oh-my-devpod 0.14.2 → 0.14.4

package/runtime/modules/lib/common.sh

@@ -188,9 +188,8 @@ omd_module_brew_cmd() {
   return 1
 }
 
-omd_module_brew_formula_installed() {
-  local formula="$1" formula_name prefix cellar version
-  prefix="$(omd_module_brew_prefix)" || return 1
+omd_module_brew_formula_installed_at() {
+  local prefix="$1" formula="$2" formula_name cellar version
   formula_name="${formula##*/}"
   cellar="${prefix}/Cellar/${formula_name}"
   [[ -d "${cellar}" ]] || return 1
@@ -200,16 +199,40 @@ omd_module_brew_formula_installed() {
   return 1
 }
 
+omd_module_brew_formula_installed() {
+  local formula="$1" prefix
+  prefix="$(omd_module_brew_prefix)" || return 1
+  omd_module_brew_formula_installed_at "${prefix}" "${formula}"
+}
+
+omd_module_brew_prefix_for_cmd() {
+  local brew="$1" prefix
+  prefix="$(omd_module_brew_exec "${brew}" --prefix 2>/dev/null || true)"
+  if [[ "${prefix}" == /* && -d "${prefix}" ]]; then
+    cd "${prefix}" 2>/dev/null && pwd -P
+    return
+  fi
+  [[ "${brew}" == */bin/brew ]] || return 1
+  cd "$(dirname "${brew}")/.." 2>/dev/null && pwd -P
+}
+
+omd_module_brew_cmd_matches_prefix() {
+  local brew="$1" expected_prefix="$2" resolved_brew reported_prefix
+  expected_prefix="$(cd "${expected_prefix}" 2>/dev/null && pwd -P)" || return 1
+  if [[ -L "${brew}" ]]; then
+    command -v readlink >/dev/null 2>&1 || return 1
+    resolved_brew="$(readlink -f "${brew}" 2>/dev/null || true)"
+    [[ "${resolved_brew}" == "${expected_prefix}"/* ]] || return 1
+  fi
+  reported_prefix="$(omd_module_brew_prefix_for_cmd "${brew}")" || return 1
+  [[ "${reported_prefix}" == "${expected_prefix}" ]]
+}
+
 omd_module_brew_prefix() {
-  local brew resolved
+  local brew
   brew="$(omd_module_brew_cmd)" || return 1
-  if command -v readlink >/dev/null 2>&1; then
-    resolved="$(readlink -f "${brew}" 2>/dev/null || true)"
-    [[ -z "${resolved}" ]] || brew="${resolved}"
-  fi
-  if [[ "${brew}" == */bin/brew ]]; then
-    cd "$(dirname "${brew}")/.." 2>/dev/null && pwd -P
-    return
+  if omd_module_brew_prefix_for_cmd "${brew}"; then
+    return 0
   fi
   if [[ -n "${HOMEBREW_PREFIX:-}" && -d "${HOMEBREW_PREFIX}" ]]; then
     printf '%s\n' "${HOMEBREW_PREFIX}"
@@ -231,9 +254,10 @@ omd_module_brew_exec() {
 }
 
 omd_module_formula_status() {
-  local formula="$1" command_name="$2"
+  local formula="$1" command_name="$2" prefix
   if [[ -n "${component:-}" ]] && omd_module_formula_managed "${component}" "${formula}"; then
-    omd_module_brew_formula_installed "${formula}"
+    prefix="$(omd_module_formula_marker_prefix "${component}" "${formula}")" || return 1
+    omd_module_brew_formula_installed_at "${prefix}" "${formula}"
     return
   fi
   command -v "${command_name}" >/dev/null 2>&1 ||
@@ -241,12 +265,40 @@ omd_module_formula_status() {
 }
 
