@agent-custody/receipts 0.6.5 → 0.6.7

package/dist/log-admin.d.ts

@@ -36,7 +36,7 @@ export declare function welcomeSheet(o: {
  *   POST /admin/tenants/:id/tokens/:prefix/revoke { revoked }
  *   GET  /admin/usage?month=YYYY-MM              { month, tenants: [{ id, logId, appends, totalLeaves, liveTokens, disabled }] }
  *   GET  /admin/usage.csv?month=YYYY-MM          the same as CSV, for an invoice
- *   GET  /admin/registrations?month=YYYY-MM      { month, rows: [{ tenant, logId, plan, email, registeredAt, billing, appends, quota, totalLeaves, liveTokens, disabled }], totals }
+ *   GET  /admin/registrations?month=YYYY-MM      { month, rows: [{ tenant, logId, plan, email, name, company, role, phone, telegram, registeredAt, billing, appends, quota, totalLeaves, liveTokens, disabled }], totals }
  *   GET  /admin/registrations.csv?month=YYYY-MM  the same as CSV
  */
 /** One row per tenant: who registered it through the portal (null when it was onboarded by script), its plan and billing
@@ -56,6 +56,11 @@ export interface RegistrationRow {
     logId: string;
     plan: Plan;
     email: string | null;
+    name: string | null;
+    company: string | null;
+    role: string | null;
+    phone: string | null;
+    telegram: string | null;
     registeredAt: string | null;
     billing: string | null;
     appends: number;

package/dist/log-admin.js

@@ -57,7 +57,7 @@ export function welcomeSheet(o) {
  *   POST /admin/tenants/:id/tokens/:prefix/revoke { revoked }
  *   GET  /admin/usage?month=YYYY-MM              { month, tenants: [{ id, logId, appends, totalLeaves, liveTokens, disabled }] }
  *   GET  /admin/usage.csv?month=YYYY-MM          the same as CSV, for an invoice
- *   GET  /admin/registrations?month=YYYY-MM      { month, rows: [{ tenant, logId, plan, email, registeredAt, billing, appends, quota, totalLeaves, liveTokens, disabled }], totals }
+ *   GET  /admin/registrations?month=YYYY-MM      { month, rows: [{ tenant, logId, plan, email, name, company, role, phone, telegram, registeredAt, billing, appends, quota, totalLeaves, liveTokens, disabled }], totals }
  *   GET  /admin/registrations.csv?month=YYYY-MM  the same as CSV
  */
 /** One row per tenant: who registered it through the portal (null when it was onboarded by script), its plan and billing
@@ -70,7 +70,7 @@ export async function registrations(tenancy, portal, month) {
             who.set(r.tenantId, r);
     const rows = usage.tenants.map((t) => {
         const w = who.get(t.id);
-        return { tenant: t.id, logId: t.logId, plan: t.plan, email: w?.email ?? null, registeredAt: w?.registeredAt ?? null, billing: w?.billing ?? null, appends: t.appends, quota: t.quota, totalLeaves: t.totalLeaves, liveTokens: t.liveTokens, disabled: t.disabled };
+        return { tenant: t.id, logId: t.logId, plan: t.plan, email: w?.email ?? null, name: w?.name ?? null, company: w?.company ?? null, role: w?.role ?? null, phone: w?.phone ?? null, telegram: w?.telegram ?? null, registeredAt: w?.registeredAt ?? null, billing: w?.billing ?? null, appends: t.appends, quota: t.quota, totalLeaves: t.totalLeaves, liveTokens: t.liveTokens, disabled: t.disabled };
     });
     return { month: usage.month, rows, totals: { tenants: rows.length, registered: rows.filter((r) => r.email).length, appends: rows.reduce((n, r) => n + r.appends, 0), totalLeaves: rows.reduce((n, r) => n + r.totalLeaves, 0) } };
 }
@@ -140,7 +140,7 @@ export function adminRoutes(opts) {
             else if (req.method === "GET" && parts.length === 2 && parts[1] === "registrations.csv") {
                 const r = await registrations(t, opts.portal, month);
                 const cell = (v) => (v === null ? "" : /[",\n]/.test(String(v)) ? `"${String(v).replace(/"/g, '""')}"` : String(v));
-                const csv = ["month,tenant,log_id,plan,email,registered_at,billing,appends,quota,total_leaves,live_tokens,disabled", ...r.rows.map((x) => [r.month, x.tenant, x.logId, x.plan, x.email, x.registeredAt, x.billing, x.appends, x.quota, x.totalLeaves, x.liveTokens, x.disabled].map(cell).join(","))].join("\n") + "\n";
