redeploy 0.2.42__tar.gz → 0.2.43__tar.gz

{redeploy-0.2.42 → redeploy-0.2.43}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: redeploy
-Version: 0.2.42
+Version: 0.2.43
 Summary: Infrastructure migration toolkit: detect → plan → apply
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
@@ -28,17 +28,17 @@ Requires-Dist: pfix>=0.1.60; extra == "dev"
 
 ## AI Cost Tracking
 
-![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.42-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
-![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-20.9h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
+![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.43-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-21.0h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
 
-- 🤖 **LLM usage:** $7.5000 (63 commits)
-- 👤 **Human dev:** ~$2088 (20.9h @ $100/h, 30min dedup)
+- 🤖 **LLM usage:** $7.5000 (64 commits)
+- 👤 **Human dev:** ~$2099 (21.0h @ $100/h, 30min dedup)
 
 Generated on 2026-04-21 using [openrouter/qwen/qwen3-coder-next](https://openrouter.ai/qwen/qwen3-coder-next)
 
 ---
 
-![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.42-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.43-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
 
 Infrastructure migration and device deploy toolkit — VPS, Raspberry Pi kiosk, Podman Quadlet, k3s.
 

{redeploy-0.2.42 → redeploy-0.2.43}/README.md

@@ -3,17 +3,17 @@
 
 ## AI Cost Tracking
 
-![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.42-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
-![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-20.9h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
+![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.43-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-21.0h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
 
-- 🤖 **LLM usage:** $7.5000 (63 commits)
-- 👤 **Human dev:** ~$2088 (20.9h @ $100/h, 30min dedup)
+- 🤖 **LLM usage:** $7.5000 (64 commits)
+- 👤 **Human dev:** ~$2099 (21.0h @ $100/h, 30min dedup)
 
 Generated on 2026-04-21 using [openrouter/qwen/qwen3-coder-next](https://openrouter.ai/qwen/qwen3-coder-next)
 
 ---
 
-![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.42-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.43-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
 
 Infrastructure migration and device deploy toolkit — VPS, Raspberry Pi kiosk, Podman Quadlet, k3s.
 

{redeploy-0.2.42 → redeploy-0.2.43}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "redeploy"
-version = "0.2.42"
+version = "0.2.43"
 description = "Infrastructure migration toolkit: detect → plan → apply"
 readme = "README.md"
 requires-python = ">=3.11"

{redeploy-0.2.42 → redeploy-0.2.43}/redeploy/__init__.py

@@ -7,7 +7,7 @@ Public API (stable from 0.2.0, semver guaranteed)::
 
 Everything not listed in ``__all__`` is internal and may change without notice.
 """
-__version__ = "0.2.42"
+__version__ = "0.2.43"
 
 # ── Core models ───────────────────────────────────────────────────────────────
 from .models import (  # noqa: F401

{redeploy-0.2.42 → redeploy-0.2.43}/redeploy/apply/executor.py

@@ -16,6 +16,7 @@ from .handlers import (
     run_docker_health_wait, run_container_log_tail, run_http_check,
     run_version_check, run_plugin, run_wait, run_inline_script,
     run_ensure_config_line, run_raspi_config,
+    run_ensure_kanshi_profile, run_ensure_autostart_entry, run_ensure_browser_kiosk_script,
 )
 from .progress import ProgressEmitter
 from .rollback import rollback_steps
@@ -230,6 +231,9 @@ class Executor:
             StepAction.INLINE_SCRIPT:       lambda s: run_inline_script(s, self.probe, self.plan),
             StepAction.ENSURE_CONFIG_LINE:  lambda s: run_ensure_config_line(s, self.probe),
             StepAction.RASPI_CONFIG:        lambda s: run_raspi_config(s, self.probe),
+            StepAction.ENSURE_KANSHI_PROFILE:      lambda s: run_ensure_kanshi_profile(s, self.probe),
+            StepAction.ENSURE_AUTOSTART_ENTRY:     lambda s: run_ensure_autostart_entry(s, self.probe),
+            StepAction.ENSURE_BROWSER_KIOSK_SCRIPT: lambda s: run_ensure_browser_kiosk_script(s, self.probe),
         }
 
         handler = dispatch.get(step.action)

