karnel-termux 4.17.7 → 4.17.8

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.17.7-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.17.8-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -61,7 +61,7 @@ Core agent contributions by **devcorex**.
 ### Via checksummed GitHub release (recommended)
 
 ```bash
-version=4.17.7
+version=4.17.8
 tmpdir=$(mktemp -d) && trap 'rm -rf "$tmpdir"' EXIT
 base="https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/v$version"
 curl -fsSL "$base/karnel-termux-install.sh" -o "$tmpdir/karnel-termux-install.sh"

package/docs/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Documentation Changelog
 
+## 4.17.7
+
+- Documentation site overhauled: valid `_config.yml`, cayman-compatible custom
+  stylesheet that imports the full theme, a workflow that builds Jekyll before
+  deploying to GitHub Pages, and tool counts reconciled with the actual
+  `karnel/tools/*` and `karnel/tools/ai/*` directories (45 AI tools, 3 editors,
+  8 languages, 5 databases, 22 dev tools, 11 npm packages, 10 shell plugins,
+  4 UI components, 4 deploy CLIs, 6 games, 2 network tools, 12 utility tools,
+  30 security tools, 1 automation tool).
+
 ## 4.16.1 - 2026-08-22
 
 - `karnel agent ask/run`: when the model endpoint is unreachable and Cactus is

package/docs/_config.yml

@@ -2,11 +2,14 @@ title: Karnel Termux
 description: >-
   Modular Dev Environment for Termux — install languages, databases, AI agents,
   editors, and more with one command.
+author: Israel Marques
+lang: en-US
 theme: jekyll-theme-cayman
 markdown: kramdown
 logo: /assets/images/karnel-logo.png
 custom_css: /assets/css/style.css
 baseurl: /karnel-termux
+show_downloads: false
 exclude:
   - vendor
   - Gemfile

package/docs/assets/css/{style.css → style.scss}

@@ -1,3 +1,8 @@
+---
+---
+
+@import "jekyll-theme-cayman";
+
 /* Karnel Termux — custom styling layered on top of jekyll-theme-cayman */
 
 :root {
@@ -21,6 +26,16 @@ body {
   color: #24292f;
 }
 
+/* Logo (added in page content; cayman's default.html does not render site.logo) */
+.karnel-logo {
+  display: block;
+  margin: 0 auto 1.25rem;
+  max-width: 220px;
+  height: auto;
+  border-radius: 14px;
+  box-shadow: 0 6px 22px rgba(0, 0, 0, 0.18);
+}
+
 @media (prefers-color-scheme: dark) {
   body {
     background: var(--karnel-bg);
@@ -53,15 +68,6 @@ body {
   font-size: 1.1rem;
 }
 
-/* Logo */
-.karnel-logo {
-  display: block;
-  margin: 0 auto 1.25rem;
-  max-width: 220px;
-  height: auto;
-  filter: drop-shadow(0 4px 12px rgba(0, 0, 0, 0.35));
-}
-
 /* Landing navigation */
 .karnel-nav {
   display: flex;
@@ -149,6 +155,15 @@ body {
   font-size: 0.88em;
 }
 
+/* Inline code should not be wrapped in its own block styling */
+.main-content p code,
+.main-content li code,
+.main-content td code {
+  background: rgba(120, 120, 120, 0.12);
+  padding: 0.12em 0.4em;
+  border-radius: 4px;
+}
+
 /* Blockquotes */
 .main-content blockquote {
   border-left: 4px solid var(--karnel-accent-2, #0078d4);
@@ -158,6 +173,16 @@ body {
   border-radius: 0 6px 6px 0;
 }
 
+/* Admonition callouts */
+.karnel-note {
+  border: 1px solid var(--karnel-accent-2, #0078d4);
+  border-left-width: 4px;
+  border-radius: 8px;
+  padding: 0.75rem 1rem;
+  margin: 1.25rem 0;
+  background: rgba(0, 120, 212, 0.06);
+}
+
 /* Section spacing */
 .main-content h2 {
   margin-top: 2.5rem;
@@ -203,3 +228,10 @@ body {
     color: #e6edf3;
   }
 }
+
+/* Footer credit spacing */
+.site-footer {
+  margin-top: 2.5rem;
+  border-top: 1px solid #e1e4e8;
+  padding-top: 1rem;
+}

package/docs/index.md

@@ -1,5 +1,7 @@
 # Karnel Termux Documentation
 
+<img class="karnel-logo" src="{{ '/assets/images/karnel-logo.png' | relative_url }}" alt="Karnel Termux">
+
 > Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command
 
 Navigate the docs:
@@ -16,12 +18,13 @@ Navigate the docs:
