# Dependencies

The 360Ghar backend has a Python dependency tree (the API) and a small JavaScript dependency tree (the ChatGPT widgets). Python deps are managed by `uv` and declared in `pyproject.toml`; JS deps are managed by npm and declared in `chatgpt-widgets/package.json`.

Active contributors: Saksham, Ravi

## Python runtime dependencies

Declared in `pyproject.toml` under `[project].dependencies`. Requires Python `>=3.10`.

### Web framework

- `fastapi[standard]>=0.136.1` - async web framework
- `uvicorn[standard]>=0.46.0` - ASGI server
- `python-multipart>=0.0.27` - form parsing
- `python-dotenv>=1.2.2` - `.env` loading
- `websockets>=15.0,<16` - WebSocket support for AI job and notification streams

### Data layer

- `sqlalchemy[asyncio]>=2.0.49` - ORM with async support
- `geoalchemy2>=0.19.0` - PostGIS integration for geospatial queries
- `pgvector>=0.4.2` - vector embedding storage and similarity search
- `psycopg[binary]>=3.3.4` - Postgres driver
- `redis>=5.0,<8` - Redis client for cache and rate limiting

### Validation and settings

- `pydantic>=2.13.3` - schema validation
- `pydantic-settings>=2.14.0` - environment-driven settings
- `email-validator>=2.3.0` - email field validation

### HTTP and integrations

- `httpx>=0.28.1` - async HTTP client (shared singletons in `app/core/http.py`)
- `supabase>=2.29.0` - Supabase Auth and REST client
- `cloudinary>=1.44.2` - media storage
- `razorpay>=1.4.2` - payments
- `google-auth>=2.50.0` - Google auth (FCM service account)

### AI and ML

- `google-genai>=1.64.0` - Gemini API client
- `pydantic-ai-slim[openai,fastmcp,retries]>=1.0.0` - Pydantic AI agent framework
- `fastmcp>=3.2.4` - MCP server framework
- `tenacity>=9.1.4` - retry logic for AI providers and network calls

### Scraping and parsing

- `beautifulsoup4>=4.14.3` - HTML parsing for data hub scrapers
- `pdfplumber>=0.11.9` - PDF parsing for gazette and jamabandi documents

### Media and utilities

- `Pillow>=12.2.0` - image processing (thumbnails, EXIF)
- `qrcode[pil]>=8.2` - QR code generation
- `bleach>=6.3.0` - HTML sanitization for blog content
- `PyYAML>=6.0.3` - YAML parsing
- `dnspython>=2.8.0` - DNS resolution
- `PyJWT[crypto]>=2.9.0` - JWT verification against Supabase JWKS

### Observability

- `sentry-sdk[fastapi]>=2.58.0` - error tracking and performance monitoring

### Scheduling

- `APScheduler>=3.10.4,<4` - background job scheduler (single shared `AsyncIOScheduler`)

## Python dev dependencies

Declared under `[project.optional-dependencies].dev`. Install with `uv sync --extra dev`.

- `pytest>=9.0.3`, `pytest-asyncio`, `pytest-cov`, `pytest-xdist`, `pytest-timeout` - test runner and plugins
- `respx>=0.23.1` - httpx mocking
- `freezegun>=1.5.5` - time mocking
- `ruff>=0.15.12` - linter and formatter
- `mypy>=1.20.2` - type checker
- `playwright>=1.59.0` - browser automation for e2e tests
- `fastapi-debug-toolbar>=0.6.3` - debug toolbar
- `watchfiles` - hot reload for dev server
- `aiosqlite` - SQLite async driver for tests (with GeoAlchemy2 compile shims)
- `fastapi-cli>=0.0.24` - `fastapi dev` command
- `hypercorn>=0.18.0` - alternative ASGI server

## JavaScript dependencies

Declared in `chatgpt-widgets/package.json`. The widget subsystem is a standalone npm project that builds 11 React widgets into standalone HTML bundles.

### Runtime

- `react@^18.2.0`
- `react-dom@^18.2.0`

### Dev

- `@types/react@^18.2.0`, `@types/react-dom@^18.2.0` - TypeScript types
- `esbuild@^0.20.0` - bundler (custom build script in `chatgpt-widgets/scripts/build-widgets.js`)
- `typescript@^5.3.0` - type checker

The widget bridge (`chatgpt-widgets/src/utils/bridge.ts`) is framework-agnostic React hooks that work on OpenAI and MCP Apps hosts. See [features/mcp-servers.md](features--mcp-servers.md).

## Version policy

Per `CLAUDE.md` and `AGENTS.md`, the project always uses the latest stable versions of dependencies. `pyproject.toml` uses `>=` lower bounds (not pinned) and `uv.lock` records the resolved versions. When upgrading, review changelogs for breaking changes and verify compatibility with Python 3.10+, FastAPI, SQLAlchemy 2.x async, and Pydantic v2.