protect-mcp 0.7.2 → 0.7.4

package/dist/index.mjs

@@ -1,12 +1,32 @@
+import {
+  collectSignedReceipts,
+  createAuditBundle
+} from "./chunk-PM2ZO57M.mjs";
+import {
+  createSelectiveDisclosurePackage,
+  discloseField,
+  signCommittedDecision,
+  verifySelectiveDisclosurePackage
+} from "./chunk-F2FKQ4XN.mjs";
 import {
   formatReportMarkdown,
   generateReport
 } from "./chunk-JQDVKZBN.mjs";
 import {
+  CONNECTOR_PILOTS,
+  POLICY_PACKS,
+  connectorDirectory,
+  connectorDoctor,
+  connectorPilotIds,
   formatSimulation,
+  getConnectorPilot,
+  getPolicyPack,
   parseLogFile,
-  simulate
-} from "./chunk-ZBKJANP7.mjs";
+  policyPackIds,
+  readInstalledConnectorPilots,
+  simulate,
+  writeConnectorPilots
+} from "./chunk-36UID5WY.mjs";
 import {
   ProtectGateway,
   buildDecisionContext,
@@ -18,10 +38,10 @@ import {
   resolveCredential,
   sendApprovalNotification,
   validateCredentials
-} from "./chunk-OHUTUFTC.mjs";
+} from "./chunk-UBZJ3VI2.mjs";
 import {
   createSandboxServer
-} from "./chunk-J6L4XCTE.mjs";
+} from "./chunk-KPSICBAJ.mjs";
 import {
   BUILTIN_PATTERNS,
   generateHookSettings,
@@ -33,7 +53,7 @@ import {
   forwardReceipt,
   getScopeBlindBridge,
   startHookServer
-} from "./chunk-X63ELMU4.mjs";
+} from "./chunk-NVJHGXXG.mjs";
 import {
   checkRateLimit,
   evaluateCedar,
@@ -48,244 +68,11 @@ import {
   policySetFromSource,
   runEvaluatorSelfTest,
   signDecision
-} from "./chunk-546U3A7R.mjs";
-import {
-  ed25519,
-  sha256
-} from "./chunk-LYKNULYU.mjs";
-import {
-  bytesToHex,
-  hexToBytes,
-  randomBytes
-} from "./chunk-D733KAPG.mjs";
-import {
-  collectSignedReceipts,
-  createAuditBundle
-} from "./chunk-5JXFV37Y.mjs";
+} from "./chunk-D2RDY2JR.mjs";
+import "./chunk-LYKNULYU.mjs";
+import "./chunk-D733KAPG.mjs";
 import "./chunk-PQJP2ZCI.mjs";
 
-// node_modules/@noble/hashes/esm/sha256.js
-var sha2562 = sha256;
-
-// src/commitments/merkle.ts
-var DOMAIN_LEAF = 0;
-var DOMAIN_INTERNAL = 1;
-function hashLeaf(leafBytes) {
-  const buf = new Uint8Array(leafBytes.length + 1);
-  buf[0] = DOMAIN_LEAF;
-  buf.set(leafBytes, 1);
-  return sha2562(buf);
-}
-function hashInternal(left, right) {
-  const buf = new Uint8Array(left.length + right.length + 1);
-  buf[0] = DOMAIN_INTERNAL;
-  buf.set(left, 1);
-  buf.set(right, 1 + left.length);
-  return sha2562(buf);
-}
-function merkleRoot(leafHashes) {
-  if (leafHashes.length === 0) {
-    throw new Error("merkleRoot: cannot compute root of empty leaf set");
-  }
-  if (leafHashes.length === 1) {
-    return leafHashes[0];
-  }
-  const n = leafHashes.length;
-  const k = largestPowerOfTwoLessThan(n);
-  const left = merkleRoot(leafHashes.slice(0, k));
-  const right = merkleRoot(leafHashes.slice(k));
-  return hashInternal(left, right);
-}
-function generateProof(leafHashes, index) {
-  if (leafHashes.length === 0) {
-    throw new Error("generateProof: empty tree");
-  }
-  if (index < 0 || index >= leafHashes.length) {
-    throw new Error(
-      `generateProof: index ${index} out of range [0, ${leafHashes.length})`
-    );
-  }
-  const siblings = [];
-  collectPath(leafHashes, index, siblings);
-  return {
-    index,
-    treeSize: leafHashes.length,
-    siblings: siblings.map((s) => bytesToHex(s))
-  };
-}
-function collectPath(leaves, index, out) {
-  if (leaves.length === 1) return;
-  const n = leaves.length;
-  const k = largestPowerOfTwoLessThan(n);
-  if (index < k) {
