karnel-termux 4.17.10 → 4.17.13

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.17.10-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.17.13-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -39,7 +39,7 @@ Core agent contributions by **devcorex**.
 - **8 languages** — Node.js, Python, Go, Rust, C/C++, PHP, Perl, Bun
 - **5 databases** — PostgreSQL, MariaDB, SQLite, MongoDB, Redis
 - **22 dev tools** — gh, curl, fzf, bat, lsd, jq, tmux, openssh, snyk and more
-- **12 utility tools** — fconv, notes, treex, qrcode, SuperFile, zork and more
+- **13 utility tools** — fconv, notes, treex, qrcode, SuperFile, zork, herdr and more
 - **2 network tools** — dark, dedsec-network
 - **4 deploy CLIs** — Vercel, Railway, Netlify, Supabase
 - **Responsible OSINT** — Robin v2.8 through Tor with a loopback-only web UI
@@ -54,6 +54,23 @@ Core agent contributions by **devcorex**.
 
 
 
+---
+
+## 🌟 Featured: Herdr — terminal AI assistant
+
+Karnel now ships **[Herdr](https://herdr.dev)**, a blazing-fast terminal AI assistant CLI, as a first-class utility. Install it with:
+
+```bash
+karnel install utils --herdr
+```
+
+Why it's great:
+- **Checksum-verified** download from the official Herdr release manifest (`https://herdr.dev/latest.json`).
+- **Atomic, safe install** into `$PREFIX/bin/herdr` with a Karnel ownership marker — so `karnel uninstall utils --herdr` is clean and never touches files it didn't manage.
+- Pairs perfectly with the 45+ other AI agents Karnel manages.
+
+> Open its docs anytime with `karnel open herdr`.
+
 ---
 
 ## Installation
@@ -61,7 +78,7 @@ Core agent contributions by **devcorex**.
 ### Via checksummed GitHub release (recommended)
 
 ```bash
-version=4.17.10
+version=4.17.11
 tmpdir=$(mktemp -d) && trap 'rm -rf "$tmpdir"' EXIT
 base="https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/v$version"
 curl -fsSL "$base/karnel-termux-install.sh" -o "$tmpdir/karnel-termux-install.sh"
@@ -106,6 +123,7 @@ aliases, or options; use `karnel help` and the CLI reference for the full set.
 | `karnel update <module>` | Update modules or karnel |
 | `karnel uninstall <module>` | Remove installed modules |
 | `karnel reinstall <module>` | Reinstall modules |
+| `karnel upgrade` | Upgrade the framework (self-update) |
 | `karnel doctor termux` | Diagnose the Termux environment (30+ sections) |
 | `karnel doctor code` | Detect project ecosystems and run code checks |
 | `karnel doctor robin` | Diagnose Robin, Tor, dependencies, and local UI |
@@ -152,7 +170,7 @@ aliases, or options; use `karnel help` and the CLI reference for the full set.
 karnel install ai --keelcode
 
 # Install the SuperFile terminal file manager
-karnel install utils --superfile
+karnel install utils --superfile --herdr
 ```
 
 Both tools support `update`, `reinstall`, and `uninstall` with the same module and flag.
@@ -343,7 +361,7 @@ karnel doctor termux --quick         # Run essential system/package checks only
 karnel doctor termux --fix           # Apply queued fixes without group confirmation
 
 karnel doctor code                   # Quick project analysis
-karnel doctor code --standard .      # Add security, deps, coverage and complexity
+karnel doctor code --standard .      # Add security, deps, dead-code and complexity
 karnel doctor code --deep --json .   # All 76 definitions as standalone JSON
 karnel doctor code --fix .           # Apply fixes classified as safe
 karnel doctor robin                  # Robin/Tor/dependency diagnostics
@@ -430,7 +448,7 @@ Microphone -> termux-speech-to-text -> editor (edit) -> clipboard -> AI agent
 ### Requirements
 
 - Termux:API: `pkg install termux-api`
-- App Termux:API: https://karneltermux.vercel.app/termux/api
+- App Termux:API: https://israelmarques1024-dotcom.github.io/karnel-termux/termux/api
 - Editor (optional): `karnel install editor`; otherwise use `--raw` or the automatic raw fallback
 
 ---
@@ -574,7 +592,7 @@ karnel/
 │   │   ├── ui/        # 4 UI components
 │   │   ├── auto/      # 1 automation tool
 │   │   ├── network/   # 2 network tools
-│   │   ├── utils/     # 12 utility tools
+│   │   ├── utils/     # 13 utility tools
 │   │   ├── games/     # 6 games
 │   │   ├── security/  # 30 security tools
 │   │   └── deploy/    # 4 deploy CLIs

package/docs/ARCHITECTURE/index.md

@@ -45,7 +45,7 @@ karnel-termux/
 │   │   ├── deploy/             # 4 deploy CLIs
 │   │   ├── games/              # 6 games
 │   │   ├── network/            # 2 network tools (dark, dedsec-network)
-│   │   ├── utils/              # 12 utility tools (fconv, notes, zork, SuperFile, etc.)
+│   │   ├── utils/              # 13 utility tools (fconv, notes, zork, SuperFile, herdr, etc.)
 │   │   ├── security/           # 30 security tools
 │   │   ├── voice/              # Speech-to-agent via Termux:API
 │   │   ├── plugins/            # Built-in plugin manager

