\n"],"mappings":";;;;AAMA,MAAM,0BAAU,IAAI,IAA4B;AAEhD,eAAe,UAAU,MAAgC;CACvD,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,UAAU,iBAAiB,WAAW,MAAM,GAAG,GAAG;CACxD,IAAI;EAIF,QAAO,MAHgB,MAAM,oBAAoB,KAAK,UAAU,EAC9D,QAAQ,WAAW,OACrB,CAAC,GACe;CAClB,QAAQ;EACN,OAAO;CACT,UAAU;EACR,aAAa,OAAO;CACtB;AACF;AAEA,eAAe,iBAAiB,MAA6B;CAC3D,KAAK,IAAI,UAAU,GAAG,UAAU,IAAI,WAAW,GAAG;EAChD,IAAI,MAAM,UAAU,IAAI,GAAG;EAC3B,MAAMA,aAAM,EAAE;CAChB;CACA,MAAM,IAAI,MAAM,2DAA2D,MAAM;AACnF;AAEA,eAAsB,qBAAqB,MAA6B;CACtE,IAAI,QAAQ,IAAI,IAAI,GAAG;CACvB,IAAI,MAAM,UAAU,IAAI,GAAG;CAG3B,MAAM,SAAS,MAAM;EACnB,OAFU,UAED,EAAE;EACX,UAAU;EACV;CACF,CAAC;CACD,QAAQ,IAAI,MAAM,MAAM;CACxB,OAAO,GAAG,UAAU,QAAQ;EAC1B,QAAQ,OAAO,IAAI;EACnB,QAAQ,OAAO,MAAM,0DAA0D,KAAK,IAAK,IAAc,QAAQ,GAAG;CACpH,CAAC;CAED,IAAI;EACF,MAAM,iBAAiB,IAAI;CAC7B,SAAS,KAAK;EACZ,QAAQ,OAAO,IAAI;EACnB,OAAO,MAAM;EACb,MAAM;CACR;AACF"}
+{"version":3,"file":"artifact-server-CP6LXQ9d.mjs","names":["delay"],"sources":["../src/mcp/artifact-server.ts"],"sourcesContent":["import { serve } from '@hono/node-server'\nimport { setTimeout as delay } from 'node:timers/promises'\nimport { createApp } from '../server/app.js'\n\ntype ArtifactServer = ReturnType<typeof serve>\n\nconst servers = new Map<number, ArtifactServer>()\n\nasync function isHealthy(port: number): Promise<boolean> {\n  const controller = new AbortController()\n  const timeout = setTimeout(() => controller.abort(), 500)\n  try {\n    const response = await fetch(`http://127.0.0.1:${port}/health`, {\n      signal: controller.signal,\n    })\n    return response.ok\n  } catch {\n    return false\n  } finally {\n    clearTimeout(timeout)\n  }\n}\n\nasync function waitUntilHealthy(port: number): Promise<void> {\n  for (let attempt = 0; attempt < 20; attempt += 1) {\n    if (await isHealthy(port)) return\n    await delay(50)\n  }\n  throw new Error(`Graph report server did not become healthy on 127.0.0.1:${port}`)\n}\n\nexport async function ensureArtifactServer(port: number): Promise<void> {\n  if (servers.has(port)) return\n  if (await isHealthy(port)) return\n\n  const app = createApp()\n  const server = serve({\n    fetch: app.fetch,\n    hostname: '127.0.0.1',\n    port,\n  })\n  servers.set(port, server)\n  server.on('error', (err) => {\n    servers.delete(port)\n    process.stderr.write(`Chain Insights graph report server failed on 127.0.0.1:${port}: ${(err as Error).message}\\n`)\n  })\n\n  try {\n    await waitUntilHealthy(port)\n  } catch (err) {\n    servers.delete(port)\n    server.close()\n    throw err\n  }\n}\n\nexport function closeArtifactServers(): void {\n  for (const [port, server] of servers.entries()) {\n    server.close()\n    servers.delete(port)\n  }\n}\n"],"mappings":";;;;AAMA,MAAM,0BAAU,IAAI,IAA4B;AAEhD,eAAe,UAAU,MAAgC;CACvD,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,UAAU,iBAAiB,WAAW,MAAM,GAAG,GAAG;CACxD,IAAI;EAIF,QAAO,MAHgB,MAAM,oBAAoB,KAAK,UAAU,EAC9D,QAAQ,WAAW,OACrB,CAAC,GACe;CAClB,QAAQ;EACN,OAAO;CACT,UAAU;EACR,aAAa,OAAO;CACtB;AACF;AAEA,eAAe,iBAAiB,MAA6B;CAC3D,KAAK,IAAI,UAAU,GAAG,UAAU,IAAI,WAAW,GAAG;EAChD,IAAI,MAAM,UAAU,IAAI,GAAG;EAC3B,MAAMA,aAAM,EAAE;CAChB;CACA,MAAM,IAAI,MAAM,2DAA2D,MAAM;AACnF;AAEA,eAAsB,qBAAqB,MAA6B;CACtE,IAAI,QAAQ,IAAI,IAAI,GAAG;CACvB,IAAI,MAAM,UAAU,IAAI,GAAG;CAG3B,MAAM,SAAS,MAAM;EACnB,OAFU,UAED,EAAE;EACX,UAAU;EACV;CACF,CAAC;CACD,QAAQ,IAAI,MAAM,MAAM;CACxB,OAAO,GAAG,UAAU,QAAQ;EAC1B,QAAQ,OAAO,IAAI;EACnB,QAAQ,OAAO,MAAM,0DAA0D,KAAK,IAAK,IAAc,QAAQ,GAAG;CACpH,CAAC;CAED,IAAI;EACF,MAAM,iBAAiB,IAAI;CAC7B,SAAS,KAAK;EACZ,QAAQ,OAAO,IAAI;EACnB,OAAO,MAAM;EACb,MAAM;CACR;AACF"}

package/dist/{artifact-server-B-3ho4bk.cjs → artifact-server-XbN16DwU.cjs}

@@ -1,4 +1,4 @@
-const require_app = require("./app-DxlQE_P5.cjs");
+const require_app = require("./app-BxojXjtB.cjs");
 let _hono_node_server = require("@hono/node-server");
 let node_timers_promises = require("node:timers/promises");
 //#region src/mcp/artifact-server.ts

package/dist/cli.cjs

@@ -71,7 +71,7 @@ function optionalScamTopologyActivityPolicy(value) {
 	throw new Error("activity_policy must be one of: node_relative_only, global_incident_only");
