karnel-termux 4.17.13 → 4.17.20

package/docs/karnel/db/index.md

@@ -11,7 +11,7 @@ Databases such as PostgreSQL, MongoDB, Redis and companions.
 
 | `db`      | `--postgresql`, `--mariadb`, `--sqlite`, `--mongodb`, `--redis` |
 
-See the [CLI reference]({ '/cli/' | relative_url }#db) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#db) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/db.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/deploy/index.md

@@ -11,7 +11,7 @@ Deploy CLIs (Railway, Netlify, Vercel, Supabase).
 
 | `deploy`  | `--vercel`, `--railway`, `--netlify`, `--supabase` |
 
-See the [CLI reference]({ '/cli/' | relative_url }#deploy) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#deploy) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/deploy.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/dev/index.md

@@ -6,12 +6,12 @@ layout: base
 
 # Dev module
 
-General development utilities (fzf, bat, make, proot-distro, tmux, and more).
+General development utilities (fzf, bat, make, proot, tmux, and more).
 ## Install
 
 | `dev`     | `--gh`, `--wget`, `--curl`, `--lsd`, `--bat`, `--proot`, `--ncurses`, `--tmate`, `--openssh`, `--tmux`, `--cloudflared`, `--translate`, `--html2text`, `--jq`, `--bc`, `--tree`, `--fzf`, `--imagemagick`, `--shfmt`, `--make`, `--udocker`, `--snyk` |
 
-See the [CLI reference]({ '/cli/' | relative_url }#dev) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#dev) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/dev.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/editor/index.md

@@ -11,7 +11,7 @@ Terminal and browser-based editors (code-server, Neovim, and more).
 
 | `editor`  | `--code-server`, `--neovim`, `--nvchad` |
 
-See the [CLI reference]({ '/cli/' | relative_url }#editor) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#editor) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/editor.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/games/index.md

@@ -11,7 +11,7 @@ Terminal games to relax between sessions.
 
 | `games`   | `--buzz`, `--ctfgod`, `--detective`, `--pet-friends`, `--tamagotchi`, `--arcade` |
 
-See the [CLI reference]({ '/cli/' | relative_url }#games) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#games) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/games.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/lang/index.md

@@ -11,7 +11,7 @@ Programming-language runtimes (Python, Node.js, Rust, Go, and more).
 
 | `lang`    | `--bun`, `--nodejs`, `--python`, `--perl`, `--php`, `--rust`, `--clang`, `--golang` |
 
-See the [CLI reference]({ '/cli/' | relative_url }#lang) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#lang) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/lang.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/network/index.md

@@ -11,7 +11,7 @@ Network utilities (dark, dedsec-network).
 
 | `network` | `--dark`, `--dedsec-network` |
 
-See the [CLI reference]({ '/cli/' | relative_url }#network) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#network) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/network.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/npm/index.md

@@ -11,7 +11,7 @@ Node.js packages and JavaScript tooling.
 
 | `npm`     | `--typescript`, `--nestjs`, `--prettier`, `--live-server`, `--localtunnel`, `--vercel`, `--markserv`, `--psqlformat`, `--ncu`, `--ngrok`, `--turbopack` |
 
-See the [CLI reference]({ '/cli/' | relative_url }#npm) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#npm) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/npm.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/osint/index.md

@@ -11,7 +11,7 @@ OSINT tooling, centered on Robin.
 
 | `osint`   | Robin OSINT |
 
-See the [CLI reference]({ '/cli/' | relative_url }#osint) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#osint) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/osint.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/plugin/index.md

@@ -11,7 +11,7 @@ The plugin system and manager.
 
 | `plugin`         | Plugin system |
 
-See the [CLI reference]({ '/cli/' | relative_url }#plugin) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#plugin) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/plugin.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/security/index.md

@@ -6,12 +6,12 @@ layout: base
 
 # Security module
 
-Security and pentest tooling (30+ tools).
+Security and pentest tooling (30 tools).
 ## Install
 
 | `security`       | Security tools |
 
-See the [CLI reference]({ '/cli/' | relative_url }#security) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#security) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/security.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/shell/index.md

