karnel-termux 4.9.3 → 4.9.5

package/README.md

@@ -22,8 +22,8 @@
   <a href="https://termux.dev/">
     <img src="https://img.shields.io/badge/platform-Termux%20%7C%20Android-0078D4?style=for-the-badge" alt="Platform">
   </a>
-  <a href="https://kerneltermux.vercel.app">
-    <img src="https://img.shields.io/badge/Site-kerneltermux.vercel.app-0078D4?style=for-the-badge" alt="Website">
+  <a href="https://karneltermux.vercel.app">
+    <img src="https://img.shields.io/badge/Site-karneltermux.vercel.app-0078D4?style=for-the-badge" alt="Website">
   </a>
 </p>
 
@@ -298,7 +298,7 @@ Microphone -> termux-speech-to-text -> editor (edit) -> clipboard -> AI agent
 ### Requirements
 
 - Termux:API: `pkg install termux-api`
-- App Termux:API: https://kerneltermux.vercel.app/termux/api
+- App Termux:API: https://karneltermux.vercel.app/termux/api
 - Editor: `karnel install editor`
 
 ---
@@ -373,7 +373,7 @@ karnel open db                        # Open DB module docs
 karnel open ai --opencode             # Open OpenCode docs on site
 ```
 
-Documentation loads from https://kerneltermux.vercel.app.
+Documentation loads from https://karneltermux.vercel.app.
 
 ---
 
@@ -384,7 +384,7 @@ Documentation loads from https://kerneltermux.vercel.app.
 - [Doctor reference](docs/doctor/README.md)
 - [Architecture](docs/ARCHITECTURE.md)
 - [Documentation changelog](docs/CHANGELOG.md)
-- [Official website](https://kerneltermux.vercel.app)
+- [Official website](https://karneltermux.vercel.app)
 
 ---
 
@@ -492,7 +492,7 @@ MIT © Israel Marques
 ---
 
 <p align="center">
-  <a href="https://kerneltermux.vercel.app">
+  <a href="https://karneltermux.vercel.app">
     <img src="https://img.shields.io/badge/Full%20Documentation-0078D4?style=for-the-badge" alt="Documentation">
   </a>
 </p>

package/karnel/cli/commands/brain.sh

@@ -150,7 +150,11 @@ _brain_pick_file() {
 _brain_editor() {
 	local title="$1"
 
-	if ! command -v ${EDITOR:-nano} &>/dev/null; then
+	local editor_bin
+	editor_bin="${EDITOR:-nano}"
+	editor_bin="${editor_bin%% *}"
+
+	if ! command -v "$editor_bin" &>/dev/null; then
 		log_error "${EDITOR:-nano} not found"
 		list_item "Install it: ${D_CYAN}karnel install editor${D_NC}"
 		return 1
@@ -1082,7 +1086,10 @@ brain_edit() {
 	fi
 
 	local editor="${EDITOR:-}"
-	if command -v ${EDITOR:-nano} &>/dev/null; then
+	local editor_bin
+	editor_bin="${EDITOR:-nano}"
+	editor_bin="${editor_bin%% *}"
+	if command -v "$editor_bin" &>/dev/null; then
 		editor="${EDITOR:-nano}"
 	elif [[ -z "$editor" ]] || ! command -v "$editor" &>/dev/null; then
 		for e in vim nano vi; do

package/karnel/cli/commands/list.sh

@@ -188,6 +188,7 @@ _list_ai() {
   table_row "omniRoute" "--omni-route" "omni-route" "$(_check_cmd "omni-route")"
   table_row "Context7 Docs" "--ctx7" "ctx7" "$(_check_cmd "ctx7")"
   table_row "OpenSpec SDD" "--openspec" "openspec" "$(_check_cmd "openspec")"
+  table_row "Qoder" "--qoder" "qodercli" "$(_check_cmd "qodercli")"
   table_row "Copilot-Termux" "--copilot-termux" "copilot" "$(_check_cmd "copilot")"
   table_end
 

