pyproject.toml

[project]
name = "cuga"
version = "0.2.27"
description = "CUGA is an open-source generalist agent for the enterprise, supporting complex task execution on web and APIs, OpenAPI/MCP integrations, composable architecture, reasoning modes, and policy-aware features."
readme = "README.md"
license = "Apache-2.0"
requires-python = ">=3.10, <3.14"
dependencies = [
    "langchain>=1.0",
    "langchain-ibm>=0.3.9",
    "langchain-openai",
    "langchain-core>=1.2.22",
    # litellm 1.83.14 pins aiohttp==3.13.4; keep floor aligned so uv/pip can resolve with litellm+fastmcp.
    "aiohttp>=3.13.4",
    "httpx",
    "docker",
    "langgraph",
    "markdownify",
    "uvicorn",
    "fastapi[standard]",
    "langfuse",
    "dynaconf>=3.2.13",
    "playwright>=1.49.0",
    "browsergym-core==0.13.0",
    "python-dotenv",
    "loguru",
    "mcp[cli]>=1.23.0",
    "psutil>=7.0.0",
    "typer>=0.15.3",
    "typer-slim>=0.15.3", # explicit: docling pulls typer meta-package which needs typer-slim
    "fastmcp>=3.2.0",
    "langchain-mcp-adapters",
    "pyyaml>=6.0.3",
    "pymilvus[milvus-lite]>=2.6.4",
    "langchain-groq>=0.3.8",
    "langchain-litellm",
    # 1.83.7–1.83.13 conflict with fastmcp>=3.2 per resolver; 1.83.14 is current stable on PyPI.
    "litellm>=1.83.14",
    "tavily-python",
    "fastembed>=0.4.0",
    "a2a-sdk[http-server]>=0.3.22",
    "sqlite-vec>=0.1.6", # GHSA-vrcx-gx3g-j3h8 affects <0.1.3 only; 0.1.6 is safe
    "pgvector>=0.4.2",
    "asyncpg>=0.30",
    "PyJWT[crypto]>=2.12.0",
    "cryptography>=46.0.7",
    "hvac>=2.0.0",
    "boto3>=1.34.0",
    # Knowledge engine (replaces OpenRAG)
    "langchain-docling>=2.0,<3.0",
    "torch", # explicit: forces pytorch-cpu index via [tool.uv.sources], avoids 3.5GB nvidia-cuda wheels
    "torchvision", # explicit: must match torch variant (cpu) to avoid operator registration errors
    "langchain-ollama>=0.2.0",
    "langchain-text-splitters>=1.0,<2.0",
    "beautifulsoup4>=4.12",
    "psycopg[binary]>=3.2",
    "cuga-oak-health; python_version>='3.12'",
    "aiosmtpd",
]

[project.optional-dependencies]
evaluation = ["rapidfuzz"]
e2b = ["e2b-code-interpreter>=2.4.1"]
memory = ["mem0ai[extras]"]
knowledge = []  # knowledge is now built-in, no extra dependencies needed
health = ["cuga-oak-health; python_version>='3.12'"]  # kept for backward compat, now also in core deps
evolve = ["altk-evolve>=1.0.6; python_version>='3.12'"]
# OpenLit (PyPI) pins openai<2; litellm 1.83.x needs openai 2.x — cannot both be core deps for pip/uvx.
# Note: When using observability extra, ensure python-dotenv>=1.1.0 is installed to avoid conflicts
observability = ["openlit>=1.40.3"]

[project.urls]
Homepage = "https://cuga.dev"
Repository = "https://github.com/cuga-project/cuga-agent"

[tool.uv]
package = true
constraint-dependencies = [
    "pillow>=12.2.0",  # CVE-2026-25990 (PSD), FITS decompression bomb (10.3.0-12.1.x)
    "urllib3>=2.6.3",  # CVE-2025-66418, CVE-2025-66471, CVE-2025-50181, CVE-2025-50182, CVE-2026-21441
    "h11>=0.16.0",     # CVE-2025-43859: HTTP request smuggling via chunked encoding
    # setuptools: Multiple vulnerabilities require >=78.1.1, but constrained to <70 due to milvus-lite
    # RISK ACCEPTED: Constrained to <70 due to milvus-lite 2.5.1 dependency on pkg_resources
    # VULNERABILITIES:
    # - GHSA-cx63-2mw6-8hw5 (<70.0.0): Command injection via package URL
    # - Path traversal in PackageIndex (<78.1.1): Arbitrary file write leading to potential RCE
    # JUSTIFICATION:
    # - milvus-lite 2.5.1 (latest) uses pkg_resources for version detection only
    # - pkg_resources removed in setuptools 70+, causing ImportError
    # - Vulnerabilities require attacker control of package URLs or malicious package index
    # - setuptools primarily used at build-time; runtime exposure minimal
    # - easy_install and package_index (vulnerable components) are deprecated
    # MITIGATION:
    # - Monitor for milvus-lite updates that migrate to importlib.metadata
    # - Consider implementing pkg_resources shim if setuptools upgrade becomes critical
    # - Avoid using easy_install or untrusted package indexes
    "setuptools<70",
    # Security updates for transitive dependencies
    "authlib>=1.6.9",      # GHSA-wvwj-cvrp-7pv5, GHSA-m344-f55w-2m6j, GHSA-7wc2-qxgw-g8gg, GHSA-7432-952r-cw78
    "orjson>=3.11.6",      # GHSA-hx9q-6w63-j58v
    "pyasn1>=0.6.3",       # GHSA-jr27-m4p2-rc6r
    "protobuf>=5.29.6",    # GHSA-7gcm-g887-7qv7
    "strawberry-graphql>=0.312.3",  # CVE: Auth bypass + DoS via unlimited WebSocket subscriptions (<=0.312.2)
    "arize-phoenix>=14.3.1",  # Upgrade to use strawberry-graphql>=0.312.3 (fixes auth bypass vulnerability)
]
# litellm 1.83.4 pins python-dotenv==1.0.1; fastmcp needs >=1.1.0 — allow newer for sync/lock only.
override-dependencies = ["python-dotenv>=1.1.0"]

