karnel-termux 4.17.7 → 4.17.9

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.17.7-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.17.9-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -61,7 +61,7 @@ Core agent contributions by **devcorex**.
 ### Via checksummed GitHub release (recommended)
 
 ```bash
-version=4.17.7
+version=4.17.9
 tmpdir=$(mktemp -d) && trap 'rm -rf "$tmpdir"' EXIT
 base="https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/v$version"
 curl -fsSL "$base/karnel-termux-install.sh" -o "$tmpdir/karnel-termux-install.sh"

package/docs/CHANGELOG.md

@@ -1,5 +1,58 @@
+---
+title: Documentation Changelog
+permalink: /CHANGELOG/
+---
+
 # Documentation Changelog
 
+## 4.17.9
+
+- Hardened installer and runtime security across the toolkit:
+  - `droid` binary install now refuses when no published SHA-256 digest is
+    available (fail-closed) instead of silently skipping verification.
+  - `keelcode` and `supabase` now extract archives through the hardened
+    `safe_extract_tar` (rejects symlink/absolute-path traversal) instead of
+    raw `tar`.
+  - Restored OpenCode installation: upstream publishes no checksum, so
+    `github_download_and_extract` warns instead of refusing (other tools that
+    publish checksums remain fail-closed).
+  - `cursor-cli` now validates the downloaded bundle is a real gzip archive
+    before extraction.
+  - Agent PLAN (read-only) mode write-guard hardened: now blocks `sed -i` /
+    `perl -i`, full-screen editors, and file descriptors like `2>file`.
+  - Agent compaction no longer drops the freshly built summary during the
+    trim safety-net.
+  - `voice` uninstall no longer removes `termux-api` unless Karnel installed it.
+  - `karnel show` no longer depends on `realpath` (portable fallback).
+  - `karnel update` reports the accurate installed version instead of a
+    misleading `latest`.
+  - Reinstall no longer deletes the ownership marker before confirming the
+    install, preventing a tool from being orphaned on install failure.
+
+## 4.17.8
+
+- Documentation site reconciled with the GitHub Pages deployment: the `Publish
+  Docs` workflow (`.github/workflows/docs.yml`) builds Jekyll from `docs/` and
+  deploys to GitHub Pages, so the live documentation URL is
+  `https://israelmarques1024-dotcom.github.io/karnel-termux/`.
+- `docs/CHANGELOG.md` is now a rendered page (added front matter + permalink)
+  and all internal links to it use the clean `/CHANGELOG/` path.
+- Tool counts verified against the actual `karnel/tools/*` and
+  `karnel/tools/ai/*` directories: 45 AI tools, 3 editors, 8 languages,
+  5 databases, 22 dev tools, 11 npm packages, 10 shell plugins, 4 UI
+  components, 4 deploy CLIs, 6 games, 2 network tools, 12 utility tools,
+  30 security tools, 1 automation tool.
+
+## 4.17.7
+
+- Documentation site overhauled: valid `_config.yml`, cayman-compatible custom
+  stylesheet that imports the full theme, a workflow that builds Jekyll before
+  deploying to GitHub Pages, and tool counts reconciled with the actual
+  `karnel/tools/*` and `karnel/tools/ai/*` directories (45 AI tools, 3 editors,
+  8 languages, 5 databases, 22 dev tools, 11 npm packages, 10 shell plugins,
+  4 UI components, 4 deploy CLIs, 6 games, 2 network tools, 12 utility tools,
+  30 security tools, 1 automation tool).
+
 ## 4.16.1 - 2026-08-22
 
 - `karnel agent ask/run`: when the model endpoint is unreachable and Cactus is

package/docs/_config.yml

@@ -2,11 +2,14 @@ title: Karnel Termux
 description: >-
   Modular Dev Environment for Termux — install languages, databases, AI agents,
   editors, and more with one command.