 ## What is Karnel?
 
 Karnel Termux transforms your Android device into a complete development workstation.
-With a single CLI (`karnel`), you can install and manage 45 AI tools, 8 languages,
-5 databases, 22 dev tools, 11 npm packages, 10 shell plugins, 4 UI components,
-4 deploy CLIs, 6 games, 2 network tools, 12 utility tools, 30 security tools,
-responsible OSINT, a second brain, voice commands, and reviewed plugins — all
-from modules: `ai`, `auto`, `db`, `deploy`, `dev`, `editor`, `games`, `lang`,
-`network`, `npm`, `osint`, `security`, `shell`, `ui`, `utils`, `voice`, `plugin`.
+With a single CLI (`karnel`), you can install and manage 45 AI tools, 3 editors,
+8 languages, 5 databases, 22 dev tools, 11 npm packages, 10 shell plugins,
+4 UI components, 4 deploy CLIs, 6 games, 2 network tools, 12 utility tools,
+30 security tools, 1 automation tool, responsible OSINT, a second brain,
+voice commands, and reviewed plugins — all from modules: `ai`, `auto`, `db`,
+`deploy`, `dev`, `editor`, `games`, `lang`, `network`, `npm`, `osint`,
+`security`, `shell`, `ui`, `utils`, `voice`, `plugin`.
 
 ## Sections
 

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-d1343c03d2f32967e36b7f78c8ef8cbb6656410e
+ad787cd9d5efa67b498b0b1dc5e00203553b32e7

package/karnel/tools/ai/antigravity-cli/install.sh

@@ -88,13 +88,16 @@ _antigravity_download_binary_impl() {
   fi
 
   if [[ "$manifest_sha256" =~ ^[0-9a-f]{64}$ ]]; then
-    verify_sha256 "$tarball" "$manifest_sha256" || return 1
+    verify_sha256 "$tarball" "$manifest_sha256" || { rm -f "$tarball"; return 1; }
   else
-    log_warn "Antigravity CLI manifest does not publish a SHA-256; skipping integrity verification"
+    log_error "Antigravity CLI manifest does not publish a SHA-256; refusing install"
+    rm -f "$tarball"
+    return 1
   fi
 
-  if ! tar -xzf "$tarball" -C "$AGY_DATA_DIR" &>>"$LOG_FILE"; then
+  if ! safe_extract_tar "$tarball" "$AGY_DATA_DIR"; then
     log_error "Failed to extract Antigravity CLI binary"
+    rm -f "$tarball"
     return 1
   fi
 

package/karnel/tools/deploy/railway/install.sh

@@ -4,7 +4,7 @@ import "@/utils/log"
 import "@/utils/install"
 import "@/utils/version"
 
-LOG_FILE="$KARNEL_CACHE/install_deploy.log"
+LOG_FILE="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}/install_deploy.log"
 RAILWAY_DATA_DIR="${KARNEL_DATA:-${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}/deploy/railway"
 _RAILWAY_MARKER="$PREFIX/share/karnel-installers/railway"
 _RAILWAY_DATA_MARKER="$RAILWAY_DATA_DIR/.karnel-managed"
@@ -113,14 +113,17 @@ _install_railway_manual_impl() {
 
   local expected
   expected=$(github_release_asset_sha256 railwayapp/cli "$latest_version" "railway-${version}-aarch64-linux.tar.gz") || expected=""
-  if [[ "$expected" =~ ^[0-9a-f]{64}$ ]]; then
-    verify_sha256 "$RAILWAY_DATA_DIR/railway.tar.gz" "$expected" || {
-      rm -f "$RAILWAY_DATA_DIR/railway.tar.gz"
-      return 1
-    }
+  if [[ ! "$expected" =~ ^[0-9a-f]{64}$ ]]; then
+    log_error "No published SHA-256 for Railway CLI; refusing install"
+    rm -f "$RAILWAY_DATA_DIR/railway.tar.gz"
+    return 1
   fi
