chain-insights 0.3.9 → 0.3.11

package/dist/{app-BxojXjtB.cjs → app-DjJn3irw.cjs}

@@ -100,7 +100,7 @@ function createApp() {
 		ts: Date.now()
 	}));
 	app.get("/status", async (c) => {
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 		const config = await loadConfig();
 		return c.json({
 			dataDir: config.dataDir,

package/dist/{app-CRd39JJ8.mjs → app-norpwdou.mjs}

@@ -97,7 +97,7 @@ function createApp() {
 		ts: Date.now()
 	}));
 	app.get("/status", async (c) => {
-		const { loadConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+		const { loadConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 		const config = await loadConfig();
 		return c.json({
 			dataDir: config.dataDir,
@@ -152,4 +152,4 @@ function createApp() {
 //#endregion
 export { createApp as t };
 
-//# sourceMappingURL=app-CRd39JJ8.mjs.map
+//# sourceMappingURL=app-norpwdou.mjs.map

package/dist/{app-CRd39JJ8.mjs.map → app-norpwdou.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"app-CRd39JJ8.mjs","names":[],"sources":["../src/server/app.ts"],"sourcesContent":["import { Hono } from 'hono'\nimport { lstat, readFile, readdir, realpath } from 'node:fs/promises'\nimport path from 'node:path'\nimport os from 'node:os'\n\nconst WORKSPACE_TREE_ROOTS = ['cases', 'reports', '.chain-insights/schema']\nconst WORKSPACE_TREE_MAX_DEPTH = 4\n\ninterface WorkspaceTreeEntry {\n  path: string\n  type: 'file' | 'directory' | 'symlink'\n  size?: number\n}\n\nfunction withinRoot(root: string, target: string): boolean {\n  const relative = path.relative(path.resolve(root), path.resolve(target))\n  return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative))\n}\n\nasync function realPathWithinRoot(root: string, target: string): Promise<boolean> {\n  try {\n    const [realRoot, realTarget] = await Promise.all([realpath(root), realpath(target)])\n    return withinRoot(realRoot, realTarget)\n  } catch {\n    return false\n  }\n}\n\nfunction toWorkspaceRelative(root: string, target: string): string {\n  return path.relative(root, target).split(path.sep).join('/')\n}\n\nasync function listWorkspaceEntries(\n  workspaceRoot: string,\n  roots = WORKSPACE_TREE_ROOTS,\n  maxDepth = WORKSPACE_TREE_MAX_DEPTH\n): Promise<WorkspaceTreeEntry[]> {\n  const entries: WorkspaceTreeEntry[] = []\n  const root = path.resolve(workspaceRoot)\n\n  async function visit(target: string, depth: number): Promise<void> {\n    const resolved = path.resolve(target)\n    if (!withinRoot(root, resolved)) return\n\n    let info: Awaited<ReturnType<typeof lstat>>\n    try {\n      info = await lstat(resolved)\n    } catch {\n      return\n    }\n\n    const type = info.isSymbolicLink() ? 'symlink' : info.isDirectory() ? 'directory' : info.isFile() ? 'file' : null\n    if (!type) return\n\n    const entry: WorkspaceTreeEntry = {\n      path: toWorkspaceRelative(root, resolved),\n      type,\n    }\n    if (type === 'file') entry.size = info.size\n    entries.push(entry)\n\n    if (type !== 'directory' || depth >= maxDepth) return\n    if (!await realPathWithinRoot(root, resolved)) return\n\n    let children: string[]\n    try {\n      children = await readdir(resolved)\n    } catch {\n      return\n    }\n\n    for (const child of children.sort()) {\n      await visit(path.join(resolved, child), depth + 1)\n    }\n  }\n\n  for (const rootName of roots) {\n    const target = path.resolve(root, rootName)\n    if (withinRoot(root, target)) await visit(target, 0)\n  }\n\n  return entries\n}\n\nasync function findVizHtml(vizId: string): Promise<string | null> {\n  const home = os.homedir()\n  const filename = `${vizId}.html`\n\n  // 1. Check central standalone directory first (fast, single path)\n  const centralPath = path.join(home, '.chain-insights', 'viz', filename)\n  try {\n    return await readFile(centralPath, 'utf-8')\n  } catch { /* not found here, continue */ }\n\n  // 2. Check per-case directory using vizId prefix (case-based vizs use <caseId>_<timestamp>)\n  //    The vizId for case-based vizs is formatted as <case-id>_<timestamp>,\n  //    so extract the case-id prefix to check its directory first.\n  const underscoreIdx = vizId.lastIndexOf('_')\n  if (underscoreIdx > 0) {\n    const possibleCaseId = vizId.substring(0, underscoreIdx)\n    const casePath = path.join(home, '.chain-insights', 'cases', possibleCaseId, 'viz', filename)\n    try {\n      return await readFile(casePath, 'utf-8')\n    } catch { /* not found here, continue */ }\n  }\n\n  // 3. Fallback: scan all case directories (CONTEXT.md: ~/.chain-insights/cases/<case-id>/viz/)\n  const casesDir = path.join(home, '.chain-insights', 'cases')\n  try {\n    const cases = await readdir(casesDir)\n    for (const caseId of cases) {\n      const casePath = path.join(casesDir, caseId, 'viz', filename)\n      try {\n        return await readFile(casePath, 'utf-8')\n      } catch { /* not in this case dir */ }\n    }\n  } catch { /* cases dir doesn't exist */ }\n\n  return null\n}\n\nfunction isSafeGraphReportFilename(filename: string): boolean {\n  return (\n    filename.endsWith('.graph.json') &&\n    /^[A-Za-z0-9._-]+$/.test(filename) &&\n    !filename.includes('..') &&\n    !filename.includes('/') &&\n    !filename.includes('\\\\')\n  )\n}\n\nexport function createApp(): Hono {\n  const app = new Hono()\n\n  app.get('/health', (c) => c.json({ ok: true, ts: Date.now() }))\n\n  app.get('/status', async (c) => {\n    const { loadConfig } = await import('../config/index.js')\n    const config = await loadConfig()\n    return c.json({\n      dataDir: config.dataDir,\n      graphMcpMode: config.graphMcpMode,\n      server: 'running',\n    })\n  })\n\n  app.get('/viz/:id', async (c) => {\n    const id = c.req.param('id')\n    if (!/^[a-zA-Z0-9_-]+$/.test(id)) {\n      return c.json({ error: 'Invalid visualization ID' }, 400)\n    }\n    const html = await findVizHtml(id)\n    if (!html) {\n      return c.json({ error: 'Visualization not found' }, 404)\n    }\n    return c.html(html)\n  })\n\n  app.get('/graph-reports/:filename', async (c) => {\n    const filename = c.req.param('filename')\n    if (!isSafeGraphReportFilename(filename)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const graphPath = path.resolve(paths.reportGraphsRoot, filename)\n    if (!withinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n    if (!await realPathWithinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n\n    try {\n      const graph = await readFile(graphPath, 'utf-8')\n      return c.body(graph, 200, {\n        'Content-Type': 'application/json',\n        'Access-Control-Allow-Origin': '*',\n      })\n    } catch {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n  })\n\n  app.get('/graph-reports/*', (c) => {\n    return c.json({ error: 'Invalid graph report filename' }, 400)\n  })\n\n  app.get('/workspace/tree', async (c) => {\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const entries = await listWorkspaceEntries(paths.root, WORKSPACE_TREE_ROOTS)\n    return c.json({\n      schema: 'chain-insights.workspace-tree.v1',\n      root: paths.root,\n      entries,\n    })\n  })\n\n  app.onError((err, c) => {\n    console.error(err)\n    return c.json({ error: 'Internal server error' }, 500)\n  })\n\n  return app\n}\n"],"mappings":";;;;;AAKA,MAAM,uBAAuB;CAAC;CAAS;CAAW;AAAwB;AAC1E,MAAM,2BAA2B;AAQjC,SAAS,WAAW,MAAc,QAAyB;CACzD,MAAM,WAAW,KAAK,SAAS,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,MAAM,CAAC;CACvE,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,QAAQ;AACpF;AAEA,eAAe,mBAAmB,MAAc,QAAkC;CAChF,IAAI;EACF,MAAM,CAAC,UAAU,cAAc,MAAM,QAAQ,IAAI,CAAC,SAAS,IAAI,GAAG,SAAS,MAAM,CAAC,CAAC;EACnF,OAAO,WAAW,UAAU,UAAU;CACxC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,oBAAoB,MAAc,QAAwB;CACjE,OAAO,KAAK,SAAS,MAAM,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AAC7D;AAEA,eAAe,qBACb,eACA,QAAQ,sBACR,WAAW,0BACoB;CAC/B,MAAM,UAAgC,CAAC;CACvC,MAAM,OAAO,KAAK,QAAQ,aAAa;CAEvC,eAAe,MAAM,QAAgB,OAA8B;EACjE,MAAM,WAAW,KAAK,QAAQ,MAAM;EACpC,IAAI,CAAC,WAAW,MAAM,QAAQ,GAAG;EAEjC,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,MAAM,QAAQ;EAC7B,QAAQ;GACN;EACF;EAEA,MAAM,OAAO,KAAK,eAAe,IAAI,YAAY,KAAK,YAAY,IAAI,cAAc,KAAK,OAAO,IAAI,SAAS;EAC7G,IAAI,CAAC,MAAM;EAEX,MAAM,QAA4B;GAChC,MAAM,oBAAoB,MAAM,QAAQ;GACxC;EACF;EACA,IAAI,SAAS,QAAQ,MAAM,OAAO,KAAK;EACvC,QAAQ,KAAK,KAAK;EAElB,IAAI,SAAS,eAAe,SAAS,UAAU;EAC/C,IAAI,CAAC,MAAM,mBAAmB,MAAM,QAAQ,GAAG;EAE/C,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,QAAQ,QAAQ;EACnC,QAAQ;GACN;EACF;EAEA,KAAK,MAAM,SAAS,SAAS,KAAK,GAChC,MAAM,MAAM,KAAK,KAAK,UAAU,KAAK,GAAG,QAAQ,CAAC;CAErD;CAEA,KAAK,MAAM,YAAY,OAAO;EAC5B,MAAM,SAAS,KAAK,QAAQ,MAAM,QAAQ;EAC1C,IAAI,WAAW,MAAM,MAAM,GAAG,MAAM,MAAM,QAAQ,CAAC;CACrD;CAEA,OAAO;AACT;AAEA,eAAe,YAAY,OAAuC;CAChE,MAAM,OAAO,GAAG,QAAQ;CACxB,MAAM,WAAW,GAAG,MAAM;CAG1B,MAAM,cAAc,KAAK,KAAK,MAAM,mBAAmB,OAAO,QAAQ;CACtE,IAAI;EACF,OAAO,MAAM,SAAS,aAAa,OAAO;CAC5C,QAAQ,CAAiC;CAKzC,MAAM,gBAAgB,MAAM,YAAY,GAAG;CAC3C,IAAI,gBAAgB,GAAG;EACrB,MAAM,iBAAiB,MAAM,UAAU,GAAG,aAAa;EACvD,MAAM,WAAW,KAAK,KAAK,MAAM,mBAAmB,SAAS,gBAAgB,OAAO,QAAQ;EAC5F,IAAI;GACF,OAAO,MAAM,SAAS,UAAU,OAAO;EACzC,QAAQ,CAAiC;CAC3C;CAGA,MAAM,WAAW,KAAK,KAAK,MAAM,mBAAmB,OAAO;CAC3D,IAAI;EACF,MAAM,QAAQ,MAAM,QAAQ,QAAQ;EACpC,KAAK,MAAM,UAAU,OAAO;GAC1B,MAAM,WAAW,KAAK,KAAK,UAAU,QAAQ,OAAO,QAAQ;GAC5D,IAAI;IACF,OAAO,MAAM,SAAS,UAAU,OAAO;GACzC,QAAQ,CAA6B;EACvC;CACF,QAAQ,CAAgC;CAExC,OAAO;AACT;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,OACE,SAAS,SAAS,aAAa,KAC/B,oBAAoB,KAAK,QAAQ,KACjC,CAAC,SAAS,SAAS,IAAI,KACvB,CAAC,SAAS,SAAS,GAAG,KACtB,CAAC,SAAS,SAAS,IAAI;AAE3B;AAEA,SAAgB,YAAkB;CAChC,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,YAAY,MAAM,EAAE,KAAK;EAAE,IAAI;EAAM,IAAI,KAAK,IAAI;CAAE,CAAC,CAAC;CAE9D,IAAI,IAAI,WAAW,OAAO,MAAM;EAC9B,MAAM,EAAE,eAAe,MAAM,OAAO,yBAAA,MAAA,MAAA,EAAA,CAAA;EACpC,MAAM,SAAS,MAAM,WAAW;EAChC,OAAO,EAAE,KAAK;GACZ,SAAS,OAAO;GAChB,cAAc,OAAO;GACrB,QAAQ;EACV,CAAC;CACH,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,IAAI,CAAC,mBAAmB,KAAK,EAAE,GAC7B,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;EAE1D,MAAM,OAAO,MAAM,YAAY,EAAE;EACjC,IAAI,CAAC,MACH,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAEzD,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,4BAA4B,OAAO,MAAM;EAC/C,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;EACvC,IAAI,CAAC,0BAA0B,QAAQ,GACrC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAG/D,MAAM,EAAE,yBAAyB,MAAM,OAAO,8BAAA,MAAA,MAAA,EAAA,CAAA;EAC9C,MAAM,QAAQ,qBAAqB;EACnC,MAAM,YAAY,KAAK,QAAQ,MAAM,kBAAkB,QAAQ;EAC/D,IAAI,CAAC,WAAW,MAAM,kBAAkB,SAAS,GAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAE/D,IAAI,CAAC,MAAM,mBAAmB,MAAM,kBAAkB,SAAS,GAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EAGxD,IAAI;GACF,MAAM,QAAQ,MAAM,SAAS,WAAW,OAAO;GAC/C,OAAO,EAAE,KAAK,OAAO,KAAK;IACxB,gBAAgB;IAChB,+BAA+B;GACjC,CAAC;EACH,QAAQ;GACN,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACxD;CACF,CAAC;CAED,IAAI,IAAI,qBAAqB,MAAM;EACjC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;CAC/D,CAAC;CAED,IAAI,IAAI,mBAAmB,OAAO,MAAM;EACtC,MAAM,EAAE,yBAAyB,MAAM,OAAO,8BAAA,MAAA,MAAA,EAAA,CAAA;EAC9C,MAAM,QAAQ,qBAAqB;EACnC,MAAM,UAAU,MAAM,qBAAqB,MAAM,MAAM,oBAAoB;EAC3E,OAAO,EAAE,KAAK;GACZ,QAAQ;GACR,MAAM,MAAM;GACZ;EACF,CAAC;CACH,CAAC;CAED,IAAI,SAAS,KAAK,MAAM;EACtB,QAAQ,MAAM,GAAG;EACjB,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;CACvD,CAAC;CAED,OAAO;AACT"}
+{"version":3,"file":"app-norpwdou.mjs","names":[],"sources":["../src/server/app.ts"],"sourcesContent":["import { Hono } from 'hono'\nimport { lstat, readFile, readdir, realpath } from 'node:fs/promises'\nimport path from 'node:path'\nimport os from 'node:os'\n\nconst WORKSPACE_TREE_ROOTS = ['cases', 'reports', '.chain-insights/schema']\nconst WORKSPACE_TREE_MAX_DEPTH = 4\n\ninterface WorkspaceTreeEntry {\n  path: string\n  type: 'file' | 'directory' | 'symlink'\n  size?: number\n}\n\nfunction withinRoot(root: string, target: string): boolean {\n  const relative = path.relative(path.resolve(root), path.resolve(target))\n  return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative))\n}\n\nasync function realPathWithinRoot(root: string, target: string): Promise<boolean> {\n  try {\n    const [realRoot, realTarget] = await Promise.all([realpath(root), realpath(target)])\n    return withinRoot(realRoot, realTarget)\n  } catch {\n    return false\n  }\n}\n\nfunction toWorkspaceRelative(root: string, target: string): string {\n  return path.relative(root, target).split(path.sep).join('/')\n}\n\nasync function listWorkspaceEntries(\n  workspaceRoot: string,\n  roots = WORKSPACE_TREE_ROOTS,\n  maxDepth = WORKSPACE_TREE_MAX_DEPTH\n): Promise<WorkspaceTreeEntry[]> {\n  const entries: WorkspaceTreeEntry[] = []\n  const root = path.resolve(workspaceRoot)\n\n  async function visit(target: string, depth: number): Promise<void> {\n    const resolved = path.resolve(target)\n    if (!withinRoot(root, resolved)) return\n\n    let info: Awaited<ReturnType<typeof lstat>>\n    try {\n      info = await lstat(resolved)\n    } catch {\n      return\n    }\n\n    const type = info.isSymbolicLink() ? 'symlink' : info.isDirectory() ? 'directory' : info.isFile() ? 'file' : null\n    if (!type) return\n\n    const entry: WorkspaceTreeEntry = {\n      path: toWorkspaceRelative(root, resolved),\n      type,\n    }\n    if (type === 'file') entry.size = info.size\n    entries.push(entry)\n\n    if (type !== 'directory' || depth >= maxDepth) return\n    if (!await realPathWithinRoot(root, resolved)) return\n\n    let children: string[]\n    try {\n      children = await readdir(resolved)\n    } catch {\n      return\n    }\n\n    for (const child of children.sort()) {\n      await visit(path.join(resolved, child), depth + 1)\n    }\n  }\n\n  for (const rootName of roots) {\n    const target = path.resolve(root, rootName)\n    if (withinRoot(root, target)) await visit(target, 0)\n  }\n\n  return entries\n}\n\nasync function findVizHtml(vizId: string): Promise<string | null> {\n  const home = os.homedir()\n  const filename = `${vizId}.html`\n\n  // 1. Check central standalone directory first (fast, single path)\n  const centralPath = path.join(home, '.chain-insights', 'viz', filename)\n  try {\n    return await readFile(centralPath, 'utf-8')\n  } catch { /* not found here, continue */ }\n\n  // 2. Check per-case directory using vizId prefix (case-based vizs use <caseId>_<timestamp>)\n  //    The vizId for case-based vizs is formatted as <case-id>_<timestamp>,\n  //    so extract the case-id prefix to check its directory first.\n  const underscoreIdx = vizId.lastIndexOf('_')\n  if (underscoreIdx > 0) {\n    const possibleCaseId = vizId.substring(0, underscoreIdx)\n    const casePath = path.join(home, '.chain-insights', 'cases', possibleCaseId, 'viz', filename)\n    try {\n      return await readFile(casePath, 'utf-8')\n    } catch { /* not found here, continue */ }\n  }\n\n  // 3. Fallback: scan all case directories (CONTEXT.md: ~/.chain-insights/cases/<case-id>/viz/)\n  const casesDir = path.join(home, '.chain-insights', 'cases')\n  try {\n    const cases = await readdir(casesDir)\n    for (const caseId of cases) {\n      const casePath = path.join(casesDir, caseId, 'viz', filename)\n      try {\n        return await readFile(casePath, 'utf-8')\n      } catch { /* not in this case dir */ }\n    }\n  } catch { /* cases dir doesn't exist */ }\n\n  return null\n}\n\nfunction isSafeGraphReportFilename(filename: string): boolean {\n  return (\n    filename.endsWith('.graph.json') &&\n    /^[A-Za-z0-9._-]+$/.test(filename) &&\n    !filename.includes('..') &&\n    !filename.includes('/') &&\n    !filename.includes('\\\\')\n  )\n}\n\nexport function createApp(): Hono {\n  const app = new Hono()\n\n  app.get('/health', (c) => c.json({ ok: true, ts: Date.now() }))\n\n  app.get('/status', async (c) => {\n    const { loadConfig } = await import('../config/index.js')\n    const config = await loadConfig()\n    return c.json({\n      dataDir: config.dataDir,\n      graphMcpMode: config.graphMcpMode,\n      server: 'running',\n    })\n  })\n\n  app.get('/viz/:id', async (c) => {\n    const id = c.req.param('id')\n    if (!/^[a-zA-Z0-9_-]+$/.test(id)) {\n      return c.json({ error: 'Invalid visualization ID' }, 400)\n    }\n    const html = await findVizHtml(id)\n    if (!html) {\n      return c.json({ error: 'Visualization not found' }, 404)\n    }\n    return c.html(html)\n  })\n\n  app.get('/graph-reports/:filename', async (c) => {\n    const filename = c.req.param('filename')\n    if (!isSafeGraphReportFilename(filename)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const graphPath = path.resolve(paths.reportGraphsRoot, filename)\n    if (!withinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Invalid graph report filename' }, 400)\n    }\n    if (!await realPathWithinRoot(paths.reportGraphsRoot, graphPath)) {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n\n    try {\n      const graph = await readFile(graphPath, 'utf-8')\n      return c.body(graph, 200, {\n        'Content-Type': 'application/json',\n        'Access-Control-Allow-Origin': '*',\n      })\n    } catch {\n      return c.json({ error: 'Graph report not found' }, 404)\n    }\n  })\n\n  app.get('/graph-reports/*', (c) => {\n    return c.json({ error: 'Invalid graph report filename' }, 400)\n  })\n\n  app.get('/workspace/tree', async (c) => {\n    const { workspaceOutputPaths } = await import('../workspace/output-root.js')\n    const paths = workspaceOutputPaths()\n    const entries = await listWorkspaceEntries(paths.root, WORKSPACE_TREE_ROOTS)\n    return c.json({\n      schema: 'chain-insights.workspace-tree.v1',\n      root: paths.root,\n      entries,\n    })\n  })\n\n  app.onError((err, c) => {\n    console.error(err)\n    return c.json({ error: 'Internal server error' }, 500)\n  })\n\n  return app\n}\n"],"mappings":";;;;;AAKA,MAAM,uBAAuB;CAAC;CAAS;CAAW;AAAwB;AAC1E,MAAM,2BAA2B;AAQjC,SAAS,WAAW,MAAc,QAAyB;CACzD,MAAM,WAAW,KAAK,SAAS,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,MAAM,CAAC;CACvE,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,QAAQ;AACpF;AAEA,eAAe,mBAAmB,MAAc,QAAkC;CAChF,IAAI;EACF,MAAM,CAAC,UAAU,cAAc,MAAM,QAAQ,IAAI,CAAC,SAAS,IAAI,GAAG,SAAS,MAAM,CAAC,CAAC;EACnF,OAAO,WAAW,UAAU,UAAU;CACxC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,oBAAoB,MAAc,QAAwB;CACjE,OAAO,KAAK,SAAS,MAAM,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AAC7D;AAEA,eAAe,qBACb,eACA,QAAQ,sBACR,WAAW,0BACoB;CAC/B,MAAM,UAAgC,CAAC;CACvC,MAAM,OAAO,KAAK,QAAQ,aAAa;CAEvC,eAAe,MAAM,QAAgB,OAA8B;EACjE,MAAM,WAAW,KAAK,QAAQ,MAAM;EACpC,IAAI,CAAC,WAAW,MAAM,QAAQ,GAAG;EAEjC,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,MAAM,QAAQ;EAC7B,QAAQ;GACN;EACF;EAEA,MAAM,OAAO,KAAK,eAAe,IAAI,YAAY,KAAK,YAAY,IAAI,cAAc,KAAK,OAAO,IAAI,SAAS;EAC7G,IAAI,CAAC,MAAM;EAEX,MAAM,QAA4B;GAChC,MAAM,oBAAoB,MAAM,QAAQ;GACxC;EACF;EACA,IAAI,SAAS,QAAQ,MAAM,OAAO,KAAK;EACvC,QAAQ,KAAK,KAAK;EAElB,IAAI,SAAS,eAAe,SAAS,UAAU;EAC/C,IAAI,CAAC,MAAM,mBAAmB,MAAM,QAAQ,GAAG;EAE/C,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,QAAQ,QAAQ;EACnC,QAAQ;GACN;EACF;EAEA,KAAK,MAAM,SAAS,SAAS,KAAK,GAChC,MAAM,MAAM,KAAK,KAAK,UAAU,KAAK,GAAG,QAAQ,CAAC;CAErD;CAEA,KAAK,MAAM,YAAY,OAAO;EAC5B,MAAM,SAAS,KAAK,QAAQ,MAAM,QAAQ;EAC1C,IAAI,WAAW,MAAM,MAAM,GAAG,MAAM,MAAM,QAAQ,CAAC;CACrD;CAEA,OAAO;AACT;AAEA,eAAe,YAAY,OAAuC;CAChE,MAAM,OAAO,GAAG,QAAQ;CACxB,MAAM,WAAW,GAAG,MAAM;CAG1B,MAAM,cAAc,KAAK,KAAK,MAAM,mBAAmB,OAAO,QAAQ;CACtE,IAAI;EACF,OAAO,MAAM,SAAS,aAAa,OAAO;CAC5C,QAAQ,CAAiC;CAKzC,MAAM,gBAAgB,MAAM,YAAY,GAAG;CAC3C,IAAI,gBAAgB,GAAG;EACrB,MAAM,iBAAiB,MAAM,UAAU,GAAG,aAAa;EACvD,MAAM,WAAW,KAAK,KAAK,MAAM,mBAAmB,SAAS,gBAAgB,OAAO,QAAQ;EAC5F,IAAI;GACF,OAAO,MAAM,SAAS,UAAU,OAAO;EACzC,QAAQ,CAAiC;CAC3C;CAGA,MAAM,WAAW,KAAK,KAAK,MAAM,mBAAmB,OAAO;CAC3D,IAAI;EACF,MAAM,QAAQ,MAAM,QAAQ,QAAQ;EACpC,KAAK,MAAM,UAAU,OAAO;GAC1B,MAAM,WAAW,KAAK,KAAK,UAAU,QAAQ,OAAO,QAAQ;GAC5D,IAAI;IACF,OAAO,MAAM,SAAS,UAAU,OAAO;GACzC,QAAQ,CAA6B;EACvC;CACF,QAAQ,CAAgC;CAExC,OAAO;AACT;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,OACE,SAAS,SAAS,aAAa,KAC/B,oBAAoB,KAAK,QAAQ,KACjC,CAAC,SAAS,SAAS,IAAI,KACvB,CAAC,SAAS,SAAS,GAAG,KACtB,CAAC,SAAS,SAAS,IAAI;AAE3B;AAEA,SAAgB,YAAkB;CAChC,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,YAAY,MAAM,EAAE,KAAK;EAAE,IAAI;EAAM,IAAI,KAAK,IAAI;CAAE,CAAC,CAAC;CAE9D,IAAI,IAAI,WAAW,OAAO,MAAM;EAC9B,MAAM,EAAE,eAAe,MAAM,OAAO,yBAAA,MAAA,MAAA,EAAA,CAAA;EACpC,MAAM,SAAS,MAAM,WAAW;EAChC,OAAO,EAAE,KAAK;GACZ,SAAS,OAAO;GAChB,cAAc,OAAO;GACrB,QAAQ;EACV,CAAC;CACH,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,IAAI,CAAC,mBAAmB,KAAK,EAAE,GAC7B,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;EAE1D,MAAM,OAAO,MAAM,YAAY,EAAE;EACjC,IAAI,CAAC,MACH,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAEzD,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,4BAA4B,OAAO,MAAM;EAC/C,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;EACvC,IAAI,CAAC,0BAA0B,QAAQ,GACrC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAG/D,MAAM,EAAE,yBAAyB,MAAM,OAAO,8BAAA,MAAA,MAAA,EAAA,CAAA;EAC9C,MAAM,QAAQ,qBAAqB;EACnC,MAAM,YAAY,KAAK,QAAQ,MAAM,kBAAkB,QAAQ;EAC/D,IAAI,CAAC,WAAW,MAAM,kBAAkB,SAAS,GAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;EAE/D,IAAI,CAAC,MAAM,mBAAmB,MAAM,kBAAkB,SAAS,GAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EAGxD,IAAI;GACF,MAAM,QAAQ,MAAM,SAAS,WAAW,OAAO;GAC/C,OAAO,EAAE,KAAK,OAAO,KAAK;IACxB,gBAAgB;IAChB,+BAA+B;GACjC,CAAC;EACH,QAAQ;GACN,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACxD;CACF,CAAC;CAED,IAAI,IAAI,qBAAqB,MAAM;EACjC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;CAC/D,CAAC;CAED,IAAI,IAAI,mBAAmB,OAAO,MAAM;EACtC,MAAM,EAAE,yBAAyB,MAAM,OAAO,8BAAA,MAAA,MAAA,EAAA,CAAA;EAC9C,MAAM,QAAQ,qBAAqB;EACnC,MAAM,UAAU,MAAM,qBAAqB,MAAM,MAAM,oBAAoB;EAC3E,OAAO,EAAE,KAAK;GACZ,QAAQ;GACR,MAAM,MAAM;GACZ;EACF,CAAC;CACH,CAAC;CAED,IAAI,SAAS,KAAK,MAAM;EACtB,QAAQ,MAAM,GAAG;EACjB,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;CACvD,CAAC;CAED,OAAO;AACT"}

