karnel-termux 4.17.43 → 4.17.44

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.17.43-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.17.44-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -78,7 +78,7 @@ Why it's great:
 ### Via checksummed GitHub release (recommended)
 
 ```bash
-version=4.17.43
+version=4.17.44
 tmpdir=$(mktemp -d) && trap 'rm -rf "$tmpdir"' EXIT
 base="https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/v$version"
 curl -fsSL "$base/karnel-termux-install.sh" -o "$tmpdir/karnel-termux-install.sh"

package/docs/CHANGELOG.md

@@ -6,6 +6,105 @@ layout: base
 
 # Documentation Changelog
 
+## 4.17.44
+
+- **CLI correctness:** `karnel search` builds its catalog from tool READMEs in one pass instead of per-directory subshells; `karnel stats` counts modules that actually carry install markers and prints `not installed` instead of empty probes; `karnel open` gained routes for `doctor`, `brain`, `pg`, `init`, `env`, `backup`, `show`, `cleanup`, `supabase`, `linux`, `plugin`, `voice`, `security`, `osint`, `termux`, `termux-api` and `terms`.
+- **Confirmation safety:** `--auto` now takes the safe answer on destructive prompts instead of answering `y`, and the agent declines to run code unless `-y`/`AGENT_YES` says so explicitly; doctor's dangerous fixes require `-t 0` and a non-auto run.
+- **Installer method selection:** menus only list methods that can succeed — AMP Code, Codebuff, MiMo Code and Antigravity CLI no longer offer a proot entry that always failed, and Antigravity's proot install/update refuse before provisioning or mutating a container.
+- **Installer fixes:** Freebuff repairs the npm shebang after a successful install instead of inside the failure branch; Claude Code and OpenCode no longer call a host-only shebang helper inside the Ubuntu container; the doctor markdownlint entry no longer passes a nonexistent `--no-missiglob` flag.
+- **Ownership and stats:** central ownership covers 96 of 166 tools (was 61), modules write install markers on success, and security installers keep their per-package ownership intact.
+- **Packaging:** `pack:check` normalizes modes from the git index on a real filesystem (shared storage masks every mode to 0660), asserts the CLI entry point ships executable, and `npm run release` publishes the validated tarball.
+- **Links and data safety:** Zork downloads over HTTP with pinned SHA-256 digests because the host's TLS does not validate; dead `karnelroute.online` references were dropped and GitHub Pages links now name the Vercel production site as canonical.
+- **Banner portability:** `banner.sh` keys its colour, figlet and tip tables as associative arrays so bash and zsh draw the same picture (zsh was losing the left border and shifting the gradient), resolves `KARNEL_VERSION` from `package.json` instead of always showing `v4.x`, draws the text logo as valid UTF-8 at the exact terminal width, caches per width for the `clear()` override, bounds the tip picker and restores the caller's traps.
+- **List coverage:** every group exposes the same `Install Flag`/`Status` columns, `karnel list plugins` is accepted, the TUI counts installers at runtime instead of advertising a stale `AI Tools (43)`, and dialog menus/checklists show the whole list (they used to render half and a third of it, which hid lower entries such as Walkie).
+- **Installer exit codes:** KeelCode and Supercode CLI now capture npm's exit status instead of a `rc` that was always zero, and repair the shebang only after a successful install.
+- **Regression tests:** `tests/list-coverage.sh` proves all 17 targets list all 166 installers, `tests/banner.sh` renders in bash and zsh at the exact width as valid UTF-8, and the site catalog is checked against the CLI registries.
+- **Housekeeping:** removed 11 unreferenced `.proot` wrapper templates, `gga/termux.patch`, `cline/helper/cline_helper.c` and `assets/banner/banner.txt`; restored 16 files deleted from the site worktree; `lint:shell` no longer depends on how the suite was invoked.
+
+## 4.17.43
+
+- Added `stats` to the bash and zsh completion catalogs.
+
+## 4.17.42
+
+- **Audit fixes:** `$module` vs `$target` in `reinstall` for full security/deploy reinstalls; games routed through the module layer for consistent headers and error handling; security module gained separator/box/log feedback; `ia.sh` hardcoded paths now respect `KARNEL_DATA`; the default `LOG_FILE` moved off `install_ai.log`; `upgrade` captures the cleanup exit code.
