updated code agent

README.md

@@ -12,4 +12,10 @@ hf_oauth: true
 hf_oauth_expiration_minutes: 480
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+
+To generate a `requirements.txt` file compatible with **Python 3.10** for deployment on a Hugging Face Space, run the following command:
+
+```bash
+uv pip compile pyproject.toml --python 3.10 -o requirements.txt
+```

code_agent.py

@@ -33,6 +33,8 @@ import traceback
 from dataclasses import dataclass, replace
 from typing import Any, Optional
 import re  # For stripping markdown fences
+import cv2  # OpenCV – image manipulation
+import pandas as pd  # Pandas – DataFrame / CSV utilities
 
 from langchain_groq import ChatGroq
 from langchain_core.messages import AIMessage, HumanMessage, SystemMessage
@@ -50,6 +52,16 @@ TIMEOUT_SEC = int(os.getenv("LANGGRAPH_TIMEOUT_SEC", "30"))
 # 1. Code‑execution tool (whitelisted built‑ins)
 ###############################################################################
 
+# ---------------------------------------------------------------------------
+# Limited import helper – only expose specific third-party libs to user code
+# ---------------------------------------------------------------------------
+
+def _safe_import(name, globals=None, locals=None, fromlist=(), level=0):
+    """Whitelisted __import__ permitting just `cv2` and `pandas`."""
+    if name in {"cv2", "pandas"}:
+        return __import__(name, globals, locals, fromlist, level)
+    raise ImportError(f"Import of module '{name}' is disabled in this sandbox.")
+
 ALLOWED_BUILTINS: dict[str, Any] = {
     "print": print,
     "range": range,
@@ -58,13 +70,20 @@ ALLOWED_BUILTINS: dict[str, Any] = {
     "sum": sum,
     "min": min,
     "max": max,
+    "open": open,             # Needed by pandas for file I/O
+    "__import__": _safe_import,  # Allow limited, safe imports
 }
 
 @tool
 def python_exec(code: str) -> str:
     """Execute **Python** inside a restricted namespace and capture STDOUT."""
     code = textwrap.dedent(code)
-    exec_globals = {"__builtins__": ALLOWED_BUILTINS}
+    exec_globals = {
+        "__builtins__": ALLOWED_BUILTINS,
+        "cv2": cv2,
+        "pd": pd,          # Common alias
+        "pandas": pd,      # Full name
+    }
     local_ns: dict[str, Any] = {}
     stdout = io.StringIO()
     try:

pyproject.toml

@@ -26,6 +26,8 @@ dependencies = [
     "llama-index-readers-wikipedia>=0.3.0",
     "llama-index-tools-duckduckgo>=0.3.0",
     "llama-index-tools-tavily-research>=0.3.0",
+    "opencv-python>=4.11.0.86",
+    "pandas>=2.2.3",
     "rich>=14.0.0",
     "sentence-transformers>=4.1.0",
     "supabase>=2.15.3",