@@ -11,7 +11,7 @@ Shell enhancements (ZSH, Oh My Zsh, zoxide).
 
 | `shell`   | `--powerlevel10k`, `--zsh-defer`, `--zsh-autosuggestions`, `--zsh-syntax-highlighting`, `--history-substring`, `--zsh-completions`, `--fzf-tab`, `--you-should-use`, `--zsh-autopair`, `--better-npm` |
 
-See the [CLI reference]({ '/cli/' | relative_url }#shell) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#shell) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/shell.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/ui/index.md

@@ -11,7 +11,7 @@ Termux UI components.
 
 | `ui`      | `--font`, `--extra-keys`, `--cursor`, `--banner` |
 
-See the [CLI reference]({ '/cli/' | relative_url }#ui) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#ui) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/ui.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/utils/index.md

@@ -15,7 +15,7 @@ and tracked with Karnel ownership markers so `karnel uninstall utils --herdr` is
 
 | `utils`   | `--fconv`, `--filecheck`, `--websites`, `--notes`, `--treex`, `--passman`, `--applaunch`, `--splash`, `--httptmux`, `--zork`, `--qrcode`, `--superfile`, `--herdr` |
 
-See the [CLI reference]({ '/cli/' | relative_url }#utils) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#utils) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/utils.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/karnel/voice/index.md

@@ -11,7 +11,7 @@ Voice commands for AI agents.
 
 | `voice`          | Voice command |
 
-See the [CLI reference]({ '/cli/' | relative_url }#voice) for the full command list, or the
+See the [CLI reference]({{ '/cli/' | relative_url }}#voice) for the full command list, or the
 [source on GitHub](https://github.com/israelmarques1024-dotcom/karnel-termux/tree/main/karnel/modules/voice.sh).
 
-[← Back to docs]({ '/' | relative_url })
+[← Back to docs]({{ '/' | relative_url }}) · [CLI reference]({{ '/cli/' | relative_url }})

package/docs/troubleshooting/index.md

@@ -24,8 +24,10 @@ npm/pnpm installs.
 | `All update methods failed` | Every fallback failed. Check network, the Git checkout state, and npm connectivity. |
 | Update stays on the same version | Old releases (`v4.13.3`, `v4.13.4`) do not ship installer assets, so the curl path falls back to git. A release that includes the installer assets enables the verified curl path. |
 
-Logs: `$KARNEL_CACHE/install_dev.log` (GitHub/installer) and
-`$KARNEL_CACHE/install_npm.log` (npm).
+The updater prints its progress to the terminal only; it does not write log
+files. For module installs, `karnel install dev` logs to
+`$KARNEL_CACHE/install_dev.log` and `karnel install npm` logs to
+`$KARNEL_CACHE/install_npm.log`.
 
 ## npm publishing
 

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-3d9d862c0be40df2c3f17648f56bf83ef74507b7
+4d6f527bfdc17d468eee7881aca77083528e7961

package/karnel/cli/commands/backup.sh

@@ -61,7 +61,7 @@ backup_run() {
   echo
 
   local tmp archive_tmp checksum_tmp
-  tmp=$(mktemp -d) || { _backup_release_output; return 1; }
+  tmp=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-XXXXXX") || { _backup_release_output; return 1; }
   archive_tmp="$BACKUP_DIR/.$(basename "$file").$$.tmp"
   checksum_tmp="$archive_tmp.sha256"
   if ! _backup_collect_payload "$tmp"; then
@@ -130,7 +130,7 @@ backup_snapshot() {
   echo
 
   local tmp archive_tmp checksum_tmp checksum
-  tmp=$(mktemp -d) || { _backup_release_output; return 1; }
+  tmp=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-XXXXXX") || { _backup_release_output; return 1; }
   archive_tmp="$BACKUP_DIR/.$(basename "$file").$$.tmp"
   checksum_tmp="$archive_tmp.sha256"
   if ! _backup_collect_payload "$tmp" ||