 }
 async function withGraphMcpClient(name, fn) {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
 	const config = await loadConfig();
 	const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await Promise.resolve().then(() => require("./client-DPc2eyVN.cjs")).then((n) => n.client_exports);
 	const paymentFetch = await createConfiguredGraphMcpFetch(config);
@@ -92,7 +92,7 @@ function printMcpTextContent(result) {
 	for (const item of result.content ?? []) if (item.type === "text") console.log(item.text);
 }
 async function printNetworkCapabilities(opts) {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
 	const { fetchNetworkCapabilities, formatNetworkCapabilities } = await Promise.resolve().then(() => require("./capabilities-Bm0JDbV7.cjs"));
 	const document = await fetchNetworkCapabilities(await loadConfig());
 	if (opts.json) console.log(JSON.stringify(document, null, 2));
@@ -110,7 +110,7 @@ program.command("serve").description("Start local visualization server").option(
 	try {
 		const { requireWorkspaceRoot } = await Promise.resolve().then(() => require("./output-root-YIbl6PwF.cjs")).then((n) => n.output_root_exports);
 		const workspaceRoot = requireWorkspaceRoot();
-		const { startServer } = await Promise.resolve().then(() => require("./server-C3y1gQmZ.cjs")).then((n) => n.server_exports);
+		const { startServer } = await Promise.resolve().then(() => require("./server-BqVdWath.cjs")).then((n) => n.server_exports);
 		console.log(`Workspace: ${workspaceRoot}`);
 		startServer(parseInt(opts.port, 10));
 	} catch (err) {
@@ -119,7 +119,7 @@ program.command("serve").description("Start local visualization server").option(
 	}
 });
 program.command("status").description("Show toolkit status and configuration").action(async () => {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
 	const { findActiveWorkspace, activeDataDir } = await Promise.resolve().then(() => require("./active-BVr55kvW.cjs")).then((n) => n.active_exports);
 	const config = await loadConfig();
 	const workspace = findActiveWorkspace();
@@ -132,7 +132,7 @@ program.command("status").description("Show toolkit status and configuration").a
 });
 program.command("debug").description("Configure Graph MCP debug mode").addCommand(new commander.Command("on").description("Enable Graph MCP debug mode without x402 payments").requiredOption("--token <token>", "Debug bearer token").option("--endpoint <url>", "Graph MCP endpoint").action(async (opts) => {
 	try {
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "debug",
 			graphMcpAuthToken: opts.token,
@@ -147,7 +147,7 @@ program.command("debug").description("Configure Graph MCP debug mode").addComman
 	}
 })).addCommand(new commander.Command("off").description("Disable Graph MCP debug mode and use paid x402 calls").action(async () => {
 	try {
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "paid",
 			graphMcpAuthToken: ""
@@ -160,7 +160,7 @@ program.command("debug").description("Configure Graph MCP debug mode").addComman
 	}
 })).addCommand(new commander.Command("status").description("Show Graph MCP payment/debug mode").action(async () => {
 	try {
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
 		const config = await loadConfig();
 		console.log(`Graph MCP mode: ${config.graphMcpMode}`);
 		console.log(`Graph endpoint: ${config.graphMcpEndpoint}`);
@@ -175,7 +175,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 	try {
 		const normalizedKey = key.trim();
 		if (!normalizedKey) throw new Error("Test access key is required");
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "debug",
 			graphMcpAuthToken: normalizedKey,
@@ -190,7 +190,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 	}
 })).addCommand(new commander.Command("clear").description("Remove the Graph MCP test access key and use paid x402 calls").action(async () => {
 	try {
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "paid",
 			graphMcpAuthToken: ""
@@ -203,7 +203,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 	}
