# Webber Production Dependencies
# Minor version pinning (~=) allows patch updates for security fixes
# CVE check date: 2026-01-09
# CVE check sources: PyPI, GitHub Advisories, Snyk, NVD

# Core FastAPI
fastapi~=0.128.0
starlette~=0.50.0                      # CVE-2025-62727, CVE-2025-54121 fixed
uvicorn[standard]~=0.40.0
pydantic~=2.12.4                       # CVE-2024-3772 (ReDoS) fixed in 2.4.0+
pydantic-settings~=2.12.0

# Agent Framework
pydantic-ai~=1.40.0

# HTTP client
httpx~=0.28.1
aiofiles~=25.1.0

# CLI
typer~=0.15.0
rich~=13.9.0

# Utilities
python-multipart~=0.0.21
python-dotenv~=1.2.1
pathspec~=0.12.1                       # Gitignore pattern matching

# Database
sqlalchemy[asyncio]~=2.0.36
aiosqlite~=0.21.0                      # SQLite async driver (dev)

# Token counting
tiktoken>=0.12.0                       # OpenAI tokenizer (used for estimation)