karnel-termux 4.17.22 → 4.17.27

package/README.md

@@ -636,8 +636,9 @@ karnel update karnel     # Update the framework
 
 `karnel update` requires a target such as `karnel`, `ai`, or `security`.
 `karnel update karnel` first runs the official curl installer, then falls back to
-the local Git checkout and package-manager installs if needed. The curl installer
-is pinned to the latest GitHub release tag, and its SHA-256 checksum is verified
+the local Git checkout if needed. Package-manager fallback is used only when the
+active framework was installed by that package manager. The curl installer is
+pinned to the latest GitHub release tag, and its SHA-256 checksum is verified
 before it runs. The framework checks for a new version in the background at most
 once every 24 hours; the check can use npm or GitHub and writes state under
 `$KARNEL_CACHE`.

package/install.sh

@@ -147,7 +147,10 @@ bootstrap_dependencies() {
 
 	if [[ $needed_tput -eq 1 ]]; then
 		echo -e "  ${P_BORDER}→${P_NC}  Installing ncurses-utils..."
-		pkg install -y ncurses-utils &>/dev/null || true
+		if ! pkg install -y ncurses-utils &>/dev/null; then
+			log_fail "Failed to install ncurses-utils"
+			return 1
+		fi
 		echo -e "  ${P_OK}✔${P_NC}  ncurses installed"
 		echo
 	fi
@@ -155,7 +158,10 @@ bootstrap_dependencies() {
 	if [[ $needed_git -eq 1 ]]; then
 		log_info "Installing git..."
 		progress_bar 0 10
-		pkg install -y git &>/dev/null || true
+		if ! pkg install -y git &>/dev/null; then
+			log_fail "Failed to install git"
+			return 1
+		fi
 		progress_bar 10 10
 		echo
 		log_ok "git installed"
@@ -164,7 +170,10 @@ bootstrap_dependencies() {
 	if [[ $needed_glow -eq 1 ]]; then
 		log_info "Installing glow..."
 		progress_bar 0 10
-		pkg install -y glow &>/dev/null || true
+		if ! pkg install -y glow &>/dev/null; then
+			log_fail "Failed to install glow"
+			return 1
+		fi
 		progress_bar 10 10
 		echo
 		log_ok "glow installed"
@@ -173,7 +182,10 @@ bootstrap_dependencies() {
 	if [[ $needed_gh -eq 1 ]]; then
 		log_info "Installing gh (GitHub CLI)..."
 		progress_bar 0 10
-		pkg install -y gh &>/dev/null || true
+		if ! pkg install -y gh &>/dev/null; then
+			log_fail "Failed to install gh"
+			return 1
+		fi
 		progress_bar 10 10
 		echo
 		log_ok "gh installed"
@@ -182,7 +194,10 @@ bootstrap_dependencies() {
 	if [[ $needed_rg -eq 1 ]]; then
 		log_info "Installing ripgrep..."
 		progress_bar 0 10
-		pkg install -y ripgrep &>/dev/null || true
+		if ! pkg install -y ripgrep &>/dev/null; then
+			log_fail "Failed to install ripgrep"
+			return 1
+		fi
 		progress_bar 10 10
 		echo
 		log_ok "ripgrep installed"

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-4c9e5da4c38f3c93a5f36809265feb152fd59b27
+da9b390f62c1b73f31fa5a00a458162589b09c38

package/karnel/cli/commands/doctor/fixes.sh

@@ -342,10 +342,11 @@ _fix_script_symlinks() {
       local tool_name
       tool_name=$(basename "$tool_dir")
       local bin_names
-      bin_names=$(grep -E '^local BIN_NAME=' "$installer" 2>/dev/null | head -1 | sed "s/.*BIN_NAME=\"\?//;s/\"\?$//")
+      bin_names=$(grep -E '^[[:space:]]*local BIN_NAME=' "$installer" 2>/dev/null | head -1 | sed "s/.*BIN_NAME=\"\?//;s/\"\?$//")
       [[ -z "$bin_names" ]] && bin_names="$tool_name"
       for bin_name in $bin_names; do
         local expected="$tool_dir/$bin_name.py"
+        [[ -f "$expected" ]] || continue
         local link="$PREFIX/bin/$bin_name"
         if [[ -L "$link" ]]; then
           local target
@@ -403,15 +404,14 @@ _fix_script_missing() {
       local module_name
       module_name=$(basename "$module_dir")
       local bin_names
-      bin_names=$(grep -E '^local BIN_NAME=' "$installer" 2>/dev/null | head -1 | sed "s/.*BIN_NAME=\"\?//;s/\"\?$//")
+      bin_names=$(grep -E '^[[:space:]]*local BIN_NAME=' "$installer" 2>/dev/null | head -1 | sed "s/.*BIN_NAME=\"\?//;s/\"\?$//")
       [[ -z "$bin_names" ]] && bin_names="$tool_name"
       for bin_name in $bin_names; do
         ((total++))
         if ! command -v "$bin_name" &>/dev/null; then
           karnel install "$module_name" "--$tool_name" &>/dev/null && ((fixed++))
         fi
-      done
-    done < <(find "$module_dir" -mindepth 1 -maxdepth 1 -type d -print0 2>/dev/null || true)
+      done    done < <(find "$module_dir" -mindepth 1 -maxdepth 1 -type d -print0 2>/dev/null || true)
   done < <(find "$KARNEL_PATH/tools/" -mindepth 1 -maxdepth 1 -type d -print0 2>/dev/null || true)
   [[ $fixed -gt 0 ]] && log_success "Reinstalled $fixed/$total missing tool(s)"
   return 0

package/karnel/cli/commands/doctor.sh

@@ -671,7 +671,7 @@ doctor_termux() {
       [[ -f "$installer" ]] || continue
 
       local bin_names
-      bin_names=$(grep -E '^local BIN_NAME=' "$installer" 2>/dev/null | head -1 | sed "s/.*BIN_NAME=\"\?//;s/\"\?$//")
+      bin_names=$(grep -E '^[[:space:]]*local BIN_NAME=' "$installer" 2>/dev/null | head -1 | sed "s/.*BIN_NAME=\"\?//;s/\"\?$//")
       [[ -z "$bin_names" ]] && bin_names="$tool_name"
 
       for bin_name in $bin_names; do
@@ -684,12 +684,14 @@ doctor_termux() {
           if [[ "$target" == "$tool_script" ]]; then
             log_success "$module_name/$tool_name → $bin_name (OK)"
             ((script_ok++))
+          elif [[ ! -f "$tool_script" ]]; then
+            log_info "$bin_name: managed outside Karnel python payloads (→ $target)"
           else
             log_warn "$bin_name: symlink target changed (→ $target, expected $tool_script)"
             ((script_warn++)); found_symlink_issues=true
           fi
 
