Greptile Summary

This PR simplifies the baudbot update workflow from three manual commands into a single sudo baudbot update, and improves admin user auto-detection in deploy.sh so BAUDBOT_CONFIG_USER no longer needs to be set manually.

• bin/baudbot — update command: The previous exec deploy.sh (which replaced the process entirely) is correctly dropped so that post-deploy restart logic can execute. The new block pulls from git, runs deploy, then conditionally restarts the systemd unit and checks liveness with a sleep 2 poll.
• bin/deploy.sh — admin user detection: The single-expression fallback ${BAUDBOT_CONFIG_USER:-${SUDO_USER:-$(whoami)}} is replaced with an explicit priority chain that now correctly excludes SUDO_USER=root (e.g. nested sudo sessions) and adds a new stat -c '%U' repo-ownership heuristic as the third-priority fallback. The BAUDBOT_CONFIG_USER env-var path used by install.sh is unaffected.
• Minor style issues: &>/dev/null 2>&1 is redundant (lines 266, 270 of bin/baudbot); the hard-coded sleep 2 before the liveness re-check may produce false warnings on slower systems; and SUDO_USER quoting is inconsistent in the new elif guard.

Confidence Score: 4/5

• Safe to merge — changes are additive ops tooling with no impact on agent security boundaries.
• Both changes are straightforward operational improvements. The drop of exec in the update command is intentionally correct. The deploy user detection chain is a strict improvement over the prior one-liner, and the BAUDBOT_CONFIG_USER override used by install.sh remains the highest-priority path. No security-critical files or agent runtime logic is touched. Minor style issues (redundant redirections, hard-coded sleep) lower the score slightly.
• No files require special attention — all changes are in ops tooling only.

Important Files Changed

Sequence Diagram

sequenceDiagram
    actor Admin
    participant baudbot as baudbot (CLI)
    participant git as git
    participant deploy as deploy.sh
    participant systemd as systemd

    Admin->>baudbot: sudo baudbot update
    baudbot->>baudbot: require_root()
    baudbot->>git: git pull origin main
    git-->>baudbot: latest code
    baudbot->>deploy: deploy.sh [args]
    Note over deploy: detect DEPLOY_USER:<br/>1. BAUDBOT_CONFIG_USER env<br/>2. SUDO_USER (if not root)<br/>3. stat -c '%U' repo owner<br/>4. whoami
    deploy-->>baudbot: exit 0
    baudbot->>systemd: systemctl is-active baudbot
    alt service is running
        baudbot->>systemd: systemctl restart baudbot
        baudbot->>baudbot: sleep 2
        baudbot->>systemd: systemctl is-active baudbot
        alt still active
            baudbot-->>Admin: ✅ Updated and running
        else crashed
            baudbot-->>Admin: ⚠️ Deployed but agent didn't restart
        end
    else service not running
        baudbot-->>Admin: ✅ Updated. Start with: sudo baudbot start
    end

_{Last reviewed commit: 37ef17d}