karnel-termux 4.17.34 → 4.17.35

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.17.34-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.17.35-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -78,7 +78,7 @@ Why it's great:
 ### Via checksummed GitHub release (recommended)
 
 ```bash
-version=4.17.34
+version=4.17.35
 tmpdir=$(mktemp -d) && trap 'rm -rf "$tmpdir"' EXIT
 base="https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/v$version"
 curl -fsSL "$base/karnel-termux-install.sh" -o "$tmpdir/karnel-termux-install.sh"
@@ -666,8 +666,9 @@ once every 24 hours; the check can use npm or GitHub and writes state under
 
 The repository CI validates Bash/Zsh syntax, ShellCheck errors, CLI smoke tests,
 version behavior, Robin contracts, plugin lifecycle contracts, and npm package
-contents. The documentation site is built by the `Publish Docs` workflow with
-`actions/jekyll-build-pages`, so a broken Jekyll page fails that build.
+contents. The `Publish Docs` workflow builds the GitHub Pages documentation
+mirror with `actions/jekyll-build-pages`; the official Vite documentation site
+is built and deployed separately through Vercel.
 
 These checks do not install every external tool or prove behavior on every Android
 device. Before relying on a new installer, test it in native Termux aarch64 with

package/docs/ARCHITECTURE/index.md

@@ -33,7 +33,7 @@ karnel-termux/
 │   │       ├── dev.sh          # Dev tools installer
 │   │       └── ...
 │   ├── tools/                  # Individual tool installers
-│   │   ├── ai/                 # 45 AI tools
+│   │   ├── ai/                 # 46 AI tools
 │   │   ├── lang/               # 8 languages
 │   │   ├── db/                 # 5 databases
 │   │   ├── dev/                # 22 dev tools

package/docs/cli/index.md

@@ -29,7 +29,7 @@ karnel install <module> --tool1 --tool2  # Install specific tools only
 |-----------|-------------|
 | `lang`    | Node.js, Python, Go, Rust, C/C++, PHP, Perl, Bun |
 | `db`      | PostgreSQL, MariaDB, SQLite, MongoDB, Redis |
-| `ai`      | 45 AI tools (OpenCode, Cactus, Hugging Face, Claude Code, KeelCode, Goose, Factory Droid, Ollama, etc.) |
+| `ai`      | 46 AI tools (OpenCode, Cactus, Hugging Face, Claude Code, KeelCode, Goose, Factory Droid, 10Router, Ollama, etc.) |
 | `editor`  | code-server (VS Code in browser), Neovim, NvChad |
 | `dev`     | gh, curl, fzf, bat, lsd, jq, tmux, openssh, snyk (22 tools) |
 | `npm`     | TypeScript, NestJS CLI, Prettier, Vercel CLI, etc. |
@@ -143,7 +143,7 @@ binary/command name, and current install status.
 |-----------|-------|
 | `lang`    | 8 languages |
 | `db`      | 5 databases |
-| `ai`      | 45 AI tools |
+| `ai`      | 46 AI tools |
 | `editor`  | 3 editor components |
 | `dev`     | 22 development tools |
 | `npm`     | 11 npm global modules |

package/docs/index.md

@@ -9,7 +9,7 @@ layout: base
 ## What is Karnel?
 
 Karnel Termux transforms your Android device into a complete development workstation.
-With a single CLI (`karnel`), you can install and manage 45 AI tools, 3 editors,
+With a single CLI (`karnel`), you can install and manage 46 AI tools, 3 editors,
 8 languages, 5 databases, 22 dev tools, 11 npm packages, 10 shell plugins,
 4 UI components, 4 deploy CLIs, 6 games, 2 network tools, 13 utility tools,
 30 security tools, 1 automation tool, responsible OSINT, a second brain,

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-f571178a0a7fdf05e9963d7effeeb2ddf65e7599
+ef4116e544713bea8b0551b4c62eeecb8dd13e0e

package/karnel/cli/commands/update.sh

@@ -276,11 +276,7 @@ _update_try_curl() {
       return 0
     fi
   else
-    if bash "$installer" --ref "$tag"; then
-      rm -f "$installer"
-      log_success "Karnel-Termux updated via curl ($tag)"
-      return 0
-    fi
+    log_error "Could not verify the immutable commit for $tag"
   fi
 
   rm -f "$installer"
@@ -421,7 +417,17 @@ _update_show_manual() {
 
 _update_karnel_repo() {
   local repo_dir="$KARNEL_PATH/.."
