solariview

v0.2.2

Published

a month ago

On-chain clarity, local-first. Multi-chain portfolio aggregator for the sovereign developer.

0High
0Medium
0Low

solari-dawn

ethereum evm blockchain portfolio cli web3 multichain nft defi privacy

SolariView

On-chain clarity, local-first security.

SolariView aggregates your multi-chain digital footprint — portfolios, NFT holdings, and on-chain activity — directly from public RPC nodes into your terminal or browser. No third-party APIs. No telemetry. No data leaks.

Features

Zero-Telemetry — No tracking, no remote logging, no analytics.
Multi-Chain — Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain out of the box.
JSON-first CLI — Pipe --json output directly into jq, scripts, or other tools.
Web UI — Optional local web interface on 127.0.0.1 for non-CLI users.
Library API — Import individual read functions into your own Node.js project.
Custom RPCs — Override per-session with --rpc <url> or permanently via SOLARIVIEW_RPC_<CHAIN_ID>.
Configurable timeout — Adjust the RPC deadline per command with --timeout <ms>.

Requirements

Node.js ≥ 18

Installation

Global (CLI)

npm install -g solariview

Local (library / project)

npm install solariview

From source

git clone https://github.com/SolariView/SolariView.git
cd SolariView
npm install

CLI Usage

`balance` — native token balances across chains

solariview balance --address 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045

Native balances for 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045

┌───────────────┬────────┬──────────────┬──────────────────────────────────────────────────────────────────┐
│ Chain         │ Symbol │      Balance │ Explorer                                                         │
├───────────────┼────────┼──────────────┼──────────────────────────────────────────────────────────────────┤
│ Ethereum      │ ETH    │    1.823041  │ https://etherscan.io/address/0xd8dA6BF…                          │
│ Arbitrum One  │ ETH    │    0.041200  │ https://arbiscan.io/address/0xd8dA6BF…                           │
│ Base          │ ETH    │    0.005000  │ https://basescan.org/address/0xd8dA6BF…                          │
│ Optimism      │ ETH    │    0.000000  │ https://optimistic.etherscan.io/address/0xd8dA6BF…               │
│ Polygon       │ POL    │  120.000000  │ https://polygonscan.com/address/0xd8dA6BF…                       │
│ BNB Chain     │ BNB    │    0.000000  │ https://bscscan.com/address/0xd8dA6BF…                           │
└───────────────┴────────┴──────────────┴──────────────────────────────────────────────────────────────────┘

Query a subset of chains:

solariview balance --address 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 --chain base,arbitrum

JSON output (pipe-friendly):

solariview balance --address 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 --json | jq '.balances[].formatted'

"1.823041"
"0.0412"
"0.005"

`token` — ERC-20 token balance

# USDC on Ethereum
solariview token \
  --address 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 \
  --token 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 \
  --chain ethereum

Token balance on Ethereum

  Token:    USD Coin (USDC)
  Contract: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48
  Balance:  5420.000000 USDC

`nft` — ERC-721 collection balance

# Bored Ape Yacht Club
solariview nft \
  --address 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 \
  --contract 0xBC4CA0EdA7647A8aB7C2061c2E118A18a936f13D \
  --chain ethereum

NFT holdings on Ethereum

  Collection: BoredApeYachtClub (BAYC)
  Contract:   0xBC4CA0EdA7647A8aB7C2061c2E118A18a936f13D
  Owned:      2 token(s)

`activity` — transaction count per chain

solariview activity --address 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045

Transaction counts for 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045

┌───────────────┬──────────┐
│ Chain         │ Tx Count │
├───────────────┼──────────┤
│ Ethereum      │      487 │
│ Arbitrum One  │       23 │
│ Base          │        8 │
│ Optimism      │        2 │
│ Polygon       │       14 │
│ BNB Chain     │        0 │
└───────────────┴──────────┘

`status` — RPC connectivity check

solariview status

RPC Status

┌───────────────┬──────────┬──────────────┐
│ Chain         │ Chain ID │ Latest Block │
├───────────────┼──────────┼──────────────┤
│ Ethereum      │        1 │   19,845,221 │
│ Arbitrum One  │    42161 │  215,003,442 │
│ Base          │     8453 │   13,201,009 │
│ Optimism      │       10 │  119,420,800 │
│ Polygon       │      137 │   56,221,001 │
│ BNB Chain     │       56 │   38,114,500 │
└───────────────┴──────────┴──────────────┘

Web UI

Launch a local web interface (no external traffic, binds to 127.0.0.1 only):

solariview-web
# or from source:
node web/server.js

Then open http://127.0.0.1:3131 in your browser. The same queries available in the CLI are accessible via a clean dashboard — useful for non-CLI users or quick visual lookups.

