redeploy 0.2.69__tar.gz → 0.2.70__tar.gz

{redeploy-0.2.69 → redeploy-0.2.70}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: redeploy
-Version: 0.2.69
+Version: 0.2.70
 Summary: Infrastructure migration toolkit: detect → plan → apply
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
@@ -32,17 +32,17 @@ Requires-Dist: mcp>=1.0; extra == "mcp"
 
 ## AI Cost Tracking
 
-![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.69-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
-![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-36.1h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
+![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.70-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-36.8h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
 
-- 🤖 **LLM usage:** $7.5000 (90 commits)
-- 👤 **Human dev:** ~$3606 (36.1h @ $100/h, 30min dedup)
+- 🤖 **LLM usage:** $7.5000 (91 commits)
+- 👤 **Human dev:** ~$3684 (36.8h @ $100/h, 30min dedup)
 
 Generated on 2026-04-23 using [openrouter/qwen/qwen3-coder-next](https://openrouter.ai/qwen/qwen3-coder-next)
 
 ---
 
-![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.69-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.70-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
 
 Infrastructure migration and device deploy toolkit — VPS, Raspberry Pi kiosk, Podman Quadlet, k3s.
 
@@ -57,6 +57,7 @@ redeploy prompt   →  NLP → command via LLM  (natural language interface)
 redeploy mcp      →  start MCP server       (Claude Desktop / VS Code / remote API)
 redeploy scan     →  find devices on LAN    (device registry)
 redeploy target   →  deploy to named device (fleet)
+redeploy gh-workflow → analyze/run GitHub Actions workflows on demand
 ```
 
 ## Install
@@ -247,6 +248,44 @@ redeploy run --env rpi5 --detect    # deploy to rpi5 with live probe
 redeploy run --dry-run              # uses .env DEPLOY_* vars if no redeploy.yaml
 ```
 
+### `redeploy gh-workflow [list|analyze|run]`
+
+Analyze and trigger GitHub Actions workflows from your repo on demand.
+
+Prerequisites:
+- GitHub CLI installed: `gh`
+- Authenticated session: `gh auth login`
+- Workflow must define `workflow_dispatch` under `on:` to be runnable manually
+
+Common usage:
+
+```bash
+# List all workflow files and dispatch readiness
+redeploy gh-workflow list
+
+# Analyze one workflow (triggers/jobs + hint if not dispatchable)
+redeploy gh-workflow analyze version-drift
+
+# Analyze all workflows in a custom repo path
+redeploy gh-workflow analyze --repo-root /path/to/repo
+
+# Trigger workflow_dispatch run on demand
+redeploy gh-workflow run version-drift --ref main
+
+# Pass workflow inputs (repeat --field)
+redeploy gh-workflow run release --field env=prod --field force=true
+
+# Trigger and wait for completion (non-zero exit when workflow fails)
+redeploy gh-workflow run version-drift --watch
+
+# Preview gh command without executing
+redeploy gh-workflow run version-drift --dry-run
+```
+
+Notes:
+- `redeploy workflow ...` is for workflows from `redeploy.css`.
+- `redeploy gh-workflow ...` is for GitHub Actions in `.github/workflows/`.
+
 ### Generic pipeline hooks (recommended)
 
 Use top-level `hooks:` in your migration spec to run custom actions in specific phases.

{redeploy-0.2.69 → redeploy-0.2.70}/README.md

@@ -3,17 +3,17 @@
 
 ## AI Cost Tracking
 
-![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.69-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
-![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-36.1h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
+![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.70-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-36.8h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
 
-- 🤖 **LLM usage:** $7.5000 (90 commits)
-- 👤 **Human dev:** ~$3606 (36.1h @ $100/h, 30min dedup)
+- 🤖 **LLM usage:** $7.5000 (91 commits)
+- 👤 **Human dev:** ~$3684 (36.8h @ $100/h, 30min dedup)
 
 Generated on 2026-04-23 using [openrouter/qwen/qwen3-coder-next](https://openrouter.ai/qwen/qwen3-coder-next)
 
 ---
 
-![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.69-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.70-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
 
 Infrastructure migration and device deploy toolkit — VPS, Raspberry Pi kiosk, Podman Quadlet, k3s.
 