+author: Israel Marques
+lang: en-US
 theme: jekyll-theme-cayman
 markdown: kramdown
 logo: /assets/images/karnel-logo.png
-custom_css: /assets/css/style.css
+custom_css: /karnel-termux/assets/css/style.css
 baseurl: /karnel-termux
+show_downloads: false
 exclude:
   - vendor
   - Gemfile

package/docs/assets/css/{style.css → style.scss}

@@ -1,3 +1,8 @@
+---
+---
+
+@import "jekyll-theme-cayman";
+
 /* Karnel Termux — custom styling layered on top of jekyll-theme-cayman */
 
 :root {
@@ -9,6 +14,7 @@
   --karnel-text: #c9d1d9;
   --karnel-muted: #8b949e;
   --karnel-code-bg: #161b22;
+  color-scheme: dark light;
 }
 
 html {
@@ -21,14 +27,34 @@ body {
   color: #24292f;
 }
 
+/* Logo (added in page content; cayman's default.html does not render site.logo) */
+.karnel-logo {
+  display: block;
+  margin: 0 auto 1.25rem;
+  max-width: 220px;
+  height: auto;
+  border-radius: 14px;
+  box-shadow: 0 6px 22px rgba(0, 0, 0, 0.18);
+}
+
 @media (prefers-color-scheme: dark) {
+  html {
+    background: var(--karnel-bg);
+  }
   body {
     background: var(--karnel-bg);
     color: var(--karnel-text);
   }
+  .main-content {
+    color: var(--karnel-text);
+  }
   .page-header {
     background-image: linear-gradient(120deg, #0078d4, #2f81f7);
   }
+  .page-header .project-name,
+  .page-header .project-tagline {
+    color: #ffffff;
+  }
   .main-content h1,
   .main-content h2,
   .main-content h3,
@@ -53,15 +79,6 @@ body {
   font-size: 1.1rem;
 }
 
-/* Logo */
-.karnel-logo {
-  display: block;
-  margin: 0 auto 1.25rem;
-  max-width: 220px;
-  height: auto;
-  filter: drop-shadow(0 4px 12px rgba(0, 0, 0, 0.35));
-}
-
 /* Landing navigation */
 .karnel-nav {
   display: flex;
@@ -149,6 +166,15 @@ body {
   font-size: 0.88em;
 }
 
+/* Inline code should not be wrapped in its own block styling */
+.main-content p code,
+.main-content li code,
+.main-content td code {
+  background: rgba(120, 120, 120, 0.12);
+  padding: 0.12em 0.4em;
+  border-radius: 4px;
+}
+
 /* Blockquotes */
 .main-content blockquote {
   border-left: 4px solid var(--karnel-accent-2, #0078d4);
@@ -158,6 +184,16 @@ body {
   border-radius: 0 6px 6px 0;
 }
 
+/* Admonition callouts */
+.karnel-note {
+  border: 1px solid var(--karnel-accent-2, #0078d4);
+  border-left-width: 4px;
+  border-radius: 8px;
+  padding: 0.75rem 1rem;
+  margin: 1.25rem 0;
+  background: rgba(0, 120, 212, 0.06);
+}
+
 /* Section spacing */
 .main-content h2 {
   margin-top: 2.5rem;
@@ -203,3 +239,10 @@ body {
     color: #e6edf3;
   }
 }
+
+/* Footer credit spacing */
+.site-footer {
+  margin-top: 2.5rem;
+  border-top: 1px solid #e1e4e8;
+  padding-top: 1rem;
+}

package/docs/doctor/index.md

@@ -239,5 +239,5 @@ Regression coverage lives in `tests/smoke.sh` and verifies nested module syntax,
 the 76-entry registry, pipeline-safe parsing, mode counts, hidden GitHub workflow
 detection, scoped NestJS detection, TypeScript, and Python manifests.
 
-See [the 2026-07-16 changelog](../CHANGELOG.md) for the complete audit and hardening
+See [the 2026-07-16 changelog](../CHANGELOG/) for the complete audit and hardening
 record.

package/docs/index.md

@@ -1,5 +1,7 @@
 # Karnel Termux Documentation
 
+<img class="karnel-logo" src="{{ '/assets/images/karnel-logo.png' | relative_url }}" alt="Karnel Termux">
+
 > Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command
 
 Navigate the docs:
@@ -9,19 +11,20 @@ Navigate the docs:
   <li><a href="./doctor/">Doctor System</a></li>
   <li><a href="./troubleshooting/">Troubleshooting</a></li>
   <li><a href="./ARCHITECTURE/">Architecture</a></li>
-  <li><a href="./CHANGELOG.md">Changelog</a></li>
+  <li><a href="./CHANGELOG/">Changelog</a></li>
   <li><a href="https://israelmarques1024-dotcom.github.io/karnel-termux/">Live Site</a></li>
 </ul>
 
 ## What is Karnel?
 
 Karnel Termux transforms your Android device into a complete development workstation.
-With a single CLI (`karnel`), you can install and manage 45 AI tools, 8 languages,
-5 databases, 22 dev tools, 11 npm packages, 10 shell plugins, 4 UI components,
-4 deploy CLIs, 6 games, 2 network tools, 12 utility tools, 30 security tools,
-responsible OSINT, a second brain, voice commands, and reviewed plugins — all
-from modules: `ai`, `auto`, `db`, `deploy`, `dev`, `editor`, `games`, `lang`,
-`network`, `npm`, `osint`, `security`, `shell`, `ui`, `utils`, `voice`, `plugin`.
