karnel-termux 4.13.4 → 4.13.6

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.13.4-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.13.6-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -39,7 +39,7 @@ Created by **Israel Marques**.
 - **22 dev tools** — gh, curl, fzf, bat, lsd, jq, tmux, openssh, snyk and more
 - **11 utility scripts** — fconv, notes, treex, qrcode, zork and more
 - **2 network tools** — dark, dedsec-network
-- **3 deploy CLIs** — Vercel, Railway, Netlify
+- **4 deploy CLIs** — Vercel, Railway, Netlify, Supabase
 - **Responsible OSINT** — Robin v2.8 through Tor with a loopback-only web UI
 - **3 editors** — code-server (VS Code in browser), Neovim, NvChad
 - **Second brain** — Memory system with AI search and idea graph
@@ -104,7 +104,7 @@ karnel
 | `karnel start editor` | Start code-server (VS Code in browser) |
 | `karnel pg` | PostgreSQL manager |
 | `karnel init <template>` | Initialize projects with templates |
-| `karnel deploy` | Deploy projects (Vercel, Railway, Netlify) |
+| `karnel deploy` | Deploy projects (Vercel, Railway, Netlify, Supabase) |
 | `karnel robin` | Manage the Robin OSINT service |
 | `karnel --version` | Show installed version |
 
@@ -115,13 +115,13 @@ karnel
 | `lang` | Node.js, Python, Go, Rust, C/C++, PHP, Perl, Bun | `karnel install lang` |
 | `db` | PostgreSQL, MariaDB, SQLite, MongoDB, Redis | `karnel install db` |
 | `ai` | 39 AI agents for coding | `karnel install ai` |
-| `editor` | code-server (VS Code in browser) | `karnel install editor` |
+| `editor` | code-server (VS Code in browser), Neovim, NvChad | `karnel install editor` |
 | `dev` | gh, curl, fzf, bat, lsd, jq and more | `karnel install dev` |
 | `npm` | TypeScript, NestJS CLI, Prettier and more | `karnel install npm` |
 | `shell` | ZSH + Oh My Zsh + 10 plugins | `karnel install shell` |
 | `ui` | Font, cursor, extra-keys, banner | `karnel install ui` |
 | `auto` | Automation with n8n | `karnel install auto` |
-| `deploy` | Vercel, Railway, Netlify | `karnel install deploy` |
+| `deploy` | Vercel, Railway, Netlify, Supabase | `karnel install deploy` |
 | `games` | Buzz, CTF God, Detective, Tamagotchi and more | `karnel install games` |
 | `network` | Dark Web OSINT, DedSec Network Toolkit | `karnel install network` |
 | `utils` | fconv, notes, treex, passman, applaunch, qrcode, zork and more | `karnel install utils` |
@@ -240,7 +240,7 @@ See the bundled reference with `karnel show osint --robin`.
 
 ---
 
-## AI Agents (37)
+## AI Agents (39)
 
 ```bash
 karnel install ai                             # Install all
@@ -273,7 +273,8 @@ karnel install ai --opencode --ollama         # Install specific agents
 | **Hermes Agent** | `--hermes-agent` | Nous Research self-improving agent |
 | **Kimi Code** | `--kimi-code` | Kimi Code CLI |
 | **Command Code** | `--command-code` | Agent that learns your style |
-| **Freebuff** | `--freebuff` | Free community agent |
+| **Codebuff** | `--codebuff` | Free community coding agent |
+| **Freebuff** | `--freebuff` | Free AI coding agent |
 | **Kilo Code CLI** | `--kilocode-cli` | Native glibc CLI for Termux |
 | **Kiro CLI** | `--kiro` | AWS AI coding assistant |
 | **Crush CLI** | `--crush` | Charm AI agents CLI |
@@ -289,6 +290,8 @@ karnel install ai --opencode --ollama         # Install specific agents
 | **Oh-My-Pi** | `--oh-my-pi` | Enhanced Pi agent with native Rust addons |
 | **Goose CLI** | `--goose` | AI agent framework by Block (native Termux musl) |
 | **Factory Droid** | `--droid` | Enterprise AI agent (via proot-distro Ubuntu) |
+| **Supercode CLI** | `--supercode-cli` | Supercode CLI — official npm package |
+| **Puter CLI** | `--puter` | Puter CLI for sites and workers |
  
 </details>
 
@@ -408,17 +411,17 @@ karnel pg shell                      # Open psql console
 
 ## karnel init — Project Templates
 
-Create pre-configured projects in seconds:
+Configure existing projects in seconds:
 
