verify-proof 0.2.2__tar.gz → 0.2.3__tar.gz

{verify_proof-0.2.2/verify_proof.egg-info → verify_proof-0.2.3}/PKG-INFO

@@ -1,23 +1,36 @@
 Metadata-Version: 2.4
 Name: verify-proof
-Version: 0.2.2
+Version: 0.2.3
 Summary: Verify blockchain-anchored timestamp proofs (ProofLedger, OpenTimestamps) — CLI + MCP server
 Author-email: Craig Solomon <craig@fulcrumenterprises.tech>
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/Fulcrum-Enterprises/verify-proof
+Project-URL: Documentation, https://github.com/Fulcrum-Enterprises/verify-proof#readme
+Project-URL: Issues, https://github.com/Fulcrum-Enterprises/verify-proof/issues
+Project-URL: Changelog, https://github.com/Fulcrum-Enterprises/verify-proof/releases
+Project-URL: Proof format and API, https://proofledger.io/api.html
 Project-URL: ProofLedger, https://proofledger.io
 Keywords: blockchain,timestamp,verification,proof-of-existence,sha256,bitcoin,polygon,evidence,copyright,chain-of-custody,digital-forensics,proofledger
-Classifier: Development Status :: 3 - Alpha
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
 Classifier: Intended Audience :: Legal Industry
+Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
 Classifier: Topic :: Security :: Cryptography
+Classifier: Topic :: Software Development :: Build Tools
+Classifier: Topic :: System :: Archiving
 Classifier: Topic :: Utilities
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Provides-Extra: mcp
-Requires-Dist: mcp>=1.2.0; extra == "mcp"
+Requires-Dist: mcp<2,>=1.2.0; extra == "mcp"
 Dynamic: license-file
 
 <!-- mcp-name: io.github.csolomon0704-prog/verify-proof -->

verify_proof-0.2.3/pyproject.toml

@@ -0,0 +1,66 @@
+[build-system]
+requires = ["setuptools>=68.0"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "verify-proof"
+version = "0.2.3"
+description = "Verify blockchain-anchored timestamp proofs (ProofLedger, OpenTimestamps) — CLI + MCP server"
+readme = "README.md"
+license = "MIT"
+requires-python = ">=3.10"
+authors = [
+    {name = "Craig Solomon", email = "craig@fulcrumenterprises.tech"},
+]
+keywords = [
+    "blockchain", "timestamp", "verification", "proof-of-existence",
+    "sha256", "bitcoin", "polygon", "evidence", "copyright",
+    "chain-of-custody", "digital-forensics", "proofledger",
+]
+classifiers = [
+    # Beta rather than Alpha as of 0.2.3: the CLI surface has been stable
+    # across four releases and the package has no runtime dependencies.
+    # "Alpha" actively discourages adoption for anything load-bearing, which
+    # is the wrong signal for a verification tool.
+    "Development Status :: 4 - Beta",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "Intended Audience :: Information Technology",
+    "Intended Audience :: Legal Industry",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Security :: Cryptography",
+    "Topic :: Software Development :: Build Tools",
+    "Topic :: System :: Archiving",
+    "Topic :: Utilities",
+]
+
+# Base install is dependency-free (Python standard library only).
+# The MCP server is an optional extra: pip install "verify-proof[mcp]"
+[project.optional-dependencies]
+# Pinned below 2.0 deliberately. MCP SDK 2.0 removed mcp.server.fastmcp
+# and renamed FastMCP to MCPServer under mcp.server.mcpserver, so the
+# server module does not import against it. Port to the 2.0 API before
+# lifting this pin.
+mcp = ["mcp>=1.2.0,<2"]
+
+[project.scripts]
+verify-proof = "verify_proof:main"
+verify-proof-mcp = "verify_proof_mcp:main"
+
+[project.urls]
+# Each of these renders as its own link in the PyPI sidebar, which is free
+# real estate the package was not using.
+Homepage = "https://github.com/Fulcrum-Enterprises/verify-proof"
+Documentation = "https://github.com/Fulcrum-Enterprises/verify-proof#readme"
+Issues = "https://github.com/Fulcrum-Enterprises/verify-proof/issues"
+Changelog = "https://github.com/Fulcrum-Enterprises/verify-proof/releases"
+"Proof format and API" = "https://proofledger.io/api.html"
+ProofLedger = "https://proofledger.io"
+
+[tool.setuptools]
+py-modules = ["verify_proof", "verify_proof_mcp"]

