karnel-termux 4.11.6 → 4.13.0

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.11.0-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.13.0-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -33,18 +33,18 @@
 
 Created by **Israel Marques**.
 
-- **31 AI agents** for coding — Claude, Gemini, OpenCode, Ollama, Cline, karnelRoute and more
-- **7 languages** — Node.js, Python, Go, Rust, C/C++, PHP, Perl
+- **37 AI agents** for coding — Claude, Gemini, OpenCode, Qoder, Ollama, Goose, Factory Droid, Cline, OmniRoute and more
+- **8 languages** — Node.js, Python, Go, Rust, C/C++, PHP, Perl, Bun
 - **5 databases** — PostgreSQL, MariaDB, SQLite, MongoDB, Redis
 - **22 dev tools** — gh, curl, fzf, bat, lsd, jq, tmux, openssh, snyk and more
 - **11 utility scripts** — fconv, notes, treex, qrcode, zork and more
 - **2 network tools** — dark, dedsec-network
 - **3 deploy CLIs** — Vercel, Railway, Netlify
 - **Responsible OSINT** — Robin v2.8 through Tor with a loopback-only web UI
-- **Professional editor** — code-server (VS Code in browser)
+- **3 editors** — code-server (VS Code in browser), Neovim, NvChad
 - **Second brain** — Memory system with AI search and idea graph
 - **Voice commands** — Speak to your AI agents
-- **Plugin system** — Install community plugins from GitHub: `karnel plugin install <user/repo>`
+- **Plugin system** — Discover reviewed extensions: `karnel plugin search`
 - **Security tools** — Nmap, Hydra, SQLMap, Metasploit and more: `karnel install security`
 
 > [!IMPORTANT]
@@ -112,9 +112,9 @@ karnel
 
 | Module | Description | Installation |
 |--------|-------------|--------------|
-| `lang` | Node.js, Python, Go, Rust, C/C++, PHP, Perl | `karnel install lang` |
+| `lang` | Node.js, Python, Go, Rust, C/C++, PHP, Perl, Bun | `karnel install lang` |
 | `db` | PostgreSQL, MariaDB, SQLite, MongoDB, Redis | `karnel install db` |
-| `ai` | 31 AI agents for coding | `karnel install ai` |
+| `ai` | 37 AI agents for coding | `karnel install ai` |
 | `editor` | code-server (VS Code in browser) | `karnel install editor` |
 | `dev` | gh, curl, fzf, bat, lsd, jq and more | `karnel install dev` |
 | `npm` | TypeScript, NestJS CLI, Prettier and more | `karnel install npm` |
@@ -127,23 +127,50 @@ karnel
 | `utils` | fconv, notes, treex, passman, applaunch, qrcode, zork and more | `karnel install utils` |
 | `osint` | Robin v2.8, Tor, Streamlit, and LLM providers | `karnel install osint` |
 | `voice` | Speech-to-agent through Termux:API | `karnel install voice` |
-| `plugin` | Plugin manager — install extensions from GitHub | `karnel install plugin` |
+| `plugin` | Built-in plugin manager — reviewed registry and local plugins | `karnel plugin search` |
 | `security` | Nmap, Hydra, SQLMap, Metasploit, Gobuster and more | `karnel install security` |
 
 ---
 
 ## Plugin System
 
-Extend Karnel with community plugins from GitHub:
+Discover and install reviewed plugins from the official registry:
 
 ```bash
-karnel plugin install <user/repo>   # Install a plugin
-karnel plugin list                  # List installed plugins
-karnel plugin remove <name>         # Uninstall a plugin
-karnel plugin create <name>         # Scaffold a new plugin
+karnel plugin search
+karnel plugin search backup --compatible
+karnel plugin install karnel-hello
+karnel plugin update karnel-hello
+karnel plugin list
+karnel plugin remove karnel-hello
+karnel plugin create meu-plugin
 ```
 
-Each plugin needs a `karnel-plugin.json` manifest at the root of its repo. Commands go in a `commands/` directory — Karnel discovers them automatically at startup.
+Plugins are Bash code loaded by the Karnel process and run with the current
+user's permissions. They are not sandboxed. Registry plugins have reviewed
+metadata and are staged, validated, and atomically activated, but you should
+still review code you do not trust.
+
+Installing an arbitrary GitHub repository requires both `--unsafe` and an
+interactive confirmation:
+
+```bash
+karnel plugin install owner/repo --unsafe
+```
+
+`--unsafe` is not a sandbox or an approval. It is intentionally required again
+when updating an unsafe plugin. The plugin manager never creates a missing
+manifest for a cloned repository.
+
+Every plugin requires a strict `karnel-plugin.json`, a `LICENSE` or
+`LICENSE.md`, and exact files in `commands/`. The manifest declares Schema v1,
+safe name, SemVer version, description, `commands`, `minKarnelVersion`, license,
+optional checksum, and informational capabilities. Native command names and
+plugin-to-plugin command collisions are rejected.
+
+The installed plugin directory is `${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data/plugins`.
+See the [official plugin registry](https://github.com/israelmarques1024-dotcom/karnel-plugins)
+for schemas, review policy, and safe publication requirements.
 