+  verify_sha256 "$RAILWAY_DATA_DIR/railway.tar.gz" "$expected" || {
+    rm -f "$RAILWAY_DATA_DIR/railway.tar.gz"
+    return 1
+  }
 
-  tar -zxf "$RAILWAY_DATA_DIR/railway.tar.gz" -C "$RAILWAY_DATA_DIR" 2>>"$LOG_FILE" || {
+  safe_extract_tar "$RAILWAY_DATA_DIR/railway.tar.gz" "$RAILWAY_DATA_DIR" || {
     rm -f "$RAILWAY_DATA_DIR/railway.tar.gz"
     return 1
   }

package/karnel/tools/deploy/supabase/install.sh

@@ -43,7 +43,9 @@ install_supabase() (
   local url="${_SUPABASE_RELEASE_URL}/${filename}"
   local checksum_url="${_SUPABASE_RELEASE_URL}/supabase_${_SUPABASE_VERSION}_checksums.txt"
   local tmp_dir staged_bin marker_staging="" old_bin="" old_marker=""
-  tmp_dir=$(mktemp -d "${TMPDIR:-/tmp}/supabase.XXXXXX") || return 1
+  local _kdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
+  mkdir -p "$_kdir" 2>/dev/null || _kdir="${TMPDIR:-/tmp}"
+  tmp_dir=$(mktemp -d "$_kdir/supabase.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmp_dir"; [[ -z "$staged_bin" ]] || rm -f "$staged_bin"; [[ -z "$marker_staging" ]] || rm -f "$marker_staging"' EXIT
 

package/karnel/tools/lang/bun/install.sh

@@ -143,16 +143,24 @@ _download_bun_binary_native_impl() {
   }
   if declare -F github_release_asset_sha256 >/dev/null; then
     expected=$(github_release_asset_sha256 "$BUN_REPO" "bun-v$version" "$zip_name") || expected=""
-    if [[ "$expected" =~ ^[0-9a-f]{64}$ ]]; then
-      verify_sha256 "$staging_dir/$zip_name" "$expected" || { rm -rf "$staging_dir"; return 1; }
-    else
-      log_warn "No published SHA-256 for Bun native; skipping integrity verification"
+    if [[ ! "$expected" =~ ^[0-9a-f]{64}$ ]]; then
+      rm -rf "$staging_dir"
+      log_error "No published SHA-256 for Bun native; refusing install"
+      return 1
+    fi
+    verify_sha256 "$staging_dir/$zip_name" "$expected" || { rm -rf "$staging_dir"; return 1; }
+    if ! safe_extract_zip "$staging_dir/$zip_name" "$staging_dir"; then
+      rm -rf "$staging_dir"
+      log_error "Failed to extract Bun binary"
+      return 1
+    fi
+  else
+    command -v log_warn >/dev/null 2>&1 && log_warn "Integrity helpers unavailable; skipping Bun integrity verification"
+    if ! unzip -o "$staging_dir/$zip_name" -d "$staging_dir" &>>"$LOG_FILE"; then
+      rm -rf "$staging_dir"
+      log_error "Failed to extract Bun binary"
+      return 1
     fi
-  fi
-  if ! unzip -o "$staging_dir/$zip_name" -d "$staging_dir" &>>"$LOG_FILE"; then
-    rm -rf "$staging_dir"
-    log_error "Failed to extract Bun binary"
-    return 1
   fi
   rm -f "$staging_dir/$zip_name"
   extracted="$staging_dir/bun-linux-aarch64/bun"
@@ -280,13 +288,14 @@ _install_bun_proot_impl() {
   local expected
   expected=$(github_release_asset_sha256 "$BUN_REPO" "bun-v$version" "bun-linux-aarch64.zip") || expected=""
   if [[ ! "$expected" =~ ^[0-9a-f]{64}$ ]]; then
-    log_warn "No published SHA-256 for Bun; skipping integrity verification"
+    log_error "No published SHA-256 for Bun; refusing install"
+    return 1
   fi
   _bun_proot_ubuntu /bin/bash -c '
     export HOME=/root TMPDIR=/tmp
     cd /tmp &&
     curl -fsSL "$1" -o bun.zip &&
-    { [ -z "$2" ] || [ "$(sha256sum bun.zip | awk "{print \$1}")" = "$2" ]; } &&
