karnel-termux 4.17.9 → 4.17.10

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.17.9-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.17.10-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -22,8 +22,8 @@
   <a href="https://termux.dev/">
     <img src="https://img.shields.io/badge/platform-Termux%20%7C%20Android-0078D4?style=for-the-badge" alt="Platform">
   </a>
-  <a href="https://karneltermux.vercel.app">
-    <img src="https://img.shields.io/badge/Site-karneltermux.vercel.app-0078D4?style=for-the-badge" alt="Website">
+  <a href="https://israelmarques1024-dotcom.github.io/karnel-termux">
+    <img src="https://img.shields.io/badge/Site-karneltermux.github.io-0078D4?style=for-the-badge" alt="Website">
   </a>
 </p>
 
@@ -61,7 +61,7 @@ Core agent contributions by **devcorex**.
 ### Via checksummed GitHub release (recommended)
 
 ```bash
-version=4.17.9
+version=4.17.10
 tmpdir=$(mktemp -d) && trap 'rm -rf "$tmpdir"' EXIT
 base="https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/v$version"
 curl -fsSL "$base/karnel-termux-install.sh" -o "$tmpdir/karnel-termux-install.sh"
@@ -507,7 +507,7 @@ karnel open ai                        # Open AI module docs
 karnel open db                        # Open DB module docs
 ```
 
-Documentation loads from https://karneltermux.vercel.app.
+Documentation loads from https://israelmarques1024-dotcom.github.io/karnel-termux.
 
 ---
 
@@ -519,7 +519,7 @@ Documentation loads from https://karneltermux.vercel.app.
 - [Troubleshooting](docs/troubleshooting/index.md)
 - [Architecture](docs/ARCHITECTURE/index.md)
 - [Documentation changelog](docs/CHANGELOG.md)
-- [Official website](https://karneltermux.vercel.app)
+- [Official website](https://israelmarques1024-dotcom.github.io/karnel-termux)
 
 ---
 
@@ -651,7 +651,7 @@ MIT © Israel Marques
 ---
 
 <p align="center">
-  <a href="https://karneltermux.vercel.app">
+  <a href="https://israelmarques1024-dotcom.github.io/karnel-termux">
     <img src="https://img.shields.io/badge/Full%20Documentation-0078D4?style=for-the-badge" alt="Documentation">
   </a>
   <a href="https://www.youtube.com/@capideb">

package/docs/ARCHITECTURE/index.md

@@ -1,3 +1,9 @@
+---
+title: Architecture
+permalink: /ARCHITECTURE/
+layout: base
+---
+
 # Karnel Architecture
 
 ## Project Structure

package/docs/CHANGELOG.md

@@ -1,10 +1,36 @@
 ---
 title: Documentation Changelog
 permalink: /CHANGELOG/
+layout: base
 ---
 
 # Documentation Changelog
 
+## 4.17.10
+
+- Round 10 security/correctness hardening (23 distinct fixes):
+  - **Termux `/tmp` fallbacks eliminated** across host-side code
+    (`update.sh`, `brain.sh`, `version.sh`, `log.sh`, `agent_actions.sh`,
+    `doctor/code_langs.sh`, `supabase`, and the `security/*` tools amass,
+    subfinder, ffuf, gobuster, burpsuite, zap) — now use `KARNEL_CACHE`.
+  - **`karnel show <module>`** now rejects invalid module names
+    (`/`, `..`, `~`), closing a path-traversal / information-disclosure bug.
+  - **Agent PLAN (read-only) mode** hardened: blocks `sed`/`awk`/`perl`/
+    `xargs`/`make`/`env`/`nohup`/`setsid`, `sed`/`perl -i`, editors,
+    `git apply`/`worktree`/`read-tree`/`update-index`, and now also catches
+    redirections without a preceding space (`echo x>file`).
+  - **Plugin supply chain** fail-closed: installs now require a manifest
+    checksum (was silently skipped), and registry installs pin to a committed
+    SHA when provided.
+  - **`karnel pg backup --schedule`** no longer swallows `crontab` failures
+    and uses the escaped DB name to avoid duplicate cron jobs.
+  - **Reinstall** now proceeds to install when the uninstall step reports
+    "already uninstalled" (rc 2) instead of aborting.
+  - **Archive extraction hardened**: `cline`, `goose`, `kiro` AI installers
+    and `zork` now use the safe extractors; `zork` also drops literal `/tmp`.
+  - Site fully overhauled (navigation, dark mode, GitHub Pages URLs, Liquid
+    fixes, consistent front matter).
+
 ## 4.17.9
 