package/dist/{artifact-server-XbN16DwU.cjs → artifact-server-C6_gtIql.cjs}

@@ -1,4 +1,4 @@
-const require_app = require("./app-BxojXjtB.cjs");
+const require_app = require("./app-DjJn3irw.cjs");
 let _hono_node_server = require("@hono/node-server");
 let node_timers_promises = require("node:timers/promises");
 //#region src/mcp/artifact-server.ts

package/dist/{artifact-server-CP6LXQ9d.mjs → artifact-server-DHPM0lxS.mjs}

@@ -1,4 +1,4 @@
-import { t as createApp } from "./app-CRd39JJ8.mjs";
+import { t as createApp } from "./app-norpwdou.mjs";
 import { serve } from "@hono/node-server";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 //#region src/mcp/artifact-server.ts
@@ -45,4 +45,4 @@ async function ensureArtifactServer(port) {
 //#endregion
 export { ensureArtifactServer };
 
-//# sourceMappingURL=artifact-server-CP6LXQ9d.mjs.map
+//# sourceMappingURL=artifact-server-DHPM0lxS.mjs.map

package/dist/{artifact-server-CP6LXQ9d.mjs.map → artifact-server-DHPM0lxS.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"artifact-server-CP6LXQ9d.mjs","names":["delay"],"sources":["../src/mcp/artifact-server.ts"],"sourcesContent":["import { serve } from '@hono/node-server'\nimport { setTimeout as delay } from 'node:timers/promises'\nimport { createApp } from '../server/app.js'\n\ntype ArtifactServer = ReturnType<typeof serve>\n\nconst servers = new Map<number, ArtifactServer>()\n\nasync function isHealthy(port: number): Promise<boolean> {\n  const controller = new AbortController()\n  const timeout = setTimeout(() => controller.abort(), 500)\n  try {\n    const response = await fetch(`http://127.0.0.1:${port}/health`, {\n      signal: controller.signal,\n    })\n    return response.ok\n  } catch {\n    return false\n  } finally {\n    clearTimeout(timeout)\n  }\n}\n\nasync function waitUntilHealthy(port: number): Promise<void> {\n  for (let attempt = 0; attempt < 20; attempt += 1) {\n    if (await isHealthy(port)) return\n    await delay(50)\n  }\n  throw new Error(`Graph report server did not become healthy on 127.0.0.1:${port}`)\n}\n\nexport async function ensureArtifactServer(port: number): Promise<void> {\n  if (servers.has(port)) return\n  if (await isHealthy(port)) return\n\n  const app = createApp()\n  const server = serve({\n    fetch: app.fetch,\n    hostname: '127.0.0.1',\n    port,\n  })\n  servers.set(port, server)\n  server.on('error', (err) => {\n    servers.delete(port)\n    process.stderr.write(`Chain Insights graph report server failed on 127.0.0.1:${port}: ${(err as Error).message}\\n`)\n  })\n\n  try {\n    await waitUntilHealthy(port)\n  } catch (err) {\n    servers.delete(port)\n    server.close()\n    throw err\n  }\n}\n\nexport function closeArtifactServers(): void {\n  for (const [port, server] of servers.entries()) {\n    server.close()\n    servers.delete(port)\n  }\n}\n"],"mappings":";;;;AAMA,MAAM,0BAAU,IAAI,IAA4B;AAEhD,eAAe,UAAU,MAAgC;CACvD,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,UAAU,iBAAiB,WAAW,MAAM,GAAG,GAAG;CACxD,IAAI;EAIF,QAAO,MAHgB,MAAM,oBAAoB,KAAK,UAAU,EAC9D,QAAQ,WAAW,OACrB,CAAC,GACe;CAClB,QAAQ;EACN,OAAO;CACT,UAAU;EACR,aAAa,OAAO;CACtB;AACF;AAEA,eAAe,iBAAiB,MAA6B;CAC3D,KAAK,IAAI,UAAU,GAAG,UAAU,IAAI,WAAW,GAAG;EAChD,IAAI,MAAM,UAAU,IAAI,GAAG;EAC3B,MAAMA,aAAM,EAAE;CAChB;CACA,MAAM,IAAI,MAAM,2DAA2D,MAAM;AACnF;AAEA,eAAsB,qBAAqB,MAA6B;CACtE,IAAI,QAAQ,IAAI,IAAI,GAAG;CACvB,IAAI,MAAM,UAAU,IAAI,GAAG;CAG3B,MAAM,SAAS,MAAM;EACnB,OAFU,UAED,EAAE;EACX,UAAU;EACV;CACF,CAAC;CACD,QAAQ,IAAI,MAAM,MAAM;CACxB,OAAO,GAAG,UAAU,QAAQ;EAC1B,QAAQ,OAAO,IAAI;EACnB,QAAQ,OAAO,MAAM,0DAA0D,KAAK,IAAK,IAAc,QAAQ,GAAG;CACpH,CAAC;CAED,IAAI;EACF,MAAM,iBAAiB,IAAI;CAC7B,SAAS,KAAK;EACZ,QAAQ,OAAO,IAAI;EACnB,OAAO,MAAM;EACb,MAAM;CACR;AACF"}
+{"version":3,"file":"artifact-server-DHPM0lxS.mjs","names":["delay"],"sources":["../src/mcp/artifact-server.ts"],"sourcesContent":["import { serve } from '@hono/node-server'\nimport { setTimeout as delay } from 'node:timers/promises'\nimport { createApp } from '../server/app.js'\n\ntype ArtifactServer = ReturnType<typeof serve>\n\nconst servers = new Map<number, ArtifactServer>()\n\nasync function isHealthy(port: number): Promise<boolean> {\n  const controller = new AbortController()\n  const timeout = setTimeout(() => controller.abort(), 500)\n  try {\n    const response = await fetch(`http://127.0.0.1:${port}/health`, {\n      signal: controller.signal,\n    })\n    return response.ok\n  } catch {\n    return false\n  } finally {\n    clearTimeout(timeout)\n  }\n}\n\nasync function waitUntilHealthy(port: number): Promise<void> {\n  for (let attempt = 0; attempt < 20; attempt += 1) {\n    if (await isHealthy(port)) return\n    await delay(50)\n  }\n  throw new Error(`Graph report server did not become healthy on 127.0.0.1:${port}`)\n}\n\nexport async function ensureArtifactServer(port: number): Promise<void> {\n  if (servers.has(port)) return\n  if (await isHealthy(port)) return\n\n  const app = createApp()\n  const server = serve({\n    fetch: app.fetch,\n    hostname: '127.0.0.1',\n    port,\n  })\n  servers.set(port, server)\n  server.on('error', (err) => {\n    servers.delete(port)\n    process.stderr.write(`Chain Insights graph report server failed on 127.0.0.1:${port}: ${(err as Error).message}\\n`)\n  })\n\n  try {\n    await waitUntilHealthy(port)\n  } catch (err) {\n    servers.delete(port)\n    server.close()\n    throw err\n  }\n}\n\nexport function closeArtifactServers(): void {\n  for (const [port, server] of servers.entries()) {\n    server.close()\n    servers.delete(port)\n  }\n}\n"],"mappings":";;;;AAMA,MAAM,0BAAU,IAAI,IAA4B;AAEhD,eAAe,UAAU,MAAgC;CACvD,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,UAAU,iBAAiB,WAAW,MAAM,GAAG,GAAG;CACxD,IAAI;EAIF,QAAO,MAHgB,MAAM,oBAAoB,KAAK,UAAU,EAC9D,QAAQ,WAAW,OACrB,CAAC,GACe;CAClB,QAAQ;EACN,OAAO;CACT,UAAU;EACR,aAAa,OAAO;CACtB;AACF;AAEA,eAAe,iBAAiB,MAA6B;CAC3D,KAAK,IAAI,UAAU,GAAG,UAAU,IAAI,WAAW,GAAG;EAChD,IAAI,MAAM,UAAU,IAAI,GAAG;EAC3B,MAAMA,aAAM,EAAE;CAChB;CACA,MAAM,IAAI,MAAM,2DAA2D,MAAM;AACnF;AAEA,eAAsB,qBAAqB,MAA6B;CACtE,IAAI,QAAQ,IAAI,IAAI,GAAG;CACvB,IAAI,MAAM,UAAU,IAAI,GAAG;CAG3B,MAAM,SAAS,MAAM;EACnB,OAFU,UAED,EAAE;EACX,UAAU;EACV;CACF,CAAC;CACD,QAAQ,IAAI,MAAM,MAAM;CACxB,OAAO,GAAG,UAAU,QAAQ;EAC1B,QAAQ,OAAO,IAAI;EACnB,QAAQ,OAAO,MAAM,0DAA0D,KAAK,IAAK,IAAc,QAAQ,GAAG;CACpH,CAAC;CAED,IAAI;EACF,MAAM,iBAAiB,IAAI;CAC7B,SAAS,KAAK;EACZ,QAAQ,OAAO,IAAI;EACnB,OAAO,MAAM;EACb,MAAM;CACR;AACF"}