package/docs/CHANGELOG.md

@@ -6,6 +6,32 @@ layout: base
 
 # Documentation Changelog
 
+## 4.17.13
+
+- Fixed the shell completion catalog (`scripts/completion.bash` / `completion.zsh`) to include the `herdr` utils tool, satisfying the `completion-catalog` CI gate.
+
+## 4.17.12
+
+- Generated real per-module documentation pages under `/karnel/<module>/` (all 17 modules: ai, auto, db, deploy, dev, editor, games, lang, network, npm, osint, plugin, security, shell, ui, utils, voice).
+- `karnel open <module>` now opens the in-site page (`/karnel/<module>/`) instead of the GitHub source; added a dedicated `herdr` open target that opens the utils page.
+- Featured **Herdr** prominently in the README and on the site landing page, with a `karnel install utils --herdr` callout.
+- Added `karnel/tools/utils/herdr/README.md` so `karnel show utils --herdr` renders proper documentation.
+- Site/CLI audit: fixed the stale "12 scripts" utils summary in the CLI reference (now lists all 13 tools including Herdr).
+
+## 4.17.11
+
+- Added the **Herdr** CLI to the `utils` module (`karnel install utils --herdr`), with checksum-verified download, atomic install, and Karnel ownership markers.
+- Critical runtime fixes:
+  - `cursor-cli`, `hermes-agent` and the `doctor` psutil patch now extract archives with the guarded `safe_extract_tar` (path-traversal/symlink protection).
+  - `pg schedule` now exports `PATH`/`PREFIX` in the cron job and logs failures instead of discarding output.
+  - `pg restore` uses `--single-transaction` and surfaces errors instead of silently retrying.
+  - `doctor --fix` no longer auto-applies destructive fixes (install-class, cache wipes, mass symlink deletion) without explicit confirmation; non-interactive sessions skip them (fail-closed).
+  - `doctor code --fix` now snapshots each rewritten file to `<file>.karnel-bak` before applying in-place formatters.
+  - `_fix_broken_symlinks` only removes broken symlinks that point into Karnel-managed paths.
+  - `karnel upgrade` no longer triggers a concurrent update check.
+  - `shell.sh` temp directory falls back to `KARNEL_CACHE` instead of `/tmp`.
+- Website/documentation overhaul: `karnel open` now resolves to real GitHub source URLs (no more 404s), canonical site URL unified to GitHub Pages, utility-tool count corrected to 13 (Herdr added), cloud-backup docs corrected to rclone, added `karnel upgrade` to the command table, and added favicon/SEO meta + Troubleshooting nav.
+
 ## 4.17.10
 
 - Round 10 security/correctness hardening (23 distinct fixes):

package/docs/_config.yml

@@ -6,8 +6,6 @@ author: Israel Marques
 lang: en-US
 theme: jekyll-theme-cayman
 markdown: kramdown
-logo: /assets/images/karnel-logo.png
-custom_css: /karnel-termux/assets/css/style.css
 baseurl: /karnel-termux
 show_downloads: false
 exclude:

package/docs/_layouts/base.html

@@ -2,6 +2,12 @@
 layout: default
 ---
 
+<link rel="icon" href="{{ '/assets/images/karnel-logo.png' | relative_url }}">
+<meta name="description" content="Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command.">
+<meta property="og:title" content="Karnel Termux">
+<meta property="og:description" content="Modular Dev Environment for Termux.">
+<meta property="og:type" content="website">
+
 <nav class="site-nav" aria-label="Documentation">
   <a href="{{ '/' | relative_url }}">Docs</a>
   <a href="{{ '/cli/' | relative_url }}">CLI</a>

package/docs/cli/index.md

@@ -39,7 +39,7 @@ karnel install <module> --tool1 --tool2  # Install specific tools only
 | `deploy`  | Vercel, Railway, Netlify, Supabase CLIs |
 | `games`   | Buzz, CTF God, Detective, Tamagotchi, Arcade, Pet Friends |
 | `network` | Dark Web OSINT, DedSec Network Toolkit |
-| `utils`   | fconv, filecheck, notes, qrcode, SuperFile, zork, httptmux (12 scripts) |
+| `utils`   | fconv, filecheck, websites, notes, treex, passman, applaunch, splash, httptmux, zork, qrcode, superfile, herdr (13 scripts) |
 | `osint`   | Robin v2.8 — dark web OSINT via Tor + LLM |
 | `voice`   | Speech-to-agent via Termux:API |
 | `security`| Nmap, Hydra, SQLMap, Metasploit, and 26 other tools |
@@ -61,7 +61,7 @@ karnel install <module> --tool1 --tool2  # Install specific tools only
 | `deploy`  | `--vercel`, `--railway`, `--netlify`, `--supabase` |
 | `games`   | `--buzz`, `--ctfgod`, `--detective`, `--pet-friends`, `--tamagotchi`, `--arcade` |
 | `network` | `--dark`, `--dedsec-network` |
-| `utils`   | `--fconv`, `--filecheck`, `--websites`, `--notes`, `--treex`, `--passman`, `--applaunch`, `--splash`, `--httptmux`, `--zork`, `--qrcode`, `--superfile` |
+| `utils`   | `--fconv`, `--filecheck`, `--websites`, `--notes`, `--treex`, `--passman`, `--applaunch`, `--splash`, `--httptmux`, `--zork`, `--qrcode`, `--superfile`, `--herdr` |
 | `security`| Run `karnel list security` for the 30 supported tool flags |
 
 ```bash
@@ -152,7 +152,7 @@ binary/command name, and current install status.
 | `deploy`  | 4 deploy CLIs |
 | `games`   | 6 games |
 | `network` | 2 network tools |
-| `utils`   | 12 utility scripts |
+| `utils`   | 13 utility scripts |
 | `osint`   | Robin OSINT |
 | `voice`   | Voice commands |
 | `security`| 30 security tools |
@@ -288,7 +288,7 @@ Karnel, AI commands, shell config, processes, networking.
 
