karnel-termux 4.9.5 → 4.10.0

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.9.0-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.9.6-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -44,6 +44,8 @@ Created by **Israel Marques**.
 - **Professional editor** — code-server (VS Code in browser)
 - **Second brain** — Memory system with AI search and idea graph
 - **Voice commands** — Speak to your AI agents
+- **Plugin system** — Install community plugins from GitHub: `karnel plugin install <user/repo>`
+- **Security tools** — Nmap, Hydra, SQLMap, Metasploit and more: `karnel install security`
 
 > [!IMPORTANT]
 > Designed exclusively for **Termux on Android**. Does not work on other platforms.
@@ -125,6 +127,34 @@ karnel
 | `utils` | fconv, notes, treex, passman, applaunch, qrcode, zork and more | `karnel install utils` |
 | `osint` | Robin v2.8, Tor, Streamlit, and LLM providers | `karnel install osint` |
 | `voice` | Speech-to-agent through Termux:API | `karnel install voice` |
+| `plugin` | Plugin manager — install extensions from GitHub | `karnel install plugin` |
+| `security` | Nmap, Hydra, SQLMap, Metasploit, Gobuster and more | `karnel install security` |
+
+---
+
+## Plugin System
+
+Extend Karnel with community plugins from GitHub:
+
+```bash
+karnel plugin install <user/repo>   # Install a plugin
+karnel plugin list                  # List installed plugins
+karnel plugin remove <name>         # Uninstall a plugin
+karnel plugin create <name>         # Scaffold a new plugin
+```
+
+Each plugin needs a `karnel-plugin.json` manifest at the root of its repo. Commands go in a `commands/` directory — Karnel discovers them automatically at startup.
+
+## Security Tools
+
+Install security auditing tools:
+
+```bash
+karnel install security                           # Install all
+karnel install security --nmap --hydra --sqlmap    # Install specific ones
+```
+
+Includes: Nmap, Hydra, Nikto, SQLMap, Gobuster, Dirb, WPScan, John the Ripper, Aircrack-ng, Metasploit.
 
 ---
 

package/karnel/cli/commands/install.sh

@@ -152,6 +152,14 @@ _install_full_module() {
     import "@/modules/utils"
     install_utils
     ;;
+  plugin)
+    import "@/modules/plugin"
+    install_plugin_module
+    ;;
+  security)
+    import "@/modules/security"
+    install_security
+    ;;
   *)
     log_warn "Unknown install target: $target"
     echo "Run 'karnel install' to see available targets"
@@ -806,6 +814,9 @@ _install_specific_tools() {
   utils)
     _batch_tool_action "utils" "install" "${tools[@]}"
     ;;
+  security)
+    _batch_tool_action "security" "install" "${tools[@]}"
+    ;;
   *)
     log_warn "Unknown install target: $module"
     echo "Run 'karnel install' to see available targets"

package/karnel/cli/commands/list.sh

@@ -76,6 +76,14 @@ list_main() {
     utils)
       _list_utils
       ;;
+    plugin)
+      import "@/tools/plugins/install"
+      echo "Installed Plugins:"
+      _list_plugins
+      ;;
+    security)
+      _list_security
+      ;;
     voice)
       _list_voice
       ;;
@@ -523,6 +531,30 @@ _grep_config() {
   fi
 }
 