package/dist/cli.cjs

@@ -70,7 +70,7 @@ function optionalNumberArg(value, name) {
 	throw new Error(`Invalid number for ${name}: ${String(value)}`);
 }
 async function withGraphMcpClient(name, fn) {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 	const config = await loadConfig();
 	const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await Promise.resolve().then(() => require("./client-Y_zqKqJT.cjs")).then((n) => n.client_exports);
 	const paymentFetch = await createConfiguredGraphMcpFetch(config);
@@ -91,7 +91,7 @@ function printMcpTextContent(result) {
 	for (const item of result.content ?? []) if (item.type === "text") console.log(item.text);
 }
 async function printNetworkCapabilities(opts) {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 	const { fetchNetworkCapabilities, formatNetworkCapabilities } = await Promise.resolve().then(() => require("./capabilities-DOa6EFO-.cjs"));
 	const document = await fetchNetworkCapabilities(await loadConfig());
 	if (opts.json) console.log(JSON.stringify(document, null, 2));
@@ -109,7 +109,7 @@ program.command("serve").description("Start local visualization server").option(
 	try {
 		const { requireWorkspaceRoot } = await Promise.resolve().then(() => require("./output-root-YIbl6PwF.cjs")).then((n) => n.output_root_exports);
 		const workspaceRoot = requireWorkspaceRoot();
-		const { startServer } = await Promise.resolve().then(() => require("./server-BqVdWath.cjs")).then((n) => n.server_exports);
+		const { startServer } = await Promise.resolve().then(() => require("./server-B2NFmnCM.cjs")).then((n) => n.server_exports);
 		console.log(`Workspace: ${workspaceRoot}`);
 		startServer(parseInt(opts.port, 10));
 	} catch (err) {
@@ -118,7 +118,7 @@ program.command("serve").description("Start local visualization server").option(
 	}
 });
 program.command("status").description("Show toolkit status and configuration").action(async () => {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 	const { findActiveWorkspace, activeDataDir } = await Promise.resolve().then(() => require("./active-BVr55kvW.cjs")).then((n) => n.active_exports);
 	const config = await loadConfig();
 	const workspace = findActiveWorkspace();
@@ -175,7 +175,7 @@ program.command("obsidian").description("Manage the local Obsidian investigation
 }));
 program.command("debug").description("Configure Graph MCP debug mode").addCommand(new commander.Command("on").description("Enable Graph MCP debug mode without x402 payments").requiredOption("--token <token>", "Debug bearer token").option("--endpoint <url>", "Graph MCP endpoint").action(async (opts) => {
 	try {
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "debug",
 			graphMcpAuthToken: opts.token,
@@ -190,7 +190,7 @@ program.command("debug").description("Configure Graph MCP debug mode").addComman
 	}
 })).addCommand(new commander.Command("off").description("Disable Graph MCP debug mode and use paid x402 calls").action(async () => {
 	try {
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "paid",
 			graphMcpAuthToken: ""
@@ -203,7 +203,7 @@ program.command("debug").description("Configure Graph MCP debug mode").addComman
 	}
 })).addCommand(new commander.Command("status").description("Show Graph MCP payment/debug mode").action(async () => {
 	try {
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 		const config = await loadConfig();
 		console.log(`Graph MCP mode: ${config.graphMcpMode}`);
 		console.log(`Graph endpoint: ${config.graphMcpEndpoint}`);
@@ -218,7 +218,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 	try {
 		const normalizedKey = key.trim();
 		if (!normalizedKey) throw new Error("Test access key is required");
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "debug",
 			graphMcpAuthToken: normalizedKey,
@@ -233,7 +233,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 	}
 })).addCommand(new commander.Command("clear").description("Remove the Graph MCP test access key and use paid x402 calls").action(async () => {
 	try {
-		const { saveConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+		const { saveConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 		await saveConfig({
 			graphMcpMode: "paid",
 			graphMcpAuthToken: ""
@@ -246,7 +246,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 	}
 })).addCommand(new commander.Command("status").description("Show Graph MCP test access key status").action(async () => {
 	try {
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 		const config = await loadConfig();
 		console.log(`Graph endpoint: ${config.graphMcpEndpoint}`);
 		console.log(`Access key:     ${config.graphMcpAuthToken?.trim() ? "configured" : "not configured"}`);
@@ -258,7 +258,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 }));
 program.command("init").description("Initialize an investigation workspace").argument("[dir]", "Workspace directory to initialize", ".").option("--force", "Overwrite existing workspace files").action(async (dir, opts) => {
 	try {
-		const { initWorkspace } = await Promise.resolve().then(() => require("./init-Dhw8F23z.cjs"));
+		const { initWorkspace } = await Promise.resolve().then(() => require("./init-vj2v5PMP.cjs"));
 		const result = await initWorkspace({
 			targetDir: dir,
 			force: opts.force
@@ -295,8 +295,8 @@ program.command("setup").description("Configure external MCP clients").addComman
 	}
 }));
 program.command("config").description("Read or write configuration values").addCommand(new commander.Command("get").argument("<key>", "Config key to read").action(async (key) => {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
-	const { CONFIG_KEYS } = await Promise.resolve().then(() => require("./schema-Vl9yuOFO.cjs")).then((n) => n.schema_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
+	const { CONFIG_KEYS } = await Promise.resolve().then(() => require("./schema-Dr6JXSOF.cjs")).then((n) => n.schema_exports);
 	if (!CONFIG_KEYS.includes(key)) {
 		console.error(`Unknown config key: ${key}`);
 		process.exit(1);
@@ -316,8 +316,8 @@ program.command("config").description("Read or write configuration values").addC
 		}
 		return;
 	}
-	const { loadConfig, saveConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
-	const { CONFIG_KEYS, DEFAULT_CONFIG } = await Promise.resolve().then(() => require("./schema-Vl9yuOFO.cjs")).then((n) => n.schema_exports);
+	const { loadConfig, saveConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
+	const { CONFIG_KEYS, DEFAULT_CONFIG } = await Promise.resolve().then(() => require("./schema-Dr6JXSOF.cjs")).then((n) => n.schema_exports);
 	const current = await loadConfig();
 	if (!CONFIG_KEYS.includes(key)) {
 		console.error(`Unknown config key: ${key}`);
@@ -409,7 +409,7 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 		const { loadSchema, saveSchema } = await Promise.resolve().then(() => require("./schema-cache-CJk1EL3L.cjs"));
 		const { formatToolsTable } = await Promise.resolve().then(() => require("./format-9NLBykEL.cjs"));
 		const { visibleRemoteTools } = await Promise.resolve().then(() => require("./tool-visibility-Buq7YdUZ.cjs")).then((n) => n.tool_visibility_exports);
-		const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+		const { loadConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 		const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await Promise.resolve().then(() => require("./client-Y_zqKqJT.cjs")).then((n) => n.client_exports);
 		const config = await loadConfig();
 		const graphMcpEndpoint = resolveGraphMcpEndpoint(config);
@@ -877,7 +877,7 @@ program.command("playbook").description("Run and manage investigation playbooks"
 			console.error(`Invalid --from value: "${opts.from}". Must be a positive integer.`);
 			process.exit(1);
 		}
-		const { PlaybookRunner } = await Promise.resolve().then(() => require("./runner-bLy0pTr_.cjs"));
+		const { PlaybookRunner } = await Promise.resolve().then(() => require("./runner-CcZCrrkn.cjs"));
 		await PlaybookRunner.run(definition, {
 			caseId: opts.case,
 			from: fromN,
@@ -932,7 +932,7 @@ program.command("viz").description("Generate money flow visualization").argument
 			caseId,
 			dataFile: opts.data
 		});
-		const { startServer } = await Promise.resolve().then(() => require("./server-BqVdWath.cjs")).then((n) => n.server_exports);
+		const { startServer } = await Promise.resolve().then(() => require("./server-B2NFmnCM.cjs")).then((n) => n.server_exports);
 		const port = parseInt(opts.port, 10);
 		startServer(port);
 		const url = `http://127.0.0.1:${port}/viz/${result.vizId}`;

package/dist/cli.mjs

@@ -68,7 +68,7 @@ function optionalNumberArg(value, name) {
 	throw new Error(`Invalid number for ${name}: ${String(value)}`);
 }
 async function withGraphMcpClient(name, fn) {
-	const { loadConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+	const { loadConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 	const config = await loadConfig();
 	const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await import("./client-BgmHjBHQ.mjs").then((n) => n.r);
 	const paymentFetch = await createConfiguredGraphMcpFetch(config);
@@ -89,7 +89,7 @@ function printMcpTextContent(result) {
 	for (const item of result.content ?? []) if (item.type === "text") console.log(item.text);
 }
 async function printNetworkCapabilities(opts) {
-	const { loadConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+	const { loadConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 	const { fetchNetworkCapabilities, formatNetworkCapabilities } = await import("./capabilities-BCvkTkIu.mjs");
 	const document = await fetchNetworkCapabilities(await loadConfig());
 	if (opts.json) console.log(JSON.stringify(document, null, 2));
@@ -107,7 +107,7 @@ program.command("serve").description("Start local visualization server").option(
 	try {
 		const { requireWorkspaceRoot } = await import("./output-root-BRhzhhXZ.mjs").then((n) => n.t);
 		const workspaceRoot = requireWorkspaceRoot();
-		const { startServer } = await import("./server-BXLX2j_A.mjs").then((n) => n.t);
+		const { startServer } = await import("./server-86dyCsJO.mjs").then((n) => n.t);
 		console.log(`Workspace: ${workspaceRoot}`);
 		startServer(parseInt(opts.port, 10));
 	} catch (err) {
@@ -116,7 +116,7 @@ program.command("serve").description("Start local visualization server").option(
 	}
 });
 program.command("status").description("Show toolkit status and configuration").action(async () => {
-	const { loadConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+	const { loadConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 	const { findActiveWorkspace, activeDataDir } = await import("./active-ByNgjuAg.mjs").then((n) => n.n);
 	const config = await loadConfig();
 	const workspace = findActiveWorkspace();
@@ -173,7 +173,7 @@ program.command("obsidian").description("Manage the local Obsidian investigation
 }));
 program.command("debug").description("Configure Graph MCP debug mode").addCommand(new Command("on").description("Enable Graph MCP debug mode without x402 payments").requiredOption("--token <token>", "Debug bearer token").option("--endpoint <url>", "Graph MCP endpoint").action(async (opts) => {
 	try {
-		const { saveConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+		const { saveConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 		await saveConfig({
 			graphMcpMode: "debug",
 			graphMcpAuthToken: opts.token,
@@ -188,7 +188,7 @@ program.command("debug").description("Configure Graph MCP debug mode").addComman
 	}
 })).addCommand(new Command("off").description("Disable Graph MCP debug mode and use paid x402 calls").action(async () => {
 	try {
-		const { saveConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+		const { saveConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 		await saveConfig({
 			graphMcpMode: "paid",
 			graphMcpAuthToken: ""
@@ -201,7 +201,7 @@ program.command("debug").description("Configure Graph MCP debug mode").addComman
 	}
 })).addCommand(new Command("status").description("Show Graph MCP payment/debug mode").action(async () => {
 	try {
-		const { loadConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+		const { loadConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 		const config = await loadConfig();
 		console.log(`Graph MCP mode: ${config.graphMcpMode}`);
 		console.log(`Graph endpoint: ${config.graphMcpEndpoint}`);
@@ -216,7 +216,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 	try {
 		const normalizedKey = key.trim();
 		if (!normalizedKey) throw new Error("Test access key is required");
-		const { saveConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+		const { saveConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 		await saveConfig({
 			graphMcpMode: "debug",
 			graphMcpAuthToken: normalizedKey,
@@ -231,7 +231,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 	}
 })).addCommand(new Command("clear").description("Remove the Graph MCP test access key and use paid x402 calls").action(async () => {
 	try {
-		const { saveConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+		const { saveConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 		await saveConfig({
 			graphMcpMode: "paid",
 			graphMcpAuthToken: ""
@@ -244,7 +244,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 	}
 })).addCommand(new Command("status").description("Show Graph MCP test access key status").action(async () => {
 	try {
-		const { loadConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+		const { loadConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 		const config = await loadConfig();
 		console.log(`Graph endpoint: ${config.graphMcpEndpoint}`);
 		console.log(`Access key:     ${config.graphMcpAuthToken?.trim() ? "configured" : "not configured"}`);
@@ -256,7 +256,7 @@ program.command("access-key").description("Configure Graph MCP test access key m
 }));
 program.command("init").description("Initialize an investigation workspace").argument("[dir]", "Workspace directory to initialize", ".").option("--force", "Overwrite existing workspace files").action(async (dir, opts) => {
 	try {
-		const { initWorkspace } = await import("./init-CKQ6F07J.mjs");
+		const { initWorkspace } = await import("./init-uAmPfio2.mjs");
 		const result = await initWorkspace({
 			targetDir: dir,
 			force: opts.force
@@ -293,8 +293,8 @@ program.command("setup").description("Configure external MCP clients").addComman
 	}
 }));
 program.command("config").description("Read or write configuration values").addCommand(new Command("get").argument("<key>", "Config key to read").action(async (key) => {
-	const { loadConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
-	const { CONFIG_KEYS } = await import("./schema-BFEWhzg7.mjs").then((n) => n.r);
+	const { loadConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
+	const { CONFIG_KEYS } = await import("./schema-D_qwaQA5.mjs").then((n) => n.r);
 	if (!CONFIG_KEYS.includes(key)) {
 		console.error(`Unknown config key: ${key}`);
 		process.exit(1);
@@ -314,8 +314,8 @@ program.command("config").description("Read or write configuration values").addC
 		}
 		return;
 	}
-	const { loadConfig, saveConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
-	const { CONFIG_KEYS, DEFAULT_CONFIG } = await import("./schema-BFEWhzg7.mjs").then((n) => n.r);
+	const { loadConfig, saveConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
+	const { CONFIG_KEYS, DEFAULT_CONFIG } = await import("./schema-D_qwaQA5.mjs").then((n) => n.r);
 	const current = await loadConfig();
 	if (!CONFIG_KEYS.includes(key)) {
 		console.error(`Unknown config key: ${key}`);
@@ -407,7 +407,7 @@ program.command("mcp").description("Interact with the Chain Insights MCP endpoin
 		const { loadSchema, saveSchema } = await import("./schema-cache-DwDvPy4e.mjs");
 		const { formatToolsTable } = await import("./format-Bq94jSyw.mjs");
 		const { visibleRemoteTools } = await import("./tool-visibility-BpyZHRBi.mjs").then((n) => n.n);
-		const { loadConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+		const { loadConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 		const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await import("./client-BgmHjBHQ.mjs").then((n) => n.r);
 		const config = await loadConfig();
 		const graphMcpEndpoint = resolveGraphMcpEndpoint(config);
@@ -875,7 +875,7 @@ program.command("playbook").description("Run and manage investigation playbooks"
 			console.error(`Invalid --from value: "${opts.from}". Must be a positive integer.`);
 			process.exit(1);
 		}
-		const { PlaybookRunner } = await import("./runner-CVnjpqc-.mjs");
+		const { PlaybookRunner } = await import("./runner-B9fXAP0t.mjs");
 		await PlaybookRunner.run(definition, {
 			caseId: opts.case,
 			from: fromN,
@@ -930,7 +930,7 @@ program.command("viz").description("Generate money flow visualization").argument
 			caseId,
 			dataFile: opts.data
 		});
-		const { startServer } = await import("./server-BXLX2j_A.mjs").then((n) => n.t);
+		const { startServer } = await import("./server-86dyCsJO.mjs").then((n) => n.t);
 		const port = parseInt(opts.port, 10);
 		startServer(port);
 		const url = `http://127.0.0.1:${port}/viz/${result.vizId}`;

package/dist/{config-Drgc2HuF.mjs → config-C6zM8Xir.mjs}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { r as graphMcpEndpointEnvOverride } from "./mcp-endpoint-DHs1cRFH.mjs";
-import { n as parseInvestigatorConfig, t as DEFAULT_CONFIG } from "./schema-BFEWhzg7.mjs";
+import { r as graphMcpEndpointEnvOverride } from "./mcp-endpoint-QQ5Lbqc2.mjs";
+import { n as parseInvestigatorConfig, t as DEFAULT_CONFIG } from "./schema-D_qwaQA5.mjs";
 import path from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import os from "node:os";
@@ -74,4 +74,4 @@ async function resetConfigCache() {
 //#endregion
 export { saveConfig as i, loadConfig as n, resetConfigCache as r, config_exports as t };
 
-//# sourceMappingURL=config-Drgc2HuF.mjs.map
+//# sourceMappingURL=config-C6zM8Xir.mjs.map

package/dist/{config-Drgc2HuF.mjs.map → config-C6zM8Xir.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"config-Drgc2HuF.mjs","names":[],"sources":["../src/config/index.ts"],"sourcesContent":["import { readFile, writeFile, mkdir } from 'node:fs/promises'\nimport path from 'node:path'\nimport os from 'node:os'\nimport { DEFAULT_CONFIG, parseInvestigatorConfig, type InvestigatorConfig } from './schema.js'\nimport { graphMcpEndpointEnvOverride } from './mcp-endpoint.js'\n\n// Config path derived from HOME at call time so tests can override HOME.\nfunction configPath(): string {\n  return path.join(os.homedir(), '.chain-insights', 'config.json')\n}\n\nlet _cached: InvestigatorConfig | null = null\n\nfunction applyRuntimeEnvOverrides(config: InvestigatorConfig): InvestigatorConfig {\n  let graphMcpEndpoint: string | undefined\n  try {\n    graphMcpEndpoint = graphMcpEndpointEnvOverride()\n  } catch (err) {\n    throw new Error(`Invalid configuration in environment: ${(err as Error).message}`)\n  }\n  return graphMcpEndpoint\n    ? parseInvestigatorConfig({ ...config, graphMcpEndpoint })\n    : config\n}\n\nasync function loadStoredConfig(): Promise<InvestigatorConfig> {\n  const cfgPath = configPath()\n  let raw: string\n  try {\n    raw = await readFile(cfgPath, 'utf8')\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n      return DEFAULT_CONFIG\n    }\n    throw new Error(`Unable to read config ${cfgPath}: ${(err as Error).message}`)\n  }\n\n  let parsedJson: unknown\n  try {\n    parsedJson = JSON.parse(raw) as unknown\n  } catch (err) {\n    throw new Error(`Invalid JSON in ${cfgPath}: ${(err as Error).message}`)\n  }\n\n  try {\n    return parseInvestigatorConfig(parsedJson)\n  } catch (err) {\n    throw new Error(`Invalid configuration in ${cfgPath}: ${(err as Error).message}`)\n  }\n}\n\nexport async function loadConfig(): Promise<InvestigatorConfig> {\n  if (_cached) return _cached\n  _cached = applyRuntimeEnvOverrides(await loadStoredConfig())\n  return _cached\n}\n\nexport async function saveConfig(updates: Partial<InvestigatorConfig>): Promise<void> {\n  const current = await loadStoredConfig()\n  let next: InvestigatorConfig\n  try {\n    next = parseInvestigatorConfig({ ...current, ...updates })\n  } catch (err) {\n    throw new Error(`Invalid configuration update: ${(err as Error).message}`)\n  }\n  const p = configPath()\n  await mkdir(path.dirname(p), { recursive: true })\n  await writeFile(p, JSON.stringify(next, null, 2) + '\\n', { mode: 0o600 })\n  _cached = applyRuntimeEnvOverrides(next)\n}\n\nexport async function resetConfigCache(): Promise<void> {\n  _cached = null\n}\n"],"mappings":";;;;;;;;;;;;AAOA,SAAS,aAAqB;CAC5B,OAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,mBAAmB,aAAa;AACjE;AAEA,IAAI,UAAqC;AAEzC,SAAS,yBAAyB,QAAgD;CAChF,IAAI;CACJ,IAAI;EACF,mBAAmB,4BAA4B;CACjD,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,yCAA0C,IAAc,SAAS;CACnF;CACA,OAAO,mBACH,wBAAwB;EAAE,GAAG;EAAQ;CAAiB,CAAC,IACvD;AACN;AAEA,eAAe,mBAAgD;CAC7D,MAAM,UAAU,WAAW;CAC3B,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,SAAS,SAAS,MAAM;CACtC,SAAS,KAAK;EACZ,IAAK,IAA8B,SAAS,UAC1C,OAAO;EAET,MAAM,IAAI,MAAM,yBAAyB,QAAQ,IAAK,IAAc,SAAS;CAC/E;CAEA,IAAI;CACJ,IAAI;EACF,aAAa,KAAK,MAAM,GAAG;CAC7B,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,mBAAmB,QAAQ,IAAK,IAAc,SAAS;CACzE;CAEA,IAAI;EACF,OAAO,wBAAwB,UAAU;CAC3C,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,4BAA4B,QAAQ,IAAK,IAAc,SAAS;CAClF;AACF;AAEA,eAAsB,aAA0C;CAC9D,IAAI,SAAS,OAAO;CACpB,UAAU,yBAAyB,MAAM,iBAAiB,CAAC;CAC3D,OAAO;AACT;AAEA,eAAsB,WAAW,SAAqD;CACpF,MAAM,UAAU,MAAM,iBAAiB;CACvC,IAAI;CACJ,IAAI;EACF,OAAO,wBAAwB;GAAE,GAAG;GAAS,GAAG;EAAQ,CAAC;CAC3D,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,iCAAkC,IAAc,SAAS;CAC3E;CACA,MAAM,IAAI,WAAW;CACrB,MAAM,MAAM,KAAK,QAAQ,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;CAChD,MAAM,UAAU,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,IAAI,MAAM,EAAE,MAAM,IAAM,CAAC;CACxE,UAAU,yBAAyB,IAAI;AACzC;AAEA,eAAsB,mBAAkC;CACtD,UAAU;AACZ"}
+{"version":3,"file":"config-C6zM8Xir.mjs","names":[],"sources":["../src/config/index.ts"],"sourcesContent":["import { readFile, writeFile, mkdir } from 'node:fs/promises'\nimport path from 'node:path'\nimport os from 'node:os'\nimport { DEFAULT_CONFIG, parseInvestigatorConfig, type InvestigatorConfig } from './schema.js'\nimport { graphMcpEndpointEnvOverride } from './mcp-endpoint.js'\n\n// Config path derived from HOME at call time so tests can override HOME.\nfunction configPath(): string {\n  return path.join(os.homedir(), '.chain-insights', 'config.json')\n}\n\nlet _cached: InvestigatorConfig | null = null\n\nfunction applyRuntimeEnvOverrides(config: InvestigatorConfig): InvestigatorConfig {\n  let graphMcpEndpoint: string | undefined\n  try {\n    graphMcpEndpoint = graphMcpEndpointEnvOverride()\n  } catch (err) {\n    throw new Error(`Invalid configuration in environment: ${(err as Error).message}`)\n  }\n  return graphMcpEndpoint\n    ? parseInvestigatorConfig({ ...config, graphMcpEndpoint })\n    : config\n}\n\nasync function loadStoredConfig(): Promise<InvestigatorConfig> {\n  const cfgPath = configPath()\n  let raw: string\n  try {\n    raw = await readFile(cfgPath, 'utf8')\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n      return DEFAULT_CONFIG\n    }\n    throw new Error(`Unable to read config ${cfgPath}: ${(err as Error).message}`)\n  }\n\n  let parsedJson: unknown\n  try {\n    parsedJson = JSON.parse(raw) as unknown\n  } catch (err) {\n    throw new Error(`Invalid JSON in ${cfgPath}: ${(err as Error).message}`)\n  }\n\n  try {\n    return parseInvestigatorConfig(parsedJson)\n  } catch (err) {\n    throw new Error(`Invalid configuration in ${cfgPath}: ${(err as Error).message}`)\n  }\n}\n\nexport async function loadConfig(): Promise<InvestigatorConfig> {\n  if (_cached) return _cached\n  _cached = applyRuntimeEnvOverrides(await loadStoredConfig())\n  return _cached\n}\n\nexport async function saveConfig(updates: Partial<InvestigatorConfig>): Promise<void> {\n  const current = await loadStoredConfig()\n  let next: InvestigatorConfig\n  try {\n    next = parseInvestigatorConfig({ ...current, ...updates })\n  } catch (err) {\n    throw new Error(`Invalid configuration update: ${(err as Error).message}`)\n  }\n  const p = configPath()\n  await mkdir(path.dirname(p), { recursive: true })\n  await writeFile(p, JSON.stringify(next, null, 2) + '\\n', { mode: 0o600 })\n  _cached = applyRuntimeEnvOverrides(next)\n}\n\nexport async function resetConfigCache(): Promise<void> {\n  _cached = null\n}\n"],"mappings":";;;;;;;;;;;;AAOA,SAAS,aAAqB;CAC5B,OAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,mBAAmB,aAAa;AACjE;AAEA,IAAI,UAAqC;AAEzC,SAAS,yBAAyB,QAAgD;CAChF,IAAI;CACJ,IAAI;EACF,mBAAmB,4BAA4B;CACjD,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,yCAA0C,IAAc,SAAS;CACnF;CACA,OAAO,mBACH,wBAAwB;EAAE,GAAG;EAAQ;CAAiB,CAAC,IACvD;AACN;AAEA,eAAe,mBAAgD;CAC7D,MAAM,UAAU,WAAW;CAC3B,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,SAAS,SAAS,MAAM;CACtC,SAAS,KAAK;EACZ,IAAK,IAA8B,SAAS,UAC1C,OAAO;EAET,MAAM,IAAI,MAAM,yBAAyB,QAAQ,IAAK,IAAc,SAAS;CAC/E;CAEA,IAAI;CACJ,IAAI;EACF,aAAa,KAAK,MAAM,GAAG;CAC7B,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,mBAAmB,QAAQ,IAAK,IAAc,SAAS;CACzE;CAEA,IAAI;EACF,OAAO,wBAAwB,UAAU;CAC3C,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,4BAA4B,QAAQ,IAAK,IAAc,SAAS;CAClF;AACF;AAEA,eAAsB,aAA0C;CAC9D,IAAI,SAAS,OAAO;CACpB,UAAU,yBAAyB,MAAM,iBAAiB,CAAC;CAC3D,OAAO;AACT;AAEA,eAAsB,WAAW,SAAqD;CACpF,MAAM,UAAU,MAAM,iBAAiB;CACvC,IAAI;CACJ,IAAI;EACF,OAAO,wBAAwB;GAAE,GAAG;GAAS,GAAG;EAAQ,CAAC;CAC3D,SAAS,KAAK;EACZ,MAAM,IAAI,MAAM,iCAAkC,IAAc,SAAS;CAC3E;CACA,MAAM,IAAI,WAAW;CACrB,MAAM,MAAM,KAAK,QAAQ,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;CAChD,MAAM,UAAU,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,IAAI,MAAM,EAAE,MAAM,IAAM,CAAC;CACxE,UAAU,yBAAyB,IAAI;AACzC;AAEA,eAAsB,mBAAkC;CACtD,UAAU;AACZ"}