 ```bash
 karnel doctor code                              # Quick registry set (default)
-karnel doctor code --standard /path/to/project   # + security, deps, coverage
+karnel doctor code --standard /path/to/project   # + security, deps, dead-code
 karnel doctor code --deep --json /path/to/project # All 76 definitions
 karnel doctor code --fix /path/to/project        # Apply safe fixes
 ```
@@ -766,7 +766,7 @@ contain credentials. Protect local and cloud copies as sensitive plaintext data.
 
 | Flag | Description |
 |------|-------------|
-| `--cloud` | Legacy plaintext upload; requires explicit `KARNEL_ALLOW_PLAINTEXT_CLOUD_BACKUP=1` acknowledgement |
+| `--cloud` | Upload to a configured rclone remote named `karnel` (e.g. Google Drive); archives are unencrypted at rest, so the `KARNEL_ALLOW_PLAINTEXT_CLOUD_BACKUP=1` acknowledgement is required |
 | `snapshot <name>` | Create a timestamped named snapshot using the same contents and secret filter as a full backup; names accept 1-64 letters, numbers, dots, underscores, or hyphens |
 | `list` / `ls` | List full backups and snapshots |
 | `info` / `show [file]` | Show a backup's contents (latest if omitted) |
@@ -817,7 +817,7 @@ Karnel if `apt-get` changes package state before returning an error.
 | Argument | Description |
 |----------|-------------|
 | `<file>` | Path to a specific backup file |
-| `--cloud` | Legacy unauthenticated cloud restore; requires `KARNEL_ALLOW_UNAUTHENTICATED_CLOUD_RESTORE=1` |
+| `--cloud` | Restore from the rclone remote named `karnel`; a remote can replace both archive and checksum, so `KARNEL_ALLOW_UNAUTHENTICATED_CLOUD_RESTORE=1` is required to trust it |
 | `--list`, `-l` | List available full backups and snapshots |
 | `--help`, `-h` | Show help |
 

package/docs/index.md

@@ -13,17 +13,25 @@ layout: base
 Karnel Termux transforms your Android device into a complete development workstation.
 With a single CLI (`karnel`), you can install and manage 45 AI tools, 3 editors,
 8 languages, 5 databases, 22 dev tools, 11 npm packages, 10 shell plugins,
-4 UI components, 4 deploy CLIs, 6 games, 2 network tools, 12 utility tools,
+4 UI components, 4 deploy CLIs, 6 games, 2 network tools, 13 utility tools,
 30 security tools, 1 automation tool, responsible OSINT, a second brain,
 voice commands, and reviewed plugins — all from modules: `ai`, `auto`, `db`,
 `deploy`, `dev`, `editor`, `games`, `lang`, `network`, `npm`, `osint`,
 `security`, `shell`, `ui`, `utils`, `voice`, `plugin`.
 
+## 🌟 Featured: Herdr
+
+Karnel now ships **[Herdr](https://herdr.dev)**, a terminal AI assistant CLI, as a managed utility.
+Install it with `karnel install utils --herdr` — the binary is checksum-verified from the official
+release manifest and tracked with Karnel ownership markers, so `karnel uninstall utils --herdr` is clean.
+Open its docs with `karnel open herdr`.
+
 ## Sections
 
 <div class="karnel-links">
   <a href="./cli/">CLI Commands — full reference for every <code>karnel</code> subcommand</a>
   <a href="./doctor/">Doctor System — environment checks and the code-analysis engine</a>
+  <a href="./troubleshooting/">Troubleshooting — common issues and fixes</a>
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux/blob/main/karnel/tools/osint/robin/README.md">Robin OSINT — responsible use, lifecycle, data locations</a>
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux/blob/main/karnel/tools/network/dark/README.md">Network Tools — dark, dedsec-network</a>
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux/blob/main/karnel/tools/ai/keelcode/README.md">KeelCode — hosted coding-agent CLI</a>

package/docs/karnel/ai/index.md

@@ -0,0 +1,17 @@
+---
+title: Ai module
+permalink: /karnel/ai/
+layout: base
+---
+
+# Ai module
+
+AI coding agents and assistants (Claude Code, Codex, Cline, Goose, and many more).
+## Install
+
+| `ai`      | `--qwen-code`, `--gemini-cli`, `--claude-code`, `--mistral-vibe`, `--openclaude`, `--openclaw`, `--ollama`, `--codex`, `--opencode`, `--mimocode`, `--engram`, `--codegraph`, `--pi`, `--antigravity-cli`, `--minimax-cli`, `--gentle-ai`, `--gga`, `--hermes-agent`, `--kimi-code`, `--command-code`, `--codebuff`, `--freebuff`, `--kilocode-cli`, `--kiro`, `--crush`, `--cline`, `--odysseus`, `--kimchi-code`, `--omni-route`, `--ctx7`, `--openspec`, `--supercode-cli`, `--puter`, `--keelcode`, `--copilot-termux`, `--qoder`, `--ampcode`, `--cursor-cli`, `--oh-my-pi`, `--goose`, `--droid`, `--cactus`, `--cactus-needle`, `--walkie`, `--hugging-face` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#ai) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/ai.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/auto/index.md

@@ -0,0 +1,17 @@
+---
+title: Auto module
+permalink: /karnel/auto/
+layout: base
+---
+
+# Auto module
+
+Automation and workflow tooling (n8n).
+## Install
+
+| `auto`    | `--n8n` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#auto) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/auto.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/db/index.md

@@ -0,0 +1,17 @@
+---
+title: Db module
+permalink: /karnel/db/
+layout: base
+---
+
+# Db module
+
+Databases such as PostgreSQL, MongoDB, Redis and companions.
+## Install
+
