karnel-termux 4.17.3 → 4.17.5

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-5b88c3c7229d293e0e92665c71bcb3501a87ed74
+2e76f74b21de6f9a01911b2c06b96ac09d12359d

package/karnel/tools/ai/kilocode-cli/install.sh

@@ -3,6 +3,7 @@
 import "@/utils/log"
 import "@/utils/version"
 import "@/utils/colors"
+import "@/utils/install"
 
 LOG_FILE="$KARNEL_CACHE/install_ai.log"
 KILOCODE_DATA_DIR="${KARNEL_DATA:-${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}/kilocode"
@@ -120,13 +121,15 @@ _download_kilocode_binary_impl() {
     return 1
   fi
 
-  local expected actual
-  expected=$(github_release_asset_sha256 Kilo-Org/kilocode "$latest_version" "$tarball") || expected=""
-  actual=$(sha256sum "$staging_dir/$tarball" 2>/dev/null | awk '{print $1}')
-  if [[ ! "$expected" =~ ^[0-9a-f]{64}$ || "$actual" != "$expected" ]]; then
-    rm -rf "$staging_dir"
-    log_error "Kilo Code archive failed official SHA-256 validation"
-    return 1
+  if declare -F github_release_asset_sha256 >/dev/null; then
+    local expected actual
+    expected=$(github_release_asset_sha256 Kilo-Org/kilocode "$latest_version" "$tarball") || expected=""
+    actual=$(sha256sum "$staging_dir/$tarball" 2>/dev/null | awk '{print $1}')
+    if [[ ! "$expected" =~ ^[0-9a-f]{64}$ || "$actual" != "$expected" ]]; then
+      rm -rf "$staging_dir"
+      log_error "Kilo Code archive failed official SHA-256 validation"
+      return 1
+    fi
   fi
 
   if ! tar -zxf "$staging_dir/$tarball" -C "$staging_dir" &>>"$LOG_FILE"; then

package/karnel/tools/deploy/railway/install.sh

@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
 
 import "@/utils/log"
+import "@/utils/install"
 import "@/utils/version"
 
 LOG_FILE="$KARNEL_CACHE/install_deploy.log"
@@ -110,6 +111,15 @@ _install_railway_manual_impl() {
     return 2
   fi
 
+  local expected
+  expected=$(github_release_asset_sha256 railwayapp/cli "$latest_version" "railway-${version}-aarch64-linux.tar.gz") || expected=""
+  if [[ "$expected" =~ ^[0-9a-f]{64}$ ]]; then
+    verify_sha256 "$RAILWAY_DATA_DIR/railway.tar.gz" "$expected" || {
+      rm -f "$RAILWAY_DATA_DIR/railway.tar.gz"
+      return 1
+    }
+  fi
+
   tar -zxf "$RAILWAY_DATA_DIR/railway.tar.gz" -C "$RAILWAY_DATA_DIR" 2>>"$LOG_FILE" || {
     rm -f "$RAILWAY_DATA_DIR/railway.tar.gz"
     return 1

package/karnel/tools/editor/code-server/install.sh

@@ -73,7 +73,10 @@ update_code_server() {
 }
 
 _update_code_server_impl() {
-  pkg upgrade -y code-server 2>/dev/null
+  if ! pkg upgrade -y code-server &>>"$LOG_FILE"; then
+    log_error "Falha ao atualizar code-server"
+    return 1
+  fi
 }
 
 reinstall_code_server() {

package/karnel/tools/editor/neovim/install.sh

@@ -51,7 +51,10 @@ _update_neovim_impl() {
 
 _do_neovim_update() {
   mkdir -p "$(dirname "$LOG_FILE")"
-  yes | pkg upgrade neovim -y &>>"$LOG_FILE"
+  if ! yes | pkg upgrade neovim -y &>>"$LOG_FILE"; then
+    log_error "Falha ao atualizar Neovim"
+    return 1
+  fi
 }
 
 update_neovim() {

package/karnel/tools/lang/bun/install.sh

@@ -141,6 +141,14 @@ _download_bun_binary_native_impl() {
     log_error "Failed to download Bun binary"
     return 1
   }
+  if declare -F github_release_asset_sha256 >/dev/null; then
+    expected=$(github_release_asset_sha256 "$BUN_REPO" "bun-v$version" "$zip_name") || expected=""
+    if [[ "$expected" =~ ^[0-9a-f]{64}$ ]]; then
+      verify_sha256 "$staging_dir/$zip_name" "$expected" || { rm -rf "$staging_dir"; return 1; }
+    else
+      log_warn "No published SHA-256 for Bun native; skipping integrity verification"
+    fi
+  fi
   if ! unzip -o "$staging_dir/$zip_name" -d "$staging_dir" &>>"$LOG_FILE"; then
     rm -rf "$staging_dir"
     log_error "Failed to extract Bun binary"