[tool.uv.sources]
torch                 = { index = "pytorch-cpu" }
torchvision           = { index = "pytorch-cpu" }
torchaudio            = { index = "pytorch-cpu" }

[[tool.uv.index]]
name = "pytorch-cpu"
url = "https://download.pytorch.org/whl/cpu"
explicit = true

# NOTE: uv.lock includes graphql-core 3.3.0a12 (pre-release) to fix strawberry-graphql security vulnerability
# RISK ACCEPTED: graphql-core pre-release required by arize-phoenix 14.3.1+ for secure strawberry-graphql
# - Lock file generated with: uv lock --upgrade-package strawberry-graphql --upgrade-package arize-phoenix --prerelease=allow
# - graphql-core is mature; alpha is for new features, not instability
# - Monitor for graphql-core 3.3.0 stable release to remove pre-release dependency

# NLTK WordNet Browser DoS vulnerability (<=3.9.3): NO PATCH AVAILABLE
# RISK ACCEPTED: nltk is dev-only dependency; vulnerable wordnet_app HTTP server is not used in codebase
# - Vulnerability: Unauthenticated remote shutdown via GET /SHUTDOWN%20THE%20SERVER
# - Impact: DoS only, affects nltk.app.wordnet_app when exposed on network
# - Mitigation: wordnet_app is not imported or used anywhere in the project
# - Monitor: Check for NLTK security releases that patch nltk/app/wordnet_app.py

# PyPI openlit declares openai<2; litellm 1.83.x needs openai 2.x. Override for uv lock / Docker / dev only.
[[tool.uv.dependency-metadata]]
name = "openlit"
version = "1.40.3"
requires-dist = [
    "anthropic>=0.42.0,<1.0.0",
    "boto3>=1.34.0,<2.0.0",
    "botocore>=1.34.0,<2.0.0",
    "openai>=1.1.1,<3.0.0",
    "opentelemetry-api>=1.38.0,<2.0.0",
    "opentelemetry-exporter-otlp>=1.38.0,<2.0.0",
    "opentelemetry-instrumentation>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-aiohttp-client>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-asgi>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-django>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-falcon>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-fastapi>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-flask>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-httpx>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-pyramid>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-requests>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-starlette>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-tornado>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-urllib>=0.52b0,<1.0.0",
    "opentelemetry-instrumentation-urllib3>=0.52b0,<1.0.0",
    "opentelemetry-sdk>=1.38.0,<2.0.0",
    "opentelemetry-semantic-conventions>=0.59b0,<1.0.0",
    "pydantic>=2.0.0,<3.0.0",
    "requests>=2.26.0,<3.0.0",
    "schedule>=1.2.2,<2.0.0",
    "xmltodict>=0.13.0,<1.0.0",
]

[tool.setuptools]
package-dir = {"" = "src"}

[tool.setuptools.packages.find]
where = ["src"]
exclude = [
    "frontend_workspaces*"
]

[tool.setuptools.package-data]
cuga = [
    "configurations/**/*.toml",
    "configurations/**/*.md",
    "settings.toml",
    "backend/**/*.jinja2",
    "backend/cuga_graph/nodes/cuga_lite/prompts/*.json",
    "backend/**/*.js",
    "backend/server/demo_setup_utils/*.json",
    "frontend/dist/**",
    "demo_tools/**",
]
scripts = ["*.py"]
system_tests = ["**/*.py", "**/*.yaml", "**/*.sh"]



[project.scripts]
load_specs = "scripts.api_utils.load_openapi_specs:main"
petstore = "scripts.commands:run_petstore"
demo = "scripts.commands:run_demo"
registry = "scripts.commands:run_api_registry"
registry_appworld = "scripts.commands:run_api_registry_appworld"

graph = "scripts.draw_graph:main"
eval_api = "scripts.commands:run_eval_api"
appworld_eval = "evaluation.appworld_eval:run_main"
appworld_setup = "scripts.commands:setup_appworld_environment"
appworld_setup_docker = "scripts.commands:setup_appworld_environment_docker"
cuga = "cuga.cli:app"
code = "evaluation.code_generator:main"
exp = "scripts.eval_gui:main"
digital_sales_mcp = "scripts.commands:run_digital_sales_mcp"
digital_sales_openapi = "scripts.commands:run_digital_sales_openapi"
test_llm = "scripts.commands:test_llm"

[dependency-groups]
dev = [
    "pytz>=2025.1",
    "ruff>=0.9.4",
    "tabulate",
    "beartype",
    "nltk>=3.9.3",
    "termcolor",
    "rapidfuzz",
    "pytest>=8.3.5",
    "pytest-asyncio>=1.1.0",
    "cugaviz",
    "pre-commit>=4.3.0",
    "questionary>=2.1.1",
    "rich>=14.2.0",
    "pip-licenses>=5.5.1",
]
google-genai = [
    "langchain-google-genai>=2.0.11",
]
sandbox = [
    "llm-sandbox>=0.1.3",
]

[tool.pytest.ini_options]
anyio_mode = "auto"
markers = [
    "e2e: end-to-end tests requiring live external services (registry, etc.)",
]