karnel-termux 4.13.2 → 4.13.3

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.13.0-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.13.3-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -33,7 +33,7 @@
 
 Created by **Israel Marques**.
 
-- **37 AI agents** for coding — Claude, Gemini, OpenCode, Qoder, Ollama, Goose, Factory Droid, Cline, OmniRoute and more
+- **39 AI agents** for coding — Claude, Gemini, OpenCode, Qoder, Ollama, Goose, Factory Droid, Cline, Puter, OmniRoute and more
 - **8 languages** — Node.js, Python, Go, Rust, C/C++, PHP, Perl, Bun
 - **5 databases** — PostgreSQL, MariaDB, SQLite, MongoDB, Redis
 - **22 dev tools** — gh, curl, fzf, bat, lsd, jq, tmux, openssh, snyk and more
@@ -114,7 +114,7 @@ karnel
 |--------|-------------|--------------|
 | `lang` | Node.js, Python, Go, Rust, C/C++, PHP, Perl, Bun | `karnel install lang` |
 | `db` | PostgreSQL, MariaDB, SQLite, MongoDB, Redis | `karnel install db` |
-| `ai` | 37 AI agents for coding | `karnel install ai` |
+| `ai` | 39 AI agents for coding | `karnel install ai` |
 | `editor` | code-server (VS Code in browser) | `karnel install editor` |
 | `dev` | gh, curl, fzf, bat, lsd, jq and more | `karnel install dev` |
 | `npm` | TypeScript, NestJS CLI, Prettier and more | `karnel install npm` |
@@ -172,6 +172,32 @@ The installed plugin directory is `${XDG_DATA_HOME:-$HOME/.local/share}/karnel-d
 See the [official plugin registry](https://github.com/israelmarques1024-dotcom/karnel-plugins)
 for schemas, review policy, and safe publication requirements.
 
+## AI CLIs
+
+Supercode CLI and Puter CLI are available in the `ai` module. They require
+Node.js 18 or newer and install their official npm packages.
+
+```bash
+karnel install ai --supercode-cli
+supercode
+```
+
+## Puter CLI
+
+Puter CLI is available in the `ai` module for managing Puter sites and workers.
+
+```bash
+karnel install ai --puter
+puter login
+puter whoami
+puter site deploy [directory] [subdomain]
+puter worker deploy [file] [name]
+```
+
+For noninteractive automation, configure `PUTER_AUTH_TOKEN` in your own
+environment. Do not place tokens in the repository, shell history, screenshots,
+or issue reports.
+
 ## Security Tools
 
 Install security auditing tools:
@@ -181,7 +207,9 @@ karnel install security                           # Install all
 karnel install security --nmap --hydra --sqlmap    # Install specific ones
 ```
 
-Includes: Nmap, Hydra, Nikto, SQLMap, Gobuster, Dirb, WPScan, John the Ripper, Aircrack-ng, Metasploit.
+Includes 30 tools: Nmap, Hydra, Nikto, SQLMap, Gobuster, Dirb, WPScan, John the
+Ripper, Aircrack-ng, Metasploit, Burp Suite, OWASP ZAP, FFUF, Amass, Hashcat and
+more. Use only on systems you own or are authorized to test.
 
 ---
 
@@ -492,7 +520,7 @@ karnel/
 │   │   └── karnel.sh    # Main CLI (with TUI)
 │   ├── modules/       # Module orchestrators
 │   ├── tools/         # Tool installers
-│   │   ├── ai/        # 37 AI agents
+│   │   ├── ai/        # 39 AI agents
 │   │   ├── lang/      # 8 languages
 │   │   ├── db/        # 5 databases
 │   │   ├── dev/       # 22 dev tools
@@ -503,7 +531,7 @@ karnel/
 │   │   ├── auto/      # 1 automation tool
 │   │   ├── network/   # 2 network tools
 │   │   ├── utils/     # 11 utility tools
-│   │   ├── games/     # 7 games
+│   │   ├── games/     # 6 games
 │   │   ├── security/  # 30 security tools
 │   │   └── deploy/    # 4 deploy CLIs
 │   └── utils/         # Utilities (banner, log, env, etc.)
@@ -540,6 +568,26 @@ The framework checks for updates every 24 hours in background.
 karnel update karnel     # Update the framework
 ```
 
+`karnel update` requires a target such as `karnel`, `ai`, or `security`.
+`karnel update karnel` first runs the official curl installer, then falls back to
+the local Git checkout and package-manager installs if needed. The framework
+checks for a new version in the background at most once every 24 hours; the check
+can use npm or GitHub and writes state under `$KARNEL_CACHE`.
+
+---
+
+## Verification And Limits
+
+The repository CI validates Bash/Zsh syntax, ShellCheck errors, CLI smoke tests,
+version behavior, Robin contracts, plugin lifecycle contracts, and npm package
+contents. The official documentation site validates its catalog contracts,
+TypeScript, formatting, tests, and production build.
+
+These checks do not install every external tool or prove behavior on every Android
+device. Before relying on a new installer, test it in native Termux aarch64 with a
+disposable environment and verify network, storage, PRoot, and Termux:API behavior
+for your device.
+
 ---
 
 ## Support the Project

package/install.sh

@@ -66,13 +66,21 @@ log_info() {
 }
 
 _INSTALL_CREATED_KARNEL_REPO=false
+_INSTALL_CREATED_KARNEL_SYMLINK=false
+_INSTALL_PREVIOUS_KARNEL_SYMLINK=""
 
