@amsterdamdatalabs/adl-agent-control-linux-x64 0.1.4

package/bin/scratch-reap

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+export PATH="/usr/local/bin:/opt/homebrew/bin:/home/linuxbrew/.linuxbrew/bin:/usr/bin:/bin:/usr/sbin:/sbin"
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+repo_root="$(cd "$script_dir/.." && pwd)"
+
+command -v bun >/dev/null 2>&1 || {
+  echo "scratch-reap requires bun; reconcile the global-tools manifest first" >&2
+  exit 1
+}
+
+exec bun "$repo_root/packages/fleet/src/scratch-reap.ts" "$@"

package/bin/shell-path-policy

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+# Managed by adl global-tools.
+# Keep /usr/local/bin first in interactive shells so manifest-owned front
+# controllers win over Homebrew and system executables on every host.
+set -euo pipefail
+
+usage() {
+  echo 'usage: shell-path-policy --home ABSOLUTE_PATH --platform mac|linux --mode plan|apply [--owner USER]' >&2
+  exit 2
+}
+
+home=''
+platform=''
+mode=''
+owner=''
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --home) home="${2:-}"; shift 2 ;;
+    --platform) platform="${2:-}"; shift 2 ;;
+    --mode) mode="${2:-}"; shift 2 ;;
+    --owner) owner="${2:-}"; shift 2 ;;
+    *) usage ;;
+  esac
+done
+[[ "$home" == /* && "$home" != / && "$home" != *$'\n'* ]] || usage
+[[ "$platform" == mac || "$platform" == linux ]] || usage
+[[ "$mode" == plan || "$mode" == apply ]] || usage
+
+upsert_block() {
+  local file="$1" begin="$2" end="$3" body="$4" temp
+  if [[ "$mode" == plan ]]; then
+    echo "would install managed shell PATH policy: $file"
+    return
+  fi
+  mkdir -p -- "$(dirname -- "$file")"
+  temp="$file.adl-new"
+  if [[ -e "$file" ]]; then
+    awk -v begin="$begin" -v end="$end" '
+      $0 == begin { inside = 1; next }
+      $0 == end { inside = 0; next }
+      !inside { print }
+    ' "$file" >"$temp"
+  else
+    : >"$temp"
+  fi
+  printf '\n%s\n%s\n%s\n' "$begin" "$body" "$end" >>"$temp"
+  mv -f -- "$temp" "$file"
+  [[ -z "$owner" ]] || chown "$owner" "$file"
+}
+
+if [[ "$platform" == mac ]]; then
+  upsert_block "$home/.zshenv" '# BEGIN ADL GLOBAL PATH' '# END ADL GLOBAL PATH' \
+    'export PATH="/usr/local/bin${PATH:+:$PATH}"'
+  exit 0
+fi
+
+upsert_block "$home/.bashenv" '# BEGIN ADL GLOBAL PATH ENV' '# END ADL GLOBAL PATH ENV' \
+  'export PATH="/usr/local/bin${PATH:+:$PATH}"'
+upsert_block "$home/.zshenv" '# BEGIN ADL GLOBAL PATH ENV' '# END ADL GLOBAL PATH ENV' \
+  'export PATH="/usr/local/bin${PATH:+:$PATH}"'
+for shell_file in "$home/.bashrc" "$home/.bash_profile" "$home/.profile"; do
+  upsert_block "$shell_file" '# BEGIN ADL GLOBAL PATH SOURCE' '# END ADL GLOBAL PATH SOURCE' \
+    'if [[ -r "$HOME/.bashenv" ]]; then . "$HOME/.bashenv"; fi'
+done

package/bin/surface-policy

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+export PATH="/usr/local/bin:/opt/homebrew/bin:/home/linuxbrew/.linuxbrew/bin:/usr/bin:/bin:/usr/sbin:/sbin"
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+repo_root="$(cd "$script_dir/.." && pwd)"
+
+command -v bun >/dev/null 2>&1 || {
+  echo "surface-policy requires bun; reconcile the global-tools manifest first" >&2
+  exit 1
+}
+
+exec bun "$repo_root/packages/agent-settings/src/surface-policy.ts" "$@"