 ```bash
-cd my-app && karnel init next         # Next.js + TypeScript + Tailwind
+cd my-next-app && karnel init next    # Next.js + TypeScript + Tailwind
 cd my-api && karnel init express      # Express + TypeORM
 cd backend && karnel init nest        # NestJS + authentication
 ```
 
 | Template | Description |
 |----------|-------------|
-| `next` | Next.js with Turbopack, TypeScript, Tailwind, React Query, Zustand |
+| `next` | Next.js with webpack, TypeScript, Tailwind, React Query, Zustand |
 | `react` | React + Vite with modern structure |
 | `express` | Express API with TypeScript + TypeORM + migrations |
 | `nest` | NestJS with TypeORM and JWT auth |
@@ -433,7 +436,7 @@ cd backend && karnel init nest        # NestJS + authentication
 Manage environment variables securely:
 
 ```bash
-karnel env set OPENAI_API_KEY        # Add key (hidden input)
+karnel env set                       # Add key (hidden input)
 karnel env list                      # List variables
 karnel env ls                        # List variables
 ```
@@ -448,20 +451,20 @@ Deploy your projects directly from terminal:
 karnel deploy vercel                  # Deploy to Vercel
 karnel deploy railway                 # Deploy to Railway
 karnel deploy netlify                 # Deploy to Netlify
+karnel deploy supabase                # Deploy to Supabase
 ```
 
-Platform CLIs are installed automatically.
+Install a platform CLI first with `karnel install deploy --<tool>`.
 
 ---
 
 ## karnel open
 
-Open documentation for any module or tool in browser:
+Open documentation for any module in browser:
 
 ```bash
 karnel open ai                        # Open AI module docs
 karnel open db                        # Open DB module docs
-karnel open ai --opencode             # Open OpenCode docs on site
 ```
 
 Documentation loads from https://karneltermux.vercel.app.
@@ -473,6 +476,7 @@ Documentation loads from https://karneltermux.vercel.app.
 - [Documentation index](docs/README.md)
 - [CLI reference](docs/cli/README.md)
 - [Doctor reference](docs/doctor/README.md)
+- [Troubleshooting](docs/troubleshooting.md)
 - [Architecture](docs/ARCHITECTURE.md)
 - [Documentation changelog](docs/CHANGELOG.md)
 - [Official website](https://karneltermux.vercel.app)
@@ -570,9 +574,11 @@ karnel update karnel     # Update the framework
 
 `karnel update` requires a target such as `karnel`, `ai`, or `security`.
 `karnel update karnel` first runs the official curl installer, then falls back to
-the local Git checkout and package-manager installs if needed. The framework
-checks for a new version in the background at most once every 24 hours; the check
-can use npm or GitHub and writes state under `$KARNEL_CACHE`.
+the local Git checkout and package-manager installs if needed. The curl installer
+is pinned to the latest GitHub release tag, and its SHA-256 checksum is verified
+before it runs. The framework checks for a new version in the background at most
+once every 24 hours; the check can use npm or GitHub and writes state under
+`$KARNEL_CACHE`.
 