 ## Security Tools
 
@@ -185,7 +212,7 @@ See the bundled reference with `karnel show osint --robin`.
 
 ---
 
-## AI Agents (31)
+## AI Agents (37)
 
 ```bash
 karnel install ai                             # Install all
@@ -210,6 +237,7 @@ karnel install ai --opencode --ollama         # Install specific agents
 | **Engram** | `--engram` | Persistent memory system |
 | **CodeGraph** | `--codegraph` | Code structure analysis |
 | **Pi** | `--pi` | Minimalist terminal harness |
+| **Qoder** | `--qoder` | Terminal-native AI coding partner and agent engine |
 | **Antigravity CLI** | `--antigravity-cli` | Terminal interface for Antigravity |
 | **MiniMax CLI** | `--minimax-cli` | Generate text, image, video and audio |
 | **Gentle AI** | `--gentle-ai` | AI workflow ecosystem |
@@ -228,7 +256,12 @@ karnel install ai --opencode --ollama         # Install specific agents
 | **Context7** | `--ctx7` | Documentation for AI assistants |
 | **OpenSpec** | `--openspec` | Spec-Driven Development |
 | **Copilot-Termux** | `--copilot-termux` | GitHub Copilot CLI adapted for Termux |
-
+| **AMP Code CLI** | `--ampcode` | AI coding agent by Sourcegraph (glibc) |
+| **Cursor CLI** | `--cursor-cli` | Official Cursor AI agent adapted for Termux (glibc) |
+| **Oh-My-Pi** | `--oh-my-pi` | Enhanced Pi agent with native Rust addons |
+| **Goose CLI** | `--goose` | AI agent framework by Block (native Termux musl) |
+| **Factory Droid** | `--droid` | Enterprise AI agent (via proot-distro Ubuntu) |
+ 
 </details>
 
 ---
@@ -459,18 +492,20 @@ karnel/
 │   │   └── karnel.sh    # Main CLI (with TUI)
 │   ├── modules/       # Module orchestrators
 │   ├── tools/         # Tool installers
-│   │   ├── ai/        # 31 AI agents
-│   │   ├── lang/      # Languages
-│   │   ├── db/        # Databases
+│   │   ├── ai/        # 37 AI agents
+│   │   ├── lang/      # 8 languages
+│   │   ├── db/        # 5 databases
 │   │   ├── dev/       # 22 dev tools
-│   │   ├── editor/    # Code editor
-│   │   ├── npm/       # Global npm packages
-│   │   ├── shell/     # ZSH plugins
-│   │   ├── ui/        # Termux interface
-│   │   ├── auto/      # Automation
+│   │   ├── editor/    # 3 editors
+│   │   ├── npm/       # 11 global npm packages
+│   │   ├── shell/     # 10 ZSH plugins
+│   │   ├── ui/        # 4 UI components
+│   │   ├── auto/      # 1 automation tool
 │   │   ├── network/   # 2 network tools
 │   │   ├── utils/     # 11 utility tools
-│   │   └── deploy/    # Deploy CLIs
+│   │   ├── games/     # 7 games
+│   │   ├── security/  # 30 security tools
+│   │   └── deploy/    # 4 deploy CLIs
 │   └── utils/         # Utilities (banner, log, env, etc.)
 ├── install.sh         # Installation script
 ├── package.json       # npm/pnpm publishing

package/install.sh

@@ -111,7 +111,7 @@ bootstrap_dependencies() {
 
 	if [[ $needed_tput -eq 1 ]]; then
 		echo -e "  ${P_BORDER}→${P_NC}  Installing ncurses-utils..."
-		pkg install -y ncurses &>/dev/null
+		pkg install -y ncurses-utils &>/dev/null
 		echo -e "  ${P_OK}✔${P_NC}  ncurses installed"
 		echo
 	fi
@@ -210,7 +210,7 @@ clone_repo() {
 			printf "\r  Cloning%s    " "$(printf '%*s' "$dots" '' | tr ' ' '.')"