 - Hardened installer and runtime security across the toolkit:

package/docs/_layouts/base.html

@@ -0,0 +1,15 @@
+---
+layout: default
+---
+
+<nav class="site-nav" aria-label="Documentation">
+  <a href="{{ '/' | relative_url }}">Docs</a>
+  <a href="{{ '/cli/' | relative_url }}">CLI</a>
+  <a href="{{ '/doctor/' | relative_url }}">Doctor</a>
+  <a href="{{ '/troubleshooting/' | relative_url }}">Troubleshooting</a>
+  <a href="{{ '/ARCHITECTURE/' | relative_url }}">Architecture</a>
+  <a href="{{ '/CHANGELOG/' | relative_url }}">Changelog</a>
+  <a href="https://israelmarques1024-dotcom.github.io/karnel-termux/">Live Site</a>
+</nav>
+
+{{ content }}

package/docs/assets/css/style.scss

@@ -246,3 +246,37 @@ body {
   border-top: 1px solid #e1e4e8;
   padding-top: 1rem;
 }
+
+/* Top navigation bar (injected by _layouts/base.html) */
+.site-nav {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 0.4rem 1.1rem;
+  align-items: center;
+  padding: 0.7rem 1rem;
+  margin-bottom: 1.75rem;
+  background: #f3f5f8;
+  border: 1px solid #d0d7de;
+  border-radius: 10px;
+}
+
+.site-nav a {
+  color: #0078d4;
+  text-decoration: none;
+  font-weight: 600;
+  font-size: 0.92rem;
+}
+
+.site-nav a:hover {
+  text-decoration: underline;
+}
+
+@media (prefers-color-scheme: dark) {
+  .site-nav {
+    background: var(--karnel-panel);
+    border-color: var(--karnel-border);
+  }
+  .site-nav a {
+    color: var(--karnel-accent);
+  }
+}

package/docs/cli/index.md

@@ -1,3 +1,9 @@
+---
+title: CLI Commands
+permalink: /cli/
+layout: base
+---
+
 # Karnel CLI Reference
 
 ```bash
@@ -190,7 +196,7 @@ karnel open <target>
 ```
 
 Opens the official documentation page for a module using
-`termux-open-url`. Base URL: `https://karneltermux.vercel.app`
+`termux-open-url`. Base URL: `https://israelmarques1024-dotcom.github.io/karnel-termux`
 
 | Target           | Opens |
 |------------------|-------|

package/docs/doctor/index.md

@@ -1,3 +1,9 @@
+---
+title: Doctor System
+permalink: /doctor/
+layout: base
+---
+
 # Karnel Doctor
 
 `karnel doctor` diagnoses the Termux environment, analyzes project code, and

package/docs/index.md

@@ -1,20 +1,13 @@
-# Karnel Termux Documentation
+---
+title: Karnel Termux Documentation
+permalink: /
+layout: base
+---
 
 <img class="karnel-logo" src="{{ '/assets/images/karnel-logo.png' | relative_url }}" alt="Karnel Termux">
 
 > Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command
 
-Navigate the docs:
-
-<ul class="karnel-nav">
-  <li><a href="./cli/">CLI Commands</a></li>
-  <li><a href="./doctor/">Doctor System</a></li>
-  <li><a href="./troubleshooting/">Troubleshooting</a></li>
-  <li><a href="./ARCHITECTURE/">Architecture</a></li>
-  <li><a href="./CHANGELOG/">Changelog</a></li>
-  <li><a href="https://israelmarques1024-dotcom.github.io/karnel-termux/">Live Site</a></li>
-</ul>
-
 ## What is Karnel?
 