 ---
 

package/karnel/cli/commands/deploy.sh

@@ -15,6 +15,7 @@ deploy_main() {
     list_item "vercel    - Deploy to Vercel"
     list_item "railway   - Deploy to Railway"
     list_item "netlify   - Deploy to Netlify"
+    list_item "supabase  - Deploy to Supabase"
     echo
     log_info "Usage: ${D_CYAN}karnel deploy vercel${NC}"
     echo
@@ -34,6 +35,7 @@ deploy_main() {
     list_item "vercel    - Deploy to Vercel"
     list_item "railway   - Deploy to Railway"
     list_item "netlify   - Deploy to Netlify"
+    list_item "supabase  - Deploy to Supabase"
     echo
     log_info "Usage: ${D_CYAN}karnel deploy vercel${NC}"
     echo
@@ -60,9 +62,16 @@ deploy_main() {
     fi
     exec netlify "${@:2}"
     ;;
+  supabase)
+    if ! command -v supabase &>/dev/null; then
+      log_warn "Supabase CLI not installed. Run: karnel install deploy --supabase"
+      return 1
+    fi
+    exec supabase "${@:2}"
+    ;;
   *)
     log_warn "Unknown deploy tool: $tool"
-    echo "Available: vercel, railway, netlify"
+    echo "Available: vercel, railway, netlify, supabase"
     return 1
     ;;
   esac

package/karnel/cli/commands/doctor.sh

@@ -594,11 +594,20 @@ doctor_termux() {
   separator_section "AI Tools Installed"
   echo
 
-  local -a ai_cmds=("opencode" "claude" "gemini" "codex" "qwen" "vibe" "mimo" "hermes" "kimi" "ollama" "freebuff" "pi" "agy" "mmx" "gentle-ai" "gga" "engram" "codegraph" "kilocode" "kiro" "crush" "odysseus" "openclaude" "openclaw" "command-code" "kimchi" "cline" "omni-route" "ctx7" "openspec" "copilot" "supercode" "puter")
+  local registry_file="$KARNEL_PATH/tools/ai/all.sh"
+  local -a ai_cmds=()
+  local registry_line registry_entry binaries
+  while IFS= read -r registry_line; do
+    registry_entry="${registry_line#*\"}"
+    registry_entry="${registry_entry%\"*}"
+    binaries="${registry_entry##*:}"
+    ai_cmds+=("$binaries")
+  done < <(grep -E '^[[:space:]]*"[^:]+:[^:]+:[^"]+"' "$registry_file")
   local ai_count=0
 
   for cmd in "${ai_cmds[@]}"; do
-    if command -v "$cmd" &>/dev/null; then
+    IFS=, read -r -a binaries <<< "$cmd"
+    if command -v "${binaries[0]}" &>/dev/null || { [[ ${#binaries[@]} -gt 1 ]] && command -v "${binaries[1]}" &>/dev/null; }; then
       log_success "$cmd: installed"
       ((ai_count++))
     fi
@@ -615,14 +624,15 @@ doctor_termux() {
   fi
 
   # Registry consistency check
-  local registry_file="$KARNEL_PATH/tools/ai/all.sh"
   if [[ -f "$registry_file" ]]; then
-    local registered_tools
-    registered_tools=$(grep -cE '^[[:space:]]*"[^:]+:[^:]+:[^"]+"' "$registry_file" 2>/dev/null || echo 0)
+    local registered_tools=${#ai_cmds[@]}
     local installed_ai
     installed_ai=0
     for cmd in "${ai_cmds[@]}"; do
-      command -v "$cmd" &>/dev/null && ((installed_ai++))
+      IFS=, read -r -a binaries <<< "$cmd"
+      if command -v "${binaries[0]}" &>/dev/null || { [[ ${#binaries[@]} -gt 1 ]] && command -v "${binaries[1]}" &>/dev/null; }; then
+        ((installed_ai++))
+      fi
     done
     log_info "AI registry: $registered_tools tools | Installed: $installed_ai"
   fi

