# DEPS — mgf-brand-web's bidirectional dependency manifest

> **§1** — what mgf-brand-web depends on. **§2** — who depends on it.
> **Per standard DOC-16:** every project ships a `DEPS.md` at repo root.

Last verified: 2026-06-29.

## §1 What mgf-brand-web depends on

**Nothing at runtime.** It is a pure asset package — tokenized CSS, self-hosted
fonts, and SVGs shipped as package data, plus a `static_dir()` accessor (stdlib
`pathlib` only). It is **framework-free** by an import-linter contract so any web
stack can depend on it.

| Extra | Dependency | Why |
|---|---|---|
| `standards` | `mgf-common[standards]>=0.47,<0.50` | standards corpus for the federation CLI checks (dev/opt) |
| `dev` | pytest, ruff, mypy, import-linter, mgf-test-supervisor | the four green gates + supervisor |

## §2 Who depends on mgf-brand-web

| Project | Status | Surfaces used |
|---|---|---|
| `mgf-cloud-app` | **planned** (cutover gated on this package being published to devpi) | mounts `static_dir()` at `/static/brand` |

It is a **wave-0 leaf**: it must be published before any consumer can pin it.

## §3 Maintenance

Updated every MINOR release + when a consumer adopts it. The token set is kept in
step with `mgf-website`'s `global.css` (the canonical Brand Book reconciliation).