 Karnel Termux transforms your Android device into a complete development workstation.

package/docs/troubleshooting/index.md

@@ -1,3 +1,9 @@
+---
+title: Troubleshooting
+permalink: /troubleshooting/
+layout: base
+---
+
 # Troubleshooting
 
 Common issues when installing, updating, or publishing Karnel Termux.
@@ -55,7 +61,7 @@ The workflow runs `actions/jekyll-build-pages` (from `docs/`, output to
 
 If a build fails, open the Actions run for the failing job and read the Jekyll
 output: the usual causes are invalid `_config.yml` YAML, an SCSS compile error
-in `assets/css/style.scss`, or a malformed `{{ }}` Liquid tag. After a
+in `assets/css/style.scss`, or a malformed `{% raw %}{{ }}{% endraw %}` Liquid tag. After a
 successful deploy, the published site is visible under the repository's
 **Settings → Pages**.
 

package/karnel/RELEASE_COMMIT

@@ -1 +1 @@
-f3ce43f67dd4d213f0af574d1673e8dbd6c910b9
+ef2964062663afea85983ccb2043d0a8ab6e115e

package/karnel/cli/commands/brain.sh

@@ -121,7 +121,7 @@ _brain_slug_escape() {
 _brain_update_related() {
 	local file="$1" slug="$2"
 	local tmp
-	tmp=$(mktemp "${TMPDIR:-/tmp}/karnel-brain.XXXXXX")
+	tmp=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-brain.XXXXXX")
 	local frontmatter_end
 	frontmatter_end=$(awk '/^---$/ {++n} n==2 {print NR; exit}' "$file")
 
@@ -151,7 +151,7 @@ _brain_update_related() {
 _brain_remove_related() {
 	local file="$1" slug="$2"
 	local tmp
-	tmp=$(mktemp "${TMPDIR:-/tmp}/karnel-brain.XXXXXX")
+	tmp=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-brain.XXXXXX")
 	local frontmatter_end
 	frontmatter_end=$(awk '/^---$/ {++n} n==2 {print NR; exit}' "$file")
 

package/karnel/cli/commands/doctor/code_langs.sh

@@ -64,7 +64,7 @@ _init_lang_tools() {
   LANG_TOOLS["C/C++:clang_tidy"]="clang-tidy|lint|clang-tidy {} -- -std=c17 2>&1 | head -20|||official"
 
   # Java
-  LANG_TOOLS["Java:javac"]="javac|syntax|javac -d \"${TMPDIR:-/tmp}\" -Xlint:all {} 2>&1 | head -10|||official"
+  LANG_TOOLS["Java:javac"]="javac|syntax|javac -d \"${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}\" -Xlint:all {} 2>&1 | head -10|||official"
 
   # Docker
   LANG_TOOLS["Docker:hadolint"]="hadolint|lint|hadolint Dockerfile|||community"

package/karnel/cli/commands/open.sh

@@ -3,7 +3,7 @@
 import "@/utils/log"
 import "@/utils/colors"
 
-OPEN_BASE_URL="https://karneltermux.vercel.app"
+OPEN_BASE_URL="https://israelmarques1024-dotcom.github.io/karnel-termux"
 
 open_main() {
 	if [[ $# -eq 0 ]]; then

package/karnel/cli/commands/pg.sh

@@ -737,9 +737,22 @@ pg_schedule() {
 		local escaped_db; printf -v escaped_db '%q' "$db_name"
 		local escaped_path; printf -v escaped_path '%q' "$KARNEL_PATH"
 		local job="$cron_expr KARNEL_PATH=$escaped_path $escaped_path/bin/karnel pg backup $escaped_db >/dev/null 2>&1"
-		(crontab -l 2>/dev/null | grep -v "karnel pg backup $db_name"; echo "$job") | crontab -
-		log_success "Backup scheduled successfully ($interval) for database '$db_name'!"
-		list_item "Ensure cron daemon is running (run: 'crond')"
+		local tmpcron
+		tmpcron="$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-pg.XXXXXX")" || {
+			log_error "Failed to schedule backup for database '$db_name'"
+			return 1
+		}
+		{
+			crontab -l 2>/dev/null | grep -vF "karnel pg backup $escaped_db"
+			echo "$job"
+		} >"$tmpcron"
+		if crontab "$tmpcron"; then
+			log_success "Backup scheduled successfully ($interval) for database '$db_name'!"
+			list_item "Ensure cron daemon is running (run: 'crond')"
+		else
+			log_error "Failed to schedule backup for database '$db_name'"
+		fi
+		rm -f "$tmpcron"
 	fi
 	echo
 }

package/karnel/cli/commands/show.sh

@@ -47,6 +47,11 @@ show_main() {
 		return 1
 	fi
 
+  if [[ ! "$module" =~ ^[A-Za-z0-9_-]+$ ]]; then
+    log_error "Invalid module name: $module"
+    return 1
+  fi
+
   if [[ "$module" == "backup" ]]; then
     _show_backup_docs "$tool"
     return