 omd_module_formula_managed() {
-  local component="$1" formula="$2"
-  omd_module_marker_matches "${component}" "${formula}"
+  local component="$1" formula="$2" kind
+  omd_module_marker_matches "${component}" "${formula}" || return 1
+  kind="$(omd_module_marker_value "${component}" kind || true)"
+  [[ "${kind}" == "brew-formula" ]]
+}
+
+omd_module_formula_marker_prefix() {
+  local component="$1" formula="$2" prefix linuxbrew_kind
+  omd_module_formula_managed "${component}" "${formula}" || return 1
+  prefix="$(omd_module_marker_value "${component}" brew_prefix || true)"
+  if [[ -z "${prefix}" ]] && omd_module_is_managed linuxbrew; then
+    linuxbrew_kind="$(omd_module_marker_value linuxbrew kind || true)"
+    if [[ "${linuxbrew_kind}" == "directory" ]]; then
+      prefix="$(omd_module_marker_value linuxbrew artifact || true)"
+      if ! omd_module_brew_formula_installed_at "${prefix}" "${formula}"; then
+        prefix=""
+      fi
+    fi
+  fi
+  [[ -n "${prefix}" && "${prefix}" == /* && ! -L "${prefix}" && -x "${prefix}/bin/brew" ]] ||
+    return 1
+  prefix="$(cd "${prefix}" 2>/dev/null && pwd -P)" || return 1
+  omd_module_brew_cmd_matches_prefix "${prefix}/bin/brew" "${prefix}" || return 1
+  printf '%s\n' "${prefix}"
+}
+
+omd_module_formula_brew_cmd() {
+  local component="$1" formula="$2" prefix
+  prefix="$(omd_module_formula_marker_prefix "${component}" "${formula}")" || return 1
+  printf '%s/bin/brew\n' "${prefix}"
 }
 
 omd_module_formula_install_or_update() {
-  local component="$1" formula="$2" command_name="$3" action="$4"
+  local component="$1" formula="$2" command_name="$3" action="$4" brew brew_prefix
   shift 4
   omd_module_reject_unknown_flags "$@" || return
 
@@ -261,24 +313,38 @@ omd_module_formula_install_or_update() {
     return 0
   fi
 
-  local brew
-  brew="$(omd_module_brew_cmd)" || {
-    omd_module_info error "Linuxbrew is required before ${component}"
+  if omd_module_formula_managed "${component}" "${formula}"; then
+    brew="$(omd_module_formula_brew_cmd "${component}" "${formula}")" || {
+      omd_module_info error "managed ${component} has no valid owning Homebrew prefix"
+      return 1
+    }
+  else
+    brew="$(omd_module_brew_cmd)" || {
+      omd_module_info error "Linuxbrew is required before ${component}"
+      return 1
+    }
+  fi
+  brew_prefix="$(omd_module_brew_prefix_for_cmd "${brew}")" || {
+    omd_module_info error "could not determine Homebrew prefix for ${component}"
     return 1
   }
 
   if [[ "${action}" == "update" ]] &&
-    omd_module_brew_exec "${brew}" list --formula "${formula}" >/dev/null 2>&1; then
+    omd_module_brew_formula_installed_at "${brew_prefix}" "${formula}"; then
     omd_module_brew_exec "${brew}" upgrade "${formula}"
   else
     omd_module_brew_exec "${brew}" install "${formula}"
   fi
-  omd_module_mark_managed "${component}" brew-formula "${formula}"
+  omd_module_mark_managed \
+    "${component}" \
+    brew-formula \
+    "${formula}" \
+    "brew_prefix=${brew_prefix}"
 }
 
-omd_module_formula_uninstall() {
-  local component="$1" formula="$2"
-  shift 2
+omd_module_formula_uninstall_impl() {
+  local component="$1" formula="$2" remove_marker="$3"
+  shift 3
   omd_module_reject_unknown_flags "$@" || return
 
   if omd_module_dry_run "$@"; then
@@ -289,11 +355,18 @@ omd_module_formula_uninstall() {
   omd_module_formula_managed "${component}" "${formula}" ||
     omd_module_refuse_unmanaged "${component}" || return
 