package/karnel/cli/commands/brain.sh

@@ -142,7 +142,7 @@ _brain_update_related() {
 	if grep -q "^related:" "$tmp" 2>/dev/null; then
 		sed -i "s/^related: \[\(.*\)\]/related: [\1, $escaped]/" "$tmp"
 	else
-		sed -i "/^---$/a related: [$slug]" "$tmp"
+		sed -i "/^---$/a related: [$escaped]" "$tmp"
 	fi
 	tail -n +$((frontmatter_end)) "$file" >>"$tmp"
 	mv "$tmp" "$file"
@@ -230,7 +230,7 @@ _brain_editor() {
 	fi
 
 	local tmpfile
-	tmpfile=$(mktemp)
+	tmpfile=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-XXXXXX")
 
 	echo "# $title" >"$tmpfile"
 	echo >>"$tmpfile"
@@ -1466,7 +1466,7 @@ EOF
 
 	if command -v jq &>/dev/null; then
 		local temp
-		temp=$(mktemp)
+		temp=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-XXXXXX")
 		if [[ "$val" == "true" ]] || [[ "$val" == "false" ]]; then
 			jq --argjson v "$val" ".${key} = \$v" "$config_file" > "$temp" && mv "$temp" "$config_file"
 		elif [[ "$val" =~ ^[0-9]+$ ]]; then
@@ -1635,7 +1635,7 @@ EOF
 	echo
 
 	local ai_response_temp
-	ai_response_temp=$(mktemp)
+	ai_response_temp=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-XXXXXX")
 
 	if loading "Generating AI response" _run_ai_query "$ai_cmd" "$full_prompt" "$default_model" "$ai_response_temp"; then
 		echo

package/karnel/cli/commands/doctor/code_exec.sh

@@ -115,6 +115,11 @@ _exec_apply_fix() {
   local tool="$1" fix_cmd="$2" lang="$3" file="$4" dir="${5:-$PWD}"
   local full_cmd; full_cmd="$(_tool_command "$fix_cmd" "$file")"
 
+  # NOTE: fix/check commands come exclusively from the in-repo LANG_TOOLS
+  # registry (code_langs.sh); some legitimate fixes are multi-statement
+  # loops (e.g. Go gofmt) or contain pipes, so pattern-based "injection"
+  # guards here would refuse valid commands. Do not re-add one.
+
   if [[ "$fix_cmd" == *'{}'* && -z "$file" ]]; then
     log_warn "Cannot fix — no matching file found for $tool"
     return 1

package/karnel/cli/commands/env.sh

@@ -86,6 +86,12 @@ env_set() {
 
 	printf 'export %s=%q\n' "$key" "$value" >>"$rc_file"
 
+	# Secrets stored in a shell rc are world-readable by default; tighten the
+	# file's permissions so other local users cannot read them.
+	if [[ "$key" =~ (SECRET|TOKEN|KEY|PASSWORD|PASSWD|API_|ACCESS|PRIVATE|CREDENTIAL) ]]; then
+		chmod go-rwx "$rc_file" 2>/dev/null || true
+	fi
+
 	echo
 	log_success "Variable ${D_CYAN}${key}${D_GREEN} set in ${D_NC}$(basename "$rc_file")"
 	list_item "Run: ${D_CYAN}source $(basename "$rc_file")${D_NC} to apply, or restart your terminal"

package/karnel/cli/commands/ia.sh

@@ -22,7 +22,6 @@ ia_help() {
 	separator_section "Examples"
 	echo
 	printf "    ${D_CYAN}karnel ia sessions${NC}         # Show all AI sessions\n"
-	printf "    ${D_CYAN}karnel ia sessions --all${NC}   # Include agent names\n"
 	printf "    ${D_CYAN}karnel ia install omni-route${NC}  # Install omniRoute\n"
 	printf "    ${D_CYAN}karnel ia routes${NC}             # Show AI CLI routes\n"
 	printf "    ${D_CYAN}karnel list ai${NC}               # List installed AI tools\n"
@@ -31,7 +30,12 @@ ia_help() {
 
