---
title: "CHR workflows — N1 IT Landscape"
---

N1 IT Landscape — The Blueprint · CF-Access internal

# CHR workflows

N1 IT Landscape · Owner: Arun Venkataraman · source of truth: markdown SSOT

# N1 IT Landscape — CHR workflows

> **CURRENT-STATE** as of **2026-06-09** · part of the **N1 IT Landscape** (start at **[Overview](/landscape/overview/)**). Owner: **Arun Venkataraman** (Principal Engineer).

* * *

_Comprehensive Health Report generation: the forge supervisor and runner, the report workflows, and the document manager._

> Per-repository dependency manifest (Python / Go / Node / Terraform / Docker / Helm / GitHub-Actions), captured from fresh `develop` clones. Back to the [BoM hub](/landscape/dependencies/00-bom/).

* * *

#### `archive-chr` — [main@f013a9f0]

_(no dependency manifests found in this repo)_

#### `chart-service` — [develop@1d91fe84]

**Python — pyproject** (4)

Package | Version  
---|---  
beautifulsoup4 | >=4.13.4  
playwright | >=1.46.0  
pydantic | >=2.10.6  
pyecharts | >=2.0.8  
  
#### `easy-chr` — [main@2add66e8]

**Node — server/package.json** (69 deps, 8 dev)

Dependency | Version  
---|---  
@a2a-js/sdk | ^0.3.7  
@aws-sdk/client-s3 | ^3.983.0  
@aws-sdk/lib-storage | ^3.983.0  
@aws-sdk/s3-request-presigner | ^3.983.0  
@fastify/cors | ^11.2.0  
@fastify/multipart | ^9.3.0  
@fastify/static | ^9.0.0  
@google-cloud/logging | ^11.2.1  
@google-cloud/opentelemetry-cloud-monitoring-exporter | ^0.21.0  
@google-cloud/opentelemetry-cloud-trace-exporter | ^3.0.0  
@google-cloud/storage | ^7.19.0  
@google/genai | ^1.34.0  
@iarna/toml | ^2.2.5  
@joshua.litt/get-ripgrep | ^0.0.3  
@lydell/node-pty | ^1.2.0-beta.3  
@modelcontextprotocol/sdk | ^1.26.0  
@opentelemetry/api | ^1.9.0  
@opentelemetry/exporter-logs-otlp-grpc | ^0.208.0  
@opentelemetry/exporter-logs-otlp-http | ^0.208.0  
@opentelemetry/exporter-metrics-otlp-grpc | ^0.208.0  
@opentelemetry/exporter-metrics-otlp-http | ^0.208.0  
@opentelemetry/exporter-trace-otlp-grpc | ^0.208.0  
@opentelemetry/exporter-trace-otlp-http | ^0.208.0  
@opentelemetry/instrumentation-http | ^0.208.0  
@opentelemetry/resource-detector-gcp | ^0.44.0  
@opentelemetry/sdk-node | ^0.208.0  
@types/glob | ^8.1.0  
@types/html-to-text | ^9.0.4  
@types/js-yaml | ^4.0.9  
@types/shell-quote | ^1.7.5  
@types/uuid | ^10.0.0  
@xterm/headless | ^6.0.0  
ajv | ^8.18.0  
ajv-formats | ^3.0.1  
chardet | ^2.1.1  
diff | ^8.0.4  
dotenv | ^17.2.3  
fast-levenshtein | ^3.0.0  
fastify | ^5.8.5  
fdir | ^6.5.0  
fzf | ^0.5.2  
glob | ^13.0.0  
google-auth-library | ^10.5.0  
html-to-text | ^9.0.5  
https-proxy-agent | ^7.0.6  
ignore | ^7.0.5  
js-yaml | ^4.1.1  
langfuse | 3.38.6  
marked | ^17.0.1  
mime | ^4.1.0  
mnemonist | ^0.40.3  
nunjucks | ^3.2.4  
open | ^11.0.0  
pdf-parse | ^2.4.5  
pdf-to-img | ^5.0.0  
picomatch | ^4.0.4  
pino | ^10.1.0  
pino-pretty | ^13.1.3  
postcss | ^8.5.6  
read-package-up | ^12.0.0  
shell-quote | ^1.8.3  
simple-git | ^3.32.3  
strip-ansi | ^7.1.2  
tailwindcss | ^3.4.19  
tree-sitter-bash | ^0.25.1  
undici | ^7.24.0  
uuid | ^13.0.0  
web-tree-sitter | ^0.26.3  
zod | ^4.3.5  
  
_devDependencies:_

Dev dependency | Version  
---|---  
@types/node | ^25.0.3  
@types/nunjucks | ^3.2.6  
@types/pdf-parse | ^1.1.5  
ts-node | ^10.9.2  
tsconfig-paths | ^4.2.0  
tsx | ^4.21.0  
typescript | ^5.9.3  
vitest | ^4.0.18  
**Node — server/vendor/gemini-cli/package.json** (3 deps, 42 dev) · `engines: {'node': '>=20.0.0'}`

Dependency | Version  
---|---  
ink | npm:@jrichman/ink@6.4.6  
latest-version | ^9.0.0  
simple-git | ^3.28.0  
  
