Bundle the iTerm2 zsh integration for offline use. Let update.sh repair a missing or empty installation using curl with redirect support, falling back to the bundled copy on offline, missing curl, failed downloads, or empty responses. Stage the result beside the target before moving it into place.
Append the readability-checked source line to .zshrc only when missing, including when .zshrc does not exist or lacks a final newline. Keep configure_priv.sh and the installation flow unchanged.
Load .zsh_user once before the first prompt and remove legacy direct source lines during updates. Disable Clash proxy environment variables in the default user configuration.