chain-insights 0.22.2 → 0.22.3

package/README.md

@@ -80,8 +80,8 @@ Never touches:
 Upstream:
 
 - **Chain Insights Graph MCP endpoint** — all graph queries and AML
-  primitives. Configured via `graphMcpEndpoint`; defaults to a local
-  endpoint.
+  primitives. Configured via `graphMcpEndpoint`; defaults to the public
+  production endpoint `https://mcp.chain-insights.ai/`.
 - **Base mainnet RPC** — wallet balance and payment only
   (`BASE_RPC_URL` override). Not a graph-support claim.
 
@@ -253,16 +253,17 @@ More query examples (manual fund-flow reads, pagination):
 ## Configure
 
 `cia` uses `graphMcpEndpoint` for all Chain Insights Graph calls. The npm
-package does not hardcode a hosted endpoint.
+package uses the public production endpoint by default, so a fresh install can
+run `cia networks` immediately.
 
-Local development endpoint (default):
+For local development, override the default explicitly:
 
 ```bash
 cia config set graphMcpEndpoint http://127.0.0.1:8012/mcp
 ```
 
-Public production Graph (operator configuration, never a package default).
-Use the host root. Do not add `/mcp`.
+The public production Graph is already the default. Use the host root. Do not
+add `/mcp`.
 
 ```bash
 cia config set graphMcpEndpoint https://mcp.chain-insights.ai/
@@ -279,7 +280,7 @@ Configuration precedence:
 1. `CHAIN_INSIGHTS_GRAPH_MCP_ENDPOINT` env var (`GRAPH_MCP_ENDPOINT`
    legacy alias also supported).
 2. `cia config set graphMcpEndpoint ...` saved value.
-3. Local default `http://127.0.0.1:8012/mcp`.
+3. Public production default `https://mcp.chain-insights.ai/`.
 
 Validation rules:
 

package/dist/{app-l9JE6bt3.cjs → app-BHRl5oDo.cjs}

@@ -84,7 +84,7 @@ function createApp() {
 		ts: Date.now()
 	}));
 	app.get("/status", async (c) => {
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 		const config = await loadConfig();
 		return c.json({
 			dataDir: config.dataDir,

package/dist/{app-7NRCqx_Q.mjs → app-BeZyCVuz.mjs}

@@ -82,7 +82,7 @@ function createApp() {
 		ts: Date.now()
 	}));
 	app.get("/status", async (c) => {
-		const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+		const { loadConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 		const config = await loadConfig();
 		return c.json({
 			dataDir: config.dataDir,
@@ -137,4 +137,4 @@ function createApp() {
 //#endregion
 export { createApp as t };
 
-//# sourceMappingURL=app-7NRCqx_Q.mjs.map
+//# sourceMappingURL=app-BeZyCVuz.mjs.map

package/dist/{app-7NRCqx_Q.mjs.map → app-BeZyCVuz.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"app-7NRCqx_Q.mjs","names":[],"sources":["../src/server/app.ts"],"sourcesContent":["import { Hono } from 'hono'\nimport { lstat, readFile, readdir, realpath } from 'node:fs/promises'\nimport path from 'node:path'\nimport { workspaceOutputPaths } from '../workspace/output-root.js'\n\nconst WORKSPACE_TREE_ROOTS = [\n  'artifacts',\n  'entities',\n  'reports',\n  'sessions',\n  '.chain-insights/schema',\n]\nconst WORKSPACE_TREE_MAX_DEPTH = 4\n\ninterface WorkspaceTreeEntry {\n  path: string\n  type: 'file' | 'directory' | 'symlink'\n  size?: number\n}\n\nfunction withinRoot(root: string, target: string): boolean {\n  const relative = path.relative(path.resolve(root), path.resolve(target))\n  return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative))\n}\n\nasync function realPathWithinRoot(root: string, target: string): Promise<boolean> {\n  try {\n    const [realRoot, realTarget] = await Promise.all([realpath(root), realpath(target)])\n    return withinRoot(realRoot, realTarget)\n  } catch {\n    return false\n  }\n}\n\nfunction toWorkspaceRelative(root: string, target: string): string {\n  return path.relative(root, target).split(path.sep).join('/')\n}\n\nasync function listWorkspaceEntries(\n  workspaceRoot: string,\n  roots = WORKSPACE_TREE_ROOTS,\n  maxDepth = WORKSPACE_TREE_MAX_DEPTH\n): Promise<WorkspaceTreeEntry[]> {\n  const entries: WorkspaceTreeEntry[] = []\n  const root = path.resolve(workspaceRoot)\n\n  async function visit(target: string, depth: number): Promise<void> {\n    const resolved = path.resolve(target)\n    if (!withinRoot(root, resolved)) return\n\n    let info: Awaited<ReturnType<typeof lstat>>\n    try {\n      info = await lstat(resolved)\n    } catch {\n      return\n    }\n\n    const type = info.isSymbolicLink()\n      ? 'symlink'\n      : info.isDirectory()\n        ? 'directory'\n        : info.isFile()\n          ? 'file'\n          : null\n    if (!type) return\n\n    const entry: WorkspaceTreeEntry = {\n      path: toWorkspaceRelative(root, resolved),\n      type,\n    }\n    if (type === 'file') entry.size = info.size\n    entries.push(entry)\n\n    if (type !== 'directory' || depth >= maxDepth) return\n    if (!(await realPathWithinRoot(root, resolved))) return\n\n    let children: string[]\n    try {\n      children = await readdir(resolved)\n    } catch {\n      return\n    }\n\n    for (const child of children.sort()) {\n      await visit(path.join(resolved, child), depth + 1)\n    }\n  }\n\n  for (const rootName of roots) {\n    const target = path.resolve(root, rootName)\n    if (withinRoot(root, target)) await visit(target, 0)\n  }\n\n  return entries\n}\n\nasync function findVizHtml(vizId: string): Promise<string | null> {\n  const filename = `${vizId}.html`\n  const paths = workspaceOutputPaths()\n  const vizPath = path.join(paths.publishedRoot, 'viz', filename)\n  try {\n    return await readFile(vizPath, 'utf-8')\n  } catch {\n    return null\n  }\n}\n\nfunction isSafeGraphReportFilename(filename: string): boolean {\n  return (\n    filename.endsWith('.graph.json') &&\n    /^[A-Za-z0-9._-]+$/.test(filename) &&\n    !filename.includes('..') &&\n    !filename.includes('/') &&\n    !filename.includes('\\\\')\n  )\n}\n\nexport function createApp(): Hono {\n  const app = new Hono()\n\n  app.get('/health', (c) => c.json({ ok: true, ts: Date.now() }))\n\n  app.get('/status', async (c) => {\n    const { loadConfig } = await import('../config/index.js')\n    const config = await loadConfig()\n    return c.json({\n      dataDir: config.dataDir,\n      graphMcpMode: config.graphMcpMode,\n      server: 'running',\n    })\n  })\n\n  app.get('/viz/:id', async (c) => {\n    const id = c.req.param('id')\n    if (!/^[a-zA-Z0-9_-]+$/.test(id)) {\n      return c.json({ error: 'Invalid visualization ID' }, 400)\n    }\n    const html = await findVizHtml(id)\n    if (!html) {\n      return c.json({ error: 'Visualization not found' }, 404)\n    }\n    return c.html(html)\n  })\n\n  app.get('/graph-reports/:filename', async (c) => {\n    const filename = c.req.param('filename')\n    if (!isSafeGraphReportFilename(filename)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const graphPath = path.resolve(paths.reportGraphsRoot, filename)\n    if (!withinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n    if (!(await realPathWithinRoot(paths.reportGraphsRoot, graphPath))) {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n\n    try {\n      const graph = await readFile(graphPath, 'utf-8')\n      return c.body(graph, 200, {\n        'Content-Type': 'application/json',\n        'Access-Control-Allow-Origin': '*',\n      })\n    } catch {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n  })\n\n  app.get('/graph-reports/*', (c) => {\n    return c.json({ error: 'Invalid graph report filename' }, 400)\n  })\n\n  app.get('/workspace/tree', async (c) => {\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const entries = await listWorkspaceEntries(paths.root, WORKSPACE_TREE_ROOTS)\n    return c.json({\n      schema: 'chain-insights.workspace-tree.v1',\n      root: paths.root,\n      entries,\n    })\n  })\n\n  app.onError((err, c) => {\n    console.error(err)\n    return c.json({ error: 'Internal server error' }, 500)\n  })\n\n  return app\n}\n"],"mappings":";;;;;AAKA,MAAM,uBAAuB;CAC3B;CACA;CACA;CACA;CACA;AACF;AACA,MAAM,2BAA2B;AAQjC,SAAS,WAAW,MAAc,QAAyB;CACzD,MAAM,WAAW,KAAK,SAAS,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,MAAM,CAAC;CACvE,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,QAAQ;AACpF;AAEA,eAAe,mBAAmB,MAAc,QAAkC;CAChF,IAAI;EACF,MAAM,CAAC,UAAU,cAAc,MAAM,QAAQ,IAAI,CAAC,SAAS,IAAI,GAAG,SAAS,MAAM,CAAC,CAAC;EACnF,OAAO,WAAW,UAAU,UAAU;CACxC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,oBAAoB,MAAc,QAAwB;CACjE,OAAO,KAAK,SAAS,MAAM,MAAM,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG;AAC7D;AAEA,eAAe,qBACb,eACA,QAAQ,sBACR,WAAW,0BACoB;CAC/B,MAAM,UAAgC,CAAC;CACvC,MAAM,OAAO,KAAK,QAAQ,aAAa;CAEvC,eAAe,MAAM,QAAgB,OAA8B;EACjE,MAAM,WAAW,KAAK,QAAQ,MAAM;EACpC,IAAI,CAAC,WAAW,MAAM,QAAQ,GAAG;EAEjC,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,MAAM,QAAQ;EAC7B,QAAQ;GACN;EACF;EAEA,MAAM,OAAO,KAAK,eAAe,IAC7B,YACA,KAAK,YAAY,IACf,cACA,KAAK,OAAO,IACV,SACA;EACR,IAAI,CAAC,MAAM;EAEX,MAAM,QAA4B;GAChC,MAAM,oBAAoB,MAAM,QAAQ;GACxC;EACF;EACA,IAAI,SAAS,QAAQ,MAAM,OAAO,KAAK;EACvC,QAAQ,KAAK,KAAK;EAElB,IAAI,SAAS,eAAe,SAAS,UAAU;EAC/C,IAAI,CAAE,MAAM,mBAAmB,MAAM,QAAQ,GAAI;EAEjD,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,QAAQ,QAAQ;EACnC,QAAQ;GACN;EACF;EAEA,KAAK,MAAM,SAAS,SAAS,KAAK,GAChC,MAAM,MAAM,KAAK,KAAK,UAAU,KAAK,GAAG,QAAQ,CAAC;CAErD;CAEA,KAAK,MAAM,YAAY,OAAO;EAC5B,MAAM,SAAS,KAAK,QAAQ,MAAM,QAAQ;EAC1C,IAAI,WAAW,MAAM,MAAM,GAAG,MAAM,MAAM,QAAQ,CAAC;CACrD;CAEA,OAAO;AACT;AAEA,eAAe,YAAY,OAAuC;CAChE,MAAM,WAAW,GAAG,MAAM;CAC1B,MAAM,QAAQ,qBAAqB;CACnC,MAAM,UAAU,KAAK,KAAK,MAAM,eAAe,OAAO,QAAQ;CAC9D,IAAI;EACF,OAAO,MAAM,SAAS,SAAS,OAAO;CACxC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,OACE,SAAS,SAAS,aAAa,KAC/B,oBAAoB,KAAK,QAAQ,KACjC,CAAC,SAAS,SAAS,IAAI,KACvB,CAAC,SAAS,SAAS,GAAG,KACtB,CAAC,SAAS,SAAS,IAAI;AAE3B;AAEA,SAAgB,YAAkB;CAChC,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,YAAY,MAAM,EAAE,KAAK;EAAE,IAAI;EAAM,IAAI,KAAK,IAAI;CAAE,CAAC,CAAC;CAE9D,IAAI,IAAI,WAAW,OAAO,MAAM;EAC9B,MAAM,EAAE,eAAe,MAAM,OAAO,wBAAqB,CAAA,MAAA,MAAA,EAAA,CAAA;EACzD,MAAM,SAAS,MAAM,WAAW;EAChC,OAAO,EAAE,KAAK;GACZ,SAAS,OAAO;GAChB,cAAc,OAAO;GACrB,QAAQ;EACV,CAAC;CACH,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,IAAI,CAAC,mBAAmB,KAAK,EAAE,GAC7B,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;EAE1D,MAAM,OAAO,MAAM,YAAY,EAAE;EACjC,IAAI,CAAC,MACH,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAEzD,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,4BAA4B,OAAO,MAAM;EAC/C,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;EACvC,IAAI,CAAC,0BAA0B,QAAQ,GACrC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAG/D,MAAM,EAAE,yBAAyB,MAAM,OAAO,6BAA8B,CAAA,MAAA,MAAA,EAAA,CAAA;EAC5E,MAAM,QAAQ,qBAAqB;EACnC,MAAM,YAAY,KAAK,QAAQ,MAAM,kBAAkB,QAAQ;EAC/D,IAAI,CAAC,WAAW,MAAM,kBAAkB,SAAS,GAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAE/D,IAAI,CAAE,MAAM,mBAAmB,MAAM,kBAAkB,SAAS,GAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EAGxD,IAAI;GACF,MAAM,QAAQ,MAAM,SAAS,WAAW,OAAO;GAC/C,OAAO,EAAE,KAAK,OAAO,KAAK;IACxB,gBAAgB;IAChB,+BAA+B;GACjC,CAAC;EACH,QAAQ;GACN,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACxD;CACF,CAAC;CAED,IAAI,IAAI,qBAAqB,MAAM;EACjC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;CAC/D,CAAC;CAED,IAAI,IAAI,mBAAmB,OAAO,MAAM;EACtC,MAAM,EAAE,yBAAyB,MAAM,OAAO,6BAA8B,CAAA,MAAA,MAAA,EAAA,CAAA;EAC5E,MAAM,QAAQ,qBAAqB;EACnC,MAAM,UAAU,MAAM,qBAAqB,MAAM,MAAM,oBAAoB;EAC3E,OAAO,EAAE,KAAK;GACZ,QAAQ;GACR,MAAM,MAAM;GACZ;EACF,CAAC;CACH,CAAC;CAED,IAAI,SAAS,KAAK,MAAM;EACtB,QAAQ,MAAM,GAAG;EACjB,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;CACvD,CAAC;CAED,OAAO;AACT"}
+{"version":3,"file":"app-BeZyCVuz.mjs","names":[],"sources":["../src/server/app.ts"],"sourcesContent":["import { Hono } from 'hono'\nimport { lstat, readFile, readdir, realpath } from 'node:fs/promises'\nimport path from 'node:path'\nimport { workspaceOutputPaths } from '../workspace/output-root.js'\n\nconst WORKSPACE_TREE_ROOTS = [\n  'artifacts',\n  'entities',\n  'reports',\n  'sessions',\n  '.chain-insights/schema',\n]\nconst WORKSPACE_TREE_MAX_DEPTH = 4\n\ninterface WorkspaceTreeEntry {\n  path: string\n  type: 'file' | 'directory' | 'symlink'\n  size?: number\n}\n\nfunction withinRoot(root: string, target: string): boolean {\n  const relative = path.relative(path.resolve(root), path.resolve(target))\n  return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative))\n}\n\nasync function realPathWithinRoot(root: string, target: string): Promise<boolean> {\n  try {\n    const [realRoot, realTarget] = await Promise.all([realpath(root), realpath(target)])\n    return withinRoot(realRoot, realTarget)\n  } catch {\n    return false\n  }\n}\n\nfunction toWorkspaceRelative(root: string, target: string): string {\n  return path.relative(root, target).split(path.sep).join('/')\n}\n\nasync function listWorkspaceEntries(\n  workspaceRoot: string,\n  roots = WORKSPACE_TREE_ROOTS,\n  maxDepth = WORKSPACE_TREE_MAX_DEPTH\n): Promise<WorkspaceTreeEntry[]> {\n  const entries: WorkspaceTreeEntry[] = []\n  const root = path.resolve(workspaceRoot)\n\n  async function visit(target: string, depth: number): Promise<void> {\n    const resolved = path.resolve(target)\n    if (!withinRoot(root, resolved)) return\n\n    let info: Awaited<ReturnType<typeof lstat>>\n    try {\n      info = await lstat(resolved)\n    } catch {\n      return\n    }\n\n    const type = info.isSymbolicLink()\n      ? 'symlink'\n      : info.isDirectory()\n        ? 'directory'\n        : info.isFile()\n          ? 'file'\n          : null\n    if (!type) return\n\n    const entry: WorkspaceTreeEntry = {\n      path: toWorkspaceRelative(root, resolved),\n      type,\n    }\n    if (type === 'file') entry.size = info.size\n    entries.push(entry)\n\n    if (type !== 'directory' || depth >= maxDepth) return\n    if (!(await realPathWithinRoot(root, resolved))) return\n\n    let children: string[]\n    try {\n      children = await readdir(resolved)\n    } catch {\n      return\n    }\n\n    for (const child of children.sort()) {\n      await visit(path.join(resolved, child), depth + 1)\n    }\n  }\n\n  for (const rootName of roots) {\n    const target = path.resolve(root, rootName)\n    if (withinRoot(root, target)) await visit(target, 0)\n  }\n\n  return entries\n}\n\nasync function findVizHtml(vizId: string): Promise<string | null> {\n  const filename = `${vizId}.html`\n  const paths = workspaceOutputPaths()\n  const vizPath = path.join(paths.publishedRoot, 'viz', filename)\n  try {\n    return await readFile(vizPath, 'utf-8')\n  } catch {\n    return null\n  }\n}\n\nfunction isSafeGraphReportFilename(filename: string): boolean {\n  return (\n    filename.endsWith('.graph.json') &&\n    /^[A-Za-z0-9._-]+$/.test(filename) &&\n    !filename.includes('..') &&\n    !filename.includes('/') &&\n    !filename.includes('\\\\')\n  )\n}\n\nexport function createApp(): Hono {\n  const app = new Hono()\n\n  app.get('/health', (c) => c.json({ ok: true, ts: Date.now() }))\n\n  app.get('/status', async (c) => {\n    const { loadConfig } = await import('../config/index.js')\n    const config = await loadConfig()\n    return c.json({\n      dataDir: config.dataDir,\n      graphMcpMode: config.graphMcpMode,\n      server: 'running',\n    })\n  })\n\n  app.get('/viz/:id', async (c) => {\n    const id = c.req.param('id')\n    if (!/^[a-zA-Z0-9_-]+$/.test(id)) {\n      return c.json({ error: 'Invalid visualization ID' }, 400)\n    }\n    const html = await findVizHtml(id)\n    if (!html) {\n      return c.json({ error: 'Visualization not found' }, 404)\n    }\n    return c.html(html)\n  })\n\n  app.get('/graph-reports/:filename', async (c) => {\n    const filename = c.req.param('filename')\n    if (!isSafeGraphReportFilename(filename)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const graphPath = path.resolve(paths.reportGraphsRoot, filename)\n    if (!withinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n    if (!