karnel-termux 4.17.34 → 4.17.36

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.17.34-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.17.36-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -31,7 +31,7 @@
 
 **Karnel Termux** is a modular development environment that transforms Termux into a complete workstation.
 
-Created by **Israel Marques**. Core agent contributions by **devcorex**.
+Created by **Israel Marques**.
 
 With a single CLI (`karnel`), install and manage:
 
@@ -78,7 +78,7 @@ Why it's great:
 ### Via checksummed GitHub release (recommended)
 
 ```bash
-version=4.17.34
+version=4.17.36
 tmpdir=$(mktemp -d) && trap 'rm -rf "$tmpdir"' EXIT
 base="https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/v$version"
 curl -fsSL "$base/karnel-termux-install.sh" -o "$tmpdir/karnel-termux-install.sh"
@@ -666,8 +666,9 @@ once every 24 hours; the check can use npm or GitHub and writes state under
 
 The repository CI validates Bash/Zsh syntax, ShellCheck errors, CLI smoke tests,
 version behavior, Robin contracts, plugin lifecycle contracts, and npm package
-contents. The documentation site is built by the `Publish Docs` workflow with
-`actions/jekyll-build-pages`, so a broken Jekyll page fails that build.
+contents. The `Publish Docs` workflow builds the GitHub Pages documentation
+mirror with `actions/jekyll-build-pages`; the official Vite documentation site
+is built and deployed separately through Vercel.
 
 These checks do not install every external tool or prove behavior on every Android
 device. Before relying on a new installer, test it in native Termux aarch64 with

package/docs/ARCHITECTURE/index.md

@@ -33,7 +33,7 @@ karnel-termux/
 │   │       ├── dev.sh          # Dev tools installer
 │   │       └── ...
 │   ├── tools/                  # Individual tool installers
-│   │   ├── ai/                 # 45 AI tools
+│   │   ├── ai/                 # 46 AI tools
 │   │   ├── lang/               # 8 languages
 │   │   ├── db/                 # 5 databases
 │   │   ├── dev/                # 22 dev tools

package/docs/CHANGELOG.md

@@ -249,14 +249,13 @@ layout: base
 - Cactus glibc installer: pip output is now streamed live (and mirrored to the
   install log) instead of being hidden behind an indeterminate spinner, which
   made multi-minute downloads look frozen.
-- Credits: devcorex credited as a core agent contributor in `karnel agent`
-  help/REPL screens and project READMEs.
+- Agent help/REPL screens and project READMEs were updated with contributor
+  credits.
 
 ## 4.16.0 - 2026-08-20
 
-- Rebranded fully to Karnel: removed every remaining reference to DevCoreX and
-  core-termux across contributors, CLI `open` targets, completions, docs and
-  agent utilities.
+- Rebranded fully to Karnel: removed legacy upstream branding across
+  contributors, CLI `open` targets, completions, docs and agent utilities.
 - `nvchad` editor tool now installs the official upstream `NvChad/starter`
   (pinned to a reviewed commit) instead of a third-party fork.
 - Added the `karnel agent` subsystem (agent.sh, agent_actions.sh, agent_llm.sh,

package/docs/cli/index.md

@@ -29,7 +29,7 @@ karnel install <module> --tool1 --tool2  # Install specific tools only
 |-----------|-------------|
 | `lang`    | Node.js, Python, Go, Rust, C/C++, PHP, Perl, Bun |
 | `db`      | PostgreSQL, MariaDB, SQLite, MongoDB, Redis |
-| `ai`      | 45 AI tools (OpenCode, Cactus, Hugging Face, Claude Code, KeelCode, Goose, Factory Droid, Ollama, etc.) |
+| `ai`      | 46 AI tools (OpenCode, Cactus, Hugging Face, Claude Code, KeelCode, Goose, Factory Droid, 10Router, Ollama, etc.) |
 | `editor`  | code-server (VS Code in browser), Neovim, NvChad |
 | `dev`     | gh, curl, fzf, bat, lsd, jq, tmux, openssh, snyk (22 tools) |
 | `npm`     | TypeScript, NestJS CLI, Prettier, Vercel CLI, etc. |
@@ -143,7 +143,7 @@ binary/command name, and current install status.
 |-----------|-------|
 | `lang`    | 8 languages |
 | `db`      | 5 databases |
-| `ai`      | 45 AI tools |
+| `ai`      | 46 AI tools |
 | `editor`  | 3 editor components |
 | `dev`     | 22 development tools |
 | `npm`     | 11 npm global modules |

package/docs/index.md

@@ -9,7 +9,7 @@ layout: base
 ## What is Karnel?
 
 Karnel Termux transforms your Android device into a complete development workstation.