-    collectPath(leaves.slice(0, k), index, out);
-    out.push(merkleRoot(leaves.slice(k)));
-  } else {
-    collectPath(leaves.slice(k), index - k, out);
-    out.push(merkleRoot(leaves.slice(0, k)));
-  }
-}
-function largestPowerOfTwoLessThan(n) {
-  if (n < 2) {
-    throw new Error(`largestPowerOfTwoLessThan: n must be >= 2 (got ${n})`);
-  }
-  let k = 1;
-  while (k * 2 < n) k *= 2;
-  return k;
-}
-
-// src/commitments/primitives.ts
-function jcs(value) {
-  if (value === null || value === void 0) return "null";
-  if (typeof value === "boolean" || typeof value === "number")
-    return JSON.stringify(value);
-  if (typeof value === "string") return JSON.stringify(value);
-  if (Array.isArray(value))
-    return "[" + value.map(jcs).join(",") + "]";
-  const obj = value;
-  const keys = Object.keys(obj).sort();
-  return "{" + keys.map((k) => JSON.stringify(k) + ":" + jcs(obj[k])).join(",") + "}";
-}
-
-// src/commitments/leaf.ts
-function base64urlNoPad(bytes) {
-  const std = typeof Buffer !== "undefined" ? Buffer.from(bytes).toString("base64") : btoa(String.fromCharCode(...bytes));
-  return std.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-function encodeLeaf(field) {
-  const obj = {
-    name: field.name,
-    salt: base64urlNoPad(field.salt),
-    value: field.value
-  };
-  const canonical = jcs(obj);
-  return new TextEncoder().encode(canonical);
-}
-function sortFields(fields) {
-  const encoder = new TextEncoder();
-  const decorated = fields.map((f) => ({
-    field: f,
-    nameBytes: encoder.encode(f.name)
-  }));
-  decorated.sort((a, b) => compareBytes(a.nameBytes, b.nameBytes));
-  return decorated.map((d) => d.field);
-}
-function compareBytes(a, b) {
-  const len = Math.min(a.length, b.length);
-  for (let i = 0; i < len; i++) {
-    if (a[i] !== b[i]) return a[i] - b[i];
-  }
-  return a.length - b.length;
-}
-function leavesFromFields(fields) {
-  const sorted = sortFields(fields);
-  const leafBytes = sorted.map(encodeLeaf);
-  return { sorted, leafBytes };
-}
-
-// src/signing-committed.ts
-function freshSalt() {
-  return randomBytes(32);
-}
-function signCommittedDecision(entry, committedFieldNames, signingKey, publicKey, kid, issuer) {
-  const allFields = {
-    tool: entry.tool,
-    decision: entry.decision,
-    reason_code: entry.reason_code,
-    policy_digest: entry.policy_digest,
-    scope: entry.request_id,
-    mode: entry.mode,
-    request_id: entry.request_id
-  };
-  if (entry.tier) allFields.tier = entry.tier;
-  if (entry.credential_ref) allFields.credential_ref = entry.credential_ref;
-  if (entry.rate_limit_remaining !== void 0) {
-    allFields.rate_limit_remaining = entry.rate_limit_remaining;
-  }
-  if (entry.policy_engine) allFields.policy_engine = entry.policy_engine;
-  if (entry.hook_event) allFields.hook_event = entry.hook_event;
-  if (entry.sandbox_state) allFields.sandbox_state = entry.sandbox_state;
-  if (entry.timing) allFields.timing = entry.timing;
-  if (entry.swarm) allFields.swarm = entry.swarm;
-  if (entry.payload_digest) allFields.payload_digest = entry.payload_digest;
-  if (entry.deny_iteration) allFields.deny_iteration = entry.deny_iteration;
-  const committedFields = [];
-  const cleartextFields = {};
-  const openings = {};
-  for (const [name, value] of Object.entries(allFields)) {
-    if (committedFieldNames.includes(name)) {
-      const salt = freshSalt();
-      committedFields.push({ name, salt, value });