(await realPathWithinRoot(paths.reportGraphsRoot, graphPath))) {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n\n    try {\n      const graph = await readFile(graphPath, 'utf-8')\n      return c.body(graph, 200, {\n        'Content-Type': 'application/json',\n        'Access-Control-Allow-Origin': '*',\n      })\n    } catch {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n  })\n\n  app.get('/graph-reports/*', (c) => {\n    return c.json({ error: 'Invalid graph report filename' }, 400)\n  })\n\n  app.get('/workspace/tree', async (c) => {\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const entries = await listWorkspaceEntries(paths.root, WORKSPACE_TREE_ROOTS)\n    return c.json({\n      schema: 'chain-insights.workspace-tree.v1',\n      root: paths.root,\n      entries,\n    })\n  })\n\n  app.onError((err, c) => {\n    console.error(err)\n    return c.json({ error: 'Internal server error' }, 500)\n  })\n\n  return app\n}\n"],"mappings":";;;;;AAKA,MAAM,uBAAuB;CAC3B;CACA;CACA;CACA;CACA;AACF;AACA,MAAM,2BAA2B;AAQjC,SAAS,WAAW,MAAc,QAAyB;CACzD,MAAM,WAAW,KAAK,SAAS,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,MAAM,CAAC;CACvE,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,QAAQ;AACpF;AAEA,eAAe,mBAAmB,MAAc,QAAkC;CAChF,IAAI;EACF,MAAM,CAAC,UAAU,cAAc,MAAM,QAAQ,IAAI,CAAC,SAAS,IAAI,GAAG,SAAS,MAAM,CAAC,CAAC;EACnF,OAAO,WAAW,UAAU,UAAU;CACxC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,oBAAoB,MAAc,QAAwB;CACjE,OAAO,KAAK,SAAS,MAAM,MAAM,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG;AAC7D;AAEA,eAAe,qBACb,eACA,QAAQ,sBACR,WAAW,0BACoB;CAC/B,MAAM,UAAgC,CAAC;CACvC,MAAM,OAAO,KAAK,QAAQ,aAAa;CAEvC,eAAe,MAAM,QAAgB,OAA8B;EACjE,MAAM,WAAW,KAAK,QAAQ,MAAM;EACpC,IAAI,CAAC,WAAW,MAAM,QAAQ,GAAG;EAEjC,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,MAAM,QAAQ;EAC7B,QAAQ;GACN;EACF;EAEA,MAAM,OAAO,KAAK,eAAe,IAC7B,YACA,KAAK,YAAY,IACf,cACA,KAAK,OAAO,IACV,SACA;EACR,IAAI,CAAC,MAAM;EAEX,MAAM,QAA4B;GAChC,MAAM,oBAAoB,MAAM,QAAQ;GACxC;EACF;EACA,IAAI,SAAS,QAAQ,MAAM,OAAO,KAAK;EACvC,QAAQ,KAAK,KAAK;EAElB,IAAI,SAAS,eAAe,SAAS,UAAU;EAC/C,IAAI,CAAE,MAAM,mBAAmB,MAAM,QAAQ,GAAI;EAEjD,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,QAAQ,QAAQ;EACnC,QAAQ;GACN;EACF;EAEA,KAAK,MAAM,SAAS,SAAS,KAAK,GAChC,MAAM,MAAM,KAAK,KAAK,UAAU,KAAK,GAAG,QAAQ,CAAC;CAErD;CAEA,KAAK,MAAM,YAAY,OAAO;EAC5B,MAAM,SAAS,KAAK,QAAQ,MAAM,QAAQ;EAC1C,IAAI,WAAW,MAAM,MAAM,GAAG,MAAM,MAAM,QAAQ,CAAC;CACrD;CAEA,OAAO;AACT;AAEA,eAAe,YAAY,OAAuC;CAChE,MAAM,WAAW,GAAG,MAAM;CAC1B,MAAM,QAAQ,qBAAqB;CACnC,MAAM,UAAU,KAAK,KAAK,MAAM,eAAe,OAAO,QAAQ;CAC9D,IAAI;EACF,OAAO,MAAM,SAAS,SAAS,OAAO;CACxC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,OACE,SAAS,SAAS,aAAa,KAC/B,oBAAoB,KAAK,QAAQ,KACjC,CAAC,SAAS,SAAS,IAAI,KACvB,CAAC,SAAS,SAAS,GAAG,KACtB,CAAC,SAAS,SAAS,IAAI;AAE3B;AAEA,SAAgB,YAAkB;CAChC,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,YAAY,MAAM,EAAE,KAAK;EAAE,IAAI;EAAM,IAAI,KAAK,IAAI;CAAE,CAAC,CAAC;CAE9D,IAAI,IAAI,WAAW,OAAO,MAAM;EAC9B,MAAM,EAAE,eAAe,MAAM,OAAO,wBAAqB,CAAA,MAAA,MAAA,EAAA,CAAA;EACzD,MAAM,SAAS,MAAM,WAAW;EAChC,OAAO,EAAE,KAAK;GACZ,SAAS,OAAO;GAChB,cAAc,OAAO;GACrB,QAAQ;EACV,CAAC;CACH,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,IAAI,CAAC,mBAAmB,KAAK,EAAE,GAC7B,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;EAE1D,MAAM,OAAO,MAAM,YAAY,EAAE;EACjC,IAAI,CAAC,MACH,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAEzD,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,4BAA4B,OAAO,MAAM;EAC/C,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;EACvC,IAAI,CAAC,0BAA0B,QAAQ,GACrC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAG/D,MAAM,EAAE,yBAAyB,MAAM,OAAO,6BAA8B,CAAA,MAAA,MAAA,EAAA,CAAA;EAC5E,MAAM,QAAQ,qBAAqB;EACnC,MAAM,YAAY,KAAK,QAAQ,MAAM,kBAAkB,QAAQ;EAC/D,IAAI,CAAC,WAAW,MAAM,kBAAkB,SAAS,GAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAE/D,IAAI,CAAE,MAAM,mBAAmB,MAAM,kBAAkB,SAAS,GAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EAGxD,IAAI;GACF,MAAM,QAAQ,MAAM,SAAS,WAAW,OAAO;GAC/C,OAAO,EAAE,KAAK,OAAO,KAAK;IACxB,gBAAgB;IAChB,+BAA+B;GACjC,CAAC;EACH,QAAQ;GACN,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACxD;CACF,CAAC;CAED,IAAI,IAAI,qBAAqB,MAAM;EACjC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;CAC/D,CAAC;CAED,IAAI,IAAI,mBAAmB,OAAO,MAAM;EACtC,MAAM,EAAE,yBAAyB,MAAM,OAAO,6BAA8B,CAAA,MAAA,MAAA,EAAA,CAAA;EAC5E,MAAM,QAAQ,qBAAqB;EACnC,MAAM,UAAU,MAAM,qBAAqB,MAAM,MAAM,oBAAoB;EAC3E,OAAO,EAAE,KAAK;GACZ,QAAQ;GACR,MAAM,MAAM;GACZ;EACF,CAAC;CACH,CAAC;CAED,IAAI,SAAS,KAAK,MAAM;EACtB,QAAQ,MAAM,GAAG;EACjB,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;CACvD,CAAC;CAED,OAAO;AACT"}

package/dist/{artifact-server-CH-asxF5.cjs → artifact-server-B8WKXtXr.cjs}

@@ -1,4 +1,4 @@
-const require_app = require("./app-l9JE6bt3.cjs");
+const require_app = require("./app-BHRl5oDo.cjs");
 let _hono_node_server = require("@hono/node-server");
 let node_timers_promises = require("node:timers/promises");
 //#region src/mcp/artifact-server.ts

package/dist/{artifact-server-DoxJr0z8.mjs → artifact-server-C1fETWsc.mjs}

@@ -1,4 +1,4 @@
-import { t as createApp } from "./app-7NRCqx_Q.mjs";
+import { t as createApp } from "./app-BeZyCVuz.mjs";
 import { serve } from "@hono/node-server";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 //#region src/mcp/artifact-server.ts
@@ -46,4 +46,4 @@ async function ensureArtifactServer(port) {
 //#endregion
 export { ensureArtifactServer };
 
-//# sourceMappingURL=artifact-server-DoxJr0z8.mjs.map
+//# sourceMappingURL=artifact-server-C1fETWsc.mjs.map

package/dist/{artifact-server-DoxJr0z8.mjs.map → artifact-server-C1fETWsc.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"artifact-server-DoxJr0z8.mjs","names":["delay"],"sources":["../src/mcp/artifact-server.ts"],"sourcesContent":["import { serve } from '@hono/node-server'\nimport { setTimeout as delay } from 'node:timers/promises'\nimport { createApp } from '../server/app.js'\n\ntype ArtifactServer = ReturnType<typeof serve>\n\nconst servers = new Map<number, ArtifactServer>()\n\nasync function isHealthy(port: number): Promise<boolean> {\n  const controller = new AbortController()\n  const timeout = setTimeout(() => controller.abort(), 500)\n  try {\n    const response = await fetch(`http://127.0.0.1:${port}/health`, {\n      signal: controller.signal,\n    })\n    return response.ok\n  } catch {\n    return false\n  } finally {\n    clearTimeout(timeout)\n  }\n}\n\nasync function waitUntilHealthy(port: number): Promise<void> {\n  for (let attempt = 0; attempt < 20; attempt += 1) {\n    if (await isHealthy(port)) return\n    await delay(50)\n  }\n  throw new Error(`Graph report server did not become healthy on 127.0.0.1:${port}`)\n}\n\nexport async function ensureArtifactServer(port: number): Promise<void> {\n  if (servers.has(port)) return\n  if (await isHealthy(port)) return\n\n  const app = createApp()\n  const server = serve({\n    fetch: app.fetch,\n    hostname: '127.0.0.1',\n    port,\n  })\n  servers.set(port, server)\n  server.on('error', (err) => {\n    servers.delete(port)\n    process.stderr.write(\n      `Chain Insights graph report server failed on 127.0.0.1:${port}: ${(err as Error).message}\\n`\n    )\n  })\n\n  try {\n    await waitUntilHealthy(port)\n  } catch (err) {\n    servers.delete(port)\n    server.close()\n    throw err\n  }\n}\n\nexport function closeArtifactServers(): void {\n  for (const [port, server] of servers.entries()) {\n    server.close()\n    servers.delete(port)\n  }\n}\n"],"mappings":";;;;AAMA,MAAM,0BAAU,IAAI,IAA4B;AAEhD,eAAe,UAAU,MAAgC;CACvD,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,UAAU,iBAAiB,WAAW,MAAM,GAAG,GAAG;CACxD,IAAI;EAIF,QAAO,MAHgB,MAAM,oBAAoB,KAAK,UAAU,EAC9D,QAAQ,WAAW,OACrB,CAAC,EAAA,CACe;CAClB,QAAQ;EACN,OAAO;CACT,UAAU;EACR,aAAa,OAAO;CACtB;AACF;AAEA,eAAe,iBAAiB,MAA6B;CAC3D,KAAK,IAAI,UAAU,GAAG,UAAU,IAAI,WAAW,GAAG;EAChD,IAAI,MAAM,UAAU,IAAI,GAAG;EAC3B,MAAMA,aAAM,EAAE;CAChB;CACA,MAAM,IAAI,MAAM,2DAA2D,MAAM;AACnF;AAEA,eAAsB,qBAAqB,MAA6B;CACtE,IAAI,QAAQ,IAAI,IAAI,GAAG;CACvB,IAAI,MAAM,UAAU,IAAI,GAAG;CAE3B,MAAM,MAAM,UAAU;CACtB,MAAM,SAAS,MAAM;EACnB,OAAO,IAAI;EACX,UAAU;EACV;CACF,CAAC;CACD,QAAQ,IAAI,MAAM,MAAM;CACxB,OAAO,GAAG,UAAU,QAAQ;EAC1B,QAAQ,OAAO,IAAI;EACnB,QAAQ,OAAO,MACb,0DAA0D,KAAK,IAAK,IAAc,QAAQ,GAC5F;CACF,CAAC;CAED,IAAI;EACF,MAAM,iBAAiB,IAAI;CAC7B,SAAS,KAAK;EACZ,QAAQ,OAAO,IAAI;EACnB,OAAO,MAAM;EACb,MAAM;CACR;AACF"}
+{"version":3,"file":"artifact-server-C1fETWsc.mjs","names":["delay"],"sources":["../src/mcp/artifact-server.ts"],"sourcesContent":["import { serve } from '@hono/node-server'\nimport { setTimeout as delay } from 'node:timers/promises'\nimport { createApp } from '../server/app.js'\n\ntype ArtifactServer = ReturnType<typeof serve>\n\nconst servers = new Map<number, ArtifactServer>()\n\nasync function isHealthy(port: number): Promise<boolean> {\n  const controller = new AbortController()\n  const timeout = setTimeout(() => controller.abort(), 500)\n  try {\n    const response = await fetch(`http://127.0.0.1:${port}/health`, {\n      signal: controller.signal,\n    })\n    return response.ok\n  } catch {\n    return false\n  } finally {\n    clearTimeout(timeout)\n  }\n}\n\nasync function waitUntilHealthy(port: number): Promise<void> {\n  for (let attempt = 0; attempt < 20; attempt += 1) {\n    if (await isHealthy(port)) return\n    await delay(50)\n  }\n  throw new Error(`Graph report server did not become healthy on 127.0.0.1:${port}`)\n}\n\nexport async function ensureArtifactServer(port: number): Promise<void> {\n  if (servers.has(port)) return\n  if (await isHealthy(port)) return\n\n  const app = createApp()\n  const server = serve({\n    fetch: app.fetch,\n    hostname: '127.0.0.1',\n    port,\n  })\n  servers.set(port, server)\n  server.on('error', (err) => {\n    servers.delete(port)\n    process.stderr.write(\n      `Chain Insights graph report server failed on 127.0.0.1:${port}: ${(err as Error).message}\\n`\n    )\n  })\n\n  try {\n    await waitUntilHealthy(port)\n  } catch (err) {\n    servers.delete(port)\n    server.close()\n    throw err\n  }\n}\n\nexport function closeArtifactServers(): void {\n  for (const [port, server] of servers.entries()) {\n    server.close()\n    servers.delete(port)\n  }\n}\n"],"mappings":";;;;AAMA,MAAM,0BAAU,IAAI,IAA4B;AAEhD,eAAe,UAAU,MAAgC;CACvD,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,UAAU,iBAAiB,WAAW,MAAM,GAAG,GAAG;CACxD,IAAI;EAIF,QAAO,MAHgB,MAAM,oBAAoB,KAAK,UAAU,EAC9D,QAAQ,WAAW,OACrB,CAAC,EAAA,CACe;CAClB,QAAQ;EACN,OAAO;CACT,UAAU;EACR,aAAa,OAAO;CACtB;AACF;AAEA,eAAe,iBAAiB,MAA6B;CAC3D,KAAK,IAAI,UAAU,GAAG,UAAU,IAAI,WAAW,GAAG;EAChD,IAAI,MAAM,UAAU,IAAI,GAAG;EAC3B,MAAMA,aAAM,EAAE;CAChB;CACA,MAAM,IAAI,MAAM,2DAA2D,MAAM;AACnF;AAEA,eAAsB,qBAAqB,MAA6B;CACtE,IAAI,QAAQ,IAAI,IAAI,GAAG;CACvB,IAAI,MAAM,UAAU,IAAI,GAAG;CAE3B,MAAM,MAAM,UAAU;CACtB,MAAM,SAAS,MAAM;EACnB,OAAO,IAAI;EACX,UAAU;EACV;CACF,CAAC;CACD,QAAQ,IAAI,MAAM,MAAM;CACxB,OAAO,GAAG,UAAU,QAAQ;EAC1B,QAAQ,OAAO,IAAI;EACnB,QAAQ,OAAO,MACb,0DAA0D,KAAK,IAAK,IAAc,QAAQ,GAC5F;CACF,CAAC;CAED,IAAI;EACF,MAAM,iBAAiB,IAAI;CAC7B,SAAS,KAAK;EACZ,QAAQ,OAAO,IAAI;EACnB,OAAO,MAAM;EACb,MAAM;CACR;AACF"}

package/dist/cli.cjs

@@ -50,7 +50,7 @@ function runInstaller(flag) {
 	}
 }
 async function withGraphMcpClient(name, fn) {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 	const config = await loadConfig();
 	const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await Promise.resolve().then(() => require("./client-CqAzD519.cjs")).then((n) => n.client_exports);
 	const paymentFetch = await createConfiguredGraphMcpFetch(config);
@@ -70,7 +70,7 @@ async function withGraphMcpClient(name, fn) {
 	}
 }
 async function printNetworkCapabilities(opts) {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 	const { fetchNetworkCapabilities, formatNetworkCapabilities } = await Promise.resolve().then(() => require("./capabilities-CPcrxodx.cjs")).then((n) => n.capabilities_exports);
 	const document = await fetchNetworkCapabilities(await loadConfig());
 	if (opts.json) console.log(JSON.stringify(document, null, 2));
@@ -88,11 +88,11 @@ program.command("serve").description("Start local visualization server").option(
 	try {
 		const { requireWorkspaceRoot } = await Promise.resolve().then(() => require("./output-root-BewoQaTx.cjs")).then((n) => n.output_root_exports);
 		const workspaceRoot = requireWorkspaceRoot();
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 		const { resolveServerPort } = await Promise.resolve().then(() => require("./resolve-port-CbaEoODz.cjs"));
 		const config = await loadConfig();
 		const port = resolveServerPort(opts.port, config.serverPort);
-		const { startServer } = await Promise.resolve().then(() => require("./server-CmvzYu7v.cjs")).then((n) => n.server_exports);
+		const { startServer } = await Promise.resolve().then(() => require("./server-BjprY9Ef.cjs")).then((n) => n.server_exports);
 		console.log(`Workspace: ${workspaceRoot}`);
 		startServer(port);
 	} catch (err) {
@@ -101,7 +101,7 @@ program.command("serve").description("Start local visualization server").option(
 	}
 });
 program.command("status").description("Show toolkit status and configuration").action(async () => {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 	const { findActiveWorkspace, activeDataDir } = await Promise.resolve().then(() => require("./active-Bc13hJIm.cjs")).then((n) => n.active_exports);
 	const config = await loadConfig();
 	const workspace = findActiveWorkspace();
@@ -139,7 +139,7 @@ program.command("update").description("Check npmjs for a newer Chain Insights re
 });
 program.command("debug").description("Configure Chain Insights Graph debug mode").addCommand(new commander.Command("on").description("Enable Chain Insights Graph debug mode without x402 payments").requiredOption("--token <token>", "Debug bearer token").option("--endpoint <url>", "Chain Insights Graph endpoint").action(async (opts) => {
 	try {
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "debug",
 			graphMcpAuthToken: opts.token,
@@ -154,7 +154,7 @@ program.command("debug").description("Configure Chain Insights Graph debug mode"
 	}
 })).addCommand(new commander.Command("off").description("Disable Chain Insights Graph debug mode and use paid x402 calls").action(async () => {
 	try {
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "paid",
 			graphMcpAuthToken: ""
@@ -167,7 +167,7 @@ program.command("debug").description("Configure Chain Insights Graph debug mode"
 	}
 })).addCommand(new commander.Command("status").description("Show Chain Insights Graph payment/debug mode").action(async () => {
 	try {
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 		const config = await loadConfig();
 		console.log(`Chain Insights Graph mode: ${config.graphMcpMode}`);
 		console.log(`Graph endpoint: ${config.graphMcpEndpoint}`);
@@ -182,7 +182,7 @@ program.command("access-key").description("Configure Chain Insights Graph test a
 	try {
 		const normalizedKey = key.trim();
 		if (!normalizedKey) throw new Error("Test access key is required");
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "debug",
 			graphMcpAuthToken: normalizedKey,
@@ -197,7 +197,7 @@ program.command("access-key").description("Configure Chain Insights Graph test a
 	}
 })).addCommand(new commander.Command("clear").description("Remove the Chain Insights Graph test access key and use paid x402 calls").action(async () => {
 	try {
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "paid",
 			graphMcpAuthToken: ""
@@ -210,7 +210,7 @@ program.command("access-key").description("Configure Chain Insights Graph test a
 	}
 })).addCommand(new commander.Command("status").description("Show Chain Insights Graph test access key status").action(async () => {
 	try {
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 		const config = await loadConfig();
 		console.log(`Graph endpoint: ${config.graphMcpEndpoint}`);
 		console.log(`Access key:     ${config.graphMcpAuthToken?.trim() ? "configured" : "not configured"}`);
@@ -222,7 +222,7 @@ program.command("access-key").description("Configure Chain Insights Graph test a
 }));
 program.command("init").description("Initialize an investigation workspace").argument("[dir]", "Workspace directory to initialize", ".").option("--force", "Overwrite existing workspace files").action(async (dir, opts) => {
 	try {