+# ===== LIST SECURITY =====
+_list_security() {
+  echo
+  box "Security Tools"
+  echo
+  log_info "Available security tools:"
+  echo
+  table_start "Tool" "Install Flag" "Command" "Status"
+  table_row "Nmap" "--nmap" "nmap" "$(_check_cmd "nmap")"
+  table_row "Hydra" "--hydra" "hydra" "$(_check_cmd "hydra")"
+  table_row "Nikto" "--nikto" "nikto" "$(_check_cmd "nikto")"
+  table_row "SQLMap" "--sqlmap" "sqlmap" "$(_check_cmd "sqlmap")"
+  table_row "Gobuster" "--gobuster" "gobuster" "$(_check_cmd "gobuster")"
+  table_row "Dirb" "--dirb" "dirb" "$(_check_cmd "dirb")"
+  table_row "WPScan" "--wpscan" "wpscan" "$(_check_cmd "wpscan")"
+  table_row "John the Ripper" "--john" "john" "$(_check_cmd "john")"
+  table_row "Aircrack-ng" "--aircrack-ng" "aircrack-ng" "$(_check_cmd "aircrack-ng")"
+  table_row "Metasploit" "--metasploit" "msfconsole" "$(_check_cmd "msfconsole")"
+  table_end
+  echo
+  log_info "Install all: ${D_CYAN}karnel install security${NC}"
+  echo
+}
+
 # ===== LIST VOICE =====
 _list_voice() {
   echo

package/karnel/cli/commands/open.sh

@@ -63,6 +63,12 @@ open_main() {
   voice)
     url="$OPEN_BASE_URL/karnel/voice"
     ;;
+  plugin)
+    url="$OPEN_BASE_URL/karnel/plugin"
+    ;;
+  security)
+    url="$OPEN_BASE_URL/karnel/security"
+    ;;
   osint|robin)
     url="$OPEN_BASE_URL/karnel/osint"
     ;;

package/karnel/cli/commands/plugin.sh

@@ -0,0 +1,147 @@
+import "@/tools/plugins/install"
+
+plugin_main() {
+  if [[ $# -eq 0 ]]; then
+    plugin_help
+    return
+  fi
+
+  local subcmd="$1"
+  shift
+
+  case "$subcmd" in
+  install)
+    if [[ $# -lt 1 ]]; then
+      log_error "Usage: karnel plugin install <user/repo>"
+      return 1
+    fi
+    install_plugin "$1"
+    ;;
+  remove|uninstall)
+    if [[ $# -lt 1 ]]; then
+      log_error "Usage: karnel plugin remove <name>"
+      return 1
+    fi
+    uninstall_plugin "$1"
+    ;;
+  update)
+    if [[ $# -lt 1 ]]; then
+      log_error "Usage: karnel plugin update <name>"
+      return 1
+    fi
+    update_plugin "$1"
+    ;;
+  list|ls)
+    _list_plugins
+    ;;
+  search)
+    _search_plugins
+    ;;
+  create|scaffold)
+    if [[ $# -lt 1 ]]; then
+      log_error "Usage: karnel plugin create <name>"
+      return 1
+    fi
+    _scaffold_plugin "$1"
+    ;;
+  *)
+    log_error "Unknown plugin subcommand: $subcmd"
+    plugin_help
+    return 1
+    ;;
+  esac
+}
+
+plugin_help() {
+  echo
+  box "Plugin Manager"
+  echo
+  log_info "Usage: karnel plugin <subcommand> [options]"
+  echo
+  separator_section "Subcommands"
+  echo
+  printf "    ${D_CYAN}%-20s${NC} %s\n" "install <user/repo>" "Install a plugin from GitHub"
+  printf "    ${D_CYAN}%-20s${NC} %s\n" "remove <name>" "Uninstall a plugin"
+  printf "    ${D_CYAN}%-20s${NC} %s\n" "update <name>" "Update a plugin"
+  printf "    ${D_CYAN}%-20s${NC} %s\n" "list" "List installed plugins"
+  printf "    ${D_CYAN}%-20s${NC} %s\n" "search" "Search available plugins in the registry"
+  printf "    ${D_CYAN}%-20s${NC} %s\n" "create <name>" "Scaffold a new plugin"
+  echo
+  echo "Plugins are installed from GitHub repos."
+  echo "Each plugin must have a karnel-plugin.json manifest at root."
+  echo
+  separator_section "Examples"
+  echo
+  echo "  karnel plugin install username/my-karnel-plugin"
+  echo "  karnel plugin list"
+  echo "  karnel plugin remove my-karnel-plugin"
+  echo "  karnel plugin search"
+  echo "  karnel plugin create my-plugin"
+}
+
+_search_plugins() {
+  local registry_url="https://raw.githubusercontent.com/israelmarques1024-dotcom/karnel-plugins/main/registry.json"
+  log_info "Fetching plugin registry..."
+  local data
+  data="$(curl -sfL "$registry_url" 2>/dev/null)" || {
+    log_error "Failed to fetch registry. Check internet connection."
+    return 1
+  }
+  local count
+  count="$(echo "$data" | sed -n 's/.*"plugins": \[\(.*\)\]/\1/p' | grep -o '"name"' | wc -l)"
+  if [[ "$count" -eq 0 ]]; then
+    echo "  No plugins available in the registry yet."
+    echo "  Be the first: https://github.com/israelmarques1024-dotcom/karnel-plugins"
+    return 0
+  fi
+  echo
+  box "Available Plugins ($count)"
+  echo
+  local names
+  names="$(echo "$data" | sed 's/.*"plugins":\[//;s/\]$//' | tr '}' '\n' | while IFS= read -r entry; do
+    [[ -z "$entry" ]] && continue
+    local n d r c
+    n="$(echo "$entry" | sed -n 's/.*"name":"\([^"]*\)".*/\1/p')"
+    d="$(echo "$entry" | sed -n 's/.*"description":"\([^"]*\)".*/\1/p')"
+    r="$(echo "$entry" | sed -n 's/.*"repo":"\([^"]*\)".*/\1/p')"
+    printf "  ${D_GREEN}%-20s${NC} %s\n" "$n" "$d"
+    printf "  ${D_CYAN}    install:${NC} karnel plugin install %s\n" "$r"
+  done)"
+  echo "$names"
+  echo
+}
+
+_scaffold_plugin() {
+  local name="$1"
+  local dir="$(_plugin_dir "$name")"
+
+  if [[ -d "$dir" ]]; then
+    log_error "Plugin '$name' already exists"
+    return 1
+  fi
+
+  mkdir -p "$dir/commands" "$dir/tools"
+
+  cat > "$dir/karnel-plugin.json" <<EOF
+{
+  "name": "$name",
+  "version": "1.0.0",
+  "description": "My Karnel plugin",
+  "commands": ["hello"],
+  "tools": []
+}
+EOF
+
+  cat > "$dir/commands/hello.sh" <<'EOF'
+hello_main() {
+  echo "Hello from plugin '$1'!"
+  echo "Args: $*"
+}
+EOF
+
+  chmod +x "$dir/commands/"*.sh
+  log_success "Plugin '$name' scaffolded at $dir"
+  echo "Edit $dir/karnel-plugin.json to configure"
+  echo "Add commands in $dir/commands/"
+  echo "Run: karnel hello"
+}