package/karnel/cli/commands/open.sh

@@ -3,7 +3,7 @@
 import "@/utils/log"
 import "@/utils/colors"
 
-OPEN_BASE_URL="https://kerneltermux.vercel.app"
+OPEN_BASE_URL="https://karneltermux.vercel.app"
 
 open_main() {
 	if [[ $# -eq 0 ]]; then

package/karnel/cli/commands/show.sh

@@ -78,7 +78,13 @@ show_main() {
     return
   fi
 
-  local readme_path="$KARNEL_PATH/tools/$module/$tool/README.md"
+  local readme_path
+  readme_path="$(realpath "$KARNEL_PATH/tools/$module/$tool/README.md" 2>/dev/null)"
+
+  if [[ -z "$readme_path" || "$readme_path" != "$KARNEL_PATH/tools/"* ]]; then
+    log_error "No documentation found for $module/$tool"
+    return 1
+  fi
 
   if [[ ! -f "$readme_path" ]]; then
     log_error "No documentation found for $module/$tool"

package/karnel/cli/commands/voice.sh

@@ -47,7 +47,7 @@ voice_help() {
   echo
   list_item "Termux:API package: ${D_CYAN}pkg install termux-api${NC}"
   list_item "${EDITOR:-nano} editor: ${D_CYAN}karnel install editor${NC}"
-  list_item "Termux:API app: ${D_CYAN}https://kerneltermux.vercel.app/termux/api${NC}"
+  list_item "Termux:API app: ${D_CYAN}https://karneltermux.vercel.app/termux/api${NC}"
   echo
 }
 
@@ -94,7 +94,7 @@ voice_main() {
     else
       log_error "Termux:API is not installed"
       list_item "Install the package: ${D_CYAN}pkg install termux-api${NC}"
-      list_item "Install the app: https://kerneltermux.vercel.app/termux/api"
+      list_item "Install the app: https://karneltermux.vercel.app/termux/api"
       separator
       return 1
     fi

package/karnel/modules/voice.sh

@@ -35,7 +35,7 @@ install_voice() {
   list_item "Termux:API (speech-to-text, clipboard)"
   list_item "Termux:API app (Android APK)"
   list_item "Voice CLI: ${D_CYAN}karnel voice [agent]${NC}"
-  list_item "Install Termux:API app from: ${D_CYAN}https://kerneltermux.vercel.app/termux/api${NC}"
+  list_item "Install Termux:API app from: ${D_CYAN}https://karneltermux.vercel.app/termux/api${NC}"
   echo
 }
 

package/karnel/tools/ai/antigravity-cli/install.sh

@@ -36,7 +36,7 @@ _antigravity_cli_dependencies_impl() {
   fi
 
   declare -A DEPS=(
-    ["clang"]="clang"
+    ["clang"]="cc"
     ["python"]="python"
     ["jq"]="jq"
     ["curl"]="curl"
@@ -191,7 +191,7 @@ _antigravity_compile_helper_impl() {
     return 1
   fi
 
-  if ! clang -O2 -o "$PREFIX/bin/agy" "$HELPER_SRC" &>>"$LOG_FILE"; then
+  if ! cc -O2 -o "$PREFIX/bin/agy" "$HELPER_SRC" &>>"$LOG_FILE"; then
     log_error "Failed to compile agy helper"
     return 1
   fi

package/karnel/tools/ai/claude-code/install.sh

@@ -52,7 +52,7 @@ _claude_install_deps_native_impl() {
   fi
 
   declare -A DEPS=(
-    ["clang"]="clang"
+    ["clang"]="cc"
     ["curl"]="curl"
     ["tar"]="tar"
   )
@@ -121,7 +121,7 @@ _compile_claude_helper_impl() {
     return 1
   fi
 
-  if ! clang -O2 -o "$PREFIX/bin/claude" "$HELPER_SRC" &>>"$LOG_FILE"; then
+  if ! cc -O2 -o "$PREFIX/bin/claude" "$HELPER_SRC" &>>"$LOG_FILE"; then
     log_error "Failed to compile claude helper"
     return 1
   fi