-  local brew dependants
-  brew="$(omd_module_brew_cmd)" || {
-    omd_module_info error "Linuxbrew is required to uninstall ${component}"
+  local brew brew_prefix dependants
+  brew="$(omd_module_formula_brew_cmd "${component}" "${formula}")" || {
+    omd_module_info error "managed ${component} has no valid owning Homebrew prefix"
     return 1
   }
+  brew_prefix="$(omd_module_brew_prefix_for_cmd "${brew}")" || return 1
+  if ! omd_module_brew_formula_installed_at "${brew_prefix}" "${formula}"; then
+    if [[ "${remove_marker}" == "1" ]]; then
+      omd_module_unmark_managed "${component}"
+    fi
+    return 0
+  fi
   if ! dependants="$(omd_module_brew_exec "${brew}" uses --installed "${formula}" 2>&1)"; then
     omd_module_info error "failed to inspect Homebrew dependants for ${component}: ${dependants}"
     return 1
@@ -303,7 +376,21 @@ omd_module_formula_uninstall() {
     return 1
   fi
   omd_module_brew_exec "${brew}" uninstall "${formula}"
-  omd_module_unmark_managed "${component}"
+  if [[ "${remove_marker}" == "1" ]]; then
+    omd_module_unmark_managed "${component}"
+  fi
+}
+
+omd_module_formula_uninstall() {
+  local component="$1" formula="$2"
+  shift 2
+  omd_module_formula_uninstall_impl "${component}" "${formula}" 1 "$@"
+}
+
+omd_module_formula_uninstall_keep_marker() {
+  local component="$1" formula="$2"
+  shift 2
+  omd_module_formula_uninstall_impl "${component}" "${formula}" 0 "$@"
 }
 
 omd_module_zsh_path() {

package/runtime/modules/lib/postflight.sh

@@ -2,12 +2,28 @@
 set -euo pipefail
 
 source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/common.sh"
+# shellcheck source=source-config.sh
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/source-config.sh"
 
 case "${1:-}" in
   install|update) ;;
   *) omd_module_unknown_action "${1:-}" ;;
 esac
 
+case "${OHMYDEVPOD_MIRROR_PROFILE:-upstream}" in
+  cn) source_name="gitee" ;;
+  upstream) source_name="github" ;;
+  *)
+    omd_module_info notice "unknown mirror profile; native source configuration was not changed"
+    source_name=""
+    ;;
+esac
+if [[ -n "${source_name}" ]] &&
+  ! omd_source_config_apply_transactional "${source_name}"; then
+  omd_module_info error "failed to apply native source configuration"
+  exit 1
+fi
+
 if ! omd_module_is_managed zsh && ! omd_module_is_managed zsh-config; then
   exit 0
 fi

