HydraIssues

Context

On 2026-04-22 I wrote three helper scripts to C:\hydrabody\streamdeck\ on wobbly:

• kiosk-off.ps1 / kiosk-on.ps1 (hit hydrabody's local kiosk API with embedded token)
• kiosk-off.cmd / kiosk-on.cmd (wrappers that invoke PowerShell with -ExecutionPolicy Bypass)

These scripts are production-relevant — the physical StreamDeck calls the .cmd wrappers. But they sit on the body's disk only, not versioned, not deployed via CI, not reviewable.

Problems

• No source of truth: if someone edits them on wobbly, the drift is invisible.
• Can't be redeployed to a new body without copy-paste.
• Token is embedded in plaintext in the .ps1 files — if hydrabody rotates its token, every body's scripts must be regenerated manually.
• No PR review or audit trail.

Proposal

Two options:

Option A (lightweight)

Create hydrabody/scripts/body-side/ in the hydrabody repo. Check in the .ps1 / .cmd files. hydrabody's provisioning step extracts them to C:\hydrabody\scripts\ on the body during install. The token can be templated in at provision time from the body's own config.

Option B (tiered)

Separate repo hydrabody-bodyscripts (or similar), released and pulled by hydrabody alongside Sunshine. Overkill for current volume.

Recommend Option A for starters. Rolls out via existing hydrabody tag-triggered CI. No new deployment mechanism.

Scope

• Move the four current scripts into the repo.
• Provisioning code writes them to disk with the body's current token substituted (or switch the PS side to read the token from body.yaml each invocation, so it auto-updates on rotation).
• Document the pattern so future physical-exposure helpers go the same route.

References

• Physical-exposure body pattern plan: /home/claude-user/.claude/plans/gentle-greeting-papert.md
• Scripts currently live at C:\hydrabody\streamdeck\ on wobbly (node-5f8b7b59).