cleanup

This reverts commit abe133afe8.

.icons/openwebui.svg

@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg viewBox="0 0 500 500" xmlns="http://www.w3.org/2000/svg">
+    <circle cx="250" cy="250" r="250" fill="#fff"/>
+    <path d="m335 150h40v200h-40zm-130 0a100 100 0 1 0 0 200 100 100 0 1 0 0-200zm0 40a60 60 0 1 1 0 120 60 60 0 1 1 0-120z"/>
+</svg>

registry/coder-labs/modules/open-webui/README.md

@@ -0,0 +1,37 @@
+---
+display_name: Open WebUI
+description: A self-hosted AI chat interface supporting various LLM providers
+icon: ../../../../.icons/openwebui.svg
+verified: true
+tags: [ai, llm, chat, web-ui, python]
+---
+
+# Open WebUI
+
+Open WebUI is a user-friendly web interface for interacting with Large Language Models. It provides a ChatGPT-like interface that can connect to various LLM providers including OpenAI, Ollama, and more.
+
+This module installs and runs Open WebUI using Python and pip within your Coder workspace.
+
+## Prerequisites
+
+- **Python 3.11 or higher** must be installed in your image (with `venv` module)
+- Port 7800 (default) or your custom port must be available
+
+For Ubuntu/Debian, you can install Python 3.11 from [deadsnakes PPA](https://launchpad.net/~deadsnakes/+archive/ubuntu/ppa):
+
+```shell
+sudo add-apt-repository -y ppa:deadsnakes/ppa
+sudo apt-get update
+sudo apt-get install -y python3.11 python3.11-venv
+```
+
+## Basic Usage
+
+```tf
+module "open-webui" {
+  count    = data.coder_workspace.me.start_count
+  source   = "registry.coder.com/coder-labs/open-webui/coder"
+  version  = "0.9.0"
+  agent_id = coder_agent.main.id
+}
+```

registry/coder-labs/modules/open-webui/main.tf

@@ -0,0 +1,72 @@
+terraform {
+  required_version = ">= 1.0"
+
+  required_providers {
+    coder = {
+      source  = "coder/coder"
+      version = ">= 2.5"
+    }
+  }
+}
+
+# Add required variables for your modules and remove any unneeded variables
+variable "agent_id" {
+  type        = string
+  description = "The ID of a Coder agent."
+}
+
+variable "http_server_log_path" {
+  type        = string
+  description = "The path to log Open WebUI to."
+  default     = "/tmp/open-webui.log"
+}
+
+variable "http_server_port" {
+  type        = number
+  description = "The port to run Open WebUI on."
+  default     = 7800
+}
+
+variable "share" {
+  type    = string
+  default = "owner"
+  validation {
+    condition     = var.share == "owner" || var.share == "authenticated" || var.share == "public"
+    error_message = "Incorrect value. Please set either 'owner', 'authenticated', or 'public'."
+  }
+}
+
+variable "order" {
+  type        = number
+  description = "The order determines the position of app in the UI presentation. The lowest order is shown first and apps with equal order are sorted by name (ascending order)."
+  default     = null
+}
+
+variable "group" {
+  type        = string
+  description = "The name of a group that this app belongs to."
+  default     = null
+}
+
+resource "coder_script" "open-webui" {
+  agent_id     = var.agent_id
+  display_name = "open-webui"
+  icon         = "/icon/openwebui.svg"
+  script = templatefile("${path.module}/run.sh", {
+    HTTP_SERVER_LOG_PATH : var.http_server_log_path,
+    HTTP_SERVER_PORT : var.http_server_port,
+  })
+  run_on_start = true
+}
+
+resource "coder_app" "open-webui" {
+  agent_id     = var.agent_id
+  slug         = "open-webui"
+  display_name = "Open WebUI"
+  url          = "http://localhost:${var.http_server_port}"
+  icon         = "/icon/openwebui.svg"
+  subdomain    = true
+  share        = var.share
+  order        = var.order
+  group        = var.group
+}