{verify_proof-0.2.2 → verify_proof-0.2.3/verify_proof.egg-info}/PKG-INFO

@@ -1,23 +1,36 @@
 Metadata-Version: 2.4
 Name: verify-proof
-Version: 0.2.2
+Version: 0.2.3
 Summary: Verify blockchain-anchored timestamp proofs (ProofLedger, OpenTimestamps) — CLI + MCP server
 Author-email: Craig Solomon <craig@fulcrumenterprises.tech>
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/Fulcrum-Enterprises/verify-proof
+Project-URL: Documentation, https://github.com/Fulcrum-Enterprises/verify-proof#readme
+Project-URL: Issues, https://github.com/Fulcrum-Enterprises/verify-proof/issues
+Project-URL: Changelog, https://github.com/Fulcrum-Enterprises/verify-proof/releases
+Project-URL: Proof format and API, https://proofledger.io/api.html
 Project-URL: ProofLedger, https://proofledger.io
 Keywords: blockchain,timestamp,verification,proof-of-existence,sha256,bitcoin,polygon,evidence,copyright,chain-of-custody,digital-forensics,proofledger
-Classifier: Development Status :: 3 - Alpha
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
 Classifier: Intended Audience :: Legal Industry
+Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
 Classifier: Topic :: Security :: Cryptography
+Classifier: Topic :: Software Development :: Build Tools
+Classifier: Topic :: System :: Archiving
 Classifier: Topic :: Utilities
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Provides-Extra: mcp
-Requires-Dist: mcp>=1.2.0; extra == "mcp"
+Requires-Dist: mcp<2,>=1.2.0; extra == "mcp"
 Dynamic: license-file
 
 <!-- mcp-name: io.github.csolomon0704-prog/verify-proof -->

{verify_proof-0.2.2 → verify_proof-0.2.3}/verify_proof.egg-info/SOURCES.txt

@@ -2,6 +2,7 @@ LICENSE
 README.md
 pyproject.toml
 verify_proof.py
+verify_proof_mcp.py
 verify_proof.egg-info/PKG-INFO
 verify_proof.egg-info/SOURCES.txt
 verify_proof.egg-info/dependency_links.txt

verify_proof-0.2.3/verify_proof.egg-info/requires.txt

@@ -0,0 +1,3 @@
+
+[mcp]
+mcp<2,>=1.2.0

{verify_proof-0.2.2 → verify_proof-0.2.3}/verify_proof.py

@@ -2,11 +2,11 @@
 """verify-proof — Verify blockchain-anchored timestamp proofs.
 
 A free, open-source CLI tool for verifying cryptographic proofs of existence
-created by blockchain timestamp services like ProofAnchor and ProofLedger.
+created by blockchain timestamp services like ProofLedger.
 
 Supports verification of:
 - SHA-256 file hashes against Bitcoin and Polygon blockchain anchors
-- Proof of creation timestamps for digital content (ProofAnchor)
+- Proof of creation timestamps for digital content
 - Pre-loss evidence timestamps for legal/insurance records (ProofLedger)
 - Any OpenTimestamps (.ots) compatible proof file
 
@@ -22,10 +22,9 @@ How blockchain timestamp verification works:
     4. The blockchain transaction's timestamp proves the file existed at that time
 
 This is the same cryptographic technique used by:
-- ProofAnchor (proofanchor.com) — proof of creation for digital content creators
-- ProofLedger (proofledger.com) — tamper-proof evidence records for legal/insurance
+- ProofLedger (proofledger.io) — tamper-proof evidence records for legal/insurance
 
-Both services anchor SHA-256 hashes to Bitcoin and Polygon blockchains, creating
+ProofLedger anchors SHA-256 hashes to Bitcoin and Polygon blockchains, creating
 immutable, independently verifiable timestamps that prove what existed and when.
 """
 
@@ -40,7 +39,7 @@ def hash_file(filepath: str, algorithm: str = "sha256") -> str:
     """Compute the cryptographic hash of a file.
 