+With a single CLI (`karnel`), you can install and manage 45 AI tools, 3 editors,
+8 languages, 5 databases, 22 dev tools, 11 npm packages, 10 shell plugins,
+4 UI components, 4 deploy CLIs, 6 games, 2 network tools, 12 utility tools,
+30 security tools, 1 automation tool, responsible OSINT, a second brain,
+voice commands, and reviewed plugins — all from modules: `ai`, `auto`, `db`,
+`deploy`, `dev`, `editor`, `games`, `lang`, `network`, `npm`, `osint`,
+`security`, `shell`, `ui`, `utils`, `voice`, `plugin`.
 
 ## Sections
 
@@ -35,7 +38,7 @@ from modules: `ai`, `auto`, `db`, `deploy`, `dev`, `editor`, `games`, `lang`,
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux/blob/main/karnel/tools/utils/fconv/README.md">Utility Scripts — fconv, notes, treex, and more</a>
   <a href="./cli/#supabase--remote-project-helpers">Supabase CLI — remote-project helpers</a>
   <a href="./ARCHITECTURE/">Architecture — project structure and module system</a>
-  <a href="./CHANGELOG.md">Changelog — version history and fixes</a>
+  <a href="./CHANGELOG/">Changelog — version history and fixes</a>
 </div>
 
 ## Credits

package/docs/troubleshooting/index.md

@@ -43,12 +43,21 @@ npm publish does not block the release. The workflow needs `contents: write`
 permission (already declared). If `gh release create` fails, confirm the tag
 exists and the token used by GitHub Actions has write access.
 
-## Vercel deployment
-
-The live site deploys automatically through the Vercel integration on push to
-`main`; no GitHub Actions workflow is required. If a deploy fails, check the
-Vercel dashboard for build logs and confirm the framework preset, install
-command, and environment variables.
+## Documentation site (GitHub Pages)
+
+The documentation site is a Jekyll (cayman theme) site built from the `docs/`
+directory and published to GitHub Pages by the `Publish Docs` workflow
+(`.github/workflows/docs.yml`) on every push to `main` that changes `docs/**`.
+The workflow runs `actions/jekyll-build-pages` (from `docs/`, output to
+`docs/_site`), uploads the result as a Pages artifact, and deploys it to the
+`github-pages` environment. The live site is
+`https://israelmarques1024-dotcom.github.io/karnel-termux/`.
+
+If a build fails, open the Actions run for the failing job and read the Jekyll
+output: the usual causes are invalid `_config.yml` YAML, an SCSS compile error
+in `assets/css/style.scss`, or a malformed `{{ }}` Liquid tag. After a
+successful deploy, the published site is visible under the repository's
+**Settings → Pages**.
 
 ## Reporting a bug
 

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-d1343c03d2f32967e36b7f78c8ef8cbb6656410e
+f3ce43f67dd4d213f0af574d1673e8dbd6c910b9

package/karnel/cli/commands/show.sh

@@ -86,8 +86,15 @@ show_main() {
     return
   fi
 
-  local readme_path
-  readme_path="$(realpath "$KARNEL_PATH/tools/$module/$tool/README.md" 2>/dev/null)"
+  local readme_path raw
+  raw="$KARNEL_PATH/tools/$module/$tool/README.md"
+  if command -v realpath &>/dev/null; then
+    readme_path="$(realpath "$raw" 2>/dev/null)"
+  elif command -v readlink &>/dev/null; then
+    readme_path="$(readlink -f "$raw" 2>/dev/null)"
+  else
+    readme_path="$raw"
+  fi
 
   if [[ -z "$readme_path" ]]; then
     log_error "No documentation found for $module/$tool"

package/karnel/cli/commands/update.sh

@@ -347,12 +347,22 @@ _update_try_git() {
   return 1
 }
 
+_npm_installed_version() {
+  local v pr
+  v=$(npm list -g karnel-termux 2>/dev/null | grep -oP 'karnel-termux@\K[0-9.]+')
+  if [[ -z "$v" ]]; then
+    pr="$(npm root -g 2>/dev/null)/karnel-termux/package.json"
+    [[ -f "$pr" ]] && v=$(grep -oP '"version"\s*:\s*"\K[0-9.]+' "$pr")
+  fi
+  printf '%s' "${v:-unknown}"
+}
+
 _update_try_npm() {
   command -v npm &>/dev/null || return 1
   log_info "Trying npm update..."