registry/coder-labs/modules/open-webui/run.sh

@@ -0,0 +1,60 @@
+#!/usr/bin/env sh
+
+set -eu
+
+printf '\033[0;1mInstalling Open WebUI...\n\n'
+
+check_python_version() {
+  python_cmd="$1"
+  if command -v "$python_cmd" > /dev/null 2>&1; then
+    version=$("$python_cmd" --version 2>&1 | awk '{print $2}')
+    major=$(echo "$version" | cut -d. -f1)
+    minor=$(echo "$version" | cut -d. -f2)
+    if [ "$major" -eq 3 ] && [ "$minor" -ge 11 ]; then
+      echo "$python_cmd"
+      return 0
+    fi
+  fi
+  return 1
+}
+
+PYTHON_CMD=""
+for cmd in python3.13 python3.12 python3.11 python3 python; do
+  if result=$(check_python_version "$cmd"); then
+    PYTHON_CMD="$result"
+    echo "✅ Found suitable Python: $PYTHON_CMD ($($PYTHON_CMD --version 2>&1))"
+    break
+  fi
+done
+
+if [ -z "$PYTHON_CMD" ]; then
+  echo "❌ Python 3.11 or higher is required but not found."
+  echo ""
+  echo "Please install Python 3.11+ in your image. For example on Ubuntu/Debian:"
+  echo "  sudo add-apt-repository -y ppa:deadsnakes/ppa"
+  echo "  sudo apt-get update"
+  echo "  sudo apt-get install -y python3.11 python3.11-venv"
+  exit 1
+fi
+
+VENV_DIR="$HOME/.open-webui-venv"
+if [ ! -d "$VENV_DIR" ]; then
+  echo "📦 Creating virtual environment..."
+  "$PYTHON_CMD" -m venv "$VENV_DIR"
+fi
+. "$VENV_DIR/bin/activate"
+
+if ! pip show open-webui > /dev/null 2>&1; then
+  echo "📦 Installing Open WebUI..."
+  pip install open-webui
+  echo "🥳 Open WebUI has been installed"
+else
+  echo "✅ Open WebUI is already installed"
+fi
+
+echo "👷 Starting Open WebUI in background..."
+echo "Check logs at ${HTTP_SERVER_LOG_PATH}"
+
+open-webui serve --host 0.0.0.0 --port "${HTTP_SERVER_PORT}" > "${HTTP_SERVER_LOG_PATH}" 2>&1 &
+
+echo "🥳 Open WebUI is ready. HTTP server is listening on port ${HTTP_SERVER_PORT}"

registry/coder-labs/modules/sourcegraph-amp/README.md

@@ -12,12 +12,12 @@ Run [Amp CLI](https://ampcode.com/) in your workspace to access Sourcegraph's AI
 
 ```tf
 module "amp-cli" {
-  source           = "registry.coder.com/coder-labs/sourcegraph-amp/coder"
-  version          = "2.1.0"
-  agent_id         = coder_agent.example.id
-  amp_api_key      = var.amp_api_key
-  install_amp      = true
-  agentapi_version = "latest"
+  source                  = "registry.coder.com/coder-labs/sourcegraph-amp/coder"
+  version                 = "2.0.2"
+  agent_id                = coder_agent.example.id
+  sourcegraph_amp_api_key = var.sourcegraph_amp_api_key
+  install_sourcegraph_amp = true
+  agentapi_version        = "2.0.2"
 }
 ```
 
@@ -48,7 +48,7 @@ variable "amp_api_key" {
 module "amp-cli" {
   count              = data.coder_workspace.me.start_count
   source             = "registry.coder.com/coder-labs/sourcegraph-amp/coder"
-  amp_version        = "2.1.0"
+  amp_version        = "2.0.2"
   agent_id           = coder_agent.example.id
   amp_api_key        = var.amp_api_key # recommended for tasks usage
   workdir            = "/home/coder/project"

registry/coder-labs/modules/sourcegraph-amp/main.tf

@@ -55,7 +55,7 @@ variable "install_agentapi" {
 variable "agentapi_version" {
   type        = string
   description = "The version of AgentAPI to install."
-  default     = "v0.11.1"
+  default     = "v0.10.0"
 }
 
 variable "cli_app" {
@@ -160,16 +160,6 @@ variable "mcp" {
   default     = null
 }
 