-		const { initWorkspace } = await Promise.resolve().then(() => require("./init-DvrKxK15.cjs"));
+		const { initWorkspace } = await Promise.resolve().then(() => require("./init-C3AVZHFb.cjs"));
 		const result = await initWorkspace({
 			targetDir: dir,
 			force: opts.force
@@ -244,8 +244,8 @@ program.command("setup").description("Configure external MCP clients").addComman
 	runInstaller("--hermes");
 }));
 program.command("config").description("Read or write configuration values").addCommand(new commander.Command("get").argument("<key>", "Config key to read").action(async (key) => {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
-	const { CONFIG_KEYS } = await Promise.resolve().then(() => require("./schema-BpeV3xDV.cjs")).then((n) => n.schema_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
+	const { CONFIG_KEYS } = await Promise.resolve().then(() => require("./schema-DepyuUEP.cjs")).then((n) => n.schema_exports);
 	if (!CONFIG_KEYS.includes(key)) {
 		console.error(`Unknown config key: ${key}`);
 		process.exit(1);
@@ -265,8 +265,8 @@ program.command("config").description("Read or write configuration values").addC
 		}
 		return;
 	}
-	const { loadConfig, saveConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
-	const { CONFIG_KEYS, DEFAULT_CONFIG } = await Promise.resolve().then(() => require("./schema-BpeV3xDV.cjs")).then((n) => n.schema_exports);
+	const { loadConfig, saveConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
+	const { CONFIG_KEYS, DEFAULT_CONFIG } = await Promise.resolve().then(() => require("./schema-DepyuUEP.cjs")).then((n) => n.schema_exports);
 	const current = await loadConfig();
 	if (!CONFIG_KEYS.includes(key)) {
 		console.error(`Unknown config key: ${key}`);
@@ -360,7 +360,7 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 		const { loadSchema, saveSchema } = await Promise.resolve().then(() => require("./schema-cache-n7Gbhvsj.cjs"));
 		const { formatToolsTable } = await Promise.resolve().then(() => require("./format-9NLBykEL.cjs"));
 		const { visibleRemoteTools } = await Promise.resolve().then(() => require("./tool-visibility-DZBAP62b.cjs")).then((n) => n.tool_visibility_exports);
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 		const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await Promise.resolve().then(() => require("./client-CqAzD519.cjs")).then((n) => n.client_exports);
 		const config = await loadConfig();
 		const graphMcpEndpoint = resolveGraphMcpEndpoint(config);
@@ -462,7 +462,7 @@ program.command("viz").description("Generate a workspace visualization").argumen
 			console.error("Provide either a visualization source ID or --data <file.json>");
 			process.exit(1);
 		}
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 		const { resolveServerPort } = await Promise.resolve().then(() => require("./resolve-port-CbaEoODz.cjs"));
 		const config = await loadConfig();
 		const port = resolveServerPort(opts.port, config.serverPort);
@@ -471,7 +471,7 @@ program.command("viz").description("Generate a workspace visualization").argumen
 			sourceId,
 			dataFile: opts.data
 		});
-		const { startServer } = await Promise.resolve().then(() => require("./server-CmvzYu7v.cjs")).then((n) => n.server_exports);
+		const { startServer } = await Promise.resolve().then(() => require("./server-BjprY9Ef.cjs")).then((n) => n.server_exports);
 		startServer(port);
 		const url = `http://127.0.0.1:${port}/viz/${result.vizId}`;
 		console.log(`Visualization: ${url}`);

package/dist/cli.mjs

@@ -48,7 +48,7 @@ function runInstaller(flag) {
 	}
 }
 async function withGraphMcpClient(name, fn) {
-	const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+	const { loadConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 	const config = await loadConfig();
 	const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await import("./client-D4aM4bzP.mjs").then((n) => n.r);
 	const paymentFetch = await createConfiguredGraphMcpFetch(config);
@@ -68,7 +68,7 @@ async function withGraphMcpClient(name, fn) {
 	}
 }
 async function printNetworkCapabilities(opts) {
-	const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+	const { loadConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 	const { fetchNetworkCapabilities, formatNetworkCapabilities } = await import("./capabilities-BZI6qROg.mjs").then((n) => n.t);
 	const document = await fetchNetworkCapabilities(await loadConfig());
 	if (opts.json) console.log(JSON.stringify(document, null, 2));
@@ -86,11 +86,11 @@ program.command("serve").description("Start local visualization server").option(
 	try {
 		const { requireWorkspaceRoot } = await import("./output-root-BK4pdjyz.mjs").then((n) => n.t);
 		const workspaceRoot = requireWorkspaceRoot();
-		const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+		const { loadConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 		const { resolveServerPort } = await import("./resolve-port-DxPK7Ipx.mjs");
 		const config = await loadConfig();
 		const port = resolveServerPort(opts.port, config.serverPort);
-		const { startServer } = await import("./server-mDSRgk1X.mjs").then((n) => n.t);
+		const { startServer } = await import("./server-BDmHAF1w.mjs").then((n) => n.t);
 		console.log(`Workspace: ${workspaceRoot}`);
 		startServer(port);
 	} catch (err) {
@@ -99,7 +99,7 @@ program.command("serve").description("Start local visualization server").option(
 	}
 });
 program.command("status").description("Show toolkit status and configuration").action(async () => {
-	const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+	const { loadConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 	const { findActiveWorkspace, activeDataDir } = await import("./active-BQopLul8.mjs").then((n) => n.t);
 	const config = await loadConfig();
 	const workspace = findActiveWorkspace();
@@ -137,7 +137,7 @@ program.command("update").description("Check npmjs for a newer Chain Insights re
 });
 program.command("debug").description("Configure Chain Insights Graph debug mode").addCommand(new Command("on").description("Enable Chain Insights Graph debug mode without x402 payments").requiredOption("--token <token>", "Debug bearer token").option("--endpoint <url>", "Chain Insights Graph endpoint").action(async (opts) => {
 	try {
-		const { saveConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+		const { saveConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 		await saveConfig({
 			graphMcpMode: "debug",
 			graphMcpAuthToken: opts.token,
@@ -152,7 +152,7 @@ program.command("debug").description("Configure Chain Insights Graph debug mode"
 	}
 })).addCommand(new Command("off").description("Disable Chain Insights Graph debug mode and use paid x402 calls").action(async () => {
 	try {
-		const { saveConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+		const { saveConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 		await saveConfig({
 			graphMcpMode: "paid",
 			graphMcpAuthToken: ""
@@ -165,7 +165,7 @@ program.command("debug").description("Configure Chain Insights Graph debug mode"
 	}
 })).addCommand(new Command("status").description("Show Chain Insights Graph payment/debug mode").action(async () => {
 	try {
-		const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+		const { loadConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 		const config = await loadConfig();
 		console.log(`Chain Insights Graph mode: ${config.graphMcpMode}`);
 		console.log(`Graph endpoint: ${config.graphMcpEndpoint}`);
@@ -180,7 +180,7 @@ program.command("access-key").description("Configure Chain Insights Graph test a
 	try {
 		const normalizedKey = key.trim();
 		if (!normalizedKey) throw new Error("Test access key is required");
-		const { saveConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+		const { saveConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 		await saveConfig({
 			graphMcpMode: "debug",
 			graphMcpAuthToken: normalizedKey,
@@ -195,7 +195,7 @@ program.command("access-key").description("Configure Chain Insights Graph test a
 	}
 })).addCommand(new Command("clear").description("Remove the Chain Insights Graph test access key and use paid x402 calls").action(async () => {
 	try {
-		const { saveConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+		const { saveConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 		await saveConfig({
 			graphMcpMode: "paid",
 			graphMcpAuthToken: ""
@@ -208,7 +208,7 @@ program.command("access-key").description("Configure Chain Insights Graph test a
 	}
 })).addCommand(new Command("status").description("Show Chain Insights Graph test access key status").action(async () => {
 	try {
-		const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+		const { loadConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 		const config = await loadConfig();
 		console.log(`Graph endpoint: ${config.graphMcpEndpoint}`);
 		console.log(`Access key:     ${config.graphMcpAuthToken?.trim() ? "configured" : "not configured"}`);
@@ -220,7 +220,7 @@ program.command("access-key").description("Configure Chain Insights Graph test a
 }));
 program.command("init").description("Initialize an investigation workspace").argument("[dir]", "Workspace directory to initialize", ".").option("--force", "Overwrite existing workspace files").action(async (dir, opts) => {
 	try {
-		const { initWorkspace } = await import("./init-Djhml4ih.mjs");
+		const { initWorkspace } = await import("./init-CO-PRYhT.mjs");
 		const result = await initWorkspace({
 			targetDir: dir,
 			force: opts.force
@@ -242,8 +242,8 @@ program.command("setup").description("Configure external MCP clients").addComman
 	runInstaller("--hermes");
 }));
 program.command("config").description("Read or write configuration values").addCommand(new Command("get").argument("<key>", "Config key to read").action(async (key) => {
-	const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
-	const { CONFIG_KEYS } = await import("./schema-DOJA2nNi.mjs").then((n) => n.r);
+	const { loadConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
+	const { CONFIG_KEYS } = await import("./schema-v5cwychf.mjs").then((n) => n.r);
 	if (!CONFIG_KEYS.includes(key)) {
 		console.error(`Unknown config key: ${key}`);
 		process.exit(1);
@@ -263,8 +263,8 @@ program.command("config").description("Read or write configuration values").addC
 		}
 		return;
 	}
-	const { loadConfig, saveConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
-	const { CONFIG_KEYS, DEFAULT_CONFIG } = await import("./schema-DOJA2nNi.mjs").then((n) => n.r);
+	const { loadConfig, saveConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
+	const { CONFIG_KEYS, DEFAULT_CONFIG } = await import("./schema-v5cwychf.mjs").then((n) => n.r);
 	const current = await loadConfig();
 	if (!CONFIG_KEYS.includes(key)) {
 		console.error(`Unknown config key: ${key}`);
@@ -358,7 +358,7 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 		const { loadSchema, saveSchema } = await import("./schema-cache-DJdU4MIP.mjs");
 		const { formatToolsTable } = await import("./format-Bq94jSyw.mjs");
 		const { visibleRemoteTools } = await import("./tool-visibility-C0ALejXI.mjs").then((n) => n.i);
-		const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+		const { loadConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 		const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await import("./client-D4aM4bzP.mjs").then((n) => n.r);
 		const config = await loadConfig();
 		const graphMcpEndpoint = resolveGraphMcpEndpoint(config);
@@ -460,7 +460,7 @@ program.command("viz").description("Generate a workspace visualization").argumen
 			console.error("Provide either a visualization source ID or --data <file.json>");
 			process.exit(1);
 		}
-		const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+		const { loadConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 		const { resolveServerPort } = await import("./resolve-port-DxPK7Ipx.mjs");
 		const config = await loadConfig();
 		const port = resolveServerPort(opts.port, config.serverPort);
@@ -469,7 +469,7 @@ program.command("viz").description("Generate a workspace visualization").argumen
 			sourceId,
 			dataFile: opts.data
 		});
-		const { startServer } = await import("./server-mDSRgk1X.mjs").then((n) => n.t);
+		const { startServer } = await import("./server-BDmHAF1w.mjs").then((n) => n.t);
 		startServer(port);
 		const url = `http://127.0.0.1:${port}/viz/${result.vizId}`;
 		console.log(`Visualization: ${url}`);

package/dist/{config-BVFf3v8-.cjs → config-DYiUgdzg.cjs}

@@ -1,6 +1,6 @@
 const require_rolldown_runtime = require("./rolldown-runtime-C0BPl7ul.cjs");
-const require_mcp_endpoint = require("./mcp-endpoint-BIWrUOFG.cjs");
-const require_schema = require("./schema-BpeV3xDV.cjs");
+const require_mcp_endpoint = require("./mcp-endpoint-DdIVQKW5.cjs");
+const require_schema = require("./schema-DepyuUEP.cjs");
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
 let node_fs_promises = require("node:fs/promises");

package/dist/{config-CnNMdt4M.mjs → config-DiQs0rQX.mjs}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { n as graphMcpEndpointEnvOverride } from "./mcp-endpoint-DbWtLcba.mjs";
-import { n as parseInvestigatorConfig, t as DEFAULT_CONFIG } from "./schema-DOJA2nNi.mjs";
+import { n as graphMcpEndpointEnvOverride } from "./mcp-endpoint-Bd3SvCkg.mjs";
+import { n as parseInvestigatorConfig, t as DEFAULT_CONFIG } from "./schema-v5cwychf.mjs";
 import path from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import os from "node:os";
@@ -74,4 +74,4 @@ async function resetConfigCache() {
 //#endregion
 export { saveConfig as i, loadConfig as n, resetConfigCache as r, config_exports as t };
 
-//# sourceMappingURL=config-CnNMdt4M.mjs.map
+//# sourceMappingURL=config-DiQs0rQX.mjs.map

package/dist/{config-CnNMdt4M.mjs.map → config-DiQs0rQX.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"config-CnNMdt4M.mjs","names":[],"sources":["../src/config/index.ts"],"sourcesContent":["import { readFile, writeFile, mkdir } from 'node:fs/promises'\nimport path from 'node:path'\nimport os from 'node:os'\nimport { DEFAULT_CONFIG, parseInvestigatorConfig, type InvestigatorConfig } from './schema.js'\nimport { graphMcpEndpointEnvOverride } from './mcp-endpoint.js'\n\n// Config path derived from HOME at call time so tests can override HOME.\nfunction configPath(): string {\n  return path.join(os.homedir(), '.chain-insights', 'config.json')\n}\n\nlet _cached: InvestigatorConfig | null = null\n\nfunction applyRuntimeEnvOverrides(config: InvestigatorConfig): InvestigatorConfig {\n  let graphMcpEndpoint: string | undefined\n  try {\n    graphMcpEndpoint = graphMcpEndpointEnvOverride()\n  } catch (err) {\n    throw new Error(`Invalid configuration in environment: ${(err as Error).message}`)\n  }\n  return graphMcpEndpoint ? parseInvestigatorConfig({ ...config, graphMcpEndpoint }) : config\n}\n\nasync function loadStoredConfig(): Promise<InvestigatorConfig> {\n  const cfgPath = configPath()\n  let raw: string\n  try {\n    raw = await readFile(cfgPath, 'utf8')\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n      return DEFAULT_CONFIG\n    }\n    throw new Error(`Unable to read config ${cfgPath}: ${(err as Error).message}`)\n  }\n\n  let parsedJson: unknown\n  try {\n    parsedJson = JSON.parse(raw) as unknown\n  } catch (err) {\n    throw new Error(`Invalid JSON in ${cfgPath}: ${(err as Error).message}`)\n  }\n\n  try {\n    return parseInvestigatorConfig(parsedJson)\n  } catch (err) {\n    throw new Error(`Invalid configuration in ${cfgPath}: ${(err as Error).message}`)\n  }\n}\n\nexport async function loadConfig(): Promise<InvestigatorConfig> {\n  if (_cached) return _cached\n  _cached = applyRuntimeEnvOverrides(await loadStoredConfig())\n  return _cached\n}\n\nexport async function saveConfig(updates: Partial<InvestigatorConfig>): Promise<void> {\n  const current = await loadStoredConfig()\n  let next: InvestigatorConfig\n  try {\n    next = parseInvestigatorConfig({ ...current, ...updates })\n  } catch (err) {\n    throw new Error(`Invalid configuration update: ${(err as Error).message}`)\n  }\n  const p = configPath()\n  await mkdir(path.dirname(p), { recursive: true })\n  await writeFile(p, JSON.stringify(next, null, 2) + '\\n', { mode: 0o600 })\n  _cached = applyRuntimeEnvOverrides(next)\n}\n\nexport async function resetConfigCache(): Promise<void> {\n  _cached = null\n}\n"],"mappings":";;;;;;;;;;;;AAOA,SAAS,aAAqB;CAC5B,OAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,mBAAmB,aAAa;AACjE;AAEA,IAAI,UAAqC;AAEzC,SAAS,yBAAyB,QAAgD;CAChF,IAAI;CACJ,IAAI;EACF,mBAAmB,4BAA4B;CACjD,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,yCAA0C,IAAc,SAAS;CACnF;CACA,OAAO,mBAAmB,wBAAwB;EAAE,GAAG;EAAQ;CAAiB,CAAC,IAAI;AACvF;AAEA,eAAe,mBAAgD;CAC7D,MAAM,UAAU,WAAW;CAC3B,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,SAAS,SAAS,MAAM;CACtC,SAAS,KAAK;EACZ,IAAK,IAA8B,SAAS,UAC1C,OAAO;EAET,MAAM,IAAI,MAAM,yBAAyB,QAAQ,IAAK,IAAc,SAAS;CAC/E;CAEA,IAAI;CACJ,IAAI;EACF,aAAa,KAAK,MAAM,GAAG;CAC7B,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,mBAAmB,QAAQ,IAAK,IAAc,SAAS;CACzE;CAEA,IAAI;EACF,OAAO,wBAAwB,UAAU;CAC3C,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,4BAA4B,QAAQ,IAAK,IAAc,SAAS;CAClF;AACF;AAEA,eAAsB,aAA0C;CAC9D,IAAI,SAAS,OAAO;CACpB,UAAU,yBAAyB,MAAM,iBAAiB,CAAC;CAC3D,OAAO;AACT;AAEA,eAAsB,WAAW,SAAqD;CACpF,MAAM,UAAU,MAAM,iBAAiB;CACvC,IAAI;CACJ,IAAI;EACF,OAAO,wBAAwB;GAAE,GAAG;GAAS,GAAG;EAAQ,CAAC;CAC3D,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,iCAAkC,IAAc,SAAS;CAC3E;CACA,MAAM,IAAI,WAAW;CACrB,MAAM,MAAM,KAAK,QAAQ,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;CAChD,MAAM,UAAU,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,IAAI,MAAM,EAAE,MAAM,IAAM,CAAC;CACxE,UAAU,yBAAyB,IAAI;AACzC;AAEA,eAAsB,mBAAkC;CACtD,UAAU;AACZ"}
