oh-my-devpod 0.14.4 → 0.15.0

package/runtime/components.toml

@@ -170,6 +170,16 @@ requires = []
 install_requires = ["linuxbrew"]
 uninstall = true
 
+[[component]]
+id = "witr"
+name = "witr"
+description = "Trace processes, ports, containers, and files to their launch chain"
+category = "terminal"
+module = "modules/tools/witr.sh"
+requires = []
+install_requires = ["linuxbrew"]
+uninstall = true
+
 [[component]]
 id = "neovim"
 name = "Neovim"

package/runtime/install/bootstrap.sh

@@ -137,6 +137,9 @@ omd_validate_bundle() {
     components.toml \
     install/bootstrap.sh \
     install/update.sh \
+    modules/lib/shared-linuxbrew.sh \
+    build/omd-brew-gateway.sh \
+    build/omd-brew-provisioner.sh \
     modules \
     build \
     config \
@@ -154,7 +157,7 @@ omd_validate_bundle() {
 omd_install_archive() {
   local archive="$1" prefix="$2" bin_dir="${3:-${OMD_DEFAULT_BIN_DIR}}"
   local releases_dir staging_dir bundle_root version release_dir previous_dir="" link_tmp
-  local active_path
+  local active_path previous_active_target="" mirror_profile
   [[ -f "${archive}" ]] || {
     omd_warn "Missing omd archive: ${archive}"
     return 1
@@ -202,6 +205,9 @@ omd_install_archive() {
   rm -rf "${staging_dir}" || true
 
   active_path="${bin_dir}/omd"
+  if [[ -L "${active_path}" ]]; then
+    previous_active_target="$(readlink "${active_path}")"
+  fi
   link_tmp="${bin_dir}/.omd.$$.tmp"
   if ! ln -s "${release_dir}/bin/omd" "${link_tmp}"; then
     rm -rf "${release_dir}"
@@ -221,6 +227,16 @@ omd_install_archive() {
     [[ -z "${previous_dir}" ]] || mv "${previous_dir}" "${release_dir}"
     return 1
   fi
+  mirror_profile="${OHMYDEVPOD_MIRROR_PROFILE:-upstream}"
+  case "${mirror_profile}" in upstream|cn) ;; *) mirror_profile=upstream ;; esac
+  if ! omd_activate_shared_linuxbrew_profile_if_present "${release_dir}" "${mirror_profile}"; then
+    rm -f "${active_path}"
+    [[ -z "${previous_active_target}" ]] || ln -s "${previous_active_target}" "${active_path}"
+    rm -rf "${release_dir}"
+    [[ -z "${previous_dir}" ]] || mv "${previous_dir}" "${release_dir}"
+    omd_warn "Shared Linuxbrew activation failed; restored the previous omd release"
+    return 1
+  fi
   [[ -z "${previous_dir}" ]] || rm -rf "${previous_dir}" || true
   printf '%s\n' "${version}"
 }
@@ -404,6 +420,30 @@ omd_source_brew_core_remote() {
   esac
 }
 
+omd_activate_shared_linuxbrew_profile_if_present() {
+  local release_root="$1" profile="$2" helper prefix state_dir
+  helper="${release_root}/modules/lib/shared-linuxbrew.sh"
+  if [[ "${OHMYDEVPOD_SHARED_BREW_TEST_MODE:-0}" == "1" ]]; then
+    prefix="${OHMYDEVPOD_SHARED_BREW_PREFIX:-/home/linuxbrew/.linuxbrew}"
+    state_dir="${OHMYDEVPOD_SHARED_BREW_STATE_DIR:-/var/lib/oh-my-devpod/linuxbrew}"
+  else
+    prefix="/home/linuxbrew/.linuxbrew"
+    state_dir="/var/lib/oh-my-devpod/linuxbrew"
+  fi
+  [[ -e "${prefix}" || -L "${prefix}" || -e "${state_dir}/manifest" || -L "${state_dir}/manifest" ]] || return 0
+  [[ -f "${helper}" && ! -L "${helper}" ]] || {
+    omd_warn "Installed release cannot activate the existing shared Linuxbrew installation"
+    return 1
+  }
+  bash -c 'set -euo pipefail; source "$1"; omd_shared_linuxbrew_activate_if_present "$2" "$3"' _ "${helper}" "${release_root}" "${profile}"
+}
+
+omd_activate_shared_linuxbrew_if_present() {
+  local release_root="$1" source="$2" profile
+  profile="$(omd_source_mirror_profile "${source}")" || return 1
+  omd_activate_shared_linuxbrew_profile_if_present "${release_root}" "${profile}"
+}
+
 omd_main() {
   local os_release target requested_version source bin_dir prefix cache_dir config_dir
   local archive checksum selected_source installed_version candidate
@@ -458,7 +498,7 @@ omd_main() {
     selected_source="${OMD_SELECTED_SOURCE}"
   fi
 
