karnel-termux 4.16.6 → 4.17.0

package/install.sh

@@ -145,7 +145,7 @@ bootstrap_dependencies() {
 
 	if [[ $needed_tput -eq 1 ]]; then
 		echo -e "  ${P_BORDER}→${P_NC}  Installing ncurses-utils..."
-		pkg install -y ncurses-utils &>/dev/null
+		pkg install -y ncurses-utils &>/dev/null || true
 		echo -e "  ${P_OK}✔${P_NC}  ncurses installed"
 		echo
 	fi
@@ -153,7 +153,7 @@ bootstrap_dependencies() {
 	if [[ $needed_git -eq 1 ]]; then
 		log_info "Installing git..."
 		progress_bar 0 10
-		pkg install -y git &>/dev/null
+		pkg install -y git &>/dev/null || true
 		progress_bar 10 10
 		echo
 		log_ok "git installed"
@@ -162,7 +162,7 @@ bootstrap_dependencies() {
 	if [[ $needed_glow -eq 1 ]]; then
 		log_info "Installing glow..."
 		progress_bar 0 10
-		pkg install -y glow &>/dev/null
+		pkg install -y glow &>/dev/null || true
 		progress_bar 10 10
 		echo
 		log_ok "glow installed"
@@ -171,7 +171,7 @@ bootstrap_dependencies() {
 	if [[ $needed_gh -eq 1 ]]; then
 		log_info "Installing gh (GitHub CLI)..."
 		progress_bar 0 10
-		pkg install -y gh &>/dev/null
+		pkg install -y gh &>/dev/null || true
 		progress_bar 10 10
 		echo
 		log_ok "gh installed"
@@ -180,7 +180,7 @@ bootstrap_dependencies() {
 	if [[ $needed_rg -eq 1 ]]; then
 		log_info "Installing ripgrep..."
 		progress_bar 0 10
-		pkg install -y ripgrep &>/dev/null
+		pkg install -y ripgrep &>/dev/null || true
 		progress_bar 10 10
 		echo
 		log_ok "ripgrep installed"

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-8fe9d579a4a8d7fbcab5a8495b1bba025dc684a9
+57a1aa3e5401b6ba9b37965d8680bcb543b0fc00

package/karnel/cli/commands/update.sh

@@ -210,6 +210,18 @@ _update_cleanup() {
   rm -f "$KARNEL_CACHE/new_version" "$KARNEL_CACHE/last_version_check"
 }
 
+_update_release_commit() {
+  local tag="$1" commit=""
+  if command -v git &>/dev/null 2>&1; then
+    commit=$(git ls-remote "https://github.com/israelmarques1024-dotcom/karnel-termux.git" "refs/tags/${tag}^{}" 2>/dev/null | awk '{print $1}')
+  fi
+  if [[ -z "$commit" ]] && command -v curl &>/dev/null 2>&1; then
+    commit=$(curl -fsS -m 10 "https://api.github.com/repos/israelmarques1024-dotcom/karnel-termux/commits/${tag}" 2>/dev/null \
+      | grep -m1 '"sha"' | sed -E 's/.*"sha":[[:space:]]*"([0-9a-f]{40})".*/\1/')
+  fi
+  [[ "$commit" =~ ^[0-9a-f]{40}$ ]] && echo "$commit"
+}
+
 _update_try_curl() {
   command -v curl &>/dev/null || return 1
 
@@ -252,10 +264,23 @@ _update_try_curl() {
 
   rm -f "$meta" "$sumfile"
 
-  if bash "$installer" --ref "$tag"; then
-    rm -f "$installer"
-    log_success "Karnel-Termux updated via curl ($tag)"
-    return 0
+  # Resolve the release's target commit so the installer's "immutable
+  # commit SHA" requirement is satisfied even when the downloaded asset
+  # does not have RELEASE_COMMIT baked in.
+  local commit
+  commit=$(_update_release_commit "$tag")
+  if [[ -n "$commit" ]]; then
+    if bash "$installer" --ref "$tag" --commit "$commit"; then
+      rm -f "$installer"
+      log_success "Karnel-Termux updated via curl ($tag)"
+      return 0
+    fi
+  else
+    if bash "$installer" --ref "$tag"; then
+      rm -f "$installer"
+      log_success "Karnel-Termux updated via curl ($tag)"
+      return 0
+    fi
   fi
 