@@ -28,6 +28,7 @@ redeploy prompt   →  NLP → command via LLM  (natural language interface)
 redeploy mcp      →  start MCP server       (Claude Desktop / VS Code / remote API)
 redeploy scan     →  find devices on LAN    (device registry)
 redeploy target   →  deploy to named device (fleet)
+redeploy gh-workflow → analyze/run GitHub Actions workflows on demand
 ```
 
 ## Install
@@ -218,6 +219,44 @@ redeploy run --env rpi5 --detect    # deploy to rpi5 with live probe
 redeploy run --dry-run              # uses .env DEPLOY_* vars if no redeploy.yaml
 ```
 
+### `redeploy gh-workflow [list|analyze|run]`
+
+Analyze and trigger GitHub Actions workflows from your repo on demand.
+
+Prerequisites:
+- GitHub CLI installed: `gh`
+- Authenticated session: `gh auth login`
+- Workflow must define `workflow_dispatch` under `on:` to be runnable manually
+
+Common usage:
+
+```bash
+# List all workflow files and dispatch readiness
+redeploy gh-workflow list
+
+# Analyze one workflow (triggers/jobs + hint if not dispatchable)
+redeploy gh-workflow analyze version-drift
+
+# Analyze all workflows in a custom repo path
+redeploy gh-workflow analyze --repo-root /path/to/repo
+
+# Trigger workflow_dispatch run on demand
+redeploy gh-workflow run version-drift --ref main
+
+# Pass workflow inputs (repeat --field)
+redeploy gh-workflow run release --field env=prod --field force=true
+
+# Trigger and wait for completion (non-zero exit when workflow fails)
+redeploy gh-workflow run version-drift --watch
+
+# Preview gh command without executing
+redeploy gh-workflow run version-drift --dry-run
+```
+
+Notes:
+- `redeploy workflow ...` is for workflows from `redeploy.css`.
+- `redeploy gh-workflow ...` is for GitHub Actions in `.github/workflows/`.
+
 ### Generic pipeline hooks (recommended)
 
 Use top-level `hooks:` in your migration spec to run custom actions in specific phases.

{redeploy-0.2.69 → redeploy-0.2.70}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "redeploy"
-version = "0.2.69"
+version = "0.2.70"
 description = "Infrastructure migration toolkit: detect → plan → apply"
 readme = "README.md"
 requires-python = ">=3.11"

{redeploy-0.2.69 → redeploy-0.2.70}/redeploy/__init__.py

@@ -7,7 +7,7 @@ Public API (stable from 0.2.0, semver guaranteed)::
 
 Everything not listed in ``__all__`` is internal and may change without notice.
 """
-__version__ = "0.2.69"
+__version__ = "0.2.70"
 
 # ── Core models ───────────────────────────────────────────────────────────────
 from .models import (  # noqa: F401

{redeploy-0.2.69 → redeploy-0.2.70}/redeploy/cli/__init__.py

@@ -45,6 +45,7 @@ from .commands.probe import probe
 from .commands.target import target
 from .commands.version import version_cmd
 from .commands.workflow import workflow_cmd
+from .commands.gh_workflow import gh_workflow_cmd
 from .commands.exec_ import exec_cmd, exec_multi_cmd
 from .commands.plan_apply import plan, apply, migrate, run
 from .commands.state import state_cmd
@@ -91,6 +92,7 @@ cli.add_command(status)
 cli.add_command(target)
 cli.add_command(version_cmd)
 cli.add_command(workflow_cmd)
+cli.add_command(gh_workflow_cmd)
 cli.add_command(bump_cmd, name="bump")
 cli.add_command(fix_cmd, name="fix")
 cli.add_command(prompt_cmd, name="prompt")

