# Production/runtime dependency manifest.
#
# requirements.txt remains the fully pinned all-extras lock used as a constraints
# source. Installing this file selects only runtime and supported feature
# dependencies, so development-only packages are not copied into the image.
-c requirements.txt

# Core MCP server
mcp[cli]>=1.27.0
fastmcp==3.4.4
fastapi>=0.100.0
uvicorn>=0.30.0
python-multipart>=0.0.27
aiofiles>=24.0.0
aiofile<=3.9.0
pydantic>=2.13.0
pydantic-settings>=2.0.0
loguru>=0.7.0
orjson>=3.11.9

# Core functionality
jinja2>=3.1.0
async-lru>=2.0.0
aiosqlite>=0.19.0
aiosmtplib>=5.1.0
python-dotenv>=1.2.2
arq>=0.25.0
redis>=5.0.0
pillow>=12.3.0,<13
markdown>=3.6.0
xhtml2pdf>=0.2.16
numpy<2.3.0
contourpy<1.3.3
pyxbe<=1.0.3
pyxdia<=0.1.0
pwntools>=4.12.0
ROPgadget>=7.3

# Analysis
pefile>=2023.0.0
lief>=0.17.6
capstone>=5.0.0
keystone-engine>=0.9.2
yara-python>=4.5.4
r2pipe>=1.9.8
gitpython>=3.1.51
pyasn1>=0.6.4
angr>=9.2.0,<=9.2.213
flare-capa>=7.0.0

# Visualization and CLI
graphviz>=0.20.0
networkx>=3.4.2,<3.5
matplotlib>=3.8.0,<3.11
psutil>=5.9.0
requests>=2.31.0
typer>=0.25.1
rich>=13.0.0

# File identification and HTTP hardening
python-magic>=0.4.27
python-magic-bin; sys_platform == "win32"
slowapi>=0.1.9

# Emulation harness generation and forensics
python-afl>=0.7.3
volatility3>=2.4.0
scapy>=2.5.0

# Runtime security hardening (Trivy scanner remediation)
setuptools>=83.0.0
msgpack>=1.2.1
pip>=26.2.0