   rm -f "$installer"

package/karnel/tools/ai/cactus/install.sh

@@ -191,7 +191,7 @@ _cactus_write_wrapper() {
 # The server loads the engine via ctypes inside the python process, so the
 # whole interpreter must run under qemu-aarch64; CACTUS_EMULATE=1 makes the
 # CLI wrap native subprocess children (bin/run) with qemu as well.
-exec proot-distro login --shared-tmp ubuntu -- env CACTUS_EMULATE=1 qemu-aarch64 -cpu max -L / $CACTUS_CONTAINER_DIR/venv/bin/python -m cactus "\$@"
+exec proot-distro login --shared-tmp ubuntu -- env CACTUS_EMULATE=1${CACTUS_CLOUD_KEY:+ CACTUS_CLOUD_KEY="$CACTUS_CLOUD_KEY"}${CACTUS_BASE_URL:+ CACTUS_BASE_URL="$CACTUS_BASE_URL"} qemu-aarch64 -cpu max -L / $CACTUS_CONTAINER_DIR/venv/bin/python -m cactus "$@"
 EOF
   else
     cat >"$temporary" <<EOF

package/karnel/tools/ai/kimchi-code/install.sh

@@ -394,7 +394,13 @@ uninstall_kimchi_code() {
       "$HOME/.local/share/kimchi" \
       "$HOME/.local/state/kimchi" \
       "$HOME/.cache/kimchi"
+    # Also remove the binaries installed inside the ubuntu container for
+    # proot/glibc installs (they are not cleaned by _uninstall_kimchi_impl).
+    if [ -n "$(_kimchi_detect_ubuntu_root)" ] && _kimchi_wrapper_owned; then
+      _kimchi_proot_ubuntu /bin/bash -c 'rm -f /usr/local/bin/kimchi && rm -rf /usr/local/share/kimchi' &>>"$LOG_FILE"
+    fi
     loading "Uninstalling Kimchi" _uninstall_kimchi_impl
+    rm -f "$PREFIX/bin/kimchi"
     return $?
   fi
 

package/karnel/tools/ai/opencode/install.sh

@@ -96,6 +96,8 @@ _install_opencode_proot_impl() {
     npm install -g opencode-ai@1.18.15
   ' &>>"$LOG_FILE"
 
+  proot_ubuntu /bin/bash -c 'touch /root/.opencode/.karnel-managed' &>>"$LOG_FILE"
+
   local ubuntu_root
   ubuntu_root="$(detect_ubuntu_root)"
   if [ -z "$ubuntu_root" ]; then
@@ -153,7 +155,11 @@ uninstall_opencode() {
     return 0
   fi
 
-  proot_ubuntu /bin/bash -c 'rm -rf /root/.opencode' &>>"$LOG_FILE"
+  if proot_ubuntu test -f /root/.opencode/.karnel-managed &>>"$LOG_FILE"; then
+    proot_ubuntu /bin/bash -c 'rm -rf /root/.opencode' &>>"$LOG_FILE"
+  else
+    log_warn "OpenCode data in the Ubuntu container was not installed by Karnel — leaving it untouched"
+  fi
   local ubuntu_root
   ubuntu_root="$(detect_ubuntu_root)/root/.bashrc"
   if [ -f "$ubuntu_root" ]; then
@@ -179,7 +185,12 @@ _do_update_opencode() {
     return $?
   fi
 
-  proot_ubuntu /bin/bash -c 'rm -rf /root/.opencode' &>>"$LOG_FILE"
+  if proot_ubuntu test -f /root/.opencode/.karnel-managed &>>"$LOG_FILE"; then
+    proot_ubuntu /bin/bash -c 'rm -rf /root/.opencode' &>>"$LOG_FILE"
+  else
+    log_warn "Existing OpenCode in the Ubuntu container was not installed by Karnel — aborting update to avoid data loss"
+    return 1
+  fi
   proot_ubuntu /bin/bash -c '
     export SHELL=/bin/bash
     export TMPDIR=/tmp