-  installed_version="$(omd_install_archive "${archive}" "${prefix}" "${bin_dir}")"
+  installed_version="$(OHMYDEVPOD_MIRROR_PROFILE="$(omd_source_mirror_profile "${selected_source}")" omd_install_archive "${archive}" "${prefix}" "${bin_dir}")"
   omd_persist_source "${selected_source}" "${config_dir}"
   omd_persist_install_paths "${prefix}" "${bin_dir}" "${cache_dir}" "${config_dir}"
   omd_info "Installed oh-my-devpod ${installed_version} from ${selected_source}"

package/runtime/install/update.sh

@@ -101,10 +101,19 @@ OMD_UPDATE_BREW_CORE_PREFIX=""
 OMD_UPDATE_BREW_CORE_REMOTE=""
 OMD_UPDATE_BREW_CORE_REMOTE_PRESENT=0
 OMD_UPDATE_BREW_CORE_REMOTE_CHANGED=0
+OMD_UPDATE_BREW_SHARED=0
+OMD_UPDATE_BREW_SHARED_PROFILE=""
+OMD_UPDATE_BREW_SHARED_CHANGED=0
 
 omd_update_capture_brew_remote() {
   local marker_prefix core_prefix
   omd_module_is_managed linuxbrew || return 0
+  if omd_shared_linuxbrew_managed; then
+    OMD_UPDATE_BREW_SHARED=1
+    OMD_UPDATE_BREW_PREFIX="$(omd_shared_linuxbrew_prefix)"
+    OMD_UPDATE_BREW_SHARED_PROFILE="$(omd_shared_linuxbrew_manifest_value mirror_profile || true)"
+    case "${OMD_UPDATE_BREW_SHARED_PROFILE}" in upstream|cn) return 0 ;; *) return 1 ;; esac
+  fi
   marker_prefix="$(omd_module_marker_value linuxbrew artifact || true)"
   [[ -n "${marker_prefix}" && -d "${marker_prefix}" && -x "${marker_prefix}/bin/brew" ]] || {
     omd_warn "Managed Homebrew prefix is missing or invalid: ${marker_prefix:-<empty>}"
@@ -145,8 +154,16 @@ omd_update_capture_brew_remote() {
 }
 
 omd_update_apply_brew_remote() {
-  local source="$1" target_remote target_core_remote
+  local source="$1" target_remote target_core_remote target_profile
   [[ -n "${OMD_UPDATE_BREW_PREFIX}" ]] || return 0
+  if [[ "${OMD_UPDATE_BREW_SHARED}" == "1" ]]; then
+    target_profile="$(omd_source_mirror_profile "${source}")" || return 1
+    if [[ "${target_profile}" != "${OMD_UPDATE_BREW_SHARED_PROFILE}" ]]; then
+      omd_shared_linuxbrew_set_profile "${target_profile}" || return 1
+      OMD_UPDATE_BREW_SHARED_CHANGED=1
+    fi
+    return 0
+  fi
   target_remote="$(omd_source_brew_remote "${source}")" || return 1
   if [[ "${OMD_UPDATE_BREW_LEGACY}" == "1" ]]; then
     git -C "${OMD_UPDATE_BREW_PREFIX}" init -q || return 1
@@ -182,6 +199,10 @@ omd_update_apply_brew_remote() {
 
 omd_update_restore_brew_remote() {
   local rollback_failed=0
+  if [[ "${OMD_UPDATE_BREW_SHARED_CHANGED}" == "1" ]]; then
+    omd_shared_linuxbrew_set_profile "${OMD_UPDATE_BREW_SHARED_PROFILE}" || rollback_failed=1
+    return "${rollback_failed}"
+  fi
   if [[ "${OMD_UPDATE_BREW_CORE_REMOTE_CHANGED}" == "1" ]]; then
     if [[ "${OMD_UPDATE_BREW_CORE_REMOTE_PRESENT}" == "1" ]]; then
       git -C "${OMD_UPDATE_BREW_CORE_PREFIX}" remote set-url origin "${OMD_UPDATE_BREW_CORE_REMOTE}" ||