redeploy-0.2.70/redeploy/cli/commands/gh_workflow.py

@@ -0,0 +1,291 @@
+"""gh-workflow command - inspect and trigger GitHub Actions workflows on demand."""
+from __future__ import annotations
+
+import json
+import shutil
+import subprocess
+import sys
+from pathlib import Path
+
+import click
+import yaml
+from rich.console import Console
+from rich.table import Table
+
+
+def _find_repo_root(start: Path) -> Path | None:
+    cur = start.resolve()
+    for p in [cur, *cur.parents]:
+        if (p / ".git").exists() or (p / ".github" / "workflows").exists():
+            return p
+    return None
+
+
+def _resolve_repo_root(repo_root_opt: str | None) -> Path:
+    root = Path(repo_root_opt).resolve() if repo_root_opt else _find_repo_root(Path.cwd())
+    if not root:
+        raise click.ClickException(
+            "Could not detect repository root. Use --repo-root PATH."
+        )
+    return root
+
+
+def _workflows_dir(repo_root: Path) -> Path:
+    wf_dir = repo_root / ".github" / "workflows"
+    if not wf_dir.exists():
+        raise click.ClickException(f"No workflows directory found: {wf_dir}")
+    return wf_dir
+
+
+def _load_yaml(path: Path) -> dict:
+    try:
+        raw = yaml.safe_load(path.read_text(encoding="utf-8")) or {}
+    except Exception as exc:
+        raise click.ClickException(f"Failed to parse workflow YAML: {path}: {exc}") from exc
+    if not isinstance(raw, dict):
+        raise click.ClickException(f"Workflow file must contain a YAML mapping: {path}")
+    return raw
+
+
+def _on_section(raw: dict) -> object:
+    # PyYAML can parse key "on" as boolean True (YAML 1.1).
+    return raw.get("on", raw.get(True))
+
+
+def _trigger_list(on_value: object) -> list[str]:
+    if isinstance(on_value, str):
+        return [on_value]
+    if isinstance(on_value, list):
+        return [str(x) for x in on_value]
+    if isinstance(on_value, dict):
+        return [str(k) for k in on_value.keys()]
+    return []
+
+
+def _has_workflow_dispatch(on_value: object) -> bool:
+    if isinstance(on_value, str):
+        return on_value == "workflow_dispatch"
+    if isinstance(on_value, list):
+        return "workflow_dispatch" in on_value
+    if isinstance(on_value, dict):
+        return "workflow_dispatch" in on_value
+    return False
+
+
+def _collect_workflow_meta(path: Path) -> dict:
+    raw = _load_yaml(path)
+    on_value = _on_section(raw)
+    jobs = raw.get("jobs", {})
+    job_names = list(jobs.keys()) if isinstance(jobs, dict) else []
+    return {
+        "file": path.name,
+        "name": str(raw.get("name") or path.stem),
+        "triggers": _trigger_list(on_value),
+        "dispatch": _has_workflow_dispatch(on_value),
+        "jobs": job_names,
+    }
+
+
+def _resolve_workflow_identifier(wf_dir: Path, workflow: str) -> Path:
+    candidate = wf_dir / workflow
+    if candidate.exists() and candidate.is_file():
+        return candidate
+
+    for ext in (".yml", ".yaml"):
+        p = wf_dir / f"{workflow}{ext}"
+        if p.exists() and p.is_file():
+            return p
+
+    for p in sorted(wf_dir.glob("*.y*ml")):
+        meta = _collect_workflow_meta(p)
+        if meta["name"] == workflow or p.stem == workflow:
+            return p
+
+    available = ", ".join(sorted(p.name for p in wf_dir.glob("*.y*ml")))
+    raise click.ClickException(
+        f"Workflow not found: {workflow}. Available files: {available}"
+    )
+
+
+def _gh_available() -> bool:
+    return shutil.which("gh") is not None
+
+
+def _parse_fields(fields: tuple[str, ...]) -> list[str]:
+    parsed: list[str] = []
+    for item in fields:
+        if "=" not in item:
+            raise click.ClickException(
+                f"Invalid --field '{item}'. Expected KEY=VALUE."
+            )
+        parsed.append(item)
+    return parsed
+
+
+@click.group("gh-workflow")
+def gh_workflow_cmd():
+    """Inspect and run GitHub Actions workflows on demand."""
+
+
+@gh_workflow_cmd.command("list")
+@click.option("--repo-root", default=None, type=click.Path(file_okay=False, path_type=str),
+              help="Repository root (auto-detected if omitted)")
+def gh_workflow_list(repo_root: str | None):
+    """List workflow files and whether they are dispatchable."""
+    console = Console()
+    root = _resolve_repo_root(repo_root)
+    wf_dir = _workflows_dir(root)
+    files = sorted(wf_dir.glob("*.y*ml"))
+    if not files:
+        console.print(f"[yellow]No workflow files found in {wf_dir}[/yellow]")
+        return
+
+    table = Table(title=f"GitHub Workflows ({root.name})")
+    table.add_column("File", style="cyan")
+    table.add_column("Name")
+    table.add_column("Dispatch", justify="center")
+    table.add_column("Triggers")
+    table.add_column("Jobs", justify="right")
+
+    for path in files:
+        meta = _collect_workflow_meta(path)
+        dispatch = "yes" if meta["dispatch"] else "no"
+        triggers = ", ".join(meta["triggers"]) if meta["triggers"] else "-"