-variable "mode" {
-  type        = string
-  description = "Set the agent mode (free, rush, smart) — controls the model, system prompt, and tool selection. Default: smart"
-  default     = "smart"
-  validation {
-    condition     = contains(["", "free", "rush", "smart"], var.mode)
-    error_message = "Invalid mode. Select one from (free, rush, smart)"
-  }
-}
-
 data "external" "env" {
   program = ["sh", "-c", "echo '{\"CODER_AGENT_TOKEN\":\"'$CODER_AGENT_TOKEN'\",\"CODER_AGENT_URL\":\"'$CODER_AGENT_URL'\"}'"]
 }
@@ -180,7 +170,6 @@ locals {
   default_base_config = jsonencode({
     "amp.anthropic.thinking.enabled" = true
     "amp.todos.enabled"              = true
-    "amp.terminal.animation"         = false
   })
 
   user_config       = jsondecode(var.base_amp_config != "" ? var.base_amp_config : local.default_base_config)
@@ -248,7 +237,6 @@ module "agentapi" {
      ARG_AMP_START_DIRECTORY='${var.workdir}' \
      ARG_AMP_TASK_PROMPT='${base64encode(var.ai_prompt)}' \
      ARG_REPORT_TASKS='${var.report_tasks}' \
-     ARG_MODE='${var.mode}' \
      /tmp/start.sh
    EOT
 

registry/coder-labs/modules/sourcegraph-amp/scripts/install.sh

@@ -1,4 +1,9 @@
 #!/bin/bash
+
+if [ -f "$HOME/.bashrc" ]; then
+  source "$HOME"/.bashrc
+fi
+
 set -euo pipefail
 
 # ANSI colors

registry/coder-labs/modules/sourcegraph-amp/scripts/start.sh

@@ -29,7 +29,6 @@ echo "--------------------------------"
 printf "Workspace: %s\n" "$ARG_AMP_START_DIRECTORY"
 printf "Task Prompt: %s\n" "$ARG_AMP_TASK_PROMPT"
 printf "ARG_REPORT_TASKS: %s\n" "$ARG_REPORT_TASKS"
-printf "ARG_MODE: %s\n" "$ARG_MODE"
 echo "--------------------------------"
 
 ensure_command amp
@@ -51,13 +50,6 @@ else
   printf "amp_api_key not provided\n"
 fi
 
-ARGS=()
-
-if [ -n "$ARG_MODE" ]; then
-  printf "Running agent in: %s mode" "$ARG_MODE"
-  ARGS+=(--mode "$ARG_MODE")
-fi
-
 if [ -n "$ARG_AMP_TASK_PROMPT" ]; then
   if [ "$ARG_REPORT_TASKS" == "true" ]; then
     printf "amp task prompt provided : %s" "$ARG_AMP_TASK_PROMPT\n"
@@ -66,8 +58,8 @@ if [ -n "$ARG_AMP_TASK_PROMPT" ]; then
     PROMPT="$ARG_AMP_TASK_PROMPT"
   fi
   # Pipe the prompt into amp, which will be run inside agentapi
-  agentapi server --type amp --term-width=67 --term-height=1190 -- bash -c "echo \"$PROMPT\" | amp" "${ARGS[@]}"
+  agentapi server --type amp --term-width=67 --term-height=1190 -- bash -c "echo \"$PROMPT\" | amp"
 else
   printf "No task prompt given.\n"
-  agentapi server --type amp --term-width=67 --term-height=1190 -- amp "${ARGS[@]}"
+  agentapi server --type amp --term-width=67 --term-height=1190 -- amp
 fi