-          if [[ -f "$bin_path" ]] && head -1 "$bin_path" 2>/dev/null | grep -q "^#!/usr/bin/env"; then
+          if [[ -f "$tool_script" ]] && [[ -f "$bin_path" ]] && head -1 "$bin_path" 2>/dev/null | grep -q "^#!/usr/bin/env"; then
             log_warn "$bin_name: uses #!/usr/bin/env — will fail on Termux"
             ((script_warn++)); found_shebang_issues=true
           fi

package/karnel/cli/commands/update.sh

@@ -357,8 +357,18 @@ _npm_installed_version() {
   printf '%s' "${v:-unknown}"
 }
 
+_update_global_package_is_active() {
+  local manager="${1:-npm}" root
+  root=$("$manager" root -g 2>/dev/null) || return 1
+  [[ "$KARNEL_PATH" == "$root/karnel-termux/karnel" ]]
+}
+
 _update_try_npm() {
   command -v npm &>/dev/null || return 1
+  if ! _update_global_package_is_active; then
+    log_info "Skipping npm update: the active Karnel framework is not npm-managed"
+    return 1
+  fi
   log_info "Trying npm update..."
   if npm update -g karnel-termux --ignore-scripts 2>/dev/null; then
     local new_ver
@@ -372,6 +382,10 @@ _update_try_npm() {
 
 _update_try_npm_install() {
   command -v npm &>/dev/null || return 1
+  if ! _update_global_package_is_active; then
+    log_info "Skipping npm install: the active Karnel framework is not npm-managed"
+    return 1
+  fi
   log_info "Trying npm install..."
   if npm install -g karnel-termux@latest --ignore-scripts 2>/dev/null; then
     local new_ver
@@ -384,6 +398,10 @@ _update_try_npm_install() {
 
 _update_try_pnpm() {
   command -v pnpm &>/dev/null || return 1
+  if ! _update_global_package_is_active pnpm; then
+    log_info "Skipping pnpm update: the active Karnel framework is not pnpm-managed"
+    return 1
+  fi
   log_info "Trying pnpm..."
   if pnpm add -g karnel-termux@latest 2>/dev/null; then
     log_success "Updated via pnpm"

package/karnel/cli/commands/upgrade.sh

@@ -15,11 +15,14 @@ upgrade_main() {
     return 1
   fi
 
+  if ! _upgrade_fix_symlink; then
+    log_error "Karnel upgrade could not activate its command"
+    return 1
+  fi
+
   source "$KARNEL_PATH/utils/env.sh" 2>/dev/null
   log_success "Karnel upgraded to v$KARNEL_VERSION"
 
-  _upgrade_fix_symlink
-
   echo
   log_info "Running cleanup..."
   import "@/cli/commands/cleanup"
@@ -30,6 +33,10 @@ upgrade_main() {
 }
 
 _upgrade_fix_symlink() {
+  if [[ -e "$PREFIX/bin/karnel" && ! -L "$PREFIX/bin/karnel" ]]; then
+    log_error "Refusing to replace existing non-symlink: $PREFIX/bin/karnel"
+    return 1
+  fi
   if [[ ! -L "$PREFIX/bin/karnel" ]] || [[ "$(readlink "$PREFIX/bin/karnel")" != "$KARNEL_PATH/bin/karnel" ]]; then
     ln -sf "$KARNEL_PATH/bin/karnel" "$PREFIX/bin/karnel" 2>/dev/null
     log_success "Symlink updated"

package/karnel/modules/voice.sh

@@ -4,6 +4,7 @@ import "@/utils/log"
 import "@/utils/colors"
 
 LOG_FILE="$KARNEL_CACHE/install_voice.log"
+VOICE_MARKER="${KARNEL_DATA:-${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}/voice/.termux-api-managed"
 
 install_voice() {
   separator
@@ -41,8 +42,10 @@ install_voice() {
 }
 
 _install_voice_deps() {
-  pkg install termux-api -y &>>"$LOG_FILE"
-  return $?
+  if ! pkg install termux-api -y &>>"$LOG_FILE"; then
+    return 1
+  fi
+  mkdir -p "$(dirname "$VOICE_MARKER")" && : >"$VOICE_MARKER"
 }
 
 _install_voice_shell() {
@@ -122,7 +125,7 @@ reinstall_voice() {
 }
 
 _reinstall_voice_wrapper() {
-  import "@/tools/voice/all"
-  reinstall_all_voice_components
-  return $?
+  _uninstall_voice_wrapper || return $?
+  _install_voice_deps || return $?
+  _install_voice_shell
 }

package/karnel/tools/ai/codebuff/install.sh

@@ -9,6 +9,8 @@ LOG_FILE="$KARNEL_CACHE/install_ai.log"
 CODEBUFF_DATA_DIR="$HOME/.local/share/karnel-data/codebuff"
 CODEBUFF_MARKER=".karnel-managed"
 CODEBUFF_WRAPPER_MARKER="$CODEBUFF_DATA_DIR/.karnel-wrapper"
+CODEBUFF_PREVIOUS_DATA=""
+CODEBUFF_STAGED_WRAPPER=""
 
 _codebuff_detect_ubuntu_root() {
   local root
@@ -115,14 +117,44 @@ _download_codebuff_binary_impl() {
   fi
 
   chmod +x "$staging_dir/codebuff"
-  replace_managed_directory "$staging_dir" "$CODEBUFF_DATA_DIR" "$CODEBUFF_MARKER"
+  if ! _activate_codebuff_payload "$staging_dir"; then
+    rm -rf "$staging_dir"
+    return 1
+  fi
 }
 