 _cleanup_failed() {
 	echo -e "\n  ${P_FAIL}✖${P_NC}  Installation failed at step ${CURRENT_STEP}. Cleaning up..."
 	if $_INSTALL_CREATED_KARNEL_REPO && [[ -d "$KARNEL_REPO" ]]; then
 		rm -rf "$KARNEL_REPO"
 	fi
-	[[ -L "$PREFIX/bin/karnel" ]] && rm -f "$PREFIX/bin/karnel"
+	if $_INSTALL_CREATED_KARNEL_SYMLINK && [[ -L "$PREFIX/bin/karnel" ]]; then
+		if [[ -n "$_INSTALL_PREVIOUS_KARNEL_SYMLINK" ]]; then
+			ln -sfn "$_INSTALL_PREVIOUS_KARNEL_SYMLINK" "$PREFIX/bin/karnel"
+		else
+			rm -f "$PREFIX/bin/karnel"
+		fi
+	fi
 	echo -e "  ${P_DIM}Run install.sh again to retry${P_NC}"
 	exit 1
 }
@@ -195,7 +203,10 @@ clone_repo() {
 		log_ok "Using local repository"
 	elif [[ -d "$KARNEL_REPO/.git" ]]; then
 		progress_bar 3 10
-		git -C "$KARNEL_REPO" pull origin "$BRANCH" &>/dev/null
+		if ! git -C "$KARNEL_REPO" pull origin "$BRANCH" &>/dev/null; then
+			log_fail "Failed to update existing repository"
+			return 1
+		fi
 		progress_bar 10 10
 		echo
 		log_ok "Repository updated"
@@ -235,10 +246,18 @@ create_symlink() {
 
 	command -v termux-fix-shebang &>/dev/null && termux-fix-shebang "$KARNEL_REPO/karnel/bin/karnel" &>/dev/null
 
+	if [[ -e "$PREFIX/bin/karnel" && ! -L "$PREFIX/bin/karnel" ]]; then
+		log_fail "Refusing to replace existing non-symlink: $PREFIX/bin/karnel"
+		return 1
+	fi
+	if [[ -L "$PREFIX/bin/karnel" ]]; then
+		_INSTALL_PREVIOUS_KARNEL_SYMLINK="$(readlink "$PREFIX/bin/karnel")"
+	fi
 	rm -f "$PREFIX/bin/karnel"
 	ln -sf "$KARNEL_REPO/karnel/bin/karnel" "$PREFIX/bin/karnel"
 
 	if [[ -L "$PREFIX/bin/karnel" ]]; then
+		_INSTALL_CREATED_KARNEL_SYMLINK=true
 		log_ok "Symlink created: karnel → ${KARNEL_REPO}/karnel/bin/karnel"
 	else
 		log_fail "Failed to create symlink"

package/karnel/cli/commands/doctor.sh

@@ -594,7 +594,7 @@ doctor_termux() {
   separator_section "AI Tools Installed"
   echo
 
-  local -a ai_cmds=("opencode" "claude" "gemini" "codex" "qwen" "vibe" "mimo" "hermes" "kimi" "ollama" "freebuff" "pi" "agy" "mmx" "gentle-ai" "gga" "engram" "codegraph" "kilocode" "kiro" "crush" "odysseus" "openclaude" "openclaw" "command-code" "kimchi" "cline" "omni-route" "ctx7" "openspec" "copilot")
+  local -a ai_cmds=("opencode" "claude" "gemini" "codex" "qwen" "vibe" "mimo" "hermes" "kimi" "ollama" "freebuff" "pi" "agy" "mmx" "gentle-ai" "gga" "engram" "codegraph" "kilocode" "kiro" "crush" "odysseus" "openclaude" "openclaw" "command-code" "kimchi" "cline" "omni-route" "ctx7" "openspec" "copilot" "supercode" "puter")
   local ai_count=0
 
   for cmd in "${ai_cmds[@]}"; do

package/karnel/cli/commands/ia.sh

@@ -431,7 +431,7 @@ ia_routes() {
 	local -a routes=()
 
 	# Collect all available AI CLIs (em sincronia com AI_TOOLS_REGISTRY em tools/ai/all.sh)
-	for cmd in qwen gemini claude vibe openclaude openclaw ollama codex opencode mimo engram codegraph pi agy mmx gentle-ai gga hermes kimi command-code freebuff kilocode kiro cline crush odysseus kimchi omni-route ctx7 openspec copilot amp cursor omp goose droid; do
+	for cmd in qwen gemini claude vibe openclaude openclaw ollama codex opencode mimo engram codegraph pi agy mmx gentle-ai gga hermes kimi command-code freebuff kilocode kiro cline crush odysseus kimchi omni-route ctx7 openspec copilot amp cursor omp goose droid supercode puter; do
 		if command -v "$cmd" &>/dev/null; then
 			local path
 			path=$(command -v "$cmd")
@@ -509,4 +509,4 @@ ia_main() {
 		return 1
 		;;
 	esac
-}
+}

package/karnel/cli/commands/install.sh

@@ -167,6 +167,7 @@ _install_full_module() {
   *)
     log_warn "Unknown install target: $target"
     echo "Run 'karnel install' to see available targets"
+    return 1
     ;;
   esac
 }
@@ -833,6 +834,7 @@ _install_specific_tools() {
   *)
     log_warn "Unknown install target: $module"
     echo "Run 'karnel install' to see available targets"
-    ;;
+    return 1
+  ;;
   esac
 }