package/karnel/cli/commands/reinstall.sh

@@ -143,6 +143,14 @@ _reinstall_full_module() {
     import "@/modules/utils"
     reinstall_utils
     ;;
+  plugin)
+    import "@/modules/plugin"
+    reinstall_plugin_module
+    ;;
+  security)
+    import "@/modules/security"
+    reinstall_security
+    ;;
   *)
     log_warn "Unknown reinstall target: $target"
     echo "Run 'karnel reinstall' to see available targets"

package/karnel/cli/commands/uninstall.sh

@@ -137,6 +137,14 @@ _uninstall_full_module() {
     import "@/modules/utils"
     uninstall_utils
     ;;
+  plugin)
+    import "@/modules/plugin"
+    uninstall_plugin_module
+    ;;
+  security)
+    import "@/modules/security"
+    uninstall_security
+    ;;
   games)
     import "@/tools/games/all"
     uninstall_all_games

package/karnel/cli/commands/update.sh

@@ -143,6 +143,14 @@ _update_full_module() {
     import "@/modules/utils"
     update_utils
     ;;
+  plugin)
+    import "@/modules/plugin"
+    update_plugin_module
+    ;;
+  security)
+    import "@/modules/security"
+    update_security
+    ;;
   deploy)
     import "@/modules/deploy"
     update_deploy

package/karnel/cli/karnel.sh

@@ -36,16 +36,21 @@ karnel_main() {
 
   local command_file="$KARNEL_PATH/cli/commands/$cmd.sh"
 