package/runtime/modules/core/linuxbrew.sh

@@ -4,9 +4,26 @@ set -euo pipefail
 source "$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)/lib/common.sh"
 
 component="linuxbrew"
-brew_prefix="${HOMEBREW_PREFIX:-/home/linuxbrew/.linuxbrew}"
+if omd_shared_linuxbrew_enabled; then
+  brew_prefix="$(omd_shared_linuxbrew_prefix)"
+else
+  brew_prefix="${HOMEBREW_PREFIX:-/home/linuxbrew/.linuxbrew}"
+fi
 
 status() {
+  if omd_shared_linuxbrew_enabled; then
+    if omd_shared_linuxbrew_managed && omd_shared_linuxbrew_current_user_enrolled; then
+      return 0
+    fi
+    if omd_shared_linuxbrew_state_claim_present; then
+      return 1
+    fi
+    if omd_module_marker_matches "${component}" "${brew_prefix}"; then
+      [[ -x "${brew_prefix}/bin/brew" ]]
+      return
+    fi
+    return 1
+  fi
   if managed; then
     [[ -x "${brew_prefix}/bin/brew" ]]
     return
@@ -15,6 +32,12 @@ status() {
 }
 
 managed() {
+  if omd_shared_linuxbrew_managed && omd_shared_linuxbrew_current_user_enrolled; then
+    return 0
+  fi
+  if omd_shared_linuxbrew_state_claim_present; then
+    return 1
+  fi
   omd_module_marker_matches "${component}" "${brew_prefix}"
 }
 
@@ -23,6 +46,18 @@ install_or_update() {
   shift
   omd_module_reject_unknown_flags "$@" || return
 
+  if omd_shared_linuxbrew_enabled; then
+    if omd_module_dry_run "$@"; then
+      omd_module_info plan "${action} host-shared Linuxbrew under ${brew_prefix}"
+      return 0
+    fi
+    omd_shared_linuxbrew_provision "$(omd_module_repo_root)" "${OHMYDEVPOD_MIRROR_PROFILE:-upstream}"
+    if [[ "${action}" == "update" ]]; then
+      omd_module_brew_exec "$(omd_shared_linuxbrew_gateway)" update
+    fi
+    return 0
+  fi
+
   if status && ! managed; then
     omd_module_external_installation "${component}"
     return 0

package/runtime/modules/lib/common.sh

@@ -1,6 +1,9 @@
 #!/usr/bin/env bash
 # Shared helpers for oh-my-devpod component modules.
 
+# shellcheck source=shared-linuxbrew.sh
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/shared-linuxbrew.sh"
+
 omd_module_repo_root() {
   local script_dir
   script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
@@ -34,6 +37,10 @@ omd_module_marker_path() {
 
 omd_module_is_managed() {
   local component="$1" marker
+  if [[ "${component}" == "linuxbrew" ]] && omd_shared_linuxbrew_state_claim_present; then
+    omd_shared_linuxbrew_managed && omd_shared_linuxbrew_current_user_enrolled
+    return
+  fi
   marker="$(omd_module_marker_path "${component}")" || return
   [[ -f "${marker}" ]] && grep -qx 'managed_by=oh-my-devpod' "${marker}"
 }
@@ -60,6 +67,15 @@ omd_module_mark_managed() {
 
 omd_module_marker_value() {
   local component="$1" key="$2" marker
+  if [[ "${component}" == "linuxbrew" ]] && omd_shared_linuxbrew_state_claim_present; then
+    omd_shared_linuxbrew_managed && omd_shared_linuxbrew_current_user_enrolled || return 1
+    case "${key}" in
+      artifact) omd_shared_linuxbrew_prefix ;;
+      kind) printf 'directory\n' ;;
+      *) omd_shared_linuxbrew_manifest_value "${key}" ;;
+    esac
+    return
+  fi
   marker="$(omd_module_marker_path "${component}")" || return
   [[ -f "${marker}" ]] || return 1
   sed -n "s/^${key}=//p" "${marker}" | head -n 1
@@ -171,6 +187,12 @@ omd_module_brew_cmd() {
     printf '%s\n' "${OHMYDEVPOD_BREW_BIN}"
     return 0
   fi
+  if omd_shared_linuxbrew_managed; then
+    candidate="$(omd_shared_linuxbrew_gateway)"
+    [[ -x "${candidate}" ]] || return 1
+    printf '%s\n' "${candidate}"
+    return 0
+  fi
   if command -v brew >/dev/null 2>&1; then
     command -v brew
     return 0
@@ -245,6 +267,7 @@ omd_module_brew_exec() {
   local brew="$1"
   shift
   env -u HOMEBREW_ASK \
+    OHMYDEVPOD_BREW_NONINTERACTIVE=1 \
     NONINTERACTIVE=1 \
     HOMEBREW_NO_ASK=1 \
     HOMEBREW_NO_AUTO_UPDATE=1 \
@@ -266,6 +289,10 @@ omd_module_formula_status() {
 