-  local old_head
+  local old_head origin
+
+  origin=$(git -C "$repo_dir" remote get-url origin 2>/dev/null) || return 1
+  case "${origin%.git}" in
+    https://github.com/israelmarques1024-dotcom/karnel-termux|git@github.com:israelmarques1024-dotcom/karnel-termux) ;;
+    *) log_error "Refusing git update from an untrusted origin: $origin"; return 1 ;;
+  esac
+  if [[ -n "$(git -C "$repo_dir" status --porcelain --untracked-files=all 2>/dev/null)" ]]; then
+    log_error "Refusing git update with uncommitted framework changes"
+    return 1
+  fi
 
   old_head=$(git -C "$repo_dir" rev-parse HEAD 2>/dev/null)
 

package/karnel/tools/auto/n8n/install.sh

@@ -33,7 +33,7 @@ _n8n_dependencies() {
 }
 
 _install_n8n_impl() {
-  _n8n_dependencies
+  _n8n_dependencies || return 1
 
   mkdir -p "$(dirname "$LOG_FILE")"
   export GYP_DEFINES="android_ndk_path=''"

package/karnel/tools/deploy/railway/install.sh

@@ -88,7 +88,15 @@ _install_railway_manual() {
 }
 
 _install_railway_manual_impl() {
-  mkdir -p "$RAILWAY_DATA_DIR"
+  if [[ -e "$RAILWAY_DATA_DIR" ]] && ! _railway_data_is_karnel_owned; then
+    log_error "Refusing to replace unowned Railway data: $RAILWAY_DATA_DIR"
+    return 1
+  fi
+  if [[ -e "$PREFIX/bin/railway" || -L "$PREFIX/bin/railway" ]] && ! _railway_command_is_karnel_owned; then
+    log_error "Refusing to replace unowned railway command: $PREFIX/bin/railway"
+    return 1
+  fi
+  mkdir -p "$RAILWAY_DATA_DIR" "$PREFIX/bin"
 
   local latest_version
   latest_version=$(curl -fsSL --connect-timeout 10 "https://api.github.com/repos/railwayapp/cli/releases/latest" 2>/dev/null | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')

package/karnel/tools/security/amass/install.sh

@@ -2,6 +2,7 @@
 
 _AMASS_MARKER="$PREFIX/share/karnel-installers/amass"
 _AMASS_VERSION="4.2.0"
+_amass_package_owned() { [[ -f "$_AMASS_MARKER" && "$(<"$_AMASS_MARKER")" == 'pkg:amass' ]]; }
 
 _amass_arch() {
   local arch
@@ -16,7 +17,7 @@ _amass_arch() {
 
 install_amass() (
   if command -v amass &>/dev/null; then
-    if ! installer_file_owned "$PREFIX/bin/amass" "$_AMASS_MARKER"; then
+    if ! installer_file_owned "$PREFIX/bin/amass" "$_AMASS_MARKER" && ! _amass_package_owned; then
       log_info "amass já está instalado"
       return 2
     fi
@@ -25,7 +26,7 @@ install_amass() (
   if [ ! -f "$_AMASS_MARKER" ] &&
     { pkg install -y amass 2>/dev/null || apt install -y amass 2>/dev/null; }; then
     local bin; bin="$(command -v amass)"
-    [ -n "$bin" ] && sha256sum "$bin" > "$_AMASS_MARKER" 2>/dev/null
+    [ -n "$bin" ] && { mkdir -p "$(dirname "$_AMASS_MARKER")" && printf '%s\n' 'pkg:amass' >"$_AMASS_MARKER"; }
     log_success "amass instalado"
     return 0
   fi
@@ -66,7 +67,10 @@ install_amass() (
 
 uninstall_amass() {
   log_info "Removendo amass..."