package/dist/{config-BwVx19Og.cjs → config-CkW404Cs.cjs}

@@ -1,6 +1,6 @@
 const require_chunk = require("./chunk-DakpK96I.cjs");
-const require_mcp_endpoint = require("./mcp-endpoint-BaV8h_lq.cjs");
-const require_schema = require("./schema-Vl9yuOFO.cjs");
+const require_mcp_endpoint = require("./mcp-endpoint-cQIZSjkK.cjs");
+const require_schema = require("./schema-Dr6JXSOF.cjs");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path, 1);
 let node_fs_promises = require("node:fs/promises");

package/dist/index.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_config = require("./config-BwVx19Og.cjs");
-const require_app = require("./app-BxojXjtB.cjs");
-const require_server = require("./server-BqVdWath.cjs");
+const require_config = require("./config-CkW404Cs.cjs");
+const require_app = require("./app-DjJn3irw.cjs");
+const require_server = require("./server-B2NFmnCM.cjs");
 const require_wallet = require("./wallet-gC2jxh7j.cjs");
 const require_tools = require("./tools-BhTI3Lmg.cjs");
 const require_topup_server = require("./topup-server-DhYlOOBM.cjs");

package/dist/index.mjs

@@ -1,6 +1,6 @@
-import { i as saveConfig, n as loadConfig, r as resetConfigCache } from "./config-Drgc2HuF.mjs";
-import { t as createApp } from "./app-CRd39JJ8.mjs";
-import { n as startServer } from "./server-BXLX2j_A.mjs";
+import { i as saveConfig, n as loadConfig, r as resetConfigCache } from "./config-C6zM8Xir.mjs";
+import { t as createApp } from "./app-norpwdou.mjs";
+import { n as startServer } from "./server-86dyCsJO.mjs";
 import { a as setWalletPrivateKey, i as normalizeWalletPrivateKey, n as encryptKey, o as walletAddressFromPrivateKey, r as isWalletConfigured, t as decryptKey } from "./wallet-BL0fJC29.mjs";
 import { a as getWalletAccount, i as getBalanceUsdc, n as formatWalletBalance, o as getWalletBalanceText, r as getBalanceEth, t as buildTopupInfo } from "./tools-v6kcdojg.mjs";
 import { i as generateArtifactHtml, n as startTopupServer, t as getTopupUrl } from "./topup-server-R3dNp-p8.mjs";

package/dist/{init-CKQ6F07J.mjs → init-uAmPfio2.mjs}

@@ -1,4 +1,4 @@
-import { t as LOCAL_GRAPH_MCP_ENDPOINT } from "./mcp-endpoint-DHs1cRFH.mjs";
+import { t as LOCAL_GRAPH_MCP_ENDPOINT } from "./mcp-endpoint-QQ5Lbqc2.mjs";
 import { assertNoVaultFileCollisions, scaffoldVault } from "./vault-z35Dohdq.mjs";
 import path from "node:path";
 import { access, mkdir, writeFile } from "node:fs/promises";
@@ -272,4 +272,4 @@ async function initWorkspace(options) {
 //#endregion
 export { initWorkspace };
 
-//# sourceMappingURL=init-CKQ6F07J.mjs.map
+//# sourceMappingURL=init-uAmPfio2.mjs.map