+{"version":3,"file":"config-DiQs0rQX.mjs","names":[],"sources":["../src/config/index.ts"],"sourcesContent":["import { readFile, writeFile, mkdir } from 'node:fs/promises'\nimport path from 'node:path'\nimport os from 'node:os'\nimport { DEFAULT_CONFIG, parseInvestigatorConfig, type InvestigatorConfig } from './schema.js'\nimport { graphMcpEndpointEnvOverride } from './mcp-endpoint.js'\n\n// Config path derived from HOME at call time so tests can override HOME.\nfunction configPath(): string {\n  return path.join(os.homedir(), '.chain-insights', 'config.json')\n}\n\nlet _cached: InvestigatorConfig | null = null\n\nfunction applyRuntimeEnvOverrides(config: InvestigatorConfig): InvestigatorConfig {\n  let graphMcpEndpoint: string | undefined\n  try {\n    graphMcpEndpoint = graphMcpEndpointEnvOverride()\n  } catch (err) {\n    throw new Error(`Invalid configuration in environment: ${(err as Error).message}`)\n  }\n  return graphMcpEndpoint ? parseInvestigatorConfig({ ...config, graphMcpEndpoint }) : config\n}\n\nasync function loadStoredConfig(): Promise<InvestigatorConfig> {\n  const cfgPath = configPath()\n  let raw: string\n  try {\n    raw = await readFile(cfgPath, 'utf8')\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n      return DEFAULT_CONFIG\n    }\n    throw new Error(`Unable to read config ${cfgPath}: ${(err as Error).message}`)\n  }\n\n  let parsedJson: unknown\n  try {\n    parsedJson = JSON.parse(raw) as unknown\n  } catch (err) {\n    throw new Error(`Invalid JSON in ${cfgPath}: ${(err as Error).message}`)\n  }\n\n  try {\n    return parseInvestigatorConfig(parsedJson)\n  } catch (err) {\n    throw new Error(`Invalid configuration in ${cfgPath}: ${(err as Error).message}`)\n  }\n}\n\nexport async function loadConfig(): Promise<InvestigatorConfig> {\n  if (_cached) return _cached\n  _cached = applyRuntimeEnvOverrides(await loadStoredConfig())\n  return _cached\n}\n\nexport async function saveConfig(updates: Partial<InvestigatorConfig>): Promise<void> {\n  const current = await loadStoredConfig()\n  let next: InvestigatorConfig\n  try {\n    next = parseInvestigatorConfig({ ...current, ...updates })\n  } catch (err) {\n    throw new Error(`Invalid configuration update: ${(err as Error).message}`)\n  }\n  const p = configPath()\n  await mkdir(path.dirname(p), { recursive: true })\n  await writeFile(p, JSON.stringify(next, null, 2) + '\\n', { mode: 0o600 })\n  _cached = applyRuntimeEnvOverrides(next)\n}\n\nexport async function resetConfigCache(): Promise<void> {\n  _cached = null\n}\n"],"mappings":";;;;;;;;;;;;AAOA,SAAS,aAAqB;CAC5B,OAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,mBAAmB,aAAa;AACjE;AAEA,IAAI,UAAqC;AAEzC,SAAS,yBAAyB,QAAgD;CAChF,IAAI;CACJ,IAAI;EACF,mBAAmB,4BAA4B;CACjD,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,yCAA0C,IAAc,SAAS;CACnF;CACA,OAAO,mBAAmB,wBAAwB;EAAE,GAAG;EAAQ;CAAiB,CAAC,IAAI;AACvF;AAEA,eAAe,mBAAgD;CAC7D,MAAM,UAAU,WAAW;CAC3B,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,SAAS,SAAS,MAAM;CACtC,SAAS,KAAK;EACZ,IAAK,IAA8B,SAAS,UAC1C,OAAO;EAET,MAAM,IAAI,MAAM,yBAAyB,QAAQ,IAAK,IAAc,SAAS;CAC/E;CAEA,IAAI;CACJ,IAAI;EACF,aAAa,KAAK,MAAM,GAAG;CAC7B,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,mBAAmB,QAAQ,IAAK,IAAc,SAAS;CACzE;CAEA,IAAI;EACF,OAAO,wBAAwB,UAAU;CAC3C,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,4BAA4B,QAAQ,IAAK,IAAc,SAAS;CAClF;AACF;AAEA,eAAsB,aAA0C;CAC9D,IAAI,SAAS,OAAO;CACpB,UAAU,yBAAyB,MAAM,iBAAiB,CAAC;CAC3D,OAAO;AACT;AAEA,eAAsB,WAAW,SAAqD;CACpF,MAAM,UAAU,MAAM,iBAAiB;CACvC,IAAI;CACJ,IAAI;EACF,OAAO,wBAAwB;GAAE,GAAG;GAAS,GAAG;EAAQ,CAAC;CAC3D,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,iCAAkC,IAAc,SAAS;CAC3E;CACA,MAAM,IAAI,WAAW;CACrB,MAAM,MAAM,KAAK,QAAQ,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;CAChD,MAAM,UAAU,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,IAAI,MAAM,EAAE,MAAM,IAAM,CAAC;CACxE,UAAU,yBAAyB,IAAI;AACzC;AAEA,eAAsB,mBAAkC;CACtD,UAAU;AACZ"}

package/dist/index.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_config = require("./config-BVFf3v8-.cjs");
-const require_app = require("./app-l9JE6bt3.cjs");
-const require_server = require("./server-CmvzYu7v.cjs");
+const require_config = require("./config-DYiUgdzg.cjs");
+const require_app = require("./app-BHRl5oDo.cjs");
+const require_server = require("./server-BjprY9Ef.cjs");
 const require_wallet = require("./wallet-BEvHrHi3.cjs");
 const require_tools = require("./tools-lPY6k-vJ.cjs");
 const require_topup_server = require("./topup-server-DAqmAuu1.cjs");

package/dist/index.mjs

@@ -1,6 +1,6 @@
-import { i as saveConfig, n as loadConfig, r as resetConfigCache } from "./config-CnNMdt4M.mjs";
-import { t as createApp } from "./app-7NRCqx_Q.mjs";
-import { n as startServer } from "./server-mDSRgk1X.mjs";
+import { i as saveConfig, n as loadConfig, r as resetConfigCache } from "./config-DiQs0rQX.mjs";
+import { t as createApp } from "./app-BeZyCVuz.mjs";
+import { n as startServer } from "./server-BDmHAF1w.mjs";
 import { a as setWalletPrivateKey, i as normalizeWalletPrivateKey, n as encryptKey, o as walletAddressFromPrivateKey, r as isWalletConfigured, t as decryptKey } from "./wallet-fMbhvKXT.mjs";
 import { a as formatWalletBalanceResult, c as getWalletAccount, i as formatWalletBalance, l as getWalletBalanceResult, o as getBalanceEth, r as buildTopupInfo, s as getBalanceUsdc, u as getWalletBalanceText } from "./tools-BKLnlBG1.mjs";
 import { i as generateArtifactHtml, n as startTopupServer, t as getTopupUrl } from "./topup-server-rqI7bqem.mjs";

package/dist/{init-DvrKxK15.cjs → init-C3AVZHFb.cjs}

@@ -1,5 +1,5 @@
 const require_rolldown_runtime = require("./rolldown-runtime-C0BPl7ul.cjs");
-const require_mcp_endpoint = require("./mcp-endpoint-BIWrUOFG.cjs");
+const require_mcp_endpoint = require("./mcp-endpoint-DdIVQKW5.cjs");
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
 let node_fs_promises = require("node:fs/promises");
@@ -30,7 +30,7 @@ function workspaceJson(workspaceRoot) {
 		name: "Chain Insights Workspace",
 		workspace_root: workspaceRoot,
 		default_network: "robinhood",
-		graph_mcp_endpoint: require_mcp_endpoint.LOCAL_GRAPH_MCP_ENDPOINT,
+		graph_mcp_endpoint: require_mcp_endpoint.DEFAULT_GRAPH_MCP_ENDPOINT,
 		artifacts_dir: "artifacts",
 		imports_dir: "imports",
 		reports_dir: "reports",

package/dist/{init-Djhml4ih.mjs → init-CO-PRYhT.mjs}

@@ -1,4 +1,4 @@
-import { t as LOCAL_GRAPH_MCP_ENDPOINT } from "./mcp-endpoint-DbWtLcba.mjs";
+import { t as DEFAULT_GRAPH_MCP_ENDPOINT } from "./mcp-endpoint-Bd3SvCkg.mjs";
 import path from "node:path";
 import { access, mkdir, writeFile } from "node:fs/promises";
 //#region src/workspace/init.ts
@@ -28,7 +28,7 @@ function workspaceJson(workspaceRoot) {
 		name: "Chain Insights Workspace",
 		workspace_root: workspaceRoot,
 		default_network: "robinhood",
-		graph_mcp_endpoint: LOCAL_GRAPH_MCP_ENDPOINT,
+		graph_mcp_endpoint: DEFAULT_GRAPH_MCP_ENDPOINT,
 		artifacts_dir: "artifacts",
 		imports_dir: "imports",
 		reports_dir: "reports",
@@ -316,4 +316,4 @@ async function initWorkspace(options) {
 //#endregion
 export { initWorkspace };
 
-//# sourceMappingURL=init-Djhml4ih.mjs.map
+//# sourceMappingURL=init-CO-PRYhT.mjs.map

package/dist/init-CO-PRYhT.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-CO-PRYhT.mjs","names":[],"sources":["../src/workspace/init.ts"],"sourcesContent":["import { access, mkdir, writeFile } from 'node:fs/promises'\nimport path from 'node:path'\nimport { DEFAULT_GRAPH_MCP_ENDPOINT } from '../config/mcp-endpoint.js'\n\nexport interface InitWorkspaceOptions {\n  targetDir: string\n  force?: boolean\n}\n\nexport interface InitWorkspaceResult {\n  workspaceRoot: string\n  filesWritten: string[]\n}\n\nconst WORKSPACE_DIRS = [\n  '.chain-insights',\n  '.chain-insights/schema',\n  '.chain-insights/runtime',\n  '.chain-insights/runtime/logs',\n  '.chain-insights/runtime-skill',\n  'artifacts',\n  'entities',\n  'imports',\n  'reports',\n  'reports/graphs',\n  'reports/tables',\n  'sessions',\n  'templates',\n  'published',\n]\n\nconst DEFAULT_DOMAIN_HINTS = ['aml']\n\nfunction todayIso(): string {\n  return new Date().toISOString().slice(0, 10)\n}\n\nfunction workspaceJson(workspaceRoot: string): string {\n  return (\n    JSON.stringify(\n      {\n        schema: 'chain-insights.workspace.v1',\n        name: 'Chain Insights Workspace',\n        workspace_root: workspaceRoot,\n        default_network: 'robinhood',\n        graph_mcp_endpoint: DEFAULT_GRAPH_MCP_ENDPOINT,\n        artifacts_dir: 'artifacts',\n        imports_dir: 'imports',\n        reports_dir: 'reports',\n        templates_dir: 'templates',\n        domain_hints: DEFAULT_DOMAIN_HINTS,\n        created_at: todayIso(),\n      },\n      null,\n      2\n    ) + '\\n'\n  )\n}\n\nconst README = `# Chain Insights Workspace\n\nThis is a generic Chain Insights workspace.\nUse any editor or agent tooling you want to review reports, artifacts, entity\nnotes, graphs, and published bundles alongside the Chain Insights runtime\nmetadata.\n\n## Start\n\n\\`\\`\\`bash\nchain-insights mcp tools --refresh\nchain-insights wallet ready --check-only\n\\`\\`\\`\n\n## Layout\n\n\\`\\`\\`text\n.chain-insights/   Workspace metadata\nartifacts/         Tool-generated artifacts and durable workspace records\nentities/          Entity notes and indexes\nimports/           External reports, CSVs, screenshots, raw notes\nreports/           Final or interim analyst reports\nreports/graphs/    Graph JSON for visualization\nreports/tables/    Compact tabular extracts\nsessions/          Optional session notes\ntemplates/         Reusable workspace templates\npublished/         Published bundles and handoff-ready exports\n.chain-insights/schema/         Runtime graph schema captures\n.chain-insights/runtime/        Workspace-local runtime process state and debug logs\n.chain-insights/runtime-skill/  Workspace-specific agent schema notes\n\\`\\`\\`\n`\n\nconst AGENTS = `# Agent Instructions\n\nYou are operating inside a Chain Insights workspace.\n\n- Read README.md first.\n- If this directory is not initialized, run \\`cia init .\\` before persistence-producing commands.\n- Do not rerun init in an existing workspace unless replacing scaffolding with \\`--force\\`.\n- Read .chain-insights/runtime-skill/SKILL.md before graph queries.\n- Preserve full blockchain addresses exactly.\n- Do not guess the network for graph queries.\n- Capture or refresh graph schema before the first graph workflow.\n- \\`domain_hints\\` in \\`.chain-insights/workspace.json\\` are optional advisory workflow\n  preferences (for example \\`[\"aml\"]\\`) and should guide, not constrain,\n  tool selection.\n- Save compact artifacts with original graph field names.\n- Put canonical graph JSON in reports/graphs/ and analyst tables in reports/tables/.\n- Markdown reports should summarize and point to graph/table outputs; do not paste large raw JSON blobs into reports.\n- Workspace output must stay in this initialized workspace.\n- Never write artifacts, reports, graph JSON, HTML, schema captures, or logs to ~/.chain-insights.\n- Keep theories lightweight until evidence supports them.\n`\n\nconst CLAUDE = AGENTS\n\nconst CASE_BRIEF = `# Workspace Brief\n\n## Summary\n\nStatus:\nNetwork:\nCurrent Assessment:\n\n## Known Addresses\n\n## Claims To Validate\n\n## Evidence\n\n## Next Steps\n`\n\nconst IMPORTS_README = `# External Investigation Inputs\n\nPut user-provided or third-party material here before turning it into durable\nworkspace outputs.\n\nExamples:\n\n- Exchange support exports\n- CSV extracts\n- Screenshots\n- Raw notes\n- Partner reports\n\nFiles in this directory are inputs, not verified evidence. When an import\nsupports a claim, summarize it into a workspace report or artifact note and\nreference the original file path.\n`\n\nconst TEMPLATES_README = `# Reusable Workspace Templates\n\nStore local report, prompt, artifact, and note templates here.\n\nTemplates are optional workspace helpers. They are not evidence and should not\nbe treated as durable workspace state until copied into an artifact, report,\nentity note, or session note.\n`\n\nconst RUNTIME_SKILL = `---\nname: chain-insights-runtime-schema\ndescription: Workspace-local Chain Insights runtime schema notes. Refresh this after connecting to a graph MCP endpoint.\n---\n\n# Runtime Graph Schema\n\nBefore the first investigation query, capture the live graph schema into:\n\n\\`\\`\\`text\n.chain-insights/schema/<network>.graph-schema.json\n\\`\\`\\`\n\nUse \\`graph_query_batch\\` for schema capture. Prefix topology reads with\n\\`USE topology\\` (address/FLOWS_TO/LINKED graph, unified recent+historical)\nand fact reads with \\`USE facts\\`, for example:\n\n\\`\\`\\`bash\ncia mcp call graph_query_batch network=<network> 'queries=[{\"id\":\"node_labels\",\"query\":\"USE topology MATCH (n:Address) RETURN \\\"Address\\\" AS node_label, count(n) AS sample_count LIMIT 1\"},{\"id\":\"flow_sample\",\"query\":\"USE topology MATCH (:Address)-[f:FLOWS_TO]->(:Address) RETURN f.amount_usd_sum AS amount_usd_sum, f.tx_count AS tx_count LIMIT 20\"},{\"id\":\"linked_sample\",\"query\":\"USE topology MATCH (a:Address)-[l:LINKED]-(b:Address) RETURN a.address AS address, b.address AS linked_address, l.basis AS basis, l.confidence AS confidence LIMIT 20\"}]'\n\\`\\`\\`\n\nThen update this file with observed labels, relationship types, and allowed\nproperty names for the active network.\n\nThe address-grain graph schema:\n\n- Call \\`meta_network_capabilities\\` first. Pass \\`network=\\` exactly as\n  GraphRAG advertised it. CIA does not pick a default network.\n  Address format follows that network. Every topology node is\n  \\`(:Address {address, network})\\`, keyed by the raw chain-native\n  \\`address\\`. There is no separate identity key and no member-address\n  satellite: the address IS the graph node.\n- \\`(:Address)-[:LINKED]-(:Address)\\` is an **undirected** ownership-overlay\n  edge (\\`basis\\` \\`derived\\`/\\`associated\\`, plus \\`confidence\\`,\n  \\`source_event\\`, \\`declared_owner\\`) asserting the two addresses are\n  controlled by the same actor. \\`LINKED\\` is the ownership edge within the\n  advertised network — a same-network query traces\n  (\\`LINKED\\` or \\`FLOWS_TO\\`) with no network switch. Walk\n  one visible \\`LINKED\\` hop to surface actor-level exposure; never treat\n  linked addresses\n  as a single collapsed node. \\`LINKED\\` is served on the topology graph\n  only.