package/karnel/cli/commands/list.sh

@@ -204,6 +204,8 @@ _list_ai() {
   table_row "Goose CLI" "--goose" "goose" "$(_check_cmd "goose")"
   table_row "Factory Droid" "--droid" "droid" "$(_check_cmd "droid")"
   table_row "Copilot-Termux" "--copilot-termux" "copilot" "$(_check_cmd "copilot")"
+  table_row "Supercode CLI" "--supercode-cli" "supercode" "$(_check_cmd "supercode")"
+  table_row "Puter CLI" "--puter" "puter" "$(_check_cmd "puter")"
   table_end
 
   echo
@@ -555,6 +557,26 @@ _list_security() {
   table_row "John the Ripper" "--john" "john" "$(_check_cmd "john")"
   table_row "Aircrack-ng" "--aircrack-ng" "aircrack-ng" "$(_check_cmd "aircrack-ng")"
   table_row "Metasploit" "--metasploit" "msfconsole" "$(_check_cmd "msfconsole")"
+  table_row "Burp Suite" "--burpsuite" "burpsuite" "$(_check_cmd "burpsuite")"
+  table_row "OWASP ZAP" "--zap" "zap" "$(_check_cmd "zap")"
+  table_row "Enum4linux" "--enum4linux" "enum4linux" "$(_check_cmd "enum4linux")"
+  table_row "SMB client" "--smbclient" "smbclient" "$(_check_cmd "smbclient")"
+  table_row "FFUF" "--ffuf" "ffuf" "$(_check_cmd "ffuf")"
+  table_row "WhatWeb" "--whatweb" "whatweb" "$(_check_cmd "whatweb")"
+  table_row "WAFW00F" "--wafw00f" "wafw00f" "$(_check_cmd "wafw00f")"
+  table_row "DNSRecon" "--dnsrecon" "dnsrecon" "$(_check_cmd "dnsrecon")"
+  table_row "theHarvester" "--theharvester" "theHarvester" "$(_check_cmd "theHarvester")"
+  table_row "Subfinder" "--subfinder" "subfinder" "$(_check_cmd "subfinder")"
+  table_row "Amass" "--amass" "amass" "$(_check_cmd "amass")"
+  table_row "Masscan" "--masscan" "masscan" "$(_check_cmd "masscan")"
+  table_row "Netcat" "--netcat" "nc" "$(_check_cmd "nc")"
+  table_row "Tcpdump" "--tcpdump" "tcpdump" "$(_check_cmd "tcpdump")"
+  table_row "Whois" "--whois" "whois" "$(_check_cmd "whois")"
+  table_row "Hashcat" "--hashcat" "hashcat" "$(_check_cmd "hashcat")"
+  table_row "Binwalk" "--binwalk" "binwalk" "$(_check_cmd "binwalk")"
+  table_row "Foremost" "--foremost" "foremost" "$(_check_cmd "foremost")"
+  table_row "Steghide" "--steghide" "steghide" "$(_check_cmd "steghide")"
+  table_row "ExifTool" "--exiftool" "exiftool" "$(_check_cmd "exiftool")"
   table_end
   echo
   log_info "Install all: ${D_CYAN}karnel install security${NC}"
@@ -571,5 +593,3 @@ _list_voice() {
   list_item "Usage: ${D_CYAN}karnel install voice${NC}"
   echo
 }
-
-

package/karnel/cli/commands/reinstall.sh

@@ -283,6 +283,14 @@ _reinstall_specific_tools() {
         reinstall_openspec
         case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
         ;;
+      supercode-cli)
+        reinstall_supercode_cli
+        case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
+        ;;
+      puter)
+        reinstall_puter
+        case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
+        ;;
       copilot-termux)
         reinstall_copilot_termux
         case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac

package/karnel/cli/commands/uninstall.sh

@@ -164,6 +164,7 @@ _uninstall_full_module() {
   *)
     log_warn "Unknown uninstall target: $target"
     echo "Run 'karnel uninstall' to see available targets"
+    return 1
     ;;
   esac
 }

package/karnel/cli/commands/update.sh

@@ -168,6 +168,7 @@ _update_full_module() {
   *)
     log_warn "Unknown update target: $target"
     echo "Run 'karnel update' to see available targets"
+    return 1
     ;;
   esac
 }
@@ -190,23 +191,49 @@ update_karnel() {
   separator
   echo
 
-  # Tries every method in order until one succeeds
+  # The official installer keeps all installation layouts consistent.
+  _update_try_curl && { _update_cleanup; return 0; }
   _update_try_git && { _update_cleanup; return 0; }
   _update_try_npm && { _update_cleanup; return 0; }
   _update_try_npm_install && { _update_cleanup; return 0; }
   _update_try_pnpm && { _update_cleanup; return 0; }
-  _update_try_curl && { _update_cleanup; return 0; }
 
   log_error "All update methods failed"
   _update_show_manual
 
   echo
+  return 1
 }
 
 _update_cleanup() {
   rm -f "$KARNEL_CACHE/new_version" "$KARNEL_CACHE/last_version_check"
 }
 
