requirements.txt

# ============================================================
# requirements.txt - HuggingFace Spaces Dependencies
# ============================================================
# This file MUST stay in sync with pyproject.toml dependencies.
# Last synced: 2025-12-05
# ============================================================

# Core
pydantic>=2.7
pydantic-settings>=2.2
pydantic-ai>=0.0.16

# AI Providers
openai>=1.0.0
chromadb>=0.4.22
sentence-transformers>=2.2.2

# HTTP & Parsing
httpx>=0.27
beautifulsoup4>=4.12
xmltodict>=0.13
huggingface-hub>=0.24.0

# UI (Gradio with MCP server support - 6.0 required for css in launch())
gradio[mcp]>=6.0.0

# Security: Pin mcp to fix GHSA-9h52-p55h-vw2f and ensure ToolUseContent exists
mcp>=1.23.0

# Utils
python-dotenv>=1.0
tenacity>=8.2
structlog>=24.1
requests>=2.32.5
limits>=3.0
duckduckgo-search>=5.0

# LangGraph deps - upper bounds prevent breaking changes from major versions
langgraph>=0.2.50,<1.0
langchain>=0.3.9,<1.0
langchain-core>=0.3.21,<1.0
langchain-huggingface>=0.1.2,<1.0
langgraph-checkpoint-sqlite>=3.0.0,<4.0

# Security: Pin urllib3 to fix GHSA-gm62-xv2j-4w53 and GHSA-2xpw-w6gg-jr37
urllib3>=2.6.0

# Multi-agent orchestration (Advanced mode) - from [magentic] optional
agent-framework-core==1.0.0b251204

# LlamaIndex RAG support - from [rag] optional
llama-index>=0.11.0
llama-index-llms-openai
llama-index-embeddings-openai
llama-index-vector-stores-chroma