-_compile_codebuff_helper() {
-  loading "Compiling helper" _compile_codebuff_helper_impl
+_activate_codebuff_payload() {
+  local staging_dir="$1" backup=""
+  printf '%s\n' 'karnel-managed-v1' >"$staging_dir/$CODEBUFF_MARKER" || return 1
+  if [[ -e "$CODEBUFF_DATA_DIR" ]]; then
+    if [[ ! -f "$CODEBUFF_DATA_DIR/$CODEBUFF_MARKER" ]]; then
+      log_error "Refusing to replace unowned installation: $CODEBUFF_DATA_DIR"
+      return 1
+    fi
+    backup=$(mktemp -d "$(dirname "$CODEBUFF_DATA_DIR")/.codebuff-previous.XXXXXX") || return 1
+    rmdir "$backup" || return 1
+    mv "$CODEBUFF_DATA_DIR" "$backup" || return 1
+  fi
+  if ! mv "$staging_dir" "$CODEBUFF_DATA_DIR"; then
+    [[ -z "$backup" ]] || mv "$backup" "$CODEBUFF_DATA_DIR"
+    return 1
+  fi
+  if [[ -n "$backup" && -f "$backup/.karnel-wrapper" ]] &&
+    ! cp "$backup/.karnel-wrapper" "$CODEBUFF_WRAPPER_MARKER"; then
+    rm -rf "$CODEBUFF_DATA_DIR"
+    mv "$backup" "$CODEBUFF_DATA_DIR"
+    return 1
+  fi
+  CODEBUFF_PREVIOUS_DATA="$backup"
+}
+
+_restore_codebuff_payload() {
+  rm -rf "$CODEBUFF_DATA_DIR"
+  [[ -z "$CODEBUFF_PREVIOUS_DATA" ]] || mv "$CODEBUFF_PREVIOUS_DATA" "$CODEBUFF_DATA_DIR"
+  CODEBUFF_PREVIOUS_DATA=""
 }
 
-_compile_codebuff_helper_impl() {
+_stage_codebuff_helper() {
   local HELPER_SRC="$KARNEL_PATH/tools/ai/codebuff/helper/codebuff_helper.c"
   if [ ! -f "$HELPER_SRC" ]; then
     log_error "Helper source not found at $HELPER_SRC"
@@ -130,22 +162,50 @@ _compile_codebuff_helper_impl() {
   fi
 
   local staged_wrapper
+  if [[ -e "$PREFIX/bin/codebuff" || -L "$PREFIX/bin/codebuff" ]] &&
+    ! installer_file_owned "$PREFIX/bin/codebuff" "$CODEBUFF_WRAPPER_MARKER"; then
+    log_error "Refusing to replace an existing Codebuff wrapper not owned by Karnel"
+    return 1
+  fi
   staged_wrapper=$(mktemp "$PREFIX/bin/.codebuff.XXXXXX") || return 1
   if ! cc -O2 -o "$staged_wrapper" "$HELPER_SRC" &>>"$LOG_FILE"; then
     rm -f "$staged_wrapper"
     log_error "Failed to compile codebuff helper"
     return 1
   fi
+  chmod +x "$staged_wrapper" || { rm -f "$staged_wrapper"; return 1; }
+  CODEBUFF_STAGED_WRAPPER="$staged_wrapper"
+}
 
-  chmod +x "$staged_wrapper"
-  mv "$staged_wrapper" "$PREFIX/bin/codebuff" || return 1
-  record_managed_file "$PREFIX/bin/codebuff" "$CODEBUFF_WRAPPER_MARKER"
+_activate_codebuff_wrapper() {
+  activate_installer_file "$CODEBUFF_STAGED_WRAPPER" "$PREFIX/bin/codebuff" "$CODEBUFF_WRAPPER_MARKER"
+}
+
+_compile_codebuff_helper() {
+  loading "Compiling helper" _stage_codebuff_helper || return 1
+  if ! _activate_codebuff_wrapper; then
+    rm -f "$CODEBUFF_STAGED_WRAPPER"
+    return 1
+  fi
+  CODEBUFF_STAGED_WRAPPER=""
 }
 
 _install_codebuff_native() {
+  CODEBUFF_PREVIOUS_DATA="" CODEBUFF_STAGED_WRAPPER=""
   _codebuff_install_deps_native || return 1
-  _download_codebuff_binary || return 1
-  _compile_codebuff_helper || return 1
+  loading "Compiling helper" _stage_codebuff_helper || return 1
+  if ! _download_codebuff_binary; then
+    rm -f "$CODEBUFF_STAGED_WRAPPER"
+    return 1
+  fi
+  if ! _activate_codebuff_wrapper; then
+    rm -f "$CODEBUFF_STAGED_WRAPPER"
+    _restore_codebuff_payload
+    return 1
+  fi
+  CODEBUFF_STAGED_WRAPPER=""
+  [[ -z "$CODEBUFF_PREVIOUS_DATA" ]] || rm -rf "$CODEBUFF_PREVIOUS_DATA"
+  CODEBUFF_PREVIOUS_DATA=""
   log_success "Codebuff installed natively"
   return 0
 }

package/karnel/tools/ai/codex/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_ai.log"
 
@@ -39,6 +40,7 @@ _install_codex_npm_impl() {
 		log_error "Failed to install Codex CLI"
 		return 1
 	fi
+	_fix_npm_shebang "codex"
 
 	return 0
 }
@@ -90,6 +92,7 @@ _update_codex_impl() {
 		log_error "Failed to update Codex CLI"
 		return 1
 	fi
+	_fix_npm_shebang "codex"
 	return 0
 }
 

package/karnel/tools/ai/gemini-cli/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_ai.log"
 
@@ -42,6 +43,7 @@ _install_gemini_cli_npm_impl() {
     log_error "Failed to install Gemini CLI"
     return 1
   fi
+  _fix_npm_shebang "gemini"
 
   return 0
 }
@@ -97,6 +99,7 @@ _update_gemini_cli_impl() {
     log_error "Failed to update Gemini CLI"
     return 1
   fi
+  _fix_npm_shebang "gemini"
   return 0
 }
 

package/karnel/tools/ai/kimi-code/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_ai.log"
 