 # List all AI sessions from known tools
 ia_sessions() {
+	# $1 was historically `--all`; agent names are always shown now, so the
+	# flag is accepted for back-compat and ignored.
 	local show_all="${1:-0}"
+	if [[ "$show_all" == "--all" ]]; then
+		show_all=0
+	fi
 
 	mkdir -p "$IA_SESSIONS_DIR"
 
@@ -407,7 +411,7 @@ PY
 	# Persist all discovered sessions to IA_SESSIONS_DIR for history
 	local persist_file="$IA_SESSIONS_DIR/.all_sessions.json"
 	local tmp_persist
-	tmp_persist=$(mktemp)
+	tmp_persist=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-XXXXXX")
 	echo "[" > "$tmp_persist"
 	local first=1
 	for session in "${sessions[@]}"; do

package/karnel/cli/commands/init.sh

@@ -80,9 +80,8 @@ EOF
 	log_success "Created .prettierrc"
 
 	log_info "Creating karnel landing page..."
-	[[ -f "src/app/page.tsx" ]] && cat >src/app/page.tsx <<'EOF'
+[[ -f "src/app/page.tsx" ]] && cat >src/app/page.tsx <<'EOF'
 "use client"
-import { Button } from "@/components/ui/button"
 import { motion } from "framer-motion"
 import { Terminal, Code2, Rocket } from "lucide-react"
 import { Toaster } from "sonner"
@@ -113,9 +112,9 @@ export default function Home() {
             <div className="p-6 rounded-xl bg-slate-900/50 border border-slate-800"><Terminal className="w-12 h-12 text-pink-400 mb-4 mx-auto" /><h3 className="text-lg font-semibold text-white mb-2">Comunidad Activa</h3></div>
           </motion.div>
           <motion.div initial={{ opacity: 0, scale: 0.8 }} animate={{ opacity: 1, scale: 1 }} transition={{ delay: 0.7 }} className="w-full max-w-sm mx-auto">
-            <Button size="lg" onClick={() => window.open("mailto:israelmarques1024@gmail.com", "_blank")} className="w-full bg-gradient-to-r from-blue-500 to-purple-600 hover:from-blue-600 hover:to-purple-700 text-white px-8 py-6 text-lg font-semibold">
-              <Rocket className="w-5 h-5 mr-2" /> Contato: israelmarques1024@gmail.com
-            </Button>
+            <button type="button" onClick={() => window.open("mailto:israelmarques1024@gmail.com", "_blank")} className="w-full rounded-md bg-gradient-to-r from-blue-500 to-purple-600 px-8 py-6 text-lg font-semibold text-white hover:from-blue-600 hover:to-purple-700">
+               <Rocket className="w-5 h-5 mr-2" /> Contato: israelmarques1024@gmail.com
+            </button>
           </motion.div>
           <motion.p initial={{ opacity: 0 }} animate={{ opacity: 1 }} transition={{ delay: 0.8 }} className="mt-16 text-sm text-slate-600">Built with ❤️ using karnel tools</motion.p>
         </motion.div>
@@ -132,7 +131,7 @@ EOF
 			log_warn "jq not found — skipping package.json update"
 		else
 			local temp
-			temp=$(mktemp)
+			temp=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-XXXXXX")
 			jq '.scripts.dev = "next dev --webpack" | .scripts.build = "next build --webpack" | .scripts.start = "next start"' package.json > "$temp" && mv "$temp" package.json
 			log_success "Added --webpack flag to dev and build scripts"
 		fi
@@ -296,7 +295,7 @@ EOF
 }
 