_devDependencies:_

Dev dependency | Version  
---|---  
@octokit/rest | ^22.0.0  
@types/marked | ^5.0.2  
@types/mime-types | ^3.0.1  
@types/minimatch | ^5.1.2  
@types/mock-fs | ^4.13.4  
@types/prompts | ^2.4.9  
@types/react | ^19.2.0  
@types/react-dom | ^19.2.0  
@types/shell-quote | ^1.7.5  
@vitest/coverage-v8 | ^3.1.1  
@vitest/eslint-plugin | ^1.3.4  
cross-env | ^7.0.3  
depcheck | ^1.4.7  
esbuild | ^0.25.0  
esbuild-plugin-wasm | ^1.1.0  
eslint | ^9.24.0  
eslint-config-prettier | ^10.1.2  
eslint-plugin-headers | ^1.3.3  
eslint-plugin-import | ^2.31.0  
eslint-plugin-react | ^7.37.5  
eslint-plugin-react-hooks | ^5.2.0  
glob | ^12.0.0  
globals | ^16.0.0  
google-artifactregistry-auth | ^3.4.0  
husky | ^9.1.7  
ink-testing-library | ^4.0.0  
json | ^11.0.0  
lint-staged | ^16.1.6  
memfs | ^4.42.0  
mnemonist | ^0.40.3  
mock-fs | ^5.5.0  
msw | ^2.10.4  
npm-run-all | ^4.1.5  
prettier | ^3.5.3  
react-devtools-core | ^6.1.2  
semver | ^7.7.2  
strip-ansi | ^7.1.2  
ts-prune | ^0.10.3  
tsx | ^4.20.3  
typescript-eslint | ^8.30.1  
vitest | ^3.2.4  
yargs | ^17.7.2  
**Node — server/vendor/gemini-cli/third_party/get-ripgrep/package.json** (8 deps, 6 dev)

Dependency | Version  
---|---  
@lvce-editor/verror | ^1.6.0  
execa | ^9.5.2  
extract-zip | ^2.0.1  
fs-extra | ^11.3.0  
got | ^14.4.5  
path-exists | ^5.0.0  
tempy | ^3.1.0  
xdg-basedir | ^5.1.0  
  
_devDependencies:_

Dev dependency | Version  
---|---  
@types/fs-extra | ^11.0.4  
@types/jest | ^29.5.14  
@types/node | ^22.13.0  
jest | ^29.7.0  
prettier | ^3.4.2  
typescript | ^5.7.3  
**Node — server/vendor/gemini-cli/packages/vscode-ide-companion/package.json** (4 deps, 12 dev) · `engines: {'vscode': '^1.99.0'}`

Dependency | Version  
---|---  
@modelcontextprotocol/sdk | ^1.23.0  
cors | ^2.8.5  
express | ^5.1.0  
zod | ^3.25.76  
  
_devDependencies:_

Dev dependency | Version  
---|---  
@types/cors | ^2.8.19  
@types/express | ^5.0.3  
@types/node | 20.x  
@types/vscode | ^1.99.0  
@typescript-eslint/eslint-plugin | ^8.31.1  
@typescript-eslint/parser | ^8.31.1  
@vscode/vsce | ^3.6.0  
esbuild | ^0.25.3  
eslint | ^9.25.1  
npm-run-all2 | ^8.0.2  
typescript | ^5.8.3  
vitest | ^3.2.4  
**Node — server/vendor/gemini-cli/packages/test-utils/package.json** (0 deps, 1 dev) · `engines: {'node': '>=20'}`

_devDependencies:_

Dev dependency | Version  
---|---  
typescript | ^5.3.3  
**Node — server/vendor/gemini-cli/packages/core/package.json** (48 deps, 9 dev) · `engines: {'node': '>=20'}`

Dependency | Version  
---|---  
@a2a-js/sdk | ^0.3.7  
@google-cloud/logging | ^11.2.1  
@google-cloud/opentelemetry-cloud-monitoring-exporter | ^0.21.0  
@google-cloud/opentelemetry-cloud-trace-exporter | ^3.0.0  
@google/genai | 1.30.0  
@iarna/toml | ^2.2.5  
@joshua.litt/get-ripgrep | ^0.0.3  
@modelcontextprotocol/sdk | ^1.23.0  
@opentelemetry/api | ^1.9.0  
@opentelemetry/exporter-logs-otlp-grpc | ^0.203.0  
@opentelemetry/exporter-logs-otlp-http | ^0.203.0  
@opentelemetry/exporter-metrics-otlp-grpc | ^0.203.0  
@opentelemetry/exporter-metrics-otlp-http | ^0.203.0  
@opentelemetry/exporter-trace-otlp-grpc | ^0.203.0  
@opentelemetry/exporter-trace-otlp-http | ^0.203.0  
@opentelemetry/instrumentation-http | ^0.203.0  
@opentelemetry/resource-detector-gcp | ^0.40.0  
@opentelemetry/sdk-node | ^0.203.0  
@types/glob | ^8.1.0  
@types/html-to-text | ^9.0.4  
@xterm/headless | 5.5.0  
ajv | ^8.17.1  
ajv-formats | ^3.0.0  
chardet | ^2.1.0  
diff | ^7.0.0  
fast-levenshtein | ^2.0.6  
fdir | ^6.4.6  
fzf | ^0.5.2  
glob | ^12.0.0  
google-auth-library | ^9.11.0  
html-to-text | ^9.0.5  
https-proxy-agent | ^7.0.6  
ignore | ^7.0.0  
js-yaml | ^4.1.1  
marked | ^15.0.12  
mime | 4.0.7  
mnemonist | ^0.40.3  
open | ^10.1.2  
picomatch | ^4.0.1  
read-package-up | ^11.0.0  
shell-quote | ^1.8.3  
simple-git | ^3.28.0  
strip-ansi | ^7.1.0  
tree-sitter-bash | ^0.25.0  
undici | ^7.10.0  
uuid | ^13.0.0  
web-tree-sitter | ^0.25.10  
zod | ^3.25.76  
  
_devDependencies:_

Dev dependency | Version  
---|---  
@google/gemini-cli-test-utils | file:../test-utils  
@types/diff | ^7.0.2  
@types/fast-levenshtein | ^0.0.4  
@types/js-yaml | ^4.0.9  
@types/minimatch | ^5.1.2  
@types/picomatch | ^4.0.1  
msw | ^2.3.4  
typescript | ^5.3.3  
vitest | ^3.1.1  
**Node — server/vendor/gemini-cli/packages/cli/package.json** (37 deps, 19 dev) · `engines: {'node': '>=20'}`

