# Third-party dependencies for the example suite ONLY. The suite is its own runnable
# project — not a separately published package — but its SOURCE ships inside
# the allus-company-data artifact (mapped in as allus_company_data.examples), so this
# file has to work from BOTH a repository checkout and an installed copy.
#
# The SDK itself is deliberately NOT listed here: bin/start.py installs it by context
# — editable from .. in a checkout, or the matching released version when the suite runs
# from inside an installed package (where .. is site-packages, not a project root, so an
# `-e ..` line could never resolve). See _sdk_requirement().
#
#   - Authlib: a standard, well-known OIDC client for the identity OIDC scenario
#     (5, a compliance demo). Supports discovery, PKCE S256, client_secret_post,
#     issuer override, and id_token verification — sessionless, exactly what the demo
#     needs. Declared here only; never a dependency of the published SDK.
#   - requests: the examples inject a small network-timeout Session into the SDK's
#     HttpClient (short-cycled polls + the webhook change-feed fallback) so one
#     blackholed request cannot pin the single-worker server (requests is already an
#     SDK dependency; pinned here so the example is self-describing).
authlib>=1.3
requests>=2.31