{redeploy-0.2.42 → redeploy-0.2.43}/redeploy/apply/handlers.py

@@ -398,3 +398,137 @@ def run_raspi_config(step: MigrationStep, probe: "RemoteProbe") -> None:
 
     step.status = StepStatus.DONE
     step.result = f"applied: {cmd}"
+
+
+# ── kiosk handlers ────────────────────────────────────────────────────────────
+
+def run_ensure_kanshi_profile(step: MigrationStep, probe: "RemoteProbe") -> None:
+    """Idempotently write or replace a named kanshi output profile.
+
+    step.command   — the profile block to write (rendered kanshi syntax)
+    step.config_file — kanshi config path (default: ~/.config/kanshi/config)
+    """
+    from ..hardware.kiosk.output_profiles import OutputProfile
+
+    profile_block = step.command
+    if not profile_block:
+        raise StepError(step, "ensure_kanshi_profile requires step.command with profile block")
+
+    config_path = step.config_file or "~/.config/kanshi/config"
+    mkdir_cmd = f"mkdir -p $(dirname {config_path})"
+    probe.run(mkdir_cmd, timeout=10)
+
+    r = probe.run(f"cat {config_path} 2>/dev/null || echo ''", timeout=10)
+    existing = r.out if r.ok else ""
+
+    # Extract profile name from block (first line: "profile <name> {")
+    first_line = profile_block.strip().splitlines()[0]
+    import re
+    m = re.match(r"profile\s+(\S+)\s*\{", first_line)
+    if not m:
+        raise StepError(step, f"Cannot parse profile name from block: {first_line!r}")
+    profile_name = m.group(1)
+
+    # Replace existing profile block or append
+    pattern = re.compile(
+        rf"^profile\s+{re.escape(profile_name)}\s*\{{[^}}]*\}}", re.MULTILINE | re.DOTALL
+    )
+    if pattern.search(existing):
+        if profile_block.strip() in existing:
+            step.status = StepStatus.DONE
+            step.result = f"no-op: profile '{profile_name}' already correct"
+            return
+        new_content = pattern.sub(profile_block.strip(), existing)
+        changed = True
+    else:
+        sep = "\n" if existing and not existing.endswith("\n") else ""
+        new_content = existing + sep + profile_block.strip() + "\n"
+        changed = True
+
+    encoded = base64.b64encode(new_content.encode()).decode()
+    tmp = f"/tmp/redeploy-kanshi-{step.id}.conf"
+    write_r = probe.run(
+        f"echo '{encoded}' | base64 -d | tee {tmp} > /dev/null && mv {tmp} {config_path}",
+        timeout=15,
+    )
+    if not write_r.ok:
+        raise StepError(step, f"Cannot write {config_path}: {write_r.stderr[:200]}")
+
+    # Reload kanshi if running
+    probe.run("pkill -SIGUSR1 kanshi 2>/dev/null || true", timeout=5)
+
+    step.status = StepStatus.DONE
+    step.result = f"profile '{profile_name}' written to {config_path}"
+
+
+def run_ensure_autostart_entry(step: MigrationStep, probe: "RemoteProbe") -> None:
+    """Idempotently add or replace a keyed entry in a compositor autostart file.
+
+    step.config_file — path to autostart file
+    step.config_line — the line to write (the entry body)
+    step.config_section — used as the entry key for idempotent marker
+    """
+    from ..hardware.kiosk.autostart import AutostartEntry, ensure_autostart_entry
+
+    if not step.config_file or not step.config_line:
+        raise StepError(step, "ensure_autostart_entry requires config_file and config_line")
+
+    key = step.config_section or "redeploy"
+    entry = AutostartEntry(key=key, line=step.config_line)
+
+    r = probe.run(f"cat {step.config_file} 2>/dev/null || echo ''", timeout=10)
+    existing = r.out if r.ok else ""
+
+    new_content, changed = ensure_autostart_entry(existing, entry)
+    if not changed:
+        step.status = StepStatus.DONE
+        step.result = f"no-op: entry [{key}] already correct"
+        return
+
+    mkdir_cmd = f"mkdir -p $(dirname {step.config_file})"
+    probe.run(mkdir_cmd, timeout=10)
+
+    encoded = base64.b64encode(new_content.encode()).decode()
+    tmp = f"/tmp/redeploy-autostart-{step.id}.txt"
+    write_r = probe.run(
+        f"echo '{encoded}' | base64 -d | tee {tmp} > /dev/null && mv {tmp} {step.config_file}",
+        timeout=15,
+    )
+    if not write_r.ok:
+        raise StepError(step, f"Cannot write {step.config_file}: {write_r.stderr[:200]}")
+
+    step.status = StepStatus.DONE
+    step.result = f"entry [{key}] written to {step.config_file}"
+
+
+def run_ensure_browser_kiosk_script(step: MigrationStep, probe: "RemoteProbe") -> None:
+    """Write a kiosk-launch.sh script to the remote device.
+
+    step.command   — the full script content to write
+    step.dst       — destination path (default: ~/kiosk-launch.sh)
+    """
+    script_content = step.command
+    if not script_content:
+        raise StepError(step, "ensure_browser_kiosk_script requires step.command with script body")
+
+    dst = step.dst or "~/kiosk-launch.sh"
+
+    r = probe.run(f"cat {dst} 2>/dev/null || echo ''", timeout=10)
+    existing = r.out if r.ok else ""
+    if existing.strip() == script_content.strip():
+        step.status = StepStatus.DONE
+        step.result = f"no-op: {dst} already correct"
+        return
+
+    encoded = base64.b64encode(script_content.encode()).decode()
+    tmp = f"/tmp/redeploy-kiosk-{step.id}.sh"
+    write_r = probe.run(
+        f"echo '{encoded}' | base64 -d | tee {tmp} > /dev/null"
+        f" && chmod +x {tmp} && mv {tmp} {dst}",
+        timeout=15,
+    )
+    if not write_r.ok:
+        raise StepError(step, f"Cannot write {dst}: {write_r.stderr[:200]}")
+
+    step.status = StepStatus.DONE
+    step.result = f"kiosk script written to {dst}"