Dependency | Version  
---|---  
@agentclientprotocol/sdk | ^0.11.0  
@google/gemini-cli-core | file:../core  
@google/genai | 1.30.0  
@iarna/toml | ^2.2.5  
@modelcontextprotocol/sdk | ^1.23.0  
@types/update-notifier | ^6.0.8  
ansi-regex | ^6.2.2  
clipboardy | ^5.0.0  
command-exists | ^1.2.9  
comment-json | ^4.2.5  
diff | ^7.0.0  
dotenv | ^17.1.0  
extract-zip | ^2.0.1  
fzf | ^0.5.2  
glob | ^12.0.0  
highlight.js | ^11.11.1  
ink | npm:@jrichman/ink@6.4.6  
ink-gradient | ^3.0.0  
ink-spinner | ^5.0.0  
latest-version | ^9.0.0  
lowlight | ^3.3.0  
mnemonist | ^0.40.3  
open | ^10.1.2  
prompts | ^2.4.2  
react | ^19.2.0  
read-package-up | ^11.0.0  
shell-quote | ^1.8.3  
simple-git | ^3.28.0  
string-width | ^8.1.0  
strip-ansi | ^7.1.0  
strip-json-comments | ^3.1.1  
tar | ^7.5.2  
tinygradient | ^1.1.5  
undici | ^7.10.0  
wrap-ansi | 9.0.2  
yargs | ^17.7.2  
zod | ^3.23.8  
  
_devDependencies:_

Dev dependency | Version  
---|---  
@babel/runtime | ^7.27.6  
@google/gemini-cli-test-utils | file:../test-utils  
@types/archiver | ^6.0.3  
@types/command-exists | ^1.2.3  
@types/diff | ^7.0.2  
@types/dotenv | ^6.1.1  
@types/node | ^20.11.24  
@types/react | ^19.2.0  
@types/react-dom | ^19.2.0  
@types/semver | ^7.7.0  
@types/shell-quote | ^1.7.5  
@types/tar | ^6.1.13  
@types/yargs | ^17.0.32  
archiver | ^7.0.1  
ink-testing-library | ^4.0.0  
pretty-format | ^30.0.2  
react-dom | ^19.2.0  
typescript | ^5.3.3  
vitest | ^3.1.1  
**Node — server/vendor/gemini-cli/packages/cli/src/commands/extensions/examples/mcp-server/package.json** (2 deps, 2 dev)

Dependency | Version  
---|---  
@modelcontextprotocol/sdk | ^1.23.0  
zod | ^3.22.4  
  
_devDependencies:_

Dev dependency | Version  
---|---  
@types/node | ^20.11.25  
typescript | ~5.4.5  
**Node — server/vendor/gemini-cli/packages/a2a-server/package.json** (8 deps, 8 dev) · `engines: {'node': '>=20'}`

Dependency | Version  
---|---  
@a2a-js/sdk | ^0.3.7  
@google-cloud/storage | ^7.16.0  
@google/gemini-cli-core | file:../core  
express | ^5.1.0  
fs-extra | ^11.3.0  
tar | ^7.5.2  
uuid | ^13.0.0  
winston | ^3.17.0  
  
_devDependencies:_

Dev dependency | Version  
---|---  
@types/express | ^5.0.3  
@types/fs-extra | ^11.0.4  
@types/supertest | ^6.0.3  
@types/tar | ^6.1.13  
dotenv | ^16.4.5  
supertest | ^7.1.4  
typescript | ^5.3.3  
vitest | ^3.1.1  
**Node — client/package.json** (2 deps, 12 dev)

Dependency | Version  
---|---  
react | ^19.2.0  
react-dom | ^19.2.0  
  
_devDependencies:_

Dev dependency | Version  
---|---  
@eslint/js | ^9.39.1  
@types/node | ^24.10.1  
@types/react | ^19.2.5  
@types/react-dom | ^19.2.3  
@vitejs/plugin-react | ^5.1.1  
eslint | ^9.39.1  
eslint-plugin-react-hooks | ^7.0.1  
eslint-plugin-react-refresh | ^0.4.24  
globals | ^16.5.0  
typescript | ~5.9.3  
typescript-eslint | ^8.46.4  
vite | ^7.3.2  
  
**Docker base images** (3): `docker.io/library/node:20-slim`, `node:20-alpine`

**GitHub Actions pinned** (6)

  * `actions/checkout@v4`
  * `aws-actions/configure-aws-credentials@v4`
  * `docker/build-push-action@v5`
  * `docker/login-action@v3`
  * `docker/setup-buildx-action@v3`
  * `n1healthcare/github-action-deployment-approval@main`

#### `forge-runner` — [develop@73809ce0]

**Python — pyproject** (39)

Package | Version  
---|---  
agno[anthropic | ,openai,sqlite,async_postgres]==2.6.9  
anthropic | ==0.94.1  
beautifulsoup4 | >=4.14.3  
boto3 | >=1.35  
curl-cffi | ==0.15.0  
deepagents | ==0.4.11  
fastapi | >=0.136  
filelock | ==3.25.2  
google-genai | ==1.75.0  
httpx | >=0.27  
jinja2 | ==3.1.6  
langchain | ==1.2.15  
langchain-anthropic | ==1.4.0  
langchain-deepseek | ==1.0.1  
langchain-google-genai | ==4.2.2  
langchain-openai | ==1.1.14  
langfuse | ==3.14.6  
langgraph | ==1.1.6  
langgraph-checkpoint-postgres | ==3.1.0  
langgraph-checkpoint-sqlite | ==3.0.3  
markdown-it-py | >=4.0  
markupsafe | ==3.0.3  
mcp[cli] | >=1.7.0  
n1-api-client | @ https://artifacts.n1-research.com/n1r-api-client/n1_api_client-0.1.28-py3-none-any.whl  
n1r-chr[pandas] | @ https://artifacts.n1-research.com/n1r-chr/n1r_chr-2026.4.30-py3-none-any.whl  
openinference-instrumentation-agno | ==0.1.33  
opentelemetry-api | >=1.40  
opentelemetry-exporter-otlp-proto-grpc | >=1.40  
opentelemetry-sdk | >=1.40  
psycopg[binary] | ==3.3.4  
pydantic | ==2.12.5  
pydantic-settings | >=2.7  
pypdf | ==6.10.2  
pytest | >=9.0.3  
pyyaml | ==6.0.3  
structlog | ==25.5.0  
trafilatura | ==2.0.0  
typst | >=0.13,<0.14  
uvicorn | >=0.47,<0.48  
**Python — uv.lock** (156)