package/bin/sync-and-reconcile

@@ -0,0 +1,215 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ -n "${SYNC_AND_RECONCILE_TEST_ROOT:-}" ]]; then
+  export PATH="${PATH:-/usr/bin:/bin}"
+else
+  export PATH="/usr/local/bin:/opt/homebrew/bin:/home/linuxbrew/.linuxbrew/bin:/usr/bin:/bin:/usr/sbin:/sbin"
+fi
+
+# Scheduled sync downloads the ADL platform package and executes its own
+# reconcile command. Checkout mode is an explicit developer-only bypass.
+sync_and_reconcile_platform() {
+  case "$(uname -s)" in
+    Darwin) printf '%s\n' mac ;;
+    Linux) printf '%s\n' linux ;;
+    *) echo "unsupported operating system for scheduled sync: $(uname -s)" >&2; return 1 ;;
+  esac
+}
+
+require_linux_automation_root() {
+  local platform="$1" owner="$2"
+  if [[ "$platform" == linux && "$owner" != root ]]; then
+    echo "global-tools: Linux scheduled sync must run as root; got --owner $owner" >&2
+    return 1
+  fi
+}
+
+parse_sync_source() {
+  sync_source=npm
+  while [[ "$#" -gt 0 ]]; do
+    case "$1" in
+      --source) sync_source="${2:-}"; shift 2 ;;
+      *) shift ;;
+    esac
+  done
+  case "$sync_source" in
+    npm|checkout) ;;
+    *) echo "unsupported source: $sync_source" >&2; return 2 ;;
+  esac
+}
+
+npm_package_spec() {
+  local policy="$1" version="${2:-}"
+  case "$policy" in
+    latest-stable) printf '%s@latest\n' '@amsterdamdatalabs/adl-agent-control' ;;
+    pinned)
+      [[ "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+([-.][0-9A-Za-z.-]+)?$ ]] || {
+        echo "pinned update_policy requires a valid installed package version" >&2
+        return 1
+      }
+      printf '%s@%s\n' '@amsterdamdatalabs/adl-agent-control' "$version"
+      ;;
+    *) echo "unsupported update_policy: $policy" >&2; return 1 ;;
+  esac
+}
+
+npm_platform_package_dir() {
+  local npm_root="$1" os="$2" arch="$3" platform
+  case "$os:$arch" in
+    Darwin:arm64) platform=darwin-arm64 ;;
+    Linux:x86_64) platform=linux-x64 ;;
+    *) echo "unsupported platform for npm package: $os $arch" >&2; return 1 ;;
+  esac
+  printf '%s/@amsterdamdatalabs/adl-agent-control-%s\n' "${npm_root%/}" "$platform"
+}
+
+prepare_adl_npm_migration() {
+  local applied_manifest="$1" device="$2" platform="$3" legacy_adl="$4" hash_file="$5"
+  local previous_manager previous_executable
+  [[ -f "$applied_manifest" ]] || return 0
+  previous_manager="$(jq -r --arg platform "$platform" --arg device "$device" '(.[$platform].common.tools // {}) * (.[$platform].devices[$device].tools // {}) | .adl.manager // empty' "$applied_manifest")" || return 1
+  previous_executable="$(jq -r --arg platform "$platform" --arg device "$device" '(.[$platform].common.tools // {}) * (.[$platform].devices[$device].tools // {}) | .adl.executable // empty' "$applied_manifest")" || return 1
+  [[ "$previous_manager" == bun-compile && "$previous_executable" == /usr/local/bin/adl ]] || return 0
+  [[ -f "$legacy_adl" && ! -L "$legacy_adl" ]] || {
+    echo "prior manifest proves adl was a Bun binary, but the expected regular file is missing or is a symlink: $legacy_adl" >&2
+    return 1
+  }
+  rm -f -- "$legacy_adl"
+  rm -f -- "$hash_file"
+  echo "global-tools: removed prior Bun adl binary before npm install: $legacy_adl"
+}
+
+if [[ "${SYNC_AND_RECONCILE_SOURCE_ONLY:-0}" == 1 ]]; then
+  return 0
+fi
+
+sync_source=npm
+device=""
+repo=""
+owner=""
+mode=apply
+while [[ "$#" -gt 0 ]]; do
+  case "$1" in
+    --source) sync_source="${2:-}"; shift 2 ;;
+    --device) device="${2:-}"; shift 2 ;;
+    --repo) repo="${2:-}"; shift 2 ;;
+    --owner) owner="${2:-}"; shift 2 ;;
+    --mode) mode="${2:-}"; shift 2 ;;
+    *) echo "unknown argument: $1" >&2; exit 2 ;;
+  esac
+done
+case "$sync_source" in
+  npm|checkout) ;;
+  *) echo "unsupported source: $sync_source" >&2; exit 2 ;;
+esac
+[[ -n "$device" && -n "$owner" ]] || {
+  echo "usage: sync-and-reconcile [--source npm|checkout] --device NAME --owner USER [--repo PATH] [--mode audit|plan|apply]" >&2
+  exit 2
+}
+[[ "$mode" == audit || "$mode" == plan || "$mode" == apply ]] || {
+  echo "unsupported reconcile mode: $mode" >&2
+  exit 2
+}
+if [[ "$sync_source" == checkout && -z "$repo" ]]; then
+  echo "checkout source requires --repo PATH" >&2
+  exit 2
+fi
+if [[ "$sync_source" == npm && -n "$repo" ]]; then
+  echo "npm source does not accept --repo; use --source checkout for a checkout path" >&2
+  exit 2
+fi
+
+if [[ -n "${SYNC_AND_RECONCILE_TEST_ROOT:-}" ]]; then
+  lock_dir="${SYNC_AND_RECONCILE_TEST_ROOT%/}/adl-sync.lock"
+  scheduler_path="${SYNC_AND_RECONCILE_TEST_ROOT%/}/scheduler"
+else