-    } else {
-      cleartextFields[name] = value;
-    }
-  }
-  let committedFieldsRoot = null;
-  if (committedFields.length > 0) {
-    const { sorted, leafBytes } = leavesFromFields(committedFields);
-    const leafHashes = leafBytes.map(hashLeaf);
-    const root = merkleRoot(leafHashes);
-    committedFieldsRoot = bytesToHex(root);
-    sorted.forEach((f, i) => {
-      openings[f.name] = { name: f.name, value: f.value, salt: f.salt, index: i };
-    });
-  }
-  const payload = {
-    type: "scopeblind.receipt.committed.v1",
-    spec: "draft-farley-acta-signed-receipts-01",
-    issuer_certification: "self-signed",
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    ...cleartextFields
-  };
-  if (committedFieldsRoot !== null) {
-    payload.committed_fields_root = committedFieldsRoot;
-    payload.committed_field_names = committedFields.map((f) => f.name);
-  }
-  const canonical = jcs(payload);
-  const messageHash = sha2562(new TextEncoder().encode(canonical));
-  const signatureBytes = ed25519.sign(messageHash, hexToBytes(signingKey));
-  const signedReceipt = {
-    ...payload,
-    signature: {
-      alg: "EdDSA",
-      kid,
-      issuer,
-      sig: base64urlNoPad(signatureBytes),
-      public_key: publicKey
-      // hex
-    }
-  };
-  const signedJson = JSON.stringify(signedReceipt);
-  const receiptHash = bytesToHex(sha2562(new TextEncoder().encode(jcs(signedReceipt))));
-  return {
-    signed: signedJson,
-    artifact_type: "decision_receipt_committed_v1",
-    openings,
-    receipt_hash: receiptHash
-  };
-}
-function discloseField(receiptHash, fieldName, openings) {
-  const o = openings[fieldName];
-  if (!o) {
-    throw new Error(`disclose: no opening recorded for field "${fieldName}"`);
-  }
-  const fields = Object.values(openings).map((op) => ({
-    name: op.name,
-    salt: op.salt,
-    value: op.value
-  }));
-  const { leafBytes } = leavesFromFields(fields);
-  const leafHashes = leafBytes.map(hashLeaf);
-  const proof = generateProof(leafHashes, o.index);
-  return {
-    parent_receipt_hash: receiptHash,
-    name: fieldName,
-    value: o.value,
-    salt: base64urlNoPad(o.salt),
-    proof
-  };
-}
-
 // src/manifest.ts
 function isAgentId(s) {
   return /^sb:agent:[a-f0-9]{32}$/.test(s);
@@ -791,7 +578,7 @@ function createLogAnchorField(anchor) {
 }
 
 // src/selective-disclosure.ts
-import { createHash as createHash2, randomBytes as randomBytes2 } from "crypto";
+import { createHash as createHash2, randomBytes } from "crypto";
 function redactFields(receipt, fieldsToRedact) {
   const redacted = JSON.parse(JSON.stringify(receipt));
   const salts = [];
@@ -807,7 +594,7 @@ function redactFields(receipt, fieldsToRedact) {
       if (i === parts.length - 1) {
         if (key in current) {
           const originalValue = current[key];
-          const salt = randomBytes2(16).toString("hex");
+          const salt = randomBytes(16).toString("hex");
           const commitment = computeCommitment(salt, originalValue);
           salts.push({ field: fieldPath, salt, originalValue });
           current[key] = `sha256(salt + ${typeof originalValue === "string" ? "..." : JSON.stringify(originalValue).slice(0, 20) + "..."})`;
@@ -1024,9 +811,9 @@ MIT
 }
 
 // src/webauthn-approval.ts
-import { createHash as createHash3, randomBytes as randomBytes3 } from "crypto";
+import { createHash as createHash3, randomBytes as randomBytes2 } from "crypto";