requirements.txt

@@ -1,5 +1,7 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile pyproject.toml --python 3.10 -o requirements.txt
+aiofiles==24.1.0
+    # via gradio
 aiohappyeyeballs==2.6.1
     # via aiohttp
 aiohttp==3.12.9
@@ -15,9 +17,11 @@ annotated-types==0.7.0
     # via pydantic
 anyio==4.9.0
     # via
+    #   gradio
     #   groq
     #   httpx
     #   openai
+    #   starlette
 arxiv==2.2.0
     # via llama-index-readers-papers
 asttokens==3.0.0
@@ -51,6 +55,8 @@ click==8.2.1
     #   duckduckgo-search
     #   llama-cloud-services
     #   nltk
+    #   typer
+    #   uvicorn
 colorama==0.4.6
     # via
     #   click
@@ -95,8 +101,12 @@ exceptiongroup==1.3.0
     #   pytest
 executing==2.2.0
     # via stack-data
+fastapi==0.115.13
+    # via gradio
 feedparser==6.0.11
     # via arxiv
+ffmpy==0.6.0
+    # via gradio
 filelock==3.18.0
     # via
     #   huggingface-hub
@@ -112,6 +122,7 @@ frozenlist==1.6.2
     #   aiosignal
 fsspec==2025.5.1
     # via
+    #   gradio-client
     #   huggingface-hub
     #   llama-index-core
     #   torch
@@ -131,10 +142,16 @@ googleapis-common-protos==1.70.0
     #   opentelemetry-exporter-otlp-proto-http
 gotrue==2.12.0
     # via supabase
+gradio==5.34.2
+    # via final-assignment-template (pyproject.toml)
+gradio-client==1.10.3
+    # via gradio
 greenlet==3.2.3
     # via sqlalchemy
 griffe==1.7.3
     # via banks
+groovy==0.1.2
+    # via gradio
 groq==0.28.0
     # via langchain-groq
 grpcio==1.72.1
@@ -145,7 +162,9 @@ grpcio==1.72.1
 grpcio-status==1.71.0
     # via google-api-core
 h11==0.16.0
-    # via httpcore
+    # via
+    #   httpcore
+    #   uvicorn
 h2==4.2.0
     # via httpx
 hf-xet==1.1.3
@@ -159,6 +178,8 @@ httpcore==1.0.9
 httpx==0.28.1
     # via
     #   gotrue
+    #   gradio
+    #   gradio-client
     #   groq
     #   langfuse
     #   langgraph-sdk
@@ -167,6 +188,7 @@ httpx==0.28.1
     #   llama-index-core
     #   openai
     #   postgrest
+    #   safehttpx
     #   storage3
     #   supabase
     #   supafunc
@@ -176,6 +198,8 @@ httpx-sse==0.4.0
 huggingface-hub==0.32.4
     # via
     #   final-assignment-template (pyproject.toml)
+    #   gradio
+    #   gradio-client
     #   langchain-huggingface
     #   llama-index-llms-huggingface-api
     #   sentence-transformers
@@ -206,6 +230,7 @@ jedi==0.19.2
 jinja2==3.1.6
     # via
     #   banks
+    #   gradio
     #   torch
 jiter==0.10.0
     # via openai
@@ -238,6 +263,7 @@ langchain-core==0.3.65
     #   langchain-google-genai
     #   langchain-groq
     #   langchain-huggingface
+    #   langchain-openai
     #   langchain-text-splitters
     #   langgraph
     #   langgraph-checkpoint
@@ -248,6 +274,8 @@ langchain-groq==0.3.2
     # via final-assignment-template (pyproject.toml)
 langchain-huggingface==0.3.0
     # via final-assignment-template (pyproject.toml)
+langchain-openai==0.3.24
+    # via final-assignment-template (pyproject.toml)
 langchain-text-splitters==0.3.8
     # via langchain
 langfuse==3.0.0
@@ -342,7 +370,9 @@ llama-parse==0.6.30
 markdown-it-py==3.0.0
     # via rich
 markupsafe==3.0.2
-    # via jinja2
+    # via
+    #   gradio
+    #   jinja2
 marshmallow==3.26.1
     # via dataclasses-json
 matplotlib-inline==0.1.7
@@ -373,17 +403,22 @@ nltk==3.9.1
     #   llama-index-core
 numpy==2.2.6
     # via
+    #   gradio
     #   langchain-community
     #   llama-index-core
+    #   opencv-python
     #   pandas
     #   scikit-learn
     #   scipy
     #   transformers
-openai==1.84.0
+openai==1.88.0
     # via
+    #   langchain-openai
     #   llama-index-agent-openai
     #   llama-index-embeddings-openai
     #   llama-index-llms-openai
+opencv-python==4.11.0.86
+    # via final-assignment-template (pyproject.toml)
 opentelemetry-api==1.34.0
     # via
     #   langfuse