package/karnel/tools/ai/codegraph/install.sh

@@ -15,7 +15,7 @@ _codegraph_dependencies_impl() {
 		["sqlite"]="sqlite"
 		["git"]="git"
 		["python"]="python"
-		["clang"]="clang"
+		["clang"]="cc"
 		["make"]="make"
 		["curl"]="curl"
 	)

package/karnel/tools/ai/engram/install.sh

@@ -108,15 +108,19 @@ update_engram() {
 }
 
 _update_engram_impl() {
-  export GOPATH="$HOME/.local/go"
-  export GOCACHE="$HOME/.cache/go"
-  export GOMODCACHE="$GOPATH/pkg/mod"
-
-  if ! git -C "$KARNEL_DATA/engram" pull &>>"$LOG_FILE" && go build -C "$KARNEL_DATA/engram/cmd/engram" -o "$PREFIX/bin/engram" &>>"$LOG_FILE"; then
-    log_error "Failed to update Engram"
-    return 1
-  fi
-  return 0
+	export GOPATH="$HOME/.local/go"
+	export GOCACHE="$HOME/.cache/go"
+	export GOMODCACHE="$GOPATH/pkg/mod"
+
+	if ! git -C "$KARNEL_DATA/engram" pull &>>"$LOG_FILE"; then
+		log_error "Failed to pull engram repository"
+		return 1
+	fi
+	if ! go build -C "$KARNEL_DATA/engram/cmd/engram" -o "$PREFIX/bin/engram" &>>"$LOG_FILE"; then
+		log_error "Failed to build Engram"
+		return 1
+	fi
+	return 0
 }
 
 reinstall_engram() {

package/karnel/tools/ai/freebuff/install.sh

@@ -55,7 +55,7 @@ _freebuff_install_deps_native_impl() {
     ["git"]="git"
     ["curl"]="curl"
     ["tar"]="tar"
-    ["clang"]="clang"
+    ["clang"]="cc"
   )
 
   local pkg_name bin_name
@@ -121,7 +121,7 @@ _compile_freebuff_helper_impl() {
     return 1
   fi
 
-  if ! clang -O2 -o "$PREFIX/bin/freebuff" "$HELPER_SRC" &>>"$LOG_FILE"; then
+  if ! cc -O2 -o "$PREFIX/bin/freebuff" "$HELPER_SRC" &>>"$LOG_FILE"; then
     log_error "Failed to compile freebuff helper"
     return 1
   fi

package/karnel/tools/ai/gentle-ai/install.sh

@@ -146,7 +146,7 @@ _compile() {
 }
 
 _compile_impl() {
-  if ! command -v gcc &>/dev/null && ! command -v clang &>/dev/null; then
+  if ! command -v gcc &>/dev/null && ! command -v cc &>/dev/null; then
     export CGO_ENABLED=0
   fi
 

package/karnel/tools/ai/hermes-agent/install.sh

@@ -31,7 +31,10 @@ _install_hermes_agent_impl() {
   if [ -d "$HERMES_DIR/.git" ]; then
     cd "$HERMES_DIR" && git pull
   else
-    git clone https://github.com/NousResearch/hermes-agent.git "$HERMES_DIR"
+    git clone https://github.com/NousResearch/hermes-agent.git "$HERMES_DIR" || {
+      log_error "Failed to clone hermes-agent repository"
+      return 1
+    }
   fi
 
   cd "$HERMES_DIR"

package/karnel/tools/ai/kilocode-cli/install.sh

@@ -35,7 +35,7 @@ _install_kilocode_deps_impl() {
     ["git"]="git"
     ["ripgrep"]="rg"
     ["python"]="python"
-    ["clang"]="clang"
+    ["clang"]="cc"
     ["jq"]="jq"
     ["nodejs-lts"]="node"
     ["curl"]="curl"
@@ -105,7 +105,7 @@ _compile_kilocode_helper_impl() {
     return 1
   fi
 
-  if ! clang -O2 -o "$PREFIX/bin/kilocode" "$HELPER_SRC" &>>"$LOG_FILE"; then
+  if ! cc -O2 -o "$PREFIX/bin/kilocode" "$HELPER_SRC" &>>"$LOG_FILE"; then
     log_error "Failed to compile kilocode helper"
     return 1
   fi

package/karnel/tools/ai/kiro/install.sh

@@ -14,12 +14,25 @@ install_kiro() {
 
   log_info "Installing Kiro CLI..."