+  lock_dir=/var/run/adl-sync.lock
+  scheduler_path=/usr/local/libexec/adl-sync
+fi
+if ! mkdir "$lock_dir" 2>/dev/null; then
+  echo "global-tools: another reconciliation is running (lock: $lock_dir)" >&2
+  exit 1
+fi
+trap 'rmdir "$lock_dir" 2>/dev/null || true' EXIT
+
+host_platform="$(sync_and_reconcile_platform)"
+require_linux_automation_root "$host_platform" "$owner" || exit 1
+
+if [[ "$sync_source" == checkout ]]; then
+  [[ -e "$repo/.git" ]] || { echo "developer checkout missing: $repo" >&2; exit 1; }
+  manifest="$repo/packages/fleet/manifest.json"
+  [[ -f "$manifest" ]] || { echo "developer checkout manifest missing: $manifest" >&2; exit 1; }
+  [[ -x "$repo/bin/reconcile" ]] || { echo "developer checkout reconcile is missing: $repo/bin/reconcile" >&2; exit 1; }
+  echo "global-tools: source=checkout (developer mode)"
+  reconcile_dir="$repo/bin"
+else
+  os="$(uname -s)"
+  arch="$(uname -m)"
+  case "$os" in
+    Darwin) npm_path=/opt/homebrew/bin:/usr/bin:/bin ;;
+    Linux) npm_path=/home/linuxbrew/.linuxbrew/bin:/usr/bin:/bin ;;
+    *) echo "unsupported operating system for npm package: $os" >&2; exit 1 ;;
+  esac
+  npm_env=(PATH="$npm_path")
+  if [[ "$os" == Linux ]]; then npm_env=(npm_config_prefix=/usr/local PATH="$npm_path"); fi
+  npm_root="$(sudo -u "$owner" -H env "${npm_env[@]}" npm root -g)" || {
+    echo "cannot resolve the global npm root as $owner" >&2
+    exit 1
+  }
+  [[ "$npm_root" == /*/lib/node_modules ]] || {
+    echo "global npm root has an unsupported path: $npm_root" >&2
+    exit 1
+  }
+  npm_prefix="${npm_root%/lib/node_modules}"
+  platform_dir="$(npm_platform_package_dir "$npm_root" "$os" "$arch")" || exit 1
+  installed_manifest="$platform_dir/packages/fleet/manifest.json"
+  package_spec=""
+  if [[ -f "$installed_manifest" ]]; then
+    update_policy="$(jq -er '.config.update_policy | select(type == "string")' "$installed_manifest")" || {
+      echo "installed adl package manifest has no config.update_policy: $installed_manifest" >&2
+      exit 1
+    }
+    case "$update_policy" in
+      latest-stable) package_spec="$(npm_package_spec latest-stable)" ;;
+      pinned)
+        pinned_version="$(jq -er --arg platform "$host_platform" '.[$platform].common.tools.adl.version | select(type == "string")' "$installed_manifest")" || {
+          echo "installed adl package manifest requires a version for pinned update_policy: $installed_manifest" >&2
+          exit 1
+        }
+        package_spec="$(npm_package_spec pinned "$pinned_version")" || exit 1
+        ;;
+      *) package_spec="$(npm_package_spec "$update_policy")" || exit 1 ;;
+    esac
+  else
+    package_spec="$(npm_package_spec latest-stable)"
+    echo "global-tools: bootstrapping adl package from npm latest tag"
+  fi
+
+  if [[ -n "${SYNC_AND_RECONCILE_TEST_ROOT:-}" ]]; then
+    migration_root="${SYNC_AND_RECONCILE_TEST_ROOT%/}"
+    applied_manifest="$migration_root/applied-manifest.json"
+    legacy_adl="$migration_root/usr-local/bin/adl"
+    legacy_hash="$migration_root/bun-compile/adl.source-hash"
+  else
+    applied_manifest=/var/lib/adl/applied-manifest.json
+    legacy_adl=/usr/local/bin/adl
+    legacy_hash=/var/lib/adl/bun-compile/adl.source-hash
+  fi
+  prepare_adl_npm_migration "$applied_manifest" "$device" "$host_platform" "$legacy_adl" "$legacy_hash"
+
+  sudo -u "$owner" -H env "${npm_env[@]}" npm install --global --prefix "$npm_prefix" --no-audit --no-fund "$package_spec"
+  [[ -d "$platform_dir" ]] || { echo "npm install did not create the platform package: $platform_dir" >&2; exit 1; }
+  installed_manifest="$platform_dir/packages/fleet/manifest.json"
+  [[ -f "$installed_manifest" ]] || { echo "installed adl package manifest missing: $installed_manifest" >&2; exit 1; }
+  [[ -x "$platform_dir/bin/reconcile" ]] || { echo "installed adl package reconcile is missing: $platform_dir/bin/reconcile" >&2; exit 1; }
+  [[ -x "$platform_dir/bin/sync-and-reconcile" ]] || { echo "installed adl package scheduler is missing: $platform_dir/bin/sync-and-reconcile" >&2; exit 1; }
+  [[ -x "$platform_dir/bin/validate-manifest" ]] || { echo "installed adl package manifest validator is missing: $platform_dir/bin/validate-manifest" >&2; exit 1; }
+  "$platform_dir/bin/validate-manifest" "$installed_manifest"
+  install -m 0755 "$platform_dir/bin/sync-and-reconcile" "$scheduler_path.new"
+  mv "$scheduler_path.new" "$scheduler_path"
+  reconcile_dir="$platform_dir/bin"
+fi
+
+PATH="$reconcile_dir:$PATH" "$reconcile_dir/reconcile" \
+  --device "$device" --source "$sync_source" --mode "$mode"

