anafpy 0.3.0 — SPV read-only mailbox

Highlights

SPV (Spațiul Privat Virtual) read-only mailbox — a new certificate-authenticated layer (anafpy.spv):

• SpvClient (async): list_messages (paged, with the certificate's authorization inventory), download_document (PDF), request_report — the full cerere nomenclature, 35 report types with per-type parameter validation (fiscal vector, outstanding obligations, filing history, declaration/receipt duplicates, income certificates, …) — and wait_for_report.
• The qualified certificate (USB token / cloud HSM, non-exportable keys) is touched only by the interactive login bootstrap, which drives the OS-shipped curl against the platform key store: macOS Keychain/SecureTransport, Windows CertStore/Schannel. Everything after rides a persisted APM cookie session, prompt-free.
• New CLI: anafpy spv certs | select | login | status | logout.

MCP server additions — SPV as read-only tools: spv_status, spv_lista_mesaje, spv_descarca / spv_asteapta_raport (PDFs to disk with collision guards), spv_cerere (same-day request dedupe guards agent loops), spv_nomenclature (report types with English descriptions), certificate selection, and a confirm-gated spv_login. A message's document is also served as the spvmsg://{mesaj_id}/pdf resource.

Internals & infrastructure

• The MCP module was restructured by service (efactura/, etransport/, public/, spv/ over a shared two-step filing gate).
• CI now runs the test suite on ubuntu, macOS, and Windows (the SPV layer has platform seams), on Python 3.12 and 3.13.
• README badge row and Codecov coverage reporting (generated model packages excluded from measurement).

Full changelog: v0.2.1...v0.3.0

🤖 Generated with Claude Code