+        table.add_row(meta["file"], meta["name"], dispatch, triggers, str(len(meta["jobs"])))
+
+    console.print(table)
+
+
+@gh_workflow_cmd.command("analyze")
+@click.argument("workflow", required=False, default=None)
+@click.option("--repo-root", default=None, type=click.Path(file_okay=False, path_type=str),
+              help="Repository root (auto-detected if omitted)")
+def gh_workflow_analyze(workflow: str | None, repo_root: str | None):
+    """Analyze one workflow (or all workflows) for triggers/jobs/dispatch readiness."""
+    console = Console()
+    root = _resolve_repo_root(repo_root)
+    wf_dir = _workflows_dir(root)
+
+    selected: list[Path]
+    if workflow:
+        selected = [_resolve_workflow_identifier(wf_dir, workflow)]
+    else:
+        selected = sorted(wf_dir.glob("*.y*ml"))
+
+    for path in selected:
+        meta = _collect_workflow_meta(path)
+        console.print(f"[bold]{meta['name']}[/bold]  [dim]({meta['file']})[/dim]")
+        console.print(f"  dispatchable: {'yes' if meta['dispatch'] else 'no'}")
+        console.print(
+            "  triggers: "
+            + (", ".join(meta["triggers"]) if meta["triggers"] else "none")
+        )
+        if meta["jobs"]:
+            console.print("  jobs: " + ", ".join(meta["jobs"]))
+        else:
+            console.print("  jobs: none")
+        if not meta["dispatch"]:
+            console.print(
+                "  [yellow]hint:[/yellow] add 'workflow_dispatch:' under 'on:' to run on demand"
+            )
+        console.print()
+
+
+@gh_workflow_cmd.command("run")
+@click.argument("workflow")
+@click.option("--repo-root", default=None, type=click.Path(file_okay=False, path_type=str),
+              help="Repository root (auto-detected if omitted)")
+@click.option("--ref", default=None, help="Git ref (branch/tag/SHA) for workflow_dispatch")
+@click.option(
+    "--field",
+    "fields",
+    multiple=True,
+    help="workflow_dispatch input as KEY=VALUE (repeatable)",
+)
+@click.option("--watch", is_flag=True, help="Watch the newly started run until completion")
+@click.option("--dry-run", is_flag=True, help="Print commands without executing")
+def gh_workflow_run(
+    workflow: str,
+    repo_root: str | None,
+    ref: str | None,
+    fields: tuple[str, ...],
+    watch: bool,
+    dry_run: bool,
+):
+    """Trigger a GitHub Actions workflow_dispatch run on demand via gh CLI."""
+    console = Console()
+    root = _resolve_repo_root(repo_root)
+    wf_dir = _workflows_dir(root)
+    wf_path = _resolve_workflow_identifier(wf_dir, workflow)
+    meta = _collect_workflow_meta(wf_path)
+
+    if not meta["dispatch"]:
+        raise click.ClickException(
+            f"Workflow '{meta['file']}' is not dispatchable (missing workflow_dispatch trigger)."
+        )
+
+    if not _gh_available():
+        raise click.ClickException(
+            "GitHub CLI 'gh' is required. Install gh and run 'gh auth login'."
+        )
+
+    parsed_fields = _parse_fields(fields)
+
+    run_cmd: list[str] = ["gh", "workflow", "run", wf_path.name]
+    if ref:
+        run_cmd.extend(["--ref", ref])
+    for item in parsed_fields:
+        run_cmd.extend(["-f", item])
+
+    console.print(f"[bold]workflow:[/bold] {meta['name']} ({wf_path.name})")
+    console.print("[bold]command:[/bold] " + " ".join(run_cmd))
+
+    if dry_run:
+        return
+
+    result = subprocess.run(run_cmd, cwd=str(root), capture_output=True, text=True)
+    if result.returncode != 0:
+        msg = result.stderr.strip() or result.stdout.strip() or "gh workflow run failed"
+        raise click.ClickException(msg)
+
+    if result.stdout.strip():
+        console.print(result.stdout.strip())
+
+    if not watch:
+        return
+
+    list_cmd = [
+        "gh",
+        "run",
+        "list",
+        "--workflow",
+        wf_path.name,
+        "--limit",
+        "1",
+        "--json",
+        "databaseId,url,status,conclusion",
+    ]
+    list_res = subprocess.run(list_cmd, cwd=str(root), capture_output=True, text=True)
+    if list_res.returncode != 0:
+        msg = list_res.stderr.strip() or list_res.stdout.strip() or "gh run list failed"
+        raise click.ClickException(msg)
+
+    try:
+        entries = json.loads(list_res.stdout)
+    except Exception as exc:
+        raise click.ClickException(f"Could not parse gh run list output: {exc}") from exc
+
+    if not entries:
+        raise click.ClickException("No run found to watch.")
+
+    run_id = str(entries[0].get("databaseId", "")).strip()
+    run_url = str(entries[0].get("url", "")).strip()
+    if run_url:
+        console.print(f"[bold]run:[/bold] {run_url}")
+    if not run_id:
+        raise click.ClickException("Run ID missing from gh run list output.")
+
+    watch_cmd = ["gh", "run", "watch", run_id, "--exit-status"]
+    watch_res = subprocess.run(watch_cmd, cwd=str(root))
+    if watch_res.returncode != 0:
+        sys.exit(watch_res.returncode)