 			sleep 0.5
 		done
-		wait "$pid"
+		wait "$pid" || { log_fail "Failed to clone repository"; _cleanup_failed; exit 1; }
 		progress_bar 10 10
 		echo
 		log_ok "Repository cloned"
@@ -220,7 +220,8 @@ clone_repo() {
 
 	# Install shell completions
 	if [ -f "$KARNEL_REPO/scripts/completion.bash" ]; then
-		cp "$KARNEL_REPO/scripts/completion.bash" "$PREFIX/share/bash-completion/completions/karnel" 2>/dev/null || true
+		mkdir -p "$PREFIX/share/bash-completion/completions" 2>/dev/null || true
+		cp "$KARNEL_REPO/scripts/completion.bash" "$PREFIX/share/bash-completion/completions/karnel" 2>/dev/null || log_info "Failed to install bash completion (non-fatal)"
 	fi
 	if [ -f "$KARNEL_REPO/scripts/completion.zsh" ]; then
 		cp "$KARNEL_REPO/scripts/completion.zsh" "$PREFIX/share/zsh/site-functions/_karnel" 2>/dev/null || true

package/karnel/cli/commands/brain.sh

@@ -54,10 +54,14 @@ _brain_title() {
 	fi
 }
 
+_brain_slug_escape() {
+	printf '%s\n' "$1" | sed 's/[\/&]/\\&/g; s/\n/\\n/g'
+}
+
 _brain_update_related() {
 	local file="$1" slug="$2"
 	local tmp
-	tmp=$(mktemp)
+	tmp=$(mktemp "${TMPDIR:-/tmp}/karnel-brain.XXXXXX")
 	local frontmatter_end
 	frontmatter_end=$(awk '/^---$/ {++n} n==2 {print NR; exit}' "$file")
 
@@ -73,8 +77,10 @@ _brain_update_related() {
 		return
 	fi
 
+	local escaped
+	escaped=$(_brain_slug_escape "$slug")
 	if grep -q "^related:" "$tmp" 2>/dev/null; then
-		sed -i "s/^related: \[\(.*\)\]/related: [\1, $slug]/" "$tmp"
+		sed -i "s/^related: \[\(.*\)\]/related: [\1, $escaped]/" "$tmp"
 	else
 		sed -i "/^---$/a related: [$slug]" "$tmp"
 	fi
@@ -85,7 +91,7 @@ _brain_update_related() {
 _brain_remove_related() {
 	local file="$1" slug="$2"
 	local tmp
-	tmp=$(mktemp)
+	tmp=$(mktemp "${TMPDIR:-/tmp}/karnel-brain.XXXXXX")
 	local frontmatter_end
 	frontmatter_end=$(awk '/^---$/ {++n} n==2 {print NR; exit}' "$file")
 
@@ -95,7 +101,9 @@ _brain_remove_related() {
 	fi
 
 	head -n $((frontmatter_end - 1)) "$file" >"$tmp"
-	sed -i "s/related: \[\(.*\)$slug\(.*\)\]/related: [\1\2]/" "$tmp"
+	local escaped
+	escaped=$(_brain_slug_escape "$slug")
+	sed -i "s/related: \[\(.*\)$escaped\(.*\)\]/related: [\1\2]/" "$tmp"
 	sed -i 's/related: \[, */related: [/; s/, *, */, /g; s/related: \[ *\]//' "$tmp"
 	tail -n +$((frontmatter_end)) "$file" >>"$tmp"
 	mv "$tmp" "$file"
@@ -1157,6 +1165,10 @@ brain_delete() {
 		_brain_remove_related "$rfile" "$file_slug"
 	done < <(rg -l "$file_slug" "$BRAIN_DIR" --glob '*.md' 2>/dev/null || true)
 
+	if [[ "$file" != "$BRAIN_DIR"/* ]]; then
+		log_error "Refusing to delete file outside brain directory"
+		return 1
+	fi
 	rm "$file"
 	log_success "Deleted: ${D_CYAN}$title${D_NC}"
 
@@ -1197,6 +1209,10 @@ brain_reset() {
 	fi
 
 	echo
+	if [[ -z "$BRAIN_DIR" ]] || [[ "$BRAIN_DIR" == "/" ]]; then
+		log_error "BRAIN_DIR is not set correctly, aborting"
+		return 1
+	fi
 	loading "Deleting local brain..." rm -rf "$BRAIN_DIR"
 	log_success "Brain destroyed"
 	list_item "Recreate with: ${D_CYAN}karnel brain init${D_NC}"

package/karnel/cli/commands/deploy.sh

@@ -23,6 +23,22 @@ deploy_main() {
 
   local tool="$1"
   case "$tool" in
+  --help|-h)
+    echo