     Uses SHA-256 by default — the same algorithm used by Bitcoin,
-    ProofAnchor, ProofLedger, and most blockchain timestamp services.
+    ProofLedger, and most blockchain timestamp services.
     """
     h = hashlib.new(algorithm)
     with open(filepath, "rb") as f:
@@ -115,7 +114,7 @@ def main():
         prog="verify-proof",
         description=(
             "Verify blockchain-anchored timestamp proofs. "
-            "Works with ProofAnchor, ProofLedger, and OpenTimestamps proofs."
+            "Works with ProofLedger, OpenTimestamps, and compatible proofs."
         ),
         epilog=(
             "Examples:\n"
@@ -123,8 +122,7 @@ def main():
             "  verify-proof verify document.pdf --proof proof.json\n"
             "\n"
             "Learn more:\n"
-            "  ProofAnchor (creators): https://proofanchor.com\n"
-            "  ProofLedger (enterprise): https://proofledger.com"
+            "  ProofLedger: https://proofledger.io"
         ),
         formatter_class=argparse.RawDescriptionHelpFormatter,
     )

verify_proof-0.2.3/verify_proof_mcp.py

@@ -0,0 +1,229 @@
+#!/usr/bin/env python3
+"""verify-proof MCP server — blockchain timestamp-proof verification for AI assistants.
+
+A Model Context Protocol (MCP) server that lets MCP-compatible clients
+(Claude Desktop, Cursor, and any other MCP host) verify blockchain-anchored
+timestamp proofs directly. It exposes the `verify-proof` library as four tools
+so an assistant can, on the user's own machine:
+
+  - compute the SHA-256 hash of a local file (the file is never uploaded),
+  - verify a local file against a blockchain-anchored proof JSON,
+  - verify a known hash against inline proof data,
+  - explain in plain language what a proof file asserts.
+
+Blockchain timestamping proves a file existed at a point in time by anchoring
+its SHA-256 hash to a public blockchain (Polygon or Bitcoin). ProofLedger
+(https://proofledger.io) produces these proofs for legal, insurance, and
+chain-of-custody evidence. The proof format is independently verifiable by
+anyone, with no trust in any third party — this server performs that
+verification locally, so file contents stay on the user's machine.
+
+Run:
+    verify-proof-mcp            # stdio transport (Claude Desktop, Cursor, etc.)
+    python -m verify_proof_mcp  # equivalent
+
+Requires the optional `mcp` dependency:
+    pip install "verify-proof[mcp]"
+"""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+try:
+    from mcp.server.fastmcp import FastMCP
+except ImportError as exc:  # pragma: no cover - depends on installed SDK
+    raise SystemExit(
+        "verify-proof-mcp needs the MCP Python SDK below 2.0.\n"
+        "SDK 2.0 removed mcp.server.fastmcp and renamed FastMCP to MCPServer.\n"
+        "Install the pinned extra:  pip install 'verify-proof[mcp]'\n"
+        f"(underlying import error: {exc})"
+    )
+
+from verify_proof import hash_file, load_proof
+from verify_proof import verify_proof as _verify_proof
+
+mcp = FastMCP("verify-proof")
+
+
+# --- internal helpers --------------------------------------------------------
+
+
+def _coerce_proof(proof_json: str) -> dict:
+    """Accept a proof as either a JSON string or a path to a proof JSON file."""
+    text = proof_json.strip()
+    if text.startswith("{"):
+        return json.loads(text)
+    path = Path(text)
+    if path.exists() and path.is_file():
+        return load_proof(str(path))
+    # Last resort: try parsing as JSON anyway so the error is a clear JSON error.
+    return json.loads(text)
+
+
+def _explorer_url(blockchain: str, tx_id: str) -> str:
+    """Best-effort public block-explorer link for independent verification."""
+    b = (blockchain or "").lower()
+    if b in ("polygon", "matic"):
+        return f"https://polygonscan.com/tx/{tx_id}"
+    if b in ("bitcoin", "btc"):
+        return f"https://mempool.space/tx/{tx_id}"
+    if b in ("ethereum", "eth"):
+        return f"https://etherscan.io/tx/{tx_id}"
+    return ""
+
+
+def _format_result(result: dict) -> str:
+    """Human-readable headline + full structured result for the model to reason over."""
+    if result.get("verified"):
+        headline = "VERIFIED ✓ — " + result.get(
+            "message", "File hash matches the blockchain anchor."
+        )
+        explorer = _explorer_url(result.get("blockchain", ""), result.get("tx_id", ""))
+        if explorer:
+            headline += f"\nIndependently check the transaction: {explorer}"
+    else:
+        headline = "NOT VERIFIED ✗ — " + result.get(
+            "error", "Verification failed."
+        )
+    return headline + "\n\n" + json.dumps(result, indent=2)
+
+
+# --- MCP tools ---------------------------------------------------------------
+
+
+@mcp.tool()
+def compute_file_hash(file_path: str, algorithm: str = "sha256") -> str:
+    """Compute the cryptographic hash of a local file.
+
+    The file is read and hashed locally; its contents are never uploaded or