{redeploy-0.2.69 → redeploy-0.2.70}/redeploy/cli/commands/hardware.py

@@ -186,79 +186,13 @@ def _print_diagnostics(console, hw, show_fix):
 
 def _apply_transform(console, p, hw, transform):
     """Apply display transform via wlr-randr and persist in kanshi config."""
-    # Find DSI output name (e.g. "DSI-2")
     dsi = next((o for o in hw.drm_outputs if "DSI" in o.name), None)
     if not dsi:
         console.print("[red]✗ No DSI output found on this host[/red]")
         sys.exit(1)
 
-    output_name = dsi.connector  # e.g. "DSI-2"
-
-    console.print(f"[cyan]→ Setting transform {transform} on {output_name}[/cyan]")
-
-    # 1. Apply immediately via wlr-randr
-    wlr_cmd = (
-        f"WAYLAND_DISPLAY=wayland-0 XDG_RUNTIME_DIR=/run/user/$(id -u) "
-        f"wlr-randr --output {output_name} --transform {transform} 2>&1"
-    )
-    r = p.run(wlr_cmd)
-    if r.ok:
-        console.print(f"[green]  ✓ wlr-randr transform applied[/green]")
-    else:
-        console.print(f"[yellow]  ⚠ wlr-randr failed (compositor may not be running): {r.out.strip()}[/yellow]")
-
-    # 2. Persist in kanshi config — update or create transform line
-    kanshi_cfg_path = "~/.config/kanshi/config"
-    # Read current config
-    read_r = p.run(f"cat {kanshi_cfg_path} 2>/dev/null")
-    import re as _re
-
-    if read_r.ok and read_r.out.strip():
-        current = read_r.out
-        output_line_pat = _re.compile(
-            rf'(\s*output\s+{_re.escape(output_name)}\s+enable)(\s+transform\s+\S+)?'
-        )
-        if _re.search(output_line_pat, current):
-            # Replace or add transform on the existing enable line
-            new_cfg = _re.sub(
-                output_line_pat,
-                rf'\1 transform {transform}',
-                current,
-            )
-        else:
-            # Output line without "enable" — just append transform param
-            new_cfg = _re.sub(
-                rf'(\s*output\s+{_re.escape(output_name)}\b)',
-                rf'\1 transform {transform}',
-                current,
-            )
-    else:
-        # No kanshi config — create minimal one
-        new_cfg = (
-            f"profile waveshare-only {{\n"
-            f"    output {output_name} enable transform {transform}\n"
-            f"}}\n"
-        )
-
-    # Write updated config
-    escaped = new_cfg.replace("'", "'\\''")
-    write_r = p.run(f"mkdir -p ~/.config/kanshi && printf '%s' '{escaped}' > {kanshi_cfg_path}")
-    if write_r.ok:
-        console.print(f"[green]  ✓ kanshi config updated ({kanshi_cfg_path})[/green]")
-    else:
-        console.print(f"[red]  ✗ failed to write kanshi config: {write_r.out}[/red]")
-        sys.exit(1)
-
-    # 3. Reload kanshi if running
-    pkill_r = p.run("pkill -SIGUSR1 kanshi 2>/dev/null || pkill kanshi 2>/dev/null; sleep 1; "
-                    "WAYLAND_DISPLAY=wayland-0 XDG_RUNTIME_DIR=/run/user/$(id -u) kanshi &")
-    if pkill_r.ok:
-        console.print("[green]  ✓ kanshi reloaded[/green]")
-
-    console.print(
-        f"\n[bold green]✓ Transform {transform} applied to {output_name}[/bold green]\n"
-        f"  [dim]Persistent: {kanshi_cfg_path}[/dim]"
-    )
+    from ...config_apply.handlers.display import apply_display_transform
+    apply_display_transform(console, p, dsi.connector, transform)
 