+_update_try_curl() {
+  command -v curl &>/dev/null || return 1
+
+  local installer
+  installer=$(mktemp "${TMPDIR:-/tmp}/karnel-install.XXXXXX") || return 1
+
+  log_info "Trying the official curl installer..."
+  if ! curl --fail --silent --show-error --location \
+    "https://raw.githubusercontent.com/israelmarques1024-dotcom/karnel-termux/main/install.sh" \
+    -o "$installer"; then
+    rm -f "$installer"
+    return 1
+  fi
+
+  if bash "$installer"; then
+    rm -f "$installer"
+    log_success "Karnel-Termux updated via curl"
+    return 0
+  fi
+
+  rm -f "$installer"
+  log_error "Curl update failed"
+  return 1
+}
+
 _update_try_git() {
   [[ -d "$KARNEL_PATH/../.git" ]] || return 1
   loading "Updating via git" _update_karnel_repo
@@ -261,25 +288,12 @@ _update_try_pnpm() {
   return 1
 }
 
-_update_try_curl() {
-  command -v curl &>/dev/null || return 1
-  log_info "Trying curl reinstall..."
-  local tmp_install
-  tmp_install=$(mktemp "${TMPDIR:-/tmp}/karnel.XXXXXX")
-  if curl -fsSL "https://raw.githubusercontent.com/israelmarques1024-dotcom/karnel-termux/main/install.sh" -o "$tmp_install" 2>/dev/null; then
-    head -5 "$tmp_install" | grep -qi "karnel" || { rm -f "$tmp_install"; log_error "Downloaded file is not a valid Karnel installer"; return 1; }
-    bash "$tmp_install" 2>/dev/null && { rm -f "$tmp_install"; log_success "Updated via curl"; return 0; }
-  fi
-  rm -f "$tmp_install"
-  return 1
-}
-
 _update_show_manual() {
   log_info "Update manually with one of these:"
   echo
+  echo '  bash -c "$(curl -fsSL https://raw.githubusercontent.com/israelmarques1024-dotcom/karnel-termux/main/install.sh)"'
   echo "  npm install -g karnel-termux@latest"
   echo "  pnpm add -g karnel-termux@latest"
-  echo "  bash -c \"\$(curl -fsSL https://raw.githubusercontent.com/israelmarques1024-dotcom/karnel-termux/main/install.sh)\""
   echo
 }
 

package/karnel/cli/commands/upgrade.sh

@@ -10,7 +10,10 @@ upgrade_main() {
   echo
 
   import "@/cli/commands/update"
-  update_karnel
+  if ! update_karnel; then
+    log_error "Karnel upgrade failed"
+    return 1
+  fi
 
   source "$KARNEL_PATH/utils/env.sh" 2>/dev/null
   log_success "Karnel upgraded to v$KARNEL_VERSION"

package/karnel/cli/karnel.sh

@@ -110,7 +110,7 @@ karnel_help() {
   echo
   log_info "Use with: karnel install|update|reinstall|uninstall <target> [--tool...]"
   echo
-  printf "    ${D_GREEN}%-10s${NC} %s\n" "ai" "37 AI tools (OpenCode, Claude, Ollama, Copilot-Termux, Goose, etc.)"
+   printf "    ${D_GREEN}%-10s${NC} %s\n" "ai" "38 AI tools (OpenCode, Claude, Ollama, Copilot-Termux, Goose, etc.)"
   printf "    ${D_GREEN}%-10s${NC} %s\n" "auto" "Automation (n8n)"
   printf "    ${D_GREEN}%-10s${NC} %s\n" "db" "PostgreSQL, MariaDB, SQLite, MongoDB, Redis"
   printf "    ${D_GREEN}%-10s${NC} %s\n" "deploy" "Vercel, Railway, Netlify, Supabase CLIs"
@@ -791,6 +791,8 @@ _tui_install_checklist() {
         "oh-my-pi" "Oh-My-Pi" OFF
         "goose" "Goose CLI" OFF
         "droid" "Factory Droid" OFF
+        "supercode-cli" "Supercode CLI" OFF
+        "puter" "Puter CLI" OFF
       )
       ;;
     dev)

package/karnel/modules/ai.sh

@@ -89,6 +89,7 @@ uninstall_ai() {
   else
     log_warn "AI tools uninstalled with $rc failure(s)"
   fi
+  return "$rc"
 }
 
 _uninstall_ai_tools_wrapper() {
@@ -111,6 +112,7 @@ update_ai() {
   else
     log_warn "AI tools updated with $rc failure(s)"
   fi
+  return "$rc"
 }
 
 _update_ai_tools_wrapper() {
@@ -147,4 +149,5 @@ reinstall_ai() {
     log_warn "AI tools reinstalled with $rc failure(s)"
   fi
   echo
+  return "$rc"
 }

package/karnel/modules/auto.sh

@@ -26,6 +26,7 @@ install_auto() {
 	echo
 	list_item "n8n"
 	echo
+	return "$rc"
 }
 
 _install_auto_wrapper() {
@@ -53,6 +54,7 @@ uninstall_auto() {
 	else
 		log_warn "$rc automation tool(s) failed to uninstall"
 	fi
+	return "$rc"
 }
 
 _uninstall_auto_wrapper() {
@@ -76,6 +78,7 @@ update_auto() {
 	else
 		log_warn "$rc automation tool(s) failed to update"
 	fi
+	return "$rc"
 }
 
 _update_auto_wrapper() {
@@ -103,12 +106,13 @@ reinstall_auto() {
   fi
   separator
   echo
-  list_item "n8n"
-  echo
+	list_item "n8n"
+	echo
+	return "$rc"
 }
 