package/karnel/tools/security/dnsrecon/install.sh

@@ -19,7 +19,7 @@ install_dnsrecon() {
     return 1
   }
   if install_pinned_git_repo "$_DNSRECON_REPO" "$_DNSRECON_COMMIT" "$_DNSRECON_DIR"; then
-    pip install -r "$_DNSRECON_DIR/requirements.txt" 2>/dev/null
+    pip install -r "$_DNSRECON_DIR/requirements.txt" 2>>"$LOG_FILE" || return 1
     chmod +x "$_DNSRECON_DIR/dnsrecon.py"
     ln -sf "$_DNSRECON_DIR/dnsrecon.py" "$PREFIX/bin/dnsrecon"
     : > "$_DNSRECON_DIR/.karnel-wrapper"
@@ -45,7 +45,7 @@ update_dnsrecon() {
       { [ -f "$_DNSRECON_DIR/.karnel-wrapper" ] && _adopt_pinned_git_repo "$_DNSRECON_DIR" "$_DNSRECON_REPO"; } || return 1
     install_pinned_git_repo "$_DNSRECON_REPO" "$_DNSRECON_COMMIT" "$_DNSRECON_DIR" || return 1
     : > "$_DNSRECON_DIR/.karnel-wrapper"
-    pip install -r "$_DNSRECON_DIR/requirements.txt" 2>/dev/null
+    pip install -r "$_DNSRECON_DIR/requirements.txt" 2>>"$LOG_FILE" || return 1
     log_success "dnsrecon atualizado"
     return 0
   fi

package/karnel/tools/security/metasploit/install.sh

@@ -25,8 +25,8 @@ install_metasploit() {
   }
 
   cd "$METASPLOIT_DIR"
-  gem install bundler 2>/dev/null
-  bundle install --jobs 4 2>/dev/null
+  gem install bundler 2>>"$LOG_FILE" || return 1
+  bundle install --jobs 4 2>>"$LOG_FILE" || return 1
 
   for bin in msfconsole msfvenom msfrpc msfrpcd msfdb; do
     cat > "$PREFIX/bin/$bin" << BINEOF
@@ -58,7 +58,7 @@ update_metasploit() {
     _pinned_git_repo_owned "$METASPLOIT_DIR" "$METASPLOIT_REPO" ||
       { [ -f "$METASPLOIT_DIR/.karnel-installed" ] && _adopt_pinned_git_repo "$METASPLOIT_DIR" "$METASPLOIT_REPO"; } || return 1
     install_pinned_git_repo "$METASPLOIT_REPO" "$METASPLOIT_COMMIT" "$METASPLOIT_DIR" || return 1
-    cd "$METASPLOIT_DIR" && bundle install --jobs 4 2>/dev/null
+    cd "$METASPLOIT_DIR" && bundle install --jobs 4 2>>"$LOG_FILE" || return 1
     for bin in msfconsole msfvenom msfrpc msfrpcd msfdb; do
       sha256sum "$PREFIX/bin/$bin" > "$METASPLOIT_DIR/.karnel-wrapper-$bin"
     done

package/karnel/tools/security/theharvester/install.sh

@@ -19,7 +19,7 @@ install_theharvester() {
     return 1
   }
   if install_pinned_git_repo "$_THEHARVESTER_REPO" "$_THEHARVESTER_COMMIT" "$_THEHARVESTER_DIR"; then
-    pip install -r "$_THEHARVESTER_DIR/requirements/base.txt" 2>/dev/null
+    pip install -r "$_THEHARVESTER_DIR/requirements/base.txt" 2>>"$LOG_FILE" || return 1
     chmod +x "$_THEHARVESTER_DIR/theHarvester.py"
     ln -sf "$_THEHARVESTER_DIR/theHarvester.py" "$PREFIX/bin/theharvester"
     : > "$_THEHARVESTER_DIR/.karnel-wrapper"
@@ -45,7 +45,7 @@ update_theharvester() {
       { [ -f "$_THEHARVESTER_DIR/.karnel-wrapper" ] && _adopt_pinned_git_repo "$_THEHARVESTER_DIR" "$_THEHARVESTER_REPO"; } || return 1
     install_pinned_git_repo "$_THEHARVESTER_REPO" "$_THEHARVESTER_COMMIT" "$_THEHARVESTER_DIR" || return 1
     : > "$_THEHARVESTER_DIR/.karnel-wrapper"
-    pip install -r "$_THEHARVESTER_DIR/requirements/base.txt" 2>/dev/null
+    pip install -r "$_THEHARVESTER_DIR/requirements/base.txt" 2>>"$LOG_FILE" || return 1
     log_success "theharvester atualizado"
     return 0
   fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.17.3",
+  "version": "4.17.5",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"