+                const csv = ["month,tenant,log_id,plan,email,name,company,role,phone,telegram,registered_at,billing,appends,quota,total_leaves,live_tokens,disabled", ...r.rows.map((x) => [r.month, x.tenant, x.logId, x.plan, x.email, x.name, x.company, x.role, x.phone, x.telegram, x.registeredAt, x.billing, x.appends, x.quota, x.totalLeaves, x.liveTokens, x.disabled].map(cell).join(","))].join("\n") + "\n";
                 res.writeHead(200, { "content-type": "text/csv; charset=utf-8", "content-disposition": `attachment; filename="agent-custody-registrations-${r.month}.csv"`, "cache-control": "no-store" });
                 res.end(csv);
             }
@@ -237,7 +237,7 @@ const ADMIN_PAGE = `<!doctype html>
     <h2>Registrations</h2>
     <div class="row"><label>month<input id="rmonth" type="month"></label><button class="quiet" id="loadRegs">Show</button><a id="rcsv" class="quiet" href="#" style="align-self:center">Download CSV</a></div>
     <div class="stats"><div class="stat"><b id="sTenants">–</b><span>tenants</span></div><div class="stat"><b id="sRegistered">–</b><span>registered through the portal</span></div><div class="stat"><b id="sAppends">–</b><span>appends this month</span></div><div class="stat"><b id="sLeaves">–</b><span>leaves in total</span></div></div>
-    <table><thead><tr><th>email</th><th>tenant</th><th>plan</th><th>registered</th><th>billing</th><th>appends this month</th><th>leaves in total</th><th>live tokens</th></tr></thead><tbody id="regs"></tbody></table>
+    <table><thead><tr><th>who</th><th>reach</th><th>tenant</th><th>plan</th><th>registered</th><th>billing</th><th>appends this month</th><th>leaves in total</th><th>live tokens</th></tr></thead><tbody id="regs"></tbody></table>
     <h2>Tenants</h2>
     <table><thead><tr><th>tenant</th><th>log id</th><th>plan</th><th>live tokens</th><th>created</th><th></th></tr></thead><tbody id="tenants"></tbody></table>
     <h2>New tenant</h2>
@@ -326,7 +326,9 @@ const ADMIN_PAGE = `<!doctype html>
     const r = await api("GET", "/admin/registrations?month=" + encodeURIComponent(month));
     $("rcsv").href = "/admin/registrations.csv?month=" + encodeURIComponent(month);
     $("sTenants").textContent = r.totals.tenants; $("sRegistered").textContent = r.totals.registered; $("sAppends").textContent = r.totals.appends; $("sLeaves").textContent = r.totals.totalLeaves;
-    $("regs").innerHTML = r.rows.map((x) => "<tr><td>" + (x.email ? esc(x.email) : "<span class=muted>onboarded by script</span>") + "</td><td><code>" + esc(x.tenant) + "</code>" + (x.disabled ? " <span class=muted>disabled</span>" : "") + "</td><td>" + esc(x.plan) + "</td><td>" + (x.registeredAt ? esc(x.registeredAt.slice(0, 10)) : "") + "</td><td>" + (x.billing ? esc(x.billing) : "<span class=muted>none</span>") + "</td><td>" + x.appends + (x.quota === null ? "" : " <span class=muted>/ " + x.quota + "</span>") + "</td><td>" + x.totalLeaves + "</td><td>" + x.liveTokens + "</td></tr>").join("") || "<tr><td colspan=8 class=muted>no tenants</td></tr>";
+    const who = (x) => x.email ? esc(x.name || "") + (x.company ? " <span class=muted>· " + esc(x.company) + (x.role ? ", " + esc(x.role) : "") + "</span>" : "") : "<span class=muted>onboarded by script</span>";
+    const reach = (x) => [x.email ? "<a href=\"mailto:" + esc(x.email) + "\">" + esc(x.email) + "</a>" : "", x.phone ? esc(x.phone) : "", x.telegram ? "telegram @" + esc(x.telegram) : ""].filter(Boolean).join("<br>");
+    $("regs").innerHTML = r.rows.map((x) => "<tr><td>" + who(x) + "</td><td>" + reach(x) + "</td><td><code>" + esc(x.tenant) + "</code>" + (x.disabled ? " <span class=muted>disabled</span>" : "") + "</td><td>" + esc(x.plan) + "</td><td>" + (x.registeredAt ? esc(x.registeredAt.slice(0, 10)) : "") + "</td><td>" + (x.billing ? esc(x.billing) : "<span class=muted>none</span>") + "</td><td>" + x.appends + (x.quota === null ? "" : " <span class=muted>/ " + x.quota + "</span>") + "</td><td>" + x.totalLeaves + "</td><td>" + x.liveTokens + "</td></tr>").join("") || "<tr><td colspan=9 class=muted>no tenants</td></tr>";