-With a single CLI (`karnel`), you can install and manage 45 AI tools, 3 editors,
+With a single CLI (`karnel`), you can install and manage 46 AI tools, 3 editors,
 8 languages, 5 databases, 22 dev tools, 11 npm packages, 10 shell plugins,
 4 UI components, 4 deploy CLIs, 6 games, 2 network tools, 13 utility tools,
 30 security tools, 1 automation tool, responsible OSINT, a second brain,
@@ -48,4 +48,4 @@ Open its docs with `karnel open herdr`.
 
 ## Credits
 
-Created by **Israel Marques**. Core agent contributions by **devcorex**.
+Created by **Israel Marques**.

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-f571178a0a7fdf05e9963d7effeeb2ddf65e7599
+6ce9fe8b0567a2129eac070d4c168dd5ea79450f

package/karnel/cli/commands/agent.sh

@@ -14,8 +14,6 @@
 # TTY) typing `@query` opens an fzf picker to attach a file's
 # contents to your message.
 #
-# Credits:
-#   devcorex — core agent contributor
 # ============================================================
 
 import "@/utils/log"
@@ -31,8 +29,6 @@ agent_help() {
 	echo
 	box "Karnel Agent — Local AI Assistant & Task Agent"
 	echo
-	printf "    ${D_GRAY}credits: devcorex — core agent${D_NC}\n"
-	echo
 	log_info "Usage: karnel agent <ask|run|config> [options]"
 	echo
 	separator_section "Subcommands"
@@ -560,8 +556,6 @@ agent_ask_repl() {
 	agent_banner
 	separator_section "Karnel Agent — Ask"
 	echo
-	printf "    ${D_GRAY}credits: devcorex — core agent${D_NC}\n"
-	echo
 	agent_status_line
 	echo
 	list_item "Type ${D_CYAN}/help${D_NC} to see all commands"
@@ -677,8 +671,6 @@ agent_run_repl() {
 	agent_banner
 	separator_section "Karnel Agent — Run ($([[ $AGENT_PLAN_MODE == 1 ]] && echo 'PLAN · read-only' || echo 'BUILD mode'))"
 	echo
-	printf "    ${D_GRAY}credits: devcorex — core agent${D_NC}\n"
-	echo
 	agent_status_line
 	echo
 	list_item "Type ${D_CYAN}/help${D_NC} to see all commands"

package/karnel/cli/commands/update.sh

@@ -276,11 +276,7 @@ _update_try_curl() {
       return 0
     fi
   else
-    if bash "$installer" --ref "$tag"; then
-      rm -f "$installer"
-      log_success "Karnel-Termux updated via curl ($tag)"
-      return 0
-    fi
+    log_error "Could not verify the immutable commit for $tag"
   fi
 
   rm -f "$installer"
@@ -421,7 +417,17 @@ _update_show_manual() {
 
 _update_karnel_repo() {
   local repo_dir="$KARNEL_PATH/.."