redeploy-0.2.43/redeploy/hardware/kiosk/__init__.py

@@ -0,0 +1,18 @@
+"""Kiosk display configuration helpers — encoding pi109 session knowledge."""
+
+from .autostart import AutostartEntry, ensure_autostart_entry, generate_labwc_autostart
+from .browsers import BrowserKioskProfile, CHROMIUM_WAYLAND_KIOSK
+from .compositors import CompositorDefinition, LABWC
+from .output_profiles import OutputProfile, dsi_only_profile
+
+__all__ = [
+    "AutostartEntry",
+    "ensure_autostart_entry",
+    "generate_labwc_autostart",
+    "BrowserKioskProfile",
+    "CHROMIUM_WAYLAND_KIOSK",
+    "CompositorDefinition",
+    "LABWC",
+    "OutputProfile",
+    "dsi_only_profile",
+]

redeploy-0.2.43/redeploy/hardware/kiosk/autostart.py

@@ -0,0 +1,84 @@
+"""Autostart file management for kiosk compositors.
+
+Encodes the pi109 lesson: labwc autostart order is critical.
+  1. kanshid &                   — start output manager
+  2. sleep 3                     — wait for kanshi to disable HDMI-A-2
+  3. bash ~/kiosk-launch.sh &    — start browser AFTER output is configured
+
+If Chromium starts before kanshi applies the DSI-only profile, it may render
+on HDMI-A-2 (which would be blank since no monitor is connected).
+"""
+from __future__ import annotations
+
+import re
+from dataclasses import dataclass
+
+
+@dataclass
+class AutostartEntry:
+    """One entry in a compositor autostart file."""
+
+    key: str
+    """Unique identifier used for idempotent replacement, e.g. 'kiosk-browser'."""
+
+    line: str
+    """The shell line to write, e.g. 'bash ~/kiosk-launch.sh &'."""
+
+    comment: str = ""
+    """Optional inline comment explaining the entry."""
+
+    def render(self) -> str:
+        """Render as a single autostart file line."""
+        if self.comment:
+            return f"{self.line}  # [{self.key}] {self.comment}"
+        return f"{self.line}  # [{self.key}]"
+
+
+def ensure_autostart_entry(content: str, entry: AutostartEntry) -> tuple[str, bool]:
+    """Idempotently add or replace an entry in an autostart file.
+
+    Looks for a line containing ``[key]`` marker. If found, replaces it.
+    If not, appends it. Returns (new_content, changed).
+    """
+    marker = f"[{entry.key}]"
+    rendered = entry.render()
+    lines = content.splitlines(keepends=True)
+    for i, line in enumerate(lines):
+        if marker in line:
+            if line.rstrip("\n") == rendered:
+                return content, False  # already correct
+            lines[i] = rendered + "\n"
+            return "".join(lines), True
+    # Not found — append
+    sep = "\n" if content and not content.endswith("\n") else ""
+    return content + sep + rendered + "\n", True
+
+
+def generate_labwc_autostart(
+    kiosk_script: str = "~/kiosk-launch.sh",
+    kanshi_settle_secs: int = 3,
+    extra_entries: list[AutostartEntry] | None = None,
+) -> str:
+    """Generate a complete labwc autostart file for a kiosk deployment.
+
+    Encodes the pi109 ordering: kanshi → sleep → browser.
+
+    Args:
+        kiosk_script: Path to the kiosk launch shell script.
+        kanshi_settle_secs: Seconds to wait after starting kanshi.
+            Pi109 used sleep 3 for the Waveshare 8" panel.
+        extra_entries: Additional autostart entries appended at the end.
+    """
+    lines = [
+        "# Generated by redeploy hardware/kiosk — do not edit manually",
+        "# Pi109 ordering: kanshi first, then browser after settle time",
+        "",
+        "kanshid &  # [kanshi] output manager (disables HDMI before browser starts)",
+        f"sleep {kanshi_settle_secs}  # [kanshi-settle] wait for kanshi DSI-only profile",
+        f"bash {kiosk_script} &  # [kiosk-browser] launch browser in kiosk mode",
+    ]
+    if extra_entries:
+        lines.append("")
+        for e in extra_entries:
+            lines.append(e.render())
+    return "\n".join(lines) + "\n"