   };
   const loadAudit = async () => {
     const a = await api("GET", "/admin/audit?limit=100");

package/dist/portal.d.ts

@@ -33,6 +33,14 @@ export interface PortalUser {
     createdAt: string;
 }
 /** Users, memberships, and billing records, beside the log's tables. */
+/** What a registration says about the person and the organisation; every field optional in the store, the route decides what it requires. */
+export interface Profile {
+    name?: string | null;
+    company?: string | null;
+    role?: string | null;
+    phone?: string | null;
+    telegram?: string | null;
+}
 export declare class PortalStore {
     private readonly client;
     private readonly p;
@@ -41,7 +49,7 @@ export declare class PortalStore {
     private init;
     static hashPassword(password: string): string;
     static checkPassword(password: string, stored: string): boolean;
-    createUser(email: string, password: string): Promise<PortalUser>;
+    createUser(email: string, password: string, profile?: Profile): Promise<PortalUser>;
     authenticate(email: string, password: string): Promise<PortalUser | null>;
     user(id: string): Promise<PortalUser | null>;
     addMember(userId: string, tenantId: string): Promise<void>;
@@ -58,12 +66,12 @@ export declare class PortalStore {
         status: string;
     } | null>;
     /** Every portal registration with its tenant and billing state, oldest first: what the operator's admin page lists. */
-    registrations(): Promise<{
+    registrations(): Promise<({
         tenantId: string;
         email: string;
         registeredAt: string;
         billing: string | null;
-    }[]>;
+    } & Profile)[]>;
     tenantBySubscription(subscriptionId: string): Promise<string | null>;
 }
 export declare function signSession(secret: string, userId: string, ttlMs?: number): string;

package/dist/portal.js

@@ -19,7 +19,7 @@ const ident = (s) => {
         throw new Error(`prefix must be a plain identifier; got "${s}"`);
     return s;
 };
-/** Users, memberships, and billing records, beside the log's tables. */
+const PROFILE_COLUMNS = ["name", "company", "role", "phone", "telegram"];
 export class PortalStore {
     client;
     p;
@@ -36,6 +36,9 @@ export class PortalStore {
                 await this.client.query(`CREATE TABLE IF NOT EXISTS ${p}users (id TEXT PRIMARY KEY, email TEXT NOT NULL UNIQUE, password_hash TEXT NOT NULL, created_at TIMESTAMPTZ NOT NULL DEFAULT now())`);
                 await this.client.query(`CREATE TABLE IF NOT EXISTS ${p}members (user_id TEXT NOT NULL REFERENCES ${p}users(id), tenant_id TEXT NOT NULL, role TEXT NOT NULL DEFAULT 'owner', created_at TIMESTAMPTZ NOT NULL DEFAULT now(), PRIMARY KEY (user_id, tenant_id))`);
                 await this.client.query(`CREATE TABLE IF NOT EXISTS ${p}billing (tenant_id TEXT PRIMARY KEY, customer_id TEXT, subscription_id TEXT, status TEXT NOT NULL, updated_at TIMESTAMPTZ NOT NULL DEFAULT now())`);
+                // who the account belongs to: added after the first tenants registered, so the columns are optional
+                for (const c of PROFILE_COLUMNS)
+                    await this.client.query(`ALTER TABLE ${p}users ADD COLUMN IF NOT EXISTS ${c} TEXT`);
             })();
         }
         return this.ready;
@@ -52,10 +55,10 @@ export class PortalStore {
         const got = scryptSync(password, Buffer.from(saltHex, "hex"), expected.length);
         return got.length === expected.length && timingSafeEqual(got, expected);
     }
-    async createUser(email, password) {
+    async createUser(email, password, profile = {}) {
         await this.init();
         const id = randomUUID();
-        const rows = (await this.client.query(`INSERT INTO ${this.p}users (id, email, password_hash) VALUES ($1, $2, $3) ON CONFLICT (email) DO NOTHING RETURNING id, email, created_at`, [id, email, PortalStore.hashPassword(password)])).rows;