-  local old_head
+  local old_head origin
+
+  origin=$(git -C "$repo_dir" remote get-url origin 2>/dev/null) || return 1
+  case "${origin%.git}" in
+    https://github.com/israelmarques1024-dotcom/karnel-termux|git@github.com:israelmarques1024-dotcom/karnel-termux) ;;
+    *) log_error "Refusing git update from an untrusted origin: $origin"; return 1 ;;
+  esac
+  if [[ -n "$(git -C "$repo_dir" status --porcelain --untracked-files=all 2>/dev/null)" ]]; then
+    log_error "Refusing git update with uncommitted framework changes"
+    return 1
+  fi
 
   old_head=$(git -C "$repo_dir" rev-parse HEAD 2>/dev/null)
 

package/karnel/tools/auto/n8n/install.sh

@@ -33,7 +33,7 @@ _n8n_dependencies() {
 }
 
 _install_n8n_impl() {
-  _n8n_dependencies
+  _n8n_dependencies || return 1
 
   mkdir -p "$(dirname "$LOG_FILE")"
   export GYP_DEFINES="android_ndk_path=''"

package/karnel/tools/deploy/netlify/install.sh

@@ -87,6 +87,7 @@ _do_update_netlify() {
     return 1
   fi
   command -v termux-fix-shebang &>/dev/null && termux-fix-shebang "$(command -v netlify)" &>/dev/null
+  record_managed_file "$(command -v netlify)" "$NETLIFY_MARKER" || return 1
   return 0
 }
 

package/karnel/tools/deploy/railway/install.sh

@@ -88,7 +88,15 @@ _install_railway_manual() {
 }
 
 _install_railway_manual_impl() {
-  mkdir -p "$RAILWAY_DATA_DIR"
+  if [[ -e "$RAILWAY_DATA_DIR" ]] && ! _railway_data_is_karnel_owned; then
+    log_error "Refusing to replace unowned Railway data: $RAILWAY_DATA_DIR"
+    return 1
+  fi
+  if [[ -e "$PREFIX/bin/railway" || -L "$PREFIX/bin/railway" ]] && ! _railway_command_is_karnel_owned; then
+    log_error "Refusing to replace unowned railway command: $PREFIX/bin/railway"
+    return 1
+  fi
+  mkdir -p "$RAILWAY_DATA_DIR" "$PREFIX/bin"
 
   local latest_version
   latest_version=$(curl -fsSL --connect-timeout 10 "https://api.github.com/repos/railwayapp/cli/releases/latest" 2>/dev/null | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')

package/karnel/tools/deploy/vercel/install.sh

@@ -69,6 +69,7 @@ _do_update_vercel() {
     return 1
   fi
   command -v termux-fix-shebang &>/dev/null && termux-fix-shebang "$(command -v vercel)" &>/dev/null
+  record_managed_file "$(command -v vercel)" "$VERCEL_MARKER" || return 1
   return 0
 }
 

package/karnel/tools/security/amass/install.sh

@@ -2,6 +2,7 @@
 
 _AMASS_MARKER="$PREFIX/share/karnel-installers/amass"
 _AMASS_VERSION="4.2.0"
+_amass_package_owned() { [[ -f "$_AMASS_MARKER" && "$(<"$_AMASS_MARKER")" == 'pkg:amass' ]]; }
 
 _amass_arch() {
   local arch
@@ -16,7 +17,7 @@ _amass_arch() {
 
 install_amass() (
   if command -v amass &>/dev/null; then
-    if ! installer_file_owned "$PREFIX/bin/amass" "$_AMASS_MARKER"; then
+    if ! installer_file_owned "$PREFIX/bin/amass" "$_AMASS_MARKER" && ! _amass_package_owned; then
       log_info "amass já está instalado"
       return 2
     fi
@@ -25,7 +26,7 @@ install_amass() (
   if [ ! -f "$_AMASS_MARKER" ] &&
     { pkg install -y amass 2>/dev/null || apt install -y amass 2>/dev/null; }; then
     local bin; bin="$(command -v amass)"
-    [ -n "$bin" ] && sha256sum "$bin" > "$_AMASS_MARKER" 2>/dev/null
+    [ -n "$bin" ] && { mkdir -p "$(dirname "$_AMASS_MARKER")" && printf '%s\n' 'pkg:amass' >"$_AMASS_MARKER"; }
     log_success "amass instalado"
     return 0
   fi
@@ -66,7 +67,10 @@ install_amass() (
 
 uninstall_amass() {
   log_info "Removendo amass..."
