karnel-termux 4.17.21 → 4.17.23

package/karnel/tools/utils/filecheck/filecheck.py

@@ -1,4 +1,5 @@
 #!/data/data/com.termux/files/usr/bin/python3
+import os
 import sys
 import subprocess
 import hashlib

package/karnel/tools/utils/qrcode/qrcode.py

@@ -1,4 +1,5 @@
 #!/data/data/com.termux/files/usr/bin/python3
+import os
 import re
 import subprocess
 import sys

package/karnel/tools/utils/websites/websites.py

@@ -1,4 +1,5 @@
 #!/data/data/com.termux/files/usr/bin/python3
+import os
 import re
 import datetime
 

package/karnel/tools/voice/uninstall.sh

@@ -19,6 +19,7 @@ _uninstall_voice_tool() {
     fi
   else
     log_info "Termux:API is not installed"
+    rm -f "$marker"
   fi
   return 0
 }

package/karnel/utils/agent_actions.sh

@@ -551,11 +551,19 @@ _agent_cmd_is_readonly() {
 	# commands. Anything the write-gate flags, or any command not in this
 	# allowlist (ruby/php/lua/tclsh/expect/sbcl/...), is blocked — so PLAN
 	# mode can never modify the machine or run arbitrary code.
+	# Shell syntax makes a string-level allowlist unsafe: quoted command names,
+	# separators, substitutions and redirects can hide writes from the first token.
+	case "$1" in
+		*';'* | *'&'* | *'|'* | *"'"* | *'"'* | *'`'* | *'\'* | *'<'* | *'>'* | *'$'*) return 1 ;;
+	esac
 	_agent_cmd_is_write "$1" && return 1
 	local first
 	first=$(printf '%s\n' "$1" | sed 's/^[[:space:]]*//' | cut -d' ' -f1)
 	case "$first" in
 		ls | cat | head | tail | grep | rg | find | stat | wc | file | diff | sort | uniq | cut | tr | tree | du | df | which | type | echo | printf | jq | readlink | realpath | date | pwd | whoami | uname | sed)
+			if [[ " $1 " == *" -delete "* || " $1 " == *" -exec "* || " $1 " == *" -execdir "* || " $1 " == *" -ok "* || " $1 " == *" -okdir "* || " $1 " == *" -fprint "* || " $1 " == *" -fls "* || " $1 " == *" -i "* ]]; then
+				return 1
+			fi
 			return 0
 			;;
 		git)

package/karnel/utils/agent_llm.sh

@@ -50,10 +50,10 @@ agent_config_load() {
 	# Reject tampered config (defense-in-depth): numeric/boolean fields
 	# must match the expected shape or they are reset to safe defaults.
 	[[ "$AGENT_TEMPERATURE" =~ ^[0-9]+(\.[0-9]+)?$ ]] || AGENT_TEMPERATURE=0.3
-	[[ "$AGENT_MAX_TOKENS" =~ ^[0-9]+$ ]] || AGENT_MAX_TOKENS=2048
-	[[ "$AGENT_MAX_ITERATIONS" =~ ^[0-9]+$ ]] || AGENT_MAX_ITERATIONS=12
+	[[ "$AGENT_MAX_TOKENS" =~ ^[1-9][0-9]*$ ]] || AGENT_MAX_TOKENS=2048
+	[[ "$AGENT_MAX_ITERATIONS" =~ ^[1-9][0-9]*$ ]] || AGENT_MAX_ITERATIONS=12
 	[[ "$AGENT_CONFIRM_COMMANDS" =~ ^[01]$ ]] || AGENT_CONFIRM_COMMANDS=1
-	[[ "$AGENT_CONTEXT_WINDOW" =~ ^[0-9]+$ ]] || AGENT_CONTEXT_WINDOW=8192
+	[[ "$AGENT_CONTEXT_WINDOW" =~ ^[1-9][0-9]*$ ]] || AGENT_CONTEXT_WINDOW=8192
 }
 
