# BreakPilot Core Backend Dependencies
# Only what the shared APIs actually need.

# Web Framework
fastapi==0.123.9
uvicorn==0.38.0
starlette==0.49.3

# HTTP Client (auth_api, notification_api, email_template_api proxy calls)
httpx==0.28.1
requests==2.32.5

# Validation & Types
pydantic==2.12.5
pydantic_core==2.41.5
email-validator==2.3.0
annotated-types==0.7.0

# Authentication (auth module, consent_client JWT)
PyJWT==2.10.1
python-multipart==0.0.20

# Database (rbac_api, middleware rate_limiter)
asyncpg==0.30.0
psycopg2-binary==2.9.10

# Cache / Rate-Limiter (Valkey/Redis)
redis==5.2.1

# PDF Generation (services/pdf_service)
weasyprint==66.0
Jinja2==3.1.6

# Image Processing (services/file_processor)
pillow==11.3.0
opencv-python==4.12.0.88
numpy==2.0.2

# Document Processing (services/file_processor)
python-docx==1.2.0
mammoth==1.11.0
Markdown==3.9

# Secrets Management (Vault)
hvac==2.4.0

# Utilities
python-dateutil==2.9.0.post0

# Security: Pin transitive dependencies to patched versions
idna>=3.7            # CVE-2024-3651
cryptography>=42.0.0 # GHSA-h4gh-qq45-vh27