 function createApprovalChallenge(requestId, toolName, agentId, rpId = "scopeblind.com", timeoutSeconds = 300) {
-  const challengeBytes = randomBytes3(32);
+  const challengeBytes = randomBytes2(32);
   const contextHash = createHash3("sha256").update(JSON.stringify({ requestId, toolName, agentId, timestamp: Date.now() })).digest("hex");
   return {
     challenge: base64urlEncode(challengeBytes),
@@ -1475,7 +1262,7 @@ function createC2PAManifest(receipts, options) {
   const receiptHashes = receipts.map(
     (r) => createHash5("sha256").update(JSON.stringify(r)).digest("hex")
   );
-  const merkleRoot2 = computeMerkleRoot(receiptHashes);
+  const merkleRoot = computeMerkleRoot(receiptHashes);
   const assertions = [
     // Acta decision provenance — the core assertion
     {
@@ -1488,7 +1275,7 @@ function createC2PAManifest(receipts, options) {
         decision_count: decisions.length,
         allows: allows.length,
         denies: denies.length,
-        merkle_root: merkleRoot2,
+        merkle_root: merkleRoot,
         signing_algorithm: "Ed25519",
         canonicalization: "JCS (RFC 8785)",
         verifier: "npx @veritasacta/verify",
@@ -1544,7 +1331,7 @@ function createC2PAManifest(receipts, options) {
       label: "acta.receipt-chain",
       data: {
         receipt_hashes: receiptHashes,
-        merkle_root: merkleRoot2,
+        merkle_root: merkleRoot,
         note: "Full receipts available via verify URL. Hashes provided for integrity verification."
       },
       is_hash: true
@@ -1936,7 +1723,9 @@ async function confidentialInference(_prompt, _config) {
 }
 export {
   BUILTIN_PATTERNS,
+  CONNECTOR_PILOTS,
   ConfidentialGate,
+  POLICY_PACKS,
   ProtectGateway,
   ReceiptPropagator,
   ScopeBlindBridge,
@@ -1946,6 +1735,9 @@ export {
   collectSignedReceipts,
   computeCalibration,
   confidentialInference,
+  connectorDirectory,
+  connectorDoctor,
+  connectorPilotIds,
   createApprovalChallenge,
   createApprovalReceiptPayload,
   createAttestationField,
@@ -1957,6 +1749,7 @@ export {
   createReceiptChannel,
   createSandbox,
   createSandboxServer,
+  createSelectiveDisclosurePackage,
   destroySandbox,
   discloseField,
   ed25519ToDIDKey,
@@ -1977,6 +1770,8 @@ export {
   generateSampleCedarPolicy,
   generateSchemaStub,
   generateVerifyReceiptSkill,
+  getConnectorPilot,
+  getPolicyPack,
   getScopeBlindBridge,
   getSignerInfo,
   getToolPolicy,
@@ -1997,8 +1792,10 @@ export {
   parseLogFile,
   parseNotificationConfigFromEnv,
   parseRateLimit,
+  policyPackIds,
   policySetFromSource,
   queryExternalPDP,
+  readInstalledConnectorPilots,
   receiptToVP,
   receiptsToHFRows,
   redactFields,
@@ -2022,5 +1819,7 @@ export {
   verifyApprovalAssertion,
   verifyCommitment,
   verifyEvidenceAttestation,
-  verifyRekorAnchor
+  verifyRekorAnchor,
+  verifySelectiveDisclosurePackage,
+  writeConnectorPilots
 };

package/dist/receipt-registry-6CAOY6RP.mjs

@@ -0,0 +1,279 @@
+import "./chunk-PQJP2ZCI.mjs";
+
+// src/receipt-registry.ts
+import { createHash, randomUUID } from "crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { dirname, join } from "path";
+var ORG_IDENTITY_FILE = ".protect-mcp-org.json";
+var REGISTRY_FILE = ".protect-mcp-registry.json";
+var VERIFIER_PAGE_FILE = "scopeblind-verifier.html";
+function sha256Hex(input) {
+  return createHash("sha256").update(input).digest("hex");
+}
+function stableStringify(value) {