package/karnel/cli/commands/ia.sh

@@ -217,6 +217,17 @@ ia_sessions() {
 		done
 	fi
 
+	# Codebuff sessions
+	if [[ -d "$HOME/.codebuff" ]]; then
+		for f in "$HOME/.codebuff"/*.json; do
+			[[ -f "$f" ]] || continue
+			local basename; basename=$(basename "$f")
+			local ts; ts=$(stat -c %Y "$f" 2>/dev/null || echo "unknown")
+			local readable_ts; readable_ts=$(date -d "@$ts" +%Y%m%d_%H%M%S 2>/dev/null || echo "unknown")
+			sessions+=("[codebuff]|$readable_ts|$basename")
+		done
+	fi
+
 	# Freebuff sessions
 	if [[ -d "$HOME/.freebuff" ]]; then
 		for f in "$HOME/.freebuff"/*.json; do
@@ -431,7 +442,7 @@ ia_routes() {
 	local -a routes=()
 
 	# Collect all available AI CLIs (em sincronia com AI_TOOLS_REGISTRY em tools/ai/all.sh)
-	for cmd in qwen gemini claude vibe openclaude openclaw ollama codex opencode mimo engram codegraph pi agy mmx gentle-ai gga hermes kimi command-code freebuff kilocode kiro cline crush odysseus kimchi omni-route ctx7 openspec copilot amp cursor omp goose droid supercode puter; do
+	for cmd in qwen gemini claude vibe openclaude openclaw ollama codex opencode mimo engram codegraph pi agy mmx gentle-ai gga hermes kimi command-code codebuff freebuff kilocode kiro cline crush odysseus kimchi omni-route ctx7 openspec copilot amp cursor omp goose droid supercode puter; do
 		if command -v "$cmd" &>/dev/null; then
 			local path
 			path=$(command -v "$cmd")

package/karnel/cli/commands/install.sh

@@ -31,6 +31,8 @@ install_main() {
     list_item "deploy     - Deploy CLIs (Vercel, Railway, Netlify, Supabase)"
     list_item "games      - Games (Buzz, CTF God, Detective, etc.)"
     list_item "voice      - Voice command (speech-to-agent)"
+    list_item "plugin     - Install plugins from the official registry"
+    list_item "supabase   - Supabase CLI (types, migrate, functions, secrets)"
     echo
     log_info "Install specific tools with flags:"
     echo

package/karnel/cli/commands/list.sh

@@ -28,6 +28,8 @@ list_main() {
     list_item "utils      - List utility scripts"
     list_item "voice      - List voice commands"
     list_item "osint      - List OSINT tools"
+    list_item "security   - List security tools"
+    list_item "plugin     - List installed plugins"
     echo
     return
   fi
@@ -187,9 +189,10 @@ _list_ai() {
   table_row "Hermes Agent" "--hermes-agent" "hermes" "$(_check_cmd "hermes")"
   table_row "Kimi Code" "--kimi-code" "kimi" "$(_check_cmd "kimi")"
   table_row "Command Code" "--command-code" "command-code" "$(_check_cmd "command-code")"
+  table_row "Codebuff" "--codebuff" "codebuff" "$(_check_cmd "codebuff")"
   table_row "Freebuff" "--freebuff" "freebuff" "$(_check_cmd "freebuff")"
-  table_row "Kilo Code CLI" "--kilocode-cli" "kilocode" "$(_check_cmd "kilocode")"
-  table_row "Kiro CLI" "--kiro" "kiro" "$(_check_cmd "kiro")"
+  table_row "Kilo Code CLI" "--kilocode-cli" "kilocode,kilo" "$(_check_cmd_any "kilocode,kilo")"
+  table_row "Kiro CLI" "--kiro" "kiro,kiro-cli" "$(_check_cmd_any "kiro,kiro-cli")"
   table_row "Crush CLI" "--crush" "crush" "$(_check_cmd "crush")"
   table_row "Cline CLI" "--cline" "cline" "$(_check_cmd "cline")"
   table_row "Odysseus" "--odysseus" "odysseus" "$(_check_cmd "odysseus")"
@@ -199,7 +202,7 @@ _list_ai() {
   table_row "OpenSpec SDD" "--openspec" "openspec" "$(_check_cmd "openspec")"
   table_row "Qoder" "--qoder" "qodercli" "$(_check_cmd "qodercli")"
   table_row "AMP Code CLI" "--ampcode" "amp" "$(_check_cmd "amp")"
-  table_row "Cursor CLI" "--cursor-cli" "cursor" "$(_check_cmd "cursor")"
+  table_row "Cursor CLI" "--cursor-cli" "cursor,cursor-agent" "$(_check_cmd_any "cursor,cursor-agent")"
   table_row "Oh-My-Pi" "--oh-my-pi" "omp" "$(_check_cmd "omp")"
   table_row "Goose CLI" "--goose" "goose" "$(_check_cmd "goose")"
   table_row "Factory Droid" "--droid" "droid" "$(_check_cmd "droid")"
@@ -262,6 +265,8 @@ _list_dev() {
   table_row "Shfmt" "--shfmt" "$(_check_pkg "shfmt")"
   table_row "Make" "--make" "$(_check_pkg "make")"
   table_row "Udocker" "--udocker" "$(_check_pkg "udocker")"
+  table_row "OpenSSH" "--openssh" "$(_check_pkg "openssh")"
+  table_row "Tmux" "--tmux" "$(_check_pkg "tmux")"
   table_row "Snyk" "--snyk" "$(_check_cmd "snyk")"
   table_end
 