 omd_module_formula_managed() {
   local component="$1" formula="$2" kind
+  if omd_shared_linuxbrew_state_claim_present; then
+    omd_shared_linuxbrew_formula_managed "${component}" "${formula}"
+    return
+  fi
   omd_module_marker_matches "${component}" "${formula}" || return 1
   kind="$(omd_module_marker_value "${component}" kind || true)"
   [[ "${kind}" == "brew-formula" ]]
@@ -273,6 +300,10 @@ omd_module_formula_managed() {
 
 omd_module_formula_marker_prefix() {
   local component="$1" formula="$2" prefix linuxbrew_kind
+  if omd_shared_linuxbrew_state_claim_present; then
+    omd_shared_linuxbrew_formula_prefix "${component}" "${formula}"
+    return
+  fi
   omd_module_formula_managed "${component}" "${formula}" || return 1
   prefix="$(omd_module_marker_value "${component}" brew_prefix || true)"
   if [[ -z "${prefix}" ]] && omd_module_is_managed linuxbrew; then
@@ -293,6 +324,10 @@ omd_module_formula_marker_prefix() {
 
 omd_module_formula_brew_cmd() {
   local component="$1" formula="$2" prefix
+  if omd_shared_linuxbrew_formula_managed "${component}" "${formula}"; then
+    omd_shared_linuxbrew_gateway
+    return
+  fi
   prefix="$(omd_module_formula_marker_prefix "${component}" "${formula}")" || return 1
   printf '%s/bin/brew\n' "${prefix}"
 }
@@ -309,7 +344,7 @@ omd_module_formula_install_or_update() {
   fi
 
   if omd_module_dry_run "$@"; then
-    omd_module_info plan "${action} Homebrew formula ${formula}"
+    omd_module_info plan "${action} host-shared Homebrew formula ${formula}"
     return 0
   fi
 
@@ -335,11 +370,18 @@ omd_module_formula_install_or_update() {
   else
     omd_module_brew_exec "${brew}" install "${formula}"
   fi
-  omd_module_mark_managed \
-    "${component}" \
-    brew-formula \
-    "${formula}" \
-    "brew_prefix=${brew_prefix}"
+  if omd_shared_linuxbrew_managed; then
+    omd_shared_linuxbrew_formula_managed "${component}" "${formula}" || {
+      omd_module_info error "shared Brew inventory did not record ${formula}"
+      return 1
+    }
+  else
+    omd_module_mark_managed \
+      "${component}" \
+      brew-formula \
+      "${formula}" \
+      "brew_prefix=${brew_prefix}"
+  fi
 }
 
 omd_module_formula_uninstall_impl() {
@@ -348,7 +390,7 @@ omd_module_formula_uninstall_impl() {
   omd_module_reject_unknown_flags "$@" || return
 
   if omd_module_dry_run "$@"; then
-    omd_module_info plan "uninstall managed Homebrew formula ${formula}"
+    omd_module_info plan "uninstall host-shared Homebrew formula ${formula} for all users"
     return 0
   fi
 
@@ -376,7 +418,7 @@ omd_module_formula_uninstall_impl() {
     return 1
   fi
   omd_module_brew_exec "${brew}" uninstall "${formula}"
-  if [[ "${remove_marker}" == "1" ]]; then
+  if [[ "${remove_marker}" == "1" ]] && ! omd_shared_linuxbrew_managed; then
     omd_module_unmark_managed "${component}"
   fi
 }