+  if (value === null || typeof value !== "object") return JSON.stringify(value);
+  if (Array.isArray(value)) return `[${value.map(stableStringify).join(",")}]`;
+  const obj = value;
+  return `{${Object.keys(obj).sort().map((key) => `${JSON.stringify(key)}:${stableStringify(obj[key])}`).join(",")}}`;
+}
+function safeReadJson(path) {
+  try {
+    if (!existsSync(path)) return null;
+    return JSON.parse(readFileSync(path, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function requestIdFromReceipt(receipt) {
+  const direct = receipt.request_id || receipt.scope;
+  if (typeof direct === "string") return direct;
+  const payload = receipt.payload;
+  if (payload && typeof payload === "object") {
+    const candidate = payload.request_id || payload.scope;
+    if (typeof candidate === "string") return candidate;
+  }
+  return void 0;
+}
+function keyIdFromReceipt(receipt) {
+  const kid = receipt.kid;
+  if (typeof kid === "string") return kid;
+  const signature = receipt.signature;
+  if (signature && typeof signature === "object") {
+    const nested = signature.kid;
+    if (typeof nested === "string") return nested;
+  }
+  return void 0;
+}
+function issuerFromReceipt(receipt) {
+  const issuer = receipt.issuer;
+  if (typeof issuer === "string") return issuer;
+  const signature = receipt.signature;
+  if (signature && typeof signature === "object") {
+    const nested = signature.issuer;
+    if (typeof nested === "string") return nested;
+  }
+  return void 0;
+}
+function receiptType(receipt) {
+  return String(receipt.type || receipt.artifact_type || receipt.v || "receipt");
+}
+function readReceiptDigestRecords(dir) {
+  const receiptPath = join(dir, ".protect-mcp-receipts.jsonl");
+  if (!existsSync(receiptPath)) return [];
+  const raw = readFileSync(receiptPath, "utf-8");
+  return raw.split("\n").map((line) => line.trim()).filter(Boolean).flatMap((line) => {
+    try {
+      const receipt = JSON.parse(line);
+      const publicKey = (() => {
+        const sig = receipt.signature;
+        if (sig && typeof sig === "object" && typeof sig.public_key === "string") {
+          return String(sig.public_key);
+        }
+        return void 0;
+      })();
+      return [{
+        type: "scopeblind.receipt_digest.v1",
+        receipt_hash: sha256Hex(line),
+        receipt_bytes: Buffer.byteLength(line, "utf-8"),
+        receipt_type: receiptType(receipt),
+        request_id: requestIdFromReceipt(receipt),
+        local_issuer: issuerFromReceipt(receipt),
+        local_kid: keyIdFromReceipt(receipt),
+        local_public_key_hint: publicKey ? `${publicKey.slice(0, 12)}...${publicKey.slice(-8)}` : void 0,
+        observed_at: (/* @__PURE__ */ new Date()).toISOString(),
+        source_file: receiptPath
+      }];
+    } catch {
+      return [];
+    }
+  });
+}
+function createOrgIdentity(opts) {
+  const now = (opts.now || /* @__PURE__ */ new Date()).toISOString();
+  const existing = safeReadJson(join(opts.dir, ORG_IDENTITY_FILE));
+  const keyData = safeReadJson(join(opts.dir, "keys", "gateway.json")) || {};
+  const orgId = opts.orgId || String(existing?.org_id || `org_${randomUUID().slice(0, 12)}`);
+  const orgName = opts.orgName || String(existing?.org_name || "Local ScopeBlind Org");
+  const billingAccountId = opts.billingAccountId || String(existing?.billing_account_id || `billing_${orgId}`);
+  const publicKey = typeof keyData.publicKey === "string" ? keyData.publicKey : "";