@@ -289,7 +294,7 @@ _list_games() {
   table_end
 
   echo
-  log_info "Install specific: ${D_CYAN}karnel install games --buzz --ctf-god${NC}"
+  log_info "Install specific: ${D_CYAN}karnel install games --buzz --ctfgod${NC}"
   log_info "Install all: ${D_CYAN}karnel install games${NC}"
   echo
 }
@@ -467,6 +472,20 @@ _check_cmd() {
   fi
 }
 
+# Check if any of the comma-separated commands exists
+_check_cmd_any() {
+  local bin_list="$1"
+  local bin
+  IFS=',' read -ra bins <<< "$bin_list"
+  for bin in "${bins[@]}"; do
+    if command -v "$bin" &>/dev/null; then
+      echo -e "${D_GREEN}installed${NC}"
+      return 0
+    fi
+  done
+  echo -e "${D_RED}not installed${NC}"
+}
+
 # Check if package is installed via pkg
 _check_pkg() {
   local pkg="$1"

package/karnel/cli/commands/open.sh

@@ -137,7 +137,6 @@ open_help() {
   printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "osint" "OSINT tools"
   printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "plugin" "Plugin system"
   printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "security" "Security tools"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "backup" "Backup & Restore"
   echo
 	separator_section "Website"
 	echo