 _reinstall_auto_wrapper() {
   import "@/tools/auto/all"
   reinstall_all_auto_tools
   return $?
-}
+}

package/karnel/modules/db.sh

@@ -35,6 +35,7 @@ install_db() {
 	list_item "MongoDB"
 	list_item "Redis"
 	echo
+	return "$install_rc"
 }
 
 _install_db_tools_wrapper() {
@@ -65,6 +66,7 @@ uninstall_db() {
 	else
 		log_warn "$rc database(s) failed to uninstall"
 	fi
+	return "$rc"
 }
 
 _uninstall_db_tools_wrapper() {
@@ -91,6 +93,7 @@ update_db() {
 	else
 		log_warn "$rc database(s) failed to update"
 	fi
+	return "$rc"
 }
 
 _update_db_tools_wrapper() {
@@ -123,12 +126,13 @@ reinstall_db() {
   list_item "MariaDB (MySQL)"
   list_item "SQLite"
   list_item "MongoDB"
-  list_item "Redis"
-  echo
+	list_item "Redis"
+	echo
+	return "$rc"
 }
 
 _reinstall_db_tools_wrapper() {
   import "@/tools/db/all"
   reinstall_all_db_tools
   return $?
-}
+}

package/karnel/modules/deploy.sh

@@ -20,6 +20,7 @@ install_deploy() {
   else
     log_warn "$rc deploy tool(s) failed to install"
   fi
+  return "$rc"
 }
 
 _install_deploy_wrapper() {
@@ -45,6 +46,7 @@ uninstall_deploy() {
   else
     log_warn "$rc deploy tool(s) failed to uninstall"
   fi
+  return "$rc"
 }
 
 update_deploy() {
@@ -60,6 +62,7 @@ update_deploy() {
   else
     log_warn "$rc deploy tool(s) failed to update"
   fi
+  return "$rc"
 }
 
 reinstall_deploy() {
@@ -75,4 +78,5 @@ reinstall_deploy() {
   else
     log_warn "$rc deploy tool(s) failed to reinstall"
   fi
+  return "$rc"
 }

package/karnel/modules/dev.sh

@@ -26,6 +26,7 @@ install_dev() {
 	echo
 	_show_dev_summary
 	echo
+	return "$rc"
 }
 
 _install_dev_wrapper() {
@@ -53,6 +54,7 @@ uninstall_dev() {
 	else
 		log_warn "$rc tool(s) failed to uninstall"
 	fi
+	return "$rc"
 }
 
 _uninstall_dev_wrapper() {
@@ -76,6 +78,7 @@ update_dev() {
 	else
 		log_warn "$rc tool(s) failed to update"
 	fi
+	return "$rc"
 }
 
 _update_dev_wrapper() {
@@ -101,8 +104,9 @@ reinstall_dev() {
   fi
   separator
   echo
-  _show_dev_summary
-  echo
+	_show_dev_summary
+	echo
+	return "$rc"
 }
 
 _reinstall_dev_wrapper() {

package/karnel/modules/editor.sh

@@ -28,6 +28,7 @@ install_editor() {
 	list_item "Access at http://localhost:8080"
 	list_item "Set password: ${D_CYAN}code-server --auth password${NC}"
 	echo
+	return "$rc"
 }
 
 uninstall_editor() {
@@ -49,6 +50,7 @@ uninstall_editor() {
 	else
 		log_warn "$rc editor component(s) failed to uninstall"
 	fi
+	return "$rc"
 }
 
 update_editor() {
@@ -66,6 +68,7 @@ update_editor() {
 	else
 		log_warn "$rc editor component(s) failed to update"
 	fi
+	return "$rc"
 }
 
 reinstall_editor() {
@@ -88,6 +91,7 @@ reinstall_editor() {
   list_item "code-server (VS Code in browser)"
   list_item "Access at http://localhost:8080"
   echo
+  return "$rc"
 }
 
 _install_editor_wrapper() {

package/karnel/modules/games.sh

@@ -25,6 +25,7 @@ install_games() {
   fi
   separator
   echo
+  return "$rc"
 }
 
 uninstall_games() {
@@ -47,6 +48,7 @@ uninstall_games() {
   else
     log_warn "$rc game(s) failed to uninstall"
   fi
+  return "$rc"
 }
 
 update_games() {
@@ -65,6 +67,7 @@ update_games() {
   else
     log_warn "$rc game(s) failed to update"
   fi
+  return "$rc"
 }
 
 reinstall_games() {
@@ -85,4 +88,5 @@ reinstall_games() {
   fi
   separator
   echo
+  return "$rc"
 }

package/karnel/modules/lang.sh

@@ -32,6 +32,7 @@ install_lang() {
 	list_item "C/C++ (clang)"
 	list_item "Go (golang)"
 	echo
+	return "$rc"
 }
 
 _install_lang_wrapper() {
@@ -59,6 +60,7 @@ uninstall_lang() {
 	else
 		log_warn "$rc language package(s) failed to uninstall"
 	fi
+	return "$rc"
 }
 
 _uninstall_lang_wrapper() {
@@ -82,6 +84,7 @@ update_lang() {
 	else
 		log_warn "$rc language package(s) failed to update"
 	fi
+	return "$rc"
 }
 
 _update_lang_wrapper() {
@@ -113,12 +116,13 @@ reinstall_lang() {
   list_item "PHP"
   list_item "Rust"
   list_item "C/C++ (clang)"
-  list_item "Go (golang)"
-  echo
+	list_item "Go (golang)"
+	echo
+	return "$rc"
 }
 
