# Blueforce Field OS - offline APT pin manifest: remote access and desktop
#
# Target release : Ubuntu 26.04 LTS, architecture amd64 (LAB confirms both)
# Format         : one exact pin per line -> package=version   ("#" starts a comment)
# Consumed by    : scripts/install/blueforce-install.sh --offline, which refuses to
#                  run any package module unless every pin here is present in the
#                  bundle lock file <repo>/packages.lock.tsv.
#
# UNPINNED is a sentinel, not a version. Fill it in LAB:
#   1. acquire the reviewed .deb for the package into one local pool directory
#   2. read the exact version:  dpkg-deb -f <file>.deb Package Version
#   3. replace UNPINNED with that version, keeping the line shape:
#          xrdp=<exact version reported by dpkg-deb>
#   4. verify with the static plan:  ../build-offline-repo.sh --dry-run-plan
#      (it must print PLAN READY before --check or a real build is attempted)
#
# Rules enforced by the tooling: lower-case package names, exactly one pin per
# package across all manifests, no inline comments, no whitespace around "=",
# no placeholder/replace/todo tokens. Adding or removing a package is a contract
# change: update manifests/requirements.tsv in the same edit or the plan fails.

# --- remote desktop (installer module 08-rdp.sh) ---
xrdp=UNPINNED
# X11 backend used by the GNOME session behind xRDP. xrdp recommends it; the LAB
# must confirm the dependency closure of the reviewed pool before the build.
xorgxrdp=UNPINNED
gnome-session=UNPINNED

# --- full desktop stack (installer module 16-gui.sh) ---
ubuntu-desktop-minimal=UNPINNED

# --- RustDesk: vendor .deb, absent from the Ubuntu archive ---
# Version is the reviewed self-hosted client build. Record where that .deb came
# from in the bundle lock row for the package.
rustdesk=UNPINNED