@@ -415,6 +450,7 @@ opentelemetry-semantic-conventions==0.55b0
     # via opentelemetry-sdk
 orjson==3.10.18
     # via
+    #   gradio
     #   langgraph-sdk
     #   langsmith
 ormsgpack==1.10.0
@@ -422,6 +458,8 @@ ormsgpack==1.10.0
 packaging==24.2
     # via
     #   deprecation
+    #   gradio
+    #   gradio-client
     #   huggingface-hub
     #   ipykernel
     #   langchain-core
@@ -431,11 +469,15 @@ packaging==24.2
     #   pytest
     #   transformers
 pandas==2.2.3
-    # via llama-index-readers-file
+    # via
+    #   final-assignment-template (pyproject.toml)
+    #   gradio
+    #   llama-index-readers-file
 parso==0.8.4
     # via jedi
 pillow==11.2.1
     # via
+    #   gradio
     #   llama-index-core
     #   sentence-transformers
 platformdirs==4.3.8
@@ -480,7 +522,9 @@ pyasn1-modules==0.4.2
 pydantic==2.11.5
     # via
     #   banks
+    #   fastapi
     #   gotrue
+    #   gradio
     #   groq
     #   langchain
     #   langchain-core
@@ -498,6 +542,8 @@ pydantic-core==2.33.2
     # via pydantic
 pydantic-settings==2.9.1
     # via langchain-community
+pydub==0.25.1
+    # via gradio
 pygments==2.19.1
     # via
     #   ipython
@@ -522,12 +568,15 @@ python-dotenv==1.1.0
     #   dotenv
     #   llama-cloud-services
     #   pydantic-settings
+python-multipart==0.0.20
+    # via gradio
 pytz==2025.2
     # via pandas
-# pywin32==310
+pywin32==310
     # via jupyter-core
 pyyaml==6.0.2
     # via
+    #   gradio
     #   huggingface-hub
     #   langchain
     #   langchain-community
@@ -564,9 +613,15 @@ requests==2.32.3
 requests-toolbelt==1.0.0
     # via langsmith
 rich==14.0.0
-    # via final-assignment-template (pyproject.toml)
+    # via
+    #   final-assignment-template (pyproject.toml)
+    #   typer
 rsa==4.9.1
     # via google-auth
+ruff==0.12.0
+    # via gradio
+safehttpx==0.1.6
+    # via gradio
 safetensors==0.5.3
     # via transformers
 scikit-learn==1.7.0
@@ -575,10 +630,14 @@ scipy==1.15.3
     # via
     #   scikit-learn
     #   sentence-transformers
+semantic-version==2.10.0
+    # via gradio
 sentence-transformers==4.1.0
     # via final-assignment-template (pyproject.toml)
 sgmllib3k==1.0.0
     # via feedparser
+shellingham==1.5.4
+    # via typer
 six==1.17.0
     # via python-dateutil
 sniffio==1.3.1
@@ -595,6 +654,10 @@ sqlalchemy==2.0.41
     #   llama-index-core
 stack-data==0.6.3
     # via ipython
+starlette==0.46.2
+    # via
+    #   fastapi
+    #   gradio
 storage3==0.11.3
     # via supabase
 strenum==0.4.15
@@ -620,6 +683,7 @@ threadpoolctl==3.6.0
     # via scikit-learn
 tiktoken==0.9.0
     # via
+    #   langchain-openai
     #   llama-index-core
     #   tavily-python
 tokenizers==0.21.1
@@ -628,6 +692,8 @@ tokenizers==0.21.1
     #   transformers
 tomli==2.2.1
     # via pytest
+tomlkit==0.13.3
+    # via gradio
 torch==2.7.1
     # via sentence-transformers
 tornado==6.5.1
@@ -653,12 +719,17 @@ traitlets==5.14.3
     #   matplotlib-inline
 transformers==4.52.4
     # via sentence-transformers
+typer==0.16.0
+    # via gradio
 typing-extensions==4.14.0
     # via
     #   aiosqlite
     #   anyio
     #   beautifulsoup4
     #   exceptiongroup
+    #   fastapi
+    #   gradio
+    #   gradio-client
     #   groq
     #   huggingface-hub
     #   ipython
@@ -679,8 +750,10 @@ typing-extensions==4.14.0
     #   sentence-transformers
     #   sqlalchemy
     #   torch
+    #   typer
     #   typing-inspect
     #   typing-inspection
+    #   uvicorn
 typing-inspect==0.9.0
     # via
     #   dataclasses-json
@@ -693,10 +766,14 @@ tzdata==2025.2
     # via pandas
 urllib3==2.4.0
     # via requests
+uvicorn==0.34.3
+    # via gradio
 wcwidth==0.2.13
     # via prompt-toolkit
 websockets==14.2
-    # via realtime
+    # via
+    #   gradio-client
+    #   realtime
 widgetsnbextension==4.0.14
     # via ipywidgets
 wikipedia==1.4.0

