Remove orphaned agent-team dependencies from requirements.txt #83

New issue

Closed

opened 2026-06-26 16:20:55 +00:00 by amoussa1229 · 1 comment

amoussa1229 commented

2026-06-26 16:20:55 +00:00

(Migrated from github.com)

Context

The agent-team subsystem was removed in #82 (8602614). Several dependencies in requirements.txt were added solely to support it and are now orphaned — nothing in the repo imports them (verified: no imports of cryptography, jwt, fastapi, or uvicorn, and agent_team/ no longer exists).

This surfaced while triaging Dependabot PR #81 (cryptography 48→49), which was closed because it bumps a now-unused, security-sensitive dependency.

Orphaned deps to remove

Dep	Line	Why it was added (now gone)
`fastapi`	11	agent-team HTTP API (`agent_team/api.py`)
`uvicorn`	12	agent-team ASGI server
`PyJWT`	16	RS256 JWT minting in `agent_team/github_app.py`
`cryptography`	18	backed RS256 for PyJWT

Needs verification before removal

requests (line 23) was pinned first-class for the agent-team P3 dispatch seams, but its comment notes it was previously a transitive dep of langchain-community (still present, line 7). Confirm whether to keep the first-class pin or drop back to transitive.
Re-check the stale agent-team references in requirements.txt comments (lines 2, 10, 13–15, 19–22) and clean them up in the same change.

Acceptance

Remove fastapi, uvicorn, PyJWT, cryptography from requirements.txt
Resolve the requests pin question
Clean up stale agent-team comments
CI green

## Context The agent-team subsystem was removed in #82 (`8602614`). Several dependencies in `requirements.txt` were added solely to support it and are now orphaned — nothing in the repo imports them (verified: no imports of `cryptography`, `jwt`, `fastapi`, or `uvicorn`, and `agent_team/` no longer exists). This surfaced while triaging Dependabot PR #81 (cryptography 48→49), which was closed because it bumps a now-unused, security-sensitive dependency. ## Orphaned deps to remove | Dep | Line | Why it was added (now gone) | |---|---|---| | `fastapi` | 11 | agent-team HTTP API (`agent_team/api.py`) | | `uvicorn` | 12 | agent-team ASGI server | | `PyJWT` | 16 | RS256 JWT minting in `agent_team/github_app.py` | | `cryptography` | 18 | backed RS256 for PyJWT | ## Needs verification before removal - `requests` (line 23) was pinned first-class for the agent-team P3 dispatch seams, but its comment notes it was previously a transitive dep of `langchain-community` (still present, line 7). Confirm whether to keep the first-class pin or drop back to transitive. - Re-check the stale agent-team references in `requirements.txt` comments (lines 2, 10, 13–15, 19–22) and clean them up in the same change. ## Acceptance - [ ] Remove `fastapi`, `uvicorn`, `PyJWT`, `cryptography` from `requirements.txt` - [ ] Resolve the `requests` pin question - [ ] Clean up stale agent-team comments - [ ] CI green

amoussa1229 commented

2026-07-14 23:03:12 +00:00

(Migrated from github.com)

agent-team subsystem was decommissioned 2026-06-26 and this repo is being archived — closing as not planned.

This repo is archived. You cannot comment on issues.