[build-system] requires = ["setuptools>=70"] build-backend = "setuptools.build_meta" [project] name = "invara" version = "0.3.0" description = "Independent verification that a change kept the constraints it declared" requires-python = ">=3.12" license = "Apache-2.0" license-files = ["LICENSE", "NOTICE"] readme = "README.md" authors = [{ name = "MIGARYOS" }] keywords = ["verification", "ai-agents", "provenance", "ci", "evidence"] classifiers = [ "Development Status :: 3 - Alpha", "Intended Audience :: Developers", "Programming Language :: Python :: 3.12", "Topic :: Software Development :: Quality Assurance", ] # Zero runtime dependencies, deliberately and permanently. It is what makes # `uvx --from git+... invara` honest, and it is also the claim: nothing in the # verdict path can be a model, a service or a network call. dependencies = [] [project.optional-dependencies] dev = ["pytest>=8"] [project.scripts] invara = "invara.__main__:main" # The editor surface. Same package, same zero dependencies; it speaks # MCP over stdio so the buyer never has to open a terminal. invara-mcp = "invara.mcp:main" [tool.setuptools] package-dir = {"" = "src"} [tool.setuptools.packages.find] where = ["src"]