+| `db`      | `--postgresql`, `--mariadb`, `--sqlite`, `--mongodb`, `--redis` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#db) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/db.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/deploy/index.md

@@ -0,0 +1,17 @@
+---
+title: Deploy module
+permalink: /karnel/deploy/
+layout: base
+---
+
+# Deploy module
+
+Deploy CLIs (Railway, Netlify, Vercel, Supabase).
+## Install
+
+| `deploy`  | `--vercel`, `--railway`, `--netlify`, `--supabase` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#deploy) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/deploy.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/dev/index.md

@@ -0,0 +1,17 @@
+---
+title: Dev module
+permalink: /karnel/dev/
+layout: base
+---
+
+# Dev module
+
+General development utilities (fzf, bat, make, proot-distro, tmux, and more).
+## Install
+
+| `dev`     | `--gh`, `--wget`, `--curl`, `--lsd`, `--bat`, `--proot`, `--ncurses`, `--tmate`, `--openssh`, `--tmux`, `--cloudflared`, `--translate`, `--html2text`, `--jq`, `--bc`, `--tree`, `--fzf`, `--imagemagick`, `--shfmt`, `--make`, `--udocker`, `--snyk` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#dev) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/dev.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/editor/index.md

@@ -0,0 +1,17 @@
+---
+title: Editor module
+permalink: /karnel/editor/
+layout: base
+---
+
+# Editor module
+
+Terminal and browser-based editors (code-server, Neovim, and more).
+## Install
+
+| `editor`  | `--code-server`, `--neovim`, `--nvchad` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#editor) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/editor.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/games/index.md

@@ -0,0 +1,17 @@
+---
+title: Games module
+permalink: /karnel/games/
+layout: base
+---
+
+# Games module
+
+Terminal games to relax between sessions.
+## Install
+
+| `games`   | `--buzz`, `--ctfgod`, `--detective`, `--pet-friends`, `--tamagotchi`, `--arcade` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#games) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/games.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/lang/index.md

@@ -0,0 +1,17 @@
+---
+title: Lang module
+permalink: /karnel/lang/
+layout: base
+---
+
+# Lang module
+
+Programming-language runtimes (Python, Node.js, Rust, Go, and more).
+## Install
+
+| `lang`    | `--bun`, `--nodejs`, `--python`, `--perl`, `--php`, `--rust`, `--clang`, `--golang` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#lang) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/lang.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/network/index.md

@@ -0,0 +1,17 @@
+---
+title: Network module
+permalink: /karnel/network/
+layout: base
+---
+
+# Network module
+
+Network utilities (dark, dedsec-network).
+## Install
+
+| `network` | `--dark`, `--dedsec-network` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#network) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/network.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/npm/index.md

@@ -0,0 +1,17 @@
+---
+title: Npm module
+permalink: /karnel/npm/
+layout: base
+---
+
+# Npm module
+
+Node.js packages and JavaScript tooling.
+## Install
+
+| `npm`     | `--typescript`, `--nestjs`, `--prettier`, `--live-server`, `--localtunnel`, `--vercel`, `--markserv`, `--psqlformat`, `--ncu`, `--ngrok`, `--turbopack` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#npm) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/npm.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/osint/index.md

@@ -0,0 +1,17 @@
+---
+title: Osint module
+permalink: /karnel/osint/
+layout: base
+---
+
+# Osint module
+
+OSINT tooling, centered on Robin.
+## Install
+
+| `osint`   | Robin OSINT |
+
+See the [CLI reference]({ '/cli/' | relative_url }#osint) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/osint.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/plugin/index.md

@@ -0,0 +1,17 @@
+---
+title: Plugin module
+permalink: /karnel/plugin/
+layout: base
+---
+
+# Plugin module
+
+The plugin system and manager.
+## Install
+
+| `plugin`         | Plugin system |
+
+See the [CLI reference]({ '/cli/' | relative_url }#plugin) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/plugin.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/security/index.md

@@ -0,0 +1,17 @@
+---
+title: Security module
+permalink: /karnel/security/
+layout: base
+---
+
+# Security module
+
+Security and pentest tooling (30+ tools).
+## Install
+
+| `security`       | Security tools |
+
+See the [CLI reference]({ '/cli/' | relative_url }#security) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/security.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/shell/index.md

@@ -0,0 +1,17 @@
+---
+title: Shell module
+permalink: /karnel/shell/
+layout: base
+---
+
+# Shell module
+
+Shell enhancements (ZSH, Oh My Zsh, zoxide).
+## Install
+
+| `shell`   | `--powerlevel10k`, `--zsh-defer`, `--zsh-autosuggestions`, `--zsh-syntax-highlighting`, `--history-substring`, `--zsh-completions`, `--fzf-tab`, `--you-should-use`, `--zsh-autopair`, `--better-npm` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#shell) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/shell.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/ui/index.md

@@ -0,0 +1,17 @@
+---
+title: Ui module
+permalink: /karnel/ui/