@@ -39,6 +40,7 @@ _install_kimi_code_npm_impl() {
     log_error "Failed to install Kimi Code"
     return 1
   fi
+  _fix_npm_shebang "kimi"
 
   return 0
 }
@@ -92,6 +94,7 @@ _update_kimi_code_impl() {
     log_error "Failed to update Kimi Code"
     return 1
   fi
+  _fix_npm_shebang "kimi"
   return 0
 }
 

package/karnel/tools/ai/minimax-cli/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_ai.log"
 
@@ -39,6 +40,7 @@ _install_minimax_cli_npm_impl() {
     log_error "Failed to install MiniMax CLI"
     return 1
   fi
+  _fix_npm_shebang "mmx"
 
   return 0
 }
@@ -92,6 +94,7 @@ _update_minimax_cli_impl() {
     log_error "Failed to update MiniMax CLI"
     return 1
   fi
+  _fix_npm_shebang "mmx"
   return 0
 }
 

package/karnel/tools/ai/openclaude/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_ai.log"
 
@@ -42,6 +43,7 @@ _install_openclaude_npm_impl() {
     log_error "Failed to install OpenClaude"
     return 1
   fi
+  _fix_npm_shebang "openclaude"
 
   return 0
 }
@@ -96,6 +98,7 @@ _update_openclaude_impl() {
     log_error "Failed to update OpenClaude"
     return 1
   fi
+  _fix_npm_shebang "openclaude"
   return 0
 }
 

package/karnel/tools/ai/openclaw/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_ai.log"
 
@@ -47,6 +48,7 @@ _install_openclaw_npm_impl() {
     log_error "Failed to install OpenClaw"
     return 1
   fi
+  _fix_npm_shebang "openclaw"
 
   return 0
 }
@@ -101,6 +103,7 @@ _update_openclaw_impl() {
     log_error "Failed to update OpenClaw"
     return 1
   fi
+  _fix_npm_shebang "openclaw"
   return 0
 }
 

package/karnel/tools/ai/pi/install.sh

@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_ai.log"
 
@@ -39,6 +40,7 @@ _install_pi_npm_impl() {
     log_error "Failed to install Pi"
     return 1
   fi
+  _fix_npm_shebang "pi"
 
   return 0
 }
@@ -90,6 +92,7 @@ _update_pi_impl() {
     log_error "Failed to update Pi"
     return 1
   fi
+  _fix_npm_shebang "pi"
   return 0
 }
 

package/karnel/tools/ai/qoder/install.sh

@@ -11,6 +11,8 @@ QODER_MANIFEST_URL="https://qoder-ide.oss-accelerate.aliyuncs.com/qodercli/chann
 QODER_MARKER=".karnel-managed"
 QODER_WRAPPER_MARKER="$QODER_DATA_DIR/.karnel-wrapper"
 QODER_PROOT_MARKER="$PREFIX/share/karnel-installers/qoder"
+QODER_PREVIOUS_DATA=""
+QODER_STAGED_WRAPPER=""
 
 _qoder_detect_ubuntu_root() {
   local root
@@ -153,14 +155,44 @@ _download_qoder_binary_impl() {
   fi
 
   chmod +x "$staging_dir/qodercli"
-  replace_managed_directory "$staging_dir" "$QODER_DATA_DIR" "$QODER_MARKER"
+  if ! _activate_qoder_payload "$staging_dir"; then
+    rm -rf "$staging_dir"
+    return 1
+  fi
 }
 
-_compile_qoder_helper() {
-  loading "Compiling helper" _compile_qoder_helper_impl
+_activate_qoder_payload() {
+  local staging_dir="$1" backup=""
+  printf '%s\n' 'karnel-managed-v1' >"$staging_dir/$QODER_MARKER" || return 1
+  if [[ -e "$QODER_DATA_DIR" ]]; then
+    if [[ ! -f "$QODER_DATA_DIR/$QODER_MARKER" ]]; then
+      log_error "Refusing to replace unowned installation: $QODER_DATA_DIR"
+      return 1
+    fi
+    backup=$(mktemp -d "$(dirname "$QODER_DATA_DIR")/.qoder-previous.XXXXXX") || return 1
+    rmdir "$backup" || return 1
+    mv "$QODER_DATA_DIR" "$backup" || return 1
+  fi
+  if ! mv "$staging_dir" "$QODER_DATA_DIR"; then
+    [[ -z "$backup" ]] || mv "$backup" "$QODER_DATA_DIR"
+    return 1
+  fi
+  if [[ -n "$backup" && -f "$backup/.karnel-wrapper" ]] &&
+    ! cp "$backup/.karnel-wrapper" "$QODER_WRAPPER_MARKER"; then
+    rm -rf "$QODER_DATA_DIR"
+    mv "$backup" "$QODER_DATA_DIR"
+    return 1
+  fi
+  QODER_PREVIOUS_DATA="$backup"
+}
+
+_restore_qoder_payload() {
+  rm -rf "$QODER_DATA_DIR"
+  [[ -z "$QODER_PREVIOUS_DATA" ]] || mv "$QODER_PREVIOUS_DATA" "$QODER_DATA_DIR"
+  QODER_PREVIOUS_DATA=""
 }
 
-_compile_qoder_helper_impl() {
+_stage_qoder_helper() {
   local HELPER_SRC="$KARNEL_PATH/tools/ai/qoder/helper/qoder_helper.c"
   if [ ! -f "$HELPER_SRC" ]; then
     log_error "Helper source not found at $HELPER_SRC"
@@ -168,22 +200,50 @@ _compile_qoder_helper_impl() {
   fi
 
   local staged_wrapper
+  if [[ -e "$PREFIX/bin/qodercli" || -L "$PREFIX/bin/qodercli" ]] &&
+    ! installer_file_owned "$PREFIX/bin/qodercli" "$QODER_WRAPPER_MARKER"; then
+    log_error "Refusing to replace an existing Qoder wrapper not owned by Karnel"
+    return 1
+  fi
   staged_wrapper=$(mktemp "$PREFIX/bin/.qodercli.XXXXXX") || return 1
   if ! cc -O2 -o "$staged_wrapper" "$HELPER_SRC" &>>"$LOG_FILE"; then
     rm -f "$staged_wrapper"
     log_error "Failed to compile qoder helper"
     return 1
   fi
+  chmod +x "$staged_wrapper" || { rm -f "$staged_wrapper"; return 1; }
+  QODER_STAGED_WRAPPER="$staged_wrapper"
+}
 