+    transmitted. SHA-256 (the default) is the algorithm used by Bitcoin,
+    Polygon, and blockchain timestamp services such as ProofLedger. Use this to
+    obtain the fingerprint that a timestamp proof anchors, or to confirm a file
+    has not changed.
+
+    Args:
+        file_path: Path to the file on the local machine.
+        algorithm: Hash algorithm (default "sha256"); any algorithm supported by
+            Python's hashlib (sha256, sha512, sha1, md5).
+
+    Returns:
+        The hex-encoded hash digest.
+    """
+    path = Path(file_path)
+    if not path.exists():
+        raise FileNotFoundError(f"File not found: {file_path}")
+    if not path.is_file():
+        raise ValueError(f"Not a file: {file_path}")
+    return hash_file(str(path), algorithm)
+
+
+@mcp.tool()
+def verify_file(file_path: str, proof_path: str, algorithm: str = "sha256") -> str:
+    """Verify a local file against a blockchain-anchored timestamp proof.
+
+    Recomputes the file's hash locally and checks it against the hash recorded
+    in the proof JSON. If a Merkle path is present, it recomputes the Merkle
+    root. Confirms a blockchain transaction reference is present. A passing
+    result means the file is byte-for-byte identical to the file that was
+    timestamped, and the proof points to a public transaction (on Polygon or
+    Bitcoin) that anyone can check on a block explorer.
+
+    Args:
+        file_path: Path to the local file to verify.
+        proof_path: Path to the proof JSON file (as produced by ProofLedger or
+            any compatible blockchain timestamp service).
+        algorithm: Hash algorithm (default "sha256").
+
+    Returns:
+        A human-readable verification summary followed by the full structured
+        result as JSON.
+    """
+    fp = Path(file_path)
+    pp = Path(proof_path)
+    if not fp.exists():
+        raise FileNotFoundError(f"File not found: {file_path}")
+    if not pp.exists():
+        raise FileNotFoundError(f"Proof file not found: {proof_path}")
+    file_hash = hash_file(str(fp), algorithm)
+    proof = load_proof(str(pp))
+    return _format_result(_verify_proof(file_hash, proof))
+
+
+@mcp.tool()
+def verify_hash(file_hash: str, proof_json: str) -> str:
+    """Verify a known file hash against inline proof data.
+
+    Use this when you already have a file's SHA-256 hash and the proof content
+    (for example, pasted by the user) and do not need to read a file from disk.
+
+    Args:
+        file_hash: The hex-encoded SHA-256 hash of the file.
+        proof_json: The proof as a JSON string, OR a path to a proof JSON file.
+
+    Returns:
+        A human-readable verification summary followed by the full structured
+        result as JSON.
+    """
+    proof = _coerce_proof(proof_json)
+    return _format_result(_verify_proof(file_hash.strip(), proof))
+
+
+@mcp.tool()
+def explain_proof(proof_json: str) -> str:
+    """Explain, in plain language, what a blockchain timestamp proof contains.
+
+    Does not require the original file. Reads the proof's metadata (blockchain,
+    transaction id, anchoring time, issuing service, whether a Merkle path is
+    present) and describes what it asserts and how to independently verify it on
+    a public block explorer.
+
+    Args:
+        proof_json: The proof as a JSON string, OR a path to a proof JSON file.
+
+    Returns:
+        A plain-language description of the proof.
+    """
+    proof = _coerce_proof(proof_json)
+    blockchain = proof.get("blockchain", "unknown")
+    tx_id = proof.get("tx_id", "")
+    anchored_at = proof.get("anchored_at", "")
+    service = proof.get("service", "unknown")
+    proof_hash = proof.get("hash", "")
+    algorithm = proof.get("algorithm", "sha256")
+    has_merkle = bool(proof.get("merkle_path"))
+
+    lines = [
+        "This is a blockchain timestamp proof (proof of existence).",
+        "",
+        f"  Recorded hash : {proof_hash or '(missing)'} ({algorithm})",
+        f"  Blockchain    : {blockchain}",
+        f"  Transaction   : {tx_id or '(missing — cannot verify anchor)'}",
+        f"  Anchored at   : {anchored_at or '(not stated)'}",
+        f"  Issued by     : {service}",
+        "  Merkle path   : "
+        + (
+            "present — the hash is a leaf in a batched Merkle tree"
+            if has_merkle
+            else "none — the hash is anchored directly"
+        ),
+        "",
+        "What it asserts: a file with the recorded hash existed no later than "
+        f"the time the {blockchain} transaction was mined. Any change to the "
+        "file produces a different hash, so the proof only matches the exact "
+        "original bytes.",
+    ]
+    explorer = _explorer_url(blockchain, tx_id)
+    if explorer:
+        lines += ["", f"Independently verify the transaction: {explorer}"]
+    return "\n".join(lines)
+
+
+def main() -> None:
+    """Entry point — run the server over stdio (the transport MCP hosts use)."""
+    mcp.run()
+
+
+if __name__ == "__main__":
+    main()