 
+  # Ensure python3 is available (needed for manifest parsing)
+  if ! command -v python3 &>/dev/null; then
+    if ! yes | pkg install python &>>"$LOG_FILE"; then
+      log_error "Failed to install python3 (needed for kiro manifest parsing)"
+      return 1
+    fi
+  fi
+
   # Try the official installer first
   log_info "Running official Kiro installer..."
-  if echo "y" | curl -fsSL https://cli.kiro.dev/install 2>/dev/null | bash 2>>"$LOG_FILE"; then
-    if command -v kiro &>/dev/null || command -v kiro-cli &>/dev/null; then
-      log_success "Kiro installed successfully"
-      return 0
+  local install_script
+  install_script=$(curl -fsSL https://cli.kiro.dev/install 2>/dev/null)
+  if [[ -n "$install_script" ]]; then
+    if echo "y" | bash -s -- <<<"$install_script" 2>>"$LOG_FILE"; then
+      hash -r
+      if command -v kiro &>/dev/null || command -v kiro-cli &>/dev/null; then
+        log_success "Kiro installed successfully"
+        return 0
+      fi
     fi
   fi
 
@@ -85,16 +98,28 @@ for p in d['packages']:
         # Create symlink for convenience
         ln -sf "$PREFIX/bin/kiro-cli" "$PREFIX/bin/kiro"
         rm -rf "$tmpdir"
+        hash -r
         if command -v kiro-cli &>/dev/null || command -v kiro &>/dev/null; then
           log_success "Kiro installed from direct download"
           return 0
         fi
         # Binary exists but can't execute (missing glibc)
         if [[ -f "$PREFIX/bin/kiro-cli" ]]; then
-          log_warn "Kiro binary installed but requires glibc to run"
-          log_info "Install glibc: ${D_CYAN}pkg install glibc-repo glibc${NC}"
-          log_info "Or use proot: ${D_CYAN}proot-distro install ubuntu${NC}"
-          return 0
+          log_warn "Kiro binary needs glibc — installing..."
+          if [[ ! -f $PREFIX/etc/apt/sources.list.d/glibc.list ]]; then
+            yes | pkg install glibc-repo &>>"$LOG_FILE"
+          fi
+          if [[ ! -f $PREFIX/glibc/lib/libc.so.6 ]]; then
+            yes | pkg install glibc &>>"$LOG_FILE"
+          fi
+          if command -v kiro-cli &>/dev/null || command -v kiro &>/dev/null; then
+            log_success "Kiro installed successfully after glibc install"
+            return 0
+          else
+            log_warn "Kiro binary installed but still cannot execute"
+            log_info "Try: ${D_CYAN}proot-distro install ubuntu${NC}"
+            return 0
+          fi
         fi
       fi
     fi

package/karnel/tools/ai/mimocode/install.sh

@@ -33,7 +33,7 @@ _mimocode_install_deps_impl() {
   fi
 
   declare -A DEPS=(
-    ["clang"]="clang"
+    ["clang"]="cc"
     ["curl"]="curl"
     ["tar"]="tar"
   )
@@ -102,7 +102,7 @@ _compile_mimocode_helper_impl() {
     return 1
   fi
 
-  if ! clang -O2 -o "$PREFIX/bin/mimo" "$HELPER_SRC" &>>"$LOG_FILE"; then
+  if ! cc -O2 -o "$PREFIX/bin/mimo" "$HELPER_SRC" &>>"$LOG_FILE"; then
     log_error "Failed to compile mimocode helper"
     return 1
   fi

package/karnel/tools/ai/mistral-vibe/install.sh

@@ -12,7 +12,7 @@ _mistral_vibe_dependencies() {
 _mistral_vibe_dependencies_impl() {
   declare -A DEPS=(
     ["python"]="python"
-    ["clang"]="clang"
+    ["clang"]="cc"
     ["make"]="make"
     ["rust"]="rust"
     ["libffi"]=""

package/karnel/tools/ai/omni-route/install.sh

@@ -42,7 +42,7 @@ _omni_route_apply_platform_fixes() {
   log_info "Termux/Android detected — applying native build fixes for omniRoute..."