-  # verificar si existe el comando
   if [[ -f "$command_file" ]]; then
     import "@/cli/commands/$cmd"
     "${cmd}_main" "$@"
-  else
-    log_error "Command not found: $cmd"
-    echo
-    karnel_help
-    return 1
+    return $?
   fi
+
+  import "@/tools/plugins/install"
+  if _plugin_dispatch "$cmd" "$@"; then
+    return $?
+  fi
+
+  log_error "Command not found: $cmd"
+  echo
+  karnel_help
+  return 1
 }
 
 karnel_help() {
@@ -72,6 +77,7 @@ karnel_help() {
   printf "    ${D_CYAN}%-12s${NC} %s\n" "list" "List available tools in a module"
   printf "    ${D_CYAN}%-12s${NC} %s\n" "open" "Open docs in browser for a module"
   printf "    ${D_CYAN}%-12s${NC} %s\n" "pg" "PostgreSQL database manager"
+  printf "    ${D_CYAN}%-12s${NC} %s\n" "plugin" "Plugin manager — install, list, remove"
   printf "    ${D_CYAN}%-12s${NC} %s\n" "reinstall" "Uninstall + install a module"
   printf "    ${D_CYAN}%-12s${NC} %s\n" "restore" "Restore Termux from a backup"
   printf "    ${D_CYAN}%-12s${NC} %s\n" "robin" "Dark Web OSINT tool (Tor + LLM)"
@@ -109,6 +115,8 @@ karnel_help() {
   printf "    ${D_GREEN}%-10s${NC} %s\n" "npm" "Node.js global npm packages"
   printf "    ${D_GREEN}%-10s${NC} %s\n" "osint" "OSINT Tools (Robin — Dark Web + LLM)"
   printf "    ${D_GREEN}%-10s${NC} %s\n" "network" "Network tools (Dark Web, DedSec Network)"
+  printf "    ${D_GREEN}%-10s${NC} %s\n" "plugin" "Plugin manager — install plugins from GitHub"
+  printf "    ${D_GREEN}%-10s${NC} %s\n" "security" "Nmap, Hydra, Metasploit, SQLMap, Gobuster, etc."
   printf "    ${D_GREEN}%-10s${NC} %s\n" "shell" "ZSH + Oh My Zsh + 10 plugins"
   printf "    ${D_GREEN}%-10s${NC} %s\n" "ui" "Font, Cursor, Extra-keys, Banner"
   printf "    ${D_GREEN}%-10s${NC} %s\n" "voice" "Speech-to-agent via microphone"

package/karnel/modules/plugin.sh

@@ -0,0 +1,34 @@
+install_plugin_module() {
+  separator
+  box "Plugin Manager"
+  separator
+
+  log_info "Plugin system is built-in. No additional installation needed."
+  echo
+  log_info "Installing example plugin..."
+  install_plugin "israelmarques1024-dotcom/karnel-termux" || true
+}
+
+uninstall_plugin_module() {
+  log_info "Plugin system is built-in. Nothing to uninstall."
+}
+
+update_plugin_module() {
+  log_info "Updating all plugins..."
+  mkdir -p "$PLUGINS_DIR"
+  for dir in "$PLUGINS_DIR"/*/; do
+    [[ -d "$dir" ]] || continue
+    local name; name="$(basename "$dir")"
+    update_plugin "$name"
+  done
+}
+
+reinstall_plugin_module() {
+  log_info "Reinstalling all plugins..."
+  mkdir -p "$PLUGINS_DIR"
+  for dir in "$PLUGINS_DIR"/*/; do
+    [[ -d "$dir" ]] || continue
+    local name; name="$(basename "$dir")"
+    reinstall_plugin "$name"
+  done
+}