registry/coder/modules/vault-cli/README.md

@@ -1,121 +0,0 @@
----
-display_name: Vault CLI
-description: Installs the Hashicorp Vault CLI and optionally configures token authentication
-icon: ../../../../.icons/vault.svg
-verified: true
-tags: [helper, integration, vault, cli]
----
-
-# Vault CLI
-
-Installs the [Vault](https://www.vaultproject.io/) CLI and optionally configures token authentication. This module focuses on CLI installation and can be used standalone or as a base for other authentication methods.
-
-```tf
-module "vault_cli" {
-  source     = "registry.coder.com/coder/vault-cli/coder"
-  version    = "1.1.0"
-  agent_id   = coder_agent.example.id
-  vault_addr = "https://vault.example.com"
-}
-```
-
-## Prerequisites
-
-The following tools are required in the workspace image:
-
-- **HTTP client**: `curl`, `wget`, or `busybox` (at least one)
-- **Archive utility**: `unzip` or `busybox` (at least one)
-- **jq**: Optional but recommended for reliable JSON parsing (falls back to sed if not available)
-
-## With Token Authentication
-
-If you have a Vault token, you can provide it to automatically configure authentication:
-
-```tf
-module "vault_cli" {
-  source      = "registry.coder.com/coder/vault-cli/coder"
-  version     = "1.1.0"
-  agent_id    = coder_agent.example.id
-  vault_addr  = "https://vault.example.com"
-  vault_token = var.vault_token # Optional
-}
-```
-
-## Examples
-
-### Basic Installation (CLI Only)
-
-Install the Vault CLI without any authentication:
-
-```tf
-module "vault_cli" {
-  source     = "registry.coder.com/coder/vault-cli/coder"
-  version    = "1.1.0"
-  agent_id   = coder_agent.example.id
-  vault_addr = "https://vault.example.com"
-}
-```
-
-### With Specific Version
-
-```tf
-module "vault_cli" {
-  source            = "registry.coder.com/coder/vault-cli/coder"
-  version           = "1.1.0"
-  agent_id          = coder_agent.example.id
-  vault_addr        = "https://vault.example.com"
-  vault_cli_version = "1.15.0"
-}
-```
-
-### Custom Installation Directory
-
-```tf
-module "vault_cli" {
-  source      = "registry.coder.com/coder/vault-cli/coder"
-  version     = "1.1.0"
-  agent_id    = coder_agent.example.id
-  vault_addr  = "https://vault.example.com"
-  install_dir = "/home/coder/bin"
-}
-```
-
-### With Vault Enterprise Namespace
-
-For Vault Enterprise users who need to specify a namespace:
-
-```tf
-module "vault_cli" {
-  source          = "registry.coder.com/coder/vault-cli/coder"
-  version         = "1.1.0"
-  agent_id        = coder_agent.example.id
-  vault_addr      = "https://vault.example.com"
-  vault_token     = var.vault_token
-  vault_namespace = "admin/my-namespace"
-}
-```
-
-### Vault Enterprise Binary
-
-Install the Vault Enterprise binary. This is required if using SAML authentication to Vault:
-
-```tf
-module "vault_cli" {
-  source     = "registry.coder.com/coder/vault-cli/coder"
-  version    = "1.1.0"
-  agent_id   = coder_agent.example.id
-  vault_addr = "https://vault.example.com"
-  enterprise = true
-}
-```
-
-## Related Modules
-
-For more advanced authentication methods, see:
-
-- [vault-github](https://registry.coder.com/modules/coder/vault-github) - Authenticate with Vault using GitHub tokens
-- [vault-jwt](https://registry.coder.com/modules/coder/vault-jwt) - Authenticate with Vault using OIDC/JWT
-
-For simple token-based authentication, see:
-
-- [vault-token](https://registry.coder.com/modules/coder/vault-token) - Authenticate with Vault using a token