 _reinstall_lang_wrapper() {
   import "@/tools/lang/all"
   reinstall_all_lang_packages
   return $?
-}
+}

package/karnel/modules/network.sh

@@ -25,6 +25,7 @@ install_network() {
   fi
   separator
   echo
+  return "$rc"
 }
 
 uninstall_network() {
@@ -47,6 +48,7 @@ uninstall_network() {
   else
     log_warn "$rc network tool(s) failed to uninstall"
   fi
+  return "$rc"
 }
 
 update_network() {
@@ -65,6 +67,7 @@ update_network() {
   else
     log_warn "$rc network tool(s) failed to update"
   fi
+  return "$rc"
 }
 
 reinstall_network() {
@@ -85,4 +88,5 @@ reinstall_network() {
   fi
   separator
   echo
+  return "$rc"
 }

package/karnel/modules/npm.sh

@@ -38,6 +38,7 @@ install_npm() {
 	fi
 	separator
 	echo
+	return "$install_rc"
 }
 
 _install_npm_wrapper() {
@@ -70,6 +71,7 @@ uninstall_npm() {
 	fi
 	separator
 	echo
+	return "$rc"
 }
 
 _uninstall_npm_wrapper() {
@@ -98,6 +100,7 @@ update_npm() {
 	fi
 	separator
 	echo
+	return "$rc"
 }
 
 _update_npm_wrapper() {
@@ -134,13 +137,14 @@ reinstall_npm() {
 		log_success "Node.js modules reinstallation completed"
   else
 		log_warn "$rc Node.js module(s) failed to reinstall"
-  fi
-  separator
-  echo
+	fi
+	separator
+	echo
+	return "$rc"
 }
 
 _reinstall_npm_wrapper() {
   import "@/tools/npm/all"
   reinstall_all_npm_packages
   return $?
-}
+}

package/karnel/modules/shell.sh

@@ -172,6 +172,7 @@ install_shell() {
 	echo
 	log_warn "Please restart Termux or run: exec zsh"
 	echo
+	return "$rc"
 }
 
 _install_shell_plugins_wrapper() {
@@ -258,6 +259,7 @@ uninstall_shell() {
 	fi
 	separator
 	echo
+	return "$rc"
 }
 
 _uninstall_shell_plugins_wrapper() {
@@ -289,6 +291,7 @@ update_shell() {
 	log_success "ZSH update completed"
 	separator
 	echo
+	return "$rc"
 }
 
 _update_shell_plugins_wrapper() {
@@ -327,8 +330,9 @@ reinstall_shell() {
   fi
   separator
   echo
-  log_warn "Please restart Termux or run: exec zsh"
-  echo
+	log_warn "Please restart Termux or run: exec zsh"
+	echo
+	return "$rc"
 }
 
 _reinstall_shell_plugins_wrapper() {

package/karnel/modules/ui.sh

@@ -39,8 +39,9 @@ setup_ui() {
 	list_item "Font: Meslo Nerd Font"
 	list_item "Banner: Karnel startup banner"
 	echo
-	log_warn "Please restart Termux to apply all changes"
-	echo
+  log_warn "Please restart Termux to apply all changes"
+  echo
+  return "$rc"
 }
 
 _setup_ui_wrapper() {
@@ -74,6 +75,7 @@ uninstall_ui() {
 	echo
 	log_warn "Please restart Termux to apply changes"
 	echo
+	return "$rc"
 }
 
 _uninstall_ui_wrapper() {
@@ -101,6 +103,7 @@ update_ui() {
 	fi
 	separator
 	echo
+	return "$rc"
 }
 
 _update_ui_wrapper() {
@@ -132,12 +135,13 @@ reinstall_ui() {
   list_item "Font: Meslo Nerd Font"
   list_item "Banner: Karnel startup banner"
   echo
-  log_warn "Please restart Termux to apply all changes"
-  echo
+	log_warn "Please restart Termux to apply all changes"
+	echo
+	return "$rc"
 }
 
 _reinstall_ui_wrapper() {
   import "@/tools/ui/all"
   reinstall_all_ui_components
   return $?
-}
+}

package/karnel/modules/utils.sh

@@ -25,6 +25,7 @@ install_utils() {
   fi
   separator
   echo
+  return "$rc"
 }
 
 uninstall_utils() {
@@ -47,6 +48,7 @@ uninstall_utils() {
   else
     log_warn "$rc utility tool(s) failed to uninstall"
   fi
+  return "$rc"
 }
 
 update_utils() {
@@ -65,6 +67,7 @@ update_utils() {
   else
     log_warn "$rc utility tool(s) failed to update"
   fi
+  return "$rc"
 }
 
 reinstall_utils() {
@@ -85,4 +88,5 @@ reinstall_utils() {
   fi
   separator
   echo
+  return "$rc"
 }

package/karnel/modules/voice.sh

@@ -37,6 +37,7 @@ install_voice() {
   list_item "Voice CLI: ${D_CYAN}karnel voice [agent]${NC}"
   list_item "Install Termux:API app from: ${D_CYAN}https://karneltermux.vercel.app/termux/api${NC}"
   echo
+  return "$rc"
 }
 
 _install_voice_deps() {
@@ -65,6 +66,7 @@ uninstall_voice() {
   else
     log_warn "$rc voice component(s) failed to uninstall"
   fi
+  return "$rc"
 }
 