package/bin/update-azure-agent-pool

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+export PATH="/usr/local/bin:/opt/homebrew/bin:/home/linuxbrew/.linuxbrew/bin:/usr/bin:/bin:/usr/sbin:/sbin"
+
+manifest="${1:-}"
+[[ -f "$manifest" ]] || { echo "usage: update-azure-agent-pool MANIFEST" >&2; exit 2; }
+
+organization="$(jq -r '.config.azure_agents.organization' "$manifest")"
+pool_id="$(jq -r '.config.azure_agents.pool_id' "$manifest")"
+api_root="https://dev.azure.com/$organization/_apis/distributedtask/pools/$pool_id"
+
+token="$(az account get-access-token \
+  --resource 499b84ac-1321-427f-aa17-267ca6975798 \
+  --query accessToken -o tsv)"
+[[ -n "$token" ]] || { echo "Azure CLI did not return an Azure DevOps token" >&2; exit 1; }
+auth_args=(-H "Authorization: Bearer $token")
+
+agents_file="$(mktemp)"
+trap 'rm -f "$agents_file"' EXIT
+curl -fsS "${auth_args[@]}" "$api_root/agents?api-version=7.1" >"$agents_file"
+
+while IFS= read -r agent_name; do
+  agent_id="$(jq -r --arg name "$agent_name" '.value[] | select(.name == $name) | .id' "$agents_file")"
+  [[ -n "$agent_id" ]] || { echo "configured Azure agent not found: $agent_name" >&2; exit 1; }
+  curl -fsS "${auth_args[@]}" -X POST -H 'Content-Length: 0' \
+    "$api_root/messages?agentId=$agent_id&api-version=6.0" >/dev/null
+  echo "Azure Pipelines agent update requested: $agent_name (id $agent_id)"
+done < <(jq -r '.config.azure_agents.enabled_agents[]' "$manifest")