+  const kid = typeof keyData.kid === "string" ? keyData.kid : publicKey ? `kid_${publicKey.slice(0, 12)}` : "local-key";
+  const issuer = typeof keyData.issuer === "string" ? keyData.issuer : "protect-mcp";
+  return {
+    type: "scopeblind.org_identity.v1",
+    org_id: orgId,
+    org_name: orgName,
+    billing_account_id: billingAccountId,
+    created_at: typeof existing?.created_at === "string" ? existing.created_at : now,
+    public_key_directory: publicKey ? [{
+      type: "scopeblind.org_public_key.v1",
+      org_id: orgId,
+      key_id: kid,
+      issuer,
+      algorithm: "Ed25519",
+      public_key_hex: publicKey,
+      created_at: now,
+      source: "local_gateway_key"
+    }] : [],
+    privacy: {
+      raw_prompt_upload: false,
+      raw_tool_payload_upload: false,
+      raw_receipt_upload: false,
+      digest_only: true
+    }
+  };
+}
+function writeOrgIdentity(dir, identity) {
+  const path = join(dir, ORG_IDENTITY_FILE);
+  writeFileSync(path, JSON.stringify(identity, null, 2) + "\n");
+  return path;
+}
+function localAnchors(records, org, now, verifierBaseUrl) {
+  return records.map((record) => ({
+    type: "scopeblind.timestamp_anchor.v1",
+    anchor_id: `local_${record.receipt_hash.slice(0, 16)}`,
+    receipt_hash: record.receipt_hash,
+    org_id: org.org_id,
+    timestamp_utc: now.toISOString(),
+    timestamp_source: "local-preview-not-independent",
+    verifier_url: verifierBaseUrl ? `${verifierBaseUrl.replace(/\/$/, "")}/verify?digest=${record.receipt_hash}` : void 0
+  }));
+}
+async function hostedAnchors(opts) {
+  const endpoint = opts.endpoint.replace(/\/$/, "") + "/v1/receipt-registry/anchor";
+  const payload = {
+    type: "scopeblind.receipt_registry_anchor_request.v1",
+    org: {
+      org_id: opts.org.org_id,
+      org_name: opts.org.org_name,
+      billing_account_id: opts.org.billing_account_id,
+      public_key_directory: opts.org.public_key_directory
+    },
+    privacy: opts.org.privacy,
+    billing: {
+      metered_unit: "receipt_digest_anchor",
+      count: opts.records.length,
+      raw_prompt_upload: false,
+      raw_data_upload: false
+    },
+    receipt_digests: opts.records.map((record) => ({
+      receipt_hash: record.receipt_hash,
+      receipt_bytes: record.receipt_bytes,
+      receipt_type: record.receipt_type,
+      request_id: record.request_id,
+      local_issuer: record.local_issuer,
+      local_kid: record.local_kid
+    }))
+  };
+  const bodyText = stableStringify(payload);
+  for (const forbidden of ["payload_preview", "raw_receipt", "prompt", "tool_output", "privateKey"]) {
+    if (bodyText.includes(`${JSON.stringify(forbidden)}:`)) throw new Error(`hosted anchor payload contains forbidden field: ${forbidden}`);
+  }
+  const res = await fetch(endpoint, {
+    method: "POST",
+    headers: {
+      "content-type": "application/json",
+      authorization: `Bearer ${opts.token}`,
+      "user-agent": "protect-mcp/receipt-registry"
+    },
+    body: JSON.stringify(payload)
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => "");
+    throw new Error(`hosted anchor failed: HTTP ${res.status} ${text.slice(0, 200)}`);
+  }
+  const response = await res.json().catch(() => ({}));
+  const anchors = Array.isArray(response.anchors) ? response.anchors : [];
+  return opts.records.map((record, index) => {
+    const anchor = anchors[index] || anchors.find((candidate) => candidate.receipt_hash === record.receipt_hash) || {};