package/karnel/tools/ai/walkie/install.sh

@@ -646,8 +646,10 @@ update_walkie() {
     return 0
   fi
   log_info "New walkie revision available: $remote_commit (installed: $installed_commit)"
-  local answer
-  read -r -p "Update walkie? [Y/n] " answer
+  local answer="y"
+  if [[ -z "$KARNEL_NONINTERACTIVE" && -t 0 ]]; then
+    read -r -p "Update walkie? [Y/n] " answer
+  fi
   case "$answer" in
     ""|y|Y|yes|Yes|YES) _update_walkie ;;
     *) log_info "Update skipped" ;;

package/karnel/utils/agent_actions.sh

@@ -378,12 +378,19 @@ agent_apply_files() {
 	fi
 	while IFS=$'\t' read -r n path lang; do
 		[[ -z "$n" ]] && continue
-		# resolve relative paths against the workspace (absolute paths are used as-is)
+		# Resolve the destination and CONFINE it to the workspace. Absolute
+		# paths and ".." escapes are rejected so the model cannot overwrite
+		# arbitrary files (e.g. shell rc files outside the project).
 		if [[ "$path" != /* ]]; then
 			target="$ws/$path"
 		else
 			target="$path"
 		fi
+		target_abs="$(realpath -m "$target" 2>/dev/null)"
+		if [[ "$target_abs" != "$ws"/* ]]; then
+			log_error "Refusing to write outside the workspace: $path"
+			continue
+		fi
 		# write-protected: the model must not create/edit a file the task
 		# only references (delete/move/run...). Skip it silently.
 		if (( ${#noread[@]} > 0 )); then
@@ -411,6 +418,21 @@ agent_apply_files() {
 			# during a read/explain task) — nothing to create or edit
 			continue
 		fi
+		# Overwriting an existing file requires approval (mirrors the
+		# command confirmation flow). New files inside the workspace are
+		# applied automatically.
+		if (( existed )) && [[ "$AGENT_CONFIRM_COMMANDS" == "1" && "$AGENT_YES" != "1" ]]; then
+			if [[ -t 0 ]]; then
+				local _wf
+				if ! agent_confirm "Overwrite $target?" _wf; then
+					log_warn "Skipped overwriting $target"
+					continue
+				fi
+			else
+				log_warn "No terminal — skipping overwrite: $target (use -y to auto-approve)"
+				continue
+			fi
+		fi
 		if cat "$d/action_file_$n" >"$target" 2>/dev/null; then
 			if (( shown == 0 )); then
 				shown=1
@@ -453,8 +475,12 @@ _agent_cmd_is_write() {
 	if printf '%s\n' "$cmd" | grep -qE '(^|[;&|[:space:]])(>|>>)[^=&]'; then
 		return 0
 	fi
-	# blocklist of commands that write to disk / change state
-	printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(rm|rmdir|unlink|mv|cp|mkdir|touch|ln|chmod|chown|chgrp|install|truncate|tee|dd|mkfs|mount|umount|tar|gzip|gunzip|bzip2|xz|zstd|curl|wget|python3|node|npm|bun|yarn|pnpm|cargo|go |rustc|git (add|commit|push|pull|merge|rebase|reset|checkout|switch|restore|clean|stash|tag|clone|init|rm|mv)|pkg (install|uninstall|upgrade|reinstall|update)|apt( |-)|apt-get|dpkg|yum|dnf|pacman|brew|pip|pip3|uv|conda|mysql|psql|sqlite3|redis-cli|kill|pkill|killall|service|systemctl|halt|reboot|shutdown|sudo|doas|su)[[:space:]]' && return 0
+	# command substitution / backticks execute arbitrary code → write
+	if printf '%s\n' "$cmd" | grep -qE '\$\(|`'; then
+		return 0
+	fi
+	# blocklist of commands that write to disk / change state / spawn a shell
+	printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(rm|rmdir|unlink|mv|cp|mkdir|touch|ln|chmod|chown|chgrp|install|truncate|tee|dd|mkfs|mount|umount|tar|gzip|gunzip|bzip2|xz|zstd|curl|wget|python3|python|node|npm|bun|yarn|pnpm|cargo|go |rustc|git (add|commit|push|pull|merge|rebase|reset|checkout|switch|restore|clean|stash|tag|clone|init|rm|mv)|pkg (install|uninstall|upgrade|reinstall|update)|apt( |-)|apt-get|dpkg|yum|dnf|pacman|brew|pip|pip3|uv|conda|mysql|psql|sqlite3|redis-cli|kill|pkill|killall|service|systemctl|halt|reboot|shutdown|sudo|doas|su|pkexec|chroot|bash|sh|dash|zsh|ksh|eval|source|exec|screen|tmux)[[:space:]]' && return 0
 	return 1
 }
 