redeploy-0.2.43/redeploy/hardware/kiosk/browsers.py

@@ -0,0 +1,78 @@
+"""Browser kiosk profiles for Wayland kiosk deployments.
+
+Encodes browser flag knowledge from pi109 debugging session.
+
+Pi109 critical lessons:
+- GNOME Keyring intercepts first Chromium launch without --password-store=basic
+  causing a blocking dialog that freezes the kiosk silently on RPi OS.
+- --windowed is incompatible with --kiosk under labwc; it must be removed.
+- --noerrdialogs prevents crash dialogs on recoverable GPU errors.
+- --disable-infobars removes the "Chrome is being controlled" banner.
+"""
+from __future__ import annotations
+
+from dataclasses import dataclass, field
+
+
+@dataclass(frozen=True)
+class BrowserKioskProfile:
+    """Static definition of a browser kiosk launch profile."""
+
+    id: str
+    """Short identifier, e.g. 'chromium-wayland'."""
+
+    binary: str
+    """Binary name as found in PATH, e.g. 'chromium-browser'."""
+
+    required_flags: list[str] = field(default_factory=list)
+    """Flags that MUST be present for a functional kiosk session."""
+
+    incompatible_flags: list[str] = field(default_factory=list)
+    """Flags that break kiosk mode; raise if detected in a spec."""
+
+    optional_flags: list[str] = field(default_factory=list)
+    """Recommended but not strictly required."""
+
+    notes: list[str] = field(default_factory=list)
+    """Human-readable caveats from real debugging."""
+
+    def build_launch_cmd(self, url: str, extra_flags: list[str] | None = None) -> str:
+        """Build the Chromium launch command string for a kiosk-launch.sh."""
+        flags = list(self.required_flags)
+        flags += extra_flags or []
+        bad = [f for f in flags if f in self.incompatible_flags]
+        if bad:
+            raise ValueError(
+                f"Incompatible flags detected for {self.id!r}: {bad}\n"
+                f"Remove them: {self.incompatible_flags}"
+            )
+        return f"{self.binary} {' '.join(flags)} {url}"
+
+
+CHROMIUM_WAYLAND_KIOSK = BrowserKioskProfile(
+    id="chromium-wayland",
+    binary="chromium-browser",
+    required_flags=[
+        "--kiosk",
+        "--password-store=basic",        # Pi109: GNOME Keyring blocks without this
+        "--noerrdialogs",
+        "--disable-infobars",
+        "--disable-session-crashed-bubble",
+        "--disable-features=TranslateUI",
+        "--ozone-platform=wayland",      # explicit; prevents X11 fallback
+        "--enable-features=UseOzonePlatform",
+    ],
+    incompatible_flags=[
+        "--windowed",           # Pi109: conflicts with --kiosk under labwc
+        "--start-maximized",    # overrides kiosk geometry
+    ],
+    optional_flags=[
+        "--check-for-update-interval=1",  # disable auto-update check noise
+        "--incognito",                    # stateless sessions
+    ],
+    notes=[
+        "Pi109: --password-store=basic is MANDATORY on RPi OS with GNOME Keyring",
+        "--windowed + --kiosk causes transparent/non-fullscreen window under labwc",
+        "Set DISPLAY unset; XDG_SESSION_TYPE=wayland must be exported before launch",
+    ],
+)

