pyproject.toml

[build-system]
requires = ["setuptools>=61"]
build-backend = "setuptools.build_meta"

[project]
name = "mirror-stack-mcp"
version = "0.2.13"
description = "Unified MCP server for the Mirror Stack — claims, actions, provenance + verify-all in one server"
readme = "README.md"
requires-python = ">=3.10"
license = { text = "Apache-2.0" }
authors = [{ name = "Mother Seara", email = "ruinbl82@gmail.com" }]
dependencies = [
    "mcp>=1.0,<2",   # upper bound: mcp 2.x removed mcp.server.fastmcp (same fix as yeoul)
    # Pinned to exact RELEASE commits for reproducible installs. An unpinned git
    # dep silently tracks each mirror's default branch, so an install made before
    # a mirror's release freezes on whatever was HEAD then and never refreshes —
    # that is how a local install ran stale measure-mirror 0.14.3 long after
    # 0.15.1 landed. Bump these on purpose.
    #
    # Each SHA below is the commit its version TAG points at, verified against
    # the GitHub tag API by tests/test_pins_are_releases.py. The previous
    # action-mirror and provenance-mirror pins were labelled "v0.2.0" while
    # sitting TWO commits before that tag, so an install got the pre-org-migration
    # docs (stale `bhyi4/` self-references, SPEC v1.0) under a v0.2.0 label.
    "measure-mirror @ git+https://github.com/mirror-stack/measure-mirror@7f8259bd3f424c5091a37be953dca669884ee7e0",      # v0.41.1 — (auto-pin: was v0.41.0 11f1d768; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.40.0 3d9b007e; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.39.0 9784bce4; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.38.1 aa850516; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.38.0 815e6184; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.37.0 989da84e; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.36.0 bce68bbd; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.35.0 183c7259; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.34.0 c6965151; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.33.0 895ad803; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.32.0 21ca2893; verify via CI test_pins_are_releases + fixtures) — ㉘ vacuous both-directions on real runs (computed matched-null certificate); catalog count sync 72 + KO count guards
    "action-mirror @ git+https://github.com/mirror-stack/action-mirror@22eb4c5b09578f443b59d12a8455c5493b6064ed",        # v0.4.0 — (auto-pin: was v0.3.0 d59ea1df; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.2.0 15b0c5b7; verify via CI test_pins_are_releases + fixtures) — full 64-hex SHA-256 seals (security; legacy 16-hex verify via prefix match); org migration + SPEC v1.1 references
    "provenance-mirror @ git+https://github.com/mirror-stack/provenance-mirror@92b8e6ebf948bbb671d20282de99ea9886b8607c",  # v0.3.0 — (auto-pin: was v0.2.0 2d1d52d2; verify via CI test_pins_are_releases + fixtures) — full 64-hex SHA-256 seals (security; legacy 16-hex verify via prefix match); org migration + SPEC v1.1 references
]

[project.optional-dependencies]
# Real Bitcoin anchoring (mm_anchor_bitcoin / _upgrade / _verify). Optional so the core
# install stays light; the OTS tools self-report a clear error if `ots` is missing.
bitcoin = ["opentimestamps-client>=0.7"]
test = ["pytest>=7"]

[project.scripts]
mirror-stack-mcp = "mirror_stack_mcp.server:main"
mirror-stack-verify = "mirror_stack_mcp.verify:main"
mirror-stack-gate = "mirror_stack_mcp.gate:main"

[project.urls]
Homepage = "https://github.com/mirror-stack"

[tool.setuptools]
packages = ["mirror_stack_mcp"]