-  if [ -f "$_AMASS_MARKER" ]; then
+  if _amass_package_owned; then
+    pkg uninstall -y amass 2>/dev/null || apt remove -y amass 2>/dev/null || return 1
+    rm -f "$_AMASS_MARKER"
+  elif [ -f "$_AMASS_MARKER" ]; then
     [ "$(sha256sum "$PREFIX/bin/amass" 2>/dev/null)" = "$(<"$_AMASS_MARKER")" ] && rm -f "$PREFIX/bin/amass"
     rm -f "$_AMASS_MARKER"
   fi

package/karnel/tools/security/burpsuite/install.sh

@@ -4,6 +4,8 @@ _BURP_DIR="$PREFIX/share/burpsuite"
 _BURP_JAR="burpsuite_community.jar"
 _BURP_VERSION="2026.7.3"
 _BURP_SHA256="c8262dc5426f38bedc490d66c5d21b6ff77d6dc6d85cefe6a66c882690134069"
+_BURP_PACKAGE_MARKER="$PREFIX/share/karnel-installers/burpsuite"
+_burpsuite_package_owned() { [[ -f "$_BURP_PACKAGE_MARKER" && "$(<"$_BURP_PACKAGE_MARKER")" == 'pkg:burpsuite' ]]; }
 
 _burpsuite_owned() {
   installer_file_owned "$PREFIX/bin/burpsuite" "$_BURP_DIR/.karnel-wrapper"
@@ -11,7 +13,7 @@ _burpsuite_owned() {
 
 install_burpsuite() (
   if command -v burpsuite &>/dev/null; then
-    if ! _burpsuite_owned; then
+    if ! _burpsuite_owned && ! _burpsuite_package_owned; then
       log_info "burpsuite já está instalado"
       return 2
     fi
@@ -20,6 +22,7 @@ install_burpsuite() (
 
   if [ ! -f "$_BURP_DIR/.karnel-wrapper" ] &&
     { pkg install -y burpsuite 2>/dev/null || apt install -y burpsuite 2>/dev/null; }; then
+    mkdir -p "$(dirname "$_BURP_PACKAGE_MARKER")" && printf '%s\n' 'pkg:burpsuite' >"$_BURP_PACKAGE_MARKER" || return 1
     log_success "burpsuite instalado"
     return 0
   fi
@@ -74,7 +77,10 @@ SCRIPT
 
 uninstall_burpsuite() {
   log_info "Removendo Burp Suite..."
-  if [ -f "$_BURP_DIR/.karnel-wrapper" ]; then
+  if _burpsuite_package_owned; then
+    pkg uninstall -y burpsuite 2>/dev/null || apt remove -y burpsuite 2>/dev/null || return 1
+    rm -f "$_BURP_PACKAGE_MARKER"
+  elif [ -f "$_BURP_DIR/.karnel-wrapper" ]; then
     [ "$(sha256sum "$PREFIX/bin/burpsuite" 2>/dev/null)" = "$(<"$_BURP_DIR/.karnel-wrapper")" ] && rm -f "$PREFIX/bin/burpsuite"
     rm -rf "$_BURP_DIR"
   fi

package/karnel/tools/security/ffuf/install.sh

@@ -2,6 +2,7 @@
 
 _FFUF_MARKER="$PREFIX/share/karnel-installers/ffuf"
 _FFUF_VERSION="2.1.0"
+_ffuf_package_owned() { [[ -f "$_FFUF_MARKER" && "$(<"$_FFUF_MARKER")" == 'pkg:ffuf' ]]; }
 
 inc_ffuf_arch() {
   local arch
@@ -48,6 +49,7 @@ install_ffuf() {
   fi
   log_info "Instalando ffuf..."
   if pkg install -y ffuf 2>/dev/null || apt install -y ffuf 2>/dev/null; then
+    mkdir -p "$(dirname "$_FFUF_MARKER")" && printf '%s\n' 'pkg:ffuf' >"$_FFUF_MARKER" || return 1
     log_success "ffuf instalado"
     return 0
   fi
@@ -61,7 +63,10 @@ install_ffuf() {
 
 uninstall_ffuf() {
   log_info "Removendo ffuf..."
-  if [ -f "$_FFUF_MARKER" ]; then
+  if _ffuf_package_owned; then
+    pkg uninstall -y ffuf 2>/dev/null || apt remove -y ffuf 2>/dev/null || return 1
+    rm -f "$_FFUF_MARKER"
+  elif [ -f "$_FFUF_MARKER" ]; then
     [ "$(sha256sum "$PREFIX/bin/ffuf" 2>/dev/null)" = "$(<"$_FFUF_MARKER")" ] && rm -f "$PREFIX/bin/ffuf"
     rm -f "$_FFUF_MARKER"
   fi

package/karnel/tools/security/gobuster/install.sh

@@ -3,6 +3,7 @@
 _GOBUSTER_VERSION="3.6.0"
 _GOBUSTER_DIR="$PREFIX/share/gobuster"
 _GOBUSTER_MARKER="$PREFIX/share/karnel-installers/gobuster"
+_gobuster_package_owned() { [[ -f "$_GOBUSTER_MARKER" && "$(<"$_GOBUSTER_MARKER")" == 'pkg:gobuster' ]]; }
 
 _install_gobuster_bin() (
   local arch asset checksum tmpdir archive staged_bin
@@ -36,7 +37,7 @@ _install_gobuster_bin() (
 
 install_gobuster() {
   if command -v gobuster &>/dev/null; then
-    if ! installer_file_owned "$PREFIX/bin/gobuster" "$_GOBUSTER_MARKER"; then
+    if ! installer_file_owned "$PREFIX/bin/gobuster" "$_GOBUSTER_MARKER" && ! _gobuster_package_owned; then
       log_info "gobuster já está instalado"
       return 2
     fi
@@ -44,6 +45,7 @@ install_gobuster() {
   log_info "Instalando gobuster..."