redeploy-0.2.43/redeploy/hardware/kiosk/compositors.py

@@ -0,0 +1,80 @@
+"""Compositor definitions for kiosk deployments.
+
+Encodes compositor-specific knowledge: where autostart lives, which output
+manager is used, what environment variables are required.
+
+Pi109 lesson: labwc uses kanshi for output management. The compositor must be
+started BEFORE kanshi, which must settle BEFORE Chromium starts.
+"""
+from __future__ import annotations
+
+from dataclasses import dataclass, field
+
+
+@dataclass(frozen=True)
+class CompositorDefinition:
+    """Static definition of a Wayland compositor for kiosk use."""
+
+    id: str
+    """Short identifier, e.g. 'labwc'."""
+
+    autostart_path: str
+    """Path to the autostart file (relative to $HOME or absolute)."""
+
+    output_manager: str
+    """Tool used to manage outputs: 'kanshi', 'wlr-randr', 'none'."""
+
+    required_packages: list[str] = field(default_factory=list)
+    """Packages that must be present on the target device."""
+
+    required_env: list[str] = field(default_factory=list)
+    """Environment variables a kiosk launcher script must export."""
+
+    notes: list[str] = field(default_factory=list)
+    """Human-readable caveats encoded from real debugging sessions."""
+
+    def autostart_abs(self, home: str = "/home/pi") -> str:
+        path = self.autostart_path
+        if path.startswith("~"):
+            path = home + path[1:]
+        return path
+
+
+LABWC = CompositorDefinition(
+    id="labwc",
+    autostart_path="~/.config/labwc/autostart",
+    output_manager="kanshi",
+    required_packages=["labwc", "kanshi", "wlr-randr"],
+    required_env=["WAYLAND_DISPLAY", "XDG_RUNTIME_DIR", "XDG_SESSION_TYPE"],
+    notes=[
+        # Pi109 session knowledge:
+        "kanshi must be started BEFORE Chromium (it disables HDMI-A-2)",
+        "sleep 3 between kanshid and browser start allows kanshi to apply profile",
+        "labwc autostart order: kanshid & → sleep 3 → bash ~/kiosk-launch.sh &",
+        "--windowed flag conflicts with --kiosk under labwc; remove it",
+        "XDG_SESSION_TYPE=wayland must be set or Chromium falls back to X11",
+    ],
+)
+
+WESTON = CompositorDefinition(
+    id="weston",
+    autostart_path="~/.config/weston.ini",
+    output_manager="weston",
+    required_packages=["weston"],
+    required_env=["WAYLAND_DISPLAY", "XDG_RUNTIME_DIR"],
+    notes=[],
+)
+
+SWAY = CompositorDefinition(
+    id="sway",
+    autostart_path="~/.config/sway/config",
+    output_manager="sway",
+    required_packages=["sway", "swaybar"],
+    required_env=["WAYLAND_DISPLAY", "XDG_RUNTIME_DIR", "XDG_SESSION_TYPE"],
+    notes=[],
+)
+
+#: registry: compositor id → definition
+COMPOSITORS: dict[str, CompositorDefinition] = {
+    c.id: c for c in [LABWC, WESTON, SWAY]
+}