   if npm update -g karnel-termux --ignore-scripts 2>/dev/null; then
     local new_ver
-    new_ver=$(npm list -g karnel-termux 2>/dev/null | grep karnel-termux | grep -oP '@\K[0-9.]+' || echo "latest")
+    new_ver=$(_npm_installed_version)
     log_success "Updated to v$new_ver via npm"
     return 0
   fi
@@ -365,7 +375,7 @@ _update_try_npm_install() {
   log_info "Trying npm install..."
   if npm install -g karnel-termux@latest --ignore-scripts 2>/dev/null; then
     local new_ver
-    new_ver=$(npm list -g karnel-termux 2>/dev/null | grep karnel-termux | grep -oP '@\K[0-9.]+' || echo "latest")
+    new_ver=$(_npm_installed_version)
     log_success "Updated to v$new_ver via npm install"
     return 0
   fi

package/karnel/tools/ai/antigravity-cli/install.sh

@@ -88,13 +88,16 @@ _antigravity_download_binary_impl() {
   fi
 
   if [[ "$manifest_sha256" =~ ^[0-9a-f]{64}$ ]]; then
-    verify_sha256 "$tarball" "$manifest_sha256" || return 1
+    verify_sha256 "$tarball" "$manifest_sha256" || { rm -f "$tarball"; return 1; }
   else
-    log_warn "Antigravity CLI manifest does not publish a SHA-256; skipping integrity verification"
+    log_error "Antigravity CLI manifest does not publish a SHA-256; refusing install"
+    rm -f "$tarball"
+    return 1
   fi
 
-  if ! tar -xzf "$tarball" -C "$AGY_DATA_DIR" &>>"$LOG_FILE"; then
+  if ! safe_extract_tar "$tarball" "$AGY_DATA_DIR"; then
     log_error "Failed to extract Antigravity CLI binary"
+    rm -f "$tarball"
     return 1
   fi
 

package/karnel/tools/ai/cursor-cli/install.sh

@@ -129,11 +129,18 @@ _download_cursor_binary_impl() {
 
   # Cursor does not publish a verifiable checksum for this asset, so integrity
   # relies on HTTPS transport only; upstream does not publish a verifiable checksum.
+  # Validate the payload is a real gzip archive before extracting so a corrupted
+  # or error response (e.g. an HTML error page) is rejected.
   if ! curl -fsSL "$download_url" -o "$staging_dir/$tarball" &>>"$LOG_FILE"; then
     rm -rf "$staging_dir"
     log_error "Failed to download Cursor CLI binary"
     return 1
   fi
+  if ! gzip -t "$staging_dir/$tarball" 2>/dev/null; then
+    rm -rf "$staging_dir"
+    log_error "Downloaded Cursor bundle is not a valid gzip archive"
+    return 1
+  fi
 
   if ! tar -zxf "$staging_dir/$tarball" --strip-components=1 -C "$staging_dir" &>>"$LOG_FILE"; then
     rm -rf "$staging_dir"

package/karnel/tools/ai/droid/install.sh

@@ -125,13 +125,22 @@ _download_droid_binary_impl() {
 
   local expected actual
   expected="$(curl -fsSL "$sha_url" 2>/dev/null | awk '{print $1}')"
-  if [ -n "$expected" ] && command -v sha256sum &>/dev/null; then
+  if [[ ! "$expected" =~ ^[0-9a-f]{64}$ ]]; then
+    log_error "No published SHA-256 for Droid binary; refusing install"
+    rm -f "$DROID_DATA_DIR/droid"
+    return 1
+  fi
+  if command -v sha256sum &>/dev/null; then
     actual="$(sha256sum "$DROID_DATA_DIR/droid" | awk '{print $1}')"
     if [ "$actual" != "$expected" ]; then
       log_error "Checksum verification failed"
       rm -f "$DROID_DATA_DIR/droid"
       return 1
     fi
+  else
+    log_error "sha256sum unavailable; refusing install"
+    rm -f "$DROID_DATA_DIR/droid"
+    return 1
   fi
 
   chmod +x "$DROID_DATA_DIR/droid"

package/karnel/tools/ai/keelcode/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/install"
 
 if ! declare -f safe_extract_tar >/dev/null 2>&1; then
   safe_extract_tar() {

package/karnel/tools/deploy/railway/install.sh

@@ -4,7 +4,7 @@ import "@/utils/log"
 import "@/utils/install"
 import "@/utils/version"
 
-LOG_FILE="$KARNEL_CACHE/install_deploy.log"