 })).addCommand(new commander.Command("status").description("Show Graph MCP test access key status").action(async () => {
 	try {
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
 		const config = await loadConfig();
 		console.log(`Graph endpoint: ${config.graphMcpEndpoint}`);
 		console.log(`Access key:     ${config.graphMcpAuthToken?.trim() ? "configured" : "not configured"}`);
@@ -215,7 +215,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 }));
 program.command("init").description("Initialize an investigation workspace").argument("[dir]", "Workspace directory to initialize", ".").option("--force", "Overwrite existing workspace files").action(async (dir, opts) => {
 	try {
-		const { initWorkspace } = await Promise.resolve().then(() => require("./init-BvpZtFiT.cjs"));
+		const { initWorkspace } = await Promise.resolve().then(() => require("./init-TCQY5RDJ.cjs"));
 		const result = await initWorkspace({
 			targetDir: dir,
 			force: opts.force
@@ -250,8 +250,8 @@ program.command("setup").description("Configure external MCP clients").addComman
 	}
 }));
 program.command("config").description("Read or write configuration values").addCommand(new commander.Command("get").argument("<key>", "Config key to read").action(async (key) => {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
-	const { CONFIG_KEYS } = await Promise.resolve().then(() => require("./schema-DN-KLkYN.cjs")).then((n) => n.schema_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+	const { CONFIG_KEYS } = await Promise.resolve().then(() => require("./schema-Vl9yuOFO.cjs")).then((n) => n.schema_exports);
 	if (!CONFIG_KEYS.includes(key)) {
 		console.error(`Unknown config key: ${key}`);
 		process.exit(1);
@@ -271,8 +271,8 @@ program.command("config").description("Read or write configuration values").addC
 		}
 		return;
 	}
-	const { loadConfig, saveConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
-	const { CONFIG_KEYS, DEFAULT_CONFIG } = await Promise.resolve().then(() => require("./schema-DN-KLkYN.cjs")).then((n) => n.schema_exports);
+	const { loadConfig, saveConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+	const { CONFIG_KEYS, DEFAULT_CONFIG } = await Promise.resolve().then(() => require("./schema-Vl9yuOFO.cjs")).then((n) => n.schema_exports);
 	const current = await loadConfig();
 	if (!CONFIG_KEYS.includes(key)) {
 		console.error(`Unknown config key: ${key}`);
@@ -305,7 +305,7 @@ program.command("wallet").description("Manage the local Base USDC payment wallet
 })).addCommand(new commander.Command("topup").description("Open a local browser page to top up the payment wallet").option("--no-open", "Print the top-up URL without opening a browser").option("--json", "Print machine-readable top-up metadata").action(async (opts) => {
 	try {
 		const { buildTopupInfo, getWalletAccount } = await Promise.resolve().then(() => require("./tools-DY8h0WbE.cjs")).then((n) => n.tools_exports);
-		const { startTopupServer } = await Promise.resolve().then(() => require("./topup-server-DjUjhNjv.cjs")).then((n) => n.topup_server_exports);
+		const { startTopupServer } = await Promise.resolve().then(() => require("./topup-server-yAaXYkJP.cjs")).then((n) => n.topup_server_exports);
 		const account = await getWalletAccount();
 		const url = await startTopupServer(account);
 		const info = buildTopupInfo(account.address, url);
@@ -338,7 +338,7 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 		const { loadSchema, saveSchema } = await Promise.resolve().then(() => require("./schema-cache-CJk1EL3L.cjs"));
 		const { formatToolsTable } = await Promise.resolve().then(() => require("./format-9NLBykEL.cjs"));
 		const { visibleRemoteTools } = await Promise.resolve().then(() => require("./tool-visibility-iAVQV3t0.cjs")).then((n) => n.tool_visibility_exports);
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BhYbhLDI.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
 		const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await Promise.resolve().then(() => require("./client-DPc2eyVN.cjs")).then((n) => n.client_exports);
 		const config = await loadConfig();
