chain-insights 0.22.2 → 0.23.0

package/dist/mcp-proxy.mjs

@@ -1,19 +1,16 @@
 import { n as PACKAGE_VERSION } from "./version-BA3J8hu4.mjs";
 import { t as PaymentRequiredError } from "./client-D4aM4bzP.mjs";
-import { n as PUBLIC_MCP_TOOL_ALLOWED_ARGS, r as PUBLIC_MCP_TOOL_REQUIRED_ARGS, t as HIDDEN_REMOTE_TOOL_NAMES } from "./tool-visibility-C0ALejXI.mjs";
+import { n as PUBLIC_MCP_TOOL_ALLOWED_ARGS, r as PUBLIC_MCP_TOOL_REQUIRED_ARGS, t as HIDDEN_REMOTE_TOOL_NAMES } from "./tool-visibility-CXbwfKhv.mjs";
 import { t as primitiveBackendUsageStatus } from "./usage-status-CHiOPA-2.mjs";
 import { n as mirrorGraphNetworkCapabilities } from "./capabilities-BZI6qROg.mjs";
 import { r as appendActionLog, t as actionLogSignalsFromResult } from "./action-log-diTHyMbV.mjs";
-import { fileURLToPath } from "node:url";
 import path from "node:path";
-import { readFileSync } from "node:fs";
 import { appendFile, mkdir } from "node:fs/promises";
 import * as z from "zod";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
-import { RESOURCE_MIME_TYPE, registerAppResource, registerAppTool } from "@modelcontextprotocol/ext-apps/server";
 //#region src/mcp/proxy.ts
 const LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
 	"meta_network_capabilities",
@@ -21,19 +18,17 @@ const LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
 	"meta_help",
 	"wallet_balance"
 ]);
-const GRAPH_RESOURCE_URI = "ui://chain-insights/graph";
-const GRAPH_APP_TOOL_NAMES = /* @__PURE__ */ new Set(["aml_address_risk"]);
 const GRAPH_ARRAY_KEYS = [
 	"nodes",
 	"edges",
 	"flows",
 	"edge_anchors"
 ];
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
 function resolveMcpProxyMode(env = process.env) {
 	const raw = env["CHAIN_INSIGHTS_MCP_PROXY_MODE"]?.trim().toLowerCase();
-	if (!raw || raw === "workspace") return "workspace";
-	if (raw === "stateless" || raw === "no-workspace" || raw === "workspace-less") return "stateless";
+	if (!raw || raw === "stateless") return "stateless";
+	if (raw === "workspace") return "workspace";
+	if (raw === "no-workspace" || raw === "workspace-less") return "stateless";
 	throw new Error(`CHAIN_INSIGHTS_MCP_PROXY_MODE must be workspace or stateless; got "${raw}"`);
 }
 const KNOWN_PUBLIC_TOOL_DESCRIPTIONS = {
@@ -51,11 +46,9 @@ const EMPTY_INPUT_SCHEMA = z.strictObject({});
 const REMOTE_GRAPH_TOOL_REQUEST_TIMEOUT_MS = 9e5;
 const CHAIN_INSIGHTS_WORKFLOW = [
 	"Workflow:",
-	"1. Chain Insights workspaces are append-only local working directories. Bootstrap with cia init before workflows that persist artifacts.",
-	"2. Do not call investigation tools until required arguments are known. Network is required; use meta_network_capabilities to check supported networks and available tools, or ask the user if missing.",
-	"3. Use aml_address_risk for single-address enrichment. Use graph_query(_batch) for graph-level questions that aml_address_risk does not answer.",
-	"4. Persisted outputs belong in the initialized workspace under reports/, reports/graphs/, reports/tables/, artifacts/, entities/, sessions/, and published/.",
-	"5. For local review, inspect the generated Markdown and graph/table artifacts directly in the workspace."
+	"1. Do not call investigation tools until required arguments are known. Network is required; use meta_network_capabilities to check supported networks and available tools, or ask the user if missing.",
+	"2. Use aml_address_risk for single-address enrichment. Use graph_query(_batch) for graph-level questions that aml_address_risk does not answer.",
+	"3. Preserve tool summaries and structured facts as returned. Keep full blockchain addresses intact."
