# Optional extras — installed on purpose, never by the base image.
#
# INSP-42 (v11 H4a): unofficial store clients for the opt-in ownership
# registers. Register-only (IDs + names); Oneirodex never downloads a title.
# Each is used only when ENABLE_UNOFFICIAL_STORE_SYNC names its store; without
# the package the plugin reads "available" and the sync button says which
# package to install. CSV import needs neither.
# Security: xbox-webapi currently pulls ecdsa, which has no patched release for
# GHSA-wj6h-64fc-37mp / CVE-2024-23342. Oneirodex's refresh/history path uses a
# regular httpx client and does not create SignedSession; the package's
# xbox-authenticate utility does use the affected signer. Prefer CSV until an
# upstream fix or a reviewed replacement is available.
xbox-webapi>=2.1.0
psnawp>=3.0.3

# INSP-44 (v11 H4c): NVIDIA management library bindings for the Ops GPU tile.
# Only useful where the container can see an NVIDIA device; without it the
# tile falls back to TELEMETRY_READER_URL or reads n/a. Never a driver.
pynvml>=13.0.1