+
+## 4.17.41
+
+- Version references bumped to `4.17.41`.
+
+## 4.17.40
+
+- **Deduplication:** extracted `pkg-tool.sh` (14 security tools) and a `module-lifecycle.sh` factory (4 modules), converting deploy, games, network, utils and 14 pkg-only security installers to them — roughly 700 lines of duplicated boilerplate removed.
+
+## 4.17.39
+
+- **Plugins:** `karnel plugin enable|disable <name>` and `karnel plugin config <name> [key] [value]`; metadata tracks enabled state (default `true`) and a config object; disabled plugins are skipped by command collection and tagged in listings.
+
+## 4.17.38
+
+- **Installer consistency:** 129 `reinstall_*` functions now check the uninstall return code; 13 AI tools gained the Termux shebang repair they were missing.
+
+## 4.17.37
+
+- **Installer bugs:** nine utils tools logged to `install_dev.log` instead of `install_utils.log`; 14 security pkg uninstallers silently ignored failures; the opencode uninstall `sed` pattern mangled unrelated `.bashrc` lines.
+
+## 4.17.36
+
+- **Managed lifecycle:** netlify, vercel, masscan and metasploit installers preserve managed files, and `utils/env.sh` hardened the environment they run in.
+
+## 4.17.35
+
+- **Ownership hardening:** `update.sh` and the amass, burpsuite, ffuf, gobuster and subfinder installers refuse to touch installs Karnel does not own.
+
+## 4.17.34
+
+- **Auto mode:** added non-interactive `--auto` (`read_confirm` gained an auto answer, `agent_actions` participates) with matching completion entries and tests.
+
+## 4.17.33
+
+- **Supply chain:** hardened release downloads across installers.
+
+## 4.17.32
+
+- **Supply chain:** GitHub release asset digests are verified before install.
+
+## 4.17.31
+
+- **Docs:** README synchronized with the current AI catalog.
+
+## 4.17.30
+
+- **10Router:** repaired Termux shebangs on already-installed 10Router CLIs.
+
+## 4.17.29
+
+- **10Router:** added the 10Router AI server CLI to the AI catalog, registry and completions.
+
+## 4.17.28
+
+- **QR Code:** resolved launcher symlinks.
+
+## 4.17.27
+
+- **QR Code:** isolated dependency tests.
+
+## 4.17.26
+
+- **QR Code:** stabilized release validation.
+
+## 4.17.25
+
+- **QR Code:** covered installer dependencies in tests.
+
+## 4.17.24
+
+- **QR Code:** made QR code installation Termux-safe.
+
+## 4.17.23
+
+- **Tool installation:** repaired the Termux tool installation runtime across doctor, AI installers and the npm module.
+
 ## 4.17.22
 
 - **Data safety and correctness (8):** restore rejects ambiguous multiple archives; Brain preserves same-day title collisions, uses file paths for AI context, initializes/pushes `main`, detects missing `origin`, and supports editors with arguments; PostgreSQL backup filenames are path-safe; AI-session persistence escapes JSON correctly.

package/docs/troubleshooting/index.md

@@ -53,13 +53,13 @@ exists and the token used by GitHub Actions has write access.
 
 ## Documentation mirror (GitHub Pages)
 
-The documentation mirror is a Jekyll (cayman theme) site built from the `docs/`
-directory and published to GitHub Pages by the `Publish Docs` workflow
-(`.github/workflows/docs.yml`) on every push to `main` that changes `docs/**`.
-The workflow runs `actions/jekyll-build-pages` (from `docs/`, output to
-`docs/_site`), uploads the result as a Pages artifact, and deploys it to the
-`github-pages` environment. The mirror is
-`https://israelmarques1024-dotcom.github.io/karnel-termux/`.
+The documentation source is the `docs/` directory, and the published site is
+the Vercel production site, `https://karneltermux.vercel.app`. The `Publish Docs`
+workflow (`.github/workflows/docs.yml`) runs `actions/jekyll-build-pages` on
+every push to `main` that changes `docs/**`, uploads the result as a Pages
+artifact and deploys it to the `github-pages` environment; that mirror,
+`https://israelmarques1024-dotcom.github.io/karnel-termux/`, is served only
+while GitHub Pages is enabled for the repository.