-  chmod +x "$staged_wrapper"
-  mv "$staged_wrapper" "$PREFIX/bin/qodercli" || return 1
-  record_managed_file "$PREFIX/bin/qodercli" "$QODER_WRAPPER_MARKER"
+_activate_qoder_wrapper() {
+  activate_installer_file "$QODER_STAGED_WRAPPER" "$PREFIX/bin/qodercli" "$QODER_WRAPPER_MARKER"
+}
+
+_compile_qoder_helper() {
+  loading "Compiling helper" _stage_qoder_helper || return 1
+  if ! _activate_qoder_wrapper; then
+    rm -f "$QODER_STAGED_WRAPPER"
+    return 1
+  fi
+  QODER_STAGED_WRAPPER=""
 }
 
 _install_qoder_native() {
+  QODER_PREVIOUS_DATA="" QODER_STAGED_WRAPPER=""
   _qoder_install_deps_native || return 1
-  _download_qoder_binary || return 1
-  _compile_qoder_helper || return 1
+  loading "Compiling helper" _stage_qoder_helper || return 1
+  if ! _download_qoder_binary; then
+    rm -f "$QODER_STAGED_WRAPPER"
+    return 1
+  fi
+  if ! _activate_qoder_wrapper; then
+    rm -f "$QODER_STAGED_WRAPPER"
+    _restore_qoder_payload
+    return 1
+  fi
+  QODER_STAGED_WRAPPER=""
+  [[ -z "$QODER_PREVIOUS_DATA" ]] || rm -rf "$QODER_PREVIOUS_DATA"
+  QODER_PREVIOUS_DATA=""
   log_success "Qoder installed natively"
   return 0
 }
@@ -192,6 +252,27 @@ _install_qoder_proot() {
   loading "Installing Qoder (proot-distro)" _install_qoder_proot_impl
 }
 
+_stage_qoder_proot_wrapper() {
+  local ubuntu_root="$1" qoder_dir="$2" wrapper_src="$KARNEL_PATH/tools/ai/qoder/bin/qodercli"
+  if [[ -e "$PREFIX/bin/qodercli" || -L "$PREFIX/bin/qodercli" ]] &&
+    ! installer_file_owned "$PREFIX/bin/qodercli" "$QODER_PROOT_MARKER"; then
+    log_error "Refusing to replace an existing Qoder wrapper not owned by Karnel"
+    return 1
+  fi
+  [ -f "$wrapper_src" ] || { log_error "Wrapper template not found at $wrapper_src"; return 1; }
+  QODER_STAGED_WRAPPER=$(mktemp "$PREFIX/bin/.qodercli.XXXXXX") || return 1
+  if ! sed -e "s|__UBUNTU_ROOTFS__|$ubuntu_root|g" -e "s|__QODER_DIR__|$qoder_dir|g" \
+    "$wrapper_src" >"$QODER_STAGED_WRAPPER" || ! chmod +x "$QODER_STAGED_WRAPPER"; then
+    rm -f "$QODER_STAGED_WRAPPER"
+    QODER_STAGED_WRAPPER=""
+    return 1
+  fi
+}
+
+_activate_qoder_proot_wrapper() {
+  activate_installer_file "$QODER_STAGED_WRAPPER" "$PREFIX/bin/qodercli" "$QODER_PROOT_MARKER"
+}
+
 _install_qoder_proot_impl() {
   case "$(uname -m)" in
     aarch64|arm64) ;;
@@ -200,16 +281,25 @@ _install_qoder_proot_impl() {
   mkdir -p "$(dirname "$LOG_FILE")"
 
   if ! command -v proot-distro &>/dev/null; then
-    yes | pkg install proot-distro &>>"$LOG_FILE"
+    if ! yes | pkg install proot-distro &>>"$LOG_FILE"; then
+      log_error "Failed to install proot-distro"
+      return 1
+    fi
   fi
 
   if [ ! -d "$(_qoder_detect_ubuntu_root)" ]; then
-    proot-distro install ubuntu:24.04 &>>"$LOG_FILE"
+    if ! proot-distro install ubuntu:24.04 &>>"$LOG_FILE"; then
+      log_error "Failed to install Ubuntu Proot"
+      return 1
+    fi
   fi
 
-  _qoder_proot_ubuntu /bin/bash -c \
+  if ! _qoder_proot_ubuntu /bin/bash -c \
     'apt-get update && apt-get upgrade -y && apt-get install -y curl ca-certificates' \
-    &>>"$LOG_FILE"
+    &>>"$LOG_FILE"; then
+    log_error "Failed to prepare Ubuntu Proot"
+    return 1
+  fi
 
   local download_url
   download_url=$(_get_qoder_download_url "arm64")
@@ -230,45 +320,54 @@ _install_qoder_proot_impl() {
     log_error "Refusing to replace Qoder Proot data not owned by Karnel"
     return 1
   fi
-  mkdir -p "$qoder_dir"
+  if ! _stage_qoder_proot_wrapper "$ubuntu_root" "$qoder_dir"; then
+    return 1
+  fi
+  mkdir -p "$qoder_dir" || { rm -f "$QODER_STAGED_WRAPPER"; return 1; }
 
   local archive_filename
   archive_filename=$(basename "$download_url")
 
   if ! curl -fsSL "$download_url" -o "$qoder_dir/$archive_filename" &>>"$LOG_FILE"; then
+    rm -rf "$qoder_dir"
+    rm -f "$QODER_STAGED_WRAPPER"
     log_error "Failed to download Qoder binary"
     return 1
   fi
 
   local expected actual
   expected=$(_get_qoder_download_sha256 arm64)
-  actual=$(sha256sum "$qoder_dir/$archive_filename" 2>>"$LOG_FILE") || return 1
+  actual=$(sha256sum "$qoder_dir/$archive_filename" 2>>"$LOG_FILE") || { rm -rf "$qoder_dir" "$QODER_STAGED_WRAPPER"; return 1; }
   if [[ ! "$expected" =~ ^[0-9a-f]{64}$ || "${actual%% *}" != "$expected" ]]; then
-    rm -f "$qoder_dir/$archive_filename"
+    rm -rf "$qoder_dir"
+    rm -f "$QODER_STAGED_WRAPPER"
     log_error "Qoder archive has no valid matching SHA-256 in the official manifest"
     return 1
   fi
   if ! extract_tarball "$qoder_dir/$archive_filename" "$qoder_dir"; then
+    rm -rf "$qoder_dir"
+    rm -f "$QODER_STAGED_WRAPPER"
     return 1
   fi
 
   if [ ! -f "$qoder_dir/qodercli" ]; then
+    rm -rf "$qoder_dir"
+    rm -f "$QODER_STAGED_WRAPPER"
     log_error "Qoder binary not found after extraction"
     return 1
   fi
 