package/karnel/cli/commands/update.sh

@@ -226,9 +226,9 @@ _update_try_curl() {
   command -v curl &>/dev/null || return 1
 
   local meta installer sumfile tag
-  meta=$(mktemp "${TMPDIR:-/tmp}/karnel-meta.XXXXXX") || return 1
-  installer=$(mktemp "${TMPDIR:-/tmp}/karnel-install.XXXXXX") || { rm -f "$meta"; return 1; }
-  sumfile=$(mktemp "${TMPDIR:-/tmp}/karnel-sum.XXXXXX") || { rm -f "$meta" "$installer"; return 1; }
+  meta=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-meta.XXXXXX") || return 1
+  installer=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-install.XXXXXX") || { rm -f "$meta"; return 1; }
+  sumfile=$(mktemp "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/karnel-sum.XXXXXX") || { rm -f "$meta" "$installer"; return 1; }
 
   log_info "Trying the official curl installer..."
 

package/karnel/tools/ai/cline/install.sh

@@ -3,6 +3,14 @@
 import "@/utils/log"
 import "@/utils/version"
 import "@/utils/colors"
+import "@/utils/install"
+
+if ! declare -f safe_extract_tar >/dev/null 2>&1; then
+  safe_extract_tar() {
+    local archive="$1" outdir="$2" strip_components="${3:-0}"
+    tar -xzf "$archive" -C "$outdir" --strip-components="$strip_components"
+  }
+fi
 
 : "${KARNEL_DATA:=${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}"
 : "${KARNEL_CACHE:=${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
@@ -99,7 +107,7 @@ _cline_install_global_impl() {
 
   mkdir -p "$CLINE_DATA_DIR"
   : >"$CLINE_DATA_DIR/$CLINE_MARKER"
-  if ! tar -xzf "$tarball" -C "$CLINE_DATA_DIR" &>>"$LOG_FILE"; then
+  if ! safe_extract_tar "$tarball" "$CLINE_DATA_DIR" &>>"$LOG_FILE"; then
     rm -f "$tarball"
     log_error "Failed to extract cline linux-arm64 binary"
     return 1

package/karnel/tools/ai/goose/install.sh

@@ -197,7 +197,7 @@ _goose_download_binary_proot_impl() {
     return 1
   fi
   verify_github_release_asset aaif-goose/goose "v${latest_version}" "$tarball" "$GOOSE_DATA_DIR/$tarball" || return 1
-  if ! tar -xzf "$GOOSE_DATA_DIR/$tarball" -C "$GOOSE_DATA_DIR" &>>"$LOG_FILE"; then
+  if ! extract_tarball "$GOOSE_DATA_DIR/$tarball" "$GOOSE_DATA_DIR" &>>"$LOG_FILE"; then
     rm -f "$GOOSE_DATA_DIR/$tarball"
     log_error "Failed to extract Goose CLI"
     return 1

package/karnel/tools/ai/kiro/install.sh

@@ -3,6 +3,14 @@
 import "@/utils/log"
 import "@/utils/colors"
 import "@/utils/version"
+import "@/utils/install"
+
+if ! declare -f safe_extract_tar >/dev/null 2>&1; then
+  safe_extract_tar() {
+    local archive="$1" outdir="$2" strip_components="${3:-0}"
+    tar -xzf "$archive" -C "$outdir" --strip-components="$strip_components"
+  }
+fi
 
 : "${KARNEL_CACHE:=${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
 : "${KARNEL_DATA:=${XDG_DATA_HOME:-$HOME/.local/share}/karnel-data}"
@@ -136,7 +144,7 @@ print(version, download, checksum, sep="\t")
     fi
     log_success "Checksum verified"
 
-    if tar xzf "$archive" -C "$tmpdir" 2>>"$LOG_FILE"; then
+    if safe_extract_tar "$archive" "$tmpdir" 2>>"$LOG_FILE"; then
       bin_path=$(find "$tmpdir" -name "kiro-cli" -type f -executable 2>/dev/null | head -1)
       if [[ -z "$bin_path" ]]; then
         bin_path=$(find "$tmpdir" -name "kiro*" -type f -executable 2>/dev/null | head -1)

