# Core API framework
fastapi>=0.104.0
uvicorn[standard]>=0.24.0

# Environment variable support
python-dotenv>=1.0.0

# Data processing
pandas>=2.0.0
numpy>=1.24.0

# PDF processing
pdfplumber>=0.9.0

# AI enhancement
openai>=1.0.0

# File handling
aiofiles>=23.0.0

# WebSocket support
websockets>=11.0.0

# Utilities
python-dateutil>=2.8.0
pathlib2>=2.3.0

# Persistence
SQLAlchemy>=2.0.0
alembic>=1.13.0
psycopg[binary]>=3.1
# SQLCipher adapter lacks wheels for Py3.13; install only on <3.13
pysqlcipher3; platform_system != 'Windows' and python_version < '3.13'
plaid-python>=19.0.0
python-jose[cryptography]>=3.3.0
httpx>=0.27.0
# HTML parsing for DuckDuckGo snippets in ai/enrichment/online_vendor_lookup.py
beautifulsoup4>=4.12.0
stripe>=6.0.0
boto3>=1.34.0

# Local MCP server (D9): official Model Context Protocol SDK (stdio transport; desktop only)
mcp>=1.12,<2; python_version >= "3.10"

# Security floors (first release without known advisories at 2026-11-01). Several are transitive
# dependencies; keeping them here means a stale install or lockfile can't resolve to a vulnerable version.
aiohttp>=3.14.4
cryptography>=50.0.0
python-multipart>=0.0.31
starlette>=1.3.1
anyio>=4.14.2
urllib3>=2.8.0
requests>=2.33.0
certifi>=2026.10.18
idna>=3.15
Pillow>=13.0.0
pdfminer.six>=20251230
pyasn1>=0.6.5
Mako>=1.3.12
soupsieve>=2.9.0