 _install_react_deps() {
-	npm install axios lucide-react framer-motion sonner zod react-hook-form @hookform/resolvers @tanstack/react-query zustand tailwindcss &>"$LOG_FILE"
+	npm install axios lucide-react framer-motion sonner zod react-hook-form @hookform/resolvers @tanstack/react-query zustand tailwindcss clsx tailwind-merge &>"$LOG_FILE"
 	npm install -D prettier prettier-plugin-tailwindcss &>>"$LOG_FILE"
 }
 
@@ -431,8 +430,6 @@ EOF
 import "reflect-metadata";
 import { DataSource } from "typeorm";
 import { DATABASE_URL, NODE_ENV } from "@/config/env";
-import { ExampleEntity1 } from "@/entities/ExampleEntity1";
-import { ExampleEntity2 } from "@/entities/ExampleEntity2";
 
 const isDevelopment = NODE_ENV === "development";
 const isProduction = NODE_ENV === "production";
@@ -440,10 +437,10 @@ const isProduction = NODE_ENV === "production";
 export const AppDataSource = new DataSource({
   type: "postgres",
   url: DATABASE_URL,
-  ssl: isDevelopment ? false : { rejectUnauthorized: false },
+  ssl: isDevelopment ? false : { rejectUnauthorized: true },
   synchronize: isDevelopment,
   logging: isDevelopment ? ["query", "error"] : false,
-  entities: [ExampleEntity1, ExampleEntity2],
+  entities: [],
   migrations: isDevelopment
     ? [__dirname + "/migrations/*.ts"]
     : [__dirname + "/migrations/*.js"],
@@ -463,8 +460,6 @@ import morgan from "morgan";
 import cors from "cors";
 import cookieParser from "cookie-parser";
 import { FRONTEND_URL } from "@/config/env";
-import exampleRoutes1 from "@/routes/example1.routes";
-import exampleRoutes2 from "@/routes/example2.routes";
 
 const app = express();
 
@@ -497,10 +492,6 @@ app.use(express.json());
 // manejar cookies
 app.use(cookieParser());
 
-// endpoints
-app.use("/api/example1", exampleRoutes1);
-app.use("/api/example2", exampleRoutes2);
-
 export default app;
 EOF
 	log_success "Created src/app.ts"
@@ -533,7 +524,7 @@ EOF
 			log_warn "jq not found — skipping package.json update"
 		else
 		local temp
-		temp=$(mktemp)
+		temp=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-XXXXXX")
 		jq '.scripts += {
       "dev": "ts-node-dev --require tsconfig-paths/register --env-file=.env --respawn src/index.ts",
       "build": "tsc && tsc-alias -p tsconfig.json",
@@ -854,6 +845,12 @@ configure_go() {
 		go mod init "$mod_name" 2>/dev/null || go mod init project
 		log_success "Created go.mod"
 	fi
+	local go_module
+	go_module=$(awk '$1 == "module" { print $2; exit }' go.mod)
+	if [[ -z "$go_module" ]]; then
+		log_error "Unable to determine Go module name from go.mod"
+		return 1
+	fi
 
 	log_info "Creating folder structure..."
 	mkdir -p cmd/api internal/config internal/db internal/handlers internal/models scripts 2>/dev/null
@@ -888,14 +885,14 @@ EOF
 
 	# Create main.go based on framework
 	if [[ "$framework_choice" == "Gin" ]]; then
-		cat >cmd/api/main.go <<'EOF'
+		cat >cmd/api/main.go <<EOF
 package main
 
 import (
 	"fmt"
 	"net/http"
-	"project/internal/config"
-	"project/internal/handlers"
+	"$go_module/internal/config"
+	"$go_module/internal/handlers"
 	"github.com/gin-gonic/gin"
 )
 
@@ -917,13 +914,13 @@ func main() {
 }
 EOF
 	else
-		cat >cmd/api/main.go <<'EOF'
+		cat >cmd/api/main.go <<EOF
 package main
 
 import (
 	"fmt"
-	"project/internal/config"
-	"project/internal/handlers"
+	"$go_module/internal/config"
+	"$go_module/internal/handlers"
 	"github.com/gofiber/fiber/v2"
 )
 