+    [ "$(sha256sum bun.zip | awk "{print \$1}")" = "$2" ] &&
     unzip -o bun.zip >/dev/null 2>&1 &&
     mkdir -p /usr/local/bin &&
     mv bun-linux-aarch64/bun /usr/local/bin/bun &&
@@ -392,13 +401,14 @@ _update_bun_proot() {
   local expected
   expected=$(github_release_asset_sha256 "$BUN_REPO" "bun-v$version" "bun-linux-aarch64.zip") || expected=""
   if [[ ! "$expected" =~ ^[0-9a-f]{64}$ ]]; then
-    log_warn "No published SHA-256 for Bun; skipping integrity verification"
+    log_error "No published SHA-256 for Bun; refusing update"
+    return 1
   fi
   _bun_proot_ubuntu /bin/bash -c '
     export HOME=/root TMPDIR=/tmp
     cd /tmp &&
     curl -fsSL "$1" -o bun.zip &&
-    { [ -z "$2" ] || [ "$(sha256sum bun.zip | awk "{print \$1}")" = "$2" ]; } &&
+    [ "$(sha256sum bun.zip | awk "{print \$1}")" = "$2" ] &&
     unzip -o bun.zip >/dev/null 2>&1 &&
     mkdir -p /usr/local/bin &&
     mv bun-linux-aarch64/bun /usr/local/bin/bun &&

package/karnel/tools/utils/zork/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/install"
 
 LOG_FILE="$KARNEL_CACHE/install_zork.log"
 ZORK_DATA_DIR="${KARNEL_DATA:-${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}/zork"
@@ -62,7 +63,10 @@ _download_zork_data_impl() {
       return 1
     fi
 
-    if ! unzip -o "$zip_file" -d "$staging_dir" 2>>"$LOG_FILE"; then
+    if declare -F safe_extract_zip >/dev/null; then
+      safe_extract_zip "$zip_file" "$staging_dir" 2>>"$LOG_FILE" || {
+        rm -rf "$staging_dir"; log_error "Failed to extract Zork ${num}"; return 1; }
+    elif ! unzip -o "$zip_file" -d "$staging_dir" 2>>"$LOG_FILE"; then
       rm -rf "$staging_dir"
       log_error "Failed to extract Zork ${num}"
       return 1

package/karnel/utils/agent_actions.sh

@@ -889,7 +889,9 @@ agent_exec_loading() {
 	local frames=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
 	local delay=0.08
 	local tmpfile
-	tmpfile="$(mktemp)"
+	local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
+	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+	tmpfile="$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null)" || tmpfile="$(mktemp 2>/dev/null)"
 
 	local stty_saved=""
 	if [[ -t 0 ]]; then

package/karnel/utils/agent_llm.sh

@@ -244,7 +244,20 @@ agent_chat_completion() {
 # characters. Real UTF-8 text passes through untouched.
 # ------------------------------------------------------------
 _agent_unescape_unicode() {
-	perl -CS -pe 's/\\u([0-9a-fA-F]{4})/chr(hex($1))/ge' 2>/dev/null
+  if command -v perl >/dev/null 2>&1; then
+    perl -CS -pe 's/\\u([0-9a-fA-F]{4})/chr(hex($1))/ge'
+  elif command -v python3 >/dev/null 2>&1; then
+    python3 -c 'import sys,re;sys.stdout.write(re.sub(r"\\u([0-9a-fA-F]{4})",lambda m:chr(int(m.group(1),16)),sys.stdin.read()))'
+  else
+    awk '{
+      while (match($0, /\\u[0-9a-fA-F]{4}/)) {
+        h = substr($0, RSTART + 2, 4)
+        c = sprintf("%c", strtonum("0x" h))
+        $0 = substr($0, 1, RSTART - 1) c substr($0, RSTART + 6)
+      }
+      print
+    }'
+  fi
 }
 
 # ------------------------------------------------------------

package/karnel/utils/install.sh

