frankbook-pro: *arr stack + qbittorrent quadlets inside podman machine

Seven units installed INSIDE the Mac VM (/home/core/.config/containers/
systemd) by a new deploy_frankbook_stack handler: gluetun (ProtonVPN
WireGuard, env-file credentials, publishes qbit's 8080/6881), qbittorrent
(Network=gluetun.container, verbatim /Volumes data roots, first-boot
config seed with fresh machine-local WebUI password and the Finished
Torrents category), and prowlarr/sonarr/radarr/lidarr/readarr (grab-only,
config migrated from dankserver at provisioning, readarr pinned to
amd64-1.0.980). deploy.sh routes the new target through the ssh-config
alias with REMOTE_SHELL=/usr/local/bin/bash (macOS bash 3.2 lacks
associative arrays); the planner learns FRANKBOOK_SERVICES and the
gluetun->qbittorrent netns pairing; new seam test pins the contract.

scripts/deploy-plan.py

@@ -104,6 +104,20 @@ DANKSERVER_SERVICES = {
     "frank-default-small",
 }
 
+# FrankBook-Pro runs the *arr stack + qBittorrent inside a podman machine on
+# macOS. Service names overlap the Linux hosts (gluetun, qbittorrent, ...);
+# the per-target sets and the frankbook-pro intercept in deploy-remote.sh
+# keep dispatch unambiguous.
+FRANKBOOK_SERVICES = {
+    "gluetun",
+    "qbittorrent",
+    "prowlarr",
+    "radarr",
+    "sonarr",
+    "lidarr",
+    "readarr",
+}
+
 DANKCLAW_COMPOSE_SERVICES = {
     "comfyui",
     "hermes",
@@ -147,6 +161,8 @@ def target_services(target: str) -> set[str]:
         return DANKCLAW_SERVICES
     if target == "dankserver":
         return DANKSERVER_SERVICES
+    if target == "frankbook-pro":
+        return FRANKBOOK_SERVICES
     raise ValueError(f"unknown target: {target}")
 
 
@@ -313,6 +329,17 @@ def services_for_path(path: str, target: str) -> set[str]:
             _add(services, *quadlet_services.get(parts[1], set()))
         return services
 
+    if parts[0] == "frankbook-pro":
+        if len(parts) >= 3 and parts[2] == "quadlet":
+            name = parts[3].removesuffix(".container")
+            if name == "gluetun":
+                # qBittorrent shares gluetun's network namespace; a gluetun
+                # recreation requires both units to be restarted.
+                _add(services, "gluetun", "qbittorrent")
+            elif name in FRANKBOOK_SERVICES:
+                _add(services, name)
+        return services
+
     if parts[0] == "scripts":
         name = p.name
         if name in {"frank-default-large.env", "frank-default-large.service", "serve-frank-large.sh"}:
@@ -362,7 +389,7 @@ def plan(paths: list[str], target: str, repo: str | None = None,
 
 def main() -> int:
     parser = argparse.ArgumentParser(description=__doc__)
-    parser.add_argument("--target", choices=("dankclaw", "dankserver"), required=True)
+    parser.add_argument("--target", choices=("dankclaw", "dankserver", "frankbook-pro"), required=True)
     parser.add_argument("--paths", nargs="+")
     parser.add_argument("--repo", help="repository path for revision-aware planning")
     parser.add_argument("--base", help="base Git revision")