karnel-termux 4.17.8 → 4.17.10

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.17.8-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.17.10-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -22,8 +22,8 @@
   <a href="https://termux.dev/">
     <img src="https://img.shields.io/badge/platform-Termux%20%7C%20Android-0078D4?style=for-the-badge" alt="Platform">
   </a>
-  <a href="https://karneltermux.vercel.app">
-    <img src="https://img.shields.io/badge/Site-karneltermux.vercel.app-0078D4?style=for-the-badge" alt="Website">
+  <a href="https://israelmarques1024-dotcom.github.io/karnel-termux">
+    <img src="https://img.shields.io/badge/Site-karneltermux.github.io-0078D4?style=for-the-badge" alt="Website">
   </a>
 </p>
 
@@ -61,7 +61,7 @@ Core agent contributions by **devcorex**.
 ### Via checksummed GitHub release (recommended)
 
 ```bash
-version=4.17.8
+version=4.17.10
 tmpdir=$(mktemp -d) && trap 'rm -rf "$tmpdir"' EXIT
 base="https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/v$version"
 curl -fsSL "$base/karnel-termux-install.sh" -o "$tmpdir/karnel-termux-install.sh"
@@ -507,7 +507,7 @@ karnel open ai                        # Open AI module docs
 karnel open db                        # Open DB module docs
 ```
 
-Documentation loads from https://karneltermux.vercel.app.
+Documentation loads from https://israelmarques1024-dotcom.github.io/karnel-termux.
 
 ---
 
@@ -519,7 +519,7 @@ Documentation loads from https://karneltermux.vercel.app.
 - [Troubleshooting](docs/troubleshooting/index.md)
 - [Architecture](docs/ARCHITECTURE/index.md)
 - [Documentation changelog](docs/CHANGELOG.md)
-- [Official website](https://karneltermux.vercel.app)
+- [Official website](https://israelmarques1024-dotcom.github.io/karnel-termux)
 
 ---
 
@@ -651,7 +651,7 @@ MIT © Israel Marques
 ---
 
 <p align="center">
-  <a href="https://karneltermux.vercel.app">
+  <a href="https://israelmarques1024-dotcom.github.io/karnel-termux">
     <img src="https://img.shields.io/badge/Full%20Documentation-0078D4?style=for-the-badge" alt="Documentation">
   </a>
   <a href="https://www.youtube.com/@capideb">

package/docs/ARCHITECTURE/index.md

@@ -1,3 +1,9 @@
+---
+title: Architecture
+permalink: /ARCHITECTURE/
+layout: base
+---
+
 # Karnel Architecture
 
 ## Project Structure

package/docs/CHANGELOG.md

@@ -1,5 +1,74 @@
+---
+title: Documentation Changelog
+permalink: /CHANGELOG/
+layout: base
+---
+
 # Documentation Changelog
 
+## 4.17.10
+
+- Round 10 security/correctness hardening (23 distinct fixes):
+  - **Termux `/tmp` fallbacks eliminated** across host-side code
+    (`update.sh`, `brain.sh`, `version.sh`, `log.sh`, `agent_actions.sh`,
+    `doctor/code_langs.sh`, `supabase`, and the `security/*` tools amass,
+    subfinder, ffuf, gobuster, burpsuite, zap) — now use `KARNEL_CACHE`.
+  - **`karnel show <module>`** now rejects invalid module names
+    (`/`, `..`, `~`), closing a path-traversal / information-disclosure bug.
+  - **Agent PLAN (read-only) mode** hardened: blocks `sed`/`awk`/`perl`/
+    `xargs`/`make`/`env`/`nohup`/`setsid`, `sed`/`perl -i`, editors,
+    `git apply`/`worktree`/`read-tree`/`update-index`, and now also catches
+    redirections without a preceding space (`echo x>file`).
+  - **Plugin supply chain** fail-closed: installs now require a manifest
+    checksum (was silently skipped), and registry installs pin to a committed
+    SHA when provided.
+  - **`karnel pg backup --schedule`** no longer swallows `crontab` failures
+    and uses the escaped DB name to avoid duplicate cron jobs.
+  - **Reinstall** now proceeds to install when the uninstall step reports
+    "already uninstalled" (rc 2) instead of aborting.
+  - **Archive extraction hardened**: `cline`, `goose`, `kiro` AI installers
+    and `zork` now use the safe extractors; `zork` also drops literal `/tmp`.
+  - Site fully overhauled (navigation, dark mode, GitHub Pages URLs, Liquid
+    fixes, consistent front matter).
+
+## 4.17.9
+
+- Hardened installer and runtime security across the toolkit:
+  - `droid` binary install now refuses when no published SHA-256 digest is
+    available (fail-closed) instead of silently skipping verification.
+  - `keelcode` and `supabase` now extract archives through the hardened
+    `safe_extract_tar` (rejects symlink/absolute-path traversal) instead of
+    raw `tar`.
+  - Restored OpenCode installation: upstream publishes no checksum, so
+    `github_download_and_extract` warns instead of refusing (other tools that
+    publish checksums remain fail-closed).
+  - `cursor-cli` now validates the downloaded bundle is a real gzip archive
+    before extraction.
+  - Agent PLAN (read-only) mode write-guard hardened: now blocks `sed -i` /
+    `perl -i`, full-screen editors, and file descriptors like `2>file`.
+  - Agent compaction no longer drops the freshly built summary during the
+    trim safety-net.
+  - `voice` uninstall no longer removes `termux-api` unless Karnel installed it.
+  - `karnel show` no longer depends on `realpath` (portable fallback).
+  - `karnel update` reports the accurate installed version instead of a
+    misleading `latest`.
+  - Reinstall no longer deletes the ownership marker before confirming the
+    install, preventing a tool from being orphaned on install failure.
+
+## 4.17.8
+
+- Documentation site reconciled with the GitHub Pages deployment: the `Publish
+  Docs` workflow (`.github/workflows/docs.yml`) builds Jekyll from `docs/` and
+  deploys to GitHub Pages, so the live documentation URL is
+  `https://israelmarques1024-dotcom.github.io/karnel-termux/`.
+- `docs/CHANGELOG.md` is now a rendered page (added front matter + permalink)
+  and all internal links to it use the clean `/CHANGELOG/` path.
+- Tool counts verified against the actual `karnel/tools/*` and
+  `karnel/tools/ai/*` directories: 45 AI tools, 3 editors, 8 languages,
+  5 databases, 22 dev tools, 11 npm packages, 10 shell plugins, 4 UI
+  components, 4 deploy CLIs, 6 games, 2 network tools, 12 utility tools,
+  30 security tools, 1 automation tool.
+
 ## 4.17.7
 