@@ -1107,6 +1104,12 @@ configure_rust() {
 		done
 		log_success "Configured Cargo.toml"
 	fi
+	local rust_binary
+	rust_binary=$(awk -F '"' '/^name[[:space:]]*=/ { print $2; exit }' Cargo.toml)
+	if [[ -z "$rust_binary" ]]; then
+		log_error "Unable to determine Rust package name from Cargo.toml"
+		return 1
+	fi
 
 	# Create src/main.rs
 	mkdir -p src scripts 2>/dev/null
@@ -1197,7 +1200,7 @@ EOF
 	chmod +x scripts/run.sh
 
 	# Create Dockerfile
-	cat >Dockerfile <<'EOF'
+	cat >Dockerfile <<EOF
 FROM rust:1.70 AS builder
 WORKDIR /app
 COPY . .
@@ -1205,9 +1208,9 @@ RUN cargo build --release
 
 FROM debian:bullseye-slim
 WORKDIR /app
-COPY --from=builder /app/target/release/project .
+COPY --from=builder /app/target/release/$rust_binary .
 EXPOSE 3000
-CMD ["./project"]
+CMD ["./$rust_binary"]
 EOF
 	log_success "Created Dockerfile"
 
@@ -1230,6 +1233,15 @@ EOF
 	echo
 }
 
+_init_confirm_overwrite() {
+	local confirm
+	read_confirm "Karnel may overwrite existing project files. Continue?" confirm
+	if [[ "$confirm" != "y" ]]; then
+		log_warn "Cancelled"
+		return 1
+	fi
+}
+
 # ===== MAIN =====
 init_main() {
 	local template="$1"
@@ -1239,19 +1251,20 @@ init_main() {
 		init_help
 		return
 		;;
-	next | nextjs) configure_next ;;
-	react | vite) configure_react ;;
-	nest | nestjs) configure_nest ;;
-	express | exp) configure_express ;;
-	python | fastapi) configure_python ;;
-	go | gin) configure_go ;;
-	rust | axum) configure_rust ;;
+	next | nextjs) _init_confirm_overwrite || return 0; configure_next ;;
+	react | vite) _init_confirm_overwrite || return 0; configure_react ;;
+	nest | nestjs) _init_confirm_overwrite || return 0; configure_nest ;;
+	express | exp) _init_confirm_overwrite || return 0; configure_express ;;
+	python | fastapi) _init_confirm_overwrite || return 0; configure_python ;;
+	go | gin) _init_confirm_overwrite || return 0; configure_go ;;
+	rust | axum) _init_confirm_overwrite || return 0; configure_rust ;;
 	"")
 		local detected
 		detected=$(detect_project_type)
 		if [[ "$detected" != "unknown" ]]; then
 			log_info "Detected project type: $detected"
 			echo
+			_init_confirm_overwrite || return 0
 			case "$detected" in
 			next) configure_next ;;
 			react) configure_react ;;

package/karnel/cli/commands/list.sh

@@ -461,6 +461,7 @@ _list_utils() {
   table_row "Zork (text adventure)" "--zork" "zork" "$(_check_cmd "zork")"
   table_row "QR Code Generator" "--qrcode" "qrcode" "$(_check_cmd "qrcode")"
   table_row "SuperFile" "--superfile" "spf" "$(_check_cmd "spf")"
+  table_row "Herdr (AI assistant)" "--herdr" "herdr" "$(_check_cmd "herdr")"
   table_end
 
   echo

package/karnel/cli/commands/open.sh

@@ -21,6 +21,9 @@ open_main() {
 	herdr)
 		url="$OPEN_DOCS/karnel/utils"
 		;;
+	robin)
+		url="$OPEN_DOCS/karnel/osint"
+		;;
 	supabase)
 		url="$OPEN_DOCS/karnel/deploy"
 		;;
@@ -95,6 +98,7 @@ open_help() {
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "utils" "Utility tools"
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "voice" "Voice command"
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "osint" "OSINT tools"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "robin" "Robin OSINT service"
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "plugin" "Plugin system"
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "security" "Security tools"
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "herdr" "Herdr terminal AI assistant"