 
 If a build fails, open the Actions run for the failing job and read the Jekyll
 output: the usual causes are invalid `_config.yml` YAML, an SCSS compile error

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-3b64b17a6f9d7a93bcbfbcd7f0c86e858cd5195d
+993646aa095b290adc04835c38c98a56ff05c212

package/karnel/bin/karnel

@@ -36,7 +36,7 @@ set -- "${_karnel_args[@]}"
 
 # Informational flags must not initialize user state or trigger update checks.
 case "${1:-}" in
-  --help|-h|--version|help|version|list|show) KARNEL_READ_ONLY=1 ;;
+  --help|-h|--version|help|version|list|show|search|stats|status) KARNEL_READ_ONLY=1 ;;
 esac
 
 # cargar entorno

package/karnel/cli/commands/agent.sh

@@ -115,7 +115,7 @@ agent_main() {
 		log_error "Unknown subcommand: ${D_CYAN}$cmd${D_NC}"
 		echo
 		agent_help
-		exit 1
+		return 1
 		;;
 	esac
 }

package/karnel/cli/commands/brain.sh

@@ -1122,7 +1122,7 @@ brain_skill() {
 	local skill_dir="$base_dir/$skill_name"
 	if [[ -d "$skill_dir" ]]; then
 		log_warn "Skill already exists: $skill_dir"
-		read_confirm "Overwrite?" confirm
+		read_confirm "Overwrite?" confirm n
 		[[ "$confirm" != "y" ]] && return 0
 		rm -rf "$skill_dir"
 	fi
@@ -1294,7 +1294,7 @@ brain_delete() {
 	title=$(_brain_title "$file")
 	echo
 	log_warn "Delete memory: ${D_CYAN}$title${D_NC}?"
-	read_confirm "This cannot be undone" confirm
+	read_confirm "This cannot be undone" confirm n
 	if [[ "$confirm" != "y" ]]; then
 		log_info "Cancelled"
 		return 0
@@ -1344,7 +1344,7 @@ brain_reset() {
 	list_item "Location: ${D_CYAN}$BRAIN_DIR${D_NC}"
 	echo
 
-	read_confirm "Are you sure?" confirm
+	read_confirm "Are you sure?" confirm n
 	if [[ "$confirm" != "y" ]]; then
 		log_info "Cancelled"
 		separator

package/karnel/cli/commands/cleanup.sh

@@ -63,7 +63,8 @@ cleanup_main() {
   fi
 
   # karnel banner cache (regenerate)
-  rm -f "$KARNEL_CACHE/banner_cache" 2>/dev/null
+  # The cache is keyed by terminal width (banner_cache.<cols>).
+  rm -f "$KARNEL_CACHE"/banner_cache* 2>/dev/null
   rm -f "$KARNEL_CACHE/.last_tip_index" 2>/dev/null
 
   echo

package/karnel/cli/commands/doctor/code_langs.sh

@@ -13,7 +13,7 @@ _init_lang_tools() {
   LANG_TOOLS["JavaScript:npm_audit"]="npm audit|deps|npm audit --audit-level=high|||native"
   LANG_TOOLS["JavaScript:vitest"]="vitest|test|npx --no-install vitest run|||native"
   LANG_TOOLS["JavaScript:jest"]="jest|test|npx --no-install jest|||native"
-  LANG_TOOLS["JavaScript:markdownlint"]="markdownlint-cli2|docs|npx --no-install markdownlint-cli2 \"**/*.md\" --no-missiglob|npx --no-install markdownlint-cli2 --fix \"**/*.md\"|safe|native"
+  LANG_TOOLS["JavaScript:markdownlint"]="markdownlint-cli2|docs|npx --no-install markdownlint-cli2 \"**/*.md\"|npx --no-install markdownlint-cli2 --fix \"**/*.md\"|safe|native"
 
   # TypeScript
   LANG_TOOLS["TypeScript:tsc"]="tsc|type-check|npx --no-install tsc --noEmit|||native"

package/karnel/cli/commands/doctor/fixes.sh

@@ -13,7 +13,9 @@ _fix_storage() {
 _fix_mkdir() {
   local rc=0
   for dir in "$KARNEL_CONFIG" "$KARNEL_CACHE" "$KARNEL_DATA"; do