package/karnel/cli/commands/reinstall.sh

@@ -30,6 +30,9 @@ reinstall_main() {
     list_item "deploy     - Reinstall deploy CLIs (Vercel, Railway, Netlify, Supabase)"
     list_item "voice      - Reinstall voice command"
     list_item "osint      - Reinstall OSINT tools"
+    list_item "security   - Reinstall security tools"
+    list_item "plugin     - Reinstall plugins"
+    list_item "supabase   - Reinstall Supabase CLI"
     echo
     log_info "Reinstall specific tools with flags:"
     echo
@@ -166,6 +169,7 @@ _reinstall_full_module() {
   *)
     log_warn "Unknown reinstall target: $target"
     echo "Run 'karnel reinstall' to see available targets"
+    return 1
     ;;
   esac
 }
@@ -271,6 +275,10 @@ _reinstall_specific_tools() {
         reinstall_command_code
         case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
         ;;
+      codebuff)
+        reinstall_codebuff
+        case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
+        ;;
       freebuff)
         reinstall_freebuff
         case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
@@ -291,6 +299,30 @@ _reinstall_specific_tools() {
         reinstall_puter
         case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
         ;;
+      qoder)
+        reinstall_qoder
+        case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
+        ;;
+      ampcode)
+        reinstall_ampcode
+        case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
+        ;;
+      cursor-cli)
+        reinstall_cursor_cli
+        case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
+        ;;
+      oh-my-pi)
+        reinstall_oh_my_pi
+        case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
+        ;;
+      goose)
+        reinstall_goose
+        case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
+        ;;
+      droid)
+        reinstall_droid
+        case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
+        ;;
       copilot-termux)
         reinstall_copilot_termux
         case $? in 0) ((reinstalled_count++));; 1) ((failed_count++));; esac
@@ -819,9 +851,13 @@ _reinstall_specific_tools() {
   utils)
     _batch_tool_action "utils" "reinstall" "${tools[@]}"
     ;;
+  security|deploy)
+    _batch_tool_action "$module" "reinstall" "${tools[@]}"
+    ;;
   *)
     log_warn "Unknown reinstall target: $module"
     echo "Run 'karnel reinstall' to see available targets"
+    return 1
     ;;
   esac
 }

package/karnel/cli/commands/show.sh

@@ -22,7 +22,6 @@ show_main() {
     list_item "karnel show osint --robin"
     list_item "karnel show backup              Show backup docs"
     list_item "karnel show restore             Show restore docs"
-    list_item "karnel show all --<tool>"
 		echo
 		log_info "Run ${D_CYAN}karnel list <module>${NC} to see available tools"
 		echo
@@ -66,15 +65,21 @@ show_main() {
       log_error "Unknown module: $module"
       return 1
     fi
+    local documented_tools=0
     for t in "$tool_dir"/*/; do
       local name="${t%/}"
       name="${name##*/}"
       if [[ -f "$tool_dir/$name/README.md" ]]; then
+        ((documented_tools++))
         local first_line
         first_line=$(head -1 "$tool_dir/$name/README.md" 2>/dev/null)
         printf "    ${D_CYAN}%-16s${NC} %s\n" "$name" "${first_line#\# }"
       fi
     done
+    if [[ $documented_tools -eq 0 ]]; then
+      log_warn "No tool documentation is available for $module"
+      return 1
+    fi
     echo
     log_info "Run ${D_CYAN}karnel show $module --<tool>${NC} for details"
     echo

package/karnel/cli/commands/uninstall.sh

@@ -30,6 +30,9 @@ uninstall_main() {
     list_item "deploy     - Remove deploy CLIs (Vercel, Railway, Netlify, Supabase)"
     list_item "voice      - Remove voice command"
     list_item "osint      - Remove OSINT tools"
+    list_item "security   - Remove security tools"
+    list_item "plugin     - Remove plugins"
+    list_item "supabase   - Remove Supabase CLI"
     echo
     log_info "Uninstall specific tools with flags:"
     echo

package/karnel/cli/commands/update.sh

@@ -29,6 +29,7 @@ update_main() {
     list_item "utils      - Update utility scripts"
     list_item "games      - Update games"
     list_item "deploy     - Update deploy CLIs (Vercel, Railway, Netlify, Supabase)"
+    list_item "supabase   - Update Supabase CLI"
     list_item "voice      - Update voice command"
     list_item "osint      - Update OSINT tools"
     list_item "security   - Update security tools"
@@ -212,20 +213,48 @@ _update_cleanup() {
 _update_try_curl() {
   command -v curl &>/dev/null || return 1
 