package/karnel/tools/deploy/supabase/install.sh

@@ -52,7 +52,7 @@ install_supabase() (
   local checksum_url="${_SUPABASE_RELEASE_URL}/supabase_${_SUPABASE_VERSION}_checksums.txt"
   local tmp_dir staged_bin marker_staging="" old_bin="" old_marker=""
   local _kdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
-  mkdir -p "$_kdir" 2>/dev/null || _kdir="${TMPDIR:-/tmp}"
+  mkdir -p "$_kdir" 2>/dev/null || _kdir="${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}"
   tmp_dir=$(mktemp -d "$_kdir/supabase.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmp_dir"; [[ -z "$staged_bin" ]] || rm -f "$staged_bin"; [[ -z "$marker_staging" ]] || rm -f "$marker_staging"' EXIT

package/karnel/tools/plugins/install.sh

@@ -519,7 +519,10 @@ _plugin_verify_checksum() {
   local expected actual
 
   expected="$(jq -r '.checksum // empty' "$manifest")" || return 1
-  [[ -n "$expected" ]] || return 0
+  if [[ -z "$expected" ]]; then
+    log_error "Plugin '$(jq -r '.name' "$manifest")' has no checksum; refusing install"
+    return 1
+  fi
 
   actual="$(_plugin_payload_checksum "$plugin_root")" || return 1
   if [[ "$actual" != "$expected" ]]; then
@@ -882,11 +885,15 @@ _plugin_clone_repository() {
   local repo="$1"
   local ref="$2"
   local destination="$3"
+  local commit="$4"
   local source_url="https://github.com/$repo.git"
 
   _plugin_require_command git || return 1
 
-  if [[ -n "$ref" ]]; then
+  if [[ -n "$commit" ]]; then
+    git clone "$source_url" "$destination" || return 1
+    git -C "$destination" checkout "$commit" --detach || return 1
+  elif [[ -n "$ref" ]]; then
     git clone --depth=1 --branch "$ref" "$source_url" "$destination"
   else
     git clone --depth=1 "$source_url" "$destination"
@@ -1083,6 +1090,13 @@ _plugin_stage_and_install() {
   local replace_existing="$7"
   local staging checkout checkout_root candidate candidate_root manifest_name commit installed_ref expected_commit registry_name
 
+  expected_commit=""
+  registry_name=""
+  if [[ -n "$registry_entry" ]]; then
+    expected_commit="$(jq -r '.commit // empty' <<<"$registry_entry")" || return 1
+    registry_name="$(jq -r '.name' <<<"$registry_entry")" || return 1
+  fi
+
   _plugin_prepare_plugins_dir || return 1
   _plugin_validate_repo "$repo" || return 1
   [[ -z "$ref" ]] || _plugin_ref_is_valid "$ref" || {
@@ -1100,7 +1114,7 @@ _plugin_stage_and_install() {
   }
   checkout="$staging/repository"
 
-  if ! _plugin_clone_repository "$repo" "$ref" "$checkout"; then
+  if ! _plugin_clone_repository "$repo" "$ref" "$checkout" "$expected_commit"; then
     log_error "Failed to clone plugin repository '$repo'."
     _plugin_cleanup_staging "$staging"
     return 1

package/karnel/tools/security/amass/install.sh

@@ -47,7 +47,7 @@ install_amass() (
   esac
   url="https://github.com/owasp-amass/amass/releases/download/v${_AMASS_VERSION}/$asset"
 
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/amass.XXXXXX") || return 1
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/amass.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmpdir"; [ -z "$staged_bin" ] || rm -f "$staged_bin"' EXIT
   archive="$tmpdir/amass.zip"

package/karnel/tools/security/burpsuite/install.sh

@@ -28,7 +28,7 @@ install_burpsuite() (
 
   local url tmpdir staged_dir wrapper old_dir wrapper_backup
   url="https://portswigger.net/burp/releases/download?product=community&type=Jar&version=${_BURP_VERSION}"
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/burpsuite.XXXXXX") || return 1
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/burpsuite.XXXXXX") || return 1
   trap 'rm -rf "$tmpdir"' EXIT
   staged_dir="$tmpdir/data"
   mkdir -p "$staged_dir" "$PREFIX/bin" "$(dirname "$_BURP_DIR")" || return 1

package/karnel/tools/security/ffuf/install.sh

@@ -26,7 +26,7 @@ _download_ffuf() (
     *) return 1 ;;
   esac
   url="https://github.com/ffuf/ffuf/releases/download/v${_FFUF_VERSION}/$asset"
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/ffuf.XXXXXX") || return 1
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/ffuf.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmpdir"; [ -z "$staged_bin" ] || rm -f "$staged_bin"' EXIT
   archive="$tmpdir/ffuf.tar.gz"