-    mkdir -p "$dir" && chmod 755 "$dir" 2>/dev/null || { rc=1; log_warn "Failed to create $dir"; }
+    mkdir -p -m 700 "$dir" 2>/dev/null &&
+      { [[ -d "$dir" && ! -L "$dir" ]] && chmod 700 "$dir"; } ||
+      { rc=1; log_warn "Failed to create $dir"; }
   done
   return $rc
 }
@@ -120,27 +122,12 @@ _fix_symlinks() {
 }
 
 _fix_banner() {
-  local shell_config=""
-  if [[ -f "$HOME/.zshrc" ]]; then
-    shell_config="$HOME/.zshrc"
-  elif [[ -f "$HOME/.bashrc" ]]; then
-    shell_config="$HOME/.bashrc"
-  fi
-  if [[ -z "$shell_config" ]]; then
-    shell_config="$HOME/.zshrc"
-    touch "$shell_config"
-  fi
-  local marker="# ===== Karnel Banner ====="
-  if ! grep -qF "$marker" "$shell_config" 2>/dev/null; then
-    cat >>"$shell_config" <<EOF
-
-$marker
-source "$KARNEL_UTILS/banner.sh"
-render_banner
-EOF
-    return 0
-  fi
-  return 0
+  # Always go through the canonical installer: it writes the full block with
+  # start *and* end markers (plus the zsh precmd hook), which is what the
+  # uninstall path expects. Hand-rolled blocks used to leave `render_banner`
+  # orphaned in .zshrc after an uninstall.
+  import "@/tools/ui/banner/install"
+  install_banner
 }
 
 _fix_ai_install() {

package/karnel/cli/commands/doctor.sh

@@ -178,7 +178,7 @@ doctor_termux() {
     else
       log_warn "Directory missing or read-only: $(basename "$dir")"
       ((warnings++))
-      fix_commands+=("mkdir -p \"$dir\" && chmod 755 \"$dir\"")
+      fix_commands+=("mkdir -p -m 700 \"$dir\" && chmod 700 \"$dir\"")
       fix_descriptions+=("Recreate directory: $(basename "$dir")")
       fix_callbacks+=("_fix_mkdir")
     fi
@@ -569,16 +569,24 @@ doctor_termux() {
     fix_callbacks+=("_fix_symlinks")
   fi
 
-  # Check if banner is installed in shell config
+  # Check if banner is installed in shell config. Reuse the installer's own
+  # detection so doctor and `karnel install ui --banner` can never disagree on
+  # which rc file owns the banner.
+  import "@/tools/ui/banner/install"
   local shell_config=""
-  if [[ -f "$HOME/.zshrc" ]]; then
-    shell_config="$HOME/.zshrc"
-  elif [[ -f "$HOME/.bashrc" ]]; then
-    shell_config="$HOME/.bashrc"
-  fi
+  shell_config="$(_detect_shell_config)"
 
   if [[ -n "$shell_config" ]]; then
-    if grep -qF "# ===== Karnel Banner =====" "$shell_config" 2>/dev/null; then
+    if grep -qF "# ===== Karnel Banner =====" "$shell_config" 2>/dev/null &&
+      ! grep -qF "# ===== /Karnel Banner =====" "$shell_config" 2>/dev/null; then
+      # Legacy block: no end marker, so uninstalling it leaves the
+      # `render_banner` call orphaned in the shell config.
+      log_warn "Partial Karnel banner block in $(basename "$shell_config")"
+      ((warnings++))
+      fix_commands+=("karnel reinstall ui --banner")
+      fix_descriptions+=("Repair legacy Karnel banner block")
+      fix_callbacks+=("_fix_banner")
+    elif grep -qF "# ===== Karnel Banner =====" "$shell_config" 2>/dev/null; then
       log_success "Banner installed in $(basename "$shell_config")"
     else
       log_warn "Banner not installed in $(basename "$shell_config")"