package/runtime/modules/lib/source-config.sh

@@ -0,0 +1,307 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/common.sh"
+
+omd_source_config_header="# Generated by oh-my-devpod. Managed native source configuration."
+
+omd_source_config_path_is_safe() {
+  local path="$1" trusted_root="$2" current parent
+  [[ "${path}" == /* && "${trusted_root}" == /* ]] || return 1
+  [[ "${path}" == "${trusted_root}"/* ]] || return 1
+  [[ ! -L "${path}" ]] || return 1
+  current="$(dirname "${path}")"
+  while [[ "${current}" != "${trusted_root}" ]]; do
+    [[ ! -L "${current}" ]] || return 1
+    parent="$(dirname "${current}")"
+    [[ "${parent}" != "${current}" ]] || return 1
+    current="${parent}"
+  done
+}
+
+omd_source_config_atomic_write() {
+  local destination="$1" trusted_root="$2" directory temporary
+  omd_source_config_path_is_safe "${destination}" "${trusted_root}" || {
+    omd_module_info error "refusing unsafe source configuration path: ${destination}"
+    return 1
+  }
+  directory="$(dirname "${destination}")"
+  mkdir -p "${directory}" || return 1
+  temporary="$(mktemp "${directory}/.$(basename "${destination}").tmp.XXXXXX")" ||
+    return 1
+  if ! cat > "${temporary}"; then
+    rm -f "${temporary}"
+    return 1
+  fi
+  if ! mv -f "${temporary}" "${destination}"; then
+    rm -f "${temporary}"
+    return 1
+  fi
+}
+
+omd_source_config_formula_prefix() {
+  local component="$1" formula="$2" prefix
+  prefix="$(omd_module_formula_marker_prefix "${component}" "${formula}")" || return 1
+  omd_module_brew_formula_installed_at "${prefix}" "${formula}" || return 1
+  printf '%s\n' "${prefix}"
+}
+
+omd_source_config_formula_managed() {
+  omd_source_config_formula_prefix "$1" "$2" >/dev/null
+}
+
+omd_source_config_linuxbrew_prefix() {
+  local prefix kind
+  omd_module_is_managed linuxbrew || return 1
+  prefix="$(omd_module_marker_value linuxbrew artifact || true)"
+  kind="$(omd_module_marker_value linuxbrew kind || true)"
+  [[ "${kind}" == "directory" && -n "${prefix}" && ! -L "${prefix}" && -x "${prefix}/bin/brew" ]] ||
+    return 1
+  prefix="$(cd "${prefix}" 2>/dev/null && pwd -P)" || return 1
+  omd_module_brew_cmd_matches_prefix "${prefix}/bin/brew" "${prefix}" || return 1
+  printf '%s\n' "${prefix}"
+}
+
+omd_source_config_uv_path() {
+  printf '%s/uv/uv.toml\n' "${XDG_CONFIG_HOME:-${HOME}/.config}"
+}
+
+omd_source_config_config_home() {
+  printf '%s\n' "${XDG_CONFIG_HOME:-${HOME}/.config}"
+}
+
+omd_source_config_pip_path() {
+  printf '%s/pip/pip.conf\n' "${XDG_CONFIG_HOME:-${HOME}/.config}"
+}
+
+omd_source_config_mamba_path() {
+  printf '%s/.mambarc\n' "${HOME}"
+}
+
+omd_source_config_expected() {
+  local kind="$1"
+  case "${kind}" in
+    brew)
+      cat <<EOF
+${omd_source_config_header}
+HOMEBREW_BREW_GIT_REMOTE=https://mirrors.ustc.edu.cn/brew.git
+HOMEBREW_CORE_GIT_REMOTE=https://mirrors.ustc.edu.cn/homebrew-core.git
+HOMEBREW_API_DOMAIN=https://mirrors.ustc.edu.cn/homebrew-bottles/api
+HOMEBREW_BOTTLE_DOMAIN=https://mirrors.ustc.edu.cn/homebrew-bottles
+EOF
+      ;;
+    uv)
+      cat <<EOF
+${omd_source_config_header}
+[[index]]
+url = "https://mirrors.tuna.tsinghua.edu.cn/pypi/web/simple"
+default = true
+EOF
+      ;;
+    pip)
+      cat <<EOF
+${omd_source_config_header}
+[global]
+index-url = https://mirrors.tuna.tsinghua.edu.cn/pypi/web/simple
+EOF
+      ;;