registry/coder/modules/vault-cli/main.tf

@@ -1,97 +0,0 @@
-terraform {
-  required_version = ">= 1.0"
-
-  required_providers {
-    coder = {
-      source  = "coder/coder"
-      version = ">= 0.17"
-    }
-  }
-}
-
-variable "agent_id" {
-  type        = string
-  description = "The ID of a Coder agent."
-}
-
-variable "vault_addr" {
-  type        = string
-  description = "The address of the Vault server."
-}
-
-variable "vault_token" {
-  type        = string
-  description = "The Vault token to use for authentication. If not provided, only the CLI will be installed."
-  default     = ""
-  sensitive   = true
-}
-
-variable "install_dir" {
-  type        = string
-  description = "The directory to install the Vault CLI to."
-  default     = "/usr/local/bin"
-}
-
-variable "vault_cli_version" {
-  type        = string
-  description = "The version of the Vault CLI to install."
-  default     = "latest"
-  validation {
-    condition     = var.vault_cli_version == "latest" || can(regex("^[0-9]+\\.[0-9]+\\.[0-9]+$", var.vault_cli_version))
-    error_message = "vault_cli_version must be either 'latest' or a semantic version (e.g., '1.15.0')."
-  }
-}
-
-variable "vault_namespace" {
-  type        = string
-  description = "The Vault Enterprise namespace to use. If not provided, no namespace will be configured."
-  default     = null
-}
-
-variable "enterprise" {
-  type        = bool
-  description = "Whether to install the enterprise version of the Vault CLI. Required if using SAML authentication to Vault."
-  default     = false
-}
-
-data "coder_workspace" "me" {}
-
-resource "coder_script" "vault_cli" {
-  agent_id     = var.agent_id
-  display_name = "Vault CLI"
-  icon         = "/icon/vault.svg"
-  script = templatefile("${path.module}/run.sh", {
-    VAULT_ADDR        = var.vault_addr
-    VAULT_TOKEN       = var.vault_token
-    INSTALL_DIR       = var.install_dir
-    VAULT_CLI_VERSION = var.vault_cli_version
-    ENTERPRISE        = var.enterprise
-  })
-  run_on_start       = true
-  start_blocks_login = true
-}
-
-resource "coder_env" "vault_addr" {
-  agent_id = var.agent_id
-  name     = "VAULT_ADDR"
-  value    = var.vault_addr
-}
-
-resource "coder_env" "vault_token" {
-  count    = var.vault_token != "" ? 1 : 0
-  agent_id = var.agent_id
-  name     = "VAULT_TOKEN"
-  value    = var.vault_token
-}
-
-resource "coder_env" "vault_namespace" {
-  count    = var.vault_namespace != null ? 1 : 0
-  agent_id = var.agent_id
-  name     = "VAULT_NAMESPACE"
-  value    = var.vault_namespace
-}
-
-output "vault_cli_version" {
-  description = "The version of the Vault CLI that was installed."
-  value       = var.vault_cli_version
-}