-  chmod +x "$qoder_dir/qodercli"
-  printf '%s\n' 'karnel-managed-v1' >"$qoder_dir/.karnel-managed"
-
-  local wrapper_src="$KARNEL_PATH/tools/ai/qoder/bin/qodercli"
-  if [ ! -f "$wrapper_src" ]; then
-    log_error "Wrapper template not found at $wrapper_src"
+  if ! chmod +x "$qoder_dir/qodercli" || ! printf '%s\n' 'karnel-managed-v1' >"$qoder_dir/.karnel-managed"; then
+    rm -rf "$qoder_dir"
+    rm -f "$QODER_STAGED_WRAPPER"
+    return 1
+  fi
+  if ! _activate_qoder_proot_wrapper; then
+    rm -f "$QODER_STAGED_WRAPPER"
+    rm -rf "$qoder_dir"
     return 1
   fi
-  sed -e "s|__UBUNTU_ROOTFS__|$ubuntu_root|g" -e "s|__QODER_DIR__|$qoder_dir|g" \
-    "$wrapper_src" >"$PREFIX/bin/qodercli"
-  chmod +x "$PREFIX/bin/qodercli"
-  record_managed_file "$PREFIX/bin/qodercli" "$QODER_PROOT_MARKER" || return 1
+  QODER_STAGED_WRAPPER=""
 
   return 0
 }
@@ -409,14 +508,26 @@ _update_qoder_proot_impl() {
     return 1
   fi
 
-  chmod +x "$staging_dir/qodercli"
-  printf '%s\n' 'karnel-managed-v1' >"$staging_dir/.karnel-managed"
-  old_dir="${qoder_dir}.previous.$$"
+  if ! chmod +x "$staging_dir/qodercli" || ! printf '%s\n' 'karnel-managed-v1' >"$staging_dir/.karnel-managed" ||
+    ! _stage_qoder_proot_wrapper "$ubuntu_root" "$qoder_dir"; then
+    rm -rf "$staging_dir"
+    return 1
+  fi
+  old_dir=$(mktemp -d "$(dirname "$qoder_dir")/.qoder-previous.XXXXXX") || { rm -f "$QODER_STAGED_WRAPPER"; return 1; }
+  rmdir "$old_dir" || { rm -f "$QODER_STAGED_WRAPPER"; return 1; }
   if ! mv "$qoder_dir" "$old_dir" || ! mv "$staging_dir" "$qoder_dir"; then
     [[ ! -d "$old_dir" ]] || mv "$old_dir" "$qoder_dir"
     rm -rf "$staging_dir"
+    rm -f "$QODER_STAGED_WRAPPER"
+    return 1
+  fi
+  if ! _activate_qoder_proot_wrapper; then
+    rm -f "$QODER_STAGED_WRAPPER"
+    rm -rf "$qoder_dir"
+    mv "$old_dir" "$qoder_dir"
     return 1
   fi
+  QODER_STAGED_WRAPPER=""
   rm -rf "$old_dir"
 
   log_success "Qoder (proot-distro) updated"

package/karnel/tools/ai/qwen-code/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_ai.log"
 
@@ -42,6 +43,7 @@ _install_qwen_code_npm_impl() {
     log_error "Failed to install Qwen Code"
     return 1
   fi
+  _fix_npm_shebang "qwen"
 
   return 0
 }
@@ -97,6 +99,7 @@ _update_qwen_code_impl() {
     log_error "Failed to update Qwen Code"
     return 1
   fi
+  _fix_npm_shebang "qwen"
   return 0
 }
 

package/karnel/tools/deploy/netlify/install.sh

@@ -9,7 +9,9 @@ NETLIFY_VERSION="27.1.1"
 NETLIFY_MARKER="$PREFIX/share/karnel-installers/netlify"
 
 _netlify_is_owned() {
-  command -v netlify &>/dev/null && [[ -f "$NETLIFY_MARKER" ]] || return 1
+  local binary
+  binary=$(command -v netlify) || return 1
+  managed_file_matches "$binary" "$NETLIFY_MARKER"
 }
 
 _netlify_node_supported() {
@@ -43,12 +45,17 @@ install_netlify() {
     log_error "Failed to install Netlify CLI (see $LOG_FILE)"
     return 1
   fi
-  command -v termux-fix-shebang &>/dev/null && termux-fix-shebang "$(command -v netlify)" &>/dev/null
+  local binary
+  binary=$(command -v netlify) || { log_error "Netlify CLI was not found after installation"; return 1; }
+  command -v termux-fix-shebang &>/dev/null && termux-fix-shebang "$binary" &>/dev/null
   if ! netlify --version &>/dev/null; then
     log_error "Netlify CLI did not start after installation"
     return 1
   fi
-  mkdir -p "$(dirname "$NETLIFY_MARKER")" && : >"$NETLIFY_MARKER"
+  if ! record_managed_file "$binary" "$NETLIFY_MARKER"; then
+    log_error "Failed to record Netlify CLI ownership"
+    return 1
+  fi
   log_success "Netlify CLI installed"
 }
 

package/karnel/tools/deploy/vercel/install.sh

@@ -8,7 +8,9 @@ LOG_FILE="${LOG_FILE:-${KARNEL_CACHE:-$HOME/.cache/karnel}/install_deploy.log}"
 VERCEL_MARKER="$PREFIX/share/karnel-installers/vercel"
 