 - Documentation site overhauled: valid `_config.yml`, cayman-compatible custom

package/docs/_config.yml

@@ -7,7 +7,7 @@ lang: en-US
 theme: jekyll-theme-cayman
 markdown: kramdown
 logo: /assets/images/karnel-logo.png
-custom_css: /assets/css/style.css
+custom_css: /karnel-termux/assets/css/style.css
 baseurl: /karnel-termux
 show_downloads: false
 exclude:

package/docs/_layouts/base.html

@@ -0,0 +1,15 @@
+---
+layout: default
+---
+
+<nav class="site-nav" aria-label="Documentation">
+  <a href="{{ '/' | relative_url }}">Docs</a>
+  <a href="{{ '/cli/' | relative_url }}">CLI</a>
+  <a href="{{ '/doctor/' | relative_url }}">Doctor</a>
+  <a href="{{ '/troubleshooting/' | relative_url }}">Troubleshooting</a>
+  <a href="{{ '/ARCHITECTURE/' | relative_url }}">Architecture</a>
+  <a href="{{ '/CHANGELOG/' | relative_url }}">Changelog</a>
+  <a href="https://israelmarques1024-dotcom.github.io/karnel-termux/">Live Site</a>
+</nav>
+
+{{ content }}

package/docs/assets/css/style.scss

@@ -14,6 +14,7 @@
   --karnel-text: #c9d1d9;
   --karnel-muted: #8b949e;
   --karnel-code-bg: #161b22;
+  color-scheme: dark light;
 }
 
 html {
@@ -37,13 +38,23 @@ body {
 }
 
 @media (prefers-color-scheme: dark) {
+  html {
+    background: var(--karnel-bg);
+  }
   body {
     background: var(--karnel-bg);
     color: var(--karnel-text);
   }
+  .main-content {
+    color: var(--karnel-text);
+  }
   .page-header {
     background-image: linear-gradient(120deg, #0078d4, #2f81f7);
   }
+  .page-header .project-name,
+  .page-header .project-tagline {
+    color: #ffffff;
+  }
   .main-content h1,
   .main-content h2,
   .main-content h3,
@@ -235,3 +246,37 @@ body {
   border-top: 1px solid #e1e4e8;
   padding-top: 1rem;
 }
+
+/* Top navigation bar (injected by _layouts/base.html) */
+.site-nav {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 0.4rem 1.1rem;
+  align-items: center;
+  padding: 0.7rem 1rem;
+  margin-bottom: 1.75rem;
+  background: #f3f5f8;
+  border: 1px solid #d0d7de;
+  border-radius: 10px;
+}
+
+.site-nav a {
+  color: #0078d4;
+  text-decoration: none;
+  font-weight: 600;
+  font-size: 0.92rem;
+}
+
+.site-nav a:hover {
+  text-decoration: underline;
+}
+
+@media (prefers-color-scheme: dark) {
+  .site-nav {
+    background: var(--karnel-panel);
+    border-color: var(--karnel-border);
+  }
+  .site-nav a {
+    color: var(--karnel-accent);
+  }
+}

package/docs/cli/index.md

@@ -1,3 +1,9 @@
+---
+title: CLI Commands
+permalink: /cli/
+layout: base
+---
+
 # Karnel CLI Reference
 
 ```bash
@@ -190,7 +196,7 @@ karnel open <target>
 ```
 
 Opens the official documentation page for a module using
-`termux-open-url`. Base URL: `https://karneltermux.vercel.app`
+`termux-open-url`. Base URL: `https://israelmarques1024-dotcom.github.io/karnel-termux`
 
 | Target           | Opens |
 |------------------|-------|

package/docs/doctor/index.md

@@ -1,3 +1,9 @@
+---
+title: Doctor System
+permalink: /doctor/
+layout: base
+---
+
 # Karnel Doctor
 
 `karnel doctor` diagnoses the Termux environment, analyzes project code, and
@@ -239,5 +245,5 @@ Regression coverage lives in `tests/smoke.sh` and verifies nested module syntax,
 the 76-entry registry, pipeline-safe parsing, mode counts, hidden GitHub workflow
 detection, scoped NestJS detection, TypeScript, and Python manifests.
 