package/karnel/tools/security/gobuster/install.sh

@@ -19,7 +19,7 @@ _install_gobuster_bin() (
     x86_64) checksum="871be404ce5f80c96b864586b3caa90f894598d1a8222ae316c19e5f70e04cfc" ;;
   esac
   local url="https://github.com/OJ/gobuster/releases/download/v${_GOBUSTER_VERSION}/$asset"
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/gobuster.XXXXXX") || return 1
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/gobuster.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmpdir"; [ -z "$staged_bin" ] || rm -f "$staged_bin"' EXIT
   archive="$tmpdir/gobuster.tar.gz"

package/karnel/tools/security/subfinder/install.sh

@@ -47,7 +47,7 @@ install_subfinder() (
   esac
   url="https://github.com/projectdiscovery/subfinder/releases/download/v${_SUBFINDER_VERSION}/$asset"
 
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/subfinder.XXXXXX") || return 1
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/subfinder.XXXXXX") || return 1
   staged_bin=""
   trap 'rm -rf "$tmpdir"; [ -z "$staged_bin" ] || rm -f "$staged_bin"' EXIT
   archive="$tmpdir/subfinder.zip"

package/karnel/tools/security/zap/install.sh

@@ -34,7 +34,7 @@ install_zap() (
 
   local url="https://github.com/zaproxy/zaproxy/releases/download/v${_ZAP_VERSION}/$ZAP_ASSET"
 
-  tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/zap.XXXXXX") || {
+  tmpdir=$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/zap.XXXXXX") || {
     log_error "Falha ao criar diretório temporário"
     return 1
   }

package/karnel/tools/utils/zork/zork.sh

@@ -3,8 +3,13 @@ ZORK_DIR="$HOME/.local/share/karnel-data/zork"
 if [ ! -f "$ZORK_DIR/zork1.dat" ]; then
   mkdir -p "$ZORK_DIR"
   echo "Baixando Zork I..."
-  curl -sL "https://www.infocom-if.org/downloads/zork1.zip" -o /tmp/zork1.zip
-  unzip -o /tmp/zork1.zip -d "$ZORK_DIR" 2>/dev/null
-  rm -f /tmp/zork1.zip
+  tmpdir="$(mktemp -d "${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}/zork.XXXXXX")" || exit 1
+  curl -fsSL "https://www.infocom-if.org/downloads/zork1.zip" -o "$tmpdir/zork1.zip"
+  if unzip -l "$tmpdir/zork1.zip" 2>/dev/null | grep -qE '\.\.[/\\]|^/|[A-Za-z]:\\'; then
+    echo "Refusing potentially unsafe Zork archive" >&2
+    rm -rf "$tmpdir"; exit 1
+  fi
+  unzip -o "$tmpdir/zork1.zip" -d "$ZORK_DIR" 2>/dev/null
+  rm -rf "$tmpdir"
 fi
 exec frotz "$ZORK_DIR/zork1.dat" "$@"