package/karnel/modules/security.sh

@@ -0,0 +1,22 @@
+install_security() {
+  separator
+  box "Installing Security Tools"
+  separator
+  import "@/tools/security/all"
+  install_all_security
+}
+
+uninstall_security() {
+  import "@/tools/security/all"
+  uninstall_all_security
+}
+
+update_security() {
+  import "@/tools/security/all"
+  update_all_security
+}
+
+reinstall_security() {
+  import "@/tools/security/all"
+  reinstall_all_security
+}

package/karnel/tools/ai/opencode/install.sh

@@ -3,54 +3,18 @@
 import "@/utils/log"
 import "@/utils/version"
 import "@/utils/colors"
+import "@/utils/proot"
+import "@/utils/install"
 
 LOG_FILE="$KARNEL_CACHE/install_ai.log"
 OPENCODE_DATA_DIR="$HOME/.local/share/karnel-data/opencode"
 
-_opencode_detect_ubuntu_root() {
-  local root
-  root="$(find /data/data/com.termux -maxdepth 10 -type d \
-    -name "rootfs" -path "*/containers/ubuntu/*" 2>/dev/null | head -1)"
-
-  if [ -z "$root" ]; then
-    root="$(find /data/data/com.termux -maxdepth 10 -type d \
-      -name "ubuntu" -path "*/installed-rootfs/*" 2>/dev/null | head -1)"
-  fi
-
-  echo "$root"
-}
-
-_opencode_proot_ubuntu() {
-  proot-distro login \
-    --shared-tmp \
-    ubuntu \
-    -- "$@"
-}
-
-_get_latest_opencode_version() {
-  curl -fsSL https://api.github.com/repos/anomalyco/opencode/releases/latest |
-    grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/'
+_install_opencode_deps() {
+  loading "Installing glibc and dependencies" _install_opencode_deps_impl
 }
 
-_opencode_install_deps_native() {
-  loading "Installing glibc and dependencies" _opencode_install_deps_native_impl
-}
-
-_opencode_install_deps_native_impl() {
-  if [[ ! -f $PREFIX/etc/apt/sources.list.d/glibc.list ]]; then
-    if ! pkg install glibc-repo -y &>>"$LOG_FILE"; then
-      log_error "Failed to install glibc-repo"
-      return 1
-    fi
-  fi
-
-  if [[ ! -f $PREFIX/glibc/lib/libc.so.6 ]]; then
-    if ! pkg install glibc -y &>>"$LOG_FILE"; then
-      log_error "Failed to install glibc"
-      return 1
-    fi
-  fi
-
+_install_opencode_deps_impl() {
+  install_glibc || return 1
   declare -A DEPS=(
     ["git"]="git"
     ["ripgrep"]="rg"
@@ -61,18 +25,7 @@ _opencode_install_deps_native_impl() {
     ["curl"]="curl"
     ["tar"]="tar"
   )
-
-  local pkg_name bin_name
-  for pkg_name in "${!DEPS[@]}"; do
-    bin_name="${DEPS[$pkg_name]}"
-    if ! command -v "$bin_name" &>/dev/null; then
-      if ! pkg install "$pkg_name" -y &>>"$LOG_FILE"; then
-        log_error "Failed to install $pkg_name"
-        return 1
-      fi
-    fi
-  done
-
+  install_deps DEPS || return 1
   return 0
 }
 
@@ -82,34 +35,21 @@ _download_opencode_binary() {
 
 _download_opencode_binary_impl() {
   local latest_version
-  latest_version=$(_get_latest_opencode_version)
+  latest_version=$(github_latest_tag anomalyco/opencode)
   if [ -z "$latest_version" ]; then
     log_error "Failed to fetch latest OpenCode version"
     return 1
   fi
 