+layout: base
+---
+
+# Ui module
+
+Termux UI components.
+## Install
+
+| `ui`      | `--font`, `--extra-keys`, `--cursor`, `--banner` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#ui) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/ui.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/utils/index.md

@@ -0,0 +1,21 @@
+---
+title: Utils module
+permalink: /karnel/utils/
+layout: base
+---
+
+# Utils module
+
+Utility scripts (converters, notes, QR codes, and more).
+> **🌟 Herdr** — Karnel now ships the [Herdr](https://herdr.dev) terminal AI assistant CLI.
+Install it with `karnel install utils --herdr`. The binary is checksum-verified, installed atomically,
+and tracked with Karnel ownership markers so `karnel uninstall utils --herdr` is clean.
+
+## Install
+
+| `utils`   | `--fconv`, `--filecheck`, `--websites`, `--notes`, `--treex`, `--passman`, `--applaunch`, `--splash`, `--httptmux`, `--zork`, `--qrcode`, `--superfile`, `--herdr` |
+
+See the [CLI reference]({ '/cli/' | relative_url }#utils) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/utils.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/docs/karnel/voice/index.md

@@ -0,0 +1,17 @@
+---
+title: Voice module
+permalink: /karnel/voice/
+layout: base
+---
+
+# Voice module
+
+Voice commands for AI agents.
+## Install
+
+| `voice`          | Voice command |
+
+See the [CLI reference]({ '/cli/' | relative_url }#voice) for the full command list, or the
+[source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/voice.sh).
+
+[← Back to docs]({ '/' | relative_url })

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-ef2964062663afea85983ccb2043d0a8ab6e115e
+3d9d862c0be40df2c3f17648f56bf83ef74507b7

package/karnel/bin/karnel

@@ -119,7 +119,7 @@ show_update_notification() {
   fi
 }
 
-if [[ "${KARNEL_READ_ONLY:-0}" != "1" ]] && [[ "${1:-}" != "update" ]] && [[ "${1:-}" != "uninstall" ]] && [[ "${1:-}" != "reinstall" ]]; then
+if [[ "${KARNEL_READ_ONLY:-0}" != "1" ]] && [[ "${1:-}" != "update" ]] && [[ "${1:-}" != "uninstall" ]] && [[ "${1:-}" != "reinstall" ]] && [[ "${1:-}" != "upgrade" ]]; then
   check_for_updates
   import "@/utils/log"
   import "@/utils/colors"

package/karnel/cli/commands/doctor/code_exec.sh

@@ -126,6 +126,10 @@ _exec_apply_fix() {
   fi
 
   log_info "Applying fix: $tool ($lang)..."
+  # Snapshot the target before an in-place rewrite so the user can revert.
+  if [[ -n "$file" && -f "$file" && ! -e "$file.karnel-bak" ]]; then
+    cp -p "$file" "$file.karnel-bak" 2>/dev/null || true
+  fi
   local out rc
   if out=$(cd "$dir" && timeout 60 bash -c "$full_cmd" 2>&1); then
     rc=0

package/karnel/cli/commands/doctor/fixes.sh

@@ -3,6 +3,7 @@
 
 import "@/utils/log"
 import "@/utils/colors"
+import "@/utils/install"
 
 _fix_storage() {
   termux-setup-storage 2>/dev/null
@@ -207,7 +208,7 @@ _fix_psutil() {
   local tmp="$PREFIX/tmp/psutil_patch"
   mkdir -p "$tmp"
   pip download psutil==7.2.2 --no-binary :all: --no-deps -d "$tmp" 2>/dev/null || return 1
-  tar xzf "$tmp/psutil-7.2.2.tar.gz" -C "$tmp"
+  safe_extract_tar "$tmp/psutil-7.2.2.tar.gz" "$tmp" || return 1
   if grep -q 'LINUX = sys.platform.startswith("linux")' "$tmp/psutil-7.2.2/psutil/_common.py" 2>/dev/null; then
     sed -i 's/LINUX = sys.platform.startswith("linux")/LINUX = sys.platform.startswith(("linux", "android"))/' "$tmp/psutil-7.2.2/psutil/_common.py"
   else
@@ -248,7 +249,18 @@ _fix_npm_shebangs() {
 }
 
 _fix_broken_symlinks() {
-  find "$PREFIX/bin" -type l ! -exec test -e {} \; -delete 2>/dev/null
+  local link target
+  for link in "$PREFIX/bin"/*; do
+    [[ -L "$link" ]] || continue
+    [[ -e "$link" ]] && continue
+    target="$(readlink -f "$link" 2>/dev/null || true)"
+    # Only remove broken symlinks that point into Karnel-managed locations so we
+    # never delete unrelated third-party software from the user's environment.
+    if [[ "$target" == "$KARNEL_PATH"/* || "$target" == "$KARNEL_DATA"/* ||
+          "$target" == "$PREFIX/lib/node_modules"/* || "$target" == "$PREFIX/lib"/* ]]; then
+      rm -f "$link" 2>/dev/null || true
+    fi
+  done
   return 0
 }
 

package/karnel/cli/commands/doctor.sh

@@ -1413,20 +1413,45 @@ doctor_termux() {
     fi
     if [[ "$confirm" == "y" ]]; then
       echo
+      local -A DESTRUCTIVE_FIXES=(
+        [_fix_ai_install]=1
+        [_fix_proot_ubuntu]=1
+        [_fix_disk_cleanup]=1
+        [_fix_broken_symlinks]=1
+        [_fix_apt_cache]=1
+      )
       for ((i=0; i<${#fix_commands[@]}; i++)); do
         log_info "Fixing: ${fix_descriptions[$i]}..."
         local callback="${fix_callbacks[$i]:-}"
         local success=false
-
-        if [[ -n "$callback" ]] && type "$callback" &>/dev/null 2>&1; then
-          "$callback" && success=true
+        local apply_this="y"
+
+        # Destructive fixes are never auto-applied in --fix mode. In an
+        # interactive --fix session they require an explicit confirmation; in a
+        # non-interactive one they are skipped (fail-closed) to avoid wiping
+        # caches, reinstalling packages or deleting unrelated software.
+        if [[ -n "$callback" && -n "${DESTRUCTIVE_FIXES[$callback]:-}" ]]; then
+          if $FIX_MODE; then
+            if [[ -t 0 ]]; then
+              read_confirm "DANGEROUS: ${fix_descriptions[$i]}. Apply?" apply_this