 _vercel_is_owned() {
-  command -v vercel &>/dev/null && [[ -f "$VERCEL_MARKER" ]] || return 1
+  local binary
+  binary=$(command -v vercel) || return 1
+  managed_file_matches "$binary" "$VERCEL_MARKER"
 }
 
 install_vercel() {
@@ -29,8 +31,13 @@ install_vercel() {
     log_error "Failed to install Vercel CLI (see $LOG_FILE)"
     return 1
   fi
-  command -v termux-fix-shebang &>/dev/null && termux-fix-shebang "$(command -v vercel)" &>/dev/null
-  mkdir -p "$(dirname "$VERCEL_MARKER")" && : >"$VERCEL_MARKER"
+  local binary
+  binary=$(command -v vercel) || { log_error "Vercel CLI was not found after installation"; return 1; }
+  command -v termux-fix-shebang &>/dev/null && termux-fix-shebang "$binary" &>/dev/null
+  if ! record_managed_file "$binary" "$VERCEL_MARKER"; then
+    log_error "Failed to record Vercel CLI ownership"
+    return 1
+  fi
   log_success "Vercel CLI installed"
 }
 

package/karnel/tools/npm/all.sh

@@ -26,29 +26,7 @@ done
 unset _tool
 _register_safe_reinstall_handlers npm "${NODE_PACKAGES[@]}"
 
-_fix_npm_shebang() {
-  local bin_name="$1"
-  local bin_path="$PREFIX/bin/$bin_name"
-  [ ! -f "$bin_path" ] && [ ! -L "$bin_path" ] && return 0
-
-  local real_path
-  real_path=$(readlink -f "$bin_path" 2>/dev/null || echo "$bin_path")
-  [ ! -f "$real_path" ] && return 0
-
-  local shebang
-  shebang=$(head -1 "$real_path")
-
-  case "$shebang" in
-    "#!/usr/bin/env node"|"#!/data/data/com.termux/files/usr/bin/env node")
-      sed -i "1s|.*|#!$PREFIX/bin/node|" "$real_path"
-      log_info "Fixed shebang for $bin_name: $shebang → $PREFIX/bin/node"
-      ;;
-    "#!/usr/bin/env bash"|"#!/data/data/com.termux/files/usr/bin/env bash")
-      sed -i "1s|.*|#!$PREFIX/bin/bash|" "$real_path"
-      log_info "Fixed shebang for $bin_name: $shebang → $PREFIX/bin/bash"
-      ;;
-  esac
-}
+import "@/utils/npm-shebang"
 
 _batch_npm() {
   local action="$1"

package/karnel/tools/npm/live-server/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_npm.log"
 
@@ -81,6 +82,7 @@ _update_live_server_npm_impl() {
     log_error "Failed to update Live Server"
     return 1
   fi
+  _fix_npm_shebang "live-server"
   return 0
 }
 

package/karnel/tools/npm/localtunnel/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_npm.log"
 
@@ -42,9 +43,9 @@ _install_localtunnel_npm_impl() {
     log_error "Failed to install Localtunnel"
     return 1
   fi
+  _fix_npm_shebang "lt"
   log_info "Applying localtunnel fix for Android..."
   _localtunnel_fix_openurl &>>"$LOG_FILE"
-  _fix_npm_shebang "lt"
   return 0
 }
 
@@ -97,6 +98,7 @@ _update_localtunnel_npm_impl() {
     log_error "Failed to update Localtunnel"
     return 1
   fi
+  _fix_npm_shebang "lt"
   return 0
 }
 

package/karnel/tools/npm/markserv/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_npm.log"
 
@@ -80,6 +81,7 @@ _update_markserv_npm_impl() {
     log_error "Failed to update Markserv"
     return 1
   fi
+  _fix_npm_shebang "markserv"
   return 0
 }
 

package/karnel/tools/npm/ncu/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_npm.log"
 
@@ -80,6 +81,7 @@ _update_ncu_npm_impl() {
     log_error "Failed to update NPM Check Updates"
     return 1
   fi
+  _fix_npm_shebang "ncu"
   return 0
 }
 

package/karnel/tools/npm/nestjs/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_npm.log"
 
@@ -80,6 +81,7 @@ _update_nestjs_npm_impl() {
     log_error "Failed to update NestJS CLI"
     return 1
   fi
+  _fix_npm_shebang "nest"
   return 0
 }
 

package/karnel/tools/npm/ngrok/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_npm.log"
 
@@ -80,6 +81,7 @@ _update_ngrok_npm_impl() {
     log_error "Failed to update Ngrok"
     return 1
   fi
+  _fix_npm_shebang "ngrok"
   return 0
 }
 

package/karnel/tools/npm/prettier/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_npm.log"
 
@@ -80,6 +81,7 @@ _update_prettier_npm_impl() {
     log_error "Failed to update Prettier"
     return 1
   fi
+  _fix_npm_shebang "prettier"
   return 0
 }
 

package/karnel/tools/npm/psqlformat/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_npm.log"
 
@@ -80,6 +81,7 @@ _update_psqlformat_npm_impl() {
     log_error "Failed to update PSQL Format"
     return 1
   fi
+  _fix_npm_shebang "psqlformat"
   return 0
 }
 

package/karnel/tools/npm/typescript/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_npm.log"
 
@@ -80,6 +81,7 @@ _update_typescript_npm_impl() {
     log_error "Failed to update TypeScript"
     return 1
   fi
+  _fix_npm_shebang "tsc"
   return 0
 }
 

package/karnel/tools/npm/vercel/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/npm-shebang"
 
 LOG_FILE="$KARNEL_CACHE/install_npm.log"
 
@@ -80,6 +81,7 @@ _update_vercel_npm_impl() {
     log_error "Failed to update Vercel CLI"
     return 1
   fi
+  _fix_npm_shebang "vercel"
   return 0
 }
 

package/karnel/tools/utils/filecheck/filecheck.py

@@ -1,4 +1,5 @@
 #!/data/data/com.termux/files/usr/bin/python3
+import os
 import sys
 import subprocess
 import hashlib

package/karnel/tools/utils/qrcode/install.sh

@@ -7,12 +7,25 @@ import "@/utils/downloaded-python"
 LOG_FILE="$KARNEL_CACHE/install_dev.log"
 DOWNLOAD_URL="https://raw.githubusercontent.com/dedsec1121fk/DedSec/87d69293f4b89b8ab114fa644074629e86313182/Scripts/Network%20Tools/QR%20Code%20Generator.py"
 