+    box "Karnel Deploy"
+    echo
+    log_info "Usage: karnel deploy <tool>"
+    echo
+    log_info "Available tools:"
+    echo
+    list_item "vercel    - Deploy to Vercel"
+    list_item "railway   - Deploy to Railway"
+    list_item "netlify   - Deploy to Netlify"
+    echo
+    log_info "Usage: ${D_CYAN}karnel deploy vercel${NC}"
+    echo
+    return
+    ;;
   vercel)
     if ! command -v vercel &>/dev/null; then
       log_warn "Vercel CLI not installed. Run: karnel install npm --vercel"

package/karnel/cli/commands/doctor/fixes.sh

@@ -19,9 +19,10 @@ _fix_mkdir() {
 
 _fix_pkg_install() {
   local pkg_to_install=""
+  local fix_idx="${3:-$i}"
   case "$1" in
     pkg) pkg_to_install="$2" ;;
-    *) pkg_to_install="${fix_commands[$i]:-}" ;;
+    *) pkg_to_install="${fix_commands[$fix_idx]:-}" ;;
   esac
   local pkg_name=""
   if [[ "$pkg_to_install" =~ pkg\ install\ -y\ (.+) ]]; then
@@ -207,7 +208,11 @@ _fix_psutil() {
   mkdir -p "$tmp"
   pip download psutil==7.2.2 --no-binary :all: --no-deps -d "$tmp" 2>/dev/null || return 1
   tar xzf "$tmp/psutil-7.2.2.tar.gz" -C "$tmp"
-  sed -i 's/LINUX = sys.platform.startswith("linux")/LINUX = sys.platform.startswith(("linux", "android"))/' "$tmp/psutil-7.2.2/psutil/_common.py"
+  if grep -q 'LINUX = sys.platform.startswith("linux")' "$tmp/psutil-7.2.2/psutil/_common.py" 2>/dev/null; then
+    sed -i 's/LINUX = sys.platform.startswith("linux")/LINUX = sys.platform.startswith(("linux", "android"))/' "$tmp/psutil-7.2.2/psutil/_common.py"
+  else
+    log_warn "psutil patch target not found, skipping"
+  fi
   pip install "$tmp/psutil-7.2.2" 2>/dev/null
   local rc=$?
   rm -rf "$tmp"
@@ -230,8 +235,8 @@ _fix_npm_shebangs() {
   for f in "$PREFIX/bin/"*; do
     [[ -f "$f" ]] || continue
     local shebang
-    shebang=$(head -1 "$f" 2>/dev/null | tr -d '\0')
-    if [[ "$shebang" == "#!/usr/bin/env node" ]]; then
+		shebang=$(head -1 "$f" 2>/dev/null | tr -d '\0\r' | xargs)
+		if [[ "$shebang" == "#!/usr/bin/env node" ]]; then
       sed -i "1s|^.*$|#!$PREFIX/bin/node|" "$f" && ((fixed++))
     elif [[ "$shebang" == "#!/usr/bin/env bash" ]] || [[ "$shebang" == "#!/usr/bin/env sh" ]]; then
       sed -i "1s|^.*$|#!$PREFIX/bin/bash|" "$f" && ((fixed++))

package/karnel/cli/commands/doctor.sh

@@ -296,7 +296,7 @@ doctor_termux() {
     if (( cache_files > 500 )); then
       log_warn "APT lists cache is large: $cache_size ($cache_files files)"
       ((warnings++))
-      fix_commands+=("rm -rf $apt_cache_dir/* && pkg update -y")
+      [[ -n "$apt_cache_dir" ]] && fix_commands+=("rm -rf ${apt_cache_dir:?}/* && pkg update -y")
       fix_descriptions+=("Reset APT lists cache (fixes Hash Sum mismatch)")
       fix_callbacks+=("_fix_apt_cache")
     else

package/karnel/cli/commands/env.sh

@@ -63,9 +63,11 @@ env_set() {
 
 	read_secret "Value for $key" value
 
-	if grep -q "^export $key=" "$rc_file" 2>/dev/null; then
+	local escaped_key
+	escaped_key=$(printf '%s\n' "$key" | sed 's/[\/&.*^$[]/\\&/g')
+	if grep -q "^export $escaped_key=" "$rc_file" 2>/dev/null; then
 		local current_value
-		current_value=$(grep "^export $key=" "$rc_file" | head -1 | sed 's/^export [^=]*=//')
