improvements to flatpak

updates.d/30-flatpak.sh

@@ -3,7 +3,10 @@
 COREDESKTOP="$HOME/.local/share/coredesktop"
 
 echo "Updating Flatpaks..."
-flatpak update -y --noninteractive
+# System-wide installs need root: --noninteractive suppresses the polkit
+# password prompt, so without sudo they fail with "not allowed for user"
+sudo flatpak update --system -y --noninteractive
+flatpak update --user -y --noninteractive
 
 echo "Checking for new flatpaks..."
 . "$COREDESKTOP/install-flatpaks.sh"

updates.d/95-cleanup.sh

@@ -1,7 +1,8 @@
 #!/bin/bash
 
 echo "Removing unused Flatpak runtimes..."
-flatpak uninstall --unused -y --noninteractive
+sudo flatpak uninstall --system --unused -y --noninteractive
+flatpak uninstall --user --unused -y --noninteractive
 
 if command -v paccache &>/dev/null; then
   echo "Trimming pacman package cache..."