 ].join("\n");
 const GRAPH_SCHEMA_HINTS = [
 	"Graph query hints:",
@@ -76,67 +69,25 @@ const GRAPH_SCHEMA_HINTS = [
 	"- All graph_query calls are read-only. Never use CREATE, INSERT, MERGE, SET, DELETE, REMOVE, DROP, DETACH, ADD, CONNECT, DISCONNECT, ALTER, TRUNCATE, GRANT, or REVOKE.",
 	"- Use USE facts graph patterns for fact and enrichment reads. Do not query internal table namespaces directly."
 ].join("\n");
-const GRAPH_REPORT_HINTS = [
-	"Graph visualization behavior:",
-	"- Graph-backed tools return the investigator report as text content and keep raw graph data out of LLM-visible structuredContent.",
-	"- Chain Insights prepares the graph view automatically from local workspace report files when graph metadata is available.",
-	"- If the graph view cannot load a report, retry the graph-backed tool call so Chain Insights can recreate the local graph report."
-].join("\n");
 const SERVER_INSTRUCTIONS = [
-	"Chain Insights is a local graph-analysis workspace for AI agents.",
+	"Chain Insights is an AML and graph-analysis MCP server for AI agents.",
 	CHAIN_INSIGHTS_WORKFLOW,
-	GRAPH_REPORT_HINTS,
 	GRAPH_SCHEMA_HINTS,
 	"Presentation rules: preserve tool summaries as returned; never truncate blockchain addresses or identity_resolution audit mappings."
 ].join("\n\n");
 const STATELESS_SERVER_INSTRUCTIONS = [
 	"Chain Insights is running as a stateless AML proxy for a host application.",
-	"Do not use local workspace persistence, wallet, or graph report workflows in this mode.",
 	"Use meta_network_capabilities first when network support is unknown, then call aml_address_risk, graph_query, or graph_query_batch as needed.",
+	"Use wallet_balance to inspect the local payment wallet when payment setup is needed.",
 	GRAPH_SCHEMA_HINTS,
 	"Presentation rules: preserve tool summaries as returned; never truncate blockchain addresses or identity_resolution audit mappings."
 ].join("\n\n");
-function readGraphAppHtml() {
-	const candidates = [
-		path.resolve(__dirname, "templates", "graph.html"),
-		path.resolve(__dirname, "..", "templates", "graph.html"),
-		path.resolve(__dirname, "..", "viz", "templates", "graph.html")
-	];
-	for (const candidate of candidates) try {
-		return readFileSync(candidate, "utf8");
-	} catch (err) {
-		if (err.code !== "ENOENT") throw err;
-	}
-	throw new Error(`Chain Insights Graph app template not found. Tried: ${candidates.join(", ")}`);
-}
-function graphArtifactOrigins(config) {
-	return [`http://127.0.0.1:${config.serverPort}`, `http://localhost:${config.serverPort}`];
-}
-function hasGraphApp(tool) {
-	const configuredUri = tool._meta?.ui;
-	if (configuredUri && typeof configuredUri === "object" && "resourceUri" in configuredUri && configuredUri.resourceUri === GRAPH_RESOURCE_URI) return true;
-	if (tool._meta?.["ui/resourceUri"] === GRAPH_RESOURCE_URI) return true;
-	if (GRAPH_APP_TOOL_NAMES.has(tool.name)) return true;
-	return JSON.stringify(tool.outputSchema ?? {}).includes("\"app_data\"");
-}
-function graphToolMeta(tool) {
-	const meta = { ...tool._meta ?? {} };
-	const ui = meta.ui && typeof meta.ui === "object" && !Array.isArray(meta.ui) ? { ...meta.ui } : {};
-	return {
-		...meta,
-		ui: {
-			...ui,
-			resourceUri: GRAPH_RESOURCE_URI
-		}
-	};
-}
 function knownPublicToolInputSchema(toolName) {
 	switch (toolName) {
 		case "aml_address_risk": return {
 			address: z.string().min(1).describe("Blockchain address to screen."),
 			network: NETWORK_SCHEMA,
-			compare_address: z.string().optional().describe("Optional address to compare against the screened address."),
-			include_attachments: z.boolean().optional().describe("Include graph app report metadata")
+			compare_address: z.string().optional().describe("Optional address to compare against the screened address.")