@@ -1107,7 +1133,11 @@ agent_voice_capture() {
 # left alone.
 # ------------------------------------------------------------
 AGENT_SERVER_LOG="$KARNEL_CACHE/karnel-agent.log"
-AGENT_SERVER_PID_FILE="$KARNEL_CACHE/agent/server.pid"
+# Per-session PID file so one `karnel agent` session does not tear down a
+# server started by a different session. AGENT_SERVER_OWNED tracks whether
+# THIS session launched the server (only then do we stop it on exit).
+AGENT_SERVER_PID_FILE="$KARNEL_CACHE/agent/server_$$.pid"
+AGENT_SERVER_OWNED="${AGENT_SERVER_OWNED:-0}"
 
 agent_server_running() {
 	[[ -f "$AGENT_SERVER_PID_FILE" ]] || return 1
@@ -1168,11 +1198,19 @@ agent_server_ensure() {
 	list_item "Logs: ${D_CYAN}$AGENT_SERVER_LOG${D_NC}"
 	mkdir -p "$(dirname "$AGENT_SERVER_PID_FILE")"
 	rm -f "$AGENT_SERVER_PID_FILE"
+	AGENT_SERVER_OWNED=1
+	# Cloud handoff: if a Cactus Cloud key is present, drop --no-cloud-handoff
+	# so the local server proxies inference to the cloud (fast on this device).
+	# Keyless users keep the fully-local path.
+	local server_cmd="$AGENT_SERVER_CMD"
+	if [[ -n "${CACTUS_CLOUD_KEY:-}" ]]; then
+		server_cmd="${server_cmd//--no-cloud-handoff/}"
+	fi
 	# stdin from /dev/null so proot-distro (used by the cactus wrapper)
 	# never blocks waiting for the terminal. The background wrapper writes
 	# its OWN real PID (setsid may fork, so $! can point at a dead
 	# intermediate); `exec` keeps that PID for the actual server.
-	setsid bash -c 'echo $$ > "$1"; shift; exec "$@"' _ "$AGENT_SERVER_PID_FILE" $AGENT_SERVER_CMD </dev/null >"$AGENT_SERVER_LOG" 2>&1 &
+	setsid bash -c 'echo $$ > "$1"; shift; exec "$@"' _ "$AGENT_SERVER_PID_FILE" $server_cmd </dev/null >"$AGENT_SERVER_LOG" 2>&1 &
 	# wait for the wrapper to write its PID before we can track/stop it
 	local i
 	for ((i = 0; i < 5; i++)); do
@@ -1187,6 +1225,9 @@ agent_server_ensure() {
 }
 
 agent_server_stop() {
+	# Only stop a server THIS session started; a server launched by
+	# another session (or manually) is left untouched.
+	[[ "$AGENT_SERVER_OWNED" == "1" ]] || return 0
 	[[ -f "$AGENT_SERVER_PID_FILE" ]] || return 0
 	local pid
 	pid=$(cat "$AGENT_SERVER_PID_FILE" 2>/dev/null)

package/karnel/utils/agent_llm.sh

@@ -20,7 +20,7 @@ AGENT_MAX_ITERATIONS="${AGENT_MAX_ITERATIONS:-12}"
 AGENT_WORKSPACE="${AGENT_WORKSPACE:-$PWD}"
 AGENT_CONFIRM_COMMANDS="${AGENT_CONFIRM_COMMANDS:-1}"
 AGENT_CONTEXT_WINDOW="${AGENT_CONTEXT_WINDOW:-8192}"
-AGENT_SERVER_CMD="${AGENT_SERVER_CMD:-cactus serve Cactus-Compute/gemma-4-E2B-it --host 127.0.0.1 --port 8000 --no-cloud-handoff}"
+AGENT_SERVER_CMD="${AGENT_SERVER_CMD:-cactus serve Cactus-Compute/gemma-4-e2b-it-cq4 --host 127.0.0.1 --port 8000 --no-cloud-handoff}"
 