   if [ ! -f "$_GOBUSTER_MARKER" ] &&
     { pkg install -y gobuster 2>/dev/null || apt install -y gobuster 2>/dev/null; }; then
+    mkdir -p "$(dirname "$_GOBUSTER_MARKER")" && printf '%s\n' 'pkg:gobuster' >"$_GOBUSTER_MARKER" || return 1
     log_success "gobuster instalado"
     return 0
   fi
@@ -57,7 +59,10 @@ install_gobuster() {
 
 uninstall_gobuster() {
   log_info "Removendo gobuster..."
-  if [ -f "$_GOBUSTER_MARKER" ]; then
+  if _gobuster_package_owned; then
+    pkg uninstall -y gobuster 2>/dev/null || apt remove -y gobuster 2>/dev/null || return 1
+    rm -f "$_GOBUSTER_MARKER"
+  elif [ -f "$_GOBUSTER_MARKER" ]; then
     [ "$(sha256sum "$PREFIX/bin/gobuster" 2>/dev/null)" = "$(<"$_GOBUSTER_MARKER")" ] && rm -f "$PREFIX/bin/gobuster"
     rm -f "$_GOBUSTER_MARKER"
   fi

package/karnel/tools/security/masscan/install.sh

@@ -3,6 +3,8 @@
 _MASSCAN_DIR="${KARNEL_DATA:-${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}/tools/masscan"
 _MASSCAN_REPO="https://github.com/robertdavidgraham/masscan.git"
 _MASSCAN_COMMIT="94e118ccd26c2fb263fb2fe731043f7b3240723c"
+_MASSCAN_PACKAGE_MARKER="$PREFIX/share/karnel-installers/masscan"
+_masscan_package_owned() { [[ -f "$_MASSCAN_PACKAGE_MARKER" && "$(<"$_MASSCAN_PACKAGE_MARKER")" == 'pkg:masscan' ]]; }
 
 install_masscan() {
   if command -v masscan &>/dev/null; then
@@ -11,6 +13,7 @@ install_masscan() {
   fi
   log_info "Instalando masscan..."
   if pkg install -y masscan 2>/dev/null || apt install -y masscan 2>/dev/null; then
+    mkdir -p "$(dirname "$_MASSCAN_PACKAGE_MARKER")" && printf '%s\n' 'pkg:masscan' >"$_MASSCAN_PACKAGE_MARKER" || return 1
     log_success "masscan instalado"
     return 0
   fi
@@ -34,7 +37,10 @@ install_masscan() {
 
 uninstall_masscan() {
   log_info "Removendo masscan..."
-  if [ -f "$_MASSCAN_DIR/.karnel-wrapper" ]; then
+  if _masscan_package_owned; then
+    pkg uninstall -y masscan 2>/dev/null || apt remove -y masscan 2>/dev/null || return 1
+    rm -f "$_MASSCAN_PACKAGE_MARKER"
+  elif [ -f "$_MASSCAN_DIR/.karnel-wrapper" ]; then
     [ "$(sha256sum "$PREFIX/bin/masscan" 2>/dev/null)" = "$(<"$_MASSCAN_DIR/.karnel-wrapper")" ] && rm -f "$PREFIX/bin/masscan"
     rm -rf "$_MASSCAN_DIR"
   fi

package/karnel/tools/security/metasploit/install.sh

@@ -3,6 +3,8 @@
 METASPLOIT_DIR="${KARNEL_DATA:-${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}/tools/metasploit-framework"
 METASPLOIT_REPO="https://github.com/rapid7/metasploit-framework.git"
 METASPLOIT_COMMIT="9f74eb0a48ca7f8039c2618e359c2e80f998ac89"
+METASPLOIT_PACKAGE_MARKER="$PREFIX/share/karnel-installers/metasploit"
+_metasploit_package_owned() { [[ -f "$METASPLOIT_PACKAGE_MARKER" && "$(<"$METASPLOIT_PACKAGE_MARKER")" == 'pkg:metasploit' ]]; }
 
 install_metasploit() {
   if command -v msfconsole &>/dev/null; then
@@ -12,6 +14,7 @@ install_metasploit() {
   log_info "Instalando Metasploit Framework..."
