release: v0.2.12 — serverInfo 수리에 판 번호를 붙이고, 핀을 새 판으로 옮긴다

CHANGELOG.md

@@ -5,6 +5,37 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ---
 
+## [0.2.12] — 2026-08-28
+
+### Fixed
+- **The server told clients the SDK's version instead of its own.** FastMCP (1.27.2) takes
+  no `version`, so `Server.version` stayed `None` and the lowlevel server answered
+  `initialize` with `pkg_version("mcp")` — every FastMCP server on earth reports the SDK's
+  version as its own. A client asking this server what it was got `1.27.2`; an outside bug
+  report on 2026-08-24 read a different number on Windows and took it for a platform
+  difference. It was the SDK version there too. (`#45`)
+
+  🔴 Deliberately **not** fixed with `importlib.metadata.version()`: an editable install
+  has `0.1.0` frozen in its dist-info while the source says otherwise, so that route swaps
+  one wrong number for another and looks fixed. Seven tests check the value a client
+  actually receives (`create_initialization_options()`), not the attribute we set — and
+  one of them is a positive control that fails if a bare FastMCP server ever stops
+  exhibiting the original fault, so this patch cannot outlive its reason in silence.
+
+### Changed
+- Pins moved to `measure-mirror v0.41.0` and `provenance-mirror v0.3.0`. Both releases
+  change ledger behaviour this server sits on top of: measure-mirror no longer creates a
+  missing ledger without `--new-ledger` (CLI only — `mm_preregister` is unaffected), and
+  both mirrors now read the chain head from the end of the file instead of parsing it whole.
+
+### Note on this entry
+Eight commits sat on `main` above the `v0.2.11` tag with nothing written here — `#37`,
+`#38`, `#42`, `#44` (dependency pin bumps) and `#39`, `#40`, `#41` (catalog count
+references following measure-mirror merges). They are mechanical follow-ups rather than
+behaviour changes, and are recorded as a group here rather than omitted.
+
+---
+
 ## [0.2.11] — 2026-08-19
 
 ### Fixed

mirror_stack_mcp/__init__.py

@@ -1,2 +1,2 @@
 """🪞🔎🪪 Mirror Stack unified MCP server."""
-__version__ = "0.2.11"
+__version__ = "0.2.12"

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "mirror-stack-mcp"
-version = "0.2.11"
+version = "0.2.12"
 description = "Unified MCP server for the Mirror Stack — claims, actions, provenance + verify-all in one server"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -23,9 +23,9 @@ dependencies = [
     # action-mirror and provenance-mirror pins were labelled "v0.2.0" while
     # sitting TWO commits before that tag, so an install got the pre-org-migration
     # docs (stale `bhyi4/` self-references, SPEC v1.0) under a v0.2.0 label.
-    "measure-mirror @ git+https://github.com/mirror-stack/measure-mirror@3d9b007eb776d7f6736fa98343fee7a4762acb87",      # v0.40.0 — (auto-pin: was v0.39.0 9784bce4; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.38.1 aa850516; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.38.0 815e6184; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.37.0 989da84e; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.36.0 bce68bbd; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.35.0 183c7259; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.34.0 c6965151; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.33.0 895ad803; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.32.0 21ca2893; verify via CI test_pins_are_releases + fixtures) — ㉘ vacuous both-directions on real runs (computed matched-null certificate); catalog count sync 72 + KO count guards
+    "measure-mirror @ git+https://github.com/mirror-stack/measure-mirror@11f1d768e9c9ddfca71ec1dadeba7a7e1124fe55",      # v0.41.0 — (auto-pin: was v0.40.0 3d9b007e; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.39.0 9784bce4; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.38.1 aa850516; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.38.0 815e6184; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.37.0 989da84e; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.36.0 bce68bbd; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.35.0 183c7259; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.34.0 c6965151; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.33.0 895ad803; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.32.0 21ca2893; verify via CI test_pins_are_releases + fixtures) — ㉘ vacuous both-directions on real runs (computed matched-null certificate); catalog count sync 72 + KO count guards
     "action-mirror @ git+https://github.com/mirror-stack/action-mirror@22eb4c5b09578f443b59d12a8455c5493b6064ed",        # v0.4.0 — (auto-pin: was v0.3.0 d59ea1df; verify via CI test_pins_are_releases + fixtures) — (auto-pin: was v0.2.0 15b0c5b7; verify via CI test_pins_are_releases + fixtures) — full 64-hex SHA-256 seals (security; legacy 16-hex verify via prefix match); org migration + SPEC v1.1 references
-    "provenance-mirror @ git+https://github.com/mirror-stack/provenance-mirror@2d1d52d280352567410d140270f7714571bf784f",  # v0.2.0 — full 64-hex SHA-256 seals (security; legacy 16-hex verify via prefix match); org migration + SPEC v1.1 references
+    "provenance-mirror @ git+https://github.com/mirror-stack/provenance-mirror@92b8e6ebf948bbb671d20282de99ea9886b8607c",  # v0.3.0 — (auto-pin: was v0.2.0 2d1d52d2; verify via CI test_pins_are_releases + fixtures) — full 64-hex SHA-256 seals (security; legacy 16-hex verify via prefix match); org migration + SPEC v1.1 references
 ]
 
 [project.optional-dependencies]