package/runtime/modules/lib/shared-linuxbrew.sh

@@ -0,0 +1,242 @@
+#!/usr/bin/env bash
+# Host-scoped Linuxbrew state shared by every OMD user.
+
+omd_shared_linuxbrew_test_mode() {
+  [[ "${OHMYDEVPOD_SHARED_BREW_TEST_MODE:-0}" == "1" ]]
+}
+
+omd_shared_linuxbrew_prefix() {
+  if omd_shared_linuxbrew_test_mode; then
+    printf '%s\n' "${OHMYDEVPOD_SHARED_BREW_PREFIX:-/home/linuxbrew/.linuxbrew}"
+  else
+    printf '%s\n' "/home/linuxbrew/.linuxbrew"
+  fi
+}
+
+omd_shared_linuxbrew_state_dir() {
+  if omd_shared_linuxbrew_test_mode; then
+    printf '%s\n' "${OHMYDEVPOD_SHARED_BREW_STATE_DIR:-/var/lib/oh-my-devpod/linuxbrew}"
+  else
+    printf '%s\n' "/var/lib/oh-my-devpod/linuxbrew"
+  fi
+}
+
+omd_shared_linuxbrew_libexec_dir() {
+  if omd_shared_linuxbrew_test_mode; then
+    printf '%s\n' "${OHMYDEVPOD_SHARED_BREW_LIBEXEC_DIR:-/usr/local/libexec/oh-my-devpod}"
+  else
+    printf '%s\n' "/usr/local/libexec/oh-my-devpod"
+  fi
+}
+
+omd_shared_linuxbrew_gateway() {
+  printf '%s/bin/brew\n' "$(omd_shared_linuxbrew_libexec_dir)"
+}
+
+omd_shared_linuxbrew_manifest() {
+  printf '%s/manifest\n' "$(omd_shared_linuxbrew_state_dir)"
+}
+
+omd_shared_linuxbrew_state_claim_present() {
+  local manifest
+  manifest="$(omd_shared_linuxbrew_manifest)"
+  [[ -e "${manifest}" || -L "${manifest}" ]]
+}
+
+omd_shared_linuxbrew_enabled() {
+  [[ "${OHMYDEVPOD_SHARED_BREW_DISABLE:-0}" != "1" ]]
+}
+
+omd_shared_linuxbrew_manifest_value() {
+  local key="$1" manifest
+  manifest="$(omd_shared_linuxbrew_manifest)"
+  [[ -f "${manifest}" && ! -L "${manifest}" ]] || return 1
+  sed -n "s/^${key}=//p" "${manifest}" | head -n 1
+}
+
+omd_shared_linuxbrew_group_gid() {
+  local group="$1"
+  if command -v getent >/dev/null 2>&1; then
+    getent group "${group}" | awk -F: '{print $3}'
+  else
+    id -g "${group}"
+  fi
+}
+
+omd_shared_linuxbrew_stat_uid() {
+  if stat -c '%u' "$1" >/dev/null 2>&1; then stat -c '%u' "$1"; else stat -f '%u' "$1"; fi
+}
+
+omd_shared_linuxbrew_stat_gid() {
+  if stat -c '%g' "$1" >/dev/null 2>&1; then stat -c '%g' "$1"; else stat -f '%g' "$1"; fi
+}
+
+omd_shared_linuxbrew_stat_mode() {
+  if stat -c '%a' "$1" >/dev/null 2>&1; then stat -c '%a' "$1"; else stat -f '%Lp' "$1"; fi
+}
+
+omd_shared_linuxbrew_validate() {
+  local manifest prefix recorded_prefix service_user manager_group installation_id
+  local expected_uid expected_gid actual_uid actual_gid
+  omd_shared_linuxbrew_enabled || return 1
+  manifest="$(omd_shared_linuxbrew_manifest)"
+  [[ -f "${manifest}" && ! -L "${manifest}" ]] || return 1
+  [[ "$(omd_shared_linuxbrew_manifest_value schema_version || true)" == "1" ]] || return 1
+  [[ "$(omd_shared_linuxbrew_manifest_value managed_by || true)" == "oh-my-devpod" ]] || return 1
+  [[ "$(omd_shared_linuxbrew_manifest_value mode || true)" == "shared-service-account" ]] || return 1
+
+  prefix="$(omd_shared_linuxbrew_prefix)"
+  recorded_prefix="$(omd_shared_linuxbrew_manifest_value prefix || true)"
+  [[ "${recorded_prefix}" == "${prefix}" && "${prefix}" == /* && ! -L "${prefix}" ]] || return 1
+  [[ -d "${prefix}" && -x "${prefix}/bin/brew" ]] || return 1
+  prefix="$(cd "${prefix}" 2>/dev/null && pwd -P)" || return 1
+  [[ "${prefix}" == "${recorded_prefix}" ]] || return 1
+
+  service_user="$(omd_shared_linuxbrew_manifest_value service_user || true)"
+  manager_group="$(omd_shared_linuxbrew_manifest_value manager_group || true)"
+  expected_uid="$(omd_shared_linuxbrew_manifest_value service_uid || true)"