uv.lock

@@ -1,6 +1,11 @@
 version = 1
 revision = 1
 requires-python = ">=3.13"
+resolution-markers = [
+    "sys_platform == 'darwin'",
+    "platform_machine == 'aarch64' and sys_platform == 'linux'",
+    "(platform_machine != 'aarch64' and sys_platform == 'linux') or (sys_platform != 'darwin' and sys_platform != 'linux')",
+]
 
 [[package]]
 name = "aiofiles"
@@ -511,6 +516,8 @@ dependencies = [
     { name = "llama-index-readers-wikipedia" },
     { name = "llama-index-tools-duckduckgo" },
     { name = "llama-index-tools-tavily-research" },
+    { name = "opencv-python" },
+    { name = "pandas" },
     { name = "rich" },
     { name = "sentence-transformers" },
     { name = "supabase" },
@@ -540,6 +547,8 @@ requires-dist = [
     { name = "llama-index-readers-wikipedia", specifier = ">=0.3.0" },
     { name = "llama-index-tools-duckduckgo", specifier = ">=0.3.0" },
     { name = "llama-index-tools-tavily-research", specifier = ">=0.3.0" },
+    { name = "opencv-python", specifier = ">=4.11.0.86" },
+    { name = "pandas", specifier = ">=2.2.3" },
     { name = "rich", specifier = ">=14.0.0" },
     { name = "sentence-transformers", specifier = ">=4.1.0" },
     { name = "supabase", specifier = ">=2.15.3" },
@@ -1938,7 +1947,7 @@ name = "nvidia-cudnn-cu12"
 version = "9.5.1.17"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "nvidia-cublas-cu12" },
+    { name = "nvidia-cublas-cu12", marker = "(platform_machine != 'aarch64' and sys_platform == 'linux') or (sys_platform != 'darwin' and sys_platform != 'linux')" },
 ]
 wheels = [
     { url = "https://files.pythonhosted.org/packages/2a/78/4535c9c7f859a64781e43c969a3a7e84c54634e319a996d43ef32ce46f83/nvidia_cudnn_cu12-9.5.1.17-py3-none-manylinux_2_28_x86_64.whl", hash = "sha256:30ac3869f6db17d170e0e556dd6cc5eee02647abc31ca856634d5a40f82c15b2", size = 570988386 },
@@ -1949,7 +1958,7 @@ name = "nvidia-cufft-cu12"
 version = "11.3.0.4"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "nvidia-nvjitlink-cu12" },
+    { name = "nvidia-nvjitlink-cu12", marker = "(platform_machine != 'aarch64' and sys_platform == 'linux') or (sys_platform != 'darwin' and sys_platform != 'linux')" },
 ]
 wheels = [
     { url = "https://files.pythonhosted.org/packages/8f/16/73727675941ab8e6ffd86ca3a4b7b47065edcca7a997920b831f8147c99d/nvidia_cufft_cu12-11.3.0.4-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:ccba62eb9cef5559abd5e0d54ceed2d9934030f51163df018532142a8ec533e5", size = 200221632 },
@@ -1978,9 +1987,9 @@ name = "nvidia-cusolver-cu12"
 version = "11.7.1.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "nvidia-cublas-cu12" },
-    { name = "nvidia-cusparse-cu12" },
-    { name = "nvidia-nvjitlink-cu12" },
+    { name = "nvidia-cublas-cu12", marker = "(platform_machine != 'aarch64' and sys_platform == 'linux') or (sys_platform != 'darwin' and sys_platform != 'linux')" },
+    { name = "nvidia-cusparse-cu12", marker = "(platform_machine != 'aarch64' and sys_platform == 'linux') or (sys_platform != 'darwin' and sys_platform != 'linux')" },
+    { name = "nvidia-nvjitlink-cu12", marker = "(platform_machine != 'aarch64' and sys_platform == 'linux') or (sys_platform != 'darwin' and sys_platform != 'linux')" },
 ]
 wheels = [
     { url = "https://files.pythonhosted.org/packages/f0/6e/c2cf12c9ff8b872e92b4a5740701e51ff17689c4d726fca91875b07f655d/nvidia_cusolver_cu12-11.7.1.2-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:e9e49843a7707e42022babb9bcfa33c29857a93b88020c4e4434656a655b698c", size = 158229790 },
@@ -1992,7 +2001,7 @@ name = "nvidia-cusparse-cu12"
 version = "12.5.4.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "nvidia-nvjitlink-cu12" },
+    { name = "nvidia-nvjitlink-cu12", marker = "(platform_machine != 'aarch64' and sys_platform == 'linux') or (sys_platform != 'darwin' and sys_platform != 'linux')" },
 ]
 wheels = [
     { url = "https://files.pythonhosted.org/packages/06/1e/b8b7c2f4099a37b96af5c9bb158632ea9e5d9d27d7391d7eb8fc45236674/nvidia_cusparse_cu12-12.5.4.2-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:7556d9eca156e18184b94947ade0fba5bb47d69cec46bf8660fd2c71a4b48b73", size = 216561367 },
@@ -2051,6 +2060,23 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/f4/03/ef68d77a38dd383cbed7fc898857d394d5a8b0520a35f054e7fe05dc3ac1/openai-1.88.0-py3-none-any.whl", hash = "sha256:7edd7826b3b83f5846562a6f310f040c79576278bf8e3687b30ba05bb5dff978", size = 734293 },
 ]
 