 
   if pkg install -y metasploit 2>/dev/null || apt install -y metasploit 2>/dev/null; then
+    mkdir -p "$(dirname "$METASPLOIT_PACKAGE_MARKER")" && printf '%s\n' 'pkg:metasploit' >"$METASPLOIT_PACKAGE_MARKER" || return 1
     log_success "metasploit instalado"
     return 0
   fi
@@ -44,6 +47,12 @@ BINEOF
 
 uninstall_metasploit() {
   log_info "Removendo Metasploit..."
+  if _metasploit_package_owned; then
+    pkg uninstall -y metasploit 2>/dev/null || apt remove -y metasploit 2>/dev/null || return 1
+    rm -f "$METASPLOIT_PACKAGE_MARKER"
+    log_success "metasploit removido"
+    return 0
+  fi
   for bin in msfconsole msfvenom msfrpc msfrpcd msfdb; do
     if [ -f "$METASPLOIT_DIR/.karnel-wrapper-$bin" ]; then
       [ "$(sha256sum "$PREFIX/bin/$bin" 2>/dev/null)" = "$(<"$METASPLOIT_DIR/.karnel-wrapper-$bin")" ] && rm -f "$PREFIX/bin/$bin"

package/karnel/tools/security/subfinder/install.sh

@@ -2,6 +2,7 @@
 
 _SUBFINDER_MARKER="$PREFIX/share/karnel-installers/subfinder"
 _SUBFINDER_VERSION="2.6.6"
+_subfinder_package_owned() { [[ -f "$_SUBFINDER_MARKER" && "$(<"$_SUBFINDER_MARKER")" == 'pkg:subfinder' ]]; }
 
 _subfinder_arch() {
   local arch
@@ -16,7 +17,7 @@ _subfinder_arch() {
 
 install_subfinder() (
   if command -v subfinder &>/dev/null; then
-    if ! installer_file_owned "$PREFIX/bin/subfinder" "$_SUBFINDER_MARKER"; then
+    if ! installer_file_owned "$PREFIX/bin/subfinder" "$_SUBFINDER_MARKER" && ! _subfinder_package_owned; then
       log_info "subfinder já está instalado"
       return 2
     fi
@@ -25,7 +26,7 @@ install_subfinder() (
   if [ ! -f "$_SUBFINDER_MARKER" ] &&
     { pkg install -y subfinder 2>/dev/null || apt install -y subfinder 2>/dev/null; }; then
     local bin; bin="$(command -v subfinder)"
-    [ -n "$bin" ] && sha256sum "$bin" > "$_SUBFINDER_MARKER" 2>/dev/null
+    [ -n "$bin" ] && { mkdir -p "$(dirname "$_SUBFINDER_MARKER")" && printf '%s\n' 'pkg:subfinder' >"$_SUBFINDER_MARKER"; }
     log_success "subfinder instalado"
     return 0
   fi
@@ -65,7 +66,10 @@ install_subfinder() (
 
 uninstall_subfinder() {
   log_info "Removendo subfinder..."