Package | Version  
---|---  
agno | 2.6.9  
aiosqlite | 0.22.1  
annotated-doc | 0.0.4  
annotated-types | 0.7.0  
anthropic | 0.94.1  
anyio | 4.12.1  
asyncpg | 0.31.0  
attrs | 25.4.0  
babel | 2.18.0  
backoff | 2.2.1  
beautifulsoup4 | 4.14.3  
boto3 | 1.42.65  
botocore | 1.42.65  
bracex | 2.6  
certifi | 2026.2.25  
cffi | 2.0.0  
charset-normalizer | 3.4.6  
click | 8.1.8  
colorama | 0.4.6  
courlan | 1.3.2  
cryptography | 46.0.7  
curl-cffi | 0.15.0  
dateparser | 1.4.0  
deepagents | 0.4.11  
distro | 1.9.0  
docstring-parser | 0.17.0  
fastapi | 0.136.3  
filelock | 3.25.2  
filetype | 1.2.0  
forge-runner | 0.1.0  
gitdb | 4.0.12  
gitpython | 3.1.50  
google-auth | 2.49.1  
google-genai | 1.75.0  
googleapis-common-protos | 1.73.0  
greenlet | 3.3.2  
grpcio | 1.78.0  
h11 | 0.16.0  
h2 | 4.3.0  
hpack | 4.1.0  
htmldate | 1.9.4  
httpcore | 1.0.9  
httpx | 0.28.1  
httpx-sse | 0.4.3  
hyperframe | 6.1.0  
idna | 3.11  
importlib-metadata | 8.5.0  
iniconfig | 2.3.0  
jinja2 | 3.1.6  
jiter | 0.13.0  
jmespath | 1.1.0  
jsonpatch | 1.33  
jsonpointer | 3.1.1  
jsonschema | 4.23.0  
jsonschema-specifications | 2025.9.1  
justext | 3.0.2  
langchain | 1.2.15  
langchain-anthropic | 1.4.0  
langchain-core | 1.3.3  
langchain-deepseek | 1.0.1  
langchain-google-genai | 4.2.2  
langchain-openai | 1.1.14  
langchain-protocol | 0.0.15  
langfuse | 3.14.6  
langgraph | 1.1.6  
langgraph-checkpoint | 4.1.0  
langgraph-checkpoint-postgres | 3.1.0  
langgraph-checkpoint-sqlite | 3.0.3  
langgraph-prebuilt | 1.0.10  
langgraph-sdk | 0.3.12  
langsmith | 0.7.31  
lxml | 6.1.0  
lxml-html-clean | 0.4.4  
markdown-it-py | 4.0.0  
markupsafe | 3.0.3  
mcp | 1.26.0  
mdurl | 0.1.2  
n1-api-client | 0.1.28  
n1r-chr | 2026.4.30  
numpy | 2.4.3  
openai | 2.30.0  
openinference-instrumentation | 0.1.51  
openinference-instrumentation-agno | 0.1.33  
openinference-semantic-conventions | 0.1.29  
opentelemetry-api | 1.40.0  
opentelemetry-exporter-otlp-proto-common | 1.40.0  
opentelemetry-exporter-otlp-proto-grpc | 1.40.0  
opentelemetry-exporter-otlp-proto-http | 1.40.0  
opentelemetry-instrumentation | 0.61b0  
opentelemetry-proto | 1.40.0  
opentelemetry-sdk | 1.40.0  
opentelemetry-semantic-conventions | 0.61b0  
orjson | 3.11.7  
ormsgpack | 1.12.2  
packaging | 25.0  
pandas | 3.0.1  
pluggy | 1.6.0  
protobuf | 6.33.5  
psycopg | 3.3.4  
psycopg-binary | 3.3.4  
psycopg-pool | 3.3.1  
pyasn1 | 0.6.3  
pyasn1-modules | 0.4.2  
pycparser | 3.0  
pydantic | 2.12.5  
pydantic-core | 2.41.5  
pydantic-settings | 2.13.1  
pygments | 2.19.2  
pyjwt | 2.11.0  
pypdf | 6.10.2  
pytest | 9.0.3  
pytest-asyncio | 1.3.0  
python-dateutil | 2.9.0.post0  
python-dotenv | 1.2.2  
python-multipart | 0.0.27  
pytz | 2026.1.post1  
pywin32 | 311  
pyyaml | 6.0.3  
referencing | 0.37.0  
regex | 2026.2.28  
requests | 2.33.0  
requests-toolbelt | 1.0.0  
rich | 14.3.3  
rpds-py | 0.30.0  
ruff | 0.14.14  
s3transfer | 0.16.0  
shellingham | 1.5.4  
six | 1.17.0  
smmap | 5.0.3  
sniffio | 1.3.1  
soupsieve | 2.8.3  
sqlalchemy | 2.0.48  
sqlite-vec | 0.1.9  
sse-starlette | 3.3.2  
starlette | 0.52.1  
structlog | 25.5.0  
tenacity | 9.1.4  
tiktoken | 0.12.0  
tld | 0.13.2  
tqdm | 4.67.3  
trafilatura | 2.0.0  
typer | 0.23.1  
typing-extensions | 4.15.0  
typing-inspection | 0.4.2  
typst | 0.13.7  
tzdata | 2025.3  
tzlocal | 5.3.1  
urllib3 | 2.7.0  
uuid-utils | 0.14.1  
uvicorn | 0.47.0  
wcmatch | 10.1  
websockets | 16.0  
wrapt | 1.17.3  
xxhash | 3.6.0  
zipp | 3.23.0  
zstandard | 0.25.0  
  