-See [the 2026-07-16 changelog](../CHANGELOG.md) for the complete audit and hardening
+See [the 2026-07-16 changelog](../CHANGELOG/) for the complete audit and hardening
 record.

package/docs/index.md

@@ -1,20 +1,13 @@
-# Karnel Termux Documentation
+---
+title: Karnel Termux Documentation
+permalink: /
+layout: base
+---
 
 <img class="karnel-logo" src="{{ '/assets/images/karnel-logo.png' | relative_url }}" alt="Karnel Termux">
 
 > Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command
 
-Navigate the docs:
-
-<ul class="karnel-nav">
-  <li><a href="./cli/">CLI Commands</a></li>
-  <li><a href="./doctor/">Doctor System</a></li>
-  <li><a href="./troubleshooting/">Troubleshooting</a></li>
-  <li><a href="./ARCHITECTURE/">Architecture</a></li>
-  <li><a href="./CHANGELOG.md">Changelog</a></li>
-  <li><a href="https://israelmarques1024-dotcom.github.io/karnel-termux/">Live Site</a></li>
-</ul>
-
 ## What is Karnel?
 
 Karnel Termux transforms your Android device into a complete development workstation.
@@ -38,7 +31,7 @@ voice commands, and reviewed plugins — all from modules: `ai`, `auto`, `db`,
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux/blob/main/karnel/tools/utils/fconv/README.md">Utility Scripts — fconv, notes, treex, and more</a>
   <a href="./cli/#supabase--remote-project-helpers">Supabase CLI — remote-project helpers</a>
   <a href="./ARCHITECTURE/">Architecture — project structure and module system</a>
-  <a href="./CHANGELOG.md">Changelog — version history and fixes</a>
+  <a href="./CHANGELOG/">Changelog — version history and fixes</a>
 </div>
 
 ## Credits

package/docs/troubleshooting/index.md

@@ -1,3 +1,9 @@
+---
+title: Troubleshooting
+permalink: /troubleshooting/
+layout: base
+---
+
 # Troubleshooting
 
 Common issues when installing, updating, or publishing Karnel Termux.
@@ -43,12 +49,21 @@ npm publish does not block the release. The workflow needs `contents: write`
 permission (already declared). If `gh release create` fails, confirm the tag
 exists and the token used by GitHub Actions has write access.
 
-## Vercel deployment
-
-The live site deploys automatically through the Vercel integration on push to
-`main`; no GitHub Actions workflow is required. If a deploy fails, check the
-Vercel dashboard for build logs and confirm the framework preset, install
-command, and environment variables.
+## Documentation site (GitHub Pages)
+
+The documentation site is a Jekyll (cayman theme) site built from the `docs/`
+directory and published to GitHub Pages by the `Publish Docs` workflow
+(`.github/workflows/docs.yml`) on every push to `main` that changes `docs/**`.
+The workflow runs `actions/jekyll-build-pages` (from `docs/`, output to
+`docs/_site`), uploads the result as a Pages artifact, and deploys it to the
+`github-pages` environment. The live site is
+`https://israelmarques1024-dotcom.github.io/karnel-termux/`.
+
+If a build fails, open the Actions run for the failing job and read the Jekyll
+output: the usual causes are invalid `_config.yml` YAML, an SCSS compile error
+in `assets/css/style.scss`, or a malformed `{% raw %}{{ }}{% endraw %}` Liquid tag. After a
+successful deploy, the published site is visible under the repository's
+**Settings → Pages**.
 
 ## Reporting a bug
 

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-ad787cd9d5efa67b498b0b1dc5e00203553b32e7
+ef2964062663afea85983ccb2043d0a8ab6e115e

package/karnel/cli/commands/brain.sh

@@ -121,7 +121,7 @@ _brain_slug_escape() {
 _brain_update_related() {
 	local file="$1" slug="$2"
 	local tmp
-	tmp=$(mktemp "${TMPDIR:-/tmp}/karnel-brain.XXXXXX")
+	tmp=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-brain.XXXXXX")
 	local frontmatter_end
 	frontmatter_end=$(awk '/^---$/ {++n} n==2 {print NR; exit}' "$file")
 
@@ -151,7 +151,7 @@ _brain_update_related() {
 _brain_remove_related() {
 	local file="$1" slug="$2"
 	local tmp
-	tmp=$(mktemp "${TMPDIR:-/tmp}/karnel-brain.XXXXXX")
+	tmp=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-brain.XXXXXX")
 	local frontmatter_end
 	frontmatter_end=$(awk '/^---$/ {++n} n==2 {print NR; exit}' "$file")
 

package/karnel/cli/commands/doctor/code_langs.sh

@@ -64,7 +64,7 @@ _init_lang_tools() {
   LANG_TOOLS["C/C++:clang_tidy"]="clang-tidy|lint|clang-tidy {} -- -std=c17 2>&1 | head -20|||official"
 
   # Java
-  LANG_TOOLS["Java:javac"]="javac|syntax|javac -d \"${TMPDIR:-/tmp}\" -Xlint:all {} 2>&1 | head -10|||official"
+  LANG_TOOLS["Java:javac"]="javac|syntax|javac -d \"${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}\" -Xlint:all {} 2>&1 | head -10|||official"
 
   # Docker
   LANG_TOOLS["Docker:hadolint"]="hadolint|lint|hadolint Dockerfile|||community"

package/karnel/cli/commands/open.sh

@@ -3,7 +3,7 @@
 import "@/utils/log"
 import "@/utils/colors"
 