-  local installer
-  installer=$(mktemp "${TMPDIR:-/tmp}/karnel-install.XXXXXX") || return 1
+  local meta installer sumfile tag
+  meta=$(mktemp "${TMPDIR:-/tmp}/karnel-meta.XXXXXX") || return 1
+  installer=$(mktemp "${TMPDIR:-/tmp}/karnel-install.XXXXXX") || { rm -f "$meta"; return 1; }
+  sumfile=$(mktemp "${TMPDIR:-/tmp}/karnel-sum.XXXXXX") || { rm -f "$meta" "$installer"; return 1; }
 
   log_info "Trying the official curl installer..."
+
   if ! curl --fail --silent --show-error --location \
-    "https://raw.githubusercontent.com/israelmarques1024-dotcom/karnel-termux/main/install.sh" \
+    "https://api.github.com/repos/israelmarques1024-dotcom/karnel-termux/releases/latest" \
+    -o "$meta"; then
+    rm -f "$meta" "$installer" "$sumfile"
+    return 1
+  fi
+
+  tag=$(_update_latest_release_tag "$meta")
+  if [[ -z "$tag" || ! "$tag" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+    log_error "GitHub returned an invalid release tag: ${tag:-none}"
+    rm -f "$meta" "$installer" "$sumfile"
+    return 1
+  fi
+
+  if ! curl --fail --silent --show-error --location \
+    "https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/$tag/karnel-termux-install.sh.sha256" \
+    -o "$sumfile" ||
+    ! curl --fail --silent --show-error --location \
+    "https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/$tag/karnel-termux-install.sh" \
     -o "$installer"; then
-    rm -f "$installer"
+    rm -f "$meta" "$installer" "$sumfile"
+    return 1
+  fi
+
+  if ! _verify_sha256 "$installer" "$sumfile"; then
+    log_error "Checksum verification failed for the curl installer"
+    rm -f "$meta" "$installer" "$sumfile"
     return 1
   fi
 
+  rm -f "$meta" "$sumfile"
+
   if bash "$installer"; then
     rm -f "$installer"
-    log_success "Karnel-Termux updated via curl"
+    log_success "Karnel-Termux updated via curl (v$tag)"
     return 0
   fi
 
@@ -234,6 +263,41 @@ _update_try_curl() {
   return 1
 }
 
+_update_latest_release_tag() {
+  local meta="$1"
+  if command -v node &>/dev/null; then
+    node -e '
+      let s = "";
+      process.stdin.resume();
+      process.stdin.on("data", (d) => { s += d; });
+      process.stdin.on("end", () => {
+        try { process.stdout.write(JSON.parse(s).tag_name || ""); } catch (e) {}
+      });
+    ' < "$meta"
+    return
+  fi
+  grep -oP '"tag_name":\s*"\K[^"]+' "$meta" 2>/dev/null | head -n 1
+}
+
+_verify_sha256() {
+  local file="$1" sumfile="$2"
+  local expected actual
+  expected=$(awk 'NR == 1 { print $1 }' "$sumfile")
+  [[ -n "$expected" ]] || return 1
+  if command -v sha256sum &>/dev/null; then
+    actual=$(sha256sum "$file" | awk '{ print $1 }')
+  elif command -v node &>/dev/null; then
+    actual=$(node -e '
+      const fs = require("fs");
+      const crypto = require("crypto");
+      process.stdout.write(crypto.createHash("sha256").update(fs.readFileSync(process.argv[1])).digest("hex"));
+    ' "$file")
+  else
+    return 1
+  fi
+  [[ "$actual" == "$expected" ]]
+}
+
 _update_try_git() {
   [[ -d "$KARNEL_PATH/../.git" ]] || return 1
   loading "Updating via git" _update_karnel_repo

package/karnel/cli/commands/voice.sh

@@ -61,7 +61,14 @@ voice_main() {
   # Parse all arguments: flags can appear anywhere
   while [[ $# -gt 0 ]]; do
     case "$1" in
-      --lang) lang="${2:-}"; shift 2 ;;
+      --lang)
+        if [[ -z "${2:-}" || "${2:-}" == -* ]]; then
+          log_error "--lang requires a language code"
+          return 1
+        fi
+        lang="$2"
+        shift 2
+        ;;
       --raw) skip_edit=true; shift ;;
       --no-clip) no_clip=true; shift ;;
       --help|-h) voice_help; return ;;