@@ -211,9 +211,11 @@ github_release_asset_sha256() {
     return 0
   fi
   # Fallback: a checksums.txt / SHA256SUMS asset listing every released file.
+  # Match the filename field exactly (it is the LAST field) so a substring or
+  # regex-metacharacter in $asset cannot select the wrong line's digest.
   digest=$(curl -fsSL --connect-timeout 10 --max-time 30 \
     "https://github.com/$repo/releases/download/$version/checksums.txt" 2>/dev/null \
-    | awk -v a="$asset" '$0 ~ a {print $1; exit}' | tr -d '\r')
+    | awk -v a="$asset" '{ f=$NF; if (f == a) { sub(/^\*/, "", $1); print $1; exit } }' | tr -d '\r')
   if [[ "$digest" =~ ^[0-9a-f]{64}$ ]]; then
     echo "$digest"
     return 0
@@ -248,20 +250,26 @@ extract_tarball() {
 
 replace_managed_directory() {
   local staging="$1" destination="$2" marker="$3"
-  local backup="${destination}.previous.$$"
+  local backup_dir backup_target=""
   if [[ -e "$destination" && ! -f "$destination/$marker" ]]; then
     log_error "Refusing to replace unowned installation: $destination"
     return 1
   fi
   printf '%s\n' 'karnel-managed-v1' >"$staging/$marker" || return 1
-  if [[ -e "$destination" ]] && ! mv "$destination" "$backup"; then
-    return 1
+  backup_dir="$(mktemp -d "$(dirname "$destination")/.karnel-managed.XXXXXX")" || return 1
+  if [[ -e "$destination" ]]; then
+    backup_target="$backup_dir/$(basename "$destination")"
+    if ! mv "$destination" "$backup_target"; then
+      rm -rf "$backup_dir"
+      return 1
+    fi
   fi
   if ! mv "$staging" "$destination"; then
-    [[ ! -e "$backup" ]] || mv "$backup" "$destination"
+    [[ -n "$backup_target" ]] && mv "$backup_target" "$destination" 2>/dev/null
+    rm -rf "$backup_dir"
     return 1
   fi
-  rm -rf "$backup"
+  rm -rf "$backup_dir"
 }
 
 record_managed_file() {
@@ -283,7 +291,9 @@ github_download_and_extract() {
   if [[ "$expected" =~ ^[0-9a-f]{64}$ ]]; then
     verify_sha256 "$tarball" "$expected" || return 1
   else
-    log_warn "No published SHA-256 digest for $repo/$asset; skipping integrity verification"
+    log_error "No verifiable SHA-256 digest published for $repo/$asset; refusing install"
+    rm -f "$tarball"
+    return 1
   fi
   extract_tarball "$tarball" "$outdir" || return 1
   return 0

package/karnel/utils/log.sh

@@ -429,7 +429,9 @@ loading() {
 	local frames=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
 	local delay=0.08
 	local tmpfile
-	tmpfile="$(mktemp "${TMPDIR:-/tmp}/karnel.XXXXXX")"
+	local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
+	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+	tmpfile="$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null)" || tmpfile="$(mktemp 2>/dev/null)"
 	local cmd_pid=""
 
 	trap 'kill "$cmd_pid" 2>/dev/null; rm -f "$tmpfile"; return 1' INT TERM

package/karnel/utils/version.sh

@@ -51,7 +51,9 @@ _spin_capture() {
   shift
   local frames=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
   local tmp
-  tmp=$(mktemp)
+  local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
+  mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+  tmp=$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null) || tmp=$(mktemp 2>/dev/null)
   local spinner_fd
   if [ -c /dev/tty ] 2>/dev/null; then
     spinner_fd=/dev/tty

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.17.7",
+  "version": "4.17.8",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"