+LOG_FILE="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}/install_deploy.log"
 RAILWAY_DATA_DIR="${KARNEL_DATA:-${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}/deploy/railway"
 _RAILWAY_MARKER="$PREFIX/share/karnel-installers/railway"
 _RAILWAY_DATA_MARKER="$RAILWAY_DATA_DIR/.karnel-managed"
@@ -113,14 +113,17 @@ _install_railway_manual_impl() {
 
   local expected
   expected=$(github_release_asset_sha256 railwayapp/cli "$latest_version" "railway-${version}-aarch64-linux.tar.gz") || expected=""
-  if [[ "$expected" =~ ^[0-9a-f]{64}$ ]]; then
-    verify_sha256 "$RAILWAY_DATA_DIR/railway.tar.gz" "$expected" || {
-      rm -f "$RAILWAY_DATA_DIR/railway.tar.gz"
-      return 1
-    }
+  if [[ ! "$expected" =~ ^[0-9a-f]{64}$ ]]; then
+    log_error "No published SHA-256 for Railway CLI; refusing install"
+    rm -f "$RAILWAY_DATA_DIR/railway.tar.gz"
+    return 1
   fi
+  verify_sha256 "$RAILWAY_DATA_DIR/railway.tar.gz" "$expected" || {
+    rm -f "$RAILWAY_DATA_DIR/railway.tar.gz"
+    return 1
+  }
 
-  tar -zxf "$RAILWAY_DATA_DIR/railway.tar.gz" -C "$RAILWAY_DATA_DIR" 2>>"$LOG_FILE" || {
+  safe_extract_tar "$RAILWAY_DATA_DIR/railway.tar.gz" "$RAILWAY_DATA_DIR" || {
     rm -f "$RAILWAY_DATA_DIR/railway.tar.gz"
     return 1
   }

package/karnel/tools/deploy/supabase/install.sh

@@ -2,6 +2,14 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/install"
+
+if ! declare -f safe_extract_tar >/dev/null 2>&1; then
+  safe_extract_tar() {
+    local archive="$1" outdir="$2" strip_components="${3:-0}"
+    tar -xzf "$archive" -C "$outdir" --strip-components="$strip_components"
+  }
+fi
 
 _SUPABASE_VERSION="2.20.8"
 _SUPABASE_RELEASE_URL="https://github.com/supabase/cli/releases/download/v${_SUPABASE_VERSION}"
@@ -43,7 +51,9 @@ install_supabase() (
   local url="${_SUPABASE_RELEASE_URL}/${filename}"
   local checksum_url="${_SUPABASE_RELEASE_URL}/supabase_${_SUPABASE_VERSION}_checksums.txt"
   local tmp_dir staged_bin marker_staging="" old_bin="" old_marker=""
-  tmp_dir=$(mktemp -d "${TMPDIR:-/tmp}/supabase.XXXXXX") || return 1
+  local _kdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
+  mkdir -p "$_kdir" 2>/dev/null || _kdir="${TMPDIR:-/tmp}"
+  tmp_dir=$(mktemp -d "$_kdir/supabase.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmp_dir"; [[ -z "$staged_bin" ]] || rm -f "$staged_bin"; [[ -z "$marker_staging" ]] || rm -f "$marker_staging"' EXIT
 
@@ -79,8 +89,11 @@ install_supabase() (
   fi
   log_success "Checksum verified"
 
-  # Extract
-  tar -xzf "$tmp_dir/$filename" -C "$tmp_dir" supabase 2>/dev/null
+  # Extract (hardened: rejects symlink/absolute-path traversal)
+  safe_extract_tar "$tmp_dir/$filename" "$tmp_dir" || {
+    log_error "Extraction failed"
+    return 1
+  }
   if [[ ! -f "$tmp_dir/supabase" ]]; then
     log_error "Extraction failed"
     return 1

package/karnel/tools/lang/bun/install.sh

@@ -143,16 +143,24 @@ _download_bun_binary_native_impl() {
   }
   if declare -F github_release_asset_sha256 >/dev/null; then
     expected=$(github_release_asset_sha256 "$BUN_REPO" "bun-v$version" "$zip_name") || expected=""
-    if [[ "$expected" =~ ^[0-9a-f]{64}$ ]]; then
-      verify_sha256 "$staging_dir/$zip_name" "$expected" || { rm -rf "$staging_dir"; return 1; }
-    else
-      log_warn "No published SHA-256 for Bun native; skipping integrity verification"
+    if [[ ! "$expected" =~ ^[0-9a-f]{64}$ ]]; then
+      rm -rf "$staging_dir"
+      log_error "No published SHA-256 for Bun native; refusing install"
+      return 1
+    fi
+    verify_sha256 "$staging_dir/$zip_name" "$expected" || { rm -rf "$staging_dir"; return 1; }
