Merge nucleic/lucid-lunar-wren-wxyw into dev

mkimage/profiles/vm-desktop.pkgs

@@ -0,0 +1,58 @@
+# naros-vm DESKTOP flavor — Debian package list (NAROS.md §7.4, milestone N5).
+#
+# Built entirely from a pinned Debian FORKY snapshot (build-rootfs.sh maps vm-desktop→forky)
+# because forky ships GNOME 50 / Mutter 50 — the compositor the semantic agent targets —
+# while trixie is stuck at GNOME 48. One coherent forky pocket, no trixie/forky ABI mixing.
+#
+# The GNOME 50 stack is BAKED here at build time (not pulled at firstboot): the whole desktop
+# rootfs is one CI-built pocket, so a base build never drags ~1.5 GB from snapshot.debian.org.
+# These are apt --include'd (dependencies resolved from forky); the Nucleic layer + tier metas
+# configure last (vm-desktop.late-pkgs) so the nash divert stays the final step.
+#
+# No linux-image — external kernel + its modules ride the two-phase payload (LINUX_VM.md).
+
+# systemd as PID 1 (§5: the VM desktop flavor keeps systemd) + networking/udev/dbus/sudo.
+systemd
+systemd-sysv
+systemd-resolved
+udev
+dbus
+dbus-user-session
+sudo
+
+# GNOME 50 Wayland session: shell/Mutter + GDM auto-login, a couple of GTK4 reference apps so
+# a fresh screenshot isn't an empty desktop, XWayland for X clients, Mesa for software GL.
+gnome-session
+gnome-shell
+gnome-shell-extension-prefs
+gdm3
+gnome-console
+gnome-text-editor
+xwayland
+libgl1-mesa-dri
+
+# Accessibility stack — the AT-SPI D-Bus registry the semantic agent consumes, plus the GI
+# bindings its Python/host tooling uses, and the settings/dconf plumbing for system defaults.
+at-spi2-core
+gsettings-desktop-schemas
+dconf-cli
+python3-gi
+gir1.2-atspi-2.0
+
+# Reference browser for computer-use / the semantic agent. Debian ships a real Firefox deb
+# (unlike Ubuntu's snap shim), so no Mozilla-apt dance is needed — firefox-esr from forky.
+firefox-esr
+fonts-dejavu-core
+
+# Modest dev toolchain, mirroring the guest it replaces (agents also exec/build in the VM).
+build-essential
+git
+curl
+ca-certificates
+openssh-client
+iproute2
+python3
+python3-venv
+python3-pip
+nodejs
+npm