+    mamba)
+      cat <<EOF
+${omd_source_config_header}
+channel_alias: https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud
+default_channels:
+  - https://mirrors.tuna.tsinghua.edu.cn/anaconda/pkgs/main
+  - https://mirrors.tuna.tsinghua.edu.cn/anaconda/pkgs/r
+channels:
+  - conda-forge
+EOF
+      ;;
+    *)
+      return 2
+      ;;
+  esac
+}
+
+omd_source_config_file_is_managed() {
+  local kind="$1" path="$2" actual expected
+  [[ -f "${path}" && ! -L "${path}" ]] || return 1
+  actual="$(cat "${path}")" || return 1
+  expected="$(omd_source_config_expected "${kind}")" || return 1
+  [[ "${actual}" == "${expected}" ]]
+}
+
+omd_source_config_active_paths() {
+  local prefix need_pip=0
+  if prefix="$(omd_source_config_linuxbrew_prefix)"; then
+    printf 'brew\t%s/etc/homebrew/brew.env\t%s\n' "${prefix}" "${prefix}"
+  fi
+  if omd_source_config_formula_managed uv uv; then
+    printf 'uv\t%s\t%s\n' \
+      "$(omd_source_config_uv_path)" \
+      "$(omd_source_config_config_home)"
+    need_pip=1
+  fi
+  if omd_source_config_formula_managed micromamba micromamba; then
+    printf 'mamba\t%s\t%s\n' "$(omd_source_config_mamba_path)" "${HOME}"
+    need_pip=1
+  fi
+  if [[ "${need_pip}" == "1" ]]; then
+    printf 'pip\t%s\t%s\n' \
+      "$(omd_source_config_pip_path)" \
+      "$(omd_source_config_config_home)"
+  fi
+}
+
+omd_source_config_validate() {
+  local source="$1" kind path trusted_root
+  case "${source}" in
+    github|gitee) ;;
+    *) return 2 ;;
+  esac
+
+  while IFS=$'\t' read -r kind path trusted_root; do
+    [[ -n "${kind}" && -n "${path}" && -n "${trusted_root}" ]] || continue
+    if ! omd_source_config_path_is_safe "${path}" "${trusted_root}"; then
+      omd_module_info error "refusing unsafe source configuration path: ${path}"
+      return 1
+    fi
+    if [[ -e "${path}" || -L "${path}" ]] &&
+      ! omd_source_config_file_is_managed "${kind}" "${path}"; then
+      omd_module_info error "refusing to overwrite user-modified source configuration: ${path}"
+      return 1
+    fi
+  done < <(omd_source_config_active_paths)
+}
+
+omd_source_config_apply() {
+  local source="$1" kind path trusted_root
+  omd_source_config_validate "${source}" || return
+
+  while IFS=$'\t' read -r kind path trusted_root; do
+    [[ -n "${kind}" && -n "${path}" && -n "${trusted_root}" ]] || continue
+    if [[ "${source}" == "gitee" ]]; then
+      omd_source_config_expected "${kind}" |
+        omd_source_config_atomic_write "${path}" "${trusted_root}" ||
+        return 1
+    else
+      if [[ -e "${path}" || -L "${path}" ]]; then
+        rm -f "${path}" || return 1
+      fi
+    fi
+  done < <(omd_source_config_active_paths)
+}
+
+omd_source_config_apply_transactional() {
+  local source="$1" transaction_root transaction_dir rollback_failed=0
+  transaction_root="${OHMYDEVPOD_SOURCE_CONFIG_TRANSACTION_ROOT:-$(omd_module_state_dir)}"
+  mkdir -p "${transaction_root}" || return 1
+  transaction_dir="$(mktemp -d "${transaction_root}/.source-config.XXXXXXXX")" ||
+    return 1
+  if ! omd_source_config_validate "${source}" ||
+    ! omd_source_config_snapshot "${transaction_dir}"; then
+    rm -rf "${transaction_dir}"
+    return 1
+  fi
+  if omd_source_config_apply "${source}"; then
+    rm -rf "${transaction_dir}"
+    return 0
+  fi
+  omd_source_config_restore "${transaction_dir}" || rollback_failed=1