package/bin/validate-manifest

@@ -0,0 +1,171 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+export PATH="/usr/local/bin:/opt/homebrew/bin:/home/linuxbrew/.linuxbrew/bin:/usr/bin:/bin:/usr/sbin:/sbin"
+
+manifest="${1:-}"
+[[ -n "$manifest" && -f "$manifest" ]] || {
+  echo "usage: validate-manifest MANIFEST" >&2
+  exit 2
+}
+
+if ! jq -e '
+  def relpath: type == "string" and length > 0 and (startswith("/") | not) and (split("/") | index("..") | not);
+  keys == ["config", "linux", "mac"] and
+  .config.schema == 1 and
+  (.config.repository | type == "string" and test("^https://dev\\.azure\\.com/[A-Za-z0-9._-]+/[A-Za-z0-9._-]+/_git/[A-Za-z0-9._-]+$")) and
+  .config.branch == "main" and
+  .config.interval_seconds == 21600 and
+  .config.update_policy == "latest-stable" and
+  .config.allow_major_updates == true and
+  .config.remove_deleted_entries == true and
+  .config.global_surface_sweep.enabled == true and
+  (.config.global_surface_sweep.remove_unprotected | type == "boolean") and
+  (.config.global_surface_sweep | keys == ["enabled", "remove_unprotected"]) and
+  .config.kimi_hooks == {"enabled": true} and
+  .config.surface_policy == {"enabled": true} and
+  .config.global_agents == {"enabled": true} and
+  .config.vscode_settings == {"enabled": true} and
+  (.config.scratch_reap | type == "object") and
+  (.config.scratch_reap | keys == ["enabled", "idle_days", "reap_days", "remove_worktrees"]) and
+  .config.scratch_reap.enabled == true and
+  (.config.scratch_reap.idle_days | type == "number" and . >= 0 and floor == .) and
+  (.config.scratch_reap.reap_days | type == "number" and . >= 1 and floor == .) and
+  (.config.scratch_reap.remove_worktrees | type == "boolean") and
+  (.config.protected_tools | type == "array") and
+  (.config.git_global_config | type == "object" and
+    (to_entries | all((.key | test("^[A-Za-z][A-Za-z0-9-]*\\..+")) and (.value | type) == "string"))) and
+  (.mac.common.tools | type == "object") and
+  (.mac.devices | type == "object") and
+  (.linux.common.tools | type == "object") and
+  (.linux.devices | type == "object") and
+  ([.mac.devices[], .linux.devices[]] |
+    all(.minimum_free_gib >= 1) and
+    all((.home | type) == "string" and (.home | startswith("/"))) and
+    all((.default_agent | type) == "string" and (.default_agent | test("^agent-[a-z0-9-]+$"))) and
+    all((keys - ["administrator", "default_agent", "home", "launch_agents", "minimum_free_gib", "schedule_minute", "scratch_repos", "brew_upgrade_all", "surface_clis", "tools"] | length) == 0) and
+    all((.scratch_repos // []) | type == "array" and (. | unique | length) == length and
+      all(type == "string" and startswith("/") and . != "/" and
+        (endswith("/") | not) and (contains("..") | not) and (test("\\s") | not))) and
+    all((.brew_upgrade_all // false) | type == "boolean") and
+    all(
+      (.surface_clis // []) as $surfaces |
+      ($surfaces | type == "array") and
+      ($surfaces | map(.name) | length == (unique | length)) and
+      ($surfaces | all(
+        (.name | type == "string" and length > 0) and
+        (.manager | type == "string" and (. == "native" or . == "npm" or . == "brew" or . == "unknown")) and
+        ((.report_only // false) | type == "boolean") and
+        (if (.report_only // false) == true then
+           (.executable | type == "string" and startswith("/"))
+         else
+           (.command | type == "string" and length > 0 and (contains("/") | not)) and
+           (.update_args | type == "array" and length > 0 and all(type == "string" and length > 0))
+         end) and
+        (.manager != "brew" or
+          ((.report_only // false) == false and .command == "brew" and
+           .update_args == ["upgrade", "--cask", .name]))
+      ))
+    )) and
+  (.mac.devices.m3.surface_clis // [] | any(.name == "codex" and .manager == "brew" and .command == "brew" and .update_args == ["upgrade", "--cask", "codex"] and (.report_only // false) == false)) and
+  (.mac.devices.m5.surface_clis // [] | any(.name == "codex" and .manager == "brew" and .command == "brew" and .update_args == ["upgrade", "--cask", "codex"] and (.report_only // false) == false)) and
+  ([.mac.common.tools[], .linux.common.tools[], .mac.devices[].tools[], .linux.devices[].tools[]] |
+    all(.manager == "brew" or .manager == "apt" or .manager == "npm" or .manager == "pip" or .manager == "release-archive" or .manager == "release-archive-latest" or .manager == "shim" or .manager == "repo-script" or .manager == "repo-dir" or .manager == "bun-compile" or .manager == "embedding-model") and
+    all((.package | type) == "string" and (.package | length) > 0) and
+    all((.executable | type) == "string" and (.executable | length) > 0) and
+    all((.reason // null) == null or (.reason | type == "string" and length > 0)) and
+    all(if .manager == "release-archive" then
+      ((.version | type) == "string" and (.version | length) > 0) and
+      ((.url | type) == "string" and (.url | startswith("https://"))) and
+      ((.sha256 | type) == "string" and (.sha256 | test("^[0-9a-f]{64}$"))) and
+      ((.archive_executable | type) == "string" and
+        (.archive_executable | test("^[^/]") and (contains("..") | not))) and
+      (.executable | startswith("/usr/local/bin/"))