-  if [ -f "$_SUBFINDER_MARKER" ]; then
+  if _subfinder_package_owned; then
+    pkg uninstall -y subfinder 2>/dev/null || apt remove -y subfinder 2>/dev/null || return 1
+    rm -f "$_SUBFINDER_MARKER"
+  elif [ -f "$_SUBFINDER_MARKER" ]; then
     [ "$(sha256sum "$PREFIX/bin/subfinder" 2>/dev/null)" = "$(<"$_SUBFINDER_MARKER")" ] && rm -f "$PREFIX/bin/subfinder"
     rm -f "$_SUBFINDER_MARKER"
   fi

package/karnel/tools/security/zap/install.sh

@@ -3,6 +3,8 @@
 _ZAP_DIR="$PREFIX/share/zap"
 _ZAP_VERSION="2.16.1"
 _ZAP_SHA256="5b2eb8319b085121a6e8ad50d69d67dbef8c867166f71a937bfc888d247a2ac1"
+_ZAP_PACKAGE_MARKER="$PREFIX/share/karnel-installers/zaproxy"
+_zap_package_owned() { [[ -f "$_ZAP_PACKAGE_MARKER" && "$(<"$_ZAP_PACKAGE_MARKER")" == 'pkg:zaproxy' ]]; }
 
 _zap_owned() {
   installer_file_owned "$PREFIX/bin/zap" "$_ZAP_DIR/.karnel-wrapper"
@@ -10,7 +12,7 @@ _zap_owned() {
 
 install_zap() (
   if command -v zap &>/dev/null; then
-    if ! _zap_owned; then
+    if ! _zap_owned && ! _zap_package_owned; then
       log_info "zap já está instalado"
       return 2
     fi
@@ -19,6 +21,7 @@ install_zap() (
 
   if [ ! -f "$_ZAP_DIR/.karnel-wrapper" ] &&
     { pkg install -y zaproxy 2>/dev/null || apt install -y zaproxy 2>/dev/null; }; then
+    mkdir -p "$(dirname "$_ZAP_PACKAGE_MARKER")" && printf '%s\n' 'pkg:zaproxy' >"$_ZAP_PACKAGE_MARKER" || return 1
     log_success "zap instalado"
     return 0
   fi
@@ -102,7 +105,10 @@ SCRIPT
 
 uninstall_zap() {
   log_info "Removendo ZAP..."
-  if [ -f "$_ZAP_DIR/.karnel-wrapper" ]; then
+  if _zap_package_owned; then
+    pkg uninstall -y zaproxy 2>/dev/null || apt remove -y zaproxy 2>/dev/null || return 1
+    rm -f "$_ZAP_PACKAGE_MARKER"
+  elif [ -f "$_ZAP_DIR/.karnel-wrapper" ]; then
     [ "$(sha256sum "$PREFIX/bin/zap" 2>/dev/null)" = "$(<"$_ZAP_DIR/.karnel-wrapper")" ] && rm -f "$PREFIX/bin/zap"
     rm -rf "$_ZAP_DIR"
   fi

package/karnel/utils/env.sh

@@ -12,6 +12,40 @@ fi
 
 : "${HOME:?HOME is unset — cannot determine config paths}"
 
+# Karnel-managed commands are installed in $PREFIX/bin. Keep that directory
+# ahead of user-local binaries so an obsolete external install cannot shadow
+# an update that Karnel just completed, while preserving explicit PATH
+# overrides that appear before both directories.
+_karnel_prefer_prefix_bin() {
+  [[ -n "${PREFIX:-}" ]] || return 0
+
+  local prefix_bin="$PREFIX/bin" local_bin="$HOME/.local/bin"
+  local -a entries=() reordered=()
+  local prefix_index=-1 local_index=-1 index=0 entry joined="" inserted=0
+  IFS=: read -r -a entries <<< "${PATH:-}"
+  for entry in "${entries[@]}"; do
+    [[ "$entry" == "$prefix_bin" && $prefix_index -lt 0 ]] && prefix_index=$index
+    [[ "$entry" == "$local_bin" && $local_index -lt 0 ]] && local_index=$index
+    ((index += 1))
+  done
+  (( prefix_index > local_index && local_index >= 0 )) || return 0
+
+  for entry in "${entries[@]}"; do
+    [[ "$entry" == "$prefix_bin" ]] && continue
+    if [[ "$entry" == "$local_bin" && $inserted -eq 0 ]]; then
+      reordered+=("$prefix_bin")
+      inserted=1
+    fi
+    reordered+=("$entry")
+  done
+  for entry in "${reordered[@]}"; do
+    joined+="${joined:+:}$entry"
+  done
+  export PATH="$joined"
+}
+_karnel_prefer_prefix_bin
+unset -f _karnel_prefer_prefix_bin
+
 # configuración
 KARNEL_CONFIG="${XDG_CONFIG_HOME:-$HOME/.config}/karnel"
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.17.34",
+  "version": "4.17.36",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"
@@ -39,8 +39,7 @@
   ],
   "author": "israel marques",
   "contributors": [
-    "israel marques",
-    "devcorex"
+    "israel marques"
   ],
   "license": "MIT",
   "bugs": {