# LEDMatrix Web Interface Dependencies
# Compatible with Python 3.11, 3.12 and 3.13; CI tests 3.11 and 3.13
# Tested on Raspbian OS 12 (Bookworm) and 13 (Trixie)

# Web framework
flask>=3.1.3,<4.0.0
werkzeug>=3.1.6,<4.0.0  # Flask transitive; pinned to keep a security floor above Flask's own >=3.1.0
flask-limiter>=3.5.0,<4.0.0  # Rate limiting (prevent accidental abuse)
flask-compress>=1.14  # gzip/brotli response compression (big win for the large JS/HTML over WiFi)
jinja2>=3.1.6,<4.0.0  # Flask transitive, but imported directly (TemplateNotFound); 3.1.6 is the security floor — earlier 3.1.x has sandbox breakouts
markupsafe>=2.1.0,<4.0.0  # Flask transitive, but imported directly (escape)

# WebSocket support: intentionally NOT declared here. The web interface
# uses Server-Sent Events, and plugins that need Socket.IO (e.g.
# ledmatrix-music) declare it in their own requirements.txt, which the
# plugin store installs.

# Image processing
Pillow>=12.2.0,<13.0.0

# System monitoring
psutil>=6.0.0,<7.0.0

# Font rendering
freetype-py>=2.5.1,<3.0.0

# Numerical operations
# NumPy 1.24+ required for Python 3.12+ compatibility (compatible with 2.x)
numpy>=1.24.0

# HTTP requests
requests>=2.33.0,<3.0.0

# Timezone handling (must match main requirements)
pytz>=2024.2,<2027.0

# Spotify integration (must match main requirements)
spotipy>=2.25.2,<3.0.0

# Plugin-era note: timezonefinder, geopy, the google-api client stack,
# unidecode, icalevents and python-dateutil used to live here for the
# built-in weather/calendar/music displays. Those are store plugins now
# and declare their own dependencies, which the plugin store installs.