@@ -1434,8 +1442,8 @@ doctor_termux() {
         # caches, reinstalling packages or deleting unrelated software.
         if [[ -n "$callback" && -n "${DESTRUCTIVE_FIXES[$callback]:-}" ]]; then
           if $FIX_MODE; then
-            if [[ -t 0 ]]; then
-              read_confirm "DANGEROUS: ${fix_descriptions[$i]}. Apply?" apply_this
+            if [[ -t 0 && "${KARNEL_AUTO:-0}" != "1" ]]; then
+              read_confirm "DANGEROUS: ${fix_descriptions[$i]}. Apply?" apply_this n
             else
               log_warn "Skipping destructive fix (non-interactive): ${fix_descriptions[$i]}"
               continue

package/karnel/cli/commands/env.sh

@@ -70,7 +70,7 @@ env_set() {
 	if grep -q "^export $escaped_key=" "$rc_file" 2>/dev/null; then
 		echo
 		log_warn "Variable $D_CYAN$key$D_YELLOW already exists in $(basename "$rc_file")"
-		read_confirm "Replace it?" confirm
+		read_confirm "Replace it?" confirm n
 		if [[ "$confirm" != "y" ]]; then
 			echo
 			log_warn "Operation cancelled"
@@ -155,7 +155,7 @@ env_unset() {
 
 	echo
 	log_warn "This will remove $D_CYAN$key$D_YELLOW from $(basename "$rc_file")"
-	read_confirm "Are you sure?" confirm
+	read_confirm "Are you sure?" confirm n
 	if [[ "$confirm" != "y" ]]; then
 		echo
 		log_warn "Operation cancelled"

package/karnel/cli/commands/init.sh

@@ -1235,7 +1235,7 @@ EOF
 
 _init_confirm_overwrite() {
 	local confirm
-	read_confirm "Karnel may overwrite existing project files. Continue?" confirm
+	read_confirm "Karnel may overwrite existing project files. Continue?" confirm n
 	if [[ "$confirm" != "y" ]]; then
 		log_warn "Cancelled"
 		return 1

package/karnel/cli/commands/install.sh

@@ -172,6 +172,13 @@ _install_full_module() {
     return 1
     ;;
   esac
+
+  local rc=$?
+  if (( rc == 0 || rc == 2 )); then
+    karnel_mark_module_installed "$target"
+    return 0
+  fi
+  return "$rc"
 }
 
 # Install specific tools within a module
@@ -286,10 +293,13 @@ _install_specific_tools() {
   security)
     _batch_tool_action "security" "install" "${tools[@]}" || return 1
     ;;
+  plugin|voice)
+    _batch_tool_action "$module" "install" "${tools[@]}"
+    return $?
+    ;;
   supabase)
-    import "@/tools/deploy/supabase/install"
-    install_supabase
-    case $? in 0) log_success "Supabase CLI installed";; 2) log_info "Supabase CLI already installed";; *) log_error "Failed to install Supabase CLI"; return 1;; esac
+    _batch_tool_action "supabase" "install" "${tools[@]}"
+    return $?
     ;;
   *)
     log_warn "Unknown install target: $module"

package/karnel/cli/commands/list.sh

@@ -79,7 +79,7 @@ list_main() {
     utils)
       _list_utils
       ;;
-    plugin)
+    plugin | plugins)
       import "@/tools/plugins/install"
       echo "Installed Plugins:"
       _list_plugins
@@ -105,10 +105,12 @@ _list_deploy() {
   echo
   box "Deploy CLIs"
   echo
-  printf "    ${D_GREEN}%-18s${NC} %s\n" "vercel" "Frontend & serverless deployment"
-  printf "    ${D_GREEN}%-18s${NC} %s\n" "railway" "Full-stack with databases"
-  printf "    ${D_GREEN}%-18s${NC} %s\n" "netlify" "Static sites & edge functions"
-  printf "    ${D_GREEN}%-18s${NC} %s\n" "supabase" "PostgreSQL, Edge Functions, types, migrations"
+  table_start "Tool" "Install Flag" "Command" "Status"
+  table_row "Vercel CLI" "--vercel" "vercel" "$(_check_cmd "vercel")"
+  table_row "Railway CLI" "--railway" "railway" "$(_check_cmd "railway")"
+  table_row "Netlify CLI" "--netlify" "netlify" "$(_check_cmd "netlify")"
+  table_row "Supabase CLI" "--supabase" "supabase" "$(_check_cmd "supabase")"