-OPEN_BASE_URL="https://karneltermux.vercel.app"
+OPEN_BASE_URL="https://israelmarques1024-dotcom.github.io/karnel-termux"
 
 open_main() {
 	if [[ $# -eq 0 ]]; then

package/karnel/cli/commands/pg.sh

@@ -737,9 +737,22 @@ pg_schedule() {
 		local escaped_db; printf -v escaped_db '%q' "$db_name"
 		local escaped_path; printf -v escaped_path '%q' "$KARNEL_PATH"
 		local job="$cron_expr KARNEL_PATH=$escaped_path $escaped_path/bin/karnel pg backup $escaped_db >/dev/null 2>&1"
-		(crontab -l 2>/dev/null | grep -v "karnel pg backup $db_name"; echo "$job") | crontab -
-		log_success "Backup scheduled successfully ($interval) for database '$db_name'!"
-		list_item "Ensure cron daemon is running (run: 'crond')"
+		local tmpcron
+		tmpcron="$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-pg.XXXXXX")" || {
+			log_error "Failed to schedule backup for database '$db_name'"
+			return 1
+		}
+		{
+			crontab -l 2>/dev/null | grep -vF "karnel pg backup $escaped_db"
+			echo "$job"
+		} >"$tmpcron"
+		if crontab "$tmpcron"; then
+			log_success "Backup scheduled successfully ($interval) for database '$db_name'!"
+			list_item "Ensure cron daemon is running (run: 'crond')"
+		else
+			log_error "Failed to schedule backup for database '$db_name'"
+		fi
+		rm -f "$tmpcron"
 	fi
 	echo
 }

package/karnel/cli/commands/show.sh

@@ -47,6 +47,11 @@ show_main() {
 		return 1
 	fi
 
+  if [[ ! "$module" =~ ^[A-Za-z0-9_-]+$ ]]; then
+    log_error "Invalid module name: $module"
+    return 1
+  fi
+
   if [[ "$module" == "backup" ]]; then
     _show_backup_docs "$tool"
     return
@@ -86,8 +91,15 @@ show_main() {
     return
   fi
 
-  local readme_path
-  readme_path="$(realpath "$KARNEL_PATH/tools/$module/$tool/README.md" 2>/dev/null)"
+  local readme_path raw
+  raw="$KARNEL_PATH/tools/$module/$tool/README.md"
+  if command -v realpath &>/dev/null; then
+    readme_path="$(realpath "$raw" 2>/dev/null)"
+  elif command -v readlink &>/dev/null; then
+    readme_path="$(readlink -f "$raw" 2>/dev/null)"
+  else
+    readme_path="$raw"
+  fi
 
   if [[ -z "$readme_path" ]]; then
     log_error "No documentation found for $module/$tool"

package/karnel/cli/commands/update.sh

@@ -226,9 +226,9 @@ _update_try_curl() {
   command -v curl &>/dev/null || return 1
 
   local meta installer sumfile tag
-  meta=$(mktemp "${TMPDIR:-/tmp}/karnel-meta.XXXXXX") || return 1
-  installer=$(mktemp "${TMPDIR:-/tmp}/karnel-install.XXXXXX") || { rm -f "$meta"; return 1; }
-  sumfile=$(mktemp "${TMPDIR:-/tmp}/karnel-sum.XXXXXX") || { rm -f "$meta" "$installer"; return 1; }
+  meta=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-meta.XXXXXX") || return 1
+  installer=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-install.XXXXXX") || { rm -f "$meta"; return 1; }
+  sumfile=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-sum.XXXXXX") || { rm -f "$meta" "$installer"; return 1; }
 
   log_info "Trying the official curl installer..."
 
@@ -347,12 +347,22 @@ _update_try_git() {
   return 1
 }
 
+_npm_installed_version() {
+  local v pr
+  v=$(npm list -g karnel-termux 2>/dev/null | grep -oP 'karnel-termux@\K[0-9.]+')
+  if [[ -z "$v" ]]; then
+    pr="$(npm root -g 2>/dev/null)/karnel-termux/package.json"
+    [[ -f "$pr" ]] && v=$(grep -oP '"version"\s*:\s*"\K[0-9.]+' "$pr")
+  fi
+  printf '%s' "${v:-unknown}"
+}
+
 _update_try_npm() {
   command -v npm &>/dev/null || return 1
   log_info "Trying npm update..."
   if npm update -g karnel-termux --ignore-scripts 2>/dev/null; then
     local new_ver
-    new_ver=$(npm list -g karnel-termux 2>/dev/null | grep karnel-termux | grep -oP '@\K[0-9.]+' || echo "latest")
+    new_ver=$(_npm_installed_version)
     log_success "Updated to v$new_ver via npm"
     return 0
   fi
@@ -365,7 +375,7 @@ _update_try_npm_install() {
   log_info "Trying npm install..."
   if npm install -g karnel-termux@latest --ignore-scripts 2>/dev/null; then
     local new_ver
-    new_ver=$(npm list -g karnel-termux 2>/dev/null | grep karnel-termux | grep -oP '@\K[0-9.]+' || echo "latest")
+    new_ver=$(_npm_installed_version)
     log_success "Updated to v$new_ver via npm install"
     return 0
   fi

package/karnel/tools/ai/cline/install.sh

@@ -3,6 +3,14 @@
 import "@/utils/log"
 import "@/utils/version"
 import "@/utils/colors"
+import "@/utils/install"
+
+if ! declare -f safe_extract_tar >/dev/null 2>&1; then
+  safe_extract_tar() {
+    local archive="$1" outdir="$2" strip_components="${3:-0}"
+    tar -xzf "$archive" -C "$outdir" --strip-components="$strip_components"
+  }
+fi
 
