# Bundled npm global CLIs for offline firstboot/live operator use.
# Pin exact versions to prevent build-to-build drift — EXCEPT where a line uses
# a dist-tag (e.g. @latest) on purpose.
#
# Pi tracks `@latest` deliberately: each image ships the newest Pi. The version
# that actually got resolved at fetch time is recorded in build-manifest.json
# (`pi_version`), so the artifact stays traceable even though the spec floats.
# Pin a concrete version here instead if a build must be reproducible
# byte-for-byte.

@earendil-works/pi-coding-agent@latest

# Bitwarden CLI (`bw`) — headless access to the Clawdie Vaultwarden instance,
# used by clawdie-vault-fetch. Bundled offline so a booted image can pull agent
# secrets without a network npm install. See clawdie-ai/docs/VAULTWARDEN-SETUP.md.
@bitwarden/cli@2026.5.0