[baudneo]

Lets the optional Kiosk Satellite app show a dashboard on crown and athena while hassmic stays the voice satellite.

• Once per boot, when the app is installed, hassmic grants it the permissions it would otherwise ask a person for (camera, location, storage, overlay, settings, usage stats, no doze, device admin). RECORD_AUDIO is revoked and denied: the mixer hands the mic to one client only.
• hassmic then opens the app over its own home screen (the app has no HOME category, so nothing else starts it).
• Firewall: inbound TCP 2324 (the app's web page and API) and 6053 (its ESPHome API, which Home Assistant connects to), private addresses only.
• Only models that set KIOSK_PACKAGE in device.conf are affected (crown, athena).
• The app gets no internet access, so it reaches the LAN only. That could be a follow-up with its own setting.

The fuller version ran on both Shows; this trimmed one is untested on a device. Docs: docs/kiosk-satellite.md.

🤖 Generated with Claude Code

[baudneo]

should be bare min to get it up, it needs internet access if its to poll for its own updates and read HASS from public IPs or iframes, etc. I have code for that, but ill wait to see what gets merged before I tell claude to make a follow-up PR.

The update helper is in the internet stuff too.