-  if [ -f "$_AMASS_MARKER" ]; then
+  if _amass_package_owned; then
+    pkg uninstall -y amass 2>/dev/null || apt remove -y amass 2>/dev/null || return 1
+    rm -f "$_AMASS_MARKER"
+  elif [ -f "$_AMASS_MARKER" ]; then
     [ "$(sha256sum "$PREFIX/bin/amass" 2>/dev/null)" = "$(<"$_AMASS_MARKER")" ] && rm -f "$PREFIX/bin/amass"
     rm -f "$_AMASS_MARKER"
   fi

package/karnel/tools/security/burpsuite/install.sh

@@ -4,6 +4,8 @@ _BURP_DIR="$PREFIX/share/burpsuite"
 _BURP_JAR="burpsuite_community.jar"
 _BURP_VERSION="2026.7.3"
 _BURP_SHA256="c8262dc5426f38bedc490d66c5d21b6ff77d6dc6d85cefe6a66c882690134069"
+_BURP_PACKAGE_MARKER="$PREFIX/share/karnel-installers/burpsuite"
+_burpsuite_package_owned() { [[ -f "$_BURP_PACKAGE_MARKER" && "$(<"$_BURP_PACKAGE_MARKER")" == 'pkg:burpsuite' ]]; }
 
 _burpsuite_owned() {
   installer_file_owned "$PREFIX/bin/burpsuite" "$_BURP_DIR/.karnel-wrapper"
@@ -11,7 +13,7 @@ _burpsuite_owned() {
 
 install_burpsuite() (
   if command -v burpsuite &>/dev/null; then
-    if ! _burpsuite_owned; then
+    if ! _burpsuite_owned && ! _burpsuite_package_owned; then
       log_info "burpsuite já está instalado"
       return 2
     fi
@@ -20,6 +22,7 @@ install_burpsuite() (
 
   if [ ! -f "$_BURP_DIR/.karnel-wrapper" ] &&
     { pkg install -y burpsuite 2>/dev/null || apt install -y burpsuite 2>/dev/null; }; then
+    mkdir -p "$(dirname "$_BURP_PACKAGE_MARKER")" && printf '%s\n' 'pkg:burpsuite' >"$_BURP_PACKAGE_MARKER" || return 1
     log_success "burpsuite instalado"
     return 0
   fi
@@ -74,7 +77,10 @@ SCRIPT
 
 uninstall_burpsuite() {
   log_info "Removendo Burp Suite..."
-  if [ -f "$_BURP_DIR/.karnel-wrapper" ]; then
+  if _burpsuite_package_owned; then
+    pkg uninstall -y burpsuite 2>/dev/null || apt remove -y burpsuite 2>/dev/null || return 1
+    rm -f "$_BURP_PACKAGE_MARKER"
+  elif [ -f "$_BURP_DIR/.karnel-wrapper" ]; then
     [ "$(sha256sum "$PREFIX/bin/burpsuite" 2>/dev/null)" = "$(<"$_BURP_DIR/.karnel-wrapper")" ] && rm -f "$PREFIX/bin/burpsuite"
     rm -rf "$_BURP_DIR"
   fi

package/karnel/tools/security/ffuf/install.sh

@@ -2,6 +2,7 @@
 
 _FFUF_MARKER="$PREFIX/share/karnel-installers/ffuf"
 _FFUF_VERSION="2.1.0"
+_ffuf_package_owned() { [[ -f "$_FFUF_MARKER" && "$(<"$_FFUF_MARKER")" == 'pkg:ffuf' ]]; }
 
 inc_ffuf_arch() {
   local arch
@@ -48,6 +49,7 @@ install_ffuf() {
   fi
   log_info "Instalando ffuf..."
   if pkg install -y ffuf 2>/dev/null || apt install -y ffuf 2>/dev/null; then
+    mkdir -p "$(dirname "$_FFUF_MARKER")" && printf '%s\n' 'pkg:ffuf' >"$_FFUF_MARKER" || return 1
     log_success "ffuf instalado"
     return 0
   fi
@@ -61,7 +63,10 @@ install_ffuf() {
 
 uninstall_ffuf() {
   log_info "Removendo ffuf..."