registry/coder/modules/vault-cli/main.tftest.hcl

@@ -1,176 +0,0 @@
-mock_provider "coder" {}
-
-variables {
-  agent_id   = "test-agent-id"
-  vault_addr = "https://vault.example.com"
-}
-
-run "test_vault_cli_without_token" {
-  assert {
-    condition     = resource.coder_script.vault_cli.display_name == "Vault CLI"
-    error_message = "Display name should be 'Vault CLI'"
-  }
-
-  assert {
-    condition     = resource.coder_env.vault_addr.name == "VAULT_ADDR"
-    error_message = "VAULT_ADDR environment variable should be set"
-  }
-
-  assert {
-    condition     = resource.coder_env.vault_addr.value == "https://vault.example.com"
-    error_message = "VAULT_ADDR should match the provided vault_addr"
-  }
-
-  assert {
-    condition     = length(resource.coder_env.vault_token) == 0
-    error_message = "VAULT_TOKEN should not be set when vault_token is not provided"
-  }
-
-  assert {
-    condition     = length(resource.coder_env.vault_namespace) == 0
-    error_message = "VAULT_NAMESPACE should not be set when vault_namespace is not provided"
-  }
-}
-
-run "test_vault_cli_with_token" {
-  variables {
-    vault_token = "test-vault-token"
-  }
-
-  assert {
-    condition     = resource.coder_script.vault_cli.display_name == "Vault CLI"
-    error_message = "Display name should be 'Vault CLI'"
-  }
-
-  assert {
-    condition     = resource.coder_env.vault_addr.name == "VAULT_ADDR"
-    error_message = "VAULT_ADDR environment variable should be set"
-  }
-
-  assert {
-    condition     = length(resource.coder_env.vault_token) == 1
-    error_message = "VAULT_TOKEN should be set when vault_token is provided"
-  }
-
-  assert {
-    condition     = resource.coder_env.vault_token[0].name == "VAULT_TOKEN"
-    error_message = "VAULT_TOKEN environment variable name should be correct"
-  }
-
-  assert {
-    condition     = resource.coder_env.vault_token[0].value == "test-vault-token"
-    error_message = "VAULT_TOKEN should match the provided vault_token"
-  }
-}
-
-run "test_vault_cli_custom_version" {
-  variables {
-    vault_cli_version = "1.15.0"
-  }
-
-  assert {
-    condition     = output.vault_cli_version == "1.15.0"
-    error_message = "Vault CLI version output should match the provided version"
-  }
-}
-
-run "test_vault_cli_custom_install_dir" {
-  variables {
-    install_dir = "/custom/install/dir"
-  }
-
-  assert {
-    condition     = resource.coder_script.vault_cli.display_name == "Vault CLI"
-    error_message = "Display name should be 'Vault CLI'"
-  }
-}
-
-run "test_vault_cli_invalid_version" {
-  command = plan
-
-  variables {
-    vault_cli_version = "invalid-version"
-  }
-
-  expect_failures = [var.vault_cli_version]
-}
-
-run "test_vault_cli_valid_semver" {
-  variables {
-    vault_cli_version = "1.18.3"
-  }
-
-  assert {
-    condition     = output.vault_cli_version == "1.18.3"
-    error_message = "Vault CLI version output should match the provided version"
-  }
-}
-
-run "test_vault_cli_rejects_v_prefix" {
-  command = plan
-
-  variables {
-    vault_cli_version = "v1.18.3"
-  }
-
-  expect_failures = [var.vault_cli_version]
-}
-
-run "test_vault_cli_with_namespace" {
-  variables {
-    vault_namespace = "admin/my-namespace"
-  }
-
-  assert {
-    condition     = length(resource.coder_env.vault_namespace) == 1
-    error_message = "VAULT_NAMESPACE should be set when vault_namespace is provided"
-  }
-
-  assert {
-    condition     = resource.coder_env.vault_namespace[0].name == "VAULT_NAMESPACE"
-    error_message = "VAULT_NAMESPACE environment variable name should be correct"
-  }
-
-  assert {
-    condition     = resource.coder_env.vault_namespace[0].value == "admin/my-namespace"
-    error_message = "VAULT_NAMESPACE should match the provided vault_namespace"
-  }
-}
-
-run "test_vault_cli_with_token_and_namespace" {
-  variables {
-    vault_token     = "test-vault-token"
-    vault_namespace = "admin/my-namespace"
-  }
-
-  assert {
-    condition     = length(resource.coder_env.vault_token) == 1
-    error_message = "VAULT_TOKEN should be set when vault_token is provided"
-  }
-
-  assert {
-    condition     = length(resource.coder_env.vault_namespace) == 1
-    error_message = "VAULT_NAMESPACE should be set when vault_namespace is provided"
-  }
-
-  assert {
-    condition     = resource.coder_env.vault_token[0].value == "test-vault-token"
-    error_message = "VAULT_TOKEN should match the provided vault_token"
-  }
-
-  assert {
-    condition     = resource.coder_env.vault_namespace[0].value == "admin/my-namespace"
-    error_message = "VAULT_NAMESPACE should match the provided vault_namespace"
-  }
-}
-
-run "test_vault_cli_enterprise" {
-  variables {
-    enterprise = true
-  }
-
-  assert {
-    condition     = resource.coder_script.vault_cli.display_name == "Vault CLI"
-    error_message = "Display name should be 'Vault CLI'"
-  }
-}