 : "${KARNEL_DATA:=${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}"
 : "${KARNEL_CACHE:=${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
@@ -99,7 +107,7 @@ _cline_install_global_impl() {
 
   mkdir -p "$CLINE_DATA_DIR"
   : >"$CLINE_DATA_DIR/$CLINE_MARKER"
-  if ! tar -xzf "$tarball" -C "$CLINE_DATA_DIR" &>>"$LOG_FILE"; then
+  if ! safe_extract_tar "$tarball" "$CLINE_DATA_DIR" &>>"$LOG_FILE"; then
     rm -f "$tarball"
     log_error "Failed to extract cline linux-arm64 binary"
     return 1

package/karnel/tools/ai/cursor-cli/install.sh

@@ -129,11 +129,18 @@ _download_cursor_binary_impl() {
 
   # Cursor does not publish a verifiable checksum for this asset, so integrity
   # relies on HTTPS transport only; upstream does not publish a verifiable checksum.
+  # Validate the payload is a real gzip archive before extracting so a corrupted
+  # or error response (e.g. an HTML error page) is rejected.
   if ! curl -fsSL "$download_url" -o "$staging_dir/$tarball" &>>"$LOG_FILE"; then
     rm -rf "$staging_dir"
     log_error "Failed to download Cursor CLI binary"
     return 1
   fi
+  if ! gzip -t "$staging_dir/$tarball" 2>/dev/null; then
+    rm -rf "$staging_dir"
+    log_error "Downloaded Cursor bundle is not a valid gzip archive"
+    return 1
+  fi
 
   if ! tar -zxf "$staging_dir/$tarball" --strip-components=1 -C "$staging_dir" &>>"$LOG_FILE"; then
     rm -rf "$staging_dir"

package/karnel/tools/ai/droid/install.sh

@@ -125,13 +125,22 @@ _download_droid_binary_impl() {
 
   local expected actual
   expected="$(curl -fsSL "$sha_url" 2>/dev/null | awk '{print $1}')"
-  if [ -n "$expected" ] && command -v sha256sum &>/dev/null; then
+  if [[ ! "$expected" =~ ^[0-9a-f]{64}$ ]]; then
+    log_error "No published SHA-256 for Droid binary; refusing install"
+    rm -f "$DROID_DATA_DIR/droid"
+    return 1
+  fi
+  if command -v sha256sum &>/dev/null; then
     actual="$(sha256sum "$DROID_DATA_DIR/droid" | awk '{print $1}')"
     if [ "$actual" != "$expected" ]; then
       log_error "Checksum verification failed"
       rm -f "$DROID_DATA_DIR/droid"
       return 1
     fi
+  else
+    log_error "sha256sum unavailable; refusing install"
+    rm -f "$DROID_DATA_DIR/droid"
+    return 1
   fi
 
   chmod +x "$DROID_DATA_DIR/droid"

package/karnel/tools/ai/goose/install.sh

@@ -197,7 +197,7 @@ _goose_download_binary_proot_impl() {
     return 1
   fi
   verify_github_release_asset aaif-goose/goose "v${latest_version}" "$tarball" "$GOOSE_DATA_DIR/$tarball" || return 1
-  if ! tar -xzf "$GOOSE_DATA_DIR/$tarball" -C "$GOOSE_DATA_DIR" &>>"$LOG_FILE"; then
+  if ! extract_tarball "$GOOSE_DATA_DIR/$tarball" "$GOOSE_DATA_DIR" &>>"$LOG_FILE"; then
     rm -f "$GOOSE_DATA_DIR/$tarball"
     log_error "Failed to extract Goose CLI"
     return 1

package/karnel/tools/ai/keelcode/install.sh

@@ -2,6 +2,7 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/install"
 
 if ! declare -f safe_extract_tar >/dev/null 2>&1; then
   safe_extract_tar() {

package/karnel/tools/ai/kiro/install.sh

@@ -3,6 +3,14 @@
 import "@/utils/log"
 import "@/utils/colors"
 import "@/utils/version"
+import "@/utils/install"
+
+if ! declare -f safe_extract_tar >/dev/null 2>&1; then
+  safe_extract_tar() {
+    local archive="$1" outdir="$2" strip_components="${3:-0}"
+    tar -xzf "$archive" -C "$outdir" --strip-components="$strip_components"
+  }
+fi
 
 : "${KARNEL_CACHE:=${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
 : "${KARNEL_DATA:=${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}"
@@ -136,7 +144,7 @@ print(version, download, checksum, sep="\t")
     fi
     log_success "Checksum verified"
 
-    if tar xzf "$archive" -C "$tmpdir" 2>>"$LOG_FILE"; then
+    if safe_extract_tar "$archive" "$tmpdir" 2>>"$LOG_FILE"; then
       bin_path=$(find "$tmpdir" -name "kiro-cli" -type f -executable 2>/dev/null | head -1)
       if [[ -z "$bin_path" ]]; then
         bin_path=$(find "$tmpdir" -name "kiro*" -type f -executable 2>/dev/null | head -1)

package/karnel/tools/deploy/supabase/install.sh

@@ -2,6 +2,14 @@
 
 import "@/utils/log"
 import "@/utils/version"
+import "@/utils/install"
+
+if ! declare -f safe_extract_tar >/dev/null 2>&1; then
+  safe_extract_tar() {
+    local archive="$1" outdir="$2" strip_components="${3:-0}"
+    tar -xzf "$archive" -C "$outdir" --strip-components="$strip_components"
+  }
+fi
 