+            else
+              log_warn "Skipping destructive fix (non-interactive): ${fix_descriptions[$i]}"
+              continue
+            fi
+          fi
         fi
 
-        if [[ "$success" == "true" ]]; then
-          ((fixed++))
-          log_success "Fixed: ${fix_descriptions[$i]}"
-        else
-          log_warn "Could not fix: ${fix_descriptions[$i]}"
+        if [[ "$apply_this" == "y" ]]; then
+          if [[ -n "$callback" ]] && type "$callback" &>/dev/null 2>&1; then
+            "$callback" && success=true
+          fi
+
+          if [[ "$success" == "true" ]]; then
+            ((fixed++))
+            log_success "Fixed: ${fix_descriptions[$i]}"
+          else
+            log_warn "Could not fix: ${fix_descriptions[$i]}"
+          fi
         fi
       done
       echo

package/karnel/cli/commands/open.sh

@@ -3,7 +3,7 @@
 import "@/utils/log"
 import "@/utils/colors"
 
-OPEN_BASE_URL="https://israelmarques1024-dotcom.github.io/karnel-termux"
+OPEN_DOCS="https://israelmarques1024-dotcom.github.io/karnel-termux"
 
 open_main() {
 	if [[ $# -eq 0 ]]; then
@@ -16,74 +16,30 @@ open_main() {
 
 	case "$target" in
 	karnel | help)
-		url="$OPEN_BASE_URL/karnel"
+		url="$OPEN_DOCS/"
 		;;
-	lang)
-		url="$OPEN_BASE_URL/karnel/lang"
-		;;
-	db)
-		url="$OPEN_BASE_URL/karnel/db"
-		;;
-	ai)
-		url="$OPEN_BASE_URL/karnel/ai"
-		;;
-	editor)
-		url="$OPEN_BASE_URL/karnel/editor"
-		;;
-	dev)
-		url="$OPEN_BASE_URL/karnel/dev"
-		;;
-	npm)
-		url="$OPEN_BASE_URL/karnel/npm"
-		;;
-	shell)
-		url="$OPEN_BASE_URL/karnel/shell"
-		;;
-	ui)
-		url="$OPEN_BASE_URL/karnel/ui"
-		;;
-	auto)
-		url="$OPEN_BASE_URL/karnel/auto"
-		;;
-	deploy)
-		url="$OPEN_BASE_URL/karnel/deploy"
+	herdr)
+		url="$OPEN_DOCS/karnel/utils"
 		;;
 	supabase)
-		url="$OPEN_BASE_URL/karnel/supabase"
+		url="$OPEN_DOCS/karnel/deploy"
+		;;
+	cleanup)
+		url="$OPEN_DOCS/cli"
 		;;
-  cleanup)
-    url="$OPEN_BASE_URL/karnel/cleanup"
-    ;;
-  network)
-    url="$OPEN_BASE_URL/karnel/network"
-    ;;
-  utils)
-    url="$OPEN_BASE_URL/karnel/utils"
-    ;;
-  games)
-    url="$OPEN_BASE_URL/karnel/games"
-    ;;
-  voice)
-    url="$OPEN_BASE_URL/karnel/voice"
-    ;;
-  plugin)
-    url="$OPEN_BASE_URL/karnel/plugin"
-    ;;
-  security)
-    url="$OPEN_BASE_URL/karnel/security"
-    ;;
-  osint|robin)
-    url="$OPEN_BASE_URL/karnel/osint"
-    ;;
-  --help | -h)
+	--help | -h)
 		open_help
 		return
 		;;
 	*)
-		log_error "Unknown target: $target"
-		echo
-		open_help
-		return 1
+		if [[ -f "$KARNEL_PATH/modules/$target.sh" ]]; then
+			url="$OPEN_DOCS/karnel/$target"
+		else
+			log_error "Unknown target: $target"
+			echo
+			open_help
+			return 1
+		fi
 		;;
 	esac
 
@@ -130,20 +86,21 @@ open_help() {
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "npm" "Node.js tools"
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "shell" "ZSH shell"
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "ui" "Termux UI"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "auto" "Automation tools"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "deploy" "Deploy CLIs"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "supabase" "Supabase CLI"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "games" "Games"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "cleanup" "Cache cleanup"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "network" "Network tools"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "utils" "Utility tools"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "voice" "Voice command"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "osint" "OSINT tools"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "plugin" "Plugin system"
-  printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "security" "Security tools"
-  echo
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "auto" "Automation tools"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "deploy" "Deploy CLIs"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "supabase" "Supabase CLI"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "games" "Games"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "cleanup" "Cache cleanup"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "network" "Network tools"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "utils" "Utility tools"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "voice" "Voice command"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "osint" "OSINT tools"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "plugin" "Plugin system"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "security" "Security tools"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "herdr" "Herdr terminal AI assistant"
+	echo
 	separator_section "Website"
 	echo
-	list_item "${D_CYAN}$OPEN_BASE_URL${NC}"
+	list_item "${D_CYAN}$OPEN_DOCS${NC}"
 	echo
 }

package/karnel/cli/commands/pg.sh

@@ -635,8 +635,11 @@ pg_restore_db() {
 			success=true
 		fi
 	else
-		if loading "Restoring database" pg_restore -d "$db_name" -c "$backup_file" 2>/dev/null || pg_restore -d "$db_name" "$backup_file" 2>/dev/null; then
+		local pg_log="$KARNEL_CACHE/pg-restore.log"
+		if loading "Restoring database" pg_restore -d "$db_name" -c --single-transaction "$backup_file" 2>>"$pg_log"; then