+    if ! safe_extract_zip "$staging_dir/$zip_name" "$staging_dir"; then
+      rm -rf "$staging_dir"
+      log_error "Failed to extract Bun binary"
+      return 1
+    fi
+  else
+    command -v log_warn >/dev/null 2>&1 && log_warn "Integrity helpers unavailable; skipping Bun integrity verification"
+    if ! unzip -o "$staging_dir/$zip_name" -d "$staging_dir" &>>"$LOG_FILE"; then
+      rm -rf "$staging_dir"
+      log_error "Failed to extract Bun binary"
+      return 1
     fi
-  fi
-  if ! unzip -o "$staging_dir/$zip_name" -d "$staging_dir" &>>"$LOG_FILE"; then
-    rm -rf "$staging_dir"
-    log_error "Failed to extract Bun binary"
-    return 1
   fi
   rm -f "$staging_dir/$zip_name"
   extracted="$staging_dir/bun-linux-aarch64/bun"
@@ -280,13 +288,14 @@ _install_bun_proot_impl() {
   local expected
   expected=$(github_release_asset_sha256 "$BUN_REPO" "bun-v$version" "bun-linux-aarch64.zip") || expected=""
   if [[ ! "$expected" =~ ^[0-9a-f]{64}$ ]]; then
-    log_warn "No published SHA-256 for Bun; skipping integrity verification"
+    log_error "No published SHA-256 for Bun; refusing install"
+    return 1
   fi
   _bun_proot_ubuntu /bin/bash -c '
     export HOME=/root TMPDIR=/tmp
     cd /tmp &&
     curl -fsSL "$1" -o bun.zip &&
-    { [ -z "$2" ] || [ "$(sha256sum bun.zip | awk "{print \$1}")" = "$2" ]; } &&
+    [ "$(sha256sum bun.zip | awk "{print \$1}")" = "$2" ] &&
     unzip -o bun.zip >/dev/null 2>&1 &&
     mkdir -p /usr/local/bin &&
     mv bun-linux-aarch64/bun /usr/local/bin/bun &&
@@ -392,13 +401,14 @@ _update_bun_proot() {
   local expected
   expected=$(github_release_asset_sha256 "$BUN_REPO" "bun-v$version" "bun-linux-aarch64.zip") || expected=""
   if [[ ! "$expected" =~ ^[0-9a-f]{64}$ ]]; then
-    log_warn "No published SHA-256 for Bun; skipping integrity verification"
+    log_error "No published SHA-256 for Bun; refusing update"
+    return 1
   fi
   _bun_proot_ubuntu /bin/bash -c '
     export HOME=/root TMPDIR=/tmp
     cd /tmp &&
     curl -fsSL "$1" -o bun.zip &&
-    { [ -z "$2" ] || [ "$(sha256sum bun.zip | awk "{print \$1}")" = "$2" ]; } &&
+    [ "$(sha256sum bun.zip | awk "{print \$1}")" = "$2" ] &&
     unzip -o bun.zip >/dev/null 2>&1 &&
     mkdir -p /usr/local/bin &&
     mv bun-linux-aarch64/bun /usr/local/bin/bun &&

package/karnel/tools/utils/zork/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/install"
 
 LOG_FILE="$KARNEL_CACHE/install_zork.log"
 ZORK_DATA_DIR="${KARNEL_DATA:-${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}/zork"
@@ -62,7 +63,10 @@ _download_zork_data_impl() {
       return 1
     fi
 
-    if ! unzip -o "$zip_file" -d "$staging_dir" 2>>"$LOG_FILE"; then
+    if declare -F safe_extract_zip >/dev/null; then
+      safe_extract_zip "$zip_file" "$staging_dir" 2>>"$LOG_FILE" || {
+        rm -rf "$staging_dir"; log_error "Failed to extract Zork ${num}"; return 1; }
+    elif ! unzip -o "$zip_file" -d "$staging_dir" 2>>"$LOG_FILE"; then
       rm -rf "$staging_dir"
       log_error "Failed to extract Zork ${num}"
       return 1

package/karnel/tools/voice/uninstall.sh

@@ -3,13 +3,20 @@
 import "@/utils/log"
 
 _uninstall_voice_tool() {
+  local karnel_data="${KARNEL_DATA:-${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}"
+  local marker="$karnel_data/voice/.termux-api-managed"
   if command -v termux-api &>/dev/null; then
-    log_info "Removing Termux:API..."
-    if ! pkg uninstall -y termux-api &>>"$LOG_FILE"; then
-      log_error "Failed to remove Termux:API (see $LOG_FILE)"
-      return 1
+    if [[ -f "$marker" ]]; then
+      log_info "Removing Termux:API (installed by Karnel)..."