 # ------------------------------------------------------------
@@ -89,16 +89,16 @@ agent_config_set() {
 		[[ "$value" =~ ^[0-9]+(\.[0-9]+)?$ ]] || { log_error "temperature must be a number (e.g. 0.3)"; return 1; }
 		AGENT_TEMPERATURE="$value" ;;
 	max_tokens | maxtokens)
-		[[ "$value" =~ ^[0-9]+$ ]] || { log_error "max_tokens must be a positive integer"; return 1; }
+		[[ "$value" =~ ^[1-9][0-9]*$ ]] || { log_error "max_tokens must be a positive integer"; return 1; }
 		AGENT_MAX_TOKENS="$value" ;;
 	iterations | max_iterations)
-		[[ "$value" =~ ^[0-9]+$ ]] || { log_error "iterations must be a positive integer"; return 1; }
+		[[ "$value" =~ ^[1-9][0-9]*$ ]] || { log_error "iterations must be a positive integer"; return 1; }
 		AGENT_MAX_ITERATIONS="$value" ;;
 	confirm_commands | confirm)
 		[[ "$value" =~ ^[01]$ ]] || { log_error "confirm_commands must be 0 or 1"; return 1; }
 		AGENT_CONFIRM_COMMANDS="$value" ;;
 	context_window | context)
-		[[ "$value" =~ ^[0-9]+$ ]] || { log_error "context_window must be a positive integer"; return 1; }
+		[[ "$value" =~ ^[1-9][0-9]*$ ]] || { log_error "context_window must be a positive integer"; return 1; }
 		AGENT_CONTEXT_WINDOW="$value" ;;
 	server_command | server) AGENT_SERVER_CMD="$value" ;;
 	workspace)
@@ -363,4 +363,4 @@ agent_history_ensure_system() {
 agent_history_drop_system() {
 	local history="$1"
 	echo "$history" | jq -c '[.[] | select(.role != "system")]'
-}
+}

package/karnel/utils/downloaded-python.sh

@@ -40,7 +40,7 @@ _downloaded_python_install() {
     curl -fsSL "$download_url" -o "$staged_payload" || commit_failed=1
   fi
   if (( commit_failed != 0 )) || ! sed -i "1s|.*|#!$python3_path|" "$staged_payload" ||
-    ! chmod +x "$staged_payload" || ! sha256sum "$staged_payload" >"$staged_marker" ||
+    ! chmod 755 "$staged_payload" || ! sha256sum "$staged_payload" >"$staged_marker" ||
     ! ln -s "$payload" "$staged_link"; then
     rm -rf "$tool_staging" "$link_staging"
     return 1

package/karnel/utils/npm-shebang.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+# Shared npm shebang repair for Termux.
+# Rewrites `#!/usr/bin/env <interp>` shebangs of npm-installed bins to the
+# absolute Termux interpreter path. Safe to call on any bin name.
+
+_fix_npm_shebang() {
+  local bin_name="$1"
+  local bin_path="$PREFIX/bin/$bin_name"
+  [ ! -f "$bin_path" ] && [ ! -L "$bin_path" ] && return 0
+
+  local real_path
+  real_path=$(readlink -f "$bin_path" 2>/dev/null || echo "$bin_path")
+  [ ! -f "$real_path" ] && return 0
+
+  local shebang
+  shebang=$(head -1 "$real_path")
+
+  case "$shebang" in
+    "#!/usr/bin/env node"|"#!/data/data/com.termux/files/usr/bin/env node"|"#!$PREFIX/bin/env node")
+      sed -i "1s|.*|#!$PREFIX/bin/node|" "$real_path" || return 1
+      log_info "Fixed shebang for $bin_name: $shebang → $PREFIX/bin/node"
+      ;;
+    "#!/usr/bin/env bash"|"#!/data/data/com.termux/files/usr/bin/env bash"|"#!$PREFIX/bin/env bash")
+      sed -i "1s|.*|#!$PREFIX/bin/bash|" "$real_path" || return 1
+      log_info "Fixed shebang for $bin_name: $shebang → $PREFIX/bin/bash"
+      ;;
+  esac
+  return 0
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.17.21",
+  "version": "4.17.23",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"