**Docker base images** (1): `191421493115.dkr.ecr.us-east-2.amazonaws.com/docker-hub/library/python:3.12-slim@sha256:520153e2deb359602c9cffd84e491e3431d76e7bf95a3255c9ce9433b76ab99a`

**GitHub Actions pinned** (5)

  * `n1healthcare/bastion/.github/actions/checkout@main`
  * `n1healthcare/bastion/.github/actions/setup-uv@main`
  * `n1healthcare/bastion/.github/workflows/deploy.yml@main`
  * `n1healthcare/bastion/.github/workflows/release_notes.yml@main`
  * `n1healthcare/bastion/.github/workflows/supply_chain_precheck.yml@main`

#### `forge-sentinel` — [develop@a8c6ea72]

**Python — pyproject** (14)

Package | Version  
---|---  
filelock | >=3.0  
httpx | >=0.28.1  
httpx | >=0.24  
kubernetes | >=35.0.0  
n1-api-client | @ https://artifacts.n1-research.com/n1r-api-client/n1_api_client-0.1.27-py3-none-any.whl  
n1r-phoenix | @ https://artifacts.n1-research.com/n1r-phoenix/n1r_phoenix-5.0.0-py3-none-any.whl  
openai | >=1.0  
opentelemetry-api | >=1.39  
opentelemetry-exporter-otlp-proto-grpc | >=1.39  
opentelemetry-sdk | >=1.39  
pydantic | >=2.0  
pydantic-settings | >=2.0  
tenacity | >=9.0  
zstandard | >=0.20  
**Python — requirements** (2)

Package | Version  
---|---  
httpx | ==0.28.1  
n1-api-client | —  
**Python — uv.lock** (149)

Package | Version  
---|---  
aiohappyeyeballs | 2.6.1  
aiohttp | 3.13.4  
aiosignal | 1.4.0  
annotated-doc | 0.0.4  
annotated-types | 0.7.0  
anyio | 4.12.1  
attrs | 25.4.0  
backoff | 2.2.1  
beautifulsoup4 | 4.14.3  
boto3 | 1.42.55  
botocore | 1.42.55  
brotli | 1.2.0  
brotlicffi | 1.2.0.0  
cairocffi | 1.7.1  
cairosvg | 2.8.2  
certifi | 2026.1.4  
cffi | 2.0.0  
charset-normalizer | 3.4.4  
click | 8.3.1  
colorama | 0.4.6  
contourpy | 1.3.3  
cryptography | 46.0.7  
cssselect2 | 0.9.0  
cycler | 0.12.1  
defusedxml | 0.7.1  
distro | 1.9.0  
durationpy | 0.10  
fastuuid | 0.14.0  
filelock | 3.24.3  
fonttools | 4.61.1  
forge-sentinel | 1.0.0  
frozenlist | 1.8.0  
fsspec | 2026.2.0  
google-api-core | 2.30.0  
google-auth | 2.48.0  
google-cloud-core | 2.5.0  
google-cloud-storage | 3.9.0  
google-crc32c | 1.8.0  
google-resumable-media | 2.8.0  
googleapis-common-protos | 1.72.0  
grpcio | 1.78.0  
h11 | 0.16.0  
hf-xet | 1.3.0  
hiredis | 3.3.0  
httpcore | 1.0.9  
httpx | 0.28.1  
huggingface-hub | 1.4.1  
idna | 3.11  
importlib-metadata | 8.7.1  
iniconfig | 2.3.0  
jinja2 | 3.1.6  
jiter | 0.13.0  
jmespath | 1.1.0  
jsonpatch | 1.33  
jsonpointer | 3.0.0  
jsonschema | 4.26.0  
jsonschema-specifications | 2025.9.1  
kiwisolver | 1.4.9  
kubernetes | 35.0.0  
langchain | 1.2.10  
langchain-core | 1.2.28  
langfuse | 3.3.2  
langgraph | 1.0.10rc1  
langgraph-checkpoint | 4.0.0  
langgraph-prebuilt | 1.0.8  
langgraph-sdk | 0.3.8  
langsmith | 0.7.31  
litellm | 1.83.0  
markdown-it-py | 4.0.0  
markupsafe | 3.0.3  
matplotlib | 3.10.8  
mdurl | 0.1.2  
multidict | 6.7.1  
n1-api-client | 0.1.27  
n1-document-manager | 0.1.0  
n1r-phoenix | 5.0.0  
numpy | 2.4.2  
oauthlib | 3.3.1  
openai | 2.23.0  
opentelemetry-api | 1.39.1  
opentelemetry-exporter-otlp | 1.39.1  
opentelemetry-exporter-otlp-proto-common | 1.39.1  
opentelemetry-exporter-otlp-proto-grpc | 1.39.1  
opentelemetry-exporter-otlp-proto-http | 1.39.1  
opentelemetry-proto | 1.39.1  
opentelemetry-sdk | 1.39.1  
opentelemetry-semantic-conventions | 0.60b1  
orjson | 3.11.7  
ormsgpack | 1.12.2  
packaging | 25.0  
pandas | 3.0.1  
pillow | 12.2.0  
pluggy | 1.6.0  
propcache | 0.4.1  
proto-plus | 1.27.1  
protobuf | 6.33.5  
pyasn1 | 0.6.3  
pyasn1-modules | 0.4.2  
pycparser | 3.0  
pydantic | 2.12.5  
pydantic-core | 2.41.5  
pydantic-settings | 2.13.1  
pydyf | 0.12.1  
pygments | 2.19.2  
pymupdf | 1.27.1  
pyparsing | 3.3.2  
pyphen | 0.17.2  
pytest | 9.0.3  
pytest-asyncio | 1.3.0  
python-dateutil | 2.9.0.post0  
python-dotenv | 1.2.1  
pyyaml | 6.0.3  
redis | 7.1.1  
referencing | 0.37.0  
regex | 2026.2.19  
requests | 2.33.0  
requests-oauthlib | 2.0.0  
requests-toolbelt | 1.0.0  
rich | 14.3.3  
rpds-py | 0.30.0  
rsa | 4.9.1  
s3transfer | 0.16.0  
shellingham | 1.5.4  
six | 1.17.0  
sniffio | 1.3.1  
soupsieve | 2.8.3  
structlog | 25.5.0  
tenacity | 9.1.4  
tiktoken | 0.12.0  
tinycss2 | 1.5.1  
tinyhtml5 | 2.0.0  
tokenizers | 0.22.2  
tqdm | 4.67.3  
typer | 0.24.1  
typer-slim | 0.24.0  
typing-extensions | 4.15.0  
typing-inspection | 0.4.2  
tzdata | 2025.3  
urllib3 | 2.6.3  
uuid-utils | 0.14.1  
weasyprint | 68.1  
webencodings | 0.5.1  
websocket-client | 1.9.0  
wrapt | 1.17.3  
xxhash | 3.6.0  
yarl | 1.22.0  
zipp | 3.23.0  
zopfli | 0.4.1  
zstandard | 0.25.0  
  