package/karnel/utils/agent_actions.sh

@@ -481,8 +481,10 @@ _agent_exec_to_file() {
 # ------------------------------------------------------------
 _agent_cmd_is_write() {
 	local cmd="$1"
-	# file redirections: >file >>file 2>file 1>>file &>file  (excludes fd-to-fd like >&2 and comparisons >=)
-	if printf '%s\n' "$cmd" | grep -qE '(^|[;&|[:space:]])(>|>>|&>|[0-9]>|[0-9]>>)([^&=]|$)'; then
+	# file redirections: >file >>file 2>file 1>>file &>file (also without a
+	# preceding space, e.g. echo x>file). Excludes fd-to-fd like >&2 and
+	# numeric comparisons >= / =>.
+	if printf '%s\n' "$cmd" | grep -qE '(^|[;&|[:space:]]|[A-Za-z0-9])(>|>>|&>)([^&=]|$)'; then
 		return 0
 	fi
 	# command substitution / backticks execute arbitrary code → write
@@ -497,8 +499,14 @@ _agent_cmd_is_write() {
 	if printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(vim|nvim|emacs|ed|ex|vi|nano)[[:space:]]'; then
 		return 0
 	fi
+	# interpreters that can execute arbitrary code / spawn processes / modify
+	# files even without a trailing redirection or -i flag (sed 'w', perl
+	# open(">"), awk system(), env/setsid/nohup running a command, make, xargs)
+	if printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(sed|awk|perl|xargs|make|env|nohup|setsid)[[:space:]]'; then
+		return 0
+	fi
 	# blocklist of commands that write to disk / change state / spawn a shell
-	printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(rm|rmdir|unlink|mv|cp|mkdir|touch|ln|chmod|chown|chgrp|install|truncate|tee|dd|mkfs|mount|umount|tar|gzip|gunzip|bzip2|xz|zstd|curl|wget|python3|python|node|npm|bun|yarn|pnpm|cargo|go |rustc|git (add|commit|push|pull|merge|rebase|reset|checkout|switch|restore|clean|stash|tag|clone|init|rm|mv)|pkg (install|uninstall|upgrade|reinstall|update)|apt( |-)|apt-get|dpkg|yum|dnf|pacman|brew|pip|pip3|uv|conda|mysql|psql|sqlite3|redis-cli|mongosh|kill|pkill|killall|service|systemctl|halt|reboot|shutdown|sudo|doas|su|pkexec|chroot|bash|sh|dash|zsh|ksh|eval|source|exec|screen|tmux|ssh|scp|sftp|rsync|telnet|nc|ncat|ftp|lftp|rsh|sshpass|socat|crontab|at |iptables|nft|ufw|docker|podman|kubectl|helm)[[:space:]]' && return 0
+	printf '%s\n' "$cmd" | grep -qiE '(^|[;&|[:space:]])(rm|rmdir|unlink|mv|cp|mkdir|touch|ln|chmod|chown|chgrp|install|truncate|tee|dd|mkfs|mount|umount|tar|gzip|gunzip|bzip2|xz|zstd|curl|wget|python3|python|node|npm|bun|yarn|pnpm|cargo|go |rustc|git (add|commit|push|pull|merge|rebase|reset|checkout|switch|restore|clean|stash|tag|clone|init|rm|mv|apply|am|worktree|read-tree|update-index|write-tree|checkout-index)|pkg (install|uninstall|upgrade|reinstall|update)|apt( |-)|apt-get|dpkg|yum|dnf|pacman|brew|pip|pip3|uv|conda|mysql|psql|sqlite3|redis-cli|mongosh|kill|pkill|killall|service|systemctl|halt|reboot|shutdown|sudo|doas|su|pkexec|chroot|bash|sh|dash|zsh|ksh|eval|source|exec|screen|tmux|ssh|scp|sftp|rsync|telnet|nc|ncat|ftp|lftp|rsh|sshpass|socat|crontab|at |iptables|nft|ufw|docker|podman|kubectl|helm)[[:space:]]' && return 0
 	return 1
 }
 
@@ -898,7 +906,7 @@ agent_exec_loading() {
 	local delay=0.08
 	local tmpfile
 	local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
-	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}"
 	tmpfile="$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null)" || tmpfile="$(mktemp 2>/dev/null)"
 
 	local stty_saved=""

package/karnel/utils/log.sh

@@ -430,7 +430,7 @@ loading() {
 	local delay=0.08
 	local tmpfile
 	local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
-	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+	mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}"
 	tmpfile="$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null)" || tmpfile="$(mktemp 2>/dev/null)"
 	local cmd_pid=""
 

package/karnel/utils/tools.sh

@@ -59,7 +59,7 @@ _run_tool_lifecycle_action() {
     fi
     "$uninstall_handler"
     rc=$?
-    (( rc == 0 )) || return "$rc"
+    (( rc == 0 || rc == 2 )) || return "$rc"
     "$install_handler"
     rc=$?
     if (( rc == 0 && protected )); then

package/karnel/utils/version.sh

@@ -52,7 +52,7 @@ _spin_capture() {
   local frames=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
   local tmp
   local _ktmpdir="${KARNEL_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/karnel}"
-  mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-/tmp}"
+  mkdir -p "$_ktmpdir" 2>/dev/null || _ktmpdir="${TMPDIR:-${KARNEL_CACHE:-$HOME/.cache/karnel}}"
   tmp=$(mktemp "$_ktmpdir/karnel.XXXXXX" 2>/dev/null) || tmp=$(mktemp 2>/dev/null)
   local spinner_fd
   if [ -c /dev/tty ] 2>/dev/null; then

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.17.9",
+  "version": "4.17.10",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"