+        const rows = (await this.client.query(`INSERT INTO ${this.p}users (id, email, password_hash, name, company, role, phone, telegram) VALUES ($1, $2, $3, $4, $5, $6, $7, $8) ON CONFLICT (email) DO NOTHING RETURNING id, email, created_at`, [id, email, PortalStore.hashPassword(password), profile.name ?? null, profile.company ?? null, profile.role ?? null, profile.phone ?? null, profile.telegram ?? null])).rows;
         if (!rows[0])
             throw new Error("an account with this email already exists");
         return { id, email, createdAt: new Date(rows[0].created_at).toISOString() };
@@ -98,8 +101,9 @@ export class PortalStore {
     /** Every portal registration with its tenant and billing state, oldest first: what the operator's admin page lists. */
     async registrations() {
         await this.init();
-        const rows = (await this.client.query(`SELECT m.tenant_id, u.email, u.created_at, b.status FROM ${this.p}members m JOIN ${this.p}users u ON u.id = m.user_id LEFT JOIN ${this.p}billing b ON b.tenant_id = m.tenant_id ORDER BY u.created_at, m.tenant_id`)).rows;
-        return rows.map((r) => ({ tenantId: String(r.tenant_id), email: String(r.email), registeredAt: new Date(r.created_at).toISOString(), billing: r.status ? String(r.status) : null }));
+        const rows = (await this.client.query(`SELECT m.tenant_id, u.email, u.created_at, u.name, u.company, u.role, u.phone, u.telegram, b.status FROM ${this.p}members m JOIN ${this.p}users u ON u.id = m.user_id LEFT JOIN ${this.p}billing b ON b.tenant_id = m.tenant_id ORDER BY u.created_at, m.tenant_id`)).rows;
+        const str = (v) => (v == null ? null : String(v));
+        return rows.map((r) => ({ tenantId: String(r.tenant_id), email: String(r.email), registeredAt: new Date(r.created_at).toISOString(), billing: str(r.status), name: str(r.name), company: str(r.company), role: str(r.role), phone: str(r.phone), telegram: str(r.telegram) }));
     }
     async tenantBySubscription(subscriptionId) {
         await this.init();
@@ -200,7 +204,7 @@ export function portalHandler(o) {
                 return json(200, { ok: true, stripe: !!o.stripe });
             if (req.method === "GET" && url.pathname === "/") {
                 res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", "x-frame-options": "DENY", "content-security-policy": "default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; connect-src 'self'; form-action 'self'; base-uri 'none'" });
-                return void res.end(PORTAL_PAGE);
+                return void res.end(PORTAL_PAGE.replace("__LOG_BASE__", base.replace(/[&<>"]/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" })[c])));
             }
             // ---- Stripe's webhook: the only caller that is not a browser with a session ----
             if (req.method === "POST" && url.pathname === "/stripe/webhook") {
@@ -234,8 +238,6 @@ export function portalHandler(o) {
             }
             // ---- registration and login ----
             if (req.method === "POST" && url.pathname === "/api/register") {
-                if (!registrations.take(`reg:${addr}`))
-                    return json(429, { error: "too many registrations from this address; try again later" });
                 const b = await jsonBody();
                 const email = String(b.email ?? "").trim().toLowerCase();
                 const password = String(b.password ?? "");
@@ -246,11 +248,24 @@ export function portalHandler(o) {
                     return json(400, { error: "the password needs at least ten characters" });
                 if (!TENANT_ID.test(tenant) || RESERVED.has(tenant))
                     return json(400, { error: "the tenant id is the name in your log's URL: three to forty lowercase letters, digits, or hyphens, and not a reserved word" });
+                const text = (k, max) => String(b[k] ?? "").trim().slice(0, max);
+                const profile = { name: text("name", 120), company: text("company", 160), role: text("role", 120) || null, phone: text("phone", 40) || null, telegram: text("telegram", 40).replace(/^@/, "") || null };
+                if (!profile.name)
+                    return json(400, { error: "your name is needed, so we know who to write to" });