 _SUPABASE_VERSION="2.20.8"
 _SUPABASE_RELEASE_URL="https://github.com/supabase/cli/releases/download/v${_SUPABASE_VERSION}"
@@ -44,7 +52,7 @@ install_supabase() (
   local checksum_url="${_SUPABASE_RELEASE_URL}/supabase_${_SUPABASE_VERSION}_checksums.txt"
   local tmp_dir staged_bin marker_staging="" old_bin="" old_marker=""
   local _kdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
-  mkdir -p "$_kdir" 2>/dev/null || _kdir="${TMPDIR:-/tmp}"
+  mkdir -p "$_kdir" 2>/dev/null || _kdir="${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}"
   tmp_dir=$(mktemp -d "$_kdir/supabase.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmp_dir"; [[ -z "$staged_bin" ]] || rm -f "$staged_bin"; [[ -z "$marker_staging" ]] || rm -f "$marker_staging"' EXIT
@@ -81,8 +89,11 @@ install_supabase() (
   fi
   log_success "Checksum verified"
 
-  # Extract
-  tar -xzf "$tmp_dir/$filename" -C "$tmp_dir" supabase 2>/dev/null
+  # Extract (hardened: rejects symlink/absolute-path traversal)
+  safe_extract_tar "$tmp_dir/$filename" "$tmp_dir" || {
+    log_error "Extraction failed"
+    return 1
+  }
   if [[ ! -f "$tmp_dir/supabase" ]]; then
     log_error "Extraction failed"
     return 1

package/karnel/tools/plugins/install.sh

@@ -519,7 +519,10 @@ _plugin_verify_checksum() {
   local expected actual
 
   expected="$(jq -r '.checksum // empty' "$manifest")" || return 1
-  [[ -n "$expected" ]] || return 0
+  if [[ -z "$expected" ]]; then
+    log_error "Plugin '$(jq -r '.name' "$manifest")' has no checksum; refusing install"
+    return 1
+  fi
 
   actual="$(_plugin_payload_checksum "$plugin_root")" || return 1
   if [[ "$actual" != "$expected" ]]; then
@@ -882,11 +885,15 @@ _plugin_clone_repository() {
   local repo="$1"
   local ref="$2"
   local destination="$3"
+  local commit="$4"
   local source_url="https://github.com/$repo.git"
 
   _plugin_require_command git || return 1
 
-  if [[ -n "$ref" ]]; then
+  if [[ -n "$commit" ]]; then
+    git clone "$source_url" "$destination" || return 1
+    git -C "$destination" checkout "$commit" --detach || return 1
+  elif [[ -n "$ref" ]]; then
     git clone --depth=1 --branch "$ref" "$source_url" "$destination"
   else
     git clone --depth=1 "$source_url" "$destination"
@@ -1083,6 +1090,13 @@ _plugin_stage_and_install() {
   local replace_existing="$7"
   local staging checkout checkout_root candidate candidate_root manifest_name commit installed_ref expected_commit registry_name
 
+  expected_commit=""
+  registry_name=""
+  if [[ -n "$registry_entry" ]]; then
+    expected_commit="$(jq -r '.commit // empty' <<<"$registry_entry")" || return 1
+    registry_name="$(jq -r '.name' <<<"$registry_entry")" || return 1
+  fi
+
   _plugin_prepare_plugins_dir || return 1
   _plugin_validate_repo "$repo" || return 1
   [[ -z "$ref" ]] || _plugin_ref_is_valid "$ref" || {
@@ -1100,7 +1114,7 @@ _plugin_stage_and_install() {
   }
   checkout="$staging/repository"
 
-  if ! _plugin_clone_repository "$repo" "$ref" "$checkout"; then
+  if ! _plugin_clone_repository "$repo" "$ref" "$checkout" "$expected_commit"; then
     log_error "Failed to clone plugin repository '$repo'."
     _plugin_cleanup_staging "$staging"
     return 1

package/karnel/tools/security/amass/install.sh

@@ -47,7 +47,7 @@ install_amass() (
   esac
   url="https://github.com/owasp-amass/amass/releases/download/v${_AMASS_VERSION}/$asset"
 
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/amass.XXXXXX") || return 1
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/amass.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmpdir"; [ -z "$staged_bin" ] || rm -f "$staged_bin"' EXIT
   archive="$tmpdir/amass.zip"

package/karnel/tools/security/burpsuite/install.sh

@@ -28,7 +28,7 @@ install_burpsuite() (
 
   local url tmpdir staged_dir wrapper old_dir wrapper_backup
   url="https://portswigger.net/burp/releases/download?product=community&type=Jar&version=${_BURP_VERSION}"
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/burpsuite.XXXXXX") || return 1
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/burpsuite.XXXXXX") || return 1
   trap 'rm -rf "$tmpdir"' EXIT
   staged_dir="$tmpdir/data"
   mkdir -p "$staged_dir" "$PREFIX/bin" "$(dirname "$_BURP_DIR")" || return 1

package/karnel/tools/security/ffuf/install.sh

@@ -26,7 +26,7 @@ _download_ffuf() (
     *) return 1 ;;
   esac
   url="https://github.com/ffuf/ffuf/releases/download/v${_FFUF_VERSION}/$asset"
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/ffuf.XXXXXX") || return 1
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/ffuf.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmpdir"; [ -z "$staged_bin" ] || rm -f "$staged_bin"' EXIT
   archive="$tmpdir/ffuf.tar.gz"