 _uninstall_voice_wrapper() {
@@ -87,6 +89,7 @@ update_voice() {
   else
     log_warn "$rc voice component(s) failed to update"
   fi
+  return "$rc"
 }
 
 _update_voice_wrapper() {
@@ -115,6 +118,7 @@ reinstall_voice() {
   list_item "Termux:API (speech-to-text, clipboard)"
   list_item "Voice CLI: ${D_CYAN}karnel voice [agent]${NC}"
   echo
+  return "$rc"
 }
 
 _reinstall_voice_wrapper() {

package/karnel/tools/ai/all.sh

@@ -58,6 +58,8 @@ AI_TOOLS_REGISTRY=(
   "omni-route:omniRoute:omni-route"
   "ctx7:Context7 Documentation Provider:ctx7"
   "openspec:OpenSpec SDD Framework:openspec"
+  "supercode-cli:Supercode CLI:supercode"
+  "puter:Puter CLI:puter"
   "copilot-termux:Copilot-Termux:copilot"
   "qoder:Qoder:qodercli"
   "ampcode:AMP Code CLI:amp"

package/karnel/tools/ai/puter/README.md

@@ -0,0 +1,28 @@
+# Puter CLI
+
+CLI for managing Puter sites and workers from the terminal.
+
+**Package:** `@heyputer/cli`  
+**Command:** `puter`  
+**Requires:** Node.js 18+
+
+## Install
+
+```bash
+karnel install ai --puter
+```
+
+Equivalent npm command:
+
+```bash
+npm install -g @heyputer/cli
+```
+
+## Usage
+
+```bash
+puter login
+puter whoami
+puter site deploy [directory] [subdomain]
+puter worker deploy [file] [name]
+```

package/karnel/tools/ai/puter/install.sh

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+
+import "@/utils/log"
+import "@/utils/version"
+
+PUTER_PACKAGE="@heyputer/cli"
+
+install_puter() {
+  if command -v puter &>/dev/null; then
+    log_info "Puter CLI is already installed"
+    return 2
+  fi
+
+  log_info "Installing Puter CLI..."
+  local output rc
+  output="$(npm install -g "$PUTER_PACKAGE" 2>&1)"
+  rc=$?
+  printf '%s\n' "$output" | tail -3
+  if ((rc != 0)); then
+    log_error "Failed to install Puter CLI"
+    return 1
+  fi
+  if ! command -v puter &>/dev/null; then
+    log_error "Puter CLI binary was not found after npm installation"
+    return 1
+  fi
+  command -v termux-fix-shebang &>/dev/null && termux-fix-shebang "$(command -v puter)" &>/dev/null || true
+  log_success "Puter CLI installed"
+}
+
+uninstall_puter() {
+  if ! command -v puter &>/dev/null; then
+    log_info "Puter CLI is not installed"
+    return 2
+  fi
+
+  log_info "Uninstalling Puter CLI..."
+  local output rc
+  output="$(npm uninstall -g "$PUTER_PACKAGE" 2>&1)"
+  rc=$?
+  printf '%s\n' "$output" | tail -3
+  if ((rc != 0)); then
+    log_error "Failed to uninstall Puter CLI"
+    return 1
+  fi
+  log_success "Puter CLI uninstalled"
+}
+
+update_puter() {
+  _check_update_needed "Puter CLI" \
+    "$(_get_installed_npm_version "$PUTER_PACKAGE")" \
+    "$(_get_remote_npm_version "$PUTER_PACKAGE")" \
+    _do_update_puter
+}
+
+_do_update_puter() {
+  local output rc
+  output="$(npm update -g "$PUTER_PACKAGE" 2>&1)"
+  rc=$?
+  printf '%s\n' "$output" | tail -3
+  if ((rc != 0)); then
+    log_error "Failed to update Puter CLI"
+    return 1
+  fi
+  command -v termux-fix-shebang &>/dev/null && termux-fix-shebang "$(command -v puter)" &>/dev/null || true
+}
+
+reinstall_puter() {
+  uninstall_puter || [[ $? -eq 2 ]] || return 1
+  install_puter
+}

package/karnel/tools/ai/supercode-cli/README.md

@@ -0,0 +1,34 @@
+# Supercode CLI
+
+AI-powered coding assistant that runs in your terminal
+
+**Package:** supercode-cli  
+**Author:** israel marques  
+**Repository:** https://github.com/israelmarques1024-dotcom/karnel-termux  
+**Type:** AI coding CLI (npm package)  
+
+## Description
+
+Supercode CLI is an AI coding agent powered by multiple LLM providers (Google Gemini, OpenAI, Anthropic Claude, etc.). It provides intelligent code generation, refactoring, and terminal-based AI assistance.
+
+## Dependencies
+
+- Node.js (installed automatically as dependency)
+
+## Install
+
+```bash
+karnel install ai --supercode-cli
+```
+
+## Uninstall
+
+```bash
+karnel uninstall ai --supercode-cli
+```
+
+## Update
+
+```bash
+karnel update ai --supercode-cli
+```