registry/coder/modules/vault-cli/run.sh

@@ -1,204 +0,0 @@
-#!/usr/bin/env bash
-
-# Convert all templated variables to shell variables
-VAULT_ADDR=${VAULT_ADDR}
-VAULT_TOKEN=${VAULT_TOKEN}
-INSTALL_DIR=${INSTALL_DIR}
-VAULT_CLI_VERSION=${VAULT_CLI_VERSION}
-ENTERPRISE=${ENTERPRISE}
-
-# Fetch URL content. If dest is provided, write to file; otherwise output to stdout.
-# Usage: fetch <url> [dest]
-fetch() {
-  url="$1"
-  dest="$${2:-}"
-
-  # Detect HTTP client on first run
-  if [ -z "$${HTTP_CLIENT:-}" ]; then
-    if command -v curl > /dev/null 2>&1; then
-      HTTP_CLIENT="curl"
-    elif command -v wget > /dev/null 2>&1; then
-      HTTP_CLIENT="wget"
-    elif command -v busybox > /dev/null 2>&1; then
-      HTTP_CLIENT="busybox"
-    else
-      printf "curl, wget, or busybox is not installed. Please install curl or wget in your image.\n"
-      return 1
-    fi
-  fi
-
-  if [ -n "$${dest}" ]; then
-    # shellcheck disable=SC2195
-    case "$${HTTP_CLIENT}" in
-      curl) curl -sSL --fail "$${url}" -o "$${dest}" ;;
-      wget) wget -O "$${dest}" "$${url}" ;;
-      busybox) busybox wget -O "$${dest}" "$${url}" ;;
-    esac
-  else
-    # shellcheck disable=SC2195
-    case "$${HTTP_CLIENT}" in
-      curl) curl -sSL --fail "$${url}" ;;
-      wget) wget -qO- "$${url}" ;;
-      busybox) busybox wget -qO- "$${url}" ;;
-    esac
-  fi
-}
-
-unzip_safe() {
-  if command -v unzip > /dev/null 2>&1; then
-    command unzip "$@"
-  elif command -v busybox > /dev/null 2>&1; then
-    busybox unzip "$@"
-  else
-    printf "unzip or busybox is not installed. Please install unzip in your image.\n"
-    return 1
-  fi
-}
-
-install() {
-  # Get the architecture of the system
-  ARCH=$(uname -m)
-  if [ "$${ARCH}" = "x86_64" ]; then
-    ARCH="amd64"
-  elif [ "$${ARCH}" = "aarch64" ]; then
-    ARCH="arm64"
-  else
-    printf "Unsupported architecture: %s\n" "$${ARCH}"
-    return 1
-  fi
-
-  # Determine OS and validate
-  OS=$(uname -s | tr '[:upper:]' '[:lower:]')
-  if [ "$${OS}" != "linux" ] && [ "$${OS}" != "darwin" ]; then
-    printf "Unsupported OS: %s. Only linux and darwin are supported.\n" "$${OS}"
-    return 1
-  fi
-
-  # Fetch release information from HashiCorp API
-  if [ "$${VAULT_CLI_VERSION}" = "latest" ]; then
-    if [ "$${ENTERPRISE}" = "true" ]; then
-      API_URL="https://api.releases.hashicorp.com/v1/releases/vault/latest?license_class=enterprise"
-    else
-      API_URL="https://api.releases.hashicorp.com/v1/releases/vault/latest"
-    fi
-  else
-    # For specific version, append +ent suffix for enterprise
-    if [ "$${ENTERPRISE}" = "true" ]; then
-      API_URL="https://api.releases.hashicorp.com/v1/releases/vault/$${VAULT_CLI_VERSION}+ent"
-    else
-      API_URL="https://api.releases.hashicorp.com/v1/releases/vault/$${VAULT_CLI_VERSION}"
-    fi
-  fi
-
-  API_RESPONSE=$(fetch "$${API_URL}")
-  if [ -z "$${API_RESPONSE}" ]; then
-    printf "Failed to fetch release information from HashiCorp API.\n"
-    return 1
-  fi
-
-  # Parse version and download URL from API response
-  if command -v jq > /dev/null 2>&1; then
-    VAULT_CLI_VERSION=$(printf '%s' "$${API_RESPONSE}" | jq -r '.version')
-    DOWNLOAD_URL=$(printf '%s' "$${API_RESPONSE}" | jq -r --arg os "$${OS}" --arg arch "$${ARCH}" '.builds[] | select(.os == $os and .arch == $arch) | .url')
-  else
-    VAULT_CLI_VERSION=$(printf '%s' "$${API_RESPONSE}" | sed -n 's/.*"version":"\([^"]*\)".*/\1/p')