+_qrcode_dependencies() {
+  if ! command -v python3 &>/dev/null && ! pkg install python -y &>>"$LOG_FILE"; then
+    return 1
+  fi
+  if ! python3 -c 'import PIL' &>/dev/null && ! pkg install python-pillow -y &>>"$LOG_FILE"; then
+    return 1
+  fi
+  if ! python3 -c 'import qrcode' &>/dev/null && ! python3 -m pip install --no-deps qrcode &>>"$LOG_FILE"; then
+    return 1
+  fi
+  python3 -c 'import qrcode, PIL' &>/dev/null
+}
+
 install_qrcode() {
   local TOOL_DIR="$KARNEL_DATA/utils/qrcode"
   local BIN_NAME="qrcode"
   log_info "Installing QR Code Generator..."
   mkdir -p "$(dirname "$LOG_FILE")" "$TOOL_DIR"
-  if ! command -v python3 &>/dev/null; then pkg install python -y &>>"$LOG_FILE" || return 1; fi
+  _qrcode_dependencies || { log_error "Failed to install QR Code Generator dependencies"; return 1; }
   _downloaded_python_install "$BIN_NAME" "$TOOL_DIR" "$DOWNLOAD_URL" || return $?
   log_success "QR Code Generator installed"
   return 0
@@ -31,6 +44,7 @@ update_qrcode() {
   local TOOL_DIR="$KARNEL_DATA/utils/qrcode"
   local BIN_NAME="qrcode"
   log_info "Updating QR Code Generator..."
+  _qrcode_dependencies || { log_error "Failed to install QR Code Generator dependencies"; return 1; }
   _downloaded_python_update "$BIN_NAME" "$TOOL_DIR" "$DOWNLOAD_URL" || return 1
   log_success "QR Code Generator updated"
   return 0

package/karnel/tools/utils/qrcode/qrcode.py

@@ -1,35 +1,14 @@
 #!/data/data/com.termux/files/usr/bin/python3
+import os
 import re
-import subprocess
 import sys
 
-# --- Installation Function (Same as before) ---
-def install_and_import(package):
-    """
-    Checks if a package is installed and installs it if missing.
-    The 'qrcode[pil]' installs both qrcode and Pillow (PIL) for image generation.
-    """
-    try:
-        __import__(package)
-        print(f"✅ Required package '{package}' is already installed.")
-    except ImportError:
-        print(f"📦 Package '{package}' not found. Installing now...")
-        try:
-            if package == 'qrcode':
-                # Install qrcode with pil dependency for image saving
-                subprocess.check_call([sys.executable, "-m", "pip", "install", "qrcode[pil]"])
-            else:
-                subprocess.check_call([sys.executable, "-m", "pip", "install", package])
-            
-            __import__(package)
-            print(f"✅ Successfully installed '{package}'.")
-        except subprocess.CalledProcessError as e:
-            print(f"❌ Failed to install '{package}'. Error: {e}")
-            print("Please ensure 'pip' is installed and working in Termux.")
-            sys.exit(1)
+# The launcher is named qrcode.py, so remove its directory before importing
+# the third-party qrcode package to avoid importing this file recursively.
+SCRIPT_DIR = os.path.dirname(os.path.abspath(__file__))
+sys.path = [path for path in sys.path if path not in ("", SCRIPT_DIR)]
 
-install_and_import('qrcode')
-import qrcode 
+import qrcode
 
 # ----------------------------------------------------------------------
 # --- Main Generator Function (Updated Path) ---
@@ -86,4 +65,4 @@ def generate_qr_for_link():
         print(f"\n❌ Error saving file: {e}")
 
 if __name__ == "__main__":
-    generate_qr_for_link()
+    generate_qr_for_link()

package/karnel/tools/utils/websites/websites.py

@@ -1,4 +1,5 @@
 #!/data/data/com.termux/files/usr/bin/python3
+import os
 import re
 import datetime
 

package/karnel/tools/voice/uninstall.sh

@@ -19,6 +19,7 @@ _uninstall_voice_tool() {
     fi
   else
     log_info "Termux:API is not installed"
+    rm -f "$marker"
   fi
   return 0
 }

package/karnel/utils/downloaded-python.sh

@@ -40,7 +40,7 @@ _downloaded_python_install() {
     curl -fsSL "$download_url" -o "$staged_payload" || commit_failed=1
   fi
   if (( commit_failed != 0 )) || ! sed -i "1s|.*|#!$python3_path|" "$staged_payload" ||
-    ! chmod +x "$staged_payload" || ! sha256sum "$staged_payload" >"$staged_marker" ||
+    ! chmod 755 "$staged_payload" || ! sha256sum "$staged_payload" >"$staged_marker" ||
     ! ln -s "$payload" "$staged_link"; then
     rm -rf "$tool_staging" "$link_staging"
     return 1

package/karnel/utils/npm-shebang.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+# Shared npm shebang repair for Termux.
+# Rewrites `#!/usr/bin/env <interp>` shebangs of npm-installed bins to the
+# absolute Termux interpreter path. Safe to call on any bin name.
+
+_fix_npm_shebang() {
+  local bin_name="$1"
+  local bin_path="$PREFIX/bin/$bin_name"
+  [ ! -f "$bin_path" ] && [ ! -L "$bin_path" ] && return 0
+
+  local real_path
+  real_path=$(readlink -f "$bin_path" 2>/dev/null || echo "$bin_path")
+  [ ! -f "$real_path" ] && return 0
+
+  local shebang
+  shebang=$(head -1 "$real_path")
+
+  case "$shebang" in
+    "#!/usr/bin/env node"|"#!/data/data/com.termux/files/usr/bin/env node"|"#!$PREFIX/bin/env node")
+      sed -i "1s|.*|#!$PREFIX/bin/node|" "$real_path" || return 1
+      log_info "Fixed shebang for $bin_name: $shebang → $PREFIX/bin/node"
+      ;;
+    "#!/usr/bin/env bash"|"#!/data/data/com.termux/files/usr/bin/env bash"|"#!$PREFIX/bin/env bash")
+      sed -i "1s|.*|#!$PREFIX/bin/bash|" "$real_path" || return 1
+      log_info "Fixed shebang for $bin_name: $shebang → $PREFIX/bin/bash"
+      ;;
+  esac
+  return 0
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.17.22",
+  "version": "4.17.27",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"