+  expected_gid="$(omd_shared_linuxbrew_manifest_value service_gid || true)"
+  installation_id="$(omd_shared_linuxbrew_manifest_value installation_id || true)"
+  [[ "${service_user}" =~ ^[a-z_][a-z0-9_-]*[$]?$ ]] || return 1
+  [[ "${manager_group}" =~ ^[a-z_][a-z0-9_-]*[$]?$ ]] || return 1
+  [[ "${expected_uid}" =~ ^[0-9]+$ && "${expected_gid}" =~ ^[0-9]+$ ]] || return 1
+  [[ "${installation_id}" =~ ^[[:xdigit:]]{8}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{12}$ ]] || return 1
+  actual_uid="$(id -u "${service_user}" 2>/dev/null || true)"
+  if omd_shared_linuxbrew_test_mode && [[ -n "${OHMYDEVPOD_SHARED_BREW_TEST_SERVICE_GID:-}" ]]; then
+    actual_gid="${OHMYDEVPOD_SHARED_BREW_TEST_SERVICE_GID}"
+  else
+    actual_gid="$(omd_shared_linuxbrew_group_gid "${manager_group}" 2>/dev/null || true)"
+  fi
+  [[ "${actual_uid}" == "${expected_uid}" && "${actual_gid}" == "${expected_gid}" ]] || return 1
+  [[ "$(omd_shared_linuxbrew_stat_uid "${prefix}")" == "${expected_uid}" ]] || return 1
+  [[ "$(omd_shared_linuxbrew_stat_gid "${prefix}")" == "${expected_gid}" ]] || return 1
+  if ! omd_shared_linuxbrew_test_mode; then
+    [[ "$(omd_shared_linuxbrew_stat_uid "${manifest}")" == "0" ]] || return 1
+    [[ "$(omd_shared_linuxbrew_stat_gid "${manifest}")" == "0" ]] || return 1
+    (( (8#$(omd_shared_linuxbrew_stat_mode "${manifest}") & 8#022) == 0 )) || return 1
+    [[ "$(omd_shared_linuxbrew_stat_uid "$(omd_shared_linuxbrew_state_dir)")" == "0" ]] || return 1
+    [[ "$(omd_shared_linuxbrew_stat_uid "$(omd_shared_linuxbrew_libexec_dir)/brew-gateway")" == "0" ]] || return 1
+    [[ "$(omd_shared_linuxbrew_stat_uid "$(omd_shared_linuxbrew_libexec_dir)/brew-provisioner")" == "0" ]] || return 1
+  fi
+  [[ -d "$(omd_shared_linuxbrew_state_dir)/inventory" && ! -L "$(omd_shared_linuxbrew_state_dir)/inventory" ]] || return 1
+  [[ -f "$(omd_shared_linuxbrew_state_dir)/locks/mutation.lock" && ! -L "$(omd_shared_linuxbrew_state_dir)/locks/mutation.lock" ]] || return 1
+}
+
+omd_shared_linuxbrew_managed() {
+  omd_shared_linuxbrew_validate
+}
+
+omd_shared_linuxbrew_current_user_enrolled() {
+  local user uid record
+  omd_shared_linuxbrew_managed || return 1
+  if omd_shared_linuxbrew_test_mode && [[ -n "${OHMYDEVPOD_SHARED_BREW_TEST_CURRENT_USER:-}" ]]; then
+    user="${OHMYDEVPOD_SHARED_BREW_TEST_CURRENT_USER}"
+    uid="${OHMYDEVPOD_SHARED_BREW_TEST_CURRENT_UID:-$(id -u)}"
+  else
+    user="$(id -un)"
+    uid="$(id -u)"
+  fi
+  [[ "${user}" =~ ^[a-z_][a-z0-9_-]*[$]?$ ]] || return 1
+  record="$(omd_shared_linuxbrew_state_dir)/members/${user}"
+  [[ -f "${record}" && ! -L "${record}" ]] || return 1
+  grep -Fqx "managed_by=oh-my-devpod" "${record}" || return 1
+  grep -Fqx "user=${user}" "${record}" || return 1
+  grep -Fqx "uid=${uid}" "${record}"
+}
+
+omd_shared_linuxbrew_marker_path() {
+  local formula="$1"
+  [[ "${formula}" =~ ^[a-z0-9][a-z0-9@+_.-]*$ ]] || return 2
+  printf '%s/inventory/%s\n' "$(omd_shared_linuxbrew_state_dir)" "${formula}"
+}
+
+omd_shared_linuxbrew_formula_managed() {
+  local component="$1" formula="$2" marker prefix installation_id
+  omd_shared_linuxbrew_managed || return 1
+  omd_shared_linuxbrew_current_user_enrolled || return 1
+  [[ "${component}" == "${formula}" ]] || return 1
+  marker="$(omd_shared_linuxbrew_marker_path "${formula}")" || return
+  [[ -f "${marker}" && ! -L "${marker}" ]] || return 1
+  grep -qx 'managed_by=oh-my-devpod' "${marker}" || return 1
+  grep -Fqx "component=${component}" "${marker}" || return 1