\n- Other Address properties: \\`labels\\` (array) and \\`is_exchange\\`\n  (sparse true/null traversal hint). Labels and per-label risk live on the\n  address node: \\`label_risk\\` is a list of \\`{label, risk_level,\n  updated_timestamp}\\` maps, one per current label row.\n- Address nodes carry a risk verdict for quick triage\n  (\\`risk_score\\` float, \\`risk_level\\` string) plus base activity rollups:\n  \\`degree_in\\`/\\`degree_out\\`/\\`degree_total\\` (distinct counterparty\n  addresses), \\`tx_in_count\\`/\\`tx_out_count\\`/\\`tx_total_count\\`,\n  \\`total_in_usd\\`/\\`total_out_usd\\`/\\`total_volume_usd\\`, \\`net_flow_usd\\`\n  (in minus out; positive = net receiver) — all computed from external\n  flows only — and \\`first_activity_timestamp\\`/\n  \\`last_activity_timestamp\\`/\\`activity_span_days\\`, which include all\n  flows (self-loops included). FLOWS_TO edges carry \\`tx_count\\`,\n  \\`amount_usd_sum\\`, \\`avg_tx_size_usd\\` (understates when\n  \\`price_coverage_ratio\\` < 1), \\`first_seen_timestamp\\`/\n  \\`last_seen_timestamp\\`, \\`first_tx_id\\`/\\`last_tx_id\\`, and\n  \\`price_coverage_ratio\\`.\n  Lifetime aggregates are the only serving window.\n- Money flow is \\`(:Address)-[:FLOWS_TO]->(:Address)\\`. Public AML tools\n  accept the raw blockchain address directly — there is no resolution step.\n- The risk verdict lives on topology nodes (\\`risk_score\\`/\\`risk_level\\`),\n  and labels and per-label risk live on the address node (\\`labels\\` array\n  + \\`label_risk\\` entries). \\`USE facts\\` serves bounded individual\n  transfer rows and, until P3, address features. Facts address keys match\n  topology \\`address\\` values exactly. Do not read \\`ml_*\\`,\n  \\`confluence_score\\`, or \\`pattern_flags\\` off topology nodes — those\n  properties do not exist.\n- \\`(from:Address)-[t:TRANSFER]->(to:Address)\\` on \\`USE facts\\` returns\n  individual transfer rows (not aggregates) from \\`facts_transfers_view\\`,\n  with edge properties \\`amount\\`, \\`amount_usd\\`, \\`asset_symbol\\`,\n  \\`asset_contract\\`, \\`tx_id\\`, \\`block_height\\`, \\`block_timestamp\\`,\n  \\`event_index\\`, \\`edge_index\\`, \\`price_usd\\`, and \\`price_missing\\`.\n  Every TRANSFER query (row-select or a \\`count()\\`/\\`sum()\\` aggregate)\n  requires an indexed predicate — address equality on either endpoint or\n  \\`WHERE t.tx_id = \"...\"\\` — a bare \\`LIMIT\\` alone is rejected. Lifetime\n  address metrics (degrees, totals, activity window) are node properties on\n  \\`USE topology\\`.\n\nRules:\n\n- Prefer \\`graph_query\\` and \\`graph_query_batch\\` for graph-language reads.\n- The graph choice stays inside the query via \\`USE ...\\`; there is no\n  tool argument to select a graph.\n- Use \\`USE topology\\` for topology (the address/FLOWS_TO/LINKED graph,\n  covering unified recent and full historical activity in one graph, plus\n  the node \\`risk_score\\`/\\`risk_level\\` verdict, and labels + per-label\n  risk) and \\`USE facts\\` for features, assets, and enrichment.\n  The \\`LINKED\\` ownership overlay is served on the topology graph only.\n- Preserve source schema field names in generated data files.\n- Do not rename, reinterpret, or add unit labels to graph fields unless the\n  schema or query result explicitly supports that interpretation.\n- Keep persisted outputs compact: select only the fields needed to support the claim.\n  Avoid storing whole node or relationship property blobs unless\n  the purpose of the query is schema discovery or debugging.\n- When using BFS, fixed-depth traversal fallbacks, or any manual \\`FLOWS_TO\\`\n  traversal, treat exchange hot wallets as terminal endpoints only. Do not\n  expand from, through, or classify exchange nodes as deposit, suspect, or\n  intermediate candidates. In Cypher, require every non-terminal traversal node\n  to satisfy \\`is_exchange IS NULL\\`; only the final exchange endpoint should\n  satisfy \\`is_exchange IS NOT NULL\\`.\n- Keep analysis products separate from summary notes: graph JSON belongs under\n  \\`reports/graphs/\\`, tabular extracts under \\`reports/tables/\\`, and analyst\n  narrative under \\`reports/\\`.\n- Markdown reports should be short provenance records with key facts and\n  pointers. Large JSON belongs in \\`reports/tables/\\`, not inline in reports.\n\nAML tool guidance:\n\n1. Use \\`aml_address_risk\\` for single-address enrichment and optional\n   comparison with another address.\n2. Use \\`graph_query_batch\\` only when the high-level tools do not answer the\n   exact question, and \\`graph_query\\` for single read-only queries.\n\n\\`aml_address_risk\\` takes a raw blockchain address as input directly — there\nis no identity-resolution step — and returns \\`chain-insights.result.v1\\`. Preserve\nfull blockchain addresses in the summary and all workspace artifacts.\n`\n\nconst SCHEMA_README = `# Runtime Schema Captures\n\nStore graph schema captures here, for example:\n\n\\`\\`\\`text\nrobinhood.graph-schema.json\n\\`\\`\\`\n\nSchema captures should be generated before the first graph workflow in a fresh\nworkspace, then referenced by artifacts, reports, and runtime skill notes.\n`\n\nfunction workspaceFiles(workspaceRoot: string): Array<[string, string]> {\n  return [\n    ['.chain-insights/workspace.json', workspaceJson(workspaceRoot)],\n    ['README.md', README],\n    ['AGENTS.md', AGENTS],\n    ['CLAUDE.md', CLAUDE],\n    ['imports/README.md', IMPORTS_README],\n    ['templates/README.md', TEMPLATES_README],\n    ['templates/workspace-brief.md', CASE_BRIEF],\n    ['.chain-insights/runtime-skill/SKILL.md', RUNTIME_SKILL],\n    ['.chain-insights/schema/README.md', SCHEMA_README],\n    ['.chain-insights/runtime/.keep', ''],\n    ['.chain-insights/runtime/logs/.keep', ''],\n  ]\n}\n\nasync function assertNoFileCollisions(workspaceRoot: string): Promise<void> {\n  for (const [relativePath] of workspaceFiles(workspaceRoot)) {\n    const filePath = path.join(workspaceRoot, relativePath)\n    try {\n      await access(filePath)\n      throw new Error(\n        `Refusing to overwrite ${filePath}. Re-run with --force to replace workspace files.`\n      )\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n        continue\n      }\n      throw err\n    }\n  }\n}\n\nexport async function initWorkspace(options: InitWorkspaceOptions): Promise<InitWorkspaceResult> {\n  const workspaceRoot = path.resolve(options.targetDir)\n  if (!options.force) {\n    await assertNoFileCollisions(workspaceRoot)\n  }\n\n  for (const dir of WORKSPACE_DIRS) {\n    await mkdir(path.join(workspaceRoot, dir), { recursive: true })\n  }\n\n  const filesWritten: string[] = []\n  const flag = options.force ? 'w' : 'wx'\n  for (const [relativePath, content] of workspaceFiles(workspaceRoot)) {\n    const filePath = path.join(workspaceRoot, relativePath)\n    try {\n      await writeFile(filePath, content, { mode: 0o600, flag })\n      filesWritten.push(relativePath)\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'EEXIST') {\n        throw new Error(\n          `Refusing to overwrite ${filePath}. Re-run with --force to replace workspace files.`\n        )\n      }\n      throw err\n    }\n  }\n\n  return { workspaceRoot, filesWritten }\n}\n"],"mappings":";;;;AAcA,MAAM,iBAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAM,uBAAuB,CAAC,KAAK;AAEnC,SAAS,WAAmB;CAC1B,wBAAO,IAAI,KAAK,EAAA,CAAE,YAAY,CAAC,CAAC,MAAM,GAAG,EAAE;AAC7C;AAEA,SAAS,cAAc,eAA+B;CACpD,OACE,KAAK,UACH;EACE,QAAQ;EACR,MAAM;EACN,gBAAgB;EAChB,iBAAiB;EACjB,oBAAoB;EACpB,eAAe;EACf,aAAa;EACb,aAAa;EACb,eAAe;EACf,cAAc;EACd,YAAY,SAAS;CACvB,GACA,MACA,CACF,IAAI;AAER;AAEA,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCf,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;AAsBf,MAAM,SAAS;AAEf,MAAM,aAAa;;;;;;;;;;;;;;;;AAiBnB,MAAM,iBAAiB;;;;;;;;;;;;;;;;;AAkBvB,MAAM,mBAAmB;;;;;;;;AASzB,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwHtB,MAAM,gBAAgB;;;;;;;;;;;AAYtB,SAAS,eAAe,eAAgD;CACtE,OAAO;EACL,CAAC,kCAAkC,cAAc,aAAa,CAAC;EAC/D,CAAC,aAAa,MAAM;EACpB,CAAC,aAAa,MAAM;EACpB,CAAC,aAAa,MAAM;EACpB,CAAC,qBAAqB,cAAc;EACpC,CAAC,uBAAuB,gBAAgB;EACxC,CAAC,gCAAgC,UAAU;EAC3C,CAAC,0CAA0C,aAAa;EACxD,CAAC,oCAAoC,aAAa;EAClD,CAAC,iCAAiC,EAAE;EACpC,CAAC,sCAAsC,EAAE;CAC3C;AACF;AAEA,eAAe,uBAAuB,eAAsC;CAC1E,KAAK,MAAM,CAAC,iBAAiB,eAAe,aAAa,GAAG;EAC1D,MAAM,WAAW,KAAK,KAAK,eAAe,YAAY;EACtD,IAAI;GACF,MAAM,OAAO,QAAQ;GACrB,MAAM,IAAI,MACR,yBAAyB,SAAS,kDACpC;EACF,SAAS,KAAK;GACZ,IAAK,IAA8B,SAAS,UAC1C;GAEF,MAAM;EACR;CACF;AACF;AAEA,eAAsB,cAAc,SAA6D;CAC/F,MAAM,gBAAgB,KAAK,QAAQ,QAAQ,SAAS;CACpD,IAAI,CAAC,QAAQ,OACX,MAAM,uBAAuB,aAAa;CAG5C,KAAK,MAAM,OAAO,gBAChB,MAAM,MAAM,KAAK,KAAK,eAAe,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CAGhE,MAAM,eAAyB,CAAC;CAChC,MAAM,OAAO,QAAQ,QAAQ,MAAM;CACnC,KAAK,MAAM,CAAC,cAAc,YAAY,eAAe,aAAa,GAAG;EACnE,MAAM,WAAW,KAAK,KAAK,eAAe,YAAY;EACtD,IAAI;GACF,MAAM,UAAU,UAAU,SAAS;IAAE,MAAM;IAAO;GAAK,CAAC;GACxD,aAAa,KAAK,YAAY;EAChC,SAAS,KAAK;GACZ,IAAK,IAA8B,SAAS,UAC1C,MAAM,IAAI,MACR,yBAAyB,SAAS,kDACpC;GAEF,MAAM;EACR;CACF;CAEA,OAAO;EAAE;EAAe;CAAa;AACvC"}

package/dist/{mcp-endpoint-DbWtLcba.mjs → mcp-endpoint-Bd3SvCkg.mjs}

@@ -6,7 +6,7 @@ const LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
 	"::1",
 	"[::1]"
 ]);
-const LOCAL_GRAPH_MCP_ENDPOINT = "http://127.0.0.1:8012/mcp";
+const DEFAULT_GRAPH_MCP_ENDPOINT = "https://mcp.chain-insights.ai/";
 function isLoopbackHost(hostname) {
 	const normalized = hostname.toLowerCase().replace(/^\[(.*)\]$/, "$1");
 	if (LOOPBACK_HOSTS.has(normalized)) return true;
@@ -36,6 +36,6 @@ function validateMcpEndpoint(value, key) {
 	return trimmed;
 }
 //#endregion
-export { graphMcpEndpointEnvOverride as n, validateMcpEndpoint as r, LOCAL_GRAPH_MCP_ENDPOINT as t };
+export { graphMcpEndpointEnvOverride as n, validateMcpEndpoint as r, DEFAULT_GRAPH_MCP_ENDPOINT as t };
 
-//# sourceMappingURL=mcp-endpoint-DbWtLcba.mjs.map
+//# sourceMappingURL=mcp-endpoint-Bd3SvCkg.mjs.map

package/dist/mcp-endpoint-Bd3SvCkg.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-endpoint-Bd3SvCkg.mjs","names":[],"sources":["../src/config/mcp-endpoint.ts"],"sourcesContent":["import { isIP } from 'node:net'\n\nconst LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1', '::1', '[::1]'])\n\nexport const LOCAL_GRAPH_MCP_ENDPOINT = 'http://127.0.0.1:8012/mcp'\nexport const DEFAULT_GRAPH_MCP_ENDPOINT = 'https://mcp.chain-insights.ai/'\n\nfunction isLoopbackHost(hostname: string): boolean {\n  const normalized = hostname.toLowerCase().replace(/^\\[(.*)\\]$/, '$1')\n  if (LOOPBACK_HOSTS.has(normalized)) return true\n  if (isIP(normalized) !== 4) return false\n  return normalized.split('.')[0] === '127'\n}\n\nfunction isKubernetesServiceHost(hostname: string): boolean {\n  return hostname.toLowerCase().endsWith('.svc.cluster.local')\n}\n\nexport function graphMcpEndpointEnvOverride(): string | undefined {\n  const envEndpoint =\n    process.env.CHAIN_INSIGHTS_GRAPH_MCP_ENDPOINT?.trim() || process.env.GRAPH_MCP_ENDPOINT?.trim()\n  return envEndpoint ? validateMcpEndpoint(envEndpoint, 'graphMcpEndpoint') : undefined\n}\n\nexport function validateMcpEndpoint(value: string, key: string): string {\n  const trimmed = value.trim()\n  if (!trimmed) {\n    throw new Error(`${key} must be a non-empty absolute URL.`)\n  }\n\n  let parsed: URL\n  try {\n    parsed = new URL(trimmed)\n  } catch {\n    throw new Error(\n      `${key} must be an absolute URL (example: https://mcp.example.com/mcp or http://127.0.0.1:8012/mcp).`\n    )\n  }\n\n  if (parsed.username || parsed.password) {\n    throw new Error(`${key} must not include URL credentials.`)\n  }\n  if (parsed.search || parsed.hash) {\n    throw new Error(`${key} must not include query parameters or URL fragments.`)\n  }\n  if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {\n    throw new Error(`${key} must use either https:// or http://.`)\n  }\n  if (\n    parsed.protocol === 'http:' &&\n    !isLoopbackHost(parsed.hostname) &&\n    !isKubernetesServiceHost(parsed.hostname)\n  ) {\n    throw new Error(\n      `${key} must use https:// for remote hosts. http:// is allowed only for localhost, loopback addresses, or Kubernetes *.svc.cluster.local service DNS.`\n    )\n  }\n\n  return trimmed\n}\n"],"mappings":";;AAEA,MAAM,iCAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;AAAO,CAAC;AAGzE,MAAa,6BAA6B;AAE1C,SAAS,eAAe,UAA2B;CACjD,MAAM,aAAa,SAAS,YAAY,CAAC,CAAC,QAAQ,cAAc,IAAI;CACpE,IAAI,eAAe,IAAI,UAAU,GAAG,OAAO;CAC3C,IAAI,KAAK,UAAU,MAAM,GAAG,OAAO;CACnC,OAAO,WAAW,MAAM,GAAG,CAAC,CAAC,OAAO;AACtC;AAEA,SAAS,wBAAwB,UAA2B;CAC1D,OAAO,SAAS,YAAY,CAAC,CAAC,SAAS,oBAAoB;AAC7D;AAEA,SAAgB,8BAAkD;CAChE,MAAM,cACJ,QAAQ,IAAI,mCAAmC,KAAK,KAAK,QAAQ,IAAI,oBAAoB,KAAK;CAChG,OAAO,cAAc,oBAAoB,aAAa,kBAAkB,IAAI,KAAA;AAC9E;AAEA,SAAgB,oBAAoB,OAAe,KAAqB;CACtE,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,GAAG,IAAI,mCAAmC;CAG5D,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,OAAO;CAC1B,QAAQ;EACN,MAAM,IAAI,MACR,GAAG,IAAI,8FACT;CACF;CAEA,IAAI,OAAO,YAAY,OAAO,UAC5B,MAAM,IAAI,MAAM,GAAG,IAAI,mCAAmC;CAE5D,IAAI,OAAO,UAAU,OAAO,MAC1B,MAAM,IAAI,MAAM,GAAG,IAAI,qDAAqD;CAE9E,IAAI,OAAO,aAAa,YAAY,OAAO,aAAa,SACtD,MAAM,IAAI,MAAM,GAAG,IAAI,sCAAsC;CAE/D,IACE,OAAO,aAAa,WACpB,CAAC,eAAe,OAAO,QAAQ,KAC/B,CAAC,wBAAwB,OAAO,QAAQ,GAExC,MAAM,IAAI,MACR,GAAG,IAAI,+IACT;CAGF,OAAO;AACT"}

package/dist/{mcp-endpoint-BIWrUOFG.cjs → mcp-endpoint-DdIVQKW5.cjs}

@@ -6,7 +6,7 @@ const LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
 	"::1",
 	"[::1]"
 ]);
-const LOCAL_GRAPH_MCP_ENDPOINT = "http://127.0.0.1:8012/mcp";
+const DEFAULT_GRAPH_MCP_ENDPOINT = "https://mcp.chain-insights.ai/";
 function isLoopbackHost(hostname) {
 	const normalized = hostname.toLowerCase().replace(/^\[(.*)\]$/, "$1");
 	if (LOOPBACK_HOSTS.has(normalized)) return true;
@@ -36,10 +36,10 @@ function validateMcpEndpoint(value, key) {
 	return trimmed;
 }
 //#endregion
-Object.defineProperty(exports, "LOCAL_GRAPH_MCP_ENDPOINT", {
+Object.defineProperty(exports, "DEFAULT_GRAPH_MCP_ENDPOINT", {
 	enumerable: true,
 	get: function() {
-		return LOCAL_GRAPH_MCP_ENDPOINT;
+		return DEFAULT_GRAPH_MCP_ENDPOINT;
 	}
 });
 Object.defineProperty(exports, "graphMcpEndpointEnvOverride", {

package/dist/mcp-proxy.cjs

@@ -482,7 +482,7 @@ async function normalizeRemoteToolResult(result, config, toolName = "remote-grap
 	const meta = { ...result._meta ?? {} };
 	if (graphPayload && includeAttachments) {
 		const { writeGraphReport } = await Promise.resolve().then(() => require("./graph-reports-_gqzxvvs.cjs"));
-		const { ensureArtifactServer } = await Promise.resolve().then(() => require("./artifact-server-CH-asxF5.cjs"));
+		const { ensureArtifactServer } = await Promise.resolve().then(() => require("./artifact-server-B8WKXtXr.cjs"));
 		const report = await writeGraphReport(graphPayload, {
 			serverPort: config.serverPort,
 			slug: toolName || "remote-graph"
@@ -509,7 +509,7 @@ function shouldIncludeAttachments(args, workspaceArtifactsEnabled) {
 async function writeLocalGraphMeta(graphData, config, slug, includeAttachments) {
 	if (!includeAttachments) return void 0;
 	const { writeGraphReport } = await Promise.resolve().then(() => require("./graph-reports-_gqzxvvs.cjs"));
-	const { ensureArtifactServer } = await Promise.resolve().then(() => require("./artifact-server-CH-asxF5.cjs"));
+	const { ensureArtifactServer } = await Promise.resolve().then(() => require("./artifact-server-B8WKXtXr.cjs"));
 	const report = await writeGraphReport(graphData, {
 		serverPort: config.serverPort,
 		slug
@@ -553,7 +553,7 @@ function jsonTextResult(structuredContent) {
 * All diagnostic output goes to console.error() or process.stderr.write().
 */
 async function createProxy() {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BVFf3v8-.cjs")).then((n) => n.config_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-DYiUgdzg.cjs")).then((n) => n.config_exports);