 			success=true
+		else
+			log_warn "pg_restore failed; details in: $pg_log"
 		fi
 	fi
 
@@ -736,7 +739,8 @@ pg_schedule() {
 
 		local escaped_db; printf -v escaped_db '%q' "$db_name"
 		local escaped_path; printf -v escaped_path '%q' "$KARNEL_PATH"
-		local job="$cron_expr KARNEL_PATH=$escaped_path $escaped_path/bin/karnel pg backup $escaped_db >/dev/null 2>&1"
+		local pg_log="$KARNEL_CACHE/pg-backup.log"
+		local job="$cron_expr PATH=\"$PREFIX/bin:/usr/bin:/bin\" PREFIX=\"$PREFIX\" KARNEL_PATH=$escaped_path $escaped_path/bin/karnel pg backup $escaped_db >>\"$pg_log\" 2>&1"
 		local tmpcron
 		tmpcron="$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-pg.XXXXXX")" || {
 			log_error "Failed to schedule backup for database '$db_name'"

package/karnel/modules/shell.sh

@@ -32,7 +32,7 @@ install_oh_my_zsh() (
 	echo
 
 	local temp_base temp_dir temp_file
-	temp_base="${TMPDIR:-${PREFIX:-/tmp}/tmp}"
+	temp_base="${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}"
 	mkdir -p "$temp_base" || return 1
 	temp_dir=$(mktemp -d "$temp_base/karnel-omz.XXXXXX") || {
 		log_error "Failed to create private Oh My Zsh temporary directory"

package/karnel/tools/ai/cursor-cli/install.sh

@@ -3,6 +3,7 @@
 import "@/utils/log"
 import "@/utils/colors"
 import "@/utils/version"
+import "@/utils/install"
 
 : "${KARNEL_CACHE:=${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
 : "${KARNEL_DATA:=${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}"
@@ -142,7 +143,7 @@ _download_cursor_binary_impl() {
     return 1
   fi
 
-  if ! tar -zxf "$staging_dir/$tarball" --strip-components=1 -C "$staging_dir" &>>"$LOG_FILE"; then
+  if ! safe_extract_tar "$staging_dir/$tarball" "$staging_dir" 1; then
     rm -rf "$staging_dir"
     log_error "Failed to extract Cursor CLI binary"
     return 1

package/karnel/tools/ai/hermes-agent/install.sh

@@ -41,7 +41,7 @@ _patch_psutil_for_termux() {
   local tmp
   tmp=$(mktemp -d "$KARNEL_CACHE/psutil_patch.XXXXXX") || return 1
   "$HERMES_VENV/bin/python" -m pip download psutil==7.2.2 --no-binary :all: --no-deps -d "$tmp" 2>/dev/null || { rm -rf "$tmp"; return 1; }
-  tar xzf "$tmp/psutil-7.2.2.tar.gz" -C "$tmp" || { rm -rf "$tmp"; return 1; }
+  safe_extract_tar "$tmp/psutil-7.2.2.tar.gz" "$tmp" || { rm -rf "$tmp"; return 1; }
   sed -i 's/LINUX = sys.platform.startswith("linux")/LINUX = sys.platform.startswith(("linux", "android"))/' "$tmp/psutil-7.2.2/psutil/_common.py" || { rm -rf "$tmp"; return 1; }
   "$HERMES_VENV/bin/python" -m pip install "$tmp/psutil-7.2.2" || { rm -rf "$tmp"; return 1; }
   rm -rf "$tmp"

package/karnel/tools/utils/all.sh

@@ -19,6 +19,7 @@ TOOLS_PACKAGES=(
   "zork"
   "qrcode"
   "superfile"
+  "herdr"
 )
 
 TOOLS_DISPLAY=(
@@ -34,6 +35,7 @@ TOOLS_DISPLAY=(
   "Zork (text adventure games I, II, III)"
   "QR Code (link-to-QR generator)"
   "SuperFile (terminal file manager)"
+  "Herdr (terminal AI assistant CLI)"
 )
 
 for _tool in "${TOOLS_PACKAGES[@]}"; do

package/karnel/tools/utils/herdr/README.md

@@ -0,0 +1,33 @@
+# Herdr — terminal AI assistant
+
+[Herdr](https://herdr.dev) is a fast terminal AI assistant CLI, distributed by the
+Herdr project and integrated into Karnel Termux as a managed utility.
+
+## Install
+
+```bash
+karnel install utils --herdr
+```
+
+The installer:
+- Resolves the latest release via the official manifest at `https://herdr.dev/latest.json`.
+- Verifies the SHA-256 checksum before extracting.
+- Installs atomically into `$PREFIX/bin/herdr` and writes a Karnel ownership marker
+  (`.karnel-wrapper-herdr`) so the binary is tracked.
+- Honors `TMPDIR` / `KARNEL_CACHE` (never hardcodes `/tmp`, which is broken on Termux).
+
+## Uninstall / Update
+
+```bash
+karnel uninstall utils --herdr   # clean removal, only the managed binary
+karnel update utils --herdr      # re-fetch and re-verify latest release
+```
+
+## Usage
+
+```bash
+herdr --help
+herdr --version
+```
+
+See https://herdr.dev for full documentation.

package/karnel/tools/utils/herdr/install.sh

@@ -0,0 +1,160 @@
+#!/usr/bin/env bash
+
+import "@/utils/log"
+
+HERDR_BIN="$PREFIX/bin/herdr"
+HERDR_DATA_DIR="$KARNEL_DATA/herdr"
+HERDR_MARKER="$HERDR_DATA_DIR/.karnel-managed"
+HERDR_WRAPPER_MARKER="$HERDR_DATA_DIR/.karnel-wrapper-herdr"
+HERDR_MANIFEST_URL="https://herdr.dev/latest.json"
+
+_herdr_binary_owned() {
+  [[ -f "$HERDR_WRAPPER_MARKER" && -f "$HERDR_BIN" ]] || return 1
+  [[ "$(sha256sum "$HERDR_BIN" 2>/dev/null)" == "$(<"$HERDR_WRAPPER_MARKER")" ]]
+}
+
+_herdr_verify_ownership() {
+  if [[ -e "$HERDR_DATA_DIR" && ! -f "$HERDR_MARKER" ]]; then
+    log_error "Refusing to replace unowned data directory: $HERDR_DATA_DIR"
+    return 1
+  fi
+  if [[ -e "$HERDR_BIN" ]] && ! _herdr_binary_owned; then
+    log_error "Refusing to replace unowned command: $HERDR_BIN"
+    return 1
+  fi
+}
+
+_herdr_detect_target() {
+  local os arch
+  os="$(uname -s | tr '[:upper:]' '[:lower:]')"
+  [[ "$os" == "linux" ]] || {
+    log_error "Herdr supports Linux/macOS; this system reports: $os"
+    return 1
+  }
+  arch="$(uname -m)"
+  case "$arch" in
+    aarch64 | arm64) arch="aarch64" ;;
+    x86_64 | amd64) arch="x86_64" ;;
+    *) log_error "Unsupported architecture for Herdr: $arch"; return 1 ;;
+  esac
+  printf 'linux-%s' "$arch"
+}
+
+_herdr_resolve() {
+  local target="$1" manifest tmpf rc