+                if (!profile.company)
+                    return json(400, { error: "the company or organisation the tenant is for is needed" });
+                if (profile.telegram && !/^[A-Za-z0-9_]{5,32}$/.test(profile.telegram))
+                    return json(400, { error: "a Telegram username is five to thirty-two letters, digits, or underscores, with or without the @" });
+                if (profile.phone && !/^[+0-9 ()./-]{6,40}$/.test(profile.phone))
+                    return json(400, { error: "a phone number is digits, with an optional + and spaces" });
                 if (await o.tenancy.tenant(tenant))
                     return json(409, { error: "that tenant id is taken" });
+                // throttled once the request is well formed: a mistyped form costs nothing, five real registrations from one address, then one every ten minutes
+                if (!registrations.take(`reg:${addr}`))
+                    return json(429, { error: "too many registrations from this address; try again later" });
                 let user;
                 try {
-                    user = await store.createUser(email, password);
+                    user = await store.createUser(email, password, profile);
                 }
                 catch (e) {
                     return json(409, { error: e instanceof Error ? e.message : String(e) });
@@ -399,6 +414,7 @@ const PORTAL_PAGE = `<!doctype html>
   .bar i { display: block; width: 70%; background: var(--accent); border-radius: 3px 3px 0 0; min-height: 2px; }
   .bar b { font-family: var(--mono); font-weight: 400; margin-top: .3rem; }
   label { display: grid; gap: .25rem; font-size: .85rem; color: var(--ink2); margin: 0 0 .8rem; }
+  label .opt { font-size: .72rem; text-transform: uppercase; letter-spacing: .06em; margin-left: .3rem; } label .hint { font-size: .8rem; line-height: 1.45; } label .hint code { font-family: var(--mono); font-size: .9em; }
   input, select { font: inherit; padding: .5rem .6rem; border: 1px solid var(--line); border-radius: 4px; background: var(--bg); color: var(--ink); }
   button { font: inherit; padding: .5rem .9rem; border-radius: 4px; border: 1px solid var(--accent); background: var(--accent); color: #fff; cursor: pointer; }
   button.quiet { background: transparent; color: var(--accent); }
@@ -415,9 +431,18 @@ const PORTAL_PAGE = `<!doctype html>
 <section id="auth" class="auth" hidden>
   <h1 id="authTitle">Sign in</h1>
   <form id="authForm">
-    <label>Email<input id="email" type="email" autocomplete="email" required></label>
+    <div id="regFields" hidden>
+      <label>Your name<input id="name" autocomplete="name" maxlength="120"></label>
+      <label>Company or organisation<input id="company" autocomplete="organization" maxlength="160"></label>
+      <label>Your role <span class="opt">optional</span><input id="role" autocomplete="organization-title" maxlength="120" placeholder="Head of Platform"></label>
+    </div>
+    <label>Work email<input id="email" type="email" autocomplete="email" required></label>
+    <div id="regFields2" hidden>
+      <label>Phone <span class="opt">optional</span><input id="phone" type="tel" autocomplete="tel" maxlength="40" placeholder="+44 20 …"></label>
+      <label>Telegram username <span class="opt">optional</span><input id="telegram" maxlength="40" placeholder="@yourname"><span class="hint">Your handle in Telegram, under Settings, if you would rather we reach you there than by email.</span></label>
+    </div>
     <label>Password<input id="password" type="password" autocomplete="current-password" minlength="10" required></label>
-    <label id="tenantField" hidden>Tenant id, the name in your log's URL<input id="tenant" placeholder="acme" pattern="[a-z0-9][a-z0-9-]{1,38}[a-z0-9]"></label>
+    <label id="tenantField" hidden>Tenant id<input id="tenant" placeholder="acme" pattern="[a-z0-9][a-z0-9-]{1,38}[a-z0-9]"><span class="hint">A short name for your organisation, filled in from the company name; change it if you like. It becomes the path of your log, which your gateway config and your auditors will use: <code id="tenantPreview">__LOG_BASE__t/&lt;tenant&gt;/</code></span></label>