The web server also exposes a JSON REST API:

| Endpoint | Query params | |---|---| | GET /api/balance | address, chain | | GET /api/token | address, token, chain | | GET /api/nft | address, contract, chain | | GET /api/activity | address, chain | | GET /api/status | chain |

Library API

import {
  getMultiChainNativeBalances,
  getTokenBalance,
  getNFTBalance,
  getTxCount,
  getBlockNumber,
  withRetry,
  resolveChains,
} from "solariview";

// Native balances across multiple chains
const chains = resolveChains("ethereum,base");
const { results, errors } = await getMultiChainNativeBalances(
  "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045",
  chains
);
console.log(results);

// Transaction count — proxy for on-chain activity level
const [ethereum] = resolveChains("ethereum");
const { chain, chainId, txCount } = await getTxCount(
  "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045",
  ethereum
);
console.log(`${chain} (${chainId}): ${txCount} transactions`);

Custom RPC Endpoints

Per-invocation (takes precedence over env vars):

solariview balance --address 0x... --chain ethereum --rpc https://eth-mainnet.g.alchemy.com/v2/YOUR_KEY

Persistent override via environment variable:

SOLARIVIEW_RPC_1=https://eth-mainnet.g.alchemy.com/v2/YOUR_KEY \
SOLARIVIEW_RPC_8453=https://base-mainnet.g.alchemy.com/v2/YOUR_KEY \
solariview balance --address 0x...

The env variable pattern is SOLARIVIEW_RPC_<CHAIN_ID>.

Timeout

The default RPC timeout is 12 seconds. Override it per command:

# Useful over slow VPNs or when querying non-standard nodes
solariview balance --address 0x... --timeout 30000

Supported Chains

| Name | Chain ID | Alias | |---|---|---| | Ethereum | 1 | eth, ethereum | | Arbitrum One | 42161 | arb, arbitrum | | Optimism | 10 | op, optimism | | Base | 8453 | base | | Polygon | 137 | matic, polygon | | BNB Chain | 56 | bnb, bsc |

Roadmap

SolariView is the foundation of a broader privacy-first portfolio intelligence platform.

v0.3 — Depth

ENS / Unstoppable Domains resolution — query by name, not just address
ERC-20 portfolio aggregation — total value across all tokens and chains
Token price integration via on-chain oracles (no third-party price APIs)
Historical transaction summary per chain

v0.4 — Hardware & Security

Ledger and Trezor read support — query directly from connected hardware wallet
Watch-only address book — label and monitor multiple wallets locally
Encrypted local config store — persist RPC overrides and labels without plaintext secrets

v0.5 — Platform

Self-hosted web dashboard — full portfolio view, exportable as static HTML
CSV / JSON export for tax reporting
REST API authentication layer for team/shared deployments
Docker image for server deployments

v1.0 — Sovereign Infrastructure

Plugin architecture — extend with custom chain adapters and data sources
Multi-signature wallet support
Automated alerting — threshold triggers without cloud dependency
Enterprise deployment guide

The architecture decisions made in v0.2 — zero external API dependencies, library-first design, RPC abstraction — are deliberate foundations for this roadmap, not accidental constraints.

Security Model

SolariView is a read-only, local-first tool. No private keys are ever accepted or stored.

What is validated

Wallet and contract addresses — rejected before any RPC call if not a valid EVM address.
--timeout — must be a positive integer; non-numeric or zero values exit immediately.
--rpc URL scheme — must be http:// or https://; all other schemes (e.g. file://, ftp://) are rejected.
Web server inputs — the local web UI accepts only GET requests, rejects URLs longer than 512 characters, and validates required query parameters before reaching any reader logic.

Default RPC endpoints

Out of the box, SolariView connects to the following public nodes. No account or API key is required. All requests are read-only JSON-RPC calls (eth_getBalance, eth_call, etc.) and contain no identifying information beyond the queried address.

| Chain | Default RPC | Operator | |-------|-------------|----------| | Ethereum | https://eth.llamarpc.com | LlamaNodes | | Arbitrum One | https://arb1.arbitrum.io/rpc | Offchain Labs | | Optimism | https://mainnet.optimism.io | OP Labs | | Base | https://mainnet.base.org | Coinbase | | Polygon | https://polygon-bor-rpc.publicnode.com | PublicNode | | BNB Chain | https://bsc-dataseed.binance.org | Binance |

Any endpoint can be replaced without code changes — see Custom RPC Endpoints.

Known scope limitation — `--rpc` host validation

--rpc validates the URL scheme but does not block private or link-local hostnames. The following URLs will pass the scheme check:

http://169.254.169.254/  # AWS EC2 instance metadata
http://metadata.google.internal/  # GCP instance metadata
http://192.168.x.x/  # RFC-1918 private range
http://127.0.0.1/  # loopback

Impact: The web server does not expose --rpc as an HTTP parameter, so there is no SSRF risk in the server path. The risk is limited to CLI invocations where --rpc is sourced from untrusted input (e.g. a shell wrapper or CI pipeline that passes user-controlled config). In that context a malicious value could cause the CLI process to make an outbound HTTP request to an internal address.

Mitigation: If you wrap SolariView in a script that passes user-provided --rpc values, validate the hostname before invocation. A future release will add host-range validation inside validateRpcUrl.

Philosophy

Watching your assets shouldn't mean being watched. SolariView reads directly from public RPC endpoints — no account required, no API keys by default, no usage logs sent anywhere.

SolariView displays on-chain data for informational purposes only. Nothing in this software constitutes financial advice.

License

Distributed under the MIT License. See LICENSE for details.