Update requirements.txt

requirements.txt

@@ -1,18 +1,32 @@
 # Pinned to the set that is known to work together. Do NOT loosen these without
-# re-testing the Space: an unpinned resolve gives you a gradio whose async
-# `get_current_user` is called synchronously from `get_config`, so /config
-# returns 500, the health check on :7860 fails, and HF SIGTERMs the container
-# a few seconds after "Running on local URL".
+# re-testing the Space.
 #
-# gradio itself is installed by the Space SDK from `sdk_version` in README.md.
-# It is repeated here only to stop a transitive dependency dragging in another
-# version - keep the two numbers identical.
+# gradio itself is installed by the Space SDK from `sdk_version` in README.md,
+# and the Python version from `python_version` there. Both matter: an unpinned
+# resolve gives you a gradio whose async `get_current_user` is called
+# synchronously from `get_config`, so /config returns 500, the health check on
+# :7860 fails, and HF SIGTERMs the container seconds after startup.
 gradio==6.22.0
 fastapi==0.138.0
 starlette==1.6.0
 
-agent-framework==1.13.0
+# NOT `agent-framework`. That meta-package is `agent-framework-core[all]`, which
+# drags in every provider Microsoft ships - bedrock, cosmos, copilotstudio,
+# durabletask, hyperlight, purview, redis, and `powerfx`, which needs a .NET
+# runtime via pythonnet. ~40 extra distributions, minutes of pip backtracking,
+# and a much larger surface for a version conflict. This app imports exactly two
+# things - `agent_framework` and `agent_framework.openai` - so ask for exactly
+# those two.
+agent-framework-core==1.13.0
+agent-framework-openai==1.13.0
+
+# Pin the OpenTelemetry line as a set. langfuse only asks for >=1.33.1,<2, and
+# left to itself pip mixes an api/sdk from one release with semantic-conventions
+# from another, which fails at import rather than at install.
 langfuse==4.14.3
-opentelemetry-exporter-otlp-proto-http>=1.27.0
+opentelemetry-api==1.43.0
+opentelemetry-sdk==1.43.0
+opentelemetry-exporter-otlp-proto-http==1.43.0
+
 python-dotenv>=1.0.1
 pydantic>=2.9