+  grep -Fqx 'kind=brew-formula' "${marker}" || return 1
+  grep -Fqx "artifact=${formula}" "${marker}" || return 1
+  grep -Fqx 'state=managed' "${marker}" || return 1
+  prefix="$(omd_shared_linuxbrew_prefix)"
+  grep -Fqx "brew_prefix=${prefix}" "${marker}" || return 1
+  installation_id="$(omd_shared_linuxbrew_manifest_value installation_id || true)"
+  grep -Fqx "installation_id=${installation_id}" "${marker}" || return 1
+}
+
+omd_shared_linuxbrew_formula_prefix() {
+  local component="$1" formula="$2"
+  omd_shared_linuxbrew_formula_managed "${component}" "${formula}" || return 1
+  omd_shared_linuxbrew_prefix
+}
+
+omd_shared_linuxbrew_install_controller() {
+  local bundle_root="$1" source_controller source_gateway libexec_dir sudo_bin
+  source_controller="${bundle_root}/build/omd-brew-provisioner.sh"
+  source_gateway="${bundle_root}/build/omd-brew-gateway.sh"
+  libexec_dir="$(omd_shared_linuxbrew_libexec_dir)"
+  [[ -f "${source_controller}" && ! -L "${source_controller}" ]] || {
+    printf 'error: shared Linuxbrew provisioner is missing: %s\n' "${source_controller}" >&2
+    return 1
+  }
+  [[ -f "${source_gateway}" && ! -L "${source_gateway}" ]] || {
+    printf 'error: shared Linuxbrew gateway is missing: %s\n' "${source_gateway}" >&2
+    return 1
+  }
+
+  if omd_shared_linuxbrew_test_mode; then
+    mkdir -p "${libexec_dir}/bin"
+    install -m 0755 "${source_controller}" "${libexec_dir}/brew-provisioner"
+    install -m 0755 "${source_gateway}" "${libexec_dir}/brew-gateway"
+    return 0
+  fi
+
+  sudo_bin="${OHMYDEVPOD_SUDO_BIN:-sudo}"
+  command -v "${sudo_bin}" >/dev/null 2>&1 || {
+    printf 'error: sudo is required to initialize or join shared Linuxbrew\n' >&2
+    return 1
+  }
+  "${sudo_bin}" -- install -d -o root -g root -m 0755 "${libexec_dir}" "${libexec_dir}/bin"
+  "${sudo_bin}" -- install -o root -g root -m 0755 "${source_controller}" "${libexec_dir}/brew-provisioner"
+  "${sudo_bin}" -- install -o root -g root -m 0755 "${source_gateway}" "${libexec_dir}/brew-gateway"
+}
+
+omd_shared_linuxbrew_provision() {
+  local bundle_root="$1" mirror_profile="${2:-upstream}" controller sudo_bin
+  case "${mirror_profile}" in upstream|cn) ;; *) return 2 ;; esac
+  omd_shared_linuxbrew_install_controller "${bundle_root}" || return
+  controller="$(omd_shared_linuxbrew_libexec_dir)/brew-provisioner"
+  if omd_shared_linuxbrew_test_mode; then
+    "${controller}" ensure "${mirror_profile}"
+    return
+  fi
+  sudo_bin="${OHMYDEVPOD_SUDO_BIN:-sudo}"
+  "${sudo_bin}" -- "${controller}" ensure "${mirror_profile}"
+}
+
+omd_shared_linuxbrew_set_profile() {
+  local profile="$1" controller sudo_bin
+  case "${profile}" in upstream|cn) ;; *) return 2 ;; esac
+  omd_shared_linuxbrew_managed || return 1
+  controller="$(omd_shared_linuxbrew_libexec_dir)/brew-provisioner"
+  [[ -x "${controller}" && ! -L "${controller}" ]] || return 1
+  if omd_shared_linuxbrew_test_mode; then
+    "${controller}" source-profile "${profile}"
+    return
+  fi
+  sudo_bin="${OHMYDEVPOD_SUDO_BIN:-sudo}"
+  "${sudo_bin}" -n -- "${controller}" source-profile "${profile}"
+}
+
+omd_shared_linuxbrew_activate_if_present() {
+  local bundle_root="$1" mirror_profile="${2:-upstream}" prefix manifest
+  omd_shared_linuxbrew_enabled || return 0
+  prefix="$(omd_shared_linuxbrew_prefix)"
+  manifest="$(omd_shared_linuxbrew_manifest)"
+  [[ -e "${prefix}" || -L "${prefix}" || -e "${manifest}" || -L "${manifest}" ]] || return 0
+  omd_shared_linuxbrew_provision "${bundle_root}" "${mirror_profile}"
+}