+  if [[ "${rollback_failed}" == "0" ]]; then
+    rm -rf "${transaction_dir}"
+  else
+    omd_module_info error "native source rollback was incomplete: ${transaction_dir}"
+  fi
+  return 1
+}
+
+omd_source_config_snapshot() {
+  local snapshot_dir="$1" kind path trusted_root
+  mkdir -p "${snapshot_dir}" || return 1
+  : > "${snapshot_dir}/native-paths"
+  while IFS=$'\t' read -r kind path trusted_root; do
+    [[ -n "${kind}" && -n "${path}" && -n "${trusted_root}" ]] || continue
+    printf '%s\t%s\t%s\n' "${kind}" "${path}" "${trusted_root}" \
+      >> "${snapshot_dir}/native-paths"
+    if [[ -f "${path}" ]]; then
+      cp -p "${path}" "${snapshot_dir}/native-${kind}" || return 1
+    else
+      : > "${snapshot_dir}/.missing-native-${kind}" || return 1
+    fi
+  done < <(omd_source_config_active_paths)
+}
+
+omd_source_config_restore() {
+  local snapshot_dir="$1" kind path trusted_root
+  [[ -f "${snapshot_dir}/native-paths" ]] || return 0
+  while IFS=$'\t' read -r kind path trusted_root; do
+    [[ -n "${kind}" && -n "${path}" && -n "${trusted_root}" ]] || continue
+    if ! omd_source_config_path_is_safe "${path}" "${trusted_root}"; then
+      omd_module_info error "refusing unsafe source configuration rollback path: ${path}"
+      return 1
+    fi
+    if [[ -f "${snapshot_dir}/.missing-native-${kind}" ]]; then
+      if [[ -e "${path}" || -L "${path}" ]] &&
+        ! omd_source_config_file_is_managed "${kind}" "${path}"; then
+        omd_module_info error "refusing to remove changed source configuration during rollback: ${path}"
+        return 1
+      fi
+      if [[ -e "${path}" || -L "${path}" ]]; then
+        rm -f "${path}" || return 1
+      fi
+    else
+      cat "${snapshot_dir}/native-${kind}" |
+        omd_source_config_atomic_write "${path}" "${trusted_root}" ||
+        return 1
+    fi
+  done < "${snapshot_dir}/native-paths"
+}
+
+omd_source_config_remove_managed_file() {
+  local kind="$1" path="$2" trusted_root="$3"
+  [[ -e "${path}" || -L "${path}" ]] || return 0
+  if ! omd_source_config_path_is_safe "${path}" "${trusted_root}"; then
+    omd_module_info notice "preserving unsafe source configuration path: ${path}"
+    return 0
+  fi
+  if omd_source_config_file_is_managed "${kind}" "${path}"; then
+    rm -f "${path}"
+  else
+    omd_module_info notice "preserving modified source configuration: ${path}"
+  fi
+}
+
+omd_source_config_remove_component() {
+  local component="$1"
+  case "${component}" in
+    uv)
+      omd_source_config_remove_managed_file \
+        uv \
+        "$(omd_source_config_uv_path)" \
+        "$(omd_source_config_config_home)" ||
+        return 1
+      if ! omd_source_config_formula_managed micromamba micromamba; then
+        omd_source_config_remove_managed_file \
+          pip \
+          "$(omd_source_config_pip_path)" \
+          "$(omd_source_config_config_home)"
+      fi
+      ;;
+    micromamba)
+      omd_source_config_remove_managed_file \
+        mamba \
+        "$(omd_source_config_mamba_path)" \
+        "${HOME}" ||
+        return 1
+      if ! omd_source_config_formula_managed uv uv; then
+        omd_source_config_remove_managed_file \
+          pip \
+          "$(omd_source_config_pip_path)" \
+          "$(omd_source_config_config_home)"
+      fi
+      ;;
+    *)
+      return 2
+      ;;
+  esac
+}