 
 def _execute_query(hw, query_expr, output_fmt):

redeploy-0.2.70/redeploy/config_apply/handlers/__init__.py

@@ -0,0 +1,10 @@
+"""Hardware/infrastructure config-apply handlers.
+
+Each handler receives a ``(console, probe, value)`` triple and performs
+the remote mutation + local reporting.
+"""
+from __future__ import annotations
+
+from .display import apply_display_transform
+
+__all__ = ["apply_display_transform"]

redeploy-0.2.70/redeploy/config_apply/handlers/display.py

@@ -0,0 +1,99 @@
+"""Apply display / kanshi configuration changes on the remote host."""
+from __future__ import annotations
+
+import re
+import sys
+
+from rich.console import Console
+
+from ...detect.remote import RemoteProbe
+from ...hardware.kiosk.compositors import DSI_OUTPUT_NAME
+
+
+def apply_display_transform(
+    console: Console,
+    probe: RemoteProbe,
+    output_name: str,
+    transform: str,
+) -> None:
+    """Apply *transform* to *output_name* via wlr-randr and persist in kanshi config.
+
+    Parameters
+    ----------
+    console:
+        Rich console for progress output.
+    probe:
+        Active SSH probe to the target host.
+    output_name:
+        DRM connector name (e.g. ``DSI-2``).
+    transform:
+        One of the wlr-randr transforms (``normal``, ``90``, ``180``, ``270``,
+        ``flipped``, …).
+    """
+    console.print(f"[cyan]→ Setting transform {transform} on {output_name}[/cyan]")
+
+    # 1. Apply immediately via wlr-randr
+    wlr_cmd = (
+        f"WAYLAND_DISPLAY=wayland-0 XDG_RUNTIME_DIR=/run/user/$(id -u) "
+        f"wlr-randr --output {output_name} --transform {transform} 2>&1"
+    )
+    r = probe.run(wlr_cmd)
+    if r.ok:
+        console.print(f"[green]  ✓ wlr-randr transform applied[/green]")
+    else:
+        console.print(
+            f"[yellow]  ⚠ wlr-randr failed (compositor may not be running): "
+            f"{r.out.strip()}[/yellow]"
+        )
+
+    # 2. Persist in kanshi config — update or create transform line
+    kanshi_cfg_path = "~/.config/kanshi/config"
+    read_r = probe.run(f"cat {kanshi_cfg_path} 2>/dev/null")
+
+    if read_r.ok and read_r.out.strip():
+        current = read_r.out
+        output_line_pat = re.compile(
+            rf'(\s*output\s+{re.escape(output_name)}\s+enable)(\s+transform\s+\S+)?'
+        )
+        if re.search(output_line_pat, current):
+            new_cfg = re.sub(
+                output_line_pat,
+                rf'\1 transform {transform}',
+                current,
+            )
+        else:
+            new_cfg = re.sub(
+                rf'(\s*output\s+{re.escape(output_name)}\b)',
+                rf'\1 transform {transform}',
+                current,
+            )
+    else:
+        new_cfg = (
+            f"profile waveshare-only {{\n"
+            f"    output {output_name} enable transform {transform}\n"
+            f"}}\n"
+        )
+
+    # Write updated config
+    escaped = new_cfg.replace("'", "'\\''")
+    write_r = probe.run(
+        f"mkdir -p ~/.config/kanshi && printf '%s' '{escaped}' > {kanshi_cfg_path}"
+    )
+    if write_r.ok:
+        console.print(f"[green]  ✓ kanshi config updated ({kanshi_cfg_path})[/green]")
+    else:
+        console.print(f"[red]  ✗ failed to write kanshi config: {write_r.out}[/red]")
+        sys.exit(1)
+
+    # 3. Reload kanshi if running
+    pkill_r = probe.run(
+        "pkill -SIGUSR1 kanshi 2>/dev/null || pkill kanshi 2>/dev/null; sleep 1; "
+        "WAYLAND_DISPLAY=wayland-0 XDG_RUNTIME_DIR=/run/user/$(id -u) kanshi &"
+    )
+    if pkill_r.ok:
+        console.print("[green]  ✓ kanshi reloaded[/green]")
+
+    console.print(
+        f"\n[bold green]✓ Transform {transform} applied to {output_name}[/bold green]\n"
+        f"  [dim]Persistent: {kanshi_cfg_path}[/dim]"
+    )