redeploy-0.2.43/redeploy/hardware/kiosk/output_profiles.py

@@ -0,0 +1,68 @@
+"""Kanshi output profile generation for kiosk deployments.
+
+Encodes the pi109 lesson: HDMI outputs must be explicitly disabled in the
+kanshi profile so the DSI panel is the only active output BEFORE Chromium is
+launched. If HDMI-A-2 is enabled, Chromium may open on it instead of DSI-2.
+"""
+from __future__ import annotations
+
+from dataclasses import dataclass, field
+
+
+@dataclass
+class OutputProfile:
+    """A kanshi output profile definition."""
+
+    name: str
+    """Profile name used in kanshi config, e.g. 'waveshare-only'."""
+
+    enabled: list[str] = field(default_factory=list)
+    """Connector names to enable, e.g. ['DSI-2']."""
+
+    disabled: list[str] = field(default_factory=list)
+    """Connector names to explicitly disable, e.g. ['HDMI-A-2']."""
+
+    transforms: dict[str, str] = field(default_factory=dict)
+    """Optional per-output transform, e.g. {'DSI-2': '90'}."""
+
+    modes: dict[str, str] = field(default_factory=dict)
+    """Optional per-output mode override, e.g. {'DSI-2': '800x480'}."""
+
+    def to_kanshi_config(self) -> str:
+        """Render the kanshi profile block as a string."""
+        lines = [f"profile {self.name} {{"]
+        for conn in self.enabled:
+            parts = [f"    output {conn} enable"]
+            if conn in self.modes:
+                parts.append(f"mode {self.modes[conn]}")
+            if conn in self.transforms:
+                parts.append(f"transform {self.transforms[conn]}")
+            lines.append(" ".join(parts))
+        for conn in self.disabled:
+            lines.append(f"    output {conn} disable")
+        lines.append("}")
+        return "\n".join(lines)
+
+
+def dsi_only_profile(
+    dsi_connector: str = "DSI-2",
+    hdmi_connectors: list[str] | None = None,
+    profile_name: str = "waveshare-only",
+    transform: str | None = None,
+) -> OutputProfile:
+    """Factory: DSI panel enabled, all HDMI outputs disabled.
+
+    Pi109 knowledge: RPi 5 exposes HDMI-A-1 and HDMI-A-2. Both must be
+    disabled in kanshi so Chromium opens on DSI-2.
+    """
+    if hdmi_connectors is None:
+        hdmi_connectors = ["HDMI-A-1", "HDMI-A-2"]
+    transforms = {}
+    if transform:
+        transforms[dsi_connector] = transform
+    return OutputProfile(
+        name=profile_name,
+        enabled=[dsi_connector],
+        disabled=hdmi_connectors,
+        transforms=transforms,
+    )

{redeploy-0.2.42 → redeploy-0.2.43}/redeploy/models.py

@@ -41,6 +41,9 @@ class StepAction(str, Enum):
     INLINE_SCRIPT = "inline_script"  # multiline bash script from YAML
     ENSURE_CONFIG_LINE = "ensure_config_line"  # idempotent config.txt editing
     RASPI_CONFIG = "raspi_config"  # raspi-config nonint wrapper
+    ENSURE_KANSHI_PROFILE = "ensure_kanshi_profile"    # write/replace kanshi output profile
+    ENSURE_AUTOSTART_ENTRY = "ensure_autostart_entry"  # idempotent autostart line
+    ENSURE_BROWSER_KIOSK_SCRIPT = "ensure_browser_kiosk_script"  # write kiosk-launch.sh
 
 
 class StepStatus(str, Enum):

{redeploy-0.2.42 → redeploy-0.2.43}/redeploy.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: redeploy
-Version: 0.2.42
+Version: 0.2.43
 Summary: Infrastructure migration toolkit: detect → plan → apply
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
@@ -28,17 +28,17 @@ Requires-Dist: pfix>=0.1.60; extra == "dev"
 
 ## AI Cost Tracking
 
-![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.42-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
-![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-20.9h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
+![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.43-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-21.0h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
 
-- 🤖 **LLM usage:** $7.5000 (63 commits)
-- 👤 **Human dev:** ~$2088 (20.9h @ $100/h, 30min dedup)
+- 🤖 **LLM usage:** $7.5000 (64 commits)
+- 👤 **Human dev:** ~$2099 (21.0h @ $100/h, 30min dedup)
 
 Generated on 2026-04-21 using [openrouter/qwen/qwen3-coder-next](https://openrouter.ai/qwen/qwen3-coder-next)
 
 ---
 
-![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.42-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.43-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
 
 Infrastructure migration and device deploy toolkit — VPS, Raspberry Pi kiosk, Podman Quadlet, k3s.
 

{redeploy-0.2.42 → redeploy-0.2.43}/redeploy.egg-info/SOURCES.txt

@@ -96,6 +96,11 @@ redeploy/hardware/data/__init__.py
 redeploy/hardware/data/hyperpixel.py
 redeploy/hardware/data/official.py
 redeploy/hardware/data/waveshare.py
+redeploy/hardware/kiosk/__init__.py
+redeploy/hardware/kiosk/autostart.py
+redeploy/hardware/kiosk/browsers.py
+redeploy/hardware/kiosk/compositors.py
+redeploy/hardware/kiosk/output_profiles.py
 redeploy/iac/__init__.py
 redeploy/iac/base.py
 redeploy/iac/docker_compose.py
@@ -165,6 +170,7 @@ redeploy/version/sources/regex.py
 redeploy/version/sources/toml_.py
 redeploy/version/sources/yaml_.py
 tests/test_hardware_config.py
+tests/test_hardware_kiosk.py
 tests/test_hardware_rules.py
 tests/test_iac.py
 tests/test_parse.py