package/runtime/modules/tools/gh.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)/lib/common.sh"
+
+component="gh"
+formula="gh"
+command_name="gh"
+
+status() { omd_module_formula_status "${formula}" "${command_name}"; }
+managed() { omd_module_formula_managed "${component}" "${formula}"; }
+install_or_update() {
+  local action="$1"
+  shift
+  omd_module_formula_install_or_update "${component}" "${formula}" "${command_name}" "${action}" "$@"
+}
+uninstall() { omd_module_formula_uninstall "${component}" "${formula}" "$@"; }
+
+case "${1:-}" in
+  status) status ;;
+  managed) managed ;;
+  install) shift; install_or_update install "$@" ;;
+  update) shift; install_or_update update "$@" ;;
+  uninstall) shift; uninstall "$@" ;;
+  *) omd_module_unknown_action "${1:-}" ;;
+esac

package/runtime/modules/tools/gitee.sh

@@ -0,0 +1,101 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)/lib/common.sh"
+
+component="gitee"
+bin_path="$(omd_module_bin_dir)/gitee"
+
+marked() {
+  omd_module_marker_matches "${component}" "${bin_path}"
+}
+
+binary_matches_marker() {
+  local expected actual
+  [[ -f "${bin_path}" && -x "${bin_path}" ]] || return 1
+  expected="$(omd_module_marker_value "${component}" binary_sha256)" || return 1
+  [[ "${expected}" =~ ^[[:xdigit:]]{64}$ ]] || return 1
+  actual="$(omd_module_sha256_file "${bin_path}")" || return 1
+  [[ "${actual}" == "${expected}" ]]
+}
+
+status() {
+  if marked; then
+    [[ -f "${bin_path}" && -x "${bin_path}" ]]
+  else
+    command -v gitee >/dev/null 2>&1 ||
+      [[ -f "${bin_path}" && -x "${bin_path}" ]]
+  fi
+}
+
+managed() {
+  marked || return 1
+  [[ ! -e "${bin_path}" ]] || binary_matches_marker
+}
+
+install_or_update() {
+  local action="$1" repo_root backup_path="" installed_sha
+  shift
+  omd_module_reject_unknown_flags "$@" || return
+
+  if status && ! managed; then
+    omd_module_external_installation "${component}"
+    return 0
+  fi
+  if omd_module_path_exists "${bin_path}" && ! managed; then
+    omd_module_info error "refusing to overwrite unmanaged path: ${bin_path}"
+    return 1
+  fi
+  if omd_module_dry_run "$@"; then
+    omd_module_info plan "${action} official Gitee CLI binary at ${bin_path}"
+    return 0
+  fi
+
+  repo_root="$(omd_module_repo_root)"
+  if [[ -f "${bin_path}" ]]; then
+    backup_path="$(mktemp "$(dirname "${bin_path}")/.gitee.backup.XXXXXXXX")"
+    cp -p "${bin_path}" "${backup_path}"
+  fi
+
+  if ! OHMYDEVPOD_BIN_DIR="$(omd_module_bin_dir)" \
+    bash "${repo_root}/build/install-gitee-cli.sh"; then
+    [[ -z "${backup_path}" ]] || rm -f "${backup_path}"
+    return 1
+  fi
+
+  if ! installed_sha="$(omd_module_sha256_file "${bin_path}")" ||
+    ! omd_module_mark_managed \
+      "${component}" \
+      binary \
+      "${bin_path}" \
+      "binary_sha256=${installed_sha}"; then
+    if [[ -n "${backup_path}" ]]; then
+      mv -f "${backup_path}" "${bin_path}"
+    else
+      rm -f "${bin_path}"
+    fi
+    return 1
+  fi
+
+  [[ -z "${backup_path}" ]] || rm -f "${backup_path}"
+}
+
+uninstall() {
+  omd_module_require_managed_uninstall "${component}" managed "$@" || return
+  if omd_module_dry_run "$@"; then
+    omd_module_info plan "remove managed Gitee CLI binary ${bin_path}; preserve configuration and authentication"
+    return 0
+  fi
+
+  rm -f "${bin_path}"
+  omd_module_unmark_managed "${component}"
+}
+
+case "${1:-}" in
+  status) status ;;
+  managed) managed ;;
+  install) shift; install_or_update install "$@" ;;
+  update) shift; install_or_update update "$@" ;;
+  uninstall) shift; uninstall "$@" ;;
+  *) omd_module_unknown_action "${1:-}" ;;
+esac