package/karnel/tools/ai/supercode-cli/install.sh

@@ -0,0 +1,80 @@
+#!/usr/bin/env bash
+
+import "@/utils/log"
+import "@/utils/version"
+
+install_supercode_cli() {
+  if command -v supercode &>/dev/null; then
+    log_info "Supercode CLI is already installed"
+    return 2
+  fi
+  log_info "Installing Supercode CLI..."
+  local output rc
+  output="$(npm install -g supercode-cli 2>&1)"
+  rc=$?
+  printf '%s\n' "$output" | tail -3
+  if ((rc != 0)); then
+    log_error "Failed to install Supercode CLI"
+    return 1
+  fi
+  _fix_supercode_shebang || return 1
+  log_success "Supercode CLI installed"
+  return 0
+}
+
+_fix_supercode_shebang() {
+  local binary
+  binary="$(command -v supercode 2>/dev/null)"
+  if [[ -z "$binary" || ! -f "$binary" ]]; then
+    log_error "Supercode CLI binary was not found after npm operation"
+    return 1
+  fi
+  if command -v termux-fix-shebang &>/dev/null; then
+    termux-fix-shebang "$binary" &>/dev/null || return 1
+  else
+    sed -i '1s|#!/usr/bin/env|#!/data/data/com.termux/files/usr/bin/env|' "$binary" || return 1
+  fi
+}
+
+uninstall_supercode_cli() {
+  if ! command -v supercode &>/dev/null; then
+    log_info "Supercode CLI is not installed"
+    return 2
+  fi
+  log_info "Uninstalling Supercode CLI..."
+  local output rc
+  output="$(npm uninstall -g supercode-cli 2>&1)"
+  rc=$?
+  printf '%s\n' "$output" | tail -3
+  if ((rc != 0)); then
+    log_error "Failed to uninstall Supercode CLI"
+    return 1
+  fi
+  log_success "Supercode CLI uninstalled"
+  return 0
+}
+
+update_supercode_cli() {
+  _check_update_needed "Supercode CLI" \
+    "$(_get_installed_npm_version supercode-cli)" \
+    "$(_get_remote_npm_version supercode-cli)" \
+    _do_update_supercode_cli
+}
+
+_do_update_supercode_cli() {
+  local output rc
+  output="$(npm update -g supercode-cli 2>&1)"
+  rc=$?
+  printf '%s\n' "$output" | tail -3
+  if ((rc != 0)); then
+    log_error "Failed to update Supercode CLI"
+    return 1
+  fi
+  _fix_supercode_shebang || return 1
+  return 0
+}
+
+reinstall_supercode_cli() {
+  uninstall_supercode_cli
+  install_supercode_cli
+}

package/karnel/tools/security/all.sh

@@ -40,27 +40,41 @@ done
 _batch_security() {
   local action="$1"
   local action_past="$2"
-  if [[ "$3" != "_unused" ]]; then
-    local -n count_var="$3"
-  else
-    local count_var
-  fi
+  local count_var="$3"
+  local skipped_var="${4:-_unused}"
+  local failed_var="${5:-_unused}"
+  local count=0
+  local skipped=0
+  local failed=0
+  local func_name
   for tool in "${SECURITY_TOOLS[@]}"; do
     func_name="${action}_${tool//-/_}"
     loading "${action_past^}ing ${tool}" "$func_name"
     case $? in
-      0) ((count_var++)) 2>/dev/null || true;;
-      2) ((skipped_count++));;
-      *) ((failed_count++));;
+      0) ((count += 1));;
+      2) ((skipped += 1));;
+      *) ((failed += 1));;
     esac
   done
+  if [[ "$count_var" != "_unused" ]]; then
+    printf -v "$count_var" '%s' "$count"
+  fi
+  if [[ "$skipped_var" != "_unused" ]]; then
+    printf -v "$skipped_var" '%s' "$skipped"
+  fi
+  if [[ "$failed_var" != "_unused" ]]; then
+    printf -v "$failed_var" '%s' "$failed"
+  fi
+  (( failed == 0 ))
 }
 
 install_all_security() {
   local installed_count=0 skipped_count=0 failed_count=0
-  _batch_security "install" "install" installed_count
+  local rc=0
+  _batch_security "install" "install" installed_count skipped_count failed_count || rc=$?
   echo
   log_success "Security: $installed_count installed, $skipped_count skipped, $failed_count failed"
+  return "$rc"
 }
 
 uninstall_all_security() { _batch_security "uninstall" "uninstall" _unused; }

package/karnel/utils/install.sh

@@ -52,7 +52,7 @@ github_download_release() {
   local url="https://github.com/$repo/releases/download/$version/$asset"
   local tmpfile="$outdir/$(basename "$asset")"
   mkdir -p "$outdir"
-  if ! curl -fsSL "$url" -o "$tmpfile" &>>"$LOG_FILE"; then
+  if ! curl --fail --silent --show-error --location "$url" -o "$tmpfile" &>>"$LOG_FILE"; then
     log_error "Failed to download $asset from $repo"
     return 1
   fi
@@ -61,6 +61,18 @@ github_download_release() {
 
 extract_tarball() {
   local tarball="$1" outdir="$2"
+  local member
+  while IFS= read -r member; do
+    case "$member" in
+      /*|../*|*/../*|..)
+        log_error "Refusing unsafe archive member: $member"
+        return 1
+        ;;
+    esac
+  done < <(tar -tzf "$tarball" 2>>"$LOG_FILE") || {
+    log_error "Failed to inspect $tarball"
+    return 1
+  }
   if ! tar -zxf "$tarball" -C "$outdir" &>>"$LOG_FILE"; then
     log_error "Failed to extract $tarball"
     return 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.13.2",
+  "version": "4.13.3",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"