+  manifest="$(curl -fsSL --retry 3 --connect-timeout 10 --max-time 20 "$HERDR_MANIFEST_URL" 2>/dev/null)" || return 1
+  tmpf="$(mktemp "${KARNEL_CACHE}/.herdr-manifest.XXXXXX")" || return 1
+  printf '%s' "$manifest" >"$tmpf"
+  python3 -c '
+import sys, json
+with open(sys.argv[1]) as fh:
+    data = json.load(fh)
+target = sys.argv[2]
+assets = data.get("assets", {})
+sha = data.get("sha256", {})
+url = assets.get(target)
+digest = sha.get(target)
+version = data.get("version")
+if not url or not digest:
+    sys.exit(1)
+print(url)
+print(digest)
+print(version or "")
+' "$tmpf" "$target"
+  rc=$?
+  rm -f "$tmpf"
+  return $rc
+}
+
+_herdr_download_and_install() {
+  local target="$1" info url sha version tmp actual temporary_bin
+
+  info="$(_herdr_resolve "$target")" || {
+    log_error "Failed to resolve the Herdr release for $target"
+    return 1
+  }
+  url="$(printf '%s' "$info" | sed -n '1p')"
+  sha="$(printf '%s' "$info" | sed -n '2p')"
+  version="$(printf '%s' "$info" | sed -n '3p')"
+
+  if [[ ! "$sha" =~ ^[0-9a-fA-F]{64}$ ]]; then
+    log_error "Herdr release manifest did not include a valid SHA-256 for $target"
+    return 1
+  fi
+  sha="${sha,,}"
+
+  mkdir -p "$KARNEL_DATA" "$PREFIX/bin" "${KARNEL_CACHE}" || return 1
+  _herdr_verify_ownership || return 1
+
+  tmp="$(mktemp -d "${KARNEL_CACHE}/.herdr.XXXXXX")" || return 1
+  if ! curl -fsSL --retry 3 --connect-timeout 10 --max-time 120 "$url" -o "$tmp/herdr"; then
+    rm -rf "$tmp"
+    log_error "Failed to download Herdr from $url"
+    return 1
+  fi
+
+  actual="$(sha256sum "$tmp/herdr" 2>/dev/null | awk '{print $1}')"
+  if [[ "$actual" != "$sha" ]]; then
+    rm -rf "$tmp"
+    log_error "Herdr checksum verification failed (expected $sha, got $actual)"
+    return 1
+  fi
+
+  temporary_bin="$(mktemp "$PREFIX/bin/.herdr.XXXXXX")" || { rm -rf "$tmp"; return 1; }
+  if ! install -m 755 "$tmp/herdr" "$temporary_bin" || ! mv -f "$temporary_bin" "$HERDR_BIN"; then
+    rm -f "$temporary_bin"
+    rm -rf "$tmp"
+    log_error "Failed to install the Herdr binary"
+    return 1
+  fi
+
+  mkdir -p "$HERDR_DATA_DIR" || return 1
+  sha256sum "$HERDR_BIN" >"$HERDR_WRAPPER_MARKER" || return 1
+  : >"$HERDR_MARKER"
+  rm -rf "$tmp"
+}
+
+install_herdr() {
+  if command -v herdr &>/dev/null; then
+    log_info "Herdr is already installed"
+    return 2
+  fi
+
+  local target
+  target="$(_herdr_detect_target)" || return 1
+
+  log_info "Installing Herdr..."
+  _herdr_download_and_install "$target" || return 1
+  log_success "Herdr installed"
+}
+
+uninstall_herdr() {
+  if [[ ! -e "$HERDR_BIN" && ! -d "$HERDR_DATA_DIR" ]]; then
+    log_info "Herdr is not installed"
+    return 2
+  fi
+
+  if _herdr_binary_owned && ! rm -f "$HERDR_BIN"; then
+    log_error "Failed to remove the Herdr command"
+    return 1
+  fi
+  if [[ -f "$HERDR_MARKER" ]] && ! rm -rf "$HERDR_DATA_DIR"; then
+    log_error "Failed to uninstall Herdr"
+    return 1
+  fi
+  log_success "Herdr uninstalled"
+}
+
+update_herdr() {
+  local target
+  target="$(_herdr_detect_target)" || return 1
+
+  log_info "Updating Herdr..."
+  _herdr_download_and_install "$target" || return 1
+  log_success "Herdr updated"
+}
+
+reinstall_herdr() {
+  uninstall_herdr || [[ $? -eq 2 ]] || return 1
+  install_herdr
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.17.10",
+  "version": "4.17.13",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"
@@ -46,5 +46,5 @@
   "bugs": {
     "url": "https://github.com/israelmarques1024-dotcom/karnel-termux/issues"
   },
-  "homepage": "https://karneltermux.vercel.app"
+  "homepage": "https://israelmarques1024-dotcom.github.io/karnel-termux"
 }

package/scripts/completion.bash

@@ -20,7 +20,7 @@ _karnel_tool_flags() {
     security) tools="aircrack-ng amass binwalk burpsuite dirb dnsrecon enum4linux exiftool ffuf foremost gobuster hashcat hydra john masscan metasploit netcat nikto nmap smbclient sqlmap steghide subfinder tcpdump theharvester wafw00f whatweb whois wpscan zap" ;;
     shell) tools="powerlevel10k zsh-defer zsh-autosuggestions zsh-syntax-highlighting history-substring zsh-completions fzf-tab you-should-use zsh-autopair better-npm" ;;
     ui) tools="font extra-keys cursor banner" ;;
-    utils) tools="fconv filecheck websites notes treex passman applaunch splash httptmux zork qrcode superfile" ;;
+    utils) tools="fconv filecheck websites notes treex passman applaunch splash httptmux zork qrcode superfile herdr" ;;
   esac
 
   local flags=""

package/scripts/completion.zsh

@@ -82,7 +82,7 @@ _karnel_tool_flags() {
     security) tools="aircrack-ng amass binwalk burpsuite dirb dnsrecon enum4linux exiftool ffuf foremost gobuster hashcat hydra john masscan metasploit netcat nikto nmap smbclient sqlmap steghide subfinder tcpdump theharvester wafw00f whatweb whois wpscan zap" ;;
     shell) tools="powerlevel10k zsh-defer zsh-autosuggestions zsh-syntax-highlighting history-substring zsh-completions fzf-tab you-should-use zsh-autopair better-npm" ;;
     ui) tools="font extra-keys cursor banner" ;;
-    utils) tools="fconv filecheck websites notes treex passman applaunch splash httptmux zork qrcode superfile" ;;
+    utils) tools="fconv filecheck websites notes treex passman applaunch splash httptmux zork qrcode superfile herdr" ;;
   esac
 
   local -a flags=()