package/karnel/cli/commands/pg.sh

@@ -209,6 +209,7 @@ pg_stop() {
 		log_success "PostgreSQL stopped successfully"
 	else
 		log_warn "PostgreSQL may not be running or failed to stop"
+		return 1
 	fi
 
 	echo
@@ -230,11 +231,11 @@ pg_restart() {
 		pg_init || return 1
 		sleep 1
 	else
-		pg_stop
+		pg_stop || return 1
 		sleep 1
 	fi
 
-	pg_start
+	pg_start || return 1
 
 	echo
 	separator
@@ -466,7 +467,7 @@ _run_restore_cmd() {
 	local file_path="$2"
 	local _rs_ret=0
 	set -o pipefail
-	gunzip -c "$file_path" | pg_restore -d "$db_name" -c 2>/dev/null || _rs_ret=$?
+	gunzip -c "$file_path" | pg_restore -d "$db_name" -c 2>>"${KARNEL_CACHE:-$HOME/.cache/karnel}/karnel-pg.log" || _rs_ret=$?
 	set +o pipefail
 	return $_rs_ret
 }
@@ -755,8 +756,10 @@ pg_schedule() {
 			list_item "Ensure cron daemon is running (run: 'crond')"
 		else
 			log_error "Failed to schedule backup for database '$db_name'"
+			rm -f "$tmpcron"
+			return 1
 		fi
 		rm -f "$tmpcron"
 	fi
 	echo
-}
+}

package/karnel/cli/commands/restore.sh

@@ -114,10 +114,10 @@ restore_main() {
   log_success "Checksum verified"
 
   local tmp transaction
-  tmp=$(mktemp -d) || return 1
-  if ! tar -xzf "$file" -C "$tmp" --no-same-owner --no-same-permissions 2>/dev/null; then
+  tmp=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-XXXXXX") || return 1
+  if ! tar -xzf "$file" -C "$tmp" --no-same-owner --no-same-permissions 2>"$tmp/extract.err"; then
+    log_error "Failed to extract backup: $(cat "$tmp/extract.err" 2>/dev/null)"
     rm -rf "$tmp"
-    log_error "Failed to extract backup"
     return 1
   fi
   local pkgs="$tmp/metadata/packages.list"

package/karnel/cli/commands/search.sh

@@ -31,7 +31,7 @@ search_main() {
       local id name
       id=$(echo "$line" | cut -d: -f1 | tr -d '"' | xargs)
       name=$(echo "$line" | cut -d: -f2 | tr -d '"' | xargs)
-      if echo "$id $name" | grep -qi "$query"; then
+      if printf '%s\n' "$id $name" | grep -Fqi -- "$query"; then
         list_item "${D_CYAN}$mod${NC}: $name ($id)"
         any_found=true
       fi
@@ -51,7 +51,7 @@ search_main() {
       title=$(head -1 "$file" 2>/dev/null | sed 's/^# //')
       list_item "${D_CYAN}$(basename "$file")${NC}: ${title:-$file}"
       any_found=true
-    done < <(grep -ril "$query" "$KARNEL_DATA/brain" 2>/dev/null)
+    done < <(grep -rFil -- "$query" "$KARNEL_DATA/brain" 2>/dev/null)
     if ! $any_found; then
       log_info "No memories found matching '$query'"
     fi

package/karnel/cli/commands/supabase.sh

@@ -219,7 +219,10 @@ supabase_remote_status() {
     log_error "Supabase CLI not installed"
     return 1
   fi
-  supabase_safe status 2>/dev/null || log_warn "Unable to check Supabase status"
+  supabase_safe status 2>/dev/null || {
+    log_warn "Unable to check Supabase status"
+    return 1
+  }
 }
 
 supabase_link() {