+    elif .manager == "release-archive-latest" then
+      ((.repo | type) == "string" and (.repo | test("^[^/[:space:]]+/[^/[:space:]]+$"))) and
+      ((.asset | type) == "string" and
+        (.asset | test("^[^/]") and (contains("..") | not))) and
+      ((.checksums_asset // "SHA256SUMS") | type) == "string" and
+      ((.archive_executable | type) == "string" and
+        (.archive_executable | test("^[^/]") and (contains("..") | not))) and
+      (.executable | startswith("/usr/local/bin/")) and
+      (has("version") | not) and (has("url") | not) and (has("sha256") | not)
+    elif .manager == "shim" then
+      (.executable | startswith("/usr/local/bin/"))
+    elif .manager == "repo-script" then
+      (has("version") | not) and
+      ((.source | type) == "string" and
+        (.source | test("^[^/]") and (contains("..") | not))) and
+      (.executable | test("^/usr/local/bin/[A-Za-z0-9][A-Za-z0-9._-]*$"))
+    elif .manager == "bun-compile" then
+      (has("version") | not) and
+      ((.source | type) == "string" and
+        (.source | test("^[^/]") and (contains("..") | not))) and
+      ((.entry | type) == "string" and (.entry | length) > 0) and
+      (.executable | startswith("/usr/local/bin/"))
+    elif .manager == "repo-dir" then
+      # A whole tracked directory synced verbatim into a fleet-owned libexec
+      # root (adl-m3-finish item 2/3): repo-controls (and its one
+      # cross-package runtime dependency, the agent-hooks log writer) need
+      # real FILES on disk at a fixed path, which a single bun-compile binary
+      # embedding cannot provide. The executable field here is not a PATH
+      # command: it is the path, relative to target, that proves the sync
+      # produced something runnable.
+      (has("version") | not) and
+      ((.source | type) == "string" and
+        (.source | test("^[^/]") and (contains("..") | not))) and
+      ((.target | type) == "string" and (.target | startswith("/usr/local/libexec/adl/"))) and
+      ((.executable | startswith("/") | not) and (.executable | contains("..") | not))
+    elif .manager == "embedding-model" then
+      ((.version | type) == "string" and (.version | length) > 0) and
+      ((.source | type) == "string" and
+        (.source | test("^[^/]") and (contains("..") | not))) and
+      ((.vocab_limit | type) == "number") and
+      ((.dim | type) == "number") and
+      (has("revision") | not) and (has("source_files") | not) and (has("artifact_files") | not)
+    elif .manager == "npm" then
+      # .version is optional for npm: absent means update_policy=latest-stable
+      # tracks whatever npm resolves; present pins the install_one_tool
+      # $package@$version spec (Handoff 5, 2026-09-26, H4). No checksum field
+      # exists for npm -- there is no release-archive-style sha256 pin here,
+      # and none is required or accepted.
+      ((has("version") | not) or ((.version | type) == "string" and (.version | length) > 0)) and
+      # .allow_scripts (docs/operations/global-tools.md Topic 2, decided
+      # 2026-09-28): an explicit, per-entry allow-list of dependency package
+      # names whose install/postinstall scripts reconcile passes through as
+      # `npm install -g --allow-scripts=...` for THIS install only -- never a
+      # global `npm config set allow-scripts`. Optional; absent or empty means
+      # no scripts are allowed, same as today.
+      ((.allow_scripts // []) | type == "array" and
+        all(type == "string" and test("^(@[a-z0-9][a-z0-9._-]*/)?[a-z0-9][a-z0-9._-]*$")))
+    else true end)) and
+  (.linux.common | has("launch_agents") | not) and
+  ([.linux.devices[] | has("launch_agents")] | any | not) and
+  (.mac.common.launch_agents["git-maintain"] as $job |
+    ($job | type == "object") and
+    ($job.repo_scope | type == "object" and keys == ["glob", "recursive", "root"] and
+      (.root | relpath) and .glob == "*" and .recursive == true) and
+    ($job.environment | has("GIT_MAINTAIN_ROOT") | not) and
+    ($job.environment | has("GIT_MAINTAIN_GLOB") | not)) and
+  ([.mac.common.launch_agents, .mac.devices[].launch_agents] | map(. // {}) |
+    all(type == "object") and
+    ([.[] | to_entries[] | .value] |
+      all(
+        type == "object" and
+        (keys - ["label", "source", "entry", "start_interval_seconds", "run_at_load", "environment", "log", "replaces", "repo_scope"] | length == 0) and
+        ((.label | type) == "string" and (.label | test("^[A-Za-z0-9][A-Za-z0-9._-]*$"))) and
+        (.source | relpath) and
+        (.entry | relpath) and
+        ((.start_interval_seconds | type) == "number" and .start_interval_seconds >= 60 and (.start_interval_seconds | floor) == .start_interval_seconds) and
+        ((.run_at_load | type) == "boolean") and
+        ((.environment | type) == "object" and (.environment | to_entries | all((.key | test("^[A-Z_][A-Z0-9_]*$")) and (.value | type) == "string"))) and
+        (.log | relpath) and
+        ((.replaces // []) | type == "array" and all(relpath))
+      ) and
+      (map(.label) | length == (unique | length))))
+' "$manifest" >/dev/null; then
+  echo "global-tools manifest: INVALID ($manifest does not satisfy bin/validate-manifest's schema)" >&2
+  exit 1
+fi
+
+echo "global-tools manifest: OK"