package/karnel/tools/security/gobuster/install.sh

@@ -19,7 +19,7 @@ _install_gobuster_bin() (
     x86_64) checksum="871be404ce5f80c96b864586b3caa90f894598d1a8222ae316c19e5f70e04cfc" ;;
   esac
   local url="https://github.com/OJ/gobuster/releases/download/v${_GOBUSTER_VERSION}/$asset"
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/gobuster.XXXXXX") || return 1
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/gobuster.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmpdir"; [ -z "$staged_bin" ] || rm -f "$staged_bin"' EXIT
   archive="$tmpdir/gobuster.tar.gz"

package/karnel/tools/security/subfinder/install.sh

@@ -47,7 +47,7 @@ install_subfinder() (
   esac
   url="https://github.com/projectdiscovery/subfinder/releases/download/v${_SUBFINDER_VERSION}/$asset"
 
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/subfinder.XXXXXX") || return 1
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/subfinder.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmpdir"; [ -z "$staged_bin" ] || rm -f "$staged_bin"' EXIT
   archive="$tmpdir/subfinder.zip"

package/karnel/tools/security/zap/install.sh

@@ -34,7 +34,7 @@ install_zap() (
 
   local url="https://github.com/zaproxy/zaproxy/releases/download/v${_ZAP_VERSION}/$ZAP_ASSET"
 
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/zap.XXXXXX") || {
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/zap.XXXXXX") || {
     log_error "Falha ao criar diretório temporário"
     return 1
   }

package/karnel/tools/utils/zork/zork.sh

@@ -3,8 +3,13 @@ ZORK_DIR="$HOME/.local/share/karnel-data/zork"
 if [ ! -f "$ZORK_DIR/zork1.dat" ]; then
   mkdir -p "$ZORK_DIR"
   echo "Baixando Zork I..."
-  curl -sL "https://www.infocom-if.org/downloads/zork1.zip" -o /tmp/zork1.zip
-  unzip -o /tmp/zork1.zip -d "$ZORK_DIR" 2>/dev/null
-  rm -f /tmp/zork1.zip
+  tmpdir="$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/zork.XXXXXX")" || exit 1
+  curl -fsSL "https://www.infocom-if.org/downloads/zork1.zip" -o "$tmpdir/zork1.zip"
+  if unzip -l "$tmpdir/zork1.zip" 2>/dev/null | grep -qE '\.\.[/\\]|^/|[A-Za-z]:\\'; then
+    echo "Refusing potentially unsafe Zork archive" >&2
+    rm -rf "$tmpdir"; exit 1
+  fi
+  unzip -o "$tmpdir/zork1.zip" -d "$ZORK_DIR" 2>/dev/null
+  rm -rf "$tmpdir"
 fi
 exec frotz "$ZORK_DIR/zork1.dat" "$@"

package/karnel/tools/voice/uninstall.sh

@@ -3,13 +3,20 @@
 import "@/utils/log"
 
 _uninstall_voice_tool() {
+  local karnel_data="${KARNEL_DATA:-${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}"
+  local marker="$karnel_data/voice/.termux-api-managed"
   if command -v termux-api &>/dev/null; then
-    log_info "Removing Termux:API..."
-    if ! pkg uninstall -y termux-api &>>"$LOG_FILE"; then
-      log_error "Failed to remove Termux:API (see $LOG_FILE)"
-      return 1
+    if [[ -f "$marker" ]]; then
+      log_info "Removing Termux:API (installed by Karnel)..."
+      if ! pkg uninstall -y termux-api &>>"$LOG_FILE"; then
+        log_error "Failed to remove Termux:API (see $LOG_FILE)"
+        return 1
+      fi
+      rm -f "$marker"
+      log_success "Termux:API removed"
+    else
+      log_info "Termux:API is present but was not installed by Karnel; leaving it in place"
     fi
-    log_success "Termux:API removed"
   else
     log_info "Termux:API is not installed"
   fi