 		const graphMcpEndpoint = resolveGraphMcpEndpoint(config);
@@ -378,7 +378,7 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 				}));
 				return;
 			}
-			const { addressRisk } = await Promise.resolve().then(() => require("./public-tools-V7ON7goq.cjs"));
+			const { addressRisk } = await Promise.resolve().then(() => require("./public-tools-BC1fi0DV.cjs"));
 			const result = await addressRisk(client, {
 				address: opts.address,
 				network: opts.network,
@@ -406,7 +406,7 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 				}));
 				return;
 			}
-			const { trackFunds } = await Promise.resolve().then(() => require("./public-tools-V7ON7goq.cjs"));
+			const { trackFunds } = await Promise.resolve().then(() => require("./public-tools-BC1fi0DV.cjs"));
 			const caseId = opts.case ? await resolveCaseSelector(opts.case) : void 0;
 			const result = await trackFunds(client, config, {
 				trustedAddresses: opts.trustedAddresses,
@@ -429,7 +429,7 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 		const { requireWorkspaceRoot } = await Promise.resolve().then(() => require("./output-root-YIbl6PwF.cjs")).then((n) => n.output_root_exports);
 		requireWorkspaceRoot();
 		await withGraphMcpClient("chain-insights-cli-scam-topology", async (client, config) => {
-			const { scamTopology } = await Promise.resolve().then(() => require("./public-tools-V7ON7goq.cjs"));
+			const { scamTopology } = await Promise.resolve().then(() => require("./public-tools-BC1fi0DV.cjs"));
 			const incidentTimestampMs = optionalNumber(opts.incidentTimestampMs);
 			if (incidentTimestampMs === void 0) throw new Error("incident-timestamp-ms is required");
 			const caseId = opts.case ? await resolveCaseSelector(opts.case) : void 0;
@@ -448,6 +448,29 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 		console.error(err.message);
 		process.exit(1);
 	}
+})).addCommand(new commander.Command("stake-insights").description("Explain Bittensor staking behavior around an address, coldkey, or hotkey").requiredOption("--network <network>", "Network to query. Run `cia mcp networks` for supported networks.").option("--address <address>", "Full Bittensor address to inspect as either coldkey or hotkey").option("--coldkey <address>", "Full Bittensor coldkey address to inspect").option("--hotkey <address>", "Full Bittensor hotkey address to inspect").option("--netuid <number>", "Optional subnet netuid filter").option("--start-timestamp-ms <milliseconds>", "Optional inclusive lower activity timestamp bound").option("--end-timestamp-ms <milliseconds>", "Optional inclusive upper activity timestamp bound").option("--start-block <number>", "Optional start block. Current stake graph parity may require timestamp windows instead.").option("--end-block <number>", "Optional end block. Current stake graph parity may require timestamp windows instead.").option("--depth <number>", "Optional expansion depth limit, default 1, max 3").action(async (opts) => {
+	try {
+		await withGraphMcpClient("chain-insights-cli-stake-insights", async (client) => {
+			const { stakeInsights } = await Promise.resolve().then(() => require("./public-tools-BC1fi0DV.cjs"));
+			const result = await stakeInsights(client, {
+				network: opts.network,
+				address: opts.address,
+				coldkey: opts.coldkey,
+				hotkey: opts.hotkey,
+				netuid: optionalNumber(opts.netuid),
+				startTimestampMs: optionalNumber(opts.startTimestampMs),
+				endTimestampMs: optionalNumber(opts.endTimestampMs),
+				startBlock: optionalNumber(opts.startBlock),
+				endBlock: optionalNumber(opts.endBlock),
+				depth: optionalNumber(opts.depth)
+			});
+			console.log(result.summaryText);
+			console.log(JSON.stringify(result.structuredContent, null, 2));
+		});
+	} catch (err) {
+		console.error(err.message);
+		process.exit(1);
+	}
 })).addCommand(new commander.Command("call").description("Call an MCP tool directly (debug)").argument("<tool>", "Tool name to call").argument("[args...]", "Key=value arguments (e.g. address=0x1234 chain=ethereum)").action(async (tool, rawArgs) => {
 	try {