 
   local ng="/data/data/com.termux/files/usr/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js"
-  if [ -x "$ng" ] && command -v clang >/dev/null 2>&1; then
+  if [ -x "$ng" ] && command -v cc >/dev/null 2>&1; then
     for mod in better-sqlite3 sqlite-vec; do
       local moddir="$pkg_root/node_modules/$mod"
       [ -d "$moddir" ] || continue

package/karnel/tools/ai/opencode/install.sh

@@ -55,7 +55,7 @@ _opencode_install_deps_native_impl() {
     ["git"]="git"
     ["ripgrep"]="rg"
     ["python"]="python"
-    ["clang"]="clang"
+    ["clang"]="cc"
     ["jq"]="jq"
     ["nodejs-lts"]="node"
     ["curl"]="curl"
@@ -125,7 +125,7 @@ _compile_opencode_helper_impl() {
     return 1
   fi
 
-  if ! clang -O2 -o "$PREFIX/bin/opencode" "$HELPER_SRC" &>>"$LOG_FILE"; then
+  if ! cc -O2 -o "$PREFIX/bin/opencode" "$HELPER_SRC" &>>"$LOG_FILE"; then
     log_error "Failed to compile opencode helper"
     return 1
   fi

package/karnel/tools/ai/qoder/install.sh

@@ -65,7 +65,7 @@ _qoder_install_deps_native_impl() {
   declare -A DEPS=(
     ["git"]="git"
     ["ripgrep"]="rg"
-    ["clang"]="clang"
+    ["clang"]="cc"
     ["jq"]="jq"
     ["nodejs-lts"]="node"
     ["curl"]="curl"
@@ -142,7 +142,7 @@ _compile_qoder_helper_impl() {
     return 1
   fi
 
-  if ! clang -O2 -o "$PREFIX/bin/qodercli" "$HELPER_SRC" &>>"$LOG_FILE"; then
+  if ! cc -O2 -o "$PREFIX/bin/qodercli" "$HELPER_SRC" &>>"$LOG_FILE"; then
     log_error "Failed to compile qoder helper"
     return 1
   fi

package/karnel/tools/auto/n8n/install.sh

@@ -13,7 +13,7 @@ _n8n_dependencies() {
     ["build-essential"]=""
     ["binutils"]=""
     ["make"]="make"
-    ["clang"]="clang"
+    ["clang"]="cc"
   )
 
   local pkg_name bin_name

package/karnel/tools/lang/bun/src/bun-shim.c

@@ -240,14 +240,15 @@ int access(const char *p, int mode) {
 ssize_t readlinkat(int dirfd, const char *path, char *buf, size_t bufsiz) {
     if (path && streq(path, "/proc/self/exe")) {
         int len = slen(wrapper_path);
-        if (len < (int)bufsiz) {
+        int to_copy = len < (int)bufsiz ? len : (int)bufsiz - 1;
+        if (to_copy > 0) {
             char *d = buf;
             const char *s = wrapper_path;
-            while (*s)
+            for (int i = 0; i < to_copy; i++)
                 *d++ = *s++;
             *d = '\0';
         }
-        return len;
+        return to_copy > 0 ? to_copy : 0;
     }
     return (ssize_t)SREADLINKAT(dirfd, path, buf, bufsiz);
 }
@@ -270,9 +271,14 @@ ssize_t readlinkat(int dirfd, const char *path, char *buf, size_t bufsiz) {
  * bionic binaries. We use --library-path/--preload for glibc binaries instead.
