@amsterdamdatalabs/adl-agent-control-darwin-arm64 0.1.4 → 0.1.6

package/bin/adl

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/bin/adl
 size: 63812082 bytes
-sha256: 6e9c3201604d28fed30794ddca8c0a50e23902b16da3a83231cc42371bf2f5a4
+sha256: 11d1d7de31df0e008629dfdd2bb8c2ba3091a00c1ed23b35524bd08524ac4b45

package/bin/reconcile

@@ -407,12 +407,14 @@ run_brew_upgrade_all() {
     echo "brew upgrade: nothing outdated"
     return 0
   fi
-  local upgrade_output upgrade_status=0
+  local upgrade_status=0
   # Routed through run_brew itself (same owner/cwd/stdin wiring as every
   # other brew mutation in this file), bounded by run_with_timeout so a
   # network-stalled `brew upgrade` cannot hang the rest of this run forever.
-  upgrade_output="$(run_with_timeout "$BREW_UPGRADE_ALL_TIMEOUT_SECONDS" run_brew upgrade 2>&1)" || upgrade_status=$?
-  printf '%s\n' "$upgrade_output"
+  # brew's output streams live -- never captured and printed at the end,
+  # which left a long upgrade silent for minutes and looking stuck.
+  echo "brew upgrade: $formulae_count formulae, $casks_count casks outdated; upgrading (timeout ${BREW_UPGRADE_ALL_TIMEOUT_SECONDS}s)"
+  run_with_timeout "$BREW_UPGRADE_ALL_TIMEOUT_SECONDS" run_brew upgrade 2>&1 || upgrade_status=$?
   if [[ "$upgrade_status" -eq 124 ]]; then
     echo "brew upgrade timed out after ${BREW_UPGRADE_ALL_TIMEOUT_SECONDS}s" >&2
     return 1
@@ -2519,7 +2521,16 @@ fi
 # in unnoticed.
 if [[ "$mode" != apply ]]; then
   echo "global-tools: lean-ctx observe/raw-hook strip mode=plan home=$administrator_home"
-  "$script_dir/lean-ctx-observe-strip" --home "$administrator_home" --mode plan
+  # Plan runs either unprivileged (the administrator's own shell) or under
+  # sudo (fleet-cutover.sh's plan). As root it must drop to the administrator
+  # exactly like apply: lean-ctx-observe-strip refuses root against a
+  # non-root home (m5 cutover plan, 2026-09-29).
+  if [[ "$EUID" -eq 0 && "$administrator" != root ]]; then
+    (cd /tmp && sudo -u "$administrator" -H env PATH="${brew_bin%/*}:/usr/bin:/bin" \
+      "$script_dir/lean-ctx-observe-strip" --home "$administrator_home" --mode plan)
+  else
+    "$script_dir/lean-ctx-observe-strip" --home "$administrator_home" --mode plan
+  fi
 else
   echo "global-tools: lean-ctx observe/raw-hook strip mode=apply home=$administrator_home (as $administrator)"
   # stdout captured (then re-printed) so its own "backed up previous config

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amsterdamdatalabs/adl-agent-control-darwin-arm64",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "adl CLI binary for darwin/arm64 (agent identity + Azure DevOps front door — see docs/architecture/cli-design.md)",
   "license": "UNLICENSED",
   "os": [