package/karnel/utils/agent_actions.sh

@@ -481,16 +481,32 @@ _agent_exec_to_file() {
 # ------------------------------------------------------------
 _agent_cmd_is_write() {
 	local cmd="$1"
-	# file redirections (2>&1 / >= are not redirections to a file)
-	if printf '%s\n' "$cmd" | grep -qE '(^|[;&|[:space:]])(>|>>)[^=&]'; then
+	# file redirections: >file >>file 2>file 1>>file &>file (also without a
+	# preceding space, e.g. echo x>file). Excludes fd-to-fd like >&2 and
+	# numeric comparisons >= / =>.
+	if printf '%s\n' "$cmd" | grep -qE '(^|[;&|[:space:]]|[A-Za-z0-9])(>|>>|&>)([^&=]|$)'; then
 		return 0
 	fi
 	# command substitution / backticks execute arbitrary code → write
 	if printf '%s\n' "$cmd" | grep -qE '\$\(|`'; then
 		return 0
 	fi
+	# in-place editors: sed -i / perl -i modify files in place
+	if printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(sed|perl)[[:space:]][^|;&]*-[A-Za-z]*i[A-Za-z]*([[:space:]]|$)'; then
+		return 0
+	fi
+	# full-screen / line editors that can modify files
+	if printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(vim|nvim|emacs|ed|ex|vi|nano)[[:space:]]'; then
+		return 0
+	fi
+	# interpreters that can execute arbitrary code / spawn processes / modify
+	# files even without a trailing redirection or -i flag (sed 'w', perl
+	# open(">"), awk system(), env/setsid/nohup running a command, make, xargs)
+	if printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(sed|awk|perl|xargs|make|env|nohup|setsid)[[:space:]]'; then
+		return 0
+	fi
 	# blocklist of commands that write to disk / change state / spawn a shell
-	printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(rm|rmdir|unlink|mv|cp|mkdir|touch|ln|chmod|chown|chgrp|install|truncate|tee|dd|mkfs|mount|umount|tar|gzip|gunzip|bzip2|xz|zstd|curl|wget|python3|python|node|npm|bun|yarn|pnpm|cargo|go |rustc|git (add|commit|push|pull|merge|rebase|reset|checkout|switch|restore|clean|stash|tag|clone|init|rm|mv)|pkg (install|uninstall|upgrade|reinstall|update)|apt( |-)|apt-get|dpkg|yum|dnf|pacman|brew|pip|pip3|uv|conda|mysql|psql|sqlite3|redis-cli|mongosh|kill|pkill|killall|service|systemctl|halt|reboot|shutdown|sudo|doas|su|pkexec|chroot|bash|sh|dash|zsh|ksh|eval|source|exec|screen|tmux|ssh|scp|sftp|rsync|telnet|nc|ncat|ftp|lftp|rsh|sshpass|socat|crontab|at |iptables|nft|ufw|docker|podman|kubectl|helm)[[:space:]]' && return 0
+	printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(rm|rmdir|unlink|mv|cp|mkdir|touch|ln|chmod|chown|chgrp|install|truncate|tee|dd|mkfs|mount|umount|tar|gzip|gunzip|bzip2|xz|zstd|curl|wget|python3|python|node|npm|bun|yarn|pnpm|cargo|go |rustc|git (add|commit|push|pull|merge|rebase|reset|checkout|switch|restore|clean|stash|tag|clone|init|rm|mv|apply|am|worktree|read-tree|update-index|write-tree|checkout-index)|pkg (install|uninstall|upgrade|reinstall|update)|apt( |-)|apt-get|dpkg|yum|dnf|pacman|brew|pip|pip3|uv|conda|mysql|psql|sqlite3|redis-cli|mongosh|kill|pkill|killall|service|systemctl|halt|reboot|shutdown|sudo|doas|su|pkexec|chroot|bash|sh|dash|zsh|ksh|eval|source|exec|screen|tmux|ssh|scp|sftp|rsync|telnet|nc|ncat|ftp|lftp|rsh|sshpass|socat|crontab|at |iptables|nft|ufw|docker|podman|kubectl|helm)[[:space:]]' && return 0
 	return 1
 }
 
@@ -890,7 +906,7 @@ agent_exec_loading() {
 	local delay=0.08
 	local tmpfile
 	local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
-	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}"
 	tmpfile="$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null)" || tmpfile="$(mktemp 2>/dev/null)"
 
 	local stty_saved=""
@@ -1359,12 +1375,17 @@ agent_context_footer() {
 agent_history_trim_tokens() {
 	local history="$1" budget="${2:-0}"
 	(( budget <= 0 )) && { echo "$history"; return; }
-	local toks n
+	local toks n drop_idx is_summary
 	while :; do
 		toks=$(agent_context_tokens "$history")
 		(( toks <= budget )) && break
 		n=$(printf '%s' "$history" | jq 'length')
 		(( n <= 4 )) && break
+		drop_idx=$(printf '%s' "$history" | jq -c 'if .[0].role == "system" then 1 else 0 end')
+		is_summary=$(printf '%s' "$history" | jq -r --argjson i "$drop_idx" '.[$i].content // "" | contains("<compacted_summary>")')
+		if [[ "$is_summary" == "true" ]]; then
+			break
+		fi
 		history=$(printf '%s' "$history" | jq -c 'if .[0].role == "system" then .[0:1] + .[2:] else .[1:] end')
 	done
 	echo "$history"

package/karnel/utils/install.sh

@@ -291,9 +291,7 @@ github_download_and_extract() {
   if [[ "$expected" =~ ^[0-9a-f]{64}$ ]]; then
     verify_sha256 "$tarball" "$expected" || return 1
   else
-    log_error "No verifiable SHA-256 digest published for $repo/$asset; refusing install"
-    rm -f "$tarball"
-    return 1
+    log_warn "No published SHA-256 digest for $repo/$asset; skipping integrity verification"
   fi
   extract_tarball "$tarball" "$outdir" || return 1
   return 0

package/karnel/utils/log.sh

@@ -430,7 +430,7 @@ loading() {
 	local delay=0.08
 	local tmpfile
 	local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
-	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}"
 	tmpfile="$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null)" || tmpfile="$(mktemp 2>/dev/null)"
 	local cmd_pid=""
 

package/karnel/utils/tools.sh

@@ -59,10 +59,7 @@ _run_tool_lifecycle_action() {
     fi
     "$uninstall_handler"
     rc=$?
-    (( rc == 0 )) || return "$rc"
-    if (( protected )); then
-      rm -f "$marker" || return 1
-    fi
+    (( rc == 0 || rc == 2 )) || return "$rc"
     "$install_handler"
     rc=$?
     if (( rc == 0 && protected )); then

package/karnel/utils/version.sh

@@ -52,7 +52,7 @@ _spin_capture() {
   local frames=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
   local tmp
   local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
-  mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+  mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}"
   tmp=$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null) || tmp=$(mktemp 2>/dev/null)
   local spinner_fd
   if [ -c /dev/tty ] 2>/dev/null; then

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.17.8",
+  "version": "4.17.10",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"