+[[package]]
+name = "opencv-python"
+version = "4.11.0.86"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "numpy" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/17/06/68c27a523103dad5837dc5b87e71285280c4f098c60e4fe8a8db6486ab09/opencv-python-4.11.0.86.tar.gz", hash = "sha256:03d60ccae62304860d232272e4a4fda93c39d595780cb40b161b310244b736a4", size = 95171956 }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/05/4d/53b30a2a3ac1f75f65a59eb29cf2ee7207ce64867db47036ad61743d5a23/opencv_python-4.11.0.86-cp37-abi3-macosx_13_0_arm64.whl", hash = "sha256:432f67c223f1dc2824f5e73cdfcd9db0efc8710647d4e813012195dc9122a52a", size = 37326322 },
+    { url = "https://files.pythonhosted.org/packages/3b/84/0a67490741867eacdfa37bc18df96e08a9d579583b419010d7f3da8ff503/opencv_python-4.11.0.86-cp37-abi3-macosx_13_0_x86_64.whl", hash = "sha256:9d05ef13d23fe97f575153558653e2d6e87103995d54e6a35db3f282fe1f9c66", size = 56723197 },
+    { url = "https://files.pythonhosted.org/packages/f3/bd/29c126788da65c1fb2b5fb621b7fed0ed5f9122aa22a0868c5e2c15c6d23/opencv_python-4.11.0.86-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:1b92ae2c8852208817e6776ba1ea0d6b1e0a1b5431e971a2a0ddd2a8cc398202", size = 42230439 },
+    { url = "https://files.pythonhosted.org/packages/2c/8b/90eb44a40476fa0e71e05a0283947cfd74a5d36121a11d926ad6f3193cc4/opencv_python-4.11.0.86-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:6b02611523803495003bd87362db3e1d2a0454a6a63025dc6658a9830570aa0d", size = 62986597 },
+    { url = "https://files.pythonhosted.org/packages/fb/d7/1d5941a9dde095468b288d989ff6539dd69cd429dbf1b9e839013d21b6f0/opencv_python-4.11.0.86-cp37-abi3-win32.whl", hash = "sha256:810549cb2a4aedaa84ad9a1c92fbfdfc14090e2749cedf2c1589ad8359aa169b", size = 29384337 },
+    { url = "https://files.pythonhosted.org/packages/a4/7d/f1c30a92854540bf789e9cd5dde7ef49bbe63f855b85a2e6b3db8135c591/opencv_python-4.11.0.86-cp37-abi3-win_amd64.whl", hash = "sha256:085ad9b77c18853ea66283e98affefe2de8cc4c1f43eda4c100cf9b2721142ec", size = 39488044 },
+]
+
 [[package]]
 name = "opentelemetry-api"
 version = "1.34.0"
@@ -3291,7 +3317,7 @@ name = "triton"
 version = "3.3.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "setuptools" },
+    { name = "setuptools", marker = "(platform_machine != 'aarch64' and sys_platform == 'linux') or (sys_platform != 'darwin' and sys_platform != 'linux')" },
 ]
 wheels = [
     { url = "https://files.pythonhosted.org/packages/74/1f/dfb531f90a2d367d914adfee771babbd3f1a5b26c3f5fbc458dee21daa78/triton-3.3.1-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:b89d846b5a4198317fec27a5d3a609ea96b6d557ff44b56c23176546023c4240", size = 155673035 },