+      if ! pkg uninstall -y termux-api &>>"$LOG_FILE"; then
+        log_error "Failed to remove Termux:API (see $LOG_FILE)"
+        return 1
+      fi
+      rm -f "$marker"
+      log_success "Termux:API removed"
+    else
+      log_info "Termux:API is present but was not installed by Karnel; leaving it in place"
     fi
-    log_success "Termux:API removed"
   else
     log_info "Termux:API is not installed"
   fi

package/karnel/utils/agent_actions.sh

@@ -481,14 +481,22 @@ _agent_exec_to_file() {
 # ------------------------------------------------------------
 _agent_cmd_is_write() {
 	local cmd="$1"
-	# file redirections (2>&1 / >= are not redirections to a file)
-	if printf '%s\n' "$cmd" | grep -qE '(^|[;&|[:space:]])(>|>>)[^=&]'; then
+	# file redirections: >file >>file 2>file 1>>file &>file  (excludes fd-to-fd like >&2 and comparisons >=)
+	if printf '%s\n' "$cmd" | grep -qE '(^|[;&|[:space:]])(>|>>|&>|[0-9]>|[0-9]>>)([^&=]|$)'; then
 		return 0
 	fi
 	# command substitution / backticks execute arbitrary code → write
 	if printf '%s\n' "$cmd" | grep -qE '\$\(|`'; then
 		return 0
 	fi
+	# in-place editors: sed -i / perl -i modify files in place
+	if printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(sed|perl)[[:space:]][^|;&]*-[A-Za-z]*i[A-Za-z]*([[:space:]]|$)'; then
+		return 0
+	fi
+	# full-screen / line editors that can modify files
+	if printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(vim|nvim|emacs|ed|ex|vi|nano)[[:space:]]'; then
+		return 0
+	fi
 	# blocklist of commands that write to disk / change state / spawn a shell
 	printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(rm|rmdir|unlink|mv|cp|mkdir|touch|ln|chmod|chown|chgrp|install|truncate|tee|dd|mkfs|mount|umount|tar|gzip|gunzip|bzip2|xz|zstd|curl|wget|python3|python|node|npm|bun|yarn|pnpm|cargo|go |rustc|git (add|commit|push|pull|merge|rebase|reset|checkout|switch|restore|clean|stash|tag|clone|init|rm|mv)|pkg (install|uninstall|upgrade|reinstall|update)|apt( |-)|apt-get|dpkg|yum|dnf|pacman|brew|pip|pip3|uv|conda|mysql|psql|sqlite3|redis-cli|mongosh|kill|pkill|killall|service|systemctl|halt|reboot|shutdown|sudo|doas|su|pkexec|chroot|bash|sh|dash|zsh|ksh|eval|source|exec|screen|tmux|ssh|scp|sftp|rsync|telnet|nc|ncat|ftp|lftp|rsh|sshpass|socat|crontab|at |iptables|nft|ufw|docker|podman|kubectl|helm)[[:space:]]' && return 0
 	return 1
@@ -889,7 +897,9 @@ agent_exec_loading() {
 	local frames=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
 	local delay=0.08
 	local tmpfile
-	tmpfile="$(mktemp)"
+	local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
+	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+	tmpfile="$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null)" || tmpfile="$(mktemp 2>/dev/null)"
 
 	local stty_saved=""
 	if [[ -t 0 ]]; then
@@ -1357,12 +1367,17 @@ agent_context_footer() {
 agent_history_trim_tokens() {
 	local history="$1" budget="${2:-0}"
 	(( budget <= 0 )) && { echo "$history"; return; }
-	local toks n
+	local toks n drop_idx is_summary
 	while :; do
 		toks=$(agent_context_tokens "$history")
 		(( toks <= budget )) && break
 		n=$(printf '%s' "$history" | jq 'length')
 		(( n <= 4 )) && break
+		drop_idx=$(printf '%s' "$history" | jq -c 'if .[0].role == "system" then 1 else 0 end')
+		is_summary=$(printf '%s' "$history" | jq -r --argjson i "$drop_idx" '.[$i].content // "" | contains("<compacted_summary>")')
+		if [[ "$is_summary" == "true" ]]; then
+			break
+		fi
 		history=$(printf '%s' "$history" | jq -c 'if .[0].role == "system" then .[0:1] + .[2:] else .[1:] end')
 	done
 	echo "$history"

package/karnel/utils/agent_llm.sh