 		};
 		case "graph_query": return {
 			query: z.string().min(1).describe("Read-only GQL/Cypher query. Use USE topology for topology (address/FLOWS_TO/LINKED graph, unified recent+historical, plus the node risk_score/risk_level verdict) and USE facts for bounded TRANSFER rows and enrichment."),
@@ -435,14 +386,9 @@ function registerLocalPrompts(server) {
 	}, async () => promptResult("Use Chain Insights wallet_balance. Show the wallet address, payment network, token, and amount exactly as returned.", "Wallet balance"));
 	server.registerPrompt("meta-help", {
 		title: "Chain Insights Help",
-		description: "Show available Chain Insights tools and workspace workflow.",
+		description: "Show available Chain Insights tools and workflow guidance.",
 		argsSchema: {}
-	}, async () => promptResult("Use Chain Insights meta_help. Summarize the available tools and workspace workflow without inventing capabilities.", "Chain Insights help"));
-}
-function hasGraphArrayFields(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-	const record = value;
-	return GRAPH_ARRAY_KEYS.some((key) => Array.isArray(record[key]));
+	}, async () => promptResult("Use Chain Insights meta_help. Summarize the available tools and workflow guidance without inventing capabilities.", "Chain Insights help"));
 }
 function sanitizeStructuredContentForGraphPayload(structuredContent) {
 	if (!structuredContent) return void 0;
@@ -458,67 +404,27 @@ function sanitizeStructuredValue(value) {
 	}
 	return sanitized;
 }
-function getRemoteGraphPayload(result) {
-	const chainInsights = result._meta?.chainInsights;
-	if (!chainInsights || typeof chainInsights !== "object" || Array.isArray(chainInsights)) return null;
-	const graph = chainInsights.graph;
-	if (graph === void 0) return null;
-	if (!graph || typeof graph !== "object" || Array.isArray(graph)) throw new Error("Invalid remote graph payload");
-	const graphRecord = graph;
-	if (!("data" in graphRecord)) {
-		if ("url" in graphRecord || hasGraphArrayFields(graphRecord)) throw new Error("Invalid remote graph payload");
-		return null;
+function sanitizeRemoteMeta(metaValue) {
+	if (!metaValue || typeof metaValue !== "object" || Array.isArray(metaValue)) return void 0;
+	const meta = { ...metaValue };
+	delete meta.ui;
+	delete meta["ui/resourceUri"];
+	const chainInsights = meta.chainInsights;
+	if (chainInsights && typeof chainInsights === "object" && !Array.isArray(chainInsights)) {
+		const { graph: _graph, ...withoutGraph } = chainInsights;
+		if (Object.keys(withoutGraph).length > 0) meta.chainInsights = withoutGraph;
+		else delete meta.chainInsights;
 	}
-	const data = graphRecord.data;
-	if (!data || typeof data !== "object" || Array.isArray(data)) throw new Error("Invalid remote graph payload");
-	return data;
+	return Object.keys(meta).length > 0 ? meta : void 0;
 }
-async function normalizeRemoteToolResult(result, config, toolName = "remote-graph", includeAttachments = true) {
-	const graphPayload = getRemoteGraphPayload(result);
-	const meta = { ...result._meta ?? {} };
-	if (graphPayload && includeAttachments) {
-		const { writeGraphReport } = await import("./graph-reports-B6yoYbPq.mjs");
-		const { ensureArtifactServer } = await import("./artifact-server-DoxJr0z8.mjs");
-		const report = await writeGraphReport(graphPayload, {
-			serverPort: config.serverPort,
-			slug: toolName || "remote-graph"
-		});
-		await ensureArtifactServer(config.serverPort);
-		meta.chainInsights = {
-			...meta.chainInsights ?? {},
-			graph: {