   mkdir -p "$OPENCODE_DATA_DIR"
-
-  local tarball="opencode-linux-arm64.tar.gz"
-  local download_url="https://github.com/anomalyco/opencode/releases/download/$latest_version/$tarball"
-
-  if ! curl -fsSL "$download_url" -o "$OPENCODE_DATA_DIR/$tarball" &>>"$LOG_FILE"; then
-    log_error "Failed to download OpenCode binary"
-    return 1
-  fi
-
-  if ! tar -zxf "$OPENCODE_DATA_DIR/$tarball" -C "$OPENCODE_DATA_DIR" &>>"$LOG_FILE"; then
-    log_error "Failed to extract OpenCode binary"
-    return 1
-  fi
-
-  rm -f "$OPENCODE_DATA_DIR/$tarball"
+  github_download_and_extract \
+    anomalyco/opencode "$latest_version" \
+    "opencode-linux-arm64.tar.gz" "$OPENCODE_DATA_DIR" || return 1
 
   if [ ! -f "$OPENCODE_DATA_DIR/opencode" ]; then
     log_error "OpenCode binary not found after extraction"
     return 1
   fi
-
   chmod +x "$OPENCODE_DATA_DIR/opencode"
   return 0
 }
@@ -119,23 +59,14 @@ _compile_opencode_helper() {
 }
 
 _compile_opencode_helper_impl() {
-  local HELPER_SRC="$KARNEL_PATH/tools/ai/opencode/helper/opencode_helper.c"
-  if [ ! -f "$HELPER_SRC" ]; then
-    log_error "Helper source not found at $HELPER_SRC"
-    return 1
-  fi
-
-  if ! cc -O2 -o "$PREFIX/bin/opencode" "$HELPER_SRC" &>>"$LOG_FILE"; then
-    log_error "Failed to compile opencode helper"
-    return 1
-  fi
-
-  chmod +x "$PREFIX/bin/opencode"
+  compile_helper \
+    "$KARNEL_PATH/tools/ai/opencode/helper/opencode_helper.c" \
+    "$PREFIX/bin/opencode" || return 1
   return 0
 }
 
 _install_opencode_native() {
-  _opencode_install_deps_native || return 1
+  _install_opencode_deps || return 1
   _download_opencode_binary || return 1
   _compile_opencode_helper || return 1
   log_success "OpenCode installed natively"
@@ -148,48 +79,35 @@ _install_opencode_proot() {
 
 _install_opencode_proot_impl() {
   mkdir -p "$(dirname "$LOG_FILE")"
+  proot_install_ubuntu ubuntu:24.04
 
-  if ! command -v proot-distro &>/dev/null; then
-    pkg install proot-distro -y &>>"$LOG_FILE"
-  fi
-
-  if [ ! -d "$(_opencode_detect_ubuntu_root)" ]; then
-    proot-distro install ubuntu:24.04 &>>"$LOG_FILE"
-  fi
-
-  _opencode_proot_ubuntu /bin/bash -c \
+  proot_ubuntu /bin/bash -c \
     'apt-get update && apt-get upgrade -y && apt-get install -y curl ca-certificates' \
     &>>"$LOG_FILE"
 
-  _opencode_proot_ubuntu /bin/bash -c '
-		export SHELL=/bin/bash
-		export TMPDIR=/tmp
-		export HOME=/root
-		curl -fsSL https://opencode.ai/install | bash -s -- --no-modify-path
-	' &>>"$LOG_FILE"
+  proot_ubuntu /bin/bash -c '
+    export SHELL=/bin/bash
+    export TMPDIR=/tmp
+    export HOME=/root
+    curl -fsSL https://opencode.ai/install | bash -s -- --no-modify-path
+  ' &>>"$LOG_FILE"
 
   local ubuntu_root
-  ubuntu_root="$(_opencode_detect_ubuntu_root)"
-
+  ubuntu_root="$(detect_ubuntu_root)"
   if [ -z "$ubuntu_root" ]; then
     log_error "Ubuntu rootfs not found"
     return 1
   fi
 
   local opencode_bin="$ubuntu_root/root/.opencode/bin/opencode"
-
   if [ ! -f "$opencode_bin" ]; then
     log_error "OpenCode binary not found after install"
     return 1
   fi
 