+    return {
+      type: "scopeblind.timestamp_anchor.v1",
+      anchor_id: String(anchor.anchor_id || `hosted_${record.receipt_hash.slice(0, 16)}`),
+      receipt_hash: record.receipt_hash,
+      org_id: opts.org.org_id,
+      timestamp_utc: String(anchor.timestamp_utc || anchor.anchored_at || (/* @__PURE__ */ new Date()).toISOString()),
+      timestamp_source: "scopeblind-hosted",
+      registry_url: typeof response.registry_url === "string" ? response.registry_url : void 0,
+      verifier_url: typeof anchor.verifier_url === "string" ? anchor.verifier_url : opts.verifierBaseUrl ? `${opts.verifierBaseUrl.replace(/\/$/, "")}/verify?digest=${record.receipt_hash}` : void 0,
+      signature: anchor.signature
+    };
+  });
+}
+async function createReceiptRegistry(opts) {
+  const now = opts.now || /* @__PURE__ */ new Date();
+  const org = createOrgIdentity(opts);
+  const records = readReceiptDigestRecords(opts.dir);
+  if (records.length === 0) throw new Error("No signed receipts found. Run protect-mcp with signing enabled first.");
+  let anchors;
+  let uploaded = false;
+  if (opts.hosted || opts.endpoint || opts.token) {
+    if (!opts.endpoint) throw new Error("Hosted anchoring requires --endpoint or SCOPEBLIND_REGISTRY_ENDPOINT.");
+    if (!opts.token) throw new Error("Hosted anchoring requires --token or SCOPEBLIND_TOKEN.");
+    anchors = await hostedAnchors({ endpoint: opts.endpoint, token: opts.token, org, records, verifierBaseUrl: opts.verifierBaseUrl });
+    uploaded = true;
+  } else {
+    anchors = localAnchors(records, org, now, opts.verifierBaseUrl);
+  }
+  const registry = {
+    type: "scopeblind.receipt_registry.v1",
+    version: 1,
+    generated_at: now.toISOString(),
+    org,
+    billing: {
+      billing_account_id: org.billing_account_id,
+      metered_unit: "receipt_digest_anchor",
+      charge_basis: "anchored_receipt_digest_count",
+      raw_prompt_upload: false,
+      raw_data_upload: false
+    },
+    privacy: {
+      statement: uploaded ? "ScopeBlind hosted registry received receipt digests and public identity metadata only." : "Local preview registry only. No independent timestamp exists until hosted anchoring succeeds.",
+      uploaded_fields: ["receipt_hash", "receipt_bytes", "receipt_type", "request_id", "local_issuer", "local_kid", "org_id", "billing_account_id", "org_public_keys"],
+      excluded_fields: ["raw_prompt", "raw_tool_payload", "payload_preview", "raw_receipt", "tool_output", "private_key"]
+    },
+    records,
+    anchors,
+    verifier: {
+      local_page: join(opts.dir, VERIFIER_PAGE_FILE),
+      shareable_url_template: opts.verifierBaseUrl ? `${opts.verifierBaseUrl.replace(/\/$/, "")}/verify?digest={receipt_hash}` : "file://scopeblind-verifier.html#digest={receipt_hash}"
+    }
+  };
+  writeOrgIdentity(opts.dir, org);
+  const registryPath = opts.outPath || join(opts.dir, REGISTRY_FILE);
+  mkdirSync(dirname(registryPath), { recursive: true });
+  writeFileSync(registryPath, JSON.stringify(registry, null, 2) + "\n");
+  const verifierPath = join(opts.dir, VERIFIER_PAGE_FILE);
+  writeFileSync(verifierPath, renderVerifierPage(registry));
+  return { registry, registryPath, verifierPath, uploaded };
+}
+function renderVerifierPage(registry) {
+  const embedded = JSON.stringify(registry).replace(/</g, "\\u003c");
