Files
openswarm/backend/requirements.txt
T

37 lines
1.7 KiB
Plaintext

# Pinned to specific versions so production builds (DMG/EXE/pkg) are
# reproducible — same CLI version baked into every artifact regardless
# of when the build runs. Bump these deliberately after dogfooding the
# new behavior in dev.
# anthropic 0.97.0 — current latest as of 2026-04-28
# claude-agent-sdk 0.1.70 — bundles Claude Code CLI 2.1.122 (above
# the 2.1.90 deferred-tools cache-fix floor)
# pydantic 2.13.3 — required floor for mcp >=1.27
anthropic==0.97.0
claude-agent-sdk==0.1.70
jsonschema
fastapi[standard-no-fastapi-cloud-cli]
pydantic==2.13.3
typeguard==4.4.2
python-dotenv==1.1.1
Pillow
httpx>=0.27.0
trafilatura
# instagrapi: used by /credentials/instagram/validate to verify Instagram
# login server-side before persisting credentials (verify-before-save flow,
# same shape as the OAuth integrations).
instagrapi>=2.0
# telethon: Telegram MCP backend (MTProto user-account auth + session
# persistence). The vendored Telegram MCP server (backend.apps.telegram_mcp)
# loads sessions via Telethon and runs as a stdio subprocess.
telethon~=1.36
# spotipy: Spotify Web API client for the vendored Spotify MCP
# (backend.apps.spotify_mcp). Auto-refreshes access_token using the
# SPOTIFY_REFRESH_TOKEN env var saved by the Connect flow.
spotipy~=2.24
# tzlocal: dev-mode fallback for resolving the user's IANA timezone when
# Electron's OPENSWARM_TIMEZONE env var isn't set (i.e. `bash run.sh`).
# Packaged builds get the env var directly so this is a safety net.
tzlocal
# Test deps (pytest, pytest-asyncio) live in requirements-dev.txt — they
# never ship to production users and shaved ~3 MB / ~200 files off the
# Mac DMG when removed from the prod env.