-    # Fallback: construct URL manually if jq not available
-    DOWNLOAD_URL="https://releases.hashicorp.com/vault/$${VAULT_CLI_VERSION}/vault_$${VAULT_CLI_VERSION}_$${OS}_$${ARCH}.zip"
-  fi
-
-  if [ -z "$${VAULT_CLI_VERSION}" ]; then
-    printf "Failed to determine Vault version.\n"
-    return 1
-  fi
-
-  if [ -z "$${DOWNLOAD_URL}" ]; then
-    printf "Failed to determine download URL for Vault %s (%s/%s).\n" "$${VAULT_CLI_VERSION}" "$${OS}" "$${ARCH}"
-    return 1
-  fi
-
-  printf "Vault version: %s\n" "$${VAULT_CLI_VERSION}"
-
-  # Check if the vault CLI is installed and has the correct version
-  installation_needed=1
-  if command -v vault > /dev/null 2>&1; then
-    CURRENT_VERSION=$(vault version | grep -oE '[0-9]+\.[0-9]+\.[0-9]+')
-    if [ "$${CURRENT_VERSION}" = "$${VAULT_CLI_VERSION}" ]; then
-      printf "Vault version %s is already installed and up-to-date.\n\n" "$${CURRENT_VERSION}"
-      installation_needed=0
-    fi
-  fi
-
-  if [ "$${installation_needed}" = "1" ]; then
-    # Download and install Vault
-    if [ -z "$${CURRENT_VERSION}" ]; then
-      printf "Installing Vault CLI ...\n\n"
-    else
-      printf "Upgrading Vault CLI from version %s to %s ...\n\n" "$${CURRENT_VERSION}" "$${VAULT_CLI_VERSION}"
-    fi
-
-    # Create temporary directory for download
-    TEMP_DIR=$(mktemp -d)
-    cd "$${TEMP_DIR}" || return 1
-
-    printf "Downloading from %s\n" "$${DOWNLOAD_URL}"
-    if ! fetch "$${DOWNLOAD_URL}" vault.zip; then
-      printf "Failed to download Vault.\n"
-      rm -rf "$${TEMP_DIR}"
-      return 1
-    fi
-    if ! unzip_safe vault.zip; then
-      printf "Failed to unzip Vault.\n"
-      rm -rf "$${TEMP_DIR}"
-      return 1
-    fi
-
-    # Install to the specified directory
-    if [ -n "$${INSTALL_DIR}" ] && [ -w "$${INSTALL_DIR}" ]; then
-      mv vault "$${INSTALL_DIR}/vault"
-      printf "Vault installed to %s successfully!\n\n" "$${INSTALL_DIR}"
-    elif [ -n "$${INSTALL_DIR}" ] && [ ! -w "$${INSTALL_DIR}" ]; then
-      # Try with sudo if install dir specified but not writable
-      if sudo mv vault "$${INSTALL_DIR}/vault" 2> /dev/null; then
-        printf "Vault installed to %s successfully!\n\n" "$${INSTALL_DIR}"
-      else
-        printf "Warning: Cannot write to %s. " "$${INSTALL_DIR}"
-        mkdir -p ~/.local/bin
-        if mv vault ~/.local/bin/vault; then
-          printf "Installed to ~/.local/bin instead.\n"
-          printf "Please add ~/.local/bin to your PATH to use vault CLI.\n"
-        else
-          printf "Failed to install Vault.\n"
-          rm -rf "$${TEMP_DIR}"
-          return 1
-        fi
-      fi
-    elif sudo mv vault /usr/local/bin/vault 2> /dev/null; then
-      printf "Vault installed successfully!\n\n"
-    else
-      mkdir -p ~/.local/bin
-      if ! mv vault ~/.local/bin/vault; then
-        printf "Failed to move Vault to local bin.\n"
-        rm -rf "$${TEMP_DIR}"
-        return 1
-      fi
-      printf "Please add ~/.local/bin to your PATH to use vault CLI.\n"
-    fi
-
-    # Clean up temp directory
-    rm -rf "$${TEMP_DIR}"
-  fi
-  return 0
-}
-
-# Run installation
-if ! install; then
-  printf "Failed to install Vault CLI.\n"
-  exit 1
-fi
-
-# Indicate token configuration status
-if [ -n "$${VAULT_TOKEN}" ]; then
-  printf "Vault token has been configured via VAULT_TOKEN environment variable.\n"
-else
-  printf "No Vault token provided. Use 'vault login' or set VAULT_TOKEN to authenticate.\n"
-fi