**Docker base images** (2): `191421493115.dkr.ecr.us-east-2.amazonaws.com/docker-hub/library/python:3.14-slim@sha256:5b3879b6f3cb77e712644d50262d05a7c146b7312d784a18eff7ff5462e77033`

**GitHub Actions pinned** (7)

  * `actions/cache@v4`
  * `n1healthcare/bastion/.github/actions/checkout@main`
  * `n1healthcare/bastion/.github/actions/setup-python@main`
  * `n1healthcare/bastion/.github/actions/setup-uv@main`
  * `n1healthcare/bastion/.github/workflows/deploy.yml@main`
  * `n1healthcare/bastion/.github/workflows/release_notes.yml@main`
  * `n1healthcare/bastion/.github/workflows/supply_chain_precheck.yml@main`

#### `n1-document-manager` — [develop@170671cc]

**Python — pyproject** (4)

Package | Version  
---|---  
boto3 | >=1.28.0  
google-cloud-storage | >=2.10.0  
pydantic | >=2.0.0  
pydantic-settings | >=2.0.0  
**Python — uv.lock** (50)

Package | Version  
---|---  
annotated-types | 0.7.0  
boto3 | 1.42.41  
botocore | 1.42.41  
certifi | 2026.1.4  
cffi | 2.0.0  
charset-normalizer | 3.4.4  
colorama | 0.4.6  
cryptography | 46.0.5  
exceptiongroup | 1.3.1  
google-api-core | 2.29.0  
google-auth | 2.48.0  
google-cloud-core | 2.5.0  
google-cloud-storage | 3.9.0  
google-crc32c | 1.8.0  
google-resumable-media | 2.8.0  
googleapis-common-protos | 1.72.0  
idna | 3.11  
iniconfig | 2.3.0  
jinja2 | 3.1.6  
jmespath | 1.1.0  
markupsafe | 3.0.3  
moto | 5.1.20  
n1r-document-manager | 0.1.0  
packaging | 26.0  
pluggy | 1.6.0  
proto-plus | 1.27.1  
protobuf | 6.33.5  
py-partiql-parser | 0.6.3  
pyasn1 | 0.6.2  
pyasn1-modules | 0.4.2  
pycparser | 3.0  
pydantic | 2.12.5  
pydantic-core | 2.41.5  
pydantic-settings | 2.12.0  
pygments | 2.19.2  
pytest | 9.0.2  
python-dateutil | 2.9.0.post0  
python-dotenv | 1.2.1  
pyyaml | 6.0.3  
requests | 2.32.5  
responses | 0.25.8  
rsa | 4.9.1  
s3transfer | 0.16.0  
six | 1.17.0  
tomli | 2.4.0  
typing-extensions | 4.15.0  
typing-inspection | 0.4.2  
urllib3 | 2.6.3  
werkzeug | 3.1.6  
xmltodict | 1.0.2  
**GitHub Actions pinned** (2)

  * `actions/checkout@v4`
  * `actions/setup-python@v5`

#### `report-evaluation-service` — [develop@2e8816fe]

**Python — pyproject** (4)

Package | Version  
---|---  
beautifulsoup4 | >=4.12.0  
httpx | >=0.27.0  
jinja2 | >=3.1.0  
pdfplumber | >=0.10.0  
**Python — uv.lock** (42)

Package | Version  
---|---  
annotated-types | 0.7.0  
anyio | 4.12.1  
beautifulsoup4 | 4.14.3  
certifi | 2026.1.4  
cffi | 2.0.0  
charset-normalizer | 3.4.5  
click | 8.3.1  
colorama | 0.4.6  
cryptography | 46.0.7  
fastapi | 0.115.0  
h11 | 0.16.0  
httpcore | 1.0.9  
httptools | 0.7.1  
httpx | 0.28.1  
idna | 3.11  
iniconfig | 2.3.0  
jinja2 | 3.1.6  
markupsafe | 3.0.3  
packaging | 26.0  
pdfminer-six | 20251230  
pdfplumber | 0.11.9  
pillow | 12.2.0  
pluggy | 1.6.0  
pycparser | 3.0  
pydantic | 2.12.5  
pydantic-core | 2.41.5  
pygments | 2.19.2  
pypdfium2 | 5.5.0  
pytest | 9.0.3  
pytest-asyncio | 1.3.0  
python-dotenv | 1.0.1  
python-multipart | 0.0.26  
pyyaml | 6.0.3  
report-evaluation-service | 0.1.0  
soupsieve | 2.8.3  
starlette | 0.38.6  
typing-extensions | 4.15.0  
typing-inspection | 0.4.2  
uvicorn | 0.30.6  
uvloop | 0.22.1  
watchfiles | 1.1.1  
websockets | 16.0  
  