package/dist/{init-CKQ6F07J.mjs.map → init-uAmPfio2.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"init-CKQ6F07J.mjs","names":[],"sources":["../src/workspace/init.ts"],"sourcesContent":["import { access, mkdir, writeFile } from 'node:fs/promises'\nimport path from 'node:path'\nimport { LOCAL_GRAPH_MCP_ENDPOINT } from '../config/mcp-endpoint.js'\nimport { assertNoVaultFileCollisions, scaffoldVault } from '../vault/index.js'\n\nexport interface InitWorkspaceOptions {\n  targetDir: string\n  force?: boolean\n}\n\nexport interface InitWorkspaceResult {\n  workspaceRoot: string\n  filesWritten: string[]\n}\n\nconst WORKSPACE_DIRS = [\n  '.chain-insights',\n  '.chain-insights/schema',\n  '.chain-insights/runtime',\n  '.chain-insights/runtime/logs',\n  '.chain-insights/runtime-skill',\n  'cases',\n  'imports',\n  'reports',\n  'reports/graphs',\n  'reports/tables',\n  'templates',\n  'published',\n]\n\nfunction todayIso(): string {\n  return new Date().toISOString().slice(0, 10)\n}\n\nfunction workspaceJson(workspaceRoot: string): string {\n  return JSON.stringify({\n    schema: 'chain-insights.workspace.v1',\n    name: 'Chain Insights Investigations',\n    workspace_root: workspaceRoot,\n    default_network: 'bittensor',\n    graph_mcp_endpoint: LOCAL_GRAPH_MCP_ENDPOINT,\n    cases_dir: 'cases',\n    imports_dir: 'imports',\n    reports_dir: 'reports',\n    templates_dir: 'templates',\n    created_at: todayIso(),\n  }, null, 2) + '\\n'\n}\n\nconst README = `# Chain Insights Investigation Vault\n\nThis is a Chain Insights AML investigation workspace and Obsidian-compatible vault.\nOpen this directory in Obsidian to review cases, entities, evidence, graphs, and\npublished investigation bundles alongside the Chain Insights runtime metadata.\n\n## Start\n\n\\`\\`\\`bash\nchain-insights mcp tools --refresh\nchain-insights wallet ready --check-only\n\\`\\`\\`\n\n## Layout\n\n\\`\\`\\`text\n.chain-insights/   Workspace metadata\ncases/             Case exports and notes\nimports/           External reports, CSVs, screenshots, raw notes\nreports/           Final or interim analyst reports\nreports/graphs/    Graph JSON for visualization\nreports/tables/    Compact tabular extracts\ntemplates/         Reusable case/report templates\npublished/         Obsidian-ready case exports and published bundles\n.chain-insights/schema/         Runtime graph schema captures\n.chain-insights/runtime/        Workspace-local runtime process state and debug logs\n.chain-insights/runtime-skill/  Workspace-specific agent schema notes\n.obsidian/         Obsidian vault configuration\nCanvases/          Obsidian canvases for graph review\nEntities/          Entity notes and indexes\nEvidence/          Evidence notes and indexes\n\\`\\`\\`\n`\n\nconst AGENTS = `# Agent Instructions\n\nYou are operating inside a Chain Insights investigation workspace.\n\n- Read README.md first.\n- If this directory is not initialized, run \\`cia init .\\` before investigation-producing commands.\n- Do not rerun init in an existing workspace unless replacing scaffolding with \\`--force\\`.\n- Read .chain-insights/runtime-skill/SKILL.md before graph queries.\n- Preserve full blockchain addresses exactly.\n- Do not guess the network for graph queries.\n- Capture or refresh graph schema before the first case query.\n- Save compact evidence with original graph field names.\n- Put canonical graph JSON in reports/graphs/ and analyst tables in reports/tables/.\n- Evidence files should summarize and point to graph/table outputs; do not paste large raw JSON blobs into evidence Markdown.\n- Investigation output must stay in this initialized workspace.\n- Never write cases, evidence, reports, graph JSON, HTML, schema captures, or logs to ~/.chain-insights.\n- Keep theories lightweight until evidence supports them.\n`\n\nconst CLAUDE = AGENTS\n\nconst CASE_BRIEF = `# Case Brief\n\n## Summary\n\nStatus:\nNetwork:\nCurrent Assessment:\n\n## Known Addresses\n\n## Claims To Validate\n\n## Evidence\n\n## Next Steps\n`\n\nconst IMPORTS_README = `# External Investigation Inputs\n\nPut user-provided or third-party investigation material here before turning it\ninto case evidence.\n\nExamples:\n\n- Exchange support exports\n- CSV extracts\n- Screenshots\n- Raw notes\n- Partner reports\n\nFiles in this directory are inputs, not verified evidence. When an import\nsupports a claim, summarize it into the case evidence manifest and reference\nthe original file path.\n`\n\nconst TEMPLATES_README = `# Reusable Workspace Templates\n\nStore local report, case, prompt, and evidence templates here.\n\nTemplates are optional workspace helpers. They are not evidence and should not\nbe treated as case state until copied into a case, evidence file, dossier, or\nreport.\n`\n\nconst RUNTIME_SKILL = `---\nname: chain-insights-runtime-schema\ndescription: Workspace-local Chain Insights runtime schema notes. Refresh this after connecting to a graph MCP endpoint.\n---\n\n# Runtime Graph Schema\n\nBefore the first investigation query, capture the live graph schema into:\n\n\\`\\`\\`text\n.chain-insights/schema/<network>.graph-schema.json\n\\`\\`\\`\n\nUse \\`graph_query_batch\\` for schema capture. Prefix current topology reads\nwith \\`USE live_topology\\`, historical topology reads with\n\\`USE archive_topology\\`, and fact reads with \\`USE facts\\`, for example:\n\n\\`\\`\\`bash\ncia mcp call graph_query_batch network=<network> 'queries=[{\"id\":\"node_labels\",\"query\":\"USE live_topology MATCH (n:Address) RETURN \\\"Address\\\" AS node_label, count(n) AS sample_count LIMIT 1\"},{\"id\":\"archive_flow_sample\",\"query\":\"USE archive_topology MATCH (:Address)-[f:FLOWS_TO]->(:Address) RETURN f.period_granularity AS granularity, f.amount_sum AS amount_sum LIMIT 20\"}]'\n\\`\\`\\`\n\nThen update this file with observed labels, relationship types, and allowed\nproperty names for the active network.\n\nRules:\n\n- Prefer \\`graph_query\\` and \\`graph_query_batch\\` for graph-language reads.\n- Use \\`USE live_topology\\` for recent topology, \\`USE archive_topology\\`\n  for historical topology, and \\`USE facts\\` for labels, features,\n  risk scores, assets, and enrichment. Address facts can be reached through\n  relationships such as \\`(:Address)-[:HAS_FEATURE]->(:AddressFeature)\\`.\n  Archived money-flow topology is exposed as\n  \\`(:Address)-[:FLOWS_TO]->(:Address)\\` with \\`period_granularity\\`,\n  \\`period_start_date\\`, and \\`period_end_date\\` on the relationship.\n- Preserve source schema field names in evidence and generated data files.\n- Do not rename, reinterpret, or add unit labels to graph fields unless the\n  schema or query result explicitly supports that interpretation.\n- Keep evidence compact: select only the fields needed to support the claim.\n  Avoid storing whole node or relationship property blobs in evidence unless\n  the purpose of the query is schema discovery or debugging.\n- When using BFS, fixed-depth traversal fallbacks, or any manual \\`FLOWS_TO\\`\n  traversal, treat exchange hot wallets as terminal endpoints only. Do not\n  expand from, through, or classify exchange nodes as deposit, suspect, or\n  intermediate candidates. In Cypher, require every non-terminal traversal node\n  to satisfy \\`is_exchange IS NULL\\`; only the final exchange endpoint should\n  satisfy \\`is_exchange IS NOT NULL\\`.\n- Keep analysis products separate from evidence: graph JSON belongs under\n  \\`reports/graphs/\\`, tabular extracts under \\`reports/tables/\\`, and analyst\n  narrative under \\`reports/\\`.\n- Evidence Markdown should be a short provenance record with key facts and\n  pointers. Large JSON belongs in \\`reports/tables/\\`, not inline in evidence.\n\nTrace tool chaining:\n\n1. Use \\`trace_victim_funds\\` when the user gives victim/source addresses.\n2. Pass returned \\`continuation.candidate_deposit_addresses\\` to\n   \\`trace_deposit_sources\\`; do not make victim tracing run deposit traceback\n   internally.\n3. Pass high-confidence \\`continuation.candidate_suspect_addresses\\` from\n   deposit traceback to \\`trace_suspect_funds\\`.\n4. Use \\`trace_suspect_funds\\` when the user gives suspected scammer, mule,\n   operator, or laundering-ring addresses. \\`incident_timestamp_ms\\` is\n   optional.\n5. Use \\`address_risk\\` for single-address enrichment, and\n   \\`graph_query_batch\\` only when the role-specific tools do not answer the\n   exact question.\n\nAll trace tools return \\`chain-insights.trace.v1\\`. Preserve full addresses in\n\\`input.addresses\\`, \\`addresses[].address\\`, \\`edges[].from_address\\`,\n\\`edges[].to_address\\`, \\`paths[].addresses\\`, \\`candidate_labels[].address\\`,\nand \\`continuation\\` address lists.\n`\n\nconst SCHEMA_README = `# Runtime Schema Captures\n\nStore graph schema captures here, for example:\n\n\\`\\`\\`text\nbittensor.graph-schema.json\n\\`\\`\\`\n\nSchema captures should be generated before the first case query in a fresh\nworkspace, then referenced by evidence, reports, and runtime skill notes.\n`\n\nfunction workspaceFiles(workspaceRoot: string): Array<[string, string]> {\n  return [\n    ['.chain-insights/workspace.json', workspaceJson(workspaceRoot)],\n    ['README.md', README],\n    ['AGENTS.md', AGENTS],\n    ['CLAUDE.md', CLAUDE],\n    ['imports/README.md', IMPORTS_README],\n    ['templates/README.md', TEMPLATES_README],\n    ['templates/case-brief.md', CASE_BRIEF],\n    ['.chain-insights/runtime-skill/SKILL.md', RUNTIME_SKILL],\n    ['.chain-insights/schema/README.md', SCHEMA_README],\n    ['.chain-insights/runtime/.keep', ''],\n    ['.chain-insights/runtime/logs/.keep', ''],\n  ]\n}\n\nasync function assertNoFileCollisions(workspaceRoot: string): Promise<void> {\n  for (const [relativePath] of workspaceFiles(workspaceRoot)) {\n    const filePath = path.join(workspaceRoot, relativePath)\n    try {\n      await access(filePath)\n      throw new Error(`Refusing to overwrite ${filePath}. Re-run with --force to replace workspace files.`)\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n        continue\n      }\n      throw err\n    }\n  }\n}\n\nexport async function initWorkspace(options: InitWorkspaceOptions): Promise<InitWorkspaceResult> {\n  const workspaceRoot = path.resolve(options.targetDir)\n  if (!options.force) {\n    await assertNoFileCollisions(workspaceRoot)\n    await assertNoVaultFileCollisions(workspaceRoot)\n  }\n\n  for (const dir of WORKSPACE_DIRS) {\n    await mkdir(path.join(workspaceRoot, dir), { recursive: true })\n  }\n\n  const filesWritten: string[] = []\n  const flag = options.force ? 'w' : 'wx'\n  for (const [relativePath, content] of workspaceFiles(workspaceRoot)) {\n    const filePath = path.join(workspaceRoot, relativePath)\n    try {\n      await writeFile(filePath, content, { mode: 0o600, flag })\n      filesWritten.push(relativePath)\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'EEXIST') {\n        throw new Error(`Refusing to overwrite ${filePath}. Re-run with --force to replace workspace files.`)\n      }\n      throw err\n    }\n  }\n\n  const vault = await scaffoldVault({ workspaceRoot, force: options.force })\n  filesWritten.push(...vault.filesWritten)\n\n  return { workspaceRoot, filesWritten }\n}\n"],"mappings":";;;;;AAeA,MAAM,iBAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAS,WAAmB;CAC1B,wBAAO,IAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7C;AAEA,SAAS,cAAc,eAA+B;CACpD,OAAO,KAAK,UAAU;EACpB,QAAQ;EACR,MAAM;EACN,gBAAgB;EAChB,iBAAiB;EACjB,oBAAoB;EACpB,WAAW;EACX,aAAa;EACb,aAAa;EACb,eAAe;EACf,YAAY,SAAS;CACvB,GAAG,MAAM,CAAC,IAAI;AAChB;AAEA,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCf,MAAM,SAAS;;;;;;;;;;;;;;;;;;AAmBf,MAAM,SAAS;AAEf,MAAM,aAAa;;;;;;;;;;;;;;;;AAiBnB,MAAM,iBAAiB;;;;;;;;;;;;;;;;;AAkBvB,MAAM,mBAAmB;;;;;;;;AASzB,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyEtB,MAAM,gBAAgB;;;;;;;;;;;AAYtB,SAAS,eAAe,eAAgD;CACtE,OAAO;EACL,CAAC,kCAAkC,cAAc,aAAa,CAAC;EAC/D,CAAC,aAAa,MAAM;EACpB,CAAC,aAAa,MAAM;EACpB,CAAC,aAAa,MAAM;EACpB,CAAC,qBAAqB,cAAc;EACpC,CAAC,uBAAuB,gBAAgB;EACxC,CAAC,2BAA2B,UAAU;EACtC,CAAC,0CAA0C,aAAa;EACxD,CAAC,oCAAoC,aAAa;EAClD,CAAC,iCAAiC,EAAE;EACpC,CAAC,sCAAsC,EAAE;CAC3C;AACF;AAEA,eAAe,uBAAuB,eAAsC;CAC1E,KAAK,MAAM,CAAC,iBAAiB,eAAe,aAAa,GAAG;EAC1D,MAAM,WAAW,KAAK,KAAK,eAAe,YAAY;EACtD,IAAI;GACF,MAAM,OAAO,QAAQ;GACrB,MAAM,IAAI,MAAM,yBAAyB,SAAS,kDAAkD;EACtG,SAAS,KAAK;GACZ,IAAK,IAA8B,SAAS,UAC1C;GAEF,MAAM;EACR;CACF;AACF;AAEA,eAAsB,cAAc,SAA6D;CAC/F,MAAM,gBAAgB,KAAK,QAAQ,QAAQ,SAAS;CACpD,IAAI,CAAC,QAAQ,OAAO;EAClB,MAAM,uBAAuB,aAAa;EAC1C,MAAM,4BAA4B,aAAa;CACjD;CAEA,KAAK,MAAM,OAAO,gBAChB,MAAM,MAAM,KAAK,KAAK,eAAe,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CAGhE,MAAM,eAAyB,CAAC;CAChC,MAAM,OAAO,QAAQ,QAAQ,MAAM;CACnC,KAAK,MAAM,CAAC,cAAc,YAAY,eAAe,aAAa,GAAG;EACnE,MAAM,WAAW,KAAK,KAAK,eAAe,YAAY;EACtD,IAAI;GACF,MAAM,UAAU,UAAU,SAAS;IAAE,MAAM;IAAO;GAAK,CAAC;GACxD,aAAa,KAAK,YAAY;EAChC,SAAS,KAAK;GACZ,IAAK,IAA8B,SAAS,UAC1C,MAAM,IAAI,MAAM,yBAAyB,SAAS,kDAAkD;GAEtG,MAAM;EACR;CACF;CAEA,MAAM,QAAQ,MAAM,cAAc;EAAE;EAAe,OAAO,QAAQ;CAAM,CAAC;CACzE,aAAa,KAAK,GAAG,MAAM,YAAY;CAEvC,OAAO;EAAE;EAAe;CAAa;AACvC"}
+{"version":3,"file":"init-uAmPfio2.mjs","names":[],"sources":["../src/workspace/init.ts"],"sourcesContent":["import { access, mkdir, writeFile } from 'node:fs/promises'\nimport path from 'node:path'\nimport { LOCAL_GRAPH_MCP_ENDPOINT } from '../config/mcp-endpoint.js'\nimport { assertNoVaultFileCollisions, scaffoldVault } from '../vault/index.js'\n\nexport interface InitWorkspaceOptions {\n  targetDir: string\n  force?: boolean\n}\n\nexport interface InitWorkspaceResult {\n  workspaceRoot: string\n  filesWritten: string[]\n}\n\nconst WORKSPACE_DIRS = [\n  '.chain-insights',\n  '.chain-insights/schema',\n  '.chain-insights/runtime',\n  '.chain-insights/runtime/logs',\n  '.chain-insights/runtime-skill',\n  'cases',\n  'imports',\n  'reports',\n  'reports/graphs',\n  'reports/tables',\n  'templates',\n  'published',\n]\n\nfunction todayIso(): string {\n  return new Date().toISOString().slice(0, 10)\n}\n\nfunction workspaceJson(workspaceRoot: string): string {\n  return JSON.stringify({\n    schema: 'chain-insights.workspace.v1',\n    name: 'Chain Insights Investigations',\n    workspace_root: workspaceRoot,\n    default_network: 'bittensor',\n    graph_mcp_endpoint: LOCAL_GRAPH_MCP_ENDPOINT,\n    cases_dir: 'cases',\n    imports_dir: 'imports',\n    reports_dir: 'reports',\n    templates_dir: 'templates',\n    created_at: todayIso(),\n  }, null, 2) + '\\n'\n}\n\nconst README = `# Chain Insights Investigation Vault\n\nThis is a Chain Insights AML investigation workspace and Obsidian-compatible vault.\nOpen this directory in Obsidian to review cases, entities, evidence, graphs, and\npublished investigation bundles alongside the Chain Insights runtime metadata.\n\n## Start\n\n\\`\\`\\`bash\nchain-insights mcp tools --refresh\nchain-insights wallet ready --check-only\n\\`\\`\\`\n\n## Layout\n\n\\`\\`\\`text\n.chain-insights/   Workspace metadata\ncases/             Case exports and notes\nimports/           External reports, CSVs, screenshots, raw notes\nreports/           Final or interim analyst reports\nreports/graphs/    Graph JSON for visualization\nreports/tables/    Compact tabular extracts\ntemplates/         Reusable case/report templates\npublished/         Obsidian-ready case exports and published bundles\n.chain-insights/schema/         Runtime graph schema captures\n.chain-insights/runtime/        Workspace-local runtime process state and debug logs\n.chain-insights/runtime-skill/  Workspace-specific agent schema notes\n.obsidian/         Obsidian vault configuration\nCanvases/          Obsidian canvases for graph review\nEntities/          Entity notes and indexes\nEvidence/          Evidence notes and indexes\n\\`\\`\\`\n`\n\nconst AGENTS = `# Agent Instructions\n\nYou are operating inside a Chain Insights investigation workspace.\n\n- Read README.md first.\n- If this directory is not initialized, run \\`cia init .\\` before investigation-producing commands.\n- Do not rerun init in an existing workspace unless replacing scaffolding with \\`--force\\`.\n- Read .chain-insights/runtime-skill/SKILL.md before graph queries.\n- Preserve full blockchain addresses exactly.\n- Do not guess the network for graph queries.\n- Capture or refresh graph schema before the first case query.\n- Save compact evidence with original graph field names.\n- Put canonical graph JSON in reports/graphs/ and analyst tables in reports/tables/.\n- Evidence files should summarize and point to graph/table outputs; do not paste large raw JSON blobs into evidence Markdown.\n- Investigation output must stay in this initialized workspace.\n- Never write cases, evidence, reports, graph JSON, HTML, schema captures, or logs to ~/.chain-insights.\n- Keep theories lightweight until evidence supports them.\n`\n\nconst CLAUDE = AGENTS\n\nconst CASE_BRIEF = `# Case Brief\n\n## Summary\n\nStatus:\nNetwork:\nCurrent Assessment:\n\n## Known Addresses\n\n## Claims To Validate\n\n## Evidence\n\n## Next Steps\n`\n\nconst IMPORTS_README = `# External Investigation Inputs\n\nPut user-provided or third-party investigation material here before turning it\ninto case evidence.\n\nExamples:\n\n- Exchange support exports\n- CSV extracts\n- Screenshots\n- Raw notes\n- Partner reports\n\nFiles in this directory are inputs, not verified evidence. When an import\nsupports a claim, summarize it into the case evidence manifest and reference\nthe original file path.\n`\n\nconst TEMPLATES_README = `# Reusable Workspace Templates\n\nStore local report, case, prompt, and evidence templates here.\n\nTemplates are optional workspace helpers. They are not evidence and should not\nbe treated as case state until copied into a case, evidence file, dossier, or\nreport.\n`\n\nconst RUNTIME_SKILL = `---\nname: chain-insights-runtime-schema\ndescription: Workspace-local Chain Insights runtime schema notes. Refresh this after connecting to a graph MCP endpoint.\n---\n\n# Runtime Graph Schema\n\nBefore the first investigation query, capture the live graph schema into:\n\n\\`\\`\\`text\n.chain-insights/schema/<network>.graph-schema.json\n\\`\\`\\`\n\nUse \\`graph_query_batch\\` for schema capture. Prefix current topology reads\nwith \\`USE live_topology\\`, historical topology reads with\n\\`USE archive_topology\\`, and fact reads with \\`USE facts\\`, for example:\n\n\\`\\`\\`bash\ncia mcp call graph_query_batch network=<network> 'queries=[{\"id\":\"node_labels\",\"query\":\"USE live_topology MATCH (n:Address) RETURN \\\"Address\\\" AS node_label, count(n) AS sample_count LIMIT 1\"},{\"id\":\"archive_flow_sample\",\"query\":\"USE archive_topology MATCH (:Address)-[f:FLOWS_TO]->(:Address) RETURN f.period_granularity AS granularity, f.amount_sum AS amount_sum LIMIT 20\"}]'\n\\`\\`\\`\n\nThen update this file with observed labels, relationship types, and allowed\nproperty names for the active network.\n\nRules:\n\n- Prefer \\`graph_query\\` and \\`graph_query_batch\\` for graph-language reads.\n- Use \\`USE live_topology\\` for recent topology, \\`USE archive_topology\\`\n  for historical topology, and \\`USE facts\\` for labels, features,\n  risk scores, assets, and enrichment. Address facts can be reached through\n  relationships such as \\`(:Address)-[:HAS_FEATURE]->(:AddressFeature)\\`.\n  Archived money-flow topology is exposed as\n  \\`(:Address)-[:FLOWS_TO]->(:Address)\\` with \\`period_granularity\\`,\n  \\`period_start_date\\`, and \\`period_end_date\\` on the relationship.\n- Preserve source schema field names in evidence and generated data files.\n- Do not rename, reinterpret, or add unit labels to graph fields unless the\n  schema or query result explicitly supports that interpretation.\n- Keep evidence compact: select only the fields needed to support the claim.\n  Avoid storing whole node or relationship property blobs in evidence unless\n  the purpose of the query is schema discovery or debugging.\n- When using BFS, fixed-depth traversal fallbacks, or any manual \\`FLOWS_TO\\`\n  traversal, treat exchange hot wallets as terminal endpoints only. Do not\n  expand from, through, or classify exchange nodes as deposit, suspect, or\n  intermediate candidates. In Cypher, require every non-terminal traversal node\n  to satisfy \\`is_exchange IS NULL\\`; only the final exchange endpoint should\n  satisfy \\`is_exchange IS NOT NULL\\`.\n- Keep analysis products separate from evidence: graph JSON belongs under\n  \\`reports/graphs/\\`, tabular extracts under \\`reports/tables/\\`, and analyst\n  narrative under \\`reports/\\`.\n- Evidence Markdown should be a short provenance record with key facts and\n  pointers. Large JSON belongs in \\`reports/tables/\\`, not inline in evidence.\n\nTrace tool chaining:\n\n1. Use \\`trace_victim_funds\\` when the user gives victim/source addresses.\n2. Pass returned \\`continuation.candidate_deposit_addresses\\` to\n   \\`trace_deposit_sources\\`; do not make victim tracing run deposit traceback\n   internally.\n3. Pass high-confidence \\`continuation.candidate_suspect_addresses\\` from\n   deposit traceback to \\`trace_suspect_funds\\`.\n4. Use \\`trace_suspect_funds\\` when the user gives suspected scammer, mule,\n   operator, or laundering-ring addresses. \\`incident_timestamp_ms\\` is\n   optional.\n5. Use \\`address_risk\\` for single-address enrichment, and\n   \\`graph_query_batch\\` only when the role-specific tools do not answer the\n   exact question.\n\nAll trace tools return \\`chain-insights.trace.v1\\`. Preserve full addresses in\n\\`input.addresses\\`, \\`addresses[].address\\`, \\`edges[].from_address\\`,\n\\`edges[].to_address\\`, \\`paths[].addresses\\`, \\`candidate_labels[].address\\`,\nand \\`continuation\\` address lists.\n`\n\nconst SCHEMA_README = `# Runtime Schema Captures\n\nStore graph schema captures here, for example:\n\n\\`\\`\\`text\nbittensor.graph-schema.json\n\\`\\`\\`\n\nSchema captures should be generated before the first case query in a fresh\nworkspace, then referenced by evidence, reports, and runtime skill notes.\n`\n\nfunction workspaceFiles(workspaceRoot: string): Array<[string, string]> {\n  return [\n    ['.chain-insights/workspace.json', workspaceJson(workspaceRoot)],\n    ['README.md', README],\n    ['AGENTS.md', AGENTS],\n    ['CLAUDE.md', CLAUDE],\n    ['imports/README.md', IMPORTS_README],\n    ['templates/README.md', TEMPLATES_README],\n    ['templates/case-brief.md', CASE_BRIEF],\n    ['.chain-insights/runtime-skill/SKILL.md', RUNTIME_SKILL],\n    ['.chain-insights/schema/README.md', SCHEMA_README],\n    ['.chain-insights/runtime/.keep', ''],\n    ['.chain-insights/runtime/logs/.keep', ''],\n  ]\n}\n\nasync function assertNoFileCollisions(workspaceRoot: string): Promise<void> {\n  for (const [relativePath] of workspaceFiles(workspaceRoot)) {\n    const filePath = path.join(workspaceRoot, relativePath)\n    try {\n      await access(filePath)\n      throw new Error(`Refusing to overwrite ${filePath}. Re-run with --force to replace workspace files.`)\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n        continue\n      }\n      throw err\n    }\n  }\n}\n\nexport async function initWorkspace(options: InitWorkspaceOptions): Promise<InitWorkspaceResult> {\n  const workspaceRoot = path.resolve(options.targetDir)\n  if (!options.force) {\n    await assertNoFileCollisions(workspaceRoot)\n    await assertNoVaultFileCollisions(workspaceRoot)\n  }\n\n  for (const dir of WORKSPACE_DIRS) {\n    await mkdir(path.join(workspaceRoot, dir), { recursive: true })\n  }\n\n  const filesWritten: string[] = []\n  const flag = options.force ? 'w' : 'wx'\n  for (const [relativePath, content] of workspaceFiles(workspaceRoot)) {\n    const filePath = path.join(workspaceRoot, relativePath)\n    try {\n      await writeFile(filePath, content, { mode: 0o600, flag })\n      filesWritten.push(relativePath)\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'EEXIST') {\n        throw new Error(`Refusing to overwrite ${filePath}. Re-run with --force to replace workspace files.`)\n      }\n      throw err\n    }\n  }\n\n  const vault = await scaffoldVault({ workspaceRoot, force: options.force })\n  filesWritten.push(...vault.filesWritten)\n\n  return { workspaceRoot, filesWritten }\n}\n"],"mappings":";;;;;AAeA,MAAM,iBAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAS,WAAmB;CAC1B,wBAAO,IAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7C;AAEA,SAAS,cAAc,eAA+B;CACpD,OAAO,KAAK,UAAU;EACpB,QAAQ;EACR,MAAM;EACN,gBAAgB;EAChB,iBAAiB;EACjB,oBAAoB;EACpB,WAAW;EACX,aAAa;EACb,aAAa;EACb,eAAe;EACf,YAAY,SAAS;CACvB,GAAG,MAAM,CAAC,IAAI;AAChB;AAEA,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCf,MAAM,SAAS;;;;;;;;;;;;;;;;;;AAmBf,MAAM,SAAS;AAEf,MAAM,aAAa;;;;;;;;;;;;;;;;AAiBnB,MAAM,iBAAiB;;;;;;;;;;;;;;;;;AAkBvB,MAAM,mBAAmB;;;;;;;;AASzB,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyEtB,MAAM,gBAAgB;;;;;;;;;;;AAYtB,SAAS,eAAe,eAAgD;CACtE,OAAO;EACL,CAAC,kCAAkC,cAAc,aAAa,CAAC;EAC/D,CAAC,aAAa,MAAM;EACpB,CAAC,aAAa,MAAM;EACpB,CAAC,aAAa,MAAM;EACpB,CAAC,qBAAqB,cAAc;EACpC,CAAC,uBAAuB,gBAAgB;EACxC,CAAC,2BAA2B,UAAU;EACtC,CAAC,0CAA0C,aAAa;EACxD,CAAC,oCAAoC,aAAa;EAClD,CAAC,iCAAiC,EAAE;EACpC,CAAC,sCAAsC,EAAE;CAC3C;AACF;AAEA,eAAe,uBAAuB,eAAsC;CAC1E,KAAK,MAAM,CAAC,iBAAiB,eAAe,aAAa,GAAG;EAC1D,MAAM,WAAW,KAAK,KAAK,eAAe,YAAY;EACtD,IAAI;GACF,MAAM,OAAO,QAAQ;GACrB,MAAM,IAAI,MAAM,yBAAyB,SAAS,kDAAkD;EACtG,SAAS,KAAK;GACZ,IAAK,IAA8B,SAAS,UAC1C;GAEF,MAAM;EACR;CACF;AACF;AAEA,eAAsB,cAAc,SAA6D;CAC/F,MAAM,gBAAgB,KAAK,QAAQ,QAAQ,SAAS;CACpD,IAAI,CAAC,QAAQ,OAAO;EAClB,MAAM,uBAAuB,aAAa;EAC1C,MAAM,4BAA4B,aAAa;CACjD;CAEA,KAAK,MAAM,OAAO,gBAChB,MAAM,MAAM,KAAK,KAAK,eAAe,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CAGhE,MAAM,eAAyB,CAAC;CAChC,MAAM,OAAO,QAAQ,QAAQ,MAAM;CACnC,KAAK,MAAM,CAAC,cAAc,YAAY,eAAe,aAAa,GAAG;EACnE,MAAM,WAAW,KAAK,KAAK,eAAe,YAAY;EACtD,IAAI;GACF,MAAM,UAAU,UAAU,SAAS;IAAE,MAAM;IAAO;GAAK,CAAC;GACxD,aAAa,KAAK,YAAY;EAChC,SAAS,KAAK;GACZ,IAAK,IAA8B,SAAS,UAC1C,MAAM,IAAI,MAAM,yBAAyB,SAAS,kDAAkD;GAEtG,MAAM;EACR;CACF;CAEA,MAAM,QAAQ,MAAM,cAAc;EAAE;EAAe,OAAO,QAAQ;CAAM,CAAC;CACzE,aAAa,KAAK,GAAG,MAAM,YAAY;CAEvC,OAAO;EAAE;EAAe;CAAa;AACvC"}

package/dist/{init-Dhw8F23z.cjs → init-vj2v5PMP.cjs}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-DakpK96I.cjs");
-const require_mcp_endpoint = require("./mcp-endpoint-BaV8h_lq.cjs");
+const require_mcp_endpoint = require("./mcp-endpoint-cQIZSjkK.cjs");
 const require_vault = require("./vault-B2y78Ypu.cjs");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path, 1);

package/dist/{mcp-endpoint-DHs1cRFH.mjs → mcp-endpoint-QQ5Lbqc2.mjs}

@@ -14,6 +14,9 @@ function isLoopbackHost(hostname) {
 	if (isIP(normalized) !== 4) return false;
 	return normalized.split(".")[0] === "127";
 }
+function isKubernetesServiceHost(hostname) {
+	return hostname.toLowerCase().endsWith(".svc.cluster.local");
+}
 function graphMcpEndpointEnvOverride() {
 	const envEndpoint = process.env.CHAIN_INSIGHTS_GRAPH_MCP_ENDPOINT?.trim() || process.env.GRAPH_MCP_ENDPOINT?.trim();
 	return envEndpoint ? validateMcpEndpoint(envEndpoint, "graphMcpEndpoint") : void 0;
@@ -30,10 +33,10 @@ function validateMcpEndpoint(value, key) {
 	if (parsed.username || parsed.password) throw new Error(`${key} must not include URL credentials.`);
 	if (parsed.search || parsed.hash) throw new Error(`${key} must not include query parameters or URL fragments.`);
 	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") throw new Error(`${key} must use either https:// or http://.`);
-	if (parsed.protocol === "http:" && !isLoopbackHost(parsed.hostname)) throw new Error(`${key} must use https:// for remote hosts. http:// is allowed only for localhost or loopback addresses.`);
+	if (parsed.protocol === "http:" && !isLoopbackHost(parsed.hostname) && !isKubernetesServiceHost(parsed.hostname)) throw new Error(`${key} must use https:// for remote hosts. http:// is allowed only for localhost, loopback addresses, or Kubernetes *.svc.cluster.local service DNS.`);
 	return trimmed;
 }
 //#endregion
 export { validateMcpEndpoint as i, LOCAL_LEGACY_MCP_ENDPOINT as n, graphMcpEndpointEnvOverride as r, LOCAL_GRAPH_MCP_ENDPOINT as t };
 
