feat(saas): full SquareMCP SaaS platform v1

- JWT auth with bcrypt password hashing, cookie sessions, forgot/reset password
- Per-user encrypted credential storage (Redis + AES-256-GCM) for all 9 platforms
- Usage tracking with monthly limits per plan (free/starter/growth/enterprise)
- Invoice generation and retrieval (admin + user views)
- Admin panel with customer listing (role-based access)
- Web app UI at app.squaremcp.com — login, dashboard, connections, usage, invoices
- Unified auth middleware: API key, OAuth Bearer, and JWT cookie support
- Facebook Graph API fixes: published_posts endpoint, photo/video post support
- TikTok sandbox compliance: SELF_ONLY privacy for unaudited apps
- URL verification files for TikTok app review

src/tools.ts

@@ -1,5 +1,6 @@
 import { Tool } from '@modelcontextprotocol/sdk/types.js';
 import type { Customer } from './billing/middleware.js';
+import { recordUsage } from './billing/usage.js';
 import { searchMessages, readMessage, getProfile, listFolders, type Account } from './imap.js';
 import { sendEmail, createDraft } from './smtp.js';
 import { searchNotes, getNote, appendToNote, updateNote, getSyncStatus } from './clients/obsidian.js';
@@ -1124,6 +1125,10 @@ export async function handleToolCall(
     }
 
     console.log(`[tool] ${name} OK (${Date.now() - t0}ms)`);
+    if (customer) {
+      const platform = name.split('_')[0];
+      recordUsage(customer.id, platform, name).catch(() => {});
+    }
     return {
       content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
     };