 	const { activeDataDir, findActiveWorkspace } = await Promise.resolve().then(() => require("./active-Bc13hJIm.cjs")).then((n) => n.active_exports);
 	const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await Promise.resolve().then(() => require("./client-CqAzD519.cjs")).then((n) => n.client_exports);
 	const { loadSchema, saveSchema } = await Promise.resolve().then(() => require("./schema-cache-n7Gbhvsj.cjs"));

package/dist/mcp-proxy.mjs

@@ -478,7 +478,7 @@ async function normalizeRemoteToolResult(result, config, toolName = "remote-grap
 	const meta = { ...result._meta ?? {} };
 	if (graphPayload && includeAttachments) {
 		const { writeGraphReport } = await import("./graph-reports-B6yoYbPq.mjs");
-		const { ensureArtifactServer } = await import("./artifact-server-DoxJr0z8.mjs");
+		const { ensureArtifactServer } = await import("./artifact-server-C1fETWsc.mjs");
 		const report = await writeGraphReport(graphPayload, {
 			serverPort: config.serverPort,
 			slug: toolName || "remote-graph"
@@ -505,7 +505,7 @@ function shouldIncludeAttachments(args, workspaceArtifactsEnabled) {
 async function writeLocalGraphMeta(graphData, config, slug, includeAttachments) {
 	if (!includeAttachments) return void 0;
 	const { writeGraphReport } = await import("./graph-reports-B6yoYbPq.mjs");
-	const { ensureArtifactServer } = await import("./artifact-server-DoxJr0z8.mjs");
+	const { ensureArtifactServer } = await import("./artifact-server-C1fETWsc.mjs");
 	const report = await writeGraphReport(graphData, {
 		serverPort: config.serverPort,
 		slug
@@ -549,7 +549,7 @@ function jsonTextResult(structuredContent) {
 * All diagnostic output goes to console.error() or process.stderr.write().
 */
 async function createProxy() {
-	const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+	const { loadConfig } = await import("./config-DiQs0rQX.mjs").then((n) => n.t);
 	const { activeDataDir, findActiveWorkspace } = await import("./active-BQopLul8.mjs").then((n) => n.t);
 	const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await import("./client-D4aM4bzP.mjs").then((n) => n.r);
 	const { loadSchema, saveSchema } = await import("./schema-cache-DJdU4MIP.mjs");

package/dist/{schema-BpeV3xDV.cjs → schema-DepyuUEP.cjs}

@@ -1,5 +1,5 @@
 const require_rolldown_runtime = require("./rolldown-runtime-C0BPl7ul.cjs");
-const require_mcp_endpoint = require("./mcp-endpoint-BIWrUOFG.cjs");
+const require_mcp_endpoint = require("./mcp-endpoint-DdIVQKW5.cjs");
 const require_limits = require("./limits-km3pmmL3.cjs");
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
@@ -61,7 +61,7 @@ function endpointSchema(key) {
 	});
 }
 const ConfigSchema = zod.object({
-	graphMcpEndpoint: endpointSchema("graphMcpEndpoint").default(require_mcp_endpoint.LOCAL_GRAPH_MCP_ENDPOINT),
+	graphMcpEndpoint: endpointSchema("graphMcpEndpoint").default(require_mcp_endpoint.DEFAULT_GRAPH_MCP_ENDPOINT),
 	graphMcpAuthToken: zod.string().optional(),
 	graphMcpMode: zod.enum(["paid", "debug"]).default("paid"),
 	walletAddress: zod.string().optional(),

package/dist/{schema-DOJA2nNi.mjs → schema-v5cwychf.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { r as validateMcpEndpoint, t as LOCAL_GRAPH_MCP_ENDPOINT } from "./mcp-endpoint-DbWtLcba.mjs";
+import { r as validateMcpEndpoint, t as DEFAULT_GRAPH_MCP_ENDPOINT } from "./mcp-endpoint-Bd3SvCkg.mjs";
 import { n as isLimitKey, r as limitCeiling, t as LIMIT_SPECS } from "./limits-D3Mn-gig.mjs";
 import path from "node:path";
 import os from "node:os";
@@ -58,7 +58,7 @@ function endpointSchema(key) {
 	});
 }
 const ConfigSchema = z.object({
-	graphMcpEndpoint: endpointSchema("graphMcpEndpoint").default(LOCAL_GRAPH_MCP_ENDPOINT),
+	graphMcpEndpoint: endpointSchema("graphMcpEndpoint").default(DEFAULT_GRAPH_MCP_ENDPOINT),
 	graphMcpAuthToken: z.string().optional(),
 	graphMcpMode: z.enum(["paid", "debug"]).default("paid"),
 	walletAddress: z.string().optional(),
@@ -92,4 +92,4 @@ const CONFIG_KEYS = [
 //#endregion
 export { parseInvestigatorConfig as n, schema_exports as r, DEFAULT_CONFIG as t };
 
-//# sourceMappingURL=schema-DOJA2nNi.mjs.map
+//# sourceMappingURL=schema-v5cwychf.mjs.map

package/dist/schema-v5cwychf.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-v5cwychf.mjs","names":[],"sources":["../src/config/schema.ts"],"sourcesContent":["import * as z from 'zod'\nimport os from 'node:os'\nimport path from 'node:path'\nimport { DEFAULT_GRAPH_MCP_ENDPOINT, validateMcpEndpoint } from './mcp-endpoint.js'\nimport { LIMIT_SPECS, isLimitKey, limitCeiling, type LimitKey } from './limits.js'\n\n// Config-file layer for the tunable search bounds (see config/limits.ts).\n// `limits` applies to every network; `networkLimits.<network>` is more\n// specific and wins over it. Both are validated here so a bad value fails at\n// config load rather than mid-investigation, and an unknown key is rejected\n// outright — a silently ignored knob is indistinguishable from one that had\n// no effect.\nfunction limitBagSchema(network?: string) {\n  return z.record(z.string(), z.number()).superRefine((bag, ctx) => {\n    for (const [key, value] of Object.entries(bag)) {\n      const where = network ? `networkLimits.${network}.${key}` : `limits.${key}`\n      if (!isLimitKey(key)) {\n        ctx.addIssue({ code: z.ZodIssueCode.custom, message: `${where}: unknown limit key` })\n        continue\n      }\n      const spec = LIMIT_SPECS[key as LimitKey]\n      const ceiling = limitCeiling(key as LimitKey, network)\n      if (!Number.isInteger(value) || value < spec.min || value > ceiling) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message: `${where}: must be an integer between ${spec.min} and ${ceiling} (got ${value})`,\n        })\n      }\n    }\n  })\n}\n\nexport const LimitsSchema = limitBagSchema()\n\nexport const NetworkLimitsSchema = z\n  .record(z.string(), z.record(z.string(), z.number()))\n  .superRefine((byNetwork, ctx) => {\n    for (const [network, bag] of Object.entries(byNetwork)) {\n      const parsed = limitBagSchema(network).safeParse(bag)\n      if (parsed.success) continue\n      for (const issue of parsed.error.issues) {\n        ctx.addIssue({ code: z.ZodIssueCode.custom, message: issue.message })\n      }\n    }\n  })\n\nfunction endpointSchema(key: 'graphMcpEndpoint') {\n  return z.string().transform((value, ctx) => {\n    try {\n      return validateMcpEndpoint(value, key)\n    } catch (err) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        message: (err as Error).message,\n      })\n      return z.NEVER\n    }\n  })\n}\n\nexport const ConfigSchema = z.object({\n  graphMcpEndpoint: endpointSchema('graphMcpEndpoint').default(DEFAULT_GRAPH_MCP_ENDPOINT),\n  graphMcpAuthToken: z.string().optional(),\n  graphMcpMode: z.enum(['paid', 'debug']).default('paid'),\n  walletAddress: z.string().optional(),\n  serverPort: z.number().int().min(1024).max(65535).default(4321),\n  dataDir: z.string().default(path.join(os.homedir(), '.chain-insights')),\n  version: z.string().default('1'),\n  limits: LimitsSchema.optional(),\n  networkLimits: NetworkLimitsSchema.optional(),\n  // Paths only. Never store or log certificate or key bytes.\n  truthIngressCertPath: z.string().min(1).optional(),\n  truthIngressKeyPath: z.string().min(1).optional(),\n  truthIngressCaPath: z.string().min(1).optional(),\n})\n\nexport type InvestigatorConfig = z.infer<typeof ConfigSchema>\n\nfunction formatConfigValidationError(error: z.ZodError): string {\n  return error.issues.map((issue) => issue.message).join('\\n')\n}\n\nexport function parseInvestigatorConfig(input: unknown): InvestigatorConfig {\n  const parsed = ConfigSchema.safeParse(input)\n  if (parsed.success) return parsed.data\n  throw new Error(formatConfigValidationError(parsed.error))\n}\n\nexport const DEFAULT_CONFIG: InvestigatorConfig = parseInvestigatorConfig({})\n\nexport const CONFIG_KEYS = [\n  'graphMcpEndpoint',\n  'graphMcpAuthToken',\n  'graphMcpMode',\n  'walletAddress',\n  'serverPort',\n  'dataDir',\n  'version',\n  // `limits` / `networkLimits` are nested objects, not scalar `cia config set`\n  // targets, so they are deliberately absent from CONFIG_KEYS. Edit them in\n  // ~/.chain-insights/config.json; they are validated on load.\n] as const\n\nexport type ConfigKey = (typeof CONFIG_KEYS)[number]\n"],"mappings":";;;;;;;;;;;;;;;AAYA,SAAS,eAAe,SAAkB;CACxC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,KAAK,QAAQ;EAChE,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAAG;GAC9C,MAAM,QAAQ,UAAU,iBAAiB,QAAQ,GAAG,QAAQ,UAAU;GACtE,IAAI,CAAC,WAAW,GAAG,GAAG;IACpB,IAAI,SAAS;KAAE,MAAM,EAAE,aAAa;KAAQ,SAAS,GAAG,MAAM;IAAqB,CAAC;IACpF;GACF;GACA,MAAM,OAAO,YAAY;GACzB,MAAM,UAAU,aAAa,KAAiB,OAAO;GACrD,IAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,OAAO,QAAQ,SAC1D,IAAI,SAAS;IACX,MAAM,EAAE,aAAa;IACrB,SAAS,GAAG,MAAM,+BAA+B,KAAK,IAAI,OAAO,QAAQ,QAAQ,MAAM;GACzF,CAAC;EAEL;CACF,CAAC;AACH;AAEA,MAAa,eAAe,eAAe;AAE3C,MAAa,sBAAsB,EAChC,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CACpD,aAAa,WAAW,QAAQ;CAC/B,KAAK,MAAM,CAAC,SAAS,QAAQ,OAAO,QAAQ,SAAS,GAAG;EACtD,MAAM,SAAS,eAAe,OAAO,CAAC,CAAC,UAAU,GAAG;EACpD,IAAI,OAAO,SAAS;EACpB,KAAK,MAAM,SAAS,OAAO,MAAM,QAC/B,IAAI,SAAS;GAAE,MAAM,EAAE,aAAa;GAAQ,SAAS,MAAM;EAAQ,CAAC;CAExE;AACF,CAAC;AAEH,SAAS,eAAe,KAAyB;CAC/C,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,OAAO,QAAQ;EAC1C,IAAI;GACF,OAAO,oBAAoB,OAAO,GAAG;EACvC,SAAS,KAAK;GACZ,IAAI,SAAS;IACX,MAAM,EAAE,aAAa;IACrB,SAAU,IAAc;GAC1B,CAAC;GACD,OAAO,EAAE;EACX;CACF,CAAC;AACH;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,kBAAkB,eAAe,kBAAkB,CAAC,CAAC,QAAQ,0BAA0B;CACvF,mBAAmB,EAAE,OAAO,CAAC,CAAC,SAAS;CACvC,cAAc,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM;CACtD,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS;CACnC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,IAAI;CAC9D,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,KAAK,GAAG,QAAQ,GAAG,iBAAiB,CAAC;CACtE,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,GAAG;CAC/B,QAAQ,aAAa,SAAS;CAC9B,eAAe,oBAAoB,SAAS;CAE5C,sBAAsB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACjD,qBAAqB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAChD,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AACjD,CAAC;AAID,SAAS,4BAA4B,OAA2B;CAC9D,OAAO,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,CAAC,CAAC,KAAK,IAAI;AAC7D;AAEA,SAAgB,wBAAwB,OAAoC;CAC1E,MAAM,SAAS,aAAa,UAAU,KAAK;CAC3C,IAAI,OAAO,SAAS,OAAO,OAAO;CAClC,MAAM,IAAI,MAAM,4BAA4B,OAAO,KAAK,CAAC;AAC3D;AAEA,MAAa,iBAAqC,wBAAwB,CAAC,CAAC;AAE5E,MAAa,cAAc;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;AAIF"}

package/dist/{server-mDSRgk1X.mjs → server-BDmHAF1w.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { t as createApp } from "./app-7NRCqx_Q.mjs";
+import { t as createApp } from "./app-BeZyCVuz.mjs";
 import { serve } from "@hono/node-server";
 //#region src/server/index.ts
 var server_exports = /* @__PURE__ */ __exportAll({ startServer: () => startServer });
@@ -43,4 +43,4 @@ function startServer(port = 4321) {
 //#endregion
 export { startServer as n, server_exports as t };
 
-//# sourceMappingURL=server-mDSRgk1X.mjs.map
+//# sourceMappingURL=server-BDmHAF1w.mjs.map

package/dist/{server-mDSRgk1X.mjs.map → server-BDmHAF1w.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"server-mDSRgk1X.mjs","names":[],"sources":["../src/server/index.ts"],"sourcesContent":["import { serve } from '@hono/node-server'\nimport { createApp } from './app.js'\n\nexport function startServer(port = 4321): () => void {\n  const app = createApp()\n  const server = serve({\n    fetch: app.fetch,\n    hostname: '127.0.0.1', // localhost-only — REQUIRED (default 0.0.0.0 is insecure)\n    port,\n  })\n\n  server.on('listening', () => {\n    console.log(`Chain Insights server running on http://127.0.0.1:${port}`)\n  })\n  server.on('error', (err: NodeJS.ErrnoException) => {\n    if (err.code === 'EADDRINUSE') {\n      process.stderr.write(`Port already in use: 127.0.0.1:${port}\\n`)\n    } else {\n      process.stderr.write(`Chain Insights server failed: ${err.message}\\n`)\n    }\n    process.exitCode = 1\n  })\n\n  let stopped = false\n  const stop = (callback?: () => void): void => {\n    if (stopped) {\n      callback?.()\n      return\n    }\n    stopped = true\n    process.off('SIGINT', onSigint)\n    process.off('SIGTERM', onSigterm)\n    server.close(callback)\n  }\n  const onSigint = () => {\n    stop()\n    process.exit(0)\n  }\n  const onSigterm = () => {\n    stop(() => process.exit(0))\n  }\n\n  process.on('SIGINT', onSigint)\n  process.on('SIGTERM', onSigterm)\n\n  return stop\n}\n"],"mappings":";;;;;AAGA,SAAgB,YAAY,OAAO,MAAkB;CACnD,MAAM,MAAM,UAAU;CACtB,MAAM,SAAS,MAAM;EACnB,OAAO,IAAI;EACX,UAAU;EACV;CACF,CAAC;CAED,OAAO,GAAG,mBAAmB;EAC3B,QAAQ,IAAI,qDAAqD,MAAM;CACzE,CAAC;CACD,OAAO,GAAG,UAAU,QAA+B;EACjD,IAAI,IAAI,SAAS,cACf,QAAQ,OAAO,MAAM,kCAAkC,KAAK,GAAG;OAE/D,QAAQ,OAAO,MAAM,iCAAiC,IAAI,QAAQ,GAAG;EAEvE,QAAQ,WAAW;CACrB,CAAC;CAED,IAAI,UAAU;CACd,MAAM,QAAQ,aAAgC;EAC5C,IAAI,SAAS;GACX,WAAW;GACX;EACF;EACA,UAAU;EACV,QAAQ,IAAI,UAAU,QAAQ;EAC9B,QAAQ,IAAI,WAAW,SAAS;EAChC,OAAO,MAAM,QAAQ;CACvB;CACA,MAAM,iBAAiB;EACrB,KAAK;EACL,QAAQ,KAAK,CAAC;CAChB;CACA,MAAM,kBAAkB;EACtB,WAAW,QAAQ,KAAK,CAAC,CAAC;CAC5B;CAEA,QAAQ,GAAG,UAAU,QAAQ;CAC7B,QAAQ,GAAG,WAAW,SAAS;CAE/B,OAAO;AACT"}
+{"version":3,"file":"server-BDmHAF1w.mjs","names":[],"sources":["../src/server/index.ts"],"sourcesContent":["import { serve } from '@hono/node-server'\nimport { createApp } from './app.js'\n\nexport function startServer(port = 4321): () => void {\n  const app = createApp()\n  const server = serve({\n    fetch: app.fetch,\n    hostname: '127.0.0.1', // localhost-only — REQUIRED (default 0.0.0.0 is insecure)\n    port,\n  })\n\n  server.on('listening', () => {\n    console.log(`Chain Insights server running on http://127.0.0.1:${port}`)\n  })\n  server.on('error', (err: NodeJS.ErrnoException) => {\n    if (err.code === 'EADDRINUSE') {\n      process.stderr.write(`Port already in use: 127.0.0.1:${port}\\n`)\n    } else {\n      process.stderr.write(`Chain Insights server failed: ${err.message}\\n`)\n    }\n    process.exitCode = 1\n  })\n\n  let stopped = false\n  const stop = (callback?: () => void): void => {\n    if (stopped) {\n      callback?.()\n      return\n    }\n    stopped = true\n    process.off('SIGINT', onSigint)\n    process.off('SIGTERM', onSigterm)\n    server.close(callback)\n  }\n  const onSigint = () => {\n    stop()\n    process.exit(0)\n  }\n  const onSigterm = () => {\n    stop(() => process.exit(0))\n  }\n\n  process.on('SIGINT', onSigint)\n  process.on('SIGTERM', onSigterm)\n\n  return stop\n}\n"],"mappings":";;;;;AAGA,SAAgB,YAAY,OAAO,MAAkB;CACnD,MAAM,MAAM,UAAU;CACtB,MAAM,SAAS,MAAM;EACnB,OAAO,IAAI;EACX,UAAU;EACV;CACF,CAAC;CAED,OAAO,GAAG,mBAAmB;EAC3B,QAAQ,IAAI,qDAAqD,MAAM;CACzE,CAAC;CACD,OAAO,GAAG,UAAU,QAA+B;EACjD,IAAI,IAAI,SAAS,cACf,QAAQ,OAAO,MAAM,kCAAkC,KAAK,GAAG;OAE/D,QAAQ,OAAO,MAAM,iCAAiC,IAAI,QAAQ,GAAG;EAEvE,QAAQ,WAAW;CACrB,CAAC;CAED,IAAI,UAAU;CACd,MAAM,QAAQ,aAAgC;EAC5C,IAAI,SAAS;GACX,WAAW;GACX;EACF;EACA,UAAU;EACV,QAAQ,IAAI,UAAU,QAAQ;EAC9B,QAAQ,IAAI,WAAW,SAAS;EAChC,OAAO,MAAM,QAAQ;CACvB;CACA,MAAM,iBAAiB;EACrB,KAAK;EACL,QAAQ,KAAK,CAAC;CAChB;CACA,MAAM,kBAAkB;EACtB,WAAW,QAAQ,KAAK,CAAC,CAAC;CAC5B;CAEA,QAAQ,GAAG,UAAU,QAAQ;CAC7B,QAAQ,GAAG,WAAW,SAAS;CAE/B,OAAO;AACT"}

package/dist/{server-CmvzYu7v.cjs → server-BjprY9Ef.cjs}

@@ -1,5 +1,5 @@
 const require_rolldown_runtime = require("./rolldown-runtime-C0BPl7ul.cjs");
-const require_app = require("./app-l9JE6bt3.cjs");
+const require_app = require("./app-BHRl5oDo.cjs");
 let _hono_node_server = require("@hono/node-server");
 //#region src/server/index.ts
 var server_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({ startServer: () => startServer });

package/docs/architecture.md

@@ -60,8 +60,9 @@ chain-insights config set graphMcpEndpoint https://mcp.chain-insights.ai/
 export CHAIN_INSIGHTS_GRAPH_MCP_ENDPOINT=https://mcp.chain-insights.ai/
 ```
 