-//# sourceMappingURL=mcp-endpoint-DHs1cRFH.mjs.map
+//# sourceMappingURL=mcp-endpoint-QQ5Lbqc2.mjs.map

package/dist/mcp-endpoint-QQ5Lbqc2.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-endpoint-QQ5Lbqc2.mjs","names":[],"sources":["../src/config/mcp-endpoint.ts"],"sourcesContent":["import { isIP } from 'node:net'\n\nconst LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1', '::1', '[::1]'])\n\nexport const LOCAL_GRAPH_MCP_ENDPOINT = 'http://127.0.0.1:8012/mcp'\nexport const LOCAL_LEGACY_MCP_ENDPOINT = 'http://127.0.0.1:4000'\n\nfunction isLoopbackHost(hostname: string): boolean {\n  const normalized = hostname.toLowerCase().replace(/^\\[(.*)\\]$/, '$1')\n  if (LOOPBACK_HOSTS.has(normalized)) return true\n  if (isIP(normalized) !== 4) return false\n  return normalized.split('.')[0] === '127'\n}\n\nfunction isKubernetesServiceHost(hostname: string): boolean {\n  return hostname.toLowerCase().endsWith('.svc.cluster.local')\n}\n\nexport function graphMcpEndpointEnvOverride(): string | undefined {\n  const envEndpoint = process.env.CHAIN_INSIGHTS_GRAPH_MCP_ENDPOINT?.trim()\n    || process.env.GRAPH_MCP_ENDPOINT?.trim()\n  return envEndpoint ? validateMcpEndpoint(envEndpoint, 'graphMcpEndpoint') : undefined\n}\n\nexport function validateMcpEndpoint(value: string, key: string): string {\n  const trimmed = value.trim()\n  if (!trimmed) {\n    throw new Error(`${key} must be a non-empty absolute URL.`)\n  }\n\n  let parsed: URL\n  try {\n    parsed = new URL(trimmed)\n  } catch {\n    throw new Error(\n      `${key} must be an absolute URL (example: https://mcp.example.com/mcp or http://127.0.0.1:8012/mcp).`,\n    )\n  }\n\n  if (parsed.username || parsed.password) {\n    throw new Error(`${key} must not include URL credentials.`)\n  }\n  if (parsed.search || parsed.hash) {\n    throw new Error(`${key} must not include query parameters or URL fragments.`)\n  }\n  if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {\n    throw new Error(`${key} must use either https:// or http://.`)\n  }\n  if (parsed.protocol === 'http:' && !isLoopbackHost(parsed.hostname) && !isKubernetesServiceHost(parsed.hostname)) {\n    throw new Error(\n      `${key} must use https:// for remote hosts. http:// is allowed only for localhost, loopback addresses, or Kubernetes *.svc.cluster.local service DNS.`,\n    )\n  }\n\n  return trimmed\n}\n"],"mappings":";;AAEA,MAAM,iBAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;AAAO,CAAC;AAEzE,MAAa,2BAA2B;AACxC,MAAa,4BAA4B;AAEzC,SAAS,eAAe,UAA2B;CACjD,MAAM,aAAa,SAAS,YAAY,EAAE,QAAQ,cAAc,IAAI;CACpE,IAAI,eAAe,IAAI,UAAU,GAAG,OAAO;CAC3C,IAAI,KAAK,UAAU,MAAM,GAAG,OAAO;CACnC,OAAO,WAAW,MAAM,GAAG,EAAE,OAAO;AACtC;AAEA,SAAS,wBAAwB,UAA2B;CAC1D,OAAO,SAAS,YAAY,EAAE,SAAS,oBAAoB;AAC7D;AAEA,SAAgB,8BAAkD;CAChE,MAAM,cAAc,QAAQ,IAAI,mCAAmC,KAAK,KACnE,QAAQ,IAAI,oBAAoB,KAAK;CAC1C,OAAO,cAAc,oBAAoB,aAAa,kBAAkB,IAAI,KAAA;AAC9E;AAEA,SAAgB,oBAAoB,OAAe,KAAqB;CACtE,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,GAAG,IAAI,mCAAmC;CAG5D,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,OAAO;CAC1B,QAAQ;EACN,MAAM,IAAI,MACR,GAAG,IAAI,8FACT;CACF;CAEA,IAAI,OAAO,YAAY,OAAO,UAC5B,MAAM,IAAI,MAAM,GAAG,IAAI,mCAAmC;CAE5D,IAAI,OAAO,UAAU,OAAO,MAC1B,MAAM,IAAI,MAAM,GAAG,IAAI,qDAAqD;CAE9E,IAAI,OAAO,aAAa,YAAY,OAAO,aAAa,SACtD,MAAM,IAAI,MAAM,GAAG,IAAI,sCAAsC;CAE/D,IAAI,OAAO,aAAa,WAAW,CAAC,eAAe,OAAO,QAAQ,KAAK,CAAC,wBAAwB,OAAO,QAAQ,GAC7G,MAAM,IAAI,MACR,GAAG,IAAI,+IACT;CAGF,OAAO;AACT"}

package/dist/{mcp-endpoint-BaV8h_lq.cjs → mcp-endpoint-cQIZSjkK.cjs}

@@ -14,6 +14,9 @@ function isLoopbackHost(hostname) {
 	if ((0, node_net.isIP)(normalized) !== 4) return false;
 	return normalized.split(".")[0] === "127";
 }
+function isKubernetesServiceHost(hostname) {
+	return hostname.toLowerCase().endsWith(".svc.cluster.local");
+}
 function graphMcpEndpointEnvOverride() {
 	const envEndpoint = process.env.CHAIN_INSIGHTS_GRAPH_MCP_ENDPOINT?.trim() || process.env.GRAPH_MCP_ENDPOINT?.trim();
 	return envEndpoint ? validateMcpEndpoint(envEndpoint, "graphMcpEndpoint") : void 0;
@@ -30,7 +33,7 @@ function validateMcpEndpoint(value, key) {
 	if (parsed.username || parsed.password) throw new Error(`${key} must not include URL credentials.`);
 	if (parsed.search || parsed.hash) throw new Error(`${key} must not include query parameters or URL fragments.`);
 	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") throw new Error(`${key} must use either https:// or http://.`);
-	if (parsed.protocol === "http:" && !isLoopbackHost(parsed.hostname)) throw new Error(`${key} must use https:// for remote hosts. http:// is allowed only for localhost or loopback addresses.`);
+	if (parsed.protocol === "http:" && !isLoopbackHost(parsed.hostname) && !isKubernetesServiceHost(parsed.hostname)) throw new Error(`${key} must use https:// for remote hosts. http:// is allowed only for localhost, loopback addresses, or Kubernetes *.svc.cluster.local service DNS.`);
 	return trimmed;
 }
 //#endregion

package/dist/mcp-proxy.cjs

@@ -588,7 +588,7 @@ async function normalizeRemoteToolResult(result, config, toolName = "remote-grap
 	const meta = { ...result._meta ?? {} };
 	if (graphPayload && includeAttachments) {
 		const { writeGraphReport } = await Promise.resolve().then(() => require("./graph-reports-B3mkLP8Z.cjs"));
-		const { ensureArtifactServer } = await Promise.resolve().then(() => require("./artifact-server-XbN16DwU.cjs"));
+		const { ensureArtifactServer } = await Promise.resolve().then(() => require("./artifact-server-C6_gtIql.cjs"));
 		const report = await writeGraphReport(graphPayload, {
 			serverPort: config.serverPort,
 			slug: toolName || "remote-graph"
@@ -615,7 +615,7 @@ function shouldIncludeAttachments(args, workspaceArtifactsEnabled) {
 async function writeLocalGraphMeta(graphData, config, slug, includeAttachments) {
 	if (!includeAttachments) return void 0;
 	const { writeGraphReport } = await Promise.resolve().then(() => require("./graph-reports-B3mkLP8Z.cjs"));
-	const { ensureArtifactServer } = await Promise.resolve().then(() => require("./artifact-server-XbN16DwU.cjs"));
+	const { ensureArtifactServer } = await Promise.resolve().then(() => require("./artifact-server-C6_gtIql.cjs"));
 	const report = await writeGraphReport(graphData, {
 		serverPort: config.serverPort,
 		slug
@@ -637,7 +637,7 @@ function graphMetaResult(graph) {
 * All diagnostic output goes to console.error() or process.stderr.write().
 */
 async function createProxy() {
-	const { loadConfig } = await Promise.resolve().then(() => require("./config-BwVx19Og.cjs")).then((n) => n.config_exports);
+	const { loadConfig } = await Promise.resolve().then(() => require("./config-CkW404Cs.cjs")).then((n) => n.config_exports);
 	const { activeDataDir, findActiveWorkspace } = await Promise.resolve().then(() => require("./active-BVr55kvW.cjs")).then((n) => n.active_exports);
 	const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await Promise.resolve().then(() => require("./client-Y_zqKqJT.cjs")).then((n) => n.client_exports);
 	const { loadSchema, saveSchema } = await Promise.resolve().then(() => require("./schema-cache-CJk1EL3L.cjs"));

package/dist/mcp-proxy.mjs

@@ -584,7 +584,7 @@ async function normalizeRemoteToolResult(result, config, toolName = "remote-grap
 	const meta = { ...result._meta ?? {} };
 	if (graphPayload && includeAttachments) {
 		const { writeGraphReport } = await import("./graph-reports-BDELxmpi.mjs");
-		const { ensureArtifactServer } = await import("./artifact-server-CP6LXQ9d.mjs");
+		const { ensureArtifactServer } = await import("./artifact-server-DHPM0lxS.mjs");
 		const report = await writeGraphReport(graphPayload, {
 			serverPort: config.serverPort,
 			slug: toolName || "remote-graph"
@@ -611,7 +611,7 @@ function shouldIncludeAttachments(args, workspaceArtifactsEnabled) {
 async function writeLocalGraphMeta(graphData, config, slug, includeAttachments) {
 	if (!includeAttachments) return void 0;
 	const { writeGraphReport } = await import("./graph-reports-BDELxmpi.mjs");
-	const { ensureArtifactServer } = await import("./artifact-server-CP6LXQ9d.mjs");
+	const { ensureArtifactServer } = await import("./artifact-server-DHPM0lxS.mjs");
 	const report = await writeGraphReport(graphData, {
 		serverPort: config.serverPort,
 		slug
@@ -633,7 +633,7 @@ function graphMetaResult(graph) {
 * All diagnostic output goes to console.error() or process.stderr.write().
 */
 async function createProxy() {
-	const { loadConfig } = await import("./config-Drgc2HuF.mjs").then((n) => n.t);
+	const { loadConfig } = await import("./config-C6zM8Xir.mjs").then((n) => n.t);
 	const { activeDataDir, findActiveWorkspace } = await import("./active-ByNgjuAg.mjs").then((n) => n.n);
 	const { createConfiguredGraphMcpFetch, resolveGraphMcpEndpoint } = await import("./client-BgmHjBHQ.mjs").then((n) => n.r);
 	const { loadSchema, saveSchema } = await import("./schema-cache-DwDvPy4e.mjs");

package/dist/{runner-CVnjpqc-.mjs → runner-B9fXAP0t.mjs}

@@ -1,5 +1,5 @@
 import { n as PACKAGE_VERSION } from "./version-BA3J8hu4.mjs";
-import { n as loadConfig } from "./config-Drgc2HuF.mjs";
+import { n as loadConfig } from "./config-C6zM8Xir.mjs";
 import { i as createConfiguredMcpFetch } from "./client-BgmHjBHQ.mjs";
 import { t as generateVisualization } from "./viz-DB5XFG1z.mjs";
 import { t as CaseStore } from "./store-C2B_AssI.mjs";
@@ -146,4 +146,4 @@ async run(playbook, opts) {
 //#endregion
 export { PlaybookRunner };
 
-//# sourceMappingURL=runner-CVnjpqc-.mjs.map
+//# sourceMappingURL=runner-B9fXAP0t.mjs.map