 # ------------------------------------------------------------
 # agent_config_load — read persisted config
@@ -36,14 +36,24 @@ agent_config_load() {
 	AGENT_TEMPERATURE="${AGENT_TEMPERATURE:-0.3}"
 	AGENT_MAX_TOKENS="${AGENT_MAX_TOKENS:-2048}"
 	AGENT_MAX_ITERATIONS="${AGENT_MAX_ITERATIONS:-12}"
-	# the agent ALWAYS starts in the directory you run it from — the
-	# workspace is never loaded from the persisted config (a stale
-	# saved path used to pin the agent to $HOME/karnel-data). Override
-	# it per session with `-w/--workspace` or `/workspace`.
-	AGENT_WORKSPACE="$PWD"
+	# Honour a saved workspace ONLY when the user explicitly configured
+	# one (the persisted file contains AGENT_WORKSPACE=) and it still
+	# exists. Otherwise the agent always starts in the current directory.
+	if grep -q '^AGENT_WORKSPACE=' "$AGENT_CONF_FILE" 2>/dev/null; then
+		[[ -d "$AGENT_WORKSPACE" ]] || AGENT_WORKSPACE="$PWD"
+	else
+		AGENT_WORKSPACE="$PWD"
+	fi
 	AGENT_CONFIRM_COMMANDS="${AGENT_CONFIRM_COMMANDS:-1}"
 	AGENT_CONTEXT_WINDOW="${AGENT_CONTEXT_WINDOW:-8192}"
-AGENT_SERVER_CMD="${AGENT_SERVER_CMD:-cactus serve Cactus-Compute/gemma-4-E2B-it --host 127.0.0.1 --port 8000 --no-cloud-handoff}"
+	AGENT_SERVER_CMD="${AGENT_SERVER_CMD:-cactus serve Cactus-Compute/gemma-4-e2b-it-cq4 --host 127.0.0.1 --port 8000 --no-cloud-handoff}"
+	# Reject tampered config (defense-in-depth): numeric/boolean fields
+	# must match the expected shape or they are reset to safe defaults.
+	[[ "$AGENT_TEMPERATURE" =~ ^[0-9]+(\.[0-9]+)?$ ]] || AGENT_TEMPERATURE=0.3
+	[[ "$AGENT_MAX_TOKENS" =~ ^[0-9]+$ ]] || AGENT_MAX_TOKENS=2048
+	[[ "$AGENT_MAX_ITERATIONS" =~ ^[0-9]+$ ]] || AGENT_MAX_ITERATIONS=12
+	[[ "$AGENT_CONFIRM_COMMANDS" =~ ^[01]$ ]] || AGENT_CONFIRM_COMMANDS=1
+	[[ "$AGENT_CONTEXT_WINDOW" =~ ^[0-9]+$ ]] || AGENT_CONTEXT_WINDOW=8192
 }
 
 # ------------------------------------------------------------
@@ -51,17 +61,19 @@ AGENT_SERVER_CMD="${AGENT_SERVER_CMD:-cactus serve Cactus-Compute/gemma-4-E2B-it
 # ------------------------------------------------------------
 agent_config_save() {
 	mkdir -p "$AGENT_CONF_DIR"
-	cat >"$AGENT_CONF_FILE" <<EOF
-# karnel agent — persisted settings
-AGENT_MODEL="$AGENT_MODEL"
-AGENT_ENDPOINT="$AGENT_ENDPOINT"
-AGENT_TEMPERATURE=$AGENT_TEMPERATURE
-AGENT_MAX_TOKENS=$AGENT_MAX_TOKENS
-AGENT_MAX_ITERATIONS=$AGENT_MAX_ITERATIONS
-AGENT_CONFIRM_COMMANDS=$AGENT_CONFIRM_COMMANDS
-AGENT_CONTEXT_WINDOW=$AGENT_CONTEXT_WINDOW
-AGENT_SERVER_CMD="$AGENT_SERVER_CMD"
-EOF
+	{
+		printf 'AGENT_MODEL="%s"\n' "$AGENT_MODEL"
+		printf 'AGENT_ENDPOINT="%s"\n' "$AGENT_ENDPOINT"
+		printf 'AGENT_TEMPERATURE="%s"\n' "$AGENT_TEMPERATURE"
+		printf 'AGENT_MAX_TOKENS="%s"\n' "$AGENT_MAX_TOKENS"
+		printf 'AGENT_MAX_ITERATIONS="%s"\n' "$AGENT_MAX_ITERATIONS"
+		printf 'AGENT_CONFIRM_COMMANDS="%s"\n' "$AGENT_CONFIRM_COMMANDS"
+		printf 'AGENT_CONTEXT_WINDOW="%s"\n' "$AGENT_CONTEXT_WINDOW"
+		printf 'AGENT_SERVER_CMD="%s"\n' "$AGENT_SERVER_CMD"
+		if [[ "${KARNEL_AGENT_WS_SET:-0}" == "1" ]]; then
+			printf 'AGENT_WORKSPACE="%s"\n' "$AGENT_WORKSPACE"
+		fi
+	} >"$AGENT_CONF_FILE"
 }
 
