# Runtime dependencies for the cloud-mcp Cloud Run image (the adjacent Dockerfile).
# Direct pins only; transitive deps are resolved at build time and are not locked
# here. A dedicated Dependabot entry (pip ecosystem, this directory, in
# .github/dependabot.yml) proposes bumps to these pins as reviewed PRs.
#
# `airbyte` must be a release that contains the OIDC client-storage factory hook
# (`AIRBYTE_MCP_OIDC_CLIENT_STORAGE_FACTORY`), i.e. >= 0.53.0 -- the cloud-mcp
# durability wiring below (the factory module + Pulumi Firestore env) is inert on
# older releases that lack that hook. 0.53.1 also carries the interactive-OIDC
# `openid` scope fix (airbytehq/PyAirbyte#1091) that downstream Cloud APIs require.
airbyte==0.53.1
fastmcp-extensions==0.14.0
# Firestore-backed durable OAuth state for the interactive OIDC path. `build_store`
# in `cloud_mcp_oidc_storage.py` constructs a Fernet-encrypted `FirestoreStore`;
# the `[firestore]` extra pulls the Google Cloud Firestore client.
py-key-value-aio[firestore]>=0.4.4,<0.5.0