     <button id="authGo" type="submit">Sign in</button>
     <p class="msg" id="authMsg"></p>
   </form>
@@ -452,6 +477,7 @@ const PORTAL_PAGE = `<!doctype html>
         <div class="card" id="cKeys"><div class="k">Live keys</div><div class="v" id="vKeys">–</div><div class="s" id="sKeys"></div></div>
         <div class="card" id="cCp"><div class="k">Latest checkpoint</div><div class="v" id="vCp">–</div><div class="s" id="sCp"></div></div>
       </div>
+      <p class="muted">Tree heads on this log are signed by our key; there is no second, independent witness yet. Every receipt you log here is checkable by anyone with your gateway's public key and ours: <a href="https://agent-custody.dev/receipts/#what-a-receipt-proves-and-what-it-does-not">what a receipt proves and what it does not</a>.</p>
       <h2>Your log</h2>
       <div class="panel"><table><tbody id="urls"></tbody></table></div>
       <h2>Recent activity</h2>
@@ -503,12 +529,18 @@ const PORTAL_PAGE = `<!doctype html>
     for (const a of document.querySelectorAll("nav a[data-view]")) a.classList.toggle("on", a.dataset.view === name);
     location.hash = name;
   };
-  $("authSwap").onclick = () => { registering = !registering; $("authTitle").textContent = registering ? "Create your tenant" : "Sign in"; $("authGo").textContent = registering ? "Create tenant" : "Sign in"; $("tenantField").hidden = !registering; $("tenant").required = registering; $("password").autocomplete = registering ? "new-password" : "current-password"; $("authSwap").textContent = registering ? "I already have an account" : "Create an account and a tenant instead"; };
+  const LOG_BASE = "__LOG_BASE__";
+  const slug = (s) => s.toLowerCase().normalize("NFKD").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40);
+  let tenantEdited = false;
+  const previewTenant = () => { $("tenantPreview").textContent = LOG_BASE + "t/" + ($("tenant").value || "<tenant>") + "/"; };
+  $("company").oninput = () => { if (!tenantEdited) { $("tenant").value = slug($("company").value); previewTenant(); } };
+  $("tenant").oninput = () => { tenantEdited = $("tenant").value !== ""; previewTenant(); };
+  $("authSwap").onclick = () => { registering = !registering; $("authTitle").textContent = registering ? "Create your tenant" : "Sign in"; $("authGo").textContent = registering ? "Create tenant" : "Sign in"; for (const id of ["regFields", "regFields2", "tenantField"]) $(id).hidden = !registering; for (const id of ["name", "company", "tenant"]) $(id).required = registering; $("password").autocomplete = registering ? "new-password" : "current-password"; $("authSwap").textContent = registering ? "I already have an account" : "Create an account and a tenant instead"; previewTenant(); };
   $("authForm").onsubmit = async (e) => {
     e.preventDefault(); $("authMsg").className = "msg"; $("authMsg").textContent = "";
     try {
       if (registering) {
-        const r = await api("POST", "/api/register", { email: $("email").value, password: $("password").value, tenant: $("tenant").value });
+        const r = await api("POST", "/api/register", { email: $("email").value, password: $("password").value, tenant: $("tenant").value, name: $("name").value, company: $("company").value, role: $("role").value, phone: $("phone").value, telegram: $("telegram").value });
         $("firstToken").textContent = r.token; $("firstSheet").textContent = r.welcome; show("welcome");
       } else { await api("POST", "/api/login", { email: $("email").value, password: $("password").value }); await enter(); }
     } catch (err) { $("authMsg").className = "msg err"; $("authMsg").textContent = err.message; }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-custody/receipts",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "description": "Chain of custody for AI agents: signed, independently verifiable receipts for tool calls. MCP gateway + Cedar policy + Merkle transparency log",
   "license": "Apache-2.0",
   "repository": {