package/runtime/modules/lib/source-config.sh

@@ -51,14 +51,19 @@ omd_source_config_formula_managed() {
 }
 
 omd_source_config_linuxbrew_prefix() {
-  local prefix kind
+  local prefix kind brew
   omd_module_is_managed linuxbrew || return 1
   prefix="$(omd_module_marker_value linuxbrew artifact || true)"
   kind="$(omd_module_marker_value linuxbrew kind || true)"
   [[ "${kind}" == "directory" && -n "${prefix}" && ! -L "${prefix}" && -x "${prefix}/bin/brew" ]] ||
     return 1
   prefix="$(cd "${prefix}" 2>/dev/null && pwd -P)" || return 1
-  omd_module_brew_cmd_matches_prefix "${prefix}/bin/brew" "${prefix}" || return 1
+  if omd_shared_linuxbrew_managed; then
+    brew="$(omd_shared_linuxbrew_gateway)"
+  else
+    brew="${prefix}/bin/brew"
+  fi
+  omd_module_brew_cmd_matches_prefix "${brew}" "${prefix}" || return 1
   printf '%s\n' "${prefix}"
 }
 
@@ -132,7 +137,7 @@ omd_source_config_file_is_managed() {
 
 omd_source_config_active_paths() {
   local prefix need_pip=0
-  if prefix="$(omd_source_config_linuxbrew_prefix)"; then
+  if ! omd_shared_linuxbrew_managed && prefix="$(omd_source_config_linuxbrew_prefix)"; then
     printf 'brew\t%s/etc/homebrew/brew.env\t%s\n' "${prefix}" "${prefix}"
   fi
   if omd_source_config_formula_managed uv uv; then

package/runtime/modules/tools/witr.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)/lib/common.sh"
+
+component="witr"
+formula="witr"
+command_name="witr"
+
+status() { omd_module_formula_status "${formula}" "${command_name}"; }
+managed() { omd_module_formula_managed "${component}" "${formula}"; }
+install_or_update() {
+  local action="$1"
+  shift
+  omd_module_formula_install_or_update "${component}" "${formula}" "${command_name}" "${action}" "$@"
+}
+uninstall() { omd_module_formula_uninstall "${component}" "${formula}" "$@"; }
+
+case "${1:-}" in
+  status) status ;;
+  managed) managed ;;
+  install) shift; install_or_update install "$@" ;;
+  update) shift; install_or_update update "$@" ;;
+  uninstall) shift; uninstall "$@" ;;
+  *) omd_module_unknown_action "${1:-}" ;;
+esac

package/runtime/modules/tools/zsh-config.sh

@@ -51,11 +51,19 @@ if [[ -f "${OHMYDEVPOD_CONFIG_DIR}/env" ]]; then
   source "${OHMYDEVPOD_CONFIG_DIR}/env"
   set +a
 fi
+omd_brew_gateway_dir="/usr/local/libexec/oh-my-devpod/bin"
+if [[ -x "${omd_brew_gateway_dir}/brew" ]]; then
+  export PATH="${omd_brew_gateway_dir}:${PATH}"
+fi
 if command -v brew >/dev/null 2>&1; then
   eval "$(brew shellenv)"
 elif [[ -x /home/linuxbrew/.linuxbrew/bin/brew ]]; then
   eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
 fi
+if [[ -x "${omd_brew_gateway_dir}/brew" ]]; then
+  export PATH="${omd_brew_gateway_dir}:${PATH}"
+fi
+unset omd_brew_gateway_dir
 export PATH="$HOME/.local/bin:$PATH"
 omd_mamba_hook=""
 if command -v mamba >/dev/null 2>&1; then