package/dist/{runner-CVnjpqc-.mjs.map → runner-B9fXAP0t.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"runner-CVnjpqc-.mjs","names":[],"sources":["../src/playbooks/runner.ts"],"sourcesContent":["import { Client } from '@modelcontextprotocol/sdk/client/index.js'\nimport { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js'\nimport { CaseStore } from '../cases/store.js'\nimport { EvidenceStore } from '../cases/evidence.js'\nimport { loadConfig } from '../config/index.js'\nimport { createConfiguredMcpFetch } from '../mcp/client.js'\nimport { generateVisualization } from '../viz/index.js'\nimport { PACKAGE_VERSION } from '../version.js'\nimport type { PlaybookDefinition } from './schema.js'\n\nexport interface RunnerOptions {\n  caseId?:   string            // attach to existing case; omit for quick-case auto-creation\n  from?:     number            // 1-based step to resume from (default: 1)\n  dryRun?:   boolean           // print steps, no MCP calls\n  params?:   Record<string, string>\n}\n\n/** Sleep for ms milliseconds. */\nfunction sleep(ms: number): Promise<void> {\n  return new Promise(resolve => setTimeout(resolve, ms))\n}\n\n/** Check if an error is a timeout/abort error. */\nfunction isTimeoutError(err: unknown): boolean {\n  if (!(err instanceof Error)) return false\n  return err.name === 'AbortError' || (err as NodeJS.ErrnoException).code === 'ECONNRESET'\n}\n\n/** Check if an error is a payment failure. */\nfunction isPaymentError(err: unknown): boolean {\n  if (!(err instanceof Error)) return false\n  const msg = err.message.toLowerCase()\n  // Match HTTP 402 status more precisely, or x402-specific error signals\n  return msg.includes('http 402') ||\n         msg.includes('status 402') ||\n         msg.includes('payment required') ||\n         msg.includes('x402')\n}\n\n/**\n * Call an MCP tool with retry logic on timeout (up to 3 total attempts).\n * Returns the text result or throws on non-retryable error.\n */\nasync function callWithRetry(\n  client: Client,\n  toolName: string,\n  params: Record<string, string>\n): Promise<string> {\n  const MAX_ATTEMPTS = 3\n  let lastErr: unknown\n\n  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n    try {\n      const result = await client.callTool({ name: toolName, arguments: params })\n      const content = result.content as Array<{ type: string; text?: string }>\n      return content.filter(c => c.type === 'text').map(c => c.text ?? '').join('\\n')\n    } catch (err) {\n      if (isTimeoutError(err) && attempt < MAX_ATTEMPTS) {\n        lastErr = err\n        await sleep(1000)\n        continue\n      }\n      throw err\n    }\n  }\n\n  throw lastErr\n}\n\nasync function validateStepTools(client: Client, steps: PlaybookDefinition['steps']): Promise<void> {\n  const result = await client.listTools()\n  const available = new Set(result.tools.map(tool => tool.name))\n  const missing = [...new Set(steps.map(step => step.tool).filter(tool => !available.has(tool)))]\n  if (missing.length === 0) return\n\n  const availableList = [...available].sort().join(', ') || 'none'\n  throw new Error(\n    `Unknown MCP tool(s) in playbook: ${missing.join(', ')}. ` +\n    `Available tools: ${availableList}. Run \\`chain-insights mcp tools --refresh\\` to inspect the live MCP schema.`\n  )\n}\n\nexport const PlaybookRunner = {\n  /**\n   * Execute a playbook definition step-by-step against the live MCP.\n   *\n   * @param playbook - Parsed and validated PlaybookDefinition\n   * @param opts     - Runner options (caseId, from, dryRun, params)\n   */\n  async run(playbook: PlaybookDefinition, opts: RunnerOptions): Promise<void> {\n    const startIndex = (opts.from ?? 1) - 1  // convert 1-based to 0-based\n    const stepsToRun = playbook.steps.slice(startIndex)\n    const totalSteps = playbook.steps.length\n\n    // --- DRY RUN ---\n    if (opts.dryRun) {\n      console.log(`Playbook: ${playbook.name} (dry run — no MCP calls)`)\n      console.log(`Steps: ${totalSteps} total, starting from ${startIndex + 1}`)\n      console.log('')\n      for (const step of stepsToRun) {\n        console.log(`Step ${step.index}/${totalSteps}: ${step.tool} (params: ${JSON.stringify(step.params)})`)\n      }\n      console.log('')\n      console.log('Cost: unknown (MCP pricing not available without live connection)')\n      return\n    }\n\n    // --- MCP AUTH CHECK (before case creation to avoid orphan cases) ---\n    const config = await loadConfig()\n    const mcpFetch = await createConfiguredMcpFetch(config)\n\n    // --- CASE RESOLUTION ---\n    let caseId: string\n    if (opts.caseId) {\n      const existingCase = await CaseStore.get(opts.caseId)\n      caseId = existingCase.id\n    } else {\n      const newCase = await CaseStore.create({\n        name: `quick-${playbook.name}-${Date.now()}`,\n        tags: ['quick', 'playbook', playbook.name],\n        description: `Auto-created for one-off playbook run: ${playbook.name}`,\n      })\n      caseId = newCase.id\n      console.log(`Created quick case: ${caseId}`)\n    }\n\n    // --- MCP CONNECTION ---\n    const client = new Client({ name: 'chain-insights-playbook', version: PACKAGE_VERSION })\n    await client.connect(\n      new StreamableHTTPClientTransport(new URL(config.mcpEndpoint), { fetch: mcpFetch })\n    )\n\n    let evidenceCount = 0\n\n    try {\n      await validateStepTools(client, stepsToRun)\n\n      // --- STEP LOOP ---\n      for (const step of stepsToRun) {\n        console.log(`Step ${step.index}/${totalSteps}: ${step.label}...`)\n\n        let result: string\n        try {\n          result = await callWithRetry(client, step.tool, step.params)\n        } catch (err) {\n          if (isPaymentError(err)) {\n            if (process.stdin.isTTY) {\n              // Interactive: prompt user\n              const { createInterface } = await import('node:readline')\n              const rl = createInterface({ input: process.stdin, output: process.stdout })\n              const answer = await new Promise<string>(resolve => {\n                rl.question(`Payment required for step ${step.index}. (retry/skip/abort): `, resolve)\n              })\n              rl.close()\n\n              if (answer.trim().toLowerCase() === 'retry') {\n                result = await callWithRetry(client, step.tool, step.params)\n              } else if (answer.trim().toLowerCase() === 'skip') {\n                console.log(`Step ${step.index} skipped.`)\n                continue\n              } else {\n                throw new Error(`Aborted at step ${step.index} due to payment failure.`)\n              }\n            } else {\n              // Non-TTY: abort\n              throw new Error(\n                `Payment required for step ${step.index} but no interactive terminal available. ` +\n                `Configure wallet with \\`chain-insights wallet import <private-key>\\`, then run \\`chain-insights wallet ready\\`. Aborting.`\n              )\n            }\n          } else {\n            // Non-payment, non-timeout MCP error — stop and report\n            const completedSteps = step.index - 1 - startIndex\n            const completedMsg = completedSteps > 0\n              ? `Completed: steps ${startIndex + 1}..${step.index - 1}.`\n              : 'No steps completed before failure.'\n            console.error(\n              `Step ${step.index} failed: ${(err as Error).message}. ` +\n              `${completedMsg} Run with --from ${step.index} to resume.`\n            )\n            throw err\n          }\n        }\n\n        // --- STORE EVIDENCE ---\n        await EvidenceStore.append(caseId, {\n          source: step.tool,\n          content: result,\n          queryParams: JSON.stringify(step.params),\n        })\n        evidenceCount++\n        console.log(`  (${result.length} chars stored)`)\n      }\n\n      // --- AUTO-VIZ for trace-funds ---\n      if (playbook.name === 'trace-funds') {\n        try {\n          const viz = await generateVisualization({ caseId })\n          console.log(`Visualization generated: ${viz.htmlPath}`)\n        } catch {\n          console.log('No transaction data to visualize.')\n        }\n      }\n\n      // --- FINAL SUMMARY ---\n      console.log(`Playbook complete. Case: ${caseId}. Evidence: ${evidenceCount} entries.`)\n    } finally {\n      await client.close()\n    }\n  },\n}\n"],"mappings":";;;;;;;;;;AAkBA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAQ,YAAW,WAAW,SAAS,EAAE,CAAC;AACvD;;AAGA,SAAS,eAAe,KAAuB;CAC7C,IAAI,EAAE,eAAe,QAAQ,OAAO;CACpC,OAAO,IAAI,SAAS,gBAAiB,IAA8B,SAAS;AAC9E;;AAGA,SAAS,eAAe,KAAuB;CAC7C,IAAI,EAAE,eAAe,QAAQ,OAAO;CACpC,MAAM,MAAM,IAAI,QAAQ,YAAY;CAEpC,OAAO,IAAI,SAAS,UAAU,KACvB,IAAI,SAAS,YAAY,KACzB,IAAI,SAAS,kBAAkB,KAC/B,IAAI,SAAS,MAAM;AAC5B;;;;;AAMA,eAAe,cACb,QACA,UACA,QACiB;CACjB,MAAM,eAAe;CACrB,IAAI;CAEJ,KAAK,IAAI,UAAU,GAAG,WAAW,cAAc,WAC7C,IAAI;EAGF,QADgB,MADK,OAAO,SAAS;GAAE,MAAM;GAAU,WAAW;EAAO,CAAC,GACnD,QACR,QAAO,MAAK,EAAE,SAAS,MAAM,EAAE,KAAI,MAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI;CAChF,SAAS,KAAK;EACZ,IAAI,eAAe,GAAG,KAAK,UAAU,cAAc;GACjD,UAAU;GACV,MAAM,MAAM,GAAI;GAChB;EACF;EACA,MAAM;CACR;CAGF,MAAM;AACR;AAEA,eAAe,kBAAkB,QAAgB,OAAmD;CAClG,MAAM,SAAS,MAAM,OAAO,UAAU;CACtC,MAAM,YAAY,IAAI,IAAI,OAAO,MAAM,KAAI,SAAQ,KAAK,IAAI,CAAC;CAC7D,MAAM,UAAU,CAAC,GAAG,IAAI,IAAI,MAAM,KAAI,SAAQ,KAAK,IAAI,EAAE,QAAO,SAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC;CAC9F,IAAI,QAAQ,WAAW,GAAG;CAE1B,MAAM,gBAAgB,CAAC,GAAG,SAAS,EAAE,KAAK,EAAE,KAAK,IAAI,KAAK;CAC1D,MAAM,IAAI,MACR,oCAAoC,QAAQ,KAAK,IAAI,EAAE,qBACnC,cAAc,6EACpC;AACF;AAEA,MAAa,iBAAiB;;;;;;;AAO5B,MAAM,IAAI,UAA8B,MAAoC;CAC1E,MAAM,cAAc,KAAK,QAAQ,KAAK;CACtC,MAAM,aAAa,SAAS,MAAM,MAAM,UAAU;CAClD,MAAM,aAAa,SAAS,MAAM;CAGlC,IAAI,KAAK,QAAQ;EACf,QAAQ,IAAI,aAAa,SAAS,KAAK,0BAA0B;EACjE,QAAQ,IAAI,UAAU,WAAW,wBAAwB,aAAa,GAAG;EACzE,QAAQ,IAAI,EAAE;EACd,KAAK,MAAM,QAAQ,YACjB,QAAQ,IAAI,QAAQ,KAAK,MAAM,GAAG,WAAW,IAAI,KAAK,KAAK,YAAY,KAAK,UAAU,KAAK,MAAM,EAAE,EAAE;EAEvG,QAAQ,IAAI,EAAE;EACd,QAAQ,IAAI,mEAAmE;EAC/E;CACF;CAGA,MAAM,SAAS,MAAM,WAAW;CAChC,MAAM,WAAW,MAAM,yBAAyB,MAAM;CAGtD,IAAI;CACJ,IAAI,KAAK,QAEP,UAAS,MADkB,UAAU,IAAI,KAAK,MAAM,GAC9B;MACjB;EAML,UAAS,MALa,UAAU,OAAO;GACrC,MAAM,SAAS,SAAS,KAAK,GAAG,KAAK,IAAI;GACzC,MAAM;IAAC;IAAS;IAAY,SAAS;GAAI;GACzC,aAAa,0CAA0C,SAAS;EAClE,CAAC,GACgB;EACjB,QAAQ,IAAI,uBAAuB,QAAQ;CAC7C;CAGA,MAAM,SAAS,IAAI,OAAO;EAAE,MAAM;EAA2B,SAAS;CAAgB,CAAC;CACvF,MAAM,OAAO,QACX,IAAI,8BAA8B,IAAI,IAAI,OAAO,WAAW,GAAG,EAAE,OAAO,SAAS,CAAC,CACpF;CAEA,IAAI,gBAAgB;CAEpB,IAAI;EACF,MAAM,kBAAkB,QAAQ,UAAU;EAG1C,KAAK,MAAM,QAAQ,YAAY;GAC7B,QAAQ,IAAI,QAAQ,KAAK,MAAM,GAAG,WAAW,IAAI,KAAK,MAAM,IAAI;GAEhE,IAAI;GACJ,IAAI;IACF,SAAS,MAAM,cAAc,QAAQ,KAAK,MAAM,KAAK,MAAM;GAC7D,SAAS,KAAK;IACZ,IAAI,eAAe,GAAG,GACpB,IAAI,QAAQ,MAAM,OAAO;KAEvB,MAAM,EAAE,oBAAoB,MAAM,OAAO;KACzC,MAAM,KAAK,gBAAgB;MAAE,OAAO,QAAQ;MAAO,QAAQ,QAAQ;KAAO,CAAC;KAC3E,MAAM,SAAS,MAAM,IAAI,SAAgB,YAAW;MAClD,GAAG,SAAS,6BAA6B,KAAK,MAAM,yBAAyB,OAAO;KACtF,CAAC;KACD,GAAG,MAAM;KAET,IAAI,OAAO,KAAK,EAAE,YAAY,MAAM,SAClC,SAAS,MAAM,cAAc,QAAQ,KAAK,MAAM,KAAK,MAAM;UACtD,IAAI,OAAO,KAAK,EAAE,YAAY,MAAM,QAAQ;MACjD,QAAQ,IAAI,QAAQ,KAAK,MAAM,UAAU;MACzC;KACF,OACE,MAAM,IAAI,MAAM,mBAAmB,KAAK,MAAM,yBAAyB;IAE3E,OAEE,MAAM,IAAI,MACR,6BAA6B,KAAK,MAAM,kKAE1C;SAEG;KAGL,MAAM,eADiB,KAAK,QAAQ,IAAI,aACF,IAClC,oBAAoB,aAAa,EAAE,IAAI,KAAK,QAAQ,EAAE,KACtD;KACJ,QAAQ,MACN,QAAQ,KAAK,MAAM,WAAY,IAAc,QAAQ,IAClD,aAAa,mBAAmB,KAAK,MAAM,YAChD;KACA,MAAM;IACR;GACF;GAGA,MAAM,cAAc,OAAO,QAAQ;IACjC,QAAQ,KAAK;IACb,SAAS;IACT,aAAa,KAAK,UAAU,KAAK,MAAM;GACzC,CAAC;GACD;GACA,QAAQ,IAAI,MAAM,OAAO,OAAO,eAAe;EACjD;EAGA,IAAI,SAAS,SAAS,eACpB,IAAI;GACF,MAAM,MAAM,MAAM,sBAAsB,EAAE,OAAO,CAAC;GAClD,QAAQ,IAAI,4BAA4B,IAAI,UAAU;EACxD,QAAQ;GACN,QAAQ,IAAI,mCAAmC;EACjD;EAIF,QAAQ,IAAI,4BAA4B,OAAO,cAAc,cAAc,UAAU;CACvF,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF,EACF"}
+{"version":3,"file":"runner-B9fXAP0t.mjs","names":[],"sources":["../src/playbooks/runner.ts"],"sourcesContent":["import { Client } from '@modelcontextprotocol/sdk/client/index.js'\nimport { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js'\nimport { CaseStore } from '../cases/store.js'\nimport { EvidenceStore } from '../cases/evidence.js'\nimport { loadConfig } from '../config/index.js'\nimport { createConfiguredMcpFetch } from '../mcp/client.js'\nimport { generateVisualization } from '../viz/index.js'\nimport { PACKAGE_VERSION } from '../version.js'\nimport type { PlaybookDefinition } from './schema.js'\n\nexport interface RunnerOptions {\n  caseId?:   string            // attach to existing case; omit for quick-case auto-creation\n  from?:     number            // 1-based step to resume from (default: 1)\n  dryRun?:   boolean           // print steps, no MCP calls\n  params?:   Record<string, string>\n}\n\n/** Sleep for ms milliseconds. */\nfunction sleep(ms: number): Promise<void> {\n  return new Promise(resolve => setTimeout(resolve, ms))\n}\n\n/** Check if an error is a timeout/abort error. */\nfunction isTimeoutError(err: unknown): boolean {\n  if (!(err instanceof Error)) return false\n  return err.name === 'AbortError' || (err as NodeJS.ErrnoException).code === 'ECONNRESET'\n}\n\n/** Check if an error is a payment failure. */\nfunction isPaymentError(err: unknown): boolean {\n  if (!(err instanceof Error)) return false\n  const msg = err.message.toLowerCase()\n  // Match HTTP 402 status more precisely, or x402-specific error signals\n  return msg.includes('http 402') ||\n         msg.includes('status 402') ||\n         msg.includes('payment required') ||\n         msg.includes('x402')\n}\n\n/**\n * Call an MCP tool with retry logic on timeout (up to 3 total attempts).\n * Returns the text result or throws on non-retryable error.\n */\nasync function callWithRetry(\n  client: Client,\n  toolName: string,\n  params: Record<string, string>\n): Promise<string> {\n  const MAX_ATTEMPTS = 3\n  let lastErr: unknown\n\n  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n    try {\n      const result = await client.callTool({ name: toolName, arguments: params })\n      const content = result.content as Array<{ type: string; text?: string }>\n      return content.filter(c => c.type === 'text').map(c => c.text ?? '').join('\\n')\n    } catch (err) {\n      if (isTimeoutError(err) && attempt < MAX_ATTEMPTS) {\n        lastErr = err\n        await sleep(1000)\n        continue\n      }\n      throw err\n    }\n  }\n\n  throw lastErr\n}\n\nasync function validateStepTools(client: Client, steps: PlaybookDefinition['steps']): Promise<void> {\n  const result = await client.listTools()\n  const available = new Set(result.tools.map(tool => tool.name))\n  const missing = [...new Set(steps.map(step => step.tool).filter(tool => !available.has(tool)))]\n  if (missing.length === 0) return\n\n  const availableList = [...available].sort().join(', ') || 'none'\n  throw new Error(\n    `Unknown MCP tool(s) in playbook: ${missing.join(', ')}. ` +\n    `Available tools: ${availableList}. Run \\`chain-insights mcp tools --refresh\\` to inspect the live MCP schema.`\n  )\n}\n\nexport const PlaybookRunner = {\n  /**\n   * Execute a playbook definition step-by-step against the live MCP.\n   *\n   * @param playbook - Parsed and validated PlaybookDefinition\n   * @param opts     - Runner options (caseId, from, dryRun, params)\n   */\n  async run(playbook: PlaybookDefinition, opts: RunnerOptions): Promise<void> {\n    const startIndex = (opts.from ?? 1) - 1  // convert 1-based to 0-based\n    const stepsToRun = playbook.steps.slice(startIndex)\n    const totalSteps = playbook.steps.length\n\n    // --- DRY RUN ---\n    if (opts.dryRun) {\n      console.log(`Playbook: ${playbook.name} (dry run — no MCP calls)`)\n      console.log(`Steps: ${totalSteps} total, starting from ${startIndex + 1}`)\n      console.log('')\n      for (const step of stepsToRun) {\n        console.log(`Step ${step.index}/${totalSteps}: ${step.tool} (params: ${JSON.stringify(step.params)})`)\n      }\n      console.log('')\n      console.log('Cost: unknown (MCP pricing not available without live connection)')\n      return\n    }\n\n    // --- MCP AUTH CHECK (before case creation to avoid orphan cases) ---\n    const config = await loadConfig()\n    const mcpFetch = await createConfiguredMcpFetch(config)\n\n    // --- CASE RESOLUTION ---\n    let caseId: string\n    if (opts.caseId) {\n      const existingCase = await CaseStore.get(opts.caseId)\n      caseId = existingCase.id\n    } else {\n      const newCase = await CaseStore.create({\n        name: `quick-${playbook.name}-${Date.now()}`,\n        tags: ['quick', 'playbook', playbook.name],\n        description: `Auto-created for one-off playbook run: ${playbook.name}`,\n      })\n      caseId = newCase.id\n      console.log(`Created quick case: ${caseId}`)\n    }\n\n    // --- MCP CONNECTION ---\n    const client = new Client({ name: 'chain-insights-playbook', version: PACKAGE_VERSION })\n    await client.connect(\n      new StreamableHTTPClientTransport(new URL(config.mcpEndpoint), { fetch: mcpFetch })\n    )\n\n    let evidenceCount = 0\n\n    try {\n      await validateStepTools(client, stepsToRun)\n\n      // --- STEP LOOP ---\n      for (const step of stepsToRun) {\n        console.log(`Step ${step.index}/${totalSteps}: ${step.label}...`)\n\n        let result: string\n        try {\n          result = await callWithRetry(client, step.tool, step.params)\n        } catch (err) {\n          if (isPaymentError(err)) {\n            if (process.stdin.isTTY) {\n              // Interactive: prompt user\n              const { createInterface } = await import('node:readline')\n              const rl = createInterface({ input: process.stdin, output: process.stdout })\n              const answer = await new Promise<string>(resolve => {\n                rl.question(`Payment required for step ${step.index}. (retry/skip/abort): `, resolve)\n              })\n              rl.close()\n\n              if (answer.trim().toLowerCase() === 'retry') {\n                result = await callWithRetry(client, step.tool, step.params)\n              } else if (answer.trim().toLowerCase() === 'skip') {\n                console.log(`Step ${step.index} skipped.`)\n                continue\n              } else {\n                throw new Error(`Aborted at step ${step.index} due to payment failure.`)\n              }\n            } else {\n              // Non-TTY: abort\n              throw new Error(\n                `Payment required for step ${step.index} but no interactive terminal available. ` +\n                `Configure wallet with \\`chain-insights wallet import <private-key>\\`, then run \\`chain-insights wallet ready\\`. Aborting.`\n              )\n            }\n          } else {\n            // Non-payment, non-timeout MCP error — stop and report\n            const completedSteps = step.index - 1 - startIndex\n            const completedMsg = completedSteps > 0\n              ? `Completed: steps ${startIndex + 1}..${step.index - 1}.`\n              : 'No steps completed before failure.'\n            console.error(\n              `Step ${step.index} failed: ${(err as Error).message}. ` +\n              `${completedMsg} Run with --from ${step.index} to resume.`\n            )\n            throw err\n          }\n        }\n\n        // --- STORE EVIDENCE ---\n        await EvidenceStore.append(caseId, {\n          source: step.tool,\n          content: result,\n          queryParams: JSON.stringify(step.params),\n        })\n        evidenceCount++\n        console.log(`  (${result.length} chars stored)`)\n      }\n\n      // --- AUTO-VIZ for trace-funds ---\n      if (playbook.name === 'trace-funds') {\n        try {\n          const viz = await generateVisualization({ caseId })\n          console.log(`Visualization generated: ${viz.htmlPath}`)\n        } catch {\n          console.log('No transaction data to visualize.')\n        }\n      }\n\n      // --- FINAL SUMMARY ---\n      console.log(`Playbook complete. Case: ${caseId}. Evidence: ${evidenceCount} entries.`)\n    } finally {\n      await client.close()\n    }\n  },\n}\n"],"mappings":";;;;;;;;;;AAkBA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAQ,YAAW,WAAW,SAAS,EAAE,CAAC;AACvD;;AAGA,SAAS,eAAe,KAAuB;CAC7C,IAAI,EAAE,eAAe,QAAQ,OAAO;CACpC,OAAO,IAAI,SAAS,gBAAiB,IAA8B,SAAS;AAC9E;;AAGA,SAAS,eAAe,KAAuB;CAC7C,IAAI,EAAE,eAAe,QAAQ,OAAO;CACpC,MAAM,MAAM,IAAI,QAAQ,YAAY;CAEpC,OAAO,IAAI,SAAS,UAAU,KACvB,IAAI,SAAS,YAAY,KACzB,IAAI,SAAS,kBAAkB,KAC/B,IAAI,SAAS,MAAM;AAC5B;;;;;AAMA,eAAe,cACb,QACA,UACA,QACiB;CACjB,MAAM,eAAe;CACrB,IAAI;CAEJ,KAAK,IAAI,UAAU,GAAG,WAAW,cAAc,WAC7C,IAAI;EAGF,QADgB,MADK,OAAO,SAAS;GAAE,MAAM;GAAU,WAAW;EAAO,CAAC,GACnD,QACR,QAAO,MAAK,EAAE,SAAS,MAAM,EAAE,KAAI,MAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI;CAChF,SAAS,KAAK;EACZ,IAAI,eAAe,GAAG,KAAK,UAAU,cAAc;GACjD,UAAU;GACV,MAAM,MAAM,GAAI;GAChB;EACF;EACA,MAAM;CACR;CAGF,MAAM;AACR;AAEA,eAAe,kBAAkB,QAAgB,OAAmD;CAClG,MAAM,SAAS,MAAM,OAAO,UAAU;CACtC,MAAM,YAAY,IAAI,IAAI,OAAO,MAAM,KAAI,SAAQ,KAAK,IAAI,CAAC;CAC7D,MAAM,UAAU,CAAC,GAAG,IAAI,IAAI,MAAM,KAAI,SAAQ,KAAK,IAAI,EAAE,QAAO,SAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC;CAC9F,IAAI,QAAQ,WAAW,GAAG;CAE1B,MAAM,gBAAgB,CAAC,GAAG,SAAS,EAAE,KAAK,EAAE,KAAK,IAAI,KAAK;CAC1D,MAAM,IAAI,MACR,oCAAoC,QAAQ,KAAK,IAAI,EAAE,qBACnC,cAAc,6EACpC;AACF;AAEA,MAAa,iBAAiB;;;;;;;AAO5B,MAAM,IAAI,UAA8B,MAAoC;CAC1E,MAAM,cAAc,KAAK,QAAQ,KAAK;CACtC,MAAM,aAAa,SAAS,MAAM,MAAM,UAAU;CAClD,MAAM,aAAa,SAAS,MAAM;CAGlC,IAAI,KAAK,QAAQ;EACf,QAAQ,IAAI,aAAa,SAAS,KAAK,0BAA0B;EACjE,QAAQ,IAAI,UAAU,WAAW,wBAAwB,aAAa,GAAG;EACzE,QAAQ,IAAI,EAAE;EACd,KAAK,MAAM,QAAQ,YACjB,QAAQ,IAAI,QAAQ,KAAK,MAAM,GAAG,WAAW,IAAI,KAAK,KAAK,YAAY,KAAK,UAAU,KAAK,MAAM,EAAE,EAAE;EAEvG,QAAQ,IAAI,EAAE;EACd,QAAQ,IAAI,mEAAmE;EAC/E;CACF;CAGA,MAAM,SAAS,MAAM,WAAW;CAChC,MAAM,WAAW,MAAM,yBAAyB,MAAM;CAGtD,IAAI;CACJ,IAAI,KAAK,QAEP,UAAS,MADkB,UAAU,IAAI,KAAK,MAAM,GAC9B;MACjB;EAML,UAAS,MALa,UAAU,OAAO;GACrC,MAAM,SAAS,SAAS,KAAK,GAAG,KAAK,IAAI;GACzC,MAAM;IAAC;IAAS;IAAY,SAAS;GAAI;GACzC,aAAa,0CAA0C,SAAS;EAClE,CAAC,GACgB;EACjB,QAAQ,IAAI,uBAAuB,QAAQ;CAC7C;CAGA,MAAM,SAAS,IAAI,OAAO;EAAE,MAAM;EAA2B,SAAS;CAAgB,CAAC;CACvF,MAAM,OAAO,QACX,IAAI,8BAA8B,IAAI,IAAI,OAAO,WAAW,GAAG,EAAE,OAAO,SAAS,CAAC,CACpF;CAEA,IAAI,gBAAgB;CAEpB,IAAI;EACF,MAAM,kBAAkB,QAAQ,UAAU;EAG1C,KAAK,MAAM,QAAQ,YAAY;GAC7B,QAAQ,IAAI,QAAQ,KAAK,MAAM,GAAG,WAAW,IAAI,KAAK,MAAM,IAAI;GAEhE,IAAI;GACJ,IAAI;IACF,SAAS,MAAM,cAAc,QAAQ,KAAK,MAAM,KAAK,MAAM;GAC7D,SAAS,KAAK;IACZ,IAAI,eAAe,GAAG,GACpB,IAAI,QAAQ,MAAM,OAAO;KAEvB,MAAM,EAAE,oBAAoB,MAAM,OAAO;KACzC,MAAM,KAAK,gBAAgB;MAAE,OAAO,QAAQ;MAAO,QAAQ,QAAQ;KAAO,CAAC;KAC3E,MAAM,SAAS,MAAM,IAAI,SAAgB,YAAW;MAClD,GAAG,SAAS,6BAA6B,KAAK,MAAM,yBAAyB,OAAO;KACtF,CAAC;KACD,GAAG,MAAM;KAET,IAAI,OAAO,KAAK,EAAE,YAAY,MAAM,SAClC,SAAS,MAAM,cAAc,QAAQ,KAAK,MAAM,KAAK,MAAM;UACtD,IAAI,OAAO,KAAK,EAAE,YAAY,MAAM,QAAQ;MACjD,QAAQ,IAAI,QAAQ,KAAK,MAAM,UAAU;MACzC;KACF,OACE,MAAM,IAAI,MAAM,mBAAmB,KAAK,MAAM,yBAAyB;IAE3E,OAEE,MAAM,IAAI,MACR,6BAA6B,KAAK,MAAM,kKAE1C;SAEG;KAGL,MAAM,eADiB,KAAK,QAAQ,IAAI,aACF,IAClC,oBAAoB,aAAa,EAAE,IAAI,KAAK,QAAQ,EAAE,KACtD;KACJ,QAAQ,MACN,QAAQ,KAAK,MAAM,WAAY,IAAc,QAAQ,IAClD,aAAa,mBAAmB,KAAK,MAAM,YAChD;KACA,MAAM;IACR;GACF;GAGA,MAAM,cAAc,OAAO,QAAQ;IACjC,QAAQ,KAAK;IACb,SAAS;IACT,aAAa,KAAK,UAAU,KAAK,MAAM;GACzC,CAAC;GACD;GACA,QAAQ,IAAI,MAAM,OAAO,OAAO,eAAe;EACjD;EAGA,IAAI,SAAS,SAAS,eACpB,IAAI;GACF,MAAM,MAAM,MAAM,sBAAsB,EAAE,OAAO,CAAC;GAClD,QAAQ,IAAI,4BAA4B,IAAI,UAAU;EACxD,QAAQ;GACN,QAAQ,IAAI,mCAAmC;EACjD;EAIF,QAAQ,IAAI,4BAA4B,OAAO,cAAc,cAAc,UAAU;CACvF,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF,EACF"}

package/dist/{runner-bLy0pTr_.cjs → runner-CcZCrrkn.cjs}

@@ -1,5 +1,5 @@
 const require_version = require("./version-CO9Or_YV.cjs");
-const require_config = require("./config-BwVx19Og.cjs");
+const require_config = require("./config-CkW404Cs.cjs");
 const require_client = require("./client-Y_zqKqJT.cjs");
 const require_viz = require("./viz-D1620cBX.cjs");
 const require_store = require("./store-CQhU8dz8.cjs");

package/dist/{schema-BFEWhzg7.mjs → schema-D_qwaQA5.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { i as validateMcpEndpoint, n as LOCAL_LEGACY_MCP_ENDPOINT, t as LOCAL_GRAPH_MCP_ENDPOINT } from "./mcp-endpoint-DHs1cRFH.mjs";
+import { i as validateMcpEndpoint, n as LOCAL_LEGACY_MCP_ENDPOINT, t as LOCAL_GRAPH_MCP_ENDPOINT } from "./mcp-endpoint-QQ5Lbqc2.mjs";
 import path from "node:path";
 import os from "node:os";
 import * as z from "zod";
@@ -57,4 +57,4 @@ const CONFIG_KEYS = [
 //#endregion
 export { parseInvestigatorConfig as n, schema_exports as r, DEFAULT_CONFIG as t };
 