#### `workflow-prevention-longevity` — [develop@19b71677]

**Runtime pins:** python=3.12

**Python — pyproject** (6)

Package | Version  
---|---  
litellm | >=1.55.0  
matplotlib | >=3.9.0  
n1r-chr[caller | ,pdf,langfuse,storage] @ https://artifacts.n1-research.com/n1r-chr/n1r_chr-2026.3.7-py3-none-any.whl  
pydantic | >=2.10.0  
pydantic-settings | >=2.7.0  
python-dotenv | >=1.0.1  
**Python — uv.lock** (128)

Package | Version  
---|---  
aiohappyeyeballs | 2.6.1  
aiohttp | 3.13.3  
aiosignal | 1.4.0  
annotated-doc | 0.0.4  
annotated-types | 0.7.0  
anyio | 4.12.1  
attrs | 25.4.0  
backoff | 2.2.1  
beautifulsoup4 | 4.14.3  
boto3 | 1.42.57  
botocore | 1.42.57  
brotli | 1.2.0  
brotlicffi | 1.2.0.0  
certifi | 2026.2.25  
cffi | 2.0.0  
charset-normalizer | 3.4.4  
click | 8.3.1  
colorama | 0.4.6  
contourpy | 1.3.3  
coverage | 7.13.4  
cryptography | 46.0.5  
cssselect2 | 0.9.0  
cycler | 0.12.1  
distro | 1.9.0  
fastuuid | 0.14.0  
filelock | 3.24.3  
fonttools | 4.61.1  
frozenlist | 1.8.0  
fsspec | 2026.2.0  
google-api-core | 2.30.0  
google-auth | 2.48.0  
google-cloud-core | 2.5.0  
google-cloud-storage | 3.9.0  
google-crc32c | 1.8.0  
google-resumable-media | 2.8.0  
googleapis-common-protos | 1.72.0  
grpcio | 1.78.1  
h11 | 0.16.0  
hf-xet | 1.3.1  
httpcore | 1.0.9  
httpx | 0.28.1  
huggingface-hub | 1.4.1  
idna | 3.11  
importlib-metadata | 8.7.1  
iniconfig | 2.3.0  
jinja2 | 3.1.6  
jiter | 0.13.0  
jmespath | 1.1.0  
jsonschema | 4.26.0  
jsonschema-specifications | 2025.9.1  
kiwisolver | 1.4.9  
langfuse | 3.14.5  
librt | 0.8.1  
litellm | 1.81.15  
markdown-it-py | 4.0.0  
markupsafe | 3.0.3  
matplotlib | 3.10.8  
mdurl | 0.1.2  
multidict | 6.7.1  
mypy | 1.19.1  
mypy-extensions | 1.1.0  
n1-api-client | 0.1.24  
n1-document-manager | 0.1.0  
n1r-chr | 2026.3.7  
numpy | 2.4.2  
openai | 2.24.0  
opentelemetry-api | 1.39.1  
opentelemetry-exporter-otlp-proto-common | 1.39.1  
opentelemetry-exporter-otlp-proto-grpc | 1.39.1  
opentelemetry-exporter-otlp-proto-http | 1.39.1  
opentelemetry-proto | 1.39.1  
opentelemetry-sdk | 1.39.1  
opentelemetry-semantic-conventions | 0.60b1  
packaging | 25.0  
pathspec | 1.0.4  
pillow | 12.1.1  
pluggy | 1.6.0  
propcache | 0.4.1  
proto-plus | 1.27.1  
protobuf | 6.33.5  
pyasn1 | 0.6.2  
pyasn1-modules | 0.4.2  
pycparser | 3.0  
pydantic | 2.12.5  
pydantic-core | 2.41.5  
pydantic-settings | 2.13.0  
pydyf | 0.12.1  
pygments | 2.19.2  
pymupdf | 1.27.1  
pyparsing | 3.3.2  
pyphen | 0.17.2  
pytest | 9.0.2  
pytest-asyncio | 1.3.0  
pytest-cov | 7.0.0  
python-dateutil | 2.9.0.post0  
python-dotenv | 1.2.1  
pyyaml | 6.0.3  
referencing | 0.37.0  
regex | 2026.2.19  
requests | 2.32.5  
rich | 14.3.3  
rpds-py | 0.30.0  
rsa | 4.9.1  
ruff | 0.15.2  
s3transfer | 0.16.0  
shellingham | 1.5.4  
six | 1.17.0  
sniffio | 1.3.1  
soupsieve | 2.8.3  
tenacity | 9.1.4  
tiktoken | 0.12.0  
tinycss2 | 1.5.1  
tinyhtml5 | 2.0.0  
tokenizers | 0.22.2  
tqdm | 4.67.3  
typer | 0.24.1  
typer-slim | 0.24.0  
typing-extensions | 4.15.0  
typing-inspection | 0.4.2  
urllib3 | 2.6.3  
weasyprint | 68.1  
webencodings | 0.5.1  
workflow-prevention-longevity | 0.1.0  
wrapt | 1.17.3  
yarl | 1.22.0  
zipp | 3.23.0  
zopfli | 0.4.1  
zstandard | 0.25.0  
  