+  return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>ScopeBlind Receipt Verifier</title>
+<style>
+:root{--ink:#11110f;--muted:#6d675d;--line:#ded7c9;--paper:#f7f3ea;--card:#fffdf7;--ok:#2f6f4e;--warn:#8d620f;--bad:#8f241c}*{box-sizing:border-box}body{margin:0;background:radial-gradient(circle at top left,#fffdf7,#f7f3ea 48%,#e8dfce);color:var(--ink);font:15px/1.5 ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}main{width:min(1040px,calc(100vw - 32px));margin:32px auto}.card{background:rgba(255,253,247,.94);border:1px solid var(--line);border-radius:24px;padding:22px;box-shadow:0 24px 70px rgba(36,30,18,.10);margin-bottom:16px}.kicker{text-transform:uppercase;letter-spacing:.17em;color:var(--muted);font-size:11px;font-weight:900}h1{font:520 clamp(36px,6vw,72px)/.94 ui-serif,Georgia,serif;letter-spacing:-.05em;margin:12px 0}input{width:100%;border:1px solid var(--line);border-radius:14px;padding:13px;background:#fffaf0;font:14px ui-monospace,SFMono-Regular,Menlo,Consolas,monospace}.pill{display:inline-flex;border-radius:999px;padding:5px 9px;font-size:11px;font-weight:900}.ok{background:#dcebdd;color:var(--ok)}.warn{background:#f4e5bd;color:var(--warn)}.bad{background:#f7d9d3;color:var(--bad)}pre{white-space:pre-wrap;background:#181712;color:#f8f1df;border-radius:16px;padding:14px;overflow:auto}.muted{color:var(--muted)}code{background:#f2eadc;border:1px solid var(--line);border-radius:8px;padding:2px 6px}</style>
+</head>
+<body><main>
+<section class="card"><div class="kicker">ScopeBlind verifier</div><h1>Verify that an independent registry saw this receipt digest.</h1><p class="muted">This page contains receipt digests, anchors, public key metadata, and billing metadata. It does not contain raw prompts, payloads, tool outputs, or raw receipts.</p></section>
+<section class="card"><label class="kicker" for="digest">Receipt digest</label><input id="digest" placeholder="Paste receipt SHA-256 digest" oninput="render()"><div id="result" style="margin-top:16px"></div></section>
+<section class="card"><div class="kicker">Org public key directory</div><pre id="keys"></pre></section>
+</main><script>
+const registry=${embedded};
+function esc(v){return String(v==null?'':v).replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));}
+function render(){const q=document.getElementById('digest').value.trim()||new URLSearchParams(location.search).get('digest')||location.hash.replace(/^#digest=/,'');const rec=registry.records.find(r=>r.receipt_hash===q);const anchor=registry.anchors.find(a=>a.receipt_hash===q);const el=document.getElementById('result');if(!q){el.innerHTML='<p class="muted">Paste a digest to verify registry inclusion.</p>';return;}if(!rec){el.innerHTML='<span class="pill bad">not found</span><p>No matching digest in this registry export.</p>';return;}const independent=anchor&&anchor.timestamp_source==='scopeblind-hosted';el.innerHTML='<span class="pill '+(independent?'ok':'warn')+'">'+(independent?'anchored by ScopeBlind':'local preview only')+'</span><pre>'+esc(JSON.stringify({receipt:rec,anchor:anchor||null,billing:registry.billing,privacy:registry.privacy},null,2))+'</pre>';}
+document.getElementById('keys').textContent=JSON.stringify(registry.org.public_key_directory,null,2);render();
+</script></body></html>`;
+}
+export {
+  ORG_IDENTITY_FILE,
+  REGISTRY_FILE,
+  VERIFIER_PAGE_FILE,
+  createOrgIdentity,
+  createReceiptRegistry,
+  readReceiptDigestRecords,
+  renderVerifierPage,
+  writeOrgIdentity
+};