-The runtime default is local loopback: `http://127.0.0.1:8012/mcp`. Hosted
-endpoints are operator configuration, not hardcoded package defaults.
+The runtime default is the hosted production endpoint
+`https://mcp.chain-insights.ai/`. Local loopback
+`http://127.0.0.1:8012/mcp` remains available through explicit configuration.
 
 Supported config keys:
 

package/docs/mcp-proxy.md

@@ -27,11 +27,10 @@ The proxy reads the same local Chain Insights config as the CLI.
 ## Chain Insights Graph Endpoint Configuration
 
 The endpoint lives in Chain Insights config, not in the MCP client registration.
-The npm package default is the local development endpoint
-`http://127.0.0.1:8012/mcp`. Public production is
-`https://mcp.chain-insights.ai/` (host root, no `/mcp` path). Set it
-explicitly. Do not bake that URL into MCP client JSON, source, or
-workspace templates.
+The npm package defaults to public production:
+`https://mcp.chain-insights.ai/` (host root, no `/mcp` path). A fresh install
+can use `cia networks` without endpoint setup. MCP client JSON does not carry
+the endpoint; use Chain Insights config for the default or an override.
 
 Set local development:
 
@@ -56,7 +55,7 @@ Configuration precedence:
 1. `CHAIN_INSIGHTS_GRAPH_MCP_ENDPOINT`
 2. `GRAPH_MCP_ENDPOINT` legacy alias
 3. saved `graphMcpEndpoint`
-4. local default `http://127.0.0.1:8012/mcp`
+4. hosted production default `https://mcp.chain-insights.ai/`
 
 Validation rules:
 
@@ -64,9 +63,8 @@ Validation rules:
 - remote endpoints must use `https://`
 - endpoint URLs with credentials, query strings, or fragments are rejected
 
-Keep hosted endpoint values in operator config or environment variables. Do not
-bake hosted endpoint URLs into MCP client JSON, source code, or workspace
-templates.
+Keep endpoint overrides in operator config or environment variables. Do not
+put endpoint configuration in MCP client JSON.
 
 ## Behavior
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chain-insights",
-  "version": "0.22.2",
+  "version": "0.22.3",
   "description": "AML investigation CLI and MCP proxy for blockchain risk screening, case tracking, workspace reports, and Chain Insights Graph access",
   "homepage": "https://chain-insights.ai",
   "repository": {

package/dist/init-Djhml4ih.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"init-Djhml4ih.mjs","names":[],"sources":["../src/workspace/init.ts"],"sourcesContent":["import { access, mkdir, writeFile } from 'node:fs/promises'\nimport path from 'node:path'\nimport { LOCAL_GRAPH_MCP_ENDPOINT } from '../config/mcp-endpoint.js'\n\nexport interface InitWorkspaceOptions {\n  targetDir: string\n  force?: boolean\n}\n\nexport interface InitWorkspaceResult {\n  workspaceRoot: string\n  filesWritten: string[]\n}\n\nconst WORKSPACE_DIRS = [\n  '.chain-insights',\n  '.chain-insights/schema',\n  '.chain-insights/runtime',\n  '.chain-insights/runtime/logs',\n  '.chain-insights/runtime-skill',\n  'artifacts',\n  'entities',\n  'imports',\n  'reports',\n  'reports/graphs',\n  'reports/tables',\n  'sessions',\n  'templates',\n  'published',\n]\n\nconst DEFAULT_DOMAIN_HINTS = ['aml']\n\nfunction todayIso(): string {\n  return new Date().toISOString().slice(0, 10)\n}\n\nfunction workspaceJson(workspaceRoot: string): string {\n  return (\n    JSON.stringify(\n      {\n        schema: 'chain-insights.workspace.v1',\n        name: 'Chain Insights Workspace',\n        workspace_root: workspaceRoot,\n        default_network: 'robinhood',\n        graph_mcp_endpoint: LOCAL_GRAPH_MCP_ENDPOINT,\n        artifacts_dir: 'artifacts',\n        imports_dir: 'imports',\n        reports_dir: 'reports',\n        templates_dir: 'templates',\n        domain_hints: DEFAULT_DOMAIN_HINTS,\n        created_at: todayIso(),\n      },\n      null,\n      2\n    ) + '\\n'\n  )\n}\n\nconst README = `# Chain Insights Workspace\n\nThis is a generic Chain Insights workspace.\nUse any editor or agent tooling you want to review reports, artifacts, entity\nnotes, graphs, and published bundles alongside the Chain Insights runtime\nmetadata.\n\n## Start\n\n\\`\\`\\`bash\nchain-insights mcp tools --refresh\nchain-insights wallet ready --check-only\n\\`\\`\\`\n\n## Layout\n\n\\`\\`\\`text\n.chain-insights/   Workspace metadata\nartifacts/         Tool-generated artifacts and durable workspace records\nentities/          Entity notes and indexes\nimports/           External reports, CSVs, screenshots, raw notes\nreports/           Final or interim analyst reports\nreports/graphs/    Graph JSON for visualization\nreports/tables/    Compact tabular extracts\nsessions/          Optional session notes\ntemplates/         Reusable workspace templates\npublished/         Published bundles and handoff-ready exports\n.chain-insights/schema/         Runtime graph schema captures\n.chain-insights/runtime/        Workspace-local runtime process state and debug logs\n.chain-insights/runtime-skill/  Workspace-specific agent schema notes\n\\`\\`\\`\n`\n\nconst AGENTS = `# Agent Instructions\n\nYou are operating inside a Chain Insights workspace.\n\n- Read README.md first.\n- If this directory is not initialized, run \\`cia init .\\` before persistence-producing commands.\n- Do not rerun init in an existing workspace unless replacing scaffolding with \\`--force\\`.\n- Read .chain-insights/runtime-skill/SKILL.md before graph queries.\n- Preserve full blockchain addresses exactly.\n- Do not guess the network for graph queries.\n- Capture or refresh graph schema before the first graph workflow.\n- \\`domain_hints\\` in \\`.chain-insights/workspace.json\\` are optional advisory workflow\n  preferences (for example \\`[\"aml\"]\\`) and should guide, not constrain,\n  tool selection.\n- Save compact artifacts with original graph field names.\n- Put canonical graph JSON in reports/graphs/ and analyst tables in reports/tables/.\n- Markdown reports should summarize and point to graph/table outputs; do not paste large raw JSON blobs into reports.\n- Workspace output must stay in this initialized workspace.\n- Never write artifacts, reports, graph JSON, HTML, schema captures, or logs to ~/.chain-insights.\n- Keep theories lightweight until evidence supports them.\n`\n\nconst CLAUDE = AGENTS\n\nconst CASE_BRIEF = `# Workspace Brief\n\n## Summary\n\nStatus:\nNetwork:\nCurrent Assessment:\n\n## Known Addresses\n\n## Claims To Validate\n\n## Evidence\n\n## Next Steps\n`\n\nconst IMPORTS_README = `# External Investigation Inputs\n\nPut user-provided or third-party material here before turning it into durable\nworkspace outputs.\n\nExamples:\n\n- Exchange support exports\n- CSV extracts\n- Screenshots\n- Raw notes\n- Partner reports\n\nFiles in this directory are inputs, not verified evidence. When an import\nsupports a claim, summarize it into a workspace report or artifact note and\nreference the original file path.\n`\n\nconst TEMPLATES_README = `# Reusable Workspace Templates\n\nStore local report, prompt, artifact, and note templates here.\n\nTemplates are optional workspace helpers. They are not evidence and should not\nbe treated as durable workspace state until copied into an artifact, report,\nentity note, or session note.\n`\n\nconst RUNTIME_SKILL = `---\nname: chain-insights-runtime-schema\ndescription: Workspace-local Chain Insights runtime schema notes. Refresh this after connecting to a graph MCP endpoint.\n---\n\n# Runtime Graph Schema\n\nBefore the first investigation query, capture the live graph schema into:\n\n\\`\\`\\`text\n.chain-insights/schema/<network>.graph-schema.json\n\\`\\`\\`\n\nUse \\`graph_query_batch\\` for schema capture. Prefix topology reads with\n\\`USE topology\\` (address/FLOWS_TO/LINKED graph, unified recent+historical)\nand fact reads with \\`USE facts\\`, for example:\n\n\\`\\`\\`bash\ncia mcp call graph_query_batch network=<network> 'queries=[{\"id\":\"node_labels\",\"query\":\"USE topology MATCH (n:Address) RETURN \\\"Address\\\" AS node_label, count(n) AS sample_count LIMIT 1\"},{\"id\":\"flow_sample\",\"query\":\"USE topology MATCH (:Address)-[f:FLOWS_TO]->(:Address) RETURN f.amount_usd_sum AS amount_usd_sum, f.tx_count AS tx_count LIMIT 20\"},{\"id\":\"linked_sample\",\"query\":\"USE topology MATCH (a:Address)-[l:LINKED]-(b:Address) RETURN a.address AS address, b.address AS linked_address, l.basis AS basis, l.confidence AS confidence LIMIT 20\"}]'\n\\`\\`\\`\n\nThen update this file with observed labels, relationship types, and allowed\nproperty names for the active network.\n\nThe address-grain graph schema:\n\n- Call \\`meta_network_capabilities\\` first. Pass \\`network=\\` exactly as\n  GraphRAG advertised it. CIA does not pick a default network.\n  Address format follows that network. Every topology node is\n  \\`(:Address {address, network})\\`, keyed by the raw chain-native\n  \\`address\\`. There is no separate identity key and no member-address\n  satellite: the address IS the graph node.\n- \\`(:Address)-[:LINKED]-(:Address)\\` is an **undirected** ownership-overlay\n  edge (\\`basis\\` \\`derived\\`/\\`associated\\`, plus \\`confidence\\`,\n  \\`source_event\\`, \\`declared_owner\\`) asserting the two addresses are\n  controlled by the same actor. \\`LINKED\\` is the ownership edge within the\n  advertised network — a same-network query traces\n  (\\`LINKED\\` or \\`FLOWS_TO\\`) with no network switch. Walk\n  one visible \\`LINKED\\` hop to surface actor-level exposure; never treat\n  linked addresses\n  as a single collapsed node. \\`LINKED\\` is served on the topology graph\n  only.\n- Other Address properties: \\`labels\\` (array) and \\`is_exchange\\`\n  (sparse true/null traversal hint). Labels and per-label risk live on the\n  address node: \\`label_risk\\` is a list of \\`{label, risk_level,\n  updated_timestamp}\\` maps, one per current label row.\n- Address nodes carry a risk verdict for quick triage\n  (\\`risk_score\\` float, \\`risk_level\\` string) plus base activity rollups:\n  \\`degree_in\\`/\\`degree_out\\`/\\`degree_total\\` (distinct counterparty\n  addresses), \\`tx_in_count\\`/\\`tx_out_count\\`/\\`tx_total_count\\`,\n  \\`total_in_usd\\`/\\`total_out_usd\\`/\\`total_volume_usd\\`, \\`net_flow_usd\\`\n  (in minus out; positive = net receiver) — all computed from external\n  flows only — and \\`first_activity_timestamp\\`/\n  \\`last_activity_timestamp\\`/\\`activity_span_days\\`, which include all\n  flows (self-loops included). FLOWS_TO edges carry \\`tx_count\\`,\n  \\`amount_usd_sum\\`, \\`avg_tx_size_usd\\` (understates when\n  \\`price_coverage_ratio\\` < 1), \\`first_seen_timestamp\\`/\n  \\`last_seen_timestamp\\`, \\`first_tx_id\\`/\\`last_tx_id\\`, and\n  \\`price_coverage_ratio\\`.\n  Lifetime aggregates are the only serving window.\n- Money flow is \\`(:Address)-[:FLOWS_TO]->(:Address)\\`. Public AML tools\n  accept the raw blockchain address directly — there is no resolution step.\n- The risk verdict lives on topology nodes (\\`risk_score\\`/\\`risk_level\\`),\n  and labels and per-label risk live on the address node (\\`labels\\` array\n  + \\`label_risk\\` entries). \\`USE facts\\` serves bounded individual\n  transfer rows and, until P3, address features. Facts address keys match\n  topology \\`address\\` values exactly. Do not read \\`ml_*\\`,\n  \\`confluence_score\\`, or \\`pattern_flags\\` off topology nodes — those\n  properties do not exist.\n- \\`(from:Address)-[t:TRANSFER]->(to:Address)\\` on \\`USE facts\\` returns\n  individual transfer rows (not aggregates) from \\`facts_transfers_view\\`,\n  with edge properties \\`amount\\`, \\`amount_usd\\`, \\`asset_symbol\\`,\n  \\`asset_contract\\`, \\`tx_id\\`, \\`block_height\\`, \\`block_timestamp\\`,\n  \\`event_index\\`, \\`edge_index\\`, \\`price_usd\\`, and \\`price_missing\\`.\n  Every TRANSFER query (row-select or a \\`count()\\`/\\`sum()\\` aggregate)\n  requires an indexed predicate — address equality on either endpoint or\n  \\`WHERE t.tx_id = \"...\"\\` — a bare \\`LIMIT\\` alone is rejected. Lifetime\n  address metrics (degrees, totals, activity window) are node properties on\n  \\`USE topology\\`.\n\nRules:\n\n- Prefer \\`graph_query\\` and \\`graph_query_batch\\` for graph-language reads.\n- The graph choice stays inside the query via \\`USE ...\\`; there is no\n  tool argument to select a graph.\n- Use \\`USE topology\\` for topology (the address/FLOWS_TO/LINKED graph,\n  covering unified recent and full historical activity in one graph, plus\n  the node \\`risk_score\\`/\\`risk_level\\` verdict, and labels + per-label\n  risk) and \\`USE facts\\` for features, assets, and enrichment.\n  The \\`LINKED\\` ownership overlay is served on the topology graph only.\n- Preserve source schema field names in generated data files.\n- Do not rename, reinterpret, or add unit labels to graph fields unless the\n  schema or query result explicitly supports that interpretation.\n- Keep persisted outputs compact: select only the fields needed to support the claim.\n  Avoid storing whole node or relationship property blobs unless\n  the purpose of the query is schema discovery or debugging.\n- When using BFS, fixed-depth traversal fallbacks, or any manual \\`FLOWS_TO\\`\n  traversal, treat exchange hot wallets as terminal endpoints only. Do not\n  expand from, through, or classify exchange nodes as deposit, suspect, or\n  intermediate candidates. In Cypher, require every non-terminal traversal node\n  to satisfy \\`is_exchange IS NULL\\`; only the final exchange endpoint should\n  satisfy \\`is_exchange IS NOT NULL\\`.\n- Keep analysis products separate from summary notes: graph JSON belongs under\n  \\`reports/graphs/\\`, tabular extracts under \\`reports/tables/\\`, and analyst\n  narrative under \\`reports/\\`.\n- Markdown reports should be short provenance records with key facts and\n  pointers. Large JSON belongs in \\`reports/tables/\\`, not inline in reports.\n\nAML tool guidance:\n\n1. Use \\`aml_address_risk\\` for single-address enrichment and optional\n   comparison with another address.\n2. Use \\`graph_query_batch\\` only when the high-level tools do not answer the\n   exact question, and \\`graph_query\\` for single read-only queries.\n\n\\`aml_address_risk\\` takes a raw blockchain address as input directly — there\nis no identity-resolution step — and returns \\`chain-insights.result.v1\\`. Preserve\nfull blockchain addresses in the summary and all workspace artifacts.\n`\n\nconst SCHEMA_README = `# Runtime Schema Captures\n\nStore graph schema captures here, for example:\n\n\\`\\`\\`text\nrobinhood.graph-schema.json\n\\`\\`\\`\n\nSchema captures should be generated before the first graph workflow in a fresh\nworkspace, then referenced by artifacts, reports, and runtime skill notes.\n`\n\nfunction workspaceFiles(workspaceRoot: string): Array<[string, string]> {\n  return [\n    ['.chain-insights/workspace.json', workspaceJson(workspaceRoot)],\n    ['README.md', README],\n    ['AGENTS.md', AGENTS],\n    ['CLAUDE.md', CLAUDE],\n    ['imports/README.md', IMPORTS_README],\n    ['templates/README.md', TEMPLATES_README],\n    ['templates/workspace-brief.md', CASE_BRIEF],\n    ['.chain-insights/runtime-skill/SKILL.md', RUNTIME_SKILL],\n    ['.chain-insights/schema/README.md', SCHEMA_README],\n    ['.chain-insights/runtime/.keep', ''],\n    ['.chain-insights/runtime/logs/.keep', ''],\n  ]\n}\n\nasync function assertNoFileCollisions(workspaceRoot: string): Promise<void> {\n  for (const [relativePath] of workspaceFiles(workspaceRoot)) {\n    const filePath = path.join(workspaceRoot, relativePath)\n    try {\n      await access(filePath)\n      throw new Error(\n        `Refusing to overwrite ${filePath}. Re-run with --force to replace workspace files.`\n      )\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n        continue\n      }\n      throw err\n    }\n  }\n}\n\nexport async function initWorkspace(options: InitWorkspaceOptions): Promise<InitWorkspaceResult> {\n  const workspaceRoot = path.resolve(options.targetDir)\n  if (!options.force) {\n    await assertNoFileCollisions(workspaceRoot)\n  }\n\n  for (const dir of WORKSPACE_DIRS) {\n    await mkdir(path.join(workspaceRoot, dir), { recursive: true })\n  }\n\n  const filesWritten: string[] = []\n  const flag = options.force ? 'w' : 'wx'\n  for (const [relativePath, content] of workspaceFiles(workspaceRoot)) {\n    const filePath = path.join(workspaceRoot, relativePath)\n    try {\n      await writeFile(filePath, content, { mode: 0o600, flag })\n      filesWritten.push(relativePath)\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'EEXIST') {\n        throw new Error(\n          `Refusing to overwrite ${filePath}. Re-run with --force to replace workspace files.`\n        )\n      }\n      throw err\n    }\n  }\n\n  return { workspaceRoot, filesWritten }\n}\n"],"mappings":";;;;AAcA,MAAM,iBAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAM,uBAAuB,CAAC,KAAK;AAEnC,SAAS,WAAmB;CAC1B,wBAAO,IAAI,KAAK,EAAA,CAAE,YAAY,CAAC,CAAC,MAAM,GAAG,EAAE;AAC7C;AAEA,SAAS,cAAc,eAA+B;CACpD,OACE,KAAK,UACH;EACE,QAAQ;EACR,MAAM;EACN,gBAAgB;EAChB,iBAAiB;EACjB,oBAAoB;EACpB,eAAe;EACf,aAAa;EACb,aAAa;EACb,eAAe;EACf,cAAc;EACd,YAAY,SAAS;CACvB,GACA,MACA,CACF,IAAI;AAER;AAEA,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCf,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;AAsBf,MAAM,SAAS;AAEf,MAAM,aAAa;;;;;;;;;;;;;;;;AAiBnB,MAAM,iBAAiB;;;;;;;;;;;;;;;;;AAkBvB,MAAM,mBAAmB;;;;;;;;AASzB,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwHtB,MAAM,gBAAgB;;;;;;;;;;;AAYtB,SAAS,eAAe,eAAgD;CACtE,OAAO;EACL,CAAC,kCAAkC,cAAc,aAAa,CAAC;EAC/D,CAAC,aAAa,MAAM;EACpB,CAAC,aAAa,MAAM;EACpB,CAAC,aAAa,MAAM;EACpB,CAAC,qBAAqB,cAAc;EACpC,CAAC,uBAAuB,gBAAgB;EACxC,CAAC,gCAAgC,UAAU;EAC3C,CAAC,0CAA0C,aAAa;EACxD,CAAC,oCAAoC,aAAa;EAClD,CAAC,iCAAiC,EAAE;EACpC,CAAC,sCAAsC,EAAE;CAC3C;AACF;AAEA,eAAe,uBAAuB,eAAsC;CAC1E,KAAK,MAAM,CAAC,iBAAiB,eAAe,aAAa,GAAG;EAC1D,MAAM,WAAW,KAAK,KAAK,eAAe,YAAY;EACtD,IAAI;GACF,MAAM,OAAO,QAAQ;GACrB,MAAM,IAAI,MACR,yBAAyB,SAAS,kDACpC;EACF,SAAS,KAAK;GACZ,IAAK,IAA8B,SAAS,UAC1C;GAEF,MAAM;EACR;CACF;AACF;AAEA,eAAsB,cAAc,SAA6D;CAC/F,MAAM,gBAAgB,KAAK,QAAQ,QAAQ,SAAS;CACpD,IAAI,CAAC,QAAQ,OACX,MAAM,uBAAuB,aAAa;CAG5C,KAAK,MAAM,OAAO,gBAChB,MAAM,MAAM,KAAK,KAAK,eAAe,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CAGhE,MAAM,eAAyB,CAAC;CAChC,MAAM,OAAO,QAAQ,QAAQ,MAAM;CACnC,KAAK,MAAM,CAAC,cAAc,YAAY,eAAe,aAAa,GAAG;EACnE,MAAM,WAAW,KAAK,KAAK,eAAe,YAAY;EACtD,IAAI;GACF,MAAM,UAAU,UAAU,SAAS;IAAE,MAAM;IAAO;GAAK,CAAC;GACxD,aAAa,KAAK,YAAY;EAChC,SAAS,KAAK;GACZ,IAAK,IAA8B,SAAS,UAC1C,MAAM,IAAI,MACR,yBAAyB,SAAS,kDACpC;GAEF,MAAM;EACR;CACF;CAEA,OAAO;EAAE;EAAe;CAAa;AACvC"}