 # ------------------------------------------------------------
@@ -73,13 +85,26 @@ agent_config_set() {
 	case "$key" in
 	model | --model | -m) AGENT_MODEL="$value" ;;
 	endpoint | --endpoint | -u) AGENT_ENDPOINT="$value" ;;
-	temp | temperature) AGENT_TEMPERATURE="$value" ;;
-	max_tokens | maxtokens) AGENT_MAX_TOKENS="$value" ;;
-	iterations | max_iterations) AGENT_MAX_ITERATIONS="$value" ;;
-	confirm_commands | confirm) AGENT_CONFIRM_COMMANDS="$value" ;;
-	context_window | context) AGENT_CONTEXT_WINDOW="$value" ;;
+	temp | temperature)
+		[[ "$value" =~ ^[0-9]+(\.[0-9]+)?$ ]] || { log_error "temperature must be a number (e.g. 0.3)"; return 1; }
+		AGENT_TEMPERATURE="$value" ;;
+	max_tokens | maxtokens)
+		[[ "$value" =~ ^[0-9]+$ ]] || { log_error "max_tokens must be a positive integer"; return 1; }
+		AGENT_MAX_TOKENS="$value" ;;
+	iterations | max_iterations)
+		[[ "$value" =~ ^[0-9]+$ ]] || { log_error "iterations must be a positive integer"; return 1; }
+		AGENT_MAX_ITERATIONS="$value" ;;
+	confirm_commands | confirm)
+		[[ "$value" =~ ^[01]$ ]] || { log_error "confirm_commands must be 0 or 1"; return 1; }
+		AGENT_CONFIRM_COMMANDS="$value" ;;
+	context_window | context)
+		[[ "$value" =~ ^[0-9]+$ ]] || { log_error "context_window must be a positive integer"; return 1; }
+		AGENT_CONTEXT_WINDOW="$value" ;;
 	server_command | server) AGENT_SERVER_CMD="$value" ;;
-	workspace) AGENT_WORKSPACE="$value" ;;
+	workspace)
+		[[ -n "$value" ]] || { log_error "workspace requires a path"; return 1; }
+		AGENT_WORKSPACE="$value"
+		KARNEL_AGENT_WS_SET=1 ;;
 	*)
 		log_error "Unknown setting: $key"
 		echo
@@ -162,15 +187,26 @@ agent_models_list() {
 agent_build_payload() {
 	local messages="$1"
 	local extra="${2:-}"
-	local payload
+	local payload temp mt
+	# Coerce numeric fields to valid JSON numbers; a bad/empty config
+	# value would otherwise make jq emit an empty payload and silently
+	# break every ask/run call.
+	temp="$AGENT_TEMPERATURE"
+	mt="$AGENT_MAX_TOKENS"
+	[[ "$temp" =~ ^[0-9]+(\.[0-9]+)?$ ]] || temp=0.3
+	[[ "$mt" =~ ^[0-9]+$ ]] || mt=2048
 	payload=$(jq -nc \
 		--arg model "$AGENT_MODEL" \
 		--argjson msgs "$messages" \
-		--argjson temp "$AGENT_TEMPERATURE" \
-		--argjson mt "$AGENT_MAX_TOKENS" \
+		--argjson temp "$temp" \
+		--argjson mt "$mt" \
 		'{model:$model, messages:$msgs, temperature:$temp, max_tokens:$mt}')
+	if [[ -z "$payload" ]]; then
+		log_error "Failed to build request payload (check agent config values)"
+		return 1
+	fi
 	if [[ -n "$extra" ]]; then
-		payload=$(echo "$payload" | jq -c "$extra")
+		payload=$(echo "$payload" | jq -c "$extra") || { log_error "Failed to apply payload extra"; return 1; }
 	fi
 	echo "$payload"
 }