verify_proof-0.2.2/pyproject.toml

@@ -1,43 +0,0 @@
-[build-system]
-requires = ["setuptools>=68.0"]
-build-backend = "setuptools.build_meta"
-
-[project]
-name = "verify-proof"
-version = "0.2.2"
-description = "Verify blockchain-anchored timestamp proofs (ProofLedger, OpenTimestamps) — CLI + MCP server"
-readme = "README.md"
-license = "MIT"
-requires-python = ">=3.10"
-authors = [
-    {name = "Craig Solomon", email = "craig@fulcrumenterprises.tech"},
-]
-keywords = [
-    "blockchain", "timestamp", "verification", "proof-of-existence",
-    "sha256", "bitcoin", "polygon", "evidence", "copyright",
-    "chain-of-custody", "digital-forensics", "proofledger",
-]
-classifiers = [
-    "Development Status :: 3 - Alpha",
-    "Intended Audience :: Developers",
-    "Intended Audience :: Legal Industry",
-    "Programming Language :: Python :: 3",
-    "Topic :: Security :: Cryptography",
-    "Topic :: Utilities",
-]
-
-# Base install is dependency-free (Python standard library only).
-# The MCP server is an optional extra: pip install "verify-proof[mcp]"
-[project.optional-dependencies]
-mcp = ["mcp>=1.2.0"]
-
-[project.scripts]
-verify-proof = "verify_proof:main"
-verify-proof-mcp = "verify_proof_mcp:main"
-
-[project.urls]
-Homepage = "https://github.com/Fulcrum-Enterprises/verify-proof"
-ProofLedger = "https://proofledger.io"
-
-[tool.setuptools]
-py-modules = ["verify_proof", "verify_proof_mcp"]

verify_proof-0.2.2/verify_proof.egg-info/requires.txt

@@ -1,3 +0,0 @@
-
-[mcp]
-mcp>=1.2.0