+  table_end
   echo
   list_item "Usage: ${D_CYAN}karnel install deploy${NC} to install all"
   list_item "Usage: ${D_CYAN}karnel install deploy --vercel${NC} for specific"
@@ -182,7 +184,7 @@ _list_ai() {
   table_row "Ollama" "--ollama" "ollama" "$(_check_pkg "ollama")"
   table_row "Codex CLI" "--codex" "codex" "$(_check_cmd "codex")"
   table_row "OpenCode" "--opencode" "opencode" "$(_check_cmd "opencode")"
-  table_row "MiMoCode" "--mimocode" "mimo" "$(_check_cmd "mimo")"
+  table_row "MiMo Code" "--mimocode" "mimo" "$(_check_cmd "mimo")"
   table_row "Engram" "--engram" "engram" "$(_check_cmd "engram")"
   table_row "CodeGraph" "--codegraph" "codegraph" "$(_check_cmd "codegraph")"
   table_row "Pi Coding Agent" "--pi" "pi" "$(_check_cmd "pi")"
@@ -203,7 +205,7 @@ _list_ai() {
   table_row "Kimchi CLI" "--kimchi-code" "kimchi" "$(_check_cmd "kimchi")"
   table_row "omniRoute" "--omni-route" "omni-route" "$(_check_omni_route)"
   table_row "Context7 Docs" "--ctx7" "ctx7" "$(_check_cmd "ctx7")"
-  table_row "OpenSpec SDD" "--openspec" "openspec" "$(_check_cmd "openspec")"
+  table_row "OpenSpec SDD Framework" "--openspec" "openspec" "$(_check_cmd "openspec")"
   table_row "Qoder" "--qoder" "qodercli" "$(_check_cmd "qodercli")"
   table_row "AMP Code CLI" "--ampcode" "amp" "$(_check_cmd "amp")"
   table_row "Cursor CLI" "--cursor-cli" "cursor,cursor-agent" "$(_check_cmd_any "cursor,cursor-agent")"
@@ -212,7 +214,7 @@ _list_ai() {
   table_row "Factory Droid" "--droid" "droid" "$(_check_cmd "droid")"
   table_row "Cactus" "--cactus" "cactus" "$(_check_cmd "cactus")"
   table_row "Cactus Needle" "--cactus-needle" "needle" "$(_check_cmd "needle")"
-  table_row "Walkie" "--walkie" "walkie" "$(_check_cmd "walkie")"
+  table_row "Walkie Agent" "--walkie" "walkie" "$(_check_cmd "walkie")"
   table_row "Hugging Face" "--hugging-face" "hf" "$(_check_cmd "hf")"
   table_row "Copilot-Termux" "--copilot-termux" "copilot" "$(_check_cmd "copilot")"
   table_row "Supercode CLI" "--supercode-cli" "supercode" "$(_check_cmd "supercode")"
@@ -552,7 +554,8 @@ _check_cursor() {
 
   # Check if extra-keys are configured by karnel
 _check_extra_keys() {
-  if grep -qF "terminal-cursor-blink-rate=500" "$HOME/.termux/termux.properties" 2>/dev/null; then
+  if grep -qF "# Karnel extra-keys begin" "$HOME/.termux/termux.properties" 2>/dev/null &&
+    grep -qF "extra-keys = " "$HOME/.termux/termux.properties" 2>/dev/null; then
     echo -e "${D_GREEN}installed${NC}"
   else
     echo -e "${D_RED}not installed${NC}"
@@ -633,7 +636,9 @@ _list_voice() {
   echo
   box "Voice Command"
   echo
-  printf "    ${D_GREEN}%-18s${NC} %s\n" "voice" "Speech-to-agent AI command"
+  table_start "Component" "Install Flag" "Status"
+  table_row "Voice Command" "voice" "built-in"
+  table_end
   echo
   list_item "Usage: ${D_CYAN}karnel install voice${NC}"
   echo

package/karnel/cli/commands/open.sh

@@ -5,6 +5,46 @@ import "@/utils/colors"
 
 OPEN_DOCS="https://karneltermux.vercel.app"
 
+# Resolves a documented target to its site URL, or prints nothing when the
+# target has no page. Covers every route the site actually publishes plus the
+# aliases users are most likely to type; anything else falls back to the
+# module registry so new modules keep working without touching this file.
+_open_url_for() {
+	local target="$1"
+	case "$target" in
+	# Aliases kept for backwards compatibility with older docs/README hints.
+	herdr) target="utils" ;;
+	robin) target="osint" ;;
+	esac
+
+	# Commands that are not modules but still have a documentation page.