-				schema: report.schema,
-				url: report.url
-			}
-		};
-	}
+function normalizeRemoteToolResult(result) {
 	return {
 		content: result.content ?? [],
 		structuredContent: sanitizeStructuredContentForGraphPayload(result.structuredContent),
-		_meta: Object.keys(meta).length > 0 ? meta : void 0,
+		_meta: sanitizeRemoteMeta(result._meta),
 		isError: result.isError
 	};
 }
-function shouldIncludeAttachments(args, workspaceArtifactsEnabled) {
-	return workspaceArtifactsEnabled && args["include_attachments"] !== false;
-}
-async function writeLocalGraphMeta(graphData, config, slug, includeAttachments) {
-	if (!includeAttachments) return void 0;
-	const { writeGraphReport } = await import("./graph-reports-B6yoYbPq.mjs");
-	const { ensureArtifactServer } = await import("./artifact-server-DoxJr0z8.mjs");
-	const report = await writeGraphReport(graphData, {
-		serverPort: config.serverPort,
-		slug
-	});
-	await ensureArtifactServer(config.serverPort);
-	return {
-		schema: report.schema,
-		url: report.url
-	};
-}
-function graphMetaResult(graph) {
-	return graph ? { chainInsights: { graph } } : void 0;
-}
 function cleanNetworkCapabilities(value) {
 	const structuredContent = isRecord(value) ? value.structuredContent : void 0;
 	const facts = isRecord(structuredContent) ? structuredContent.facts : void 0;
@@ -549,7 +455,7 @@ function jsonTextResult(structuredContent) {
 * All diagnostic output goes to console.error() or process.stderr.write().
 */
 async function createProxy() {
-	const { loadConfig } = await import("./config-CnNMdt4M.mjs").then((n) => n.t);
+	const { loadConfig } = await import("./config-DbbPiGk0.mjs").then((n) => n.t);
 	const { activeDataDir, findActiveWorkspace } = await import("./active-BQopLul8.mjs").then((n) => n.t);
 	const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await import("./client-D4aM4bzP.mjs").then((n) => n.r);
 	const { loadSchema, saveSchema } = await import("./schema-cache-DJdU4MIP.mjs");
@@ -728,7 +634,7 @@ async function createProxy() {
 			};
 		}
 	});
-	if (workspaceArtifactsEnabled) server.registerTool("wallet_balance", {
+	server.registerTool("wallet_balance", {
 		title: "Wallet Balance",
 		description: KNOWN_PUBLIC_TOOL_DESCRIPTIONS.wallet_balance,
 		inputSchema: EMPTY_INPUT_SCHEMA,
@@ -760,38 +666,21 @@ async function createProxy() {
 			};
 		}
 	});
-	registerAppResource(server, "Fund Flow Graph", GRAPH_RESOURCE_URI, {
-		description: "Interactive fund-flow and pattern graph for Chain Insights investigation reports.",
-		_meta: { ui: { csp: {
-			resourceDomains: graphArtifactOrigins(config),
-			connectDomains: graphArtifactOrigins(config)
-		} } }
-	}, async () => ({ contents: [{
-		uri: GRAPH_RESOURCE_URI,
-		mimeType: RESOURCE_MIME_TYPE,
-		text: readGraphAppHtml(),
-		_meta: { ui: { csp: {
-			resourceDomains: graphArtifactOrigins(config),
-			connectDomains: graphArtifactOrigins(config)
-		} } }
-	}] }));
-	if (!remoteToolNames.has("aml_address_risk")) registerAppTool(server, "aml_address_risk", {
+	if (!remoteToolNames.has("aml_address_risk")) server.registerTool("aml_address_risk", {
 		title: "Address Risk",
 		description: KNOWN_PUBLIC_TOOL_DESCRIPTIONS.aml_address_risk,
 		inputSchema: {
 			address: z.string().min(1).describe("Blockchain address to screen"),
 			network: NETWORK_SCHEMA,
-			compare_address: z.string().optional().describe("Optional address to compare against the screened address"),
-			include_attachments: z.boolean().optional().describe("Include graph app report metadata")
