# Live operator runtime — installed directly onto the USB image
# Privilege escalation uses FreeBSD mac_do (base system) instead of sudo.
firefox
node24
npm-node24
# codex is the OpenAI CLI shipped as a FreeBSD port (NOT via npm). It
# fills the "non-pi CLI on the live USB" slot. claude-code is excluded
# from the live npm bundle on FreeBSD because its native deps have no
# FreeBSD binary; see install_live_npm_globals() in build.sh.
codex
# powerdxx (sysutils/powerdxx) — drop-in replacement for base powerd
# with moving-average load sampling and better multi-core behavior.
# Enabled via powerdxx_enable in rc.conf (configure_live_operator_session).
# Pairs with performance_cx_lowest / economy_cx_lowest = C3 in rc.conf
# (NOT Cmax — Cmax/C6-style entry risks USB-root resume hangs; see
# build.sh power policy block and TESTING.md). C3 is where the live USB
# gets its battery savings without losing the USB root on resume.
# Installed-to-disk systems may opt into Cmax later.
powerdxx
bash
zsh
ohmyzsh
git
# jq — JSON processor on PATH for the MCP tool path (parsing colibri-mcp /
# external MCP JSON-RPC output). Keep in sync with pkg-list-jails.txt and
# Colibri packaging/freebsd/agent-jail-bootstrap.sh.
jq
# Live rebuild lane: lets the running USB rebuild and redeploy the agent stack
# without a full ISO rebuild for every small service/runtime iteration.
#   rust + pkgconf -> Colibri (Rust control plane)
#   go             -> zot (Go agent)
rust
pkgconf
go
tailscale
avahi-app
nss_mdns
networkmgr
# Broad native FreeBSD Wi-Fi firmware bundle for the live USB. Keep this light:
# let NetworkMgr manage wlan interfaces once the kernel exposes them, but do
# not pull in wifibox for the first-pass operator USB path.
wifi-firmware-kmod
FreeBSD-fwget
bastille

# Operator editing/evaluation tools. Mousepad comes from pkg-list-xfce.txt as
# the simplest GUI editor. Add Geany for lightweight GUI code review/editing
# and Micro for friendly terminal/SSH edits without pulling an Electron IDE.
geany
micro
# Pi/operator terminal search helpers. Keep these in the live image, not only
# the host package baseline, because Pi and debugging run directly from XFCE.
ripgrep
fd-find

# Vulkan diagnostics. Zed is deferred off the live rootfs until Intel+AMD
# Vulkan are proven, but vulkaninfo is tiny and gives Pi Builder a direct
# hardware-validation gate for that future decision.
vulkan-tools

# Operator diagnostics: tmux screenshot skill dependencies.
# Keep these in the live list, not only the host baseline, so the USB can
# capture terminal screenshots before a disk deploy.
tmux
screen
btop
mc
zip
unzip
7-zip
bitchx
python312
dejavu
# py311-pillow: Pillow for the image-render / screenshot skill (python3 = 3.11).
py311-pillow
# Hardware introspection. FreeBSD base already provides pciconf(8),
# usbconfig(8), devinfo(8), and kldstat(8); add a few extra probes that
# complement those native tools on the live USB.
dmidecode
pciutils
usbutils
# hw-report uses these to create a local diagnostics bundle for
# support and future custom ISO builds. hw-probe only uploads when the operator
# explicitly requests it with --upload-public-probe. Its upload path uses Perl
# LWP::UserAgent, provided by p5-libwww; without it hw-probe collects locally
# but fails before printing the public bsd-hardware.info URL.
hw-probe
p5-libwww
smartmontools
# IPMI / BMC management for HPE iLO, Dell iDRAC, etc.
# Needed for disk-deploy workflow: power control, sensor readout,
# boot device selection, Serial-over-LAN console.
ipmitool
lscpu
lsblk
hwstat
usbhid-dump
xinput
xrandr
mesa-demos
# libinput CLI (`libinput list-devices`) is the best trackpad probe because it
# works without an X session, unlike xinput. Pulled transitively by
# xf86-input-libinput today; listed explicitly so hw-report's probe and the
# TESTING.md check do not depend on a transitive dep.
libinput
# Webcam stack. webcamd wraps Linux V4L2 drivers via cuse(3); v4l-utils
# gives v4l2-ctl for diagnostics; pwcview is a minimal viewer to confirm
# the camera attaches. devd auto-spawns a webcamd instance per USB cam.
webcamd
v4l-utils
pwcview
# AMD GPU firmware families covering Ryzen U-series iGPUs (Renoir refresh
# / Lucienne). drm-kmod can load amdgpu without firmware but initialization
# fails on first attach for many APUs. These package names exist in the
# current FreeBSD repo and keep the live USB ready for Ryzen mobile graphics.
gpu-firmware-amd-kmod-renoir
gpu-firmware-amd-kmod-green-sardine
noto-sans
noto-serif
liberation-fonts-ttf
hack-font
source-code-pro-ttf