package/dist/mcp-endpoint-DbWtLcba.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-endpoint-DbWtLcba.mjs","names":[],"sources":["../src/config/mcp-endpoint.ts"],"sourcesContent":["import { isIP } from 'node:net'\n\nconst LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1', '::1', '[::1]'])\n\nexport const LOCAL_GRAPH_MCP_ENDPOINT = 'http://127.0.0.1:8012/mcp'\n\nfunction isLoopbackHost(hostname: string): boolean {\n  const normalized = hostname.toLowerCase().replace(/^\\[(.*)\\]$/, '$1')\n  if (LOOPBACK_HOSTS.has(normalized)) return true\n  if (isIP(normalized) !== 4) return false\n  return normalized.split('.')[0] === '127'\n}\n\nfunction isKubernetesServiceHost(hostname: string): boolean {\n  return hostname.toLowerCase().endsWith('.svc.cluster.local')\n}\n\nexport function graphMcpEndpointEnvOverride(): string | undefined {\n  const envEndpoint =\n    process.env.CHAIN_INSIGHTS_GRAPH_MCP_ENDPOINT?.trim() || process.env.GRAPH_MCP_ENDPOINT?.trim()\n  return envEndpoint ? validateMcpEndpoint(envEndpoint, 'graphMcpEndpoint') : undefined\n}\n\nexport function validateMcpEndpoint(value: string, key: string): string {\n  const trimmed = value.trim()\n  if (!trimmed) {\n    throw new Error(`${key} must be a non-empty absolute URL.`)\n  }\n\n  let parsed: URL\n  try {\n    parsed = new URL(trimmed)\n  } catch {\n    throw new Error(\n      `${key} must be an absolute URL (example: https://mcp.example.com/mcp or http://127.0.0.1:8012/mcp).`\n    )\n  }\n\n  if (parsed.username || parsed.password) {\n    throw new Error(`${key} must not include URL credentials.`)\n  }\n  if (parsed.search || parsed.hash) {\n    throw new Error(`${key} must not include query parameters or URL fragments.`)\n  }\n  if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {\n    throw new Error(`${key} must use either https:// or http://.`)\n  }\n  if (\n    parsed.protocol === 'http:' &&\n    !isLoopbackHost(parsed.hostname) &&\n    !isKubernetesServiceHost(parsed.hostname)\n  ) {\n    throw new Error(\n      `${key} must use https:// for remote hosts. http:// is allowed only for localhost, loopback addresses, or Kubernetes *.svc.cluster.local service DNS.`\n    )\n  }\n\n  return trimmed\n}\n"],"mappings":";;AAEA,MAAM,iCAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;AAAO,CAAC;AAEzE,MAAa,2BAA2B;AAExC,SAAS,eAAe,UAA2B;CACjD,MAAM,aAAa,SAAS,YAAY,CAAC,CAAC,QAAQ,cAAc,IAAI;CACpE,IAAI,eAAe,IAAI,UAAU,GAAG,OAAO;CAC3C,IAAI,KAAK,UAAU,MAAM,GAAG,OAAO;CACnC,OAAO,WAAW,MAAM,GAAG,CAAC,CAAC,OAAO;AACtC;AAEA,SAAS,wBAAwB,UAA2B;CAC1D,OAAO,SAAS,YAAY,CAAC,CAAC,SAAS,oBAAoB;AAC7D;AAEA,SAAgB,8BAAkD;CAChE,MAAM,cACJ,QAAQ,IAAI,mCAAmC,KAAK,KAAK,QAAQ,IAAI,oBAAoB,KAAK;CAChG,OAAO,cAAc,oBAAoB,aAAa,kBAAkB,IAAI,KAAA;AAC9E;AAEA,SAAgB,oBAAoB,OAAe,KAAqB;CACtE,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,GAAG,IAAI,mCAAmC;CAG5D,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,OAAO;CAC1B,QAAQ;EACN,MAAM,IAAI,MACR,GAAG,IAAI,8FACT;CACF;CAEA,IAAI,OAAO,YAAY,OAAO,UAC5B,MAAM,IAAI,MAAM,GAAG,IAAI,mCAAmC;CAE5D,IAAI,OAAO,UAAU,OAAO,MAC1B,MAAM,IAAI,MAAM,GAAG,IAAI,qDAAqD;CAE9E,IAAI,OAAO,aAAa,YAAY,OAAO,aAAa,SACtD,MAAM,IAAI,MAAM,GAAG,IAAI,sCAAsC;CAE/D,IACE,OAAO,aAAa,WACpB,CAAC,eAAe,OAAO,QAAQ,KAC/B,CAAC,wBAAwB,OAAO,QAAQ,GAExC,MAAM,IAAI,MACR,GAAG,IAAI,+IACT;CAGF,OAAO;AACT"}

package/dist/schema-DOJA2nNi.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema-DOJA2nNi.mjs","names":[],"sources":["../src/config/schema.ts"],"sourcesContent":["import * as z from 'zod'\nimport os from 'node:os'\nimport path from 'node:path'\nimport { LOCAL_GRAPH_MCP_ENDPOINT, validateMcpEndpoint } from './mcp-endpoint.js'\nimport { LIMIT_SPECS, isLimitKey, limitCeiling, type LimitKey } from './limits.js'\n\n// Config-file layer for the tunable search bounds (see config/limits.ts).\n// `limits` applies to every network; `networkLimits.<network>` is more\n// specific and wins over it. Both are validated here so a bad value fails at\n// config load rather than mid-investigation, and an unknown key is rejected\n// outright — a silently ignored knob is indistinguishable from one that had\n// no effect.\nfunction limitBagSchema(network?: string) {\n  return z.record(z.string(), z.number()).superRefine((bag, ctx) => {\n    for (const [key, value] of Object.entries(bag)) {\n      const where = network ? `networkLimits.${network}.${key}` : `limits.${key}`\n      if (!isLimitKey(key)) {\n        ctx.addIssue({ code: z.ZodIssueCode.custom, message: `${where}: unknown limit key` })\n        continue\n      }\n      const spec = LIMIT_SPECS[key as LimitKey]\n      const ceiling = limitCeiling(key as LimitKey, network)\n      if (!Number.isInteger(value) || value < spec.min || value > ceiling) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message: `${where}: must be an integer between ${spec.min} and ${ceiling} (got ${value})`,\n        })\n      }\n    }\n  })\n}\n\nexport const LimitsSchema = limitBagSchema()\n\nexport const NetworkLimitsSchema = z\n  .record(z.string(), z.record(z.string(), z.number()))\n  .superRefine((byNetwork, ctx) => {\n    for (const [network, bag] of Object.entries(byNetwork)) {\n      const parsed = limitBagSchema(network).safeParse(bag)\n      if (parsed.success) continue\n      for (const issue of parsed.error.issues) {\n        ctx.addIssue({ code: z.ZodIssueCode.custom, message: issue.message })\n      }\n    }\n  })\n\nfunction endpointSchema(key: 'graphMcpEndpoint') {\n  return z.string().transform((value, ctx) => {\n    try {\n      return validateMcpEndpoint(value, key)\n    } catch (err) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        message: (err as Error).message,\n      })\n      return z.NEVER\n    }\n  })\n}\n\nexport const ConfigSchema = z.object({\n  graphMcpEndpoint: endpointSchema('graphMcpEndpoint').default(LOCAL_GRAPH_MCP_ENDPOINT),\n  graphMcpAuthToken: z.string().optional(),\n  graphMcpMode: z.enum(['paid', 'debug']).default('paid'),\n  walletAddress: z.string().optional(),\n  serverPort: z.number().int().min(1024).max(65535).default(4321),\n  dataDir: z.string().default(path.join(os.homedir(), '.chain-insights')),\n  version: z.string().default('1'),\n  limits: LimitsSchema.optional(),\n  networkLimits: NetworkLimitsSchema.optional(),\n  // Paths only. Never store or log certificate or key bytes.\n  truthIngressCertPath: z.string().min(1).optional(),\n  truthIngressKeyPath: z.string().min(1).optional(),\n  truthIngressCaPath: z.string().min(1).optional(),\n})\n\nexport type InvestigatorConfig = z.infer<typeof ConfigSchema>\n\nfunction formatConfigValidationError(error: z.ZodError): string {\n  return error.issues.map((issue) => issue.message).join('\\n')\n}\n\nexport function parseInvestigatorConfig(input: unknown): InvestigatorConfig {\n  const parsed = ConfigSchema.safeParse(input)\n  if (parsed.success) return parsed.data\n  throw new Error(formatConfigValidationError(parsed.error))\n}\n\nexport const DEFAULT_CONFIG: InvestigatorConfig = parseInvestigatorConfig({})\n\nexport const CONFIG_KEYS = [\n  'graphMcpEndpoint',\n  'graphMcpAuthToken',\n  'graphMcpMode',\n  'walletAddress',\n  'serverPort',\n  'dataDir',\n  'version',\n  // `limits` / `networkLimits` are nested objects, not scalar `cia config set`\n  // targets, so they are deliberately absent from CONFIG_KEYS. Edit them in\n  // ~/.chain-insights/config.json; they are validated on load.\n] as const\n\nexport type ConfigKey = (typeof CONFIG_KEYS)[number]\n"],"mappings":";;;;;;;;;;;;;;;AAYA,SAAS,eAAe,SAAkB;CACxC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,KAAK,QAAQ;EAChE,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAAG;GAC9C,MAAM,QAAQ,UAAU,iBAAiB,QAAQ,GAAG,QAAQ,UAAU;GACtE,IAAI,CAAC,WAAW,GAAG,GAAG;IACpB,IAAI,SAAS;KAAE,MAAM,EAAE,aAAa;KAAQ,SAAS,GAAG,MAAM;IAAqB,CAAC;IACpF;GACF;GACA,MAAM,OAAO,YAAY;GACzB,MAAM,UAAU,aAAa,KAAiB,OAAO;GACrD,IAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,OAAO,QAAQ,SAC1D,IAAI,SAAS;IACX,MAAM,EAAE,aAAa;IACrB,SAAS,GAAG,MAAM,+BAA+B,KAAK,IAAI,OAAO,QAAQ,QAAQ,MAAM;GACzF,CAAC;EAEL;CACF,CAAC;AACH;AAEA,MAAa,eAAe,eAAe;AAE3C,MAAa,sBAAsB,EAChC,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CACpD,aAAa,WAAW,QAAQ;CAC/B,KAAK,MAAM,CAAC,SAAS,QAAQ,OAAO,QAAQ,SAAS,GAAG;EACtD,MAAM,SAAS,eAAe,OAAO,CAAC,CAAC,UAAU,GAAG;EACpD,IAAI,OAAO,SAAS;EACpB,KAAK,MAAM,SAAS,OAAO,MAAM,QAC/B,IAAI,SAAS;GAAE,MAAM,EAAE,aAAa;GAAQ,SAAS,MAAM;EAAQ,CAAC;CAExE;AACF,CAAC;AAEH,SAAS,eAAe,KAAyB;CAC/C,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,OAAO,QAAQ;EAC1C,IAAI;GACF,OAAO,oBAAoB,OAAO,GAAG;EACvC,SAAS,KAAK;GACZ,IAAI,SAAS;IACX,MAAM,EAAE,aAAa;IACrB,SAAU,IAAc;GAC1B,CAAC;GACD,OAAO,EAAE;EACX;CACF,CAAC;AACH;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,kBAAkB,eAAe,kBAAkB,CAAC,CAAC,QAAQ,wBAAwB;CACrF,mBAAmB,EAAE,OAAO,CAAC,CAAC,SAAS;CACvC,cAAc,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM;CACtD,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS;CACnC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,IAAI;CAC9D,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,KAAK,GAAG,QAAQ,GAAG,iBAAiB,CAAC;CACtE,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,GAAG;CAC/B,QAAQ,aAAa,SAAS;CAC9B,eAAe,oBAAoB,SAAS;CAE5C,sBAAsB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACjD,qBAAqB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAChD,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AACjD,CAAC;AAID,SAAS,4BAA4B,OAA2B;CAC9D,OAAO,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,CAAC,CAAC,KAAK,IAAI;AAC7D;AAEA,SAAgB,wBAAwB,OAAoC;CAC1E,MAAM,SAAS,aAAa,UAAU,KAAK;CAC3C,IAAI,OAAO,SAAS,OAAO,OAAO;CAClC,MAAM,IAAI,MAAM,4BAA4B,OAAO,KAAK,CAAC;AAC3D;AAEA,MAAa,iBAAqC,wBAAwB,CAAC,CAAC;AAE5E,MAAa,cAAc;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;AAIF"}