-  if [ -f "$_FFUF_MARKER" ]; then
+  if _ffuf_package_owned; then
+    pkg uninstall -y ffuf 2>/dev/null || apt remove -y ffuf 2>/dev/null || return 1
+    rm -f "$_FFUF_MARKER"
+  elif [ -f "$_FFUF_MARKER" ]; then
     [ "$(sha256sum "$PREFIX/bin/ffuf" 2>/dev/null)" = "$(<"$_FFUF_MARKER")" ] && rm -f "$PREFIX/bin/ffuf"
     rm -f "$_FFUF_MARKER"
   fi

package/karnel/tools/security/gobuster/install.sh

@@ -3,6 +3,7 @@
 _GOBUSTER_VERSION="3.6.0"
 _GOBUSTER_DIR="$PREFIX/share/gobuster"
 _GOBUSTER_MARKER="$PREFIX/share/karnel-installers/gobuster"
+_gobuster_package_owned() { [[ -f "$_GOBUSTER_MARKER" && "$(<"$_GOBUSTER_MARKER")" == 'pkg:gobuster' ]]; }
 
 _install_gobuster_bin() (
   local arch asset checksum tmpdir archive staged_bin
@@ -36,7 +37,7 @@ _install_gobuster_bin() (
 
 install_gobuster() {
   if command -v gobuster &>/dev/null; then
-    if ! installer_file_owned "$PREFIX/bin/gobuster" "$_GOBUSTER_MARKER"; then
+    if ! installer_file_owned "$PREFIX/bin/gobuster" "$_GOBUSTER_MARKER" && ! _gobuster_package_owned; then
       log_info "gobuster já está instalado"
       return 2
     fi
@@ -44,6 +45,7 @@ install_gobuster() {
   log_info "Instalando gobuster..."
   if [ ! -f "$_GOBUSTER_MARKER" ] &&
     { pkg install -y gobuster 2>/dev/null || apt install -y gobuster 2>/dev/null; }; then
+    mkdir -p "$(dirname "$_GOBUSTER_MARKER")" && printf '%s\n' 'pkg:gobuster' >"$_GOBUSTER_MARKER" || return 1
     log_success "gobuster instalado"
     return 0
   fi
@@ -57,7 +59,10 @@ install_gobuster() {
 
 uninstall_gobuster() {
   log_info "Removendo gobuster..."
-  if [ -f "$_GOBUSTER_MARKER" ]; then
+  if _gobuster_package_owned; then
+    pkg uninstall -y gobuster 2>/dev/null || apt remove -y gobuster 2>/dev/null || return 1
+    rm -f "$_GOBUSTER_MARKER"
+  elif [ -f "$_GOBUSTER_MARKER" ]; then
     [ "$(sha256sum "$PREFIX/bin/gobuster" 2>/dev/null)" = "$(<"$_GOBUSTER_MARKER")" ] && rm -f "$PREFIX/bin/gobuster"
     rm -f "$_GOBUSTER_MARKER"
   fi

package/karnel/tools/security/subfinder/install.sh

@@ -2,6 +2,7 @@
 
 _SUBFINDER_MARKER="$PREFIX/share/karnel-installers/subfinder"
 _SUBFINDER_VERSION="2.6.6"
+_subfinder_package_owned() { [[ -f "$_SUBFINDER_MARKER" && "$(<"$_SUBFINDER_MARKER")" == 'pkg:subfinder' ]]; }
 
 _subfinder_arch() {
   local arch
@@ -16,7 +17,7 @@ _subfinder_arch() {
 
 install_subfinder() (
   if command -v subfinder &>/dev/null; then
-    if ! installer_file_owned "$PREFIX/bin/subfinder" "$_SUBFINDER_MARKER"; then
+    if ! installer_file_owned "$PREFIX/bin/subfinder" "$_SUBFINDER_MARKER" && ! _subfinder_package_owned; then
       log_info "subfinder já está instalado"
       return 2
     fi
@@ -25,7 +26,7 @@ install_subfinder() (
   if [ ! -f "$_SUBFINDER_MARKER" ] &&
     { pkg install -y subfinder 2>/dev/null || apt install -y subfinder 2>/dev/null; }; then
     local bin; bin="$(command -v subfinder)"
-    [ -n "$bin" ] && sha256sum "$bin" > "$_SUBFINDER_MARKER" 2>/dev/null
+    [ -n "$bin" ] && { mkdir -p "$(dirname "$_SUBFINDER_MARKER")" && printf '%s\n' 'pkg:subfinder' >"$_SUBFINDER_MARKER"; }
     log_success "subfinder instalado"
     return 0
   fi
@@ -65,7 +66,10 @@ install_subfinder() (
 
 uninstall_subfinder() {
   log_info "Removendo subfinder..."