package/karnel/utils/bootstrap.sh

@@ -14,8 +14,10 @@ import() {
 	local base="${KARNEL_PATH}"
 	local resolved="${1/@/$base}.sh"
 	local canonical base_canonical
-	canonical="$(realpath "$resolved" 2>/dev/null || readlink -f "$resolved" 2>/dev/null || echo "$resolved")"
-	base_canonical="$(realpath "$base" 2>/dev/null || readlink -f "$base" 2>/dev/null || echo "$base")"
+	canonical="$(realpath "$resolved" 2>/dev/null || readlink -f "$resolved" 2>/dev/null)"
+	[[ -z "$canonical" ]] && { echo "karnel: import error: cannot resolve path: $1" >&2; return 1; }
+	base_canonical="$(realpath "$base" 2>/dev/null || readlink -f "$base" 2>/dev/null)"
+	[[ -z "$base_canonical" ]] && { echo "karnel: import error: cannot resolve KARNEL_PATH" >&2; return 1; }
 
 	if [[ "$canonical" != "$base_canonical"/* ]]; then
 		echo "karnel: import error: path traversal denied: $1" >&2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.16.6",
+  "version": "4.17.0",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"

package/scripts/check-package.js

@@ -28,11 +28,21 @@ cpSync(packageRoot, stagingRoot, {
     return relative === "" || !relative.split(path.sep).some((part) => part === ".git" || part === "node_modules");
   },
 });
-if (!existsSync(releaseCommitPath)) {
-  if (!/^[0-9a-f]{40}$/.test(repositoryHead)) {
-    throw new Error("Required package file is missing: karnel/RELEASE_COMMIT");
-  }
-  writeFileSync(releaseCommitPath, `${repositoryHead}\n`, { flag: "wx", mode: 0o600 });
+// Always bind the staged package to the actual repository HEAD. A stale
+// committed karnel/RELEASE_COMMIT (left over from an earlier release) must
+// never break release validation — the packed commit is what matters, and it
+// must equal HEAD. When HEAD is unavailable (e.g. a non-git fixture) we fall
+// back to a committed marker that is itself a valid SHA.
+let committedCommit = "";
+if (existsSync(releaseCommitPath)) {
+  committedCommit = readFileSync(releaseCommitPath, "utf8").trim();
+}
+if (/^[0-9a-f]{40}$/.test(repositoryHead)) {
+  writeFileSync(releaseCommitPath, `${repositoryHead}\n`, { mode: 0o600 });
+} else if (/^[0-9a-f]{40}$/.test(committedCommit)) {
+  writeFileSync(releaseCommitPath, `${committedCommit}\n`, { mode: 0o600 });
+} else {
+  throw new Error("Required package file is missing: karnel/RELEASE_COMMIT");
 }
 let output;
 try {

package/scripts/npm-install.js

@@ -91,7 +91,26 @@ const main = () => {
   }
 
   try {
-    const releaseCommit = fs.readFileSync(releaseCommitPath, 'utf8').trim();
+    let releaseCommit = '';
+    if (fs.existsSync(releaseCommitPath)) {
+      releaseCommit = fs.readFileSync(releaseCommitPath, 'utf8').trim();
+    }
+    if (!/^[0-9a-f]{40}$/.test(releaseCommit)) {
+      // The published tarball may not contain a baked RELEASE_COMMIT (e.g. a
+      // plain `npm publish`). Derive it from git so the installer's immutable
+      // commit-SHA requirement is still satisfied.
+      try {
+        releaseCommit = execSync('git rev-parse HEAD', {
+          cwd: path.resolve(__dirname, '..'),
+          encoding: 'utf8'
+        }).trim();
+      } catch {
+        releaseCommit = '';
+      }
+      if (/^[0-9a-f]{40}$/.test(releaseCommit)) {
+        fs.writeFileSync(releaseCommitPath, releaseCommit + '\n');
+      }
+    }
     if (!/^[0-9a-f]{40}$/.test(releaseCommit)) {
       throw new Error('package contains an invalid RELEASE_COMMIT');
     }