+	case "$target" in
+	doctor | brain | pg | init | env | backup | show | cleanup | supabase | linux | plugin | voice | security | osint)
+		printf '%s/karnel/%s' "$OPEN_DOCS" "$target"
+		return 0
+		;;
+	termux)
+		printf '%s/termux' "$OPEN_DOCS"
+		return 0
+		;;
+	termux-api | api)
+		printf '%s/termux/api' "$OPEN_DOCS"
+		return 0
+		;;
+	terms)
+		printf '%s/terms' "$OPEN_DOCS"
+		return 0
+		;;
+	esac
+
+	# Modules are published one-to-one under /karnel/<module>.
+	if [[ -f "${KARNEL_PATH:-}/modules/$target.sh" ]]; then
+		printf '%s/karnel/%s' "$OPEN_DOCS" "$target"
+		return 0
+	fi
+	return 1
+}
+
 open_main() {
 	if [[ $# -eq 0 ]]; then
 		open_help
@@ -18,26 +58,13 @@ open_main() {
 	karnel | help)
 		url="$OPEN_DOCS/"
 		;;
-	herdr)
-		url="$OPEN_DOCS/karnel/utils"
-		;;
-	robin)
-		url="$OPEN_DOCS/karnel/osint"
-		;;
-	supabase)
-		url="$OPEN_DOCS/karnel/supabase"
-		;;
-	cleanup)
-		url="$OPEN_DOCS/karnel/cleanup"
-		;;
 	--help | -h)
 		open_help
 		return
 		;;
 	*)
-		if [[ -f "$KARNEL_PATH/modules/$target.sh" ]]; then
-			url="$OPEN_DOCS/karnel/$target"
-		else
+		url="$(_open_url_for "$target")"
+		if [[ -z "$url" ]]; then
 			log_error "Unknown target: $target"
 			echo
 			open_help
@@ -102,6 +129,14 @@ open_help() {
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "plugin" "Plugin system"
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "security" "Security tools"
 	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "herdr" "Herdr terminal AI assistant"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "doctor" "Diagnostics & auto-fix"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "brain" "Second Brain memories"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "pg" "PostgreSQL helpers"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "backup" "Backup & restore"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "init" "Project scaffolding"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "env" "Environment variables"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "termux" "Termux setup guide"
+	printf "    ${D_GREEN}%-14s${NC} ${D_DIM}%s${NC}\n" "linux" "Linux stack guide"
 	echo
 	separator_section "Website"
 	echo

package/karnel/cli/commands/pg.sh

@@ -325,7 +325,7 @@ pg_drop() {
 
 	log_warn "This will permanently delete database: $db_name"
 
-	read_confirm "Are you sure?" CONFIRM
+	read_confirm "Are you sure?" CONFIRM n
 	if [[ "$CONFIRM" != "y" ]]; then
 		log_warn "Operation cancelled"
 		return 0
@@ -629,7 +629,7 @@ pg_restore_db() {
 
 	local success=false
 	local pg_confirm
-	read_confirm "Restore will clean ($db_name) and replace all objects. Continue?" pg_confirm
+	read_confirm "Restore will clean ($db_name) and replace all objects. Continue?" pg_confirm n
 	if [[ "$pg_confirm" != "y" ]]; then
 		log_info "Restore cancelled"
 		return 0

package/karnel/cli/commands/reinstall.sh

@@ -682,11 +682,11 @@ _reinstall_specific_tools() {
   utils)
     _batch_tool_action "utils" "reinstall" "${tools[@]}" || return 1
     ;;
-  security|deploy)
-    _batch_tool_action "$target" "reinstall" "${tools[@]}" || return 1
+  security|deploy|plugin|voice|supabase)
+    _batch_tool_action "$module" "reinstall" "${tools[@]}" || return 1
     ;;
   *)
-    log_warn "Unknown reinstall target: $target"
+    log_warn "Unknown reinstall target: $module"
     echo "Run 'karnel reinstall' to see available targets"
     return 1
     ;;

package/karnel/cli/commands/restore.sh

@@ -135,7 +135,7 @@ restore_main() {
 
   local confirm=""
   echo
-  read_confirm "Proceed with restore?" confirm
+  read_confirm "Proceed with restore?" confirm n
   [[ "$confirm" != "y" ]] && { rm -rf "$tmp"; log_info "Cancelled"; return 0; }
 
   transaction=$(mktemp -d "$HOME/.karnel-restore.XXXXXX") || { rm -rf "$tmp"; return 1; }