-//# sourceMappingURL=schema-BFEWhzg7.mjs.map
+//# sourceMappingURL=schema-D_qwaQA5.mjs.map

package/dist/{schema-BFEWhzg7.mjs.map → schema-D_qwaQA5.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"schema-BFEWhzg7.mjs","names":[],"sources":["../src/config/schema.ts"],"sourcesContent":["import * as z from 'zod'\nimport os from 'node:os'\nimport path from 'node:path'\nimport { LOCAL_GRAPH_MCP_ENDPOINT, LOCAL_LEGACY_MCP_ENDPOINT, validateMcpEndpoint } from './mcp-endpoint.js'\n\nfunction endpointSchema(key: 'mcpEndpoint' | 'graphMcpEndpoint') {\n  return z.string().transform((value, ctx) => {\n    try {\n      return validateMcpEndpoint(value, key)\n    } catch (err) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        message: (err as Error).message,\n      })\n      return z.NEVER\n    }\n  })\n}\n\nexport const ConfigSchema = z.object({\n  mcpEndpoint:       endpointSchema('mcpEndpoint').default(LOCAL_LEGACY_MCP_ENDPOINT),\n  mcpAuthToken:      z.string().optional(),\n  graphMcpEndpoint:  endpointSchema('graphMcpEndpoint').default(LOCAL_GRAPH_MCP_ENDPOINT),\n  graphMcpAuthToken: z.string().optional(),\n  graphMcpMode:      z.enum(['paid', 'debug']).default('paid'),\n  walletAddress:     z.string().optional(),\n  serverPort:        z.number().int().min(1024).max(65535).default(4321),\n  dataDir:           z.string().default(path.join(os.homedir(), '.chain-insights')),\n  version:           z.string().default('1'),\n})\n\nexport type InvestigatorConfig = z.infer<typeof ConfigSchema>\n\nfunction formatConfigValidationError(error: z.ZodError): string {\n  return error.issues.map((issue) => issue.message).join('\\n')\n}\n\nexport function parseInvestigatorConfig(input: unknown): InvestigatorConfig {\n  const parsed = ConfigSchema.safeParse(input)\n  if (parsed.success) return parsed.data\n  throw new Error(formatConfigValidationError(parsed.error))\n}\n\nexport const DEFAULT_CONFIG: InvestigatorConfig = parseInvestigatorConfig({})\n\nexport const CONFIG_KEYS = [\n  'mcpEndpoint',\n  'mcpAuthToken',\n  'graphMcpEndpoint',\n  'graphMcpAuthToken',\n  'graphMcpMode',\n  'walletAddress',\n  'serverPort',\n  'dataDir',\n  'version',\n] as const\n\nexport type ConfigKey = typeof CONFIG_KEYS[number]\n"],"mappings":";;;;;;;;;;;;AAKA,SAAS,eAAe,KAAyC;CAC/D,OAAO,EAAE,OAAO,EAAE,WAAW,OAAO,QAAQ;EAC1C,IAAI;GACF,OAAO,oBAAoB,OAAO,GAAG;EACvC,SAAS,KAAK;GACZ,IAAI,SAAS;IACX,MAAM,EAAE,aAAa;IACrB,SAAU,IAAc;GAC1B,CAAC;GACD,OAAO,EAAE;EACX;CACF,CAAC;AACH;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,aAAmB,eAAe,aAAa,EAAE,QAAQ,yBAAyB;CAClF,cAAmB,EAAE,OAAO,EAAE,SAAS;CACvC,kBAAmB,eAAe,kBAAkB,EAAE,QAAQ,wBAAwB;CACtF,mBAAmB,EAAE,OAAO,EAAE,SAAS;CACvC,cAAmB,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,QAAQ,MAAM;CAC3D,eAAmB,EAAE,OAAO,EAAE,SAAS;CACvC,YAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,KAAK,EAAE,QAAQ,IAAI;CACrE,SAAmB,EAAE,OAAO,EAAE,QAAQ,KAAK,KAAK,GAAG,QAAQ,GAAG,iBAAiB,CAAC;CAChF,SAAmB,EAAE,OAAO,EAAE,QAAQ,GAAG;AAC3C,CAAC;AAID,SAAS,4BAA4B,OAA2B;CAC9D,OAAO,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,EAAE,KAAK,IAAI;AAC7D;AAEA,SAAgB,wBAAwB,OAAoC;CAC1E,MAAM,SAAS,aAAa,UAAU,KAAK;CAC3C,IAAI,OAAO,SAAS,OAAO,OAAO;CAClC,MAAM,IAAI,MAAM,4BAA4B,OAAO,KAAK,CAAC;AAC3D;AAEA,MAAa,iBAAqC,wBAAwB,CAAC,CAAC;AAE5E,MAAa,cAAc;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF"}
+{"version":3,"file":"schema-D_qwaQA5.mjs","names":[],"sources":["../src/config/schema.ts"],"sourcesContent":["import * as z from 'zod'\nimport os from 'node:os'\nimport path from 'node:path'\nimport { LOCAL_GRAPH_MCP_ENDPOINT, LOCAL_LEGACY_MCP_ENDPOINT, validateMcpEndpoint } from './mcp-endpoint.js'\n\nfunction endpointSchema(key: 'mcpEndpoint' | 'graphMcpEndpoint') {\n  return z.string().transform((value, ctx) => {\n    try {\n      return validateMcpEndpoint(value, key)\n    } catch (err) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        message: (err as Error).message,\n      })\n      return z.NEVER\n    }\n  })\n}\n\nexport const ConfigSchema = z.object({\n  mcpEndpoint:       endpointSchema('mcpEndpoint').default(LOCAL_LEGACY_MCP_ENDPOINT),\n  mcpAuthToken:      z.string().optional(),\n  graphMcpEndpoint:  endpointSchema('graphMcpEndpoint').default(LOCAL_GRAPH_MCP_ENDPOINT),\n  graphMcpAuthToken: z.string().optional(),\n  graphMcpMode:      z.enum(['paid', 'debug']).default('paid'),\n  walletAddress:     z.string().optional(),\n  serverPort:        z.number().int().min(1024).max(65535).default(4321),\n  dataDir:           z.string().default(path.join(os.homedir(), '.chain-insights')),\n  version:           z.string().default('1'),\n})\n\nexport type InvestigatorConfig = z.infer<typeof ConfigSchema>\n\nfunction formatConfigValidationError(error: z.ZodError): string {\n  return error.issues.map((issue) => issue.message).join('\\n')\n}\n\nexport function parseInvestigatorConfig(input: unknown): InvestigatorConfig {\n  const parsed = ConfigSchema.safeParse(input)\n  if (parsed.success) return parsed.data\n  throw new Error(formatConfigValidationError(parsed.error))\n}\n\nexport const DEFAULT_CONFIG: InvestigatorConfig = parseInvestigatorConfig({})\n\nexport const CONFIG_KEYS = [\n  'mcpEndpoint',\n  'mcpAuthToken',\n  'graphMcpEndpoint',\n  'graphMcpAuthToken',\n  'graphMcpMode',\n  'walletAddress',\n  'serverPort',\n  'dataDir',\n  'version',\n] as const\n\nexport type ConfigKey = typeof CONFIG_KEYS[number]\n"],"mappings":";;;;;;;;;;;;AAKA,SAAS,eAAe,KAAyC;CAC/D,OAAO,EAAE,OAAO,EAAE,WAAW,OAAO,QAAQ;EAC1C,IAAI;GACF,OAAO,oBAAoB,OAAO,GAAG;EACvC,SAAS,KAAK;GACZ,IAAI,SAAS;IACX,MAAM,EAAE,aAAa;IACrB,SAAU,IAAc;GAC1B,CAAC;GACD,OAAO,EAAE;EACX;CACF,CAAC;AACH;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,aAAmB,eAAe,aAAa,EAAE,QAAQ,yBAAyB;CAClF,cAAmB,EAAE,OAAO,EAAE,SAAS;CACvC,kBAAmB,eAAe,kBAAkB,EAAE,QAAQ,wBAAwB;CACtF,mBAAmB,EAAE,OAAO,EAAE,SAAS;CACvC,cAAmB,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,QAAQ,MAAM;CAC3D,eAAmB,EAAE,OAAO,EAAE,SAAS;CACvC,YAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,KAAK,EAAE,QAAQ,IAAI;CACrE,SAAmB,EAAE,OAAO,EAAE,QAAQ,KAAK,KAAK,GAAG,QAAQ,GAAG,iBAAiB,CAAC;CAChF,SAAmB,EAAE,OAAO,EAAE,QAAQ,GAAG;AAC3C,CAAC;AAID,SAAS,4BAA4B,OAA2B;CAC9D,OAAO,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,EAAE,KAAK,IAAI;AAC7D;AAEA,SAAgB,wBAAwB,OAAoC;CAC1E,MAAM,SAAS,aAAa,UAAU,KAAK;CAC3C,IAAI,OAAO,SAAS,OAAO,OAAO;CAClC,MAAM,IAAI,MAAM,4BAA4B,OAAO,KAAK,CAAC;AAC3D;AAEA,MAAa,iBAAqC,wBAAwB,CAAC,CAAC;AAE5E,MAAa,cAAc;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF"}

package/dist/{schema-Vl9yuOFO.cjs → schema-Dr6JXSOF.cjs}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-DakpK96I.cjs");
-const require_mcp_endpoint = require("./mcp-endpoint-BaV8h_lq.cjs");
+const require_mcp_endpoint = require("./mcp-endpoint-cQIZSjkK.cjs");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path, 1);
 let node_os = require("node:os");

package/dist/{server-BXLX2j_A.mjs → server-86dyCsJO.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { t as createApp } from "./app-CRd39JJ8.mjs";
+import { t as createApp } from "./app-norpwdou.mjs";
 import { serve } from "@hono/node-server";
 //#region src/server/index.ts
 var server_exports = /* @__PURE__ */ __exportAll({ startServer: () => startServer });
@@ -42,4 +42,4 @@ function startServer(port = 4321) {
 //#endregion
 export { startServer as n, server_exports as t };
 
-//# sourceMappingURL=server-BXLX2j_A.mjs.map
+//# sourceMappingURL=server-86dyCsJO.mjs.map

package/dist/{server-BXLX2j_A.mjs.map → server-86dyCsJO.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"server-BXLX2j_A.mjs","names":[],"sources":["../src/server/index.ts"],"sourcesContent":["import { serve } from '@hono/node-server'\nimport { createApp } from './app.js'\n\nexport function startServer(port = 4321): () => void {\n  const app    = createApp()\n  const server = serve({\n    fetch:    app.fetch,\n    hostname: '127.0.0.1', // localhost-only — REQUIRED (default 0.0.0.0 is insecure)\n    port,\n  })\n\n  server.on('listening', () => {\n    console.log(`Chain Insights server running on http://127.0.0.1:${port}`)\n  })\n  server.on('error', (err: NodeJS.ErrnoException) => {\n    if (err.code === 'EADDRINUSE') {\n      process.stderr.write(`Port already in use: 127.0.0.1:${port}\\n`)\n    } else {\n      process.stderr.write(`Chain Insights server failed: ${err.message}\\n`)\n    }\n    process.exitCode = 1\n  })\n\n  let stopped = false\n  const stop = (callback?: () => void): void => {\n    if (stopped) {\n      callback?.()\n      return\n    }\n    stopped = true\n    process.off('SIGINT', onSigint)\n    process.off('SIGTERM', onSigterm)\n    server.close(callback)\n  }\n  const onSigint = () => { stop(); process.exit(0) }\n  const onSigterm = () => { stop(() => process.exit(0)) }\n\n  process.on('SIGINT', onSigint)\n  process.on('SIGTERM', onSigterm)\n\n  return stop\n}\n"],"mappings":";;;;;AAGA,SAAgB,YAAY,OAAO,MAAkB;CAEnD,MAAM,SAAS,MAAM;EACnB,OAFa,UAED,EAAE;EACd,UAAU;EACV;CACF,CAAC;CAED,OAAO,GAAG,mBAAmB;EAC3B,QAAQ,IAAI,qDAAqD,MAAM;CACzE,CAAC;CACD,OAAO,GAAG,UAAU,QAA+B;EACjD,IAAI,IAAI,SAAS,cACf,QAAQ,OAAO,MAAM,kCAAkC,KAAK,GAAG;OAE/D,QAAQ,OAAO,MAAM,iCAAiC,IAAI,QAAQ,GAAG;EAEvE,QAAQ,WAAW;CACrB,CAAC;CAED,IAAI,UAAU;CACd,MAAM,QAAQ,aAAgC;EAC5C,IAAI,SAAS;GACX,WAAW;GACX;EACF;EACA,UAAU;EACV,QAAQ,IAAI,UAAU,QAAQ;EAC9B,QAAQ,IAAI,WAAW,SAAS;EAChC,OAAO,MAAM,QAAQ;CACvB;CACA,MAAM,iBAAiB;EAAE,KAAK;EAAG,QAAQ,KAAK,CAAC;CAAE;CACjD,MAAM,kBAAkB;EAAE,WAAW,QAAQ,KAAK,CAAC,CAAC;CAAE;CAEtD,QAAQ,GAAG,UAAU,QAAQ;CAC7B,QAAQ,GAAG,WAAW,SAAS;CAE/B,OAAO;AACT"}
+{"version":3,"file":"server-86dyCsJO.mjs","names":[],"sources":["../src/server/index.ts"],"sourcesContent":["import { serve } from '@hono/node-server'\nimport { createApp } from './app.js'\n\nexport function startServer(port = 4321): () => void {\n  const app    = createApp()\n  const server = serve({\n    fetch:    app.fetch,\n    hostname: '127.0.0.1', // localhost-only — REQUIRED (default 0.0.0.0 is insecure)\n    port,\n  })\n\n  server.on('listening', () => {\n    console.log(`Chain Insights server running on http://127.0.0.1:${port}`)\n  })\n  server.on('error', (err: NodeJS.ErrnoException) => {\n    if (err.code === 'EADDRINUSE') {\n      process.stderr.write(`Port already in use: 127.0.0.1:${port}\\n`)\n    } else {\n      process.stderr.write(`Chain Insights server failed: ${err.message}\\n`)\n    }\n    process.exitCode = 1\n  })\n\n  let stopped = false\n  const stop = (callback?: () => void): void => {\n    if (stopped) {\n      callback?.()\n      return\n    }\n    stopped = true\n    process.off('SIGINT', onSigint)\n    process.off('SIGTERM', onSigterm)\n    server.close(callback)\n  }\n  const onSigint = () => { stop(); process.exit(0) }\n  const onSigterm = () => { stop(() => process.exit(0)) }\n\n  process.on('SIGINT', onSigint)\n  process.on('SIGTERM', onSigterm)\n\n  return stop\n}\n"],"mappings":";;;;;AAGA,SAAgB,YAAY,OAAO,MAAkB;CAEnD,MAAM,SAAS,MAAM;EACnB,OAFa,UAED,EAAE;EACd,UAAU;EACV;CACF,CAAC;CAED,OAAO,GAAG,mBAAmB;EAC3B,QAAQ,IAAI,qDAAqD,MAAM;CACzE,CAAC;CACD,OAAO,GAAG,UAAU,QAA+B;EACjD,IAAI,IAAI,SAAS,cACf,QAAQ,OAAO,MAAM,kCAAkC,KAAK,GAAG;OAE/D,QAAQ,OAAO,MAAM,iCAAiC,IAAI,QAAQ,GAAG;EAEvE,QAAQ,WAAW;CACrB,CAAC;CAED,IAAI,UAAU;CACd,MAAM,QAAQ,aAAgC;EAC5C,IAAI,SAAS;GACX,WAAW;GACX;EACF;EACA,UAAU;EACV,QAAQ,IAAI,UAAU,QAAQ;EAC9B,QAAQ,IAAI,WAAW,SAAS;EAChC,OAAO,MAAM,QAAQ;CACvB;CACA,MAAM,iBAAiB;EAAE,KAAK;EAAG,QAAQ,KAAK,CAAC;CAAE;CACjD,MAAM,kBAAkB;EAAE,WAAW,QAAQ,KAAK,CAAC,CAAC;CAAE;CAEtD,QAAQ,GAAG,UAAU,QAAQ;CAC7B,QAAQ,GAAG,WAAW,SAAS;CAE/B,OAAO;AACT"}

package/dist/{server-BqVdWath.cjs → server-B2NFmnCM.cjs}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-DakpK96I.cjs");
-const require_app = require("./app-BxojXjtB.cjs");
+const require_app = require("./app-DjJn3irw.cjs");
 let _hono_node_server = require("@hono/node-server");
 //#region src/server/index.ts
 var server_exports = /* @__PURE__ */ require_chunk.__exportAll({ startServer: () => startServer });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chain-insights",
-  "version": "0.3.9",
+  "version": "0.3.11",
   "description": "AML investigation CLI and MCP proxy for blockchain risk, fund-flow tracing, case reports, and GraphRAG MCP access",
   "homepage": "https://chain-insights.ai",
   "repository": {

package/dist/mcp-endpoint-DHs1cRFH.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-endpoint-DHs1cRFH.mjs","names":[],"sources":["../src/config/mcp-endpoint.ts"],"sourcesContent":["import { isIP } from 'node:net'\n\nconst LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1', '::1', '[::1]'])\n\nexport const LOCAL_GRAPH_MCP_ENDPOINT = 'http://127.0.0.1:8012/mcp'\nexport const LOCAL_LEGACY_MCP_ENDPOINT = 'http://127.0.0.1:4000'\n\nfunction isLoopbackHost(hostname: string): boolean {\n  const normalized = hostname.toLowerCase().replace(/^\\[(.*)\\]$/, '$1')\n  if (LOOPBACK_HOSTS.has(normalized)) return true\n  if (isIP(normalized) !== 4) return false\n  return normalized.split('.')[0] === '127'\n}\n\nexport function graphMcpEndpointEnvOverride(): string | undefined {\n  const envEndpoint = process.env.CHAIN_INSIGHTS_GRAPH_MCP_ENDPOINT?.trim()\n    || process.env.GRAPH_MCP_ENDPOINT?.trim()\n  return envEndpoint ? validateMcpEndpoint(envEndpoint, 'graphMcpEndpoint') : undefined\n}\n\nexport function validateMcpEndpoint(value: string, key: string): string {\n  const trimmed = value.trim()\n  if (!trimmed) {\n    throw new Error(`${key} must be a non-empty absolute URL.`)\n  }\n\n  let parsed: URL\n  try {\n    parsed = new URL(trimmed)\n  } catch {\n    throw new Error(\n      `${key} must be an absolute URL (example: https://mcp.example.com/mcp or http://127.0.0.1:8012/mcp).`,\n    )\n  }\n\n  if (parsed.username || parsed.password) {\n    throw new Error(`${key} must not include URL credentials.`)\n  }\n  if (parsed.search || parsed.hash) {\n    throw new Error(`${key} must not include query parameters or URL fragments.`)\n  }\n  if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {\n    throw new Error(`${key} must use either https:// or http://.`)\n  }\n  if (parsed.protocol === 'http:' && !isLoopbackHost(parsed.hostname)) {\n    throw new Error(\n      `${key} must use https:// for remote hosts. http:// is allowed only for localhost or loopback addresses.`,\n    )\n  }\n\n  return trimmed\n}\n"],"mappings":";;AAEA,MAAM,iBAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;AAAO,CAAC;AAEzE,MAAa,2BAA2B;AACxC,MAAa,4BAA4B;AAEzC,SAAS,eAAe,UAA2B;CACjD,MAAM,aAAa,SAAS,YAAY,EAAE,QAAQ,cAAc,IAAI;CACpE,IAAI,eAAe,IAAI,UAAU,GAAG,OAAO;CAC3C,IAAI,KAAK,UAAU,MAAM,GAAG,OAAO;CACnC,OAAO,WAAW,MAAM,GAAG,EAAE,OAAO;AACtC;AAEA,SAAgB,8BAAkD;CAChE,MAAM,cAAc,QAAQ,IAAI,mCAAmC,KAAK,KACnE,QAAQ,IAAI,oBAAoB,KAAK;CAC1C,OAAO,cAAc,oBAAoB,aAAa,kBAAkB,IAAI,KAAA;AAC9E;AAEA,SAAgB,oBAAoB,OAAe,KAAqB;CACtE,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,GAAG,IAAI,mCAAmC;CAG5D,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,OAAO;CAC1B,QAAQ;EACN,MAAM,IAAI,MACR,GAAG,IAAI,8FACT;CACF;CAEA,IAAI,OAAO,YAAY,OAAO,UAC5B,MAAM,IAAI,MAAM,GAAG,IAAI,mCAAmC;CAE5D,IAAI,OAAO,UAAU,OAAO,MAC1B,MAAM,IAAI,MAAM,GAAG,IAAI,qDAAqD;CAE9E,IAAI,OAAO,aAAa,YAAY,OAAO,aAAa,SACtD,MAAM,IAAI,MAAM,GAAG,IAAI,sCAAsC;CAE/D,IAAI,OAAO,aAAa,WAAW,CAAC,eAAe,OAAO,QAAQ,GAChE,MAAM,IAAI,MACR,GAAG,IAAI,kGACT;CAGF,OAAO;AACT"}