+			compare_address: z.string().optional().describe("Optional address to compare against the screened address")
 		},
-		_meta: { ui: { resourceUri: GRAPH_RESOURCE_URI } },
 		annotations: {
 			readOnlyHint: true,
 			destructiveHint: false,
 			idempotentHint: true,
 			openWorldHint: true
 		}
-	}, async ({ address, network, compare_address, include_attachments }) => {
+	}, async ({ address, network, compare_address }) => {
 		try {
 			if (!remoteConnected) return {
 				content: [{
@@ -800,21 +689,19 @@ async function createProxy() {
 				}],
 				isError: true
 			};
-			const { addressRisk } = await import("./public-tools-BjqZGGAC.mjs");
+			const { addressRisk } = await import("./public-tools-CpOLkME5.mjs");
 			const result = await addressRisk(remoteClient, {
 				address,
 				network,
 				compareAddress: compare_address,
 				writeArtifacts: workspaceArtifactsEnabled
 			});
-			const graph = await writeLocalGraphMeta(result.graphData, config, `address-risk-${network}-${address}`, shouldIncludeAttachments({ include_attachments }, workspaceArtifactsEnabled));
 			return {
 				content: [{
 					type: "text",
 					text: result.summaryText
 				}],
 				structuredContent: result.structuredContent,
-				_meta: graphMetaResult(graph),
 				isError: false
 			};
 		} catch (err) {
@@ -848,7 +735,7 @@ async function createProxy() {
 		content: [{
 			type: "text",
 			text: workspaceArtifactsEnabled ? [
-				"Chain Insights helps AI agents run AML investigation workflows and keep evidence in local workspace files.",
+				"Chain Insights helps AI agents run AML investigation workflows.",
 				"",
 				CHAIN_INSIGHTS_WORKFLOW,
 				"",
@@ -861,14 +748,10 @@ async function createProxy() {
 				"",
 				"Wallet tools:",
 				"- wallet_balance: show the local payment wallet address, payment network, token, and amount.",
-				"- meta_help: show this overview.",
-				"",
-				GRAPH_REPORT_HINTS
+				"- meta_help: show this overview."
 			].join("\n") : [
 				"Chain Insights stateless AML proxy for host applications.",
 				"",
-				"Local workspace persistence, wallet, and graph report attachment tools are disabled in this mode.",
-				"",
 				"Available graph-backed tools:",
 				"- meta_network_capabilities: inspect supported networks and available tools.",
 				"- meta_usage_status: check the caller public free graph_query quota.",
@@ -906,7 +789,7 @@ async function createProxy() {
 					arguments: normalizedArgs
 				};
 				const requestOptions = remoteToolRequestOptions(tool.name);
-				return await normalizeRemoteToolResult(requestOptions ? await remoteClient.callTool(request, void 0, requestOptions) : await remoteClient.callTool(request), config, tool.name, shouldIncludeAttachments(normalizedArgs, workspaceArtifactsEnabled));
+				return normalizeRemoteToolResult(requestOptions ? await remoteClient.callTool(request, void 0, requestOptions) : await remoteClient.callTool(request));
 			} catch (err) {
 				if (err instanceof PaymentRequiredError) return {
 					content: [{
@@ -938,11 +821,7 @@ async function createProxy() {
 			inputSchema,
 			...knownPublicToolAnnotations(tool.name) ? { annotations: knownPublicToolAnnotations(tool.name) } : {}
 		};
-		if (hasGraphApp(tool)) registerAppTool(server, tool.name, {
-			...toolConfig,
-			_meta: graphToolMeta(tool)
-		}, handler);
-		else server.registerTool(tool.name, toolConfig, handler);
+		server.registerTool(tool.name, toolConfig, handler);
 	}
 	const transport = new StdioServerTransport();
 	await server.connect(transport);