**Docker base images** (1): `ghcr.io/astral-sh/uv:python3.12-bookworm`

**GitHub Actions pinned** (7)

  * `actions/checkout@v4`
  * `astral-sh/setup-uv@v5`
  * `aws-actions/configure-aws-credentials@v4`
  * `docker/build-push-action@v5`
  * `docker/setup-buildx-action@v3`
  * `docker/setup-qemu-action@v3`
  * `n1healthcare/github-action-deployment-approval@main`

#### `workflow-supplements-optimization` — [develop@21ccd0c0]

**Runtime pins:** python=3.12

**Python — pyproject** (6)

Package | Version  
---|---  
litellm | >=1.55.0  
n1r-chr[caller | ,pdf,langfuse,storage] @ https://artifacts.n1-research.com/n1r-chr/n1r_chr-2026.3.10-py3-none-any.whl  
pydantic | >=2.10.0  
pydantic-settings | >=2.7.0  
python-dotenv | >=1.0.1  
pyyaml | >=6.0.0  
**Python — uv.lock** (122)

Package | Version  
---|---  
aiohappyeyeballs | 2.6.1  
aiohttp | 3.13.3  
aiosignal | 1.4.0  
annotated-doc | 0.0.4  
annotated-types | 0.7.0  
anyio | 4.12.1  
attrs | 25.4.0  
backoff | 2.2.1  
beautifulsoup4 | 4.14.3  
boto3 | 1.42.57  
botocore | 1.42.57  
brotli | 1.2.0  
brotlicffi | 1.2.0.0  
certifi | 2026.2.25  
cffi | 2.0.0  
charset-normalizer | 3.4.4  
click | 8.3.1  
colorama | 0.4.6  
coverage | 7.13.4  
cryptography | 46.0.5  
cssselect2 | 0.9.0  
distro | 1.9.0  
fastuuid | 0.14.0  
filelock | 3.24.3  
fonttools | 4.61.1  
frozenlist | 1.8.0  
fsspec | 2026.2.0  
google-api-core | 2.30.0  
google-auth | 2.48.0  
google-cloud-core | 2.5.0  
google-cloud-storage | 3.9.0  
google-crc32c | 1.8.0  
google-resumable-media | 2.8.0  
googleapis-common-protos | 1.72.0  
grpcio | 1.78.1  
h11 | 0.16.0  
hf-xet | 1.3.1  
httpcore | 1.0.9  
httpx | 0.28.1  
huggingface-hub | 1.4.1  
idna | 3.11  
importlib-metadata | 8.7.1  
iniconfig | 2.3.0  
jinja2 | 3.1.6  
jiter | 0.13.0  
jmespath | 1.1.0  
jsonschema | 4.26.0  
jsonschema-specifications | 2025.9.1  
langfuse | 3.14.5  
librt | 0.8.1  
litellm | 1.81.15  
markdown-it-py | 4.0.0  
markupsafe | 3.0.3  
mdurl | 0.1.2  
multidict | 6.7.1  
mypy | 1.19.1  
mypy-extensions | 1.1.0  
n1-api-client | 0.1.24  
n1-document-manager | 0.1.0  
n1r-chr | 2026.3.10  
openai | 2.24.0  
opentelemetry-api | 1.39.1  
opentelemetry-exporter-otlp-proto-common | 1.39.1  
opentelemetry-exporter-otlp-proto-grpc | 1.39.1  
opentelemetry-exporter-otlp-proto-http | 1.39.1  
opentelemetry-proto | 1.39.1  
opentelemetry-sdk | 1.39.1  
opentelemetry-semantic-conventions | 0.60b1  
packaging | 25.0  
pathspec | 1.0.4  
pillow | 12.1.1  
pluggy | 1.6.0  
propcache | 0.4.1  
proto-plus | 1.27.1  
protobuf | 6.33.5  
pyasn1 | 0.6.2  
pyasn1-modules | 0.4.2  
pycparser | 3.0  
pydantic | 2.12.5  
pydantic-core | 2.41.5  
pydantic-settings | 2.13.1  
pydyf | 0.12.1  
pygments | 2.19.2  
pymupdf | 1.27.1  
pyphen | 0.17.2  
pytest | 9.0.2  
pytest-asyncio | 1.3.0  
pytest-cov | 7.0.0  
python-dateutil | 2.9.0.post0  
python-dotenv | 1.2.1  
pyyaml | 6.0.3  
referencing | 0.37.0  
regex | 2026.2.19  
requests | 2.32.5  
rich | 14.3.3  
rpds-py | 0.30.0  
rsa | 4.9.1  
ruff | 0.15.2  
s3transfer | 0.16.0  
shellingham | 1.5.4  
six | 1.17.0  
sniffio | 1.3.1  
soupsieve | 2.8.3  
tenacity | 9.1.4  
tiktoken | 0.12.0  
tinycss2 | 1.5.1  
tinyhtml5 | 2.0.0  
tokenizers | 0.22.2  
tqdm | 4.67.3  
typer | 0.24.1  
typer-slim | 0.24.0  
typing-extensions | 4.15.0  
typing-inspection | 0.4.2  
urllib3 | 2.6.3  
weasyprint | 68.1  
webencodings | 0.5.1  
workflow-supplements-optimization | 0.1.0  
wrapt | 1.17.3  
yarl | 1.22.0  
zipp | 3.23.0  
zopfli | 0.4.1  
zstandard | 0.25.0  
  
**Docker base images** (1): `ghcr.io/astral-sh/uv:python3.12-bookworm`

**GitHub Actions pinned** (7)

  * `actions/checkout@v4`
  * `astral-sh/setup-uv@v5`
  * `aws-actions/configure-aws-credentials@v4`
  * `docker/build-push-action@v5`
  * `docker/setup-buildx-action@v3`
  * `docker/setup-qemu-action@v3`
  * `n1healthcare/github-action-deployment-approval@main`