-  if [ -f "$_SUBFINDER_MARKER" ]; then
+  if _subfinder_package_owned; then
+    pkg uninstall -y subfinder 2>/dev/null || apt remove -y subfinder 2>/dev/null || return 1
+    rm -f "$_SUBFINDER_MARKER"
+  elif [ -f "$_SUBFINDER_MARKER" ]; then
     [ "$(sha256sum "$PREFIX/bin/subfinder" 2>/dev/null)" = "$(<"$_SUBFINDER_MARKER")" ] && rm -f "$PREFIX/bin/subfinder"
     rm -f "$_SUBFINDER_MARKER"
   fi

package/karnel/tools/security/zap/install.sh

@@ -3,6 +3,8 @@
 _ZAP_DIR="$PREFIX/share/zap"
 _ZAP_VERSION="2.16.1"
 _ZAP_SHA256="5b2eb8319b085121a6e8ad50d69d67dbef8c867166f71a937bfc888d247a2ac1"
+_ZAP_PACKAGE_MARKER="$PREFIX/share/karnel-installers/zaproxy"
+_zap_package_owned() { [[ -f "$_ZAP_PACKAGE_MARKER" && "$(<"$_ZAP_PACKAGE_MARKER")" == 'pkg:zaproxy' ]]; }
 
 _zap_owned() {
   installer_file_owned "$PREFIX/bin/zap" "$_ZAP_DIR/.karnel-wrapper"
@@ -10,7 +12,7 @@ _zap_owned() {
 
 install_zap() (
   if command -v zap &>/dev/null; then
-    if ! _zap_owned; then
+    if ! _zap_owned && ! _zap_package_owned; then
       log_info "zap já está instalado"
       return 2
     fi
@@ -19,6 +21,7 @@ install_zap() (
 
   if [ ! -f "$_ZAP_DIR/.karnel-wrapper" ] &&
     { pkg install -y zaproxy 2>/dev/null || apt install -y zaproxy 2>/dev/null; }; then
+    mkdir -p "$(dirname "$_ZAP_PACKAGE_MARKER")" && printf '%s\n' 'pkg:zaproxy' >"$_ZAP_PACKAGE_MARKER" || return 1
     log_success "zap instalado"
     return 0
   fi
@@ -102,7 +105,10 @@ SCRIPT
 
 uninstall_zap() {
   log_info "Removendo ZAP..."
-  if [ -f "$_ZAP_DIR/.karnel-wrapper" ]; then
+  if _zap_package_owned; then
+    pkg uninstall -y zaproxy 2>/dev/null || apt remove -y zaproxy 2>/dev/null || return 1
+    rm -f "$_ZAP_PACKAGE_MARKER"
+  elif [ -f "$_ZAP_DIR/.karnel-wrapper" ]; then
     [ "$(sha256sum "$PREFIX/bin/zap" 2>/dev/null)" = "$(<"$_ZAP_DIR/.karnel-wrapper")" ] && rm -f "$PREFIX/bin/zap"
     rm -rf "$_ZAP_DIR"
   fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.17.34",
+  "version": "4.17.35",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"