  * Returns pointer to static buffer. */
 static char **strip_glibc_env(char *const envp[]) {
-    static char *clean[256];
+    int count = 0;
+    while (envp[count])
+        count++;
+    static char *clean[4096];
+    if (count > 4095)
+        count = 4095;
     int j = 0;
-    for (int i = 0; envp[i] && j < 255; i++) {
+    for (int i = 0; envp[i] && j < count; i++) {
         const char *e = envp[i];
         /* Skip LD_LIBRARY_PATH=* */
         if (e[0] == 'L' && e[1] == 'D' && e[2] == '_' && e[3] == 'L' &&
@@ -301,7 +307,9 @@ int execve(const char *pathname, char *const argv[], char *const envp[]) {
         while (argv[argc])
             argc++;
 
-        char *new_argv[64];
+        if (argc + 7 > 1024)
+            goto fallback;
+        char *new_argv[1024];
         int i = 0;
         new_argv[i++] = (char *)pathname;
         new_argv[i++] = "--library-path";
@@ -331,7 +339,9 @@ int execve(const char *pathname, char *const argv[], char *const envp[]) {
             while (argv[argc])
                 argc++;
 
-            char *new_argv[64];
+            if (argc + 8 > 1024)
+                goto fallback;
+            char *new_argv[1024];
             int i = 0;
             new_argv[i++] = (char *)ld_path;
             new_argv[i++] = "--library-path";
@@ -349,4 +359,15 @@ int execve(const char *pathname, char *const argv[], char *const envp[]) {
 
     errno = err;
     return -1;
+
+fallback:
+    /* If argv was too large for our static buffer, try the original execve */
+    r = SEXECVE(pathname, argv, clean_env);
+    if (r >= 0)
+        return (int)r;
+    r = SEXECVE(pathname, argv, envp);
+    if (r >= 0)
+        return (int)r;
+    errno = (int)(-r);
+    return -1;
 }

package/karnel/tools/voice/install.sh

@@ -5,6 +5,6 @@ import "@/utils/log"
 _install_voice_tool() {
   log_info "All voice dependencies are managed by Termux:API"
   log_info "To use voice, install the Termux:API app from:"
-  log_info "  https://kerneltermux.vercel.app/termux/api"
+  log_info "  https://karneltermux.vercel.app/termux/api"
   return 0
 }

package/karnel/utils/bootstrap.sh

@@ -9,17 +9,24 @@ declare -A __KARNEL_IMPORTED
 
 import() {
 	local base="${KARNEL_PATH}"
-	local path="${1//@/$base}.sh"
+	local resolved="${1//@/$base}.sh"
+	local canonical
+	canonical="$(realpath "$resolved" 2>/dev/null || echo "$resolved")"
 
-	if [[ -n "${__KARNEL_IMPORTED[$path]}" ]]; then
+	if [[ "$canonical" != "$base"/* ]]; then
+		echo "karnel: import error: path traversal denied: $1" >&2
+		return 1
+	fi
+
+	if [[ -n "${__KARNEL_IMPORTED[$canonical]}" ]]; then
 		return
 	fi
 
-	if [[ ! -f "$path" ]]; then
-		echo "karnel: import error: $path not found" >&2
+	if [[ ! -f "$canonical" ]]; then
+		echo "karnel: import error: $canonical not found" >&2
 		return 1
 	fi
 
-	__KARNEL_IMPORTED[$path]=1
-	source "$path"
+	__KARNEL_IMPORTED[$canonical]=1
+	source "$canonical"
 }

package/karnel/utils/env.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-KARNEL_VERSION="4.9.3"
+KARNEL_VERSION="4.9.5"
 
 # -------------------------
 # Directorios del usuario

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.9.3",
+  "version": "4.9.5",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"
@@ -40,7 +40,7 @@
   "bugs": {
     "url": "https://github.com/israelmarques1024-dotcom/karnel-termux/issues"
   },
-  "homepage": "https://kerneltermux.vercel.app",
+  "homepage": "https://karneltermux.vercel.app",
   "os": [
     "android"
   ]