 		const { parseMcpCallArgs } = await Promise.resolve().then(() => require("./call-args-CcUV6gFS.cjs"));
@@ -456,7 +479,7 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 		assertPublicMcpToolName(tool);
 		await withGraphMcpClient("chain-insights-cli-call", async (client, config) => {
 			if (tool === "address_risk") {
-				const { addressRisk } = await Promise.resolve().then(() => require("./public-tools-V7ON7goq.cjs"));
+				const { addressRisk } = await Promise.resolve().then(() => require("./public-tools-BC1fi0DV.cjs"));
 				const result = await addressRisk(client, {
 					address: String(args["address"] ?? ""),
 					network: String(args["network"] ?? ""),
@@ -466,7 +489,7 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 				return;
 			}
 			if (tool === "track_funds") {
-				const { trackFunds } = await Promise.resolve().then(() => require("./public-tools-V7ON7goq.cjs"));
+				const { trackFunds } = await Promise.resolve().then(() => require("./public-tools-BC1fi0DV.cjs"));
 				const result = await trackFunds(client, config, {
 					trustedAddresses: args["trusted_addresses"] ?? "",
 					untrustedAddresses: args["untrusted_addresses"],
@@ -481,7 +504,7 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 				return;
 			}
 			if (tool === "scam_topology") {
-				const { scamTopology } = await Promise.resolve().then(() => require("./public-tools-V7ON7goq.cjs"));
+				const { scamTopology } = await Promise.resolve().then(() => require("./public-tools-BC1fi0DV.cjs"));
 				const victimAddress = String(args["victim_address"] ?? "").trim();
 				if (!victimAddress) throw new Error("victim_address is required");
 				const incidentTimestampMs = optionalNumberArg(args["incident_timestamp_ms"], "incident_timestamp_ms");
@@ -498,6 +521,24 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 				console.log(JSON.stringify(result.structuredContent, null, 2));
 				return;
 			}
+			if (tool === "stake_insights") {
+				const { stakeInsights } = await Promise.resolve().then(() => require("./public-tools-BC1fi0DV.cjs"));
+				const result = await stakeInsights(client, {
+					network: String(args["network"] ?? ""),
+					address: args["address"] === void 0 ? void 0 : String(args["address"]),
+					coldkey: args["coldkey"] === void 0 ? void 0 : String(args["coldkey"]),
+					hotkey: args["hotkey"] === void 0 ? void 0 : String(args["hotkey"]),
+					netuid: optionalNumberArg(args["netuid"], "netuid"),
+					startTimestampMs: optionalNumberArg(args["start_timestamp_ms"], "start_timestamp_ms"),
+					endTimestampMs: optionalNumberArg(args["end_timestamp_ms"], "end_timestamp_ms"),
+					startBlock: optionalNumberArg(args["start_block"], "start_block"),
+					endBlock: optionalNumberArg(args["end_block"], "end_block"),
+					depth: optionalNumberArg(args["depth"] ?? args["max_hops"], "depth")
+				});
+				console.log(result.summaryText);
+				console.log(JSON.stringify(result.structuredContent, null, 2));
+				return;
+			}
 			printMcpTextContent(await client.callTool({
 				name: tool,
 				arguments: args
@@ -681,7 +722,7 @@ program.command("playbook").description("Run and manage investigation playbooks"
 			console.error(`Invalid --from value: "${opts.from}". Must be a positive integer.`);
 			process.exit(1);
 		}
-		const { PlaybookRunner } = await Promise.resolve().then(() => require("./runner-CCA7SJ7X.cjs"));
+		const { PlaybookRunner } = await Promise.resolve().then(() => require("./runner-ZYowxCVl.cjs"));
 		await PlaybookRunner.run(definition, {
 			caseId: opts.case,
 			from: fromN,
@@ -736,7 +777,7 @@ program.command("viz").description("Generate money flow visualization").argument
 			caseId,
 			dataFile: opts.data
 		});
-		const { startServer } = await Promise.resolve().then(() => require("./server-C3y1gQmZ.cjs")).then((n) => n.server_exports);
+		const { startServer } = await Promise.resolve().then(() => require("./server-BqVdWath.cjs")).then((n) => n.server_exports);
 		const port = parseInt(opts.port, 10);
 		startServer(port);
 		const url = `http://127.0.0.1:${port}/viz/${result.vizId}`;