@@ -244,7 +244,20 @@ agent_chat_completion() {
 # characters. Real UTF-8 text passes through untouched.
 # ------------------------------------------------------------
 _agent_unescape_unicode() {
-	perl -CS -pe 's/\\u([0-9a-fA-F]{4})/chr(hex($1))/ge' 2>/dev/null
+  if command -v perl >/dev/null 2>&1; then
+    perl -CS -pe 's/\\u([0-9a-fA-F]{4})/chr(hex($1))/ge'
+  elif command -v python3 >/dev/null 2>&1; then
+    python3 -c 'import sys,re;sys.stdout.write(re.sub(r"\\u([0-9a-fA-F]{4})",lambda m:chr(int(m.group(1),16)),sys.stdin.read()))'
+  else
+    awk '{
+      while (match($0, /\\u[0-9a-fA-F]{4}/)) {
+        h = substr($0, RSTART + 2, 4)
+        c = sprintf("%c", strtonum("0x" h))
+        $0 = substr($0, 1, RSTART - 1) c substr($0, RSTART + 6)
+      }
+      print
+    }'
+  fi
 }
 
 # ------------------------------------------------------------

package/karnel/utils/install.sh

@@ -211,9 +211,11 @@ github_release_asset_sha256() {
     return 0
   fi
   # Fallback: a checksums.txt / SHA256SUMS asset listing every released file.
+  # Match the filename field exactly (it is the LAST field) so a substring or
+  # regex-metacharacter in $asset cannot select the wrong line's digest.
   digest=$(curl -fsSL --connect-timeout 10 --max-time 30 \
     "https://github.com/$repo/releases/download/$version/checksums.txt" 2>/dev/null \
-    | awk -v a="$asset" '$0 ~ a {print $1; exit}' | tr -d '\r')
+    | awk -v a="$asset" '{ f=$NF; if (f == a) { sub(/^\*/, "", $1); print $1; exit } }' | tr -d '\r')
   if [[ "$digest" =~ ^[0-9a-f]{64}$ ]]; then
     echo "$digest"
     return 0
@@ -248,20 +250,26 @@ extract_tarball() {
 
 replace_managed_directory() {
   local staging="$1" destination="$2" marker="$3"
-  local backup="${destination}.previous.$$"
+  local backup_dir backup_target=""
   if [[ -e "$destination" && ! -f "$destination/$marker" ]]; then
     log_error "Refusing to replace unowned installation: $destination"
     return 1
   fi
   printf '%s\n' 'karnel-managed-v1' >"$staging/$marker" || return 1
-  if [[ -e "$destination" ]] && ! mv "$destination" "$backup"; then
-    return 1
+  backup_dir="$(mktemp -d "$(dirname "$destination")/.karnel-managed.XXXXXX")" || return 1
+  if [[ -e "$destination" ]]; then
+    backup_target="$backup_dir/$(basename "$destination")"
+    if ! mv "$destination" "$backup_target"; then
+      rm -rf "$backup_dir"
+      return 1
+    fi
   fi
   if ! mv "$staging" "$destination"; then
-    [[ ! -e "$backup" ]] || mv "$backup" "$destination"
+    [[ -n "$backup_target" ]] && mv "$backup_target" "$destination" 2>/dev/null
+    rm -rf "$backup_dir"
     return 1
   fi
-  rm -rf "$backup"
+  rm -rf "$backup_dir"
 }
 
 record_managed_file() {

package/karnel/utils/log.sh

@@ -429,7 +429,9 @@ loading() {
 	local frames=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
 	local delay=0.08
 	local tmpfile
-	tmpfile="$(mktemp "${TMPDIR:-/tmp}/karnel.XXXXXX")"
+	local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
+	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+	tmpfile="$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null)" || tmpfile="$(mktemp 2>/dev/null)"
 	local cmd_pid=""
 
 	trap 'kill "$cmd_pid" 2>/dev/null; rm -f "$tmpfile"; return 1' INT TERM

package/karnel/utils/tools.sh

@@ -60,9 +60,6 @@ _run_tool_lifecycle_action() {
     "$uninstall_handler"
     rc=$?
     (( rc == 0 )) || return "$rc"
-    if (( protected )); then
-      rm -f "$marker" || return 1
-    fi
     "$install_handler"
     rc=$?
     if (( rc == 0 && protected )); then

package/karnel/utils/version.sh

@@ -51,7 +51,9 @@ _spin_capture() {
   shift
   local frames=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
   local tmp
-  tmp=$(mktemp)
+  local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
+  mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+  tmp=$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null) || tmp=$(mktemp 2>/dev/null)
   local spinner_fd
   if [ -c /dev/tty ] 2>/dev/null; then
     spinner_fd=/dev/tty

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.17.7",
+  "version": "4.17.9",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"