package/bin/vscode-settings

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+export PATH="/usr/local/bin:/opt/homebrew/bin:/home/linuxbrew/.linuxbrew/bin:/usr/bin:/bin:/usr/sbin:/sbin"
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+repo_root="$(cd "$script_dir/.." && pwd)"
+
+command -v bun >/dev/null 2>&1 || {
+  echo "vscode-settings requires bun; reconcile the global-tools manifest first" >&2
+  exit 1
+}
+
+exec bun "$repo_root/packages/fleet/src/vscode-settings.ts" "$@"

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@amsterdamdatalabs/adl-agent-control-linux-x64",
+  "version": "0.1.4",
+  "description": "adl CLI binary for linux/x64 (agent identity + Azure DevOps front door — see docs/architecture/cli-design.md)",
+  "license": "UNLICENSED",
+  "os": [
+    "linux"
+  ],
+  "cpu": [
+    "x64"
+  ],
+  "files": [
+    "bin",
+    "packages/fleet/manifest.json",
+    "packages/fleet/manifest.schema.json",
+    "packages/fleet/src",
+    "packages/fleet/jobs",
+    "packages/fleet/systemd",
+    "packages/agent-settings/surface-policy.json",
+    "packages/agent-settings/protected.json",
+    "packages/agent-settings/src",
+    "packages/agent-settings/assets",
+    "packages/agent-settings/managed",
+    "packages/agent-skills",
+    "packages/repo-controls",
+    "packages/agent-hooks",
+    "packages/azdo"
+  ],
+  "bin": {
+    "adl": "bin/adl"
+  },
+  "dependencies": {
+    "@iarna/toml": "^2.2.5",
+    "@tailwindcss/node": "4.2.1",
+    "ajv": "^8.17.1",
+    "ajv-formats": "^3.0.1",
+    "istanbul-lib-coverage": "3.2.2",
+    "minisearch": "7.2.0",
+    "svelte": "5.38.10",
+    "tailwindcss": "4.1.11",
+    "typescript": "5.9.3",
+    "yaml": "^2.9.0"
+  }
+}