+		current_value=$(grep "^export $escaped_key=" "$rc_file" | head -1 | sed 's/^export [^=]*=//')
 		echo
 		log_info "Current value: ${D_DIM}${current_value:0:40}${D_NC}"
 		log_warn "Variable $D_CYAN$key$D_YELLOW already exists in $(basename "$rc_file")"
@@ -76,7 +78,7 @@ env_set() {
 			separator
 			return 0
 		fi
-		sed -i "/^export ${key}=/d" "$rc_file"
+		sed -i "/^export ${escaped_key}=/d" "$rc_file"
 		echo
 		log_info "Replacing $D_CYAN$key$D_NC..."
 	else
@@ -156,7 +158,8 @@ env_unset() {
 		return 0
 	fi
 
-	sed -i "/^export ${key}=/d" "$rc_file"
+	escaped_key=$(printf '%s\n' "$key" | sed 's/[\/&.*^$[]/\\&/g')
+	sed -i "/^export ${escaped_key}=/d" "$rc_file"
 
 	echo
 	log_success "Variable ${D_CYAN}${key}${D_GREEN} removed from ${D_NC}$(basename "$rc_file")"

package/karnel/cli/commands/ia.sh

@@ -431,7 +431,7 @@ ia_routes() {
 	local -a routes=()
 
 	# Collect all available AI CLIs (em sincronia com AI_TOOLS_REGISTRY em tools/ai/all.sh)
-	for cmd in qwen gemini claude vibe openclaude openclaw ollama codex opencode mimo engram codegraph pi agy mmx gentle-ai gga hermes kimi command-code freebuff kilocode kiro cline crush odysseus kimchi omni-route ctx7 openspec copilot; do
+	for cmd in qwen gemini claude vibe openclaude openclaw ollama codex opencode mimo engram codegraph pi agy mmx gentle-ai gga hermes kimi command-code freebuff kilocode kiro cline crush odysseus kimchi omni-route ctx7 openspec copilot amp cursor omp goose droid; do
 		if command -v "$cmd" &>/dev/null; then
 			local path
 			path=$(command -v "$cmd")

package/karnel/cli/commands/init.sh

@@ -1235,6 +1235,10 @@ init_main() {
 	local template="$1"
 
 	case "$template" in
+	--help|-h)
+		init_help
+		return
+		;;
 	next | nextjs) configure_next ;;
 	react | vite) configure_react ;;
 	nest | nestjs) configure_nest ;;

package/karnel/cli/commands/install.sh

@@ -826,7 +826,7 @@ _install_specific_tools() {
     _batch_tool_action "security" "install" "${tools[@]}"
     ;;
   supabase)
-    import "@/tools/supabase/all"
+    import "@/tools/deploy/supabase/install"
     install_supabase
     case $? in 0) log_success "Supabase CLI installed";; 2) log_info "Supabase CLI already installed";; 1) log_error "Failed to install Supabase CLI";; esac
     ;;

package/karnel/cli/commands/list.sh

@@ -198,6 +198,11 @@ _list_ai() {
   table_row "Context7 Docs" "--ctx7" "ctx7" "$(_check_cmd "ctx7")"
   table_row "OpenSpec SDD" "--openspec" "openspec" "$(_check_cmd "openspec")"
   table_row "Qoder" "--qoder" "qodercli" "$(_check_cmd "qodercli")"
+  table_row "AMP Code CLI" "--ampcode" "amp" "$(_check_cmd "amp")"
+  table_row "Cursor CLI" "--cursor-cli" "cursor" "$(_check_cmd "cursor")"
+  table_row "Oh-My-Pi" "--oh-my-pi" "omp" "$(_check_cmd "omp")"
+  table_row "Goose CLI" "--goose" "goose" "$(_check_cmd "goose")"
+  table_row "Factory Droid" "--droid" "droid" "$(_check_cmd "droid")"
   table_row "Copilot-Termux" "--copilot-termux" "copilot" "$(_check_cmd "copilot")"
   table_end
 

package/karnel/cli/commands/pg.sh

@@ -390,6 +390,10 @@ pg_main() {
 	shift || true
 
 	case "$cmd" in
+	--help|-h)
+		pg_help
+		return
+		;;
 	start)
 		pg_start
 		;;