-  local wrapper_src="$KARNEL_PATH/tools/ai/opencode/bin/opencode"
-  if [ ! -f "$wrapper_src" ]; then
-    log_error "Wrapper template not found at $wrapper_src"
-    return 1
-  fi
-  sed "s|__UBUNTU_ROOTFS__|$ubuntu_root|g" "$wrapper_src" >"$PREFIX/bin/opencode"
-  chmod +x "$PREFIX/bin/opencode"
+  generate_wrapper \
+    "$KARNEL_PATH/tools/ai/opencode/bin/opencode" \
+    "$ubuntu_root" "$PREFIX/bin/opencode" || return 1
 
   if ! grep -q '.opencode/bin' "$ubuntu_root/root/.bashrc" 2>/dev/null; then
     printf '\n# opencode\nexport PATH=/root/.opencode/bin:$PATH\n' >>"$ubuntu_root/root/.bashrc"
@@ -205,18 +123,13 @@ install_opencode() {
   fi
 
   log_info "Select installation method for OpenCode:"
-
   read_select "Installation method" SELECTED_METHOD \
     "Native (recommended) - Compile with glibc support" \
     "Proot-distro (alternative) - Ubuntu container"
 
   case "$SELECTED_METHOD" in
-  *Native*)
-    _install_opencode_native
-    ;;
-  *Proot-distro*)
-    _install_opencode_proot
-    ;;
+  *Native*) _install_opencode_native ;;
+  *Proot-distro*) _install_opencode_proot ;;
   esac
 }
 
@@ -236,13 +149,11 @@ uninstall_opencode() {
     return 0
   fi
 
-  _opencode_proot_ubuntu /bin/bash -c 'rm -rf /root/.opencode' &>>"$LOG_FILE"
-
-  local ubuntu_bashrc
-  ubuntu_bashrc="$(_opencode_detect_ubuntu_root)/root/.bashrc"
-
-  if [ -f "$ubuntu_bashrc" ]; then
-    sed -i '/# opencode/d; /export PATH=\/root\/.opencode\/bin/d' "$ubuntu_bashrc"
+  proot_ubuntu /bin/bash -c 'rm -rf /root/.opencode' &>>"$LOG_FILE"
+  local ubuntu_root
+  ubuntu_root="$(detect_ubuntu_root)/root/.bashrc"
+  if [ -f "$ubuntu_root" ]; then
+    sed -i '/# opencode/d; /export PATH=\/root\/.opencode\/bin/d' "$ubuntu_root"
   fi
 
   if rm -f "$PREFIX/bin/opencode" &>>"$LOG_FILE"; then
@@ -264,9 +175,8 @@ _do_update_opencode() {
     return $?
   fi
 
-  _opencode_proot_ubuntu /bin/bash -c 'rm -rf /root/.opencode' &>>"$LOG_FILE"
-
-  _opencode_proot_ubuntu /bin/bash -c '
+  proot_ubuntu /bin/bash -c 'rm -rf /root/.opencode' &>>"$LOG_FILE"
+  proot_ubuntu /bin/bash -c '
     export SHELL=/bin/bash
     export TMPDIR=/tmp
     export HOME=/root
@@ -274,14 +184,11 @@ _do_update_opencode() {
   ' &>>"$LOG_FILE"
 
   local ubuntu_root
-  ubuntu_root="$(_opencode_detect_ubuntu_root)"
-  local opencode_bin="$ubuntu_root/root/.opencode/bin/opencode"
-
-  if [ ! -f "$opencode_bin" ]; then
+  ubuntu_root="$(detect_ubuntu_root)"
+  if [ -z "$ubuntu_root" ] || [ ! -f "$ubuntu_root/root/.opencode/bin/opencode" ]; then
     log_error "OpenCode binary not found after update"
     return 1
   fi
-
   return 0
 }
 

package/karnel/tools/plugins/install.sh

@@ -0,0 +1,150 @@
+PLUGINS_DIR="${KARNEL_DATA}/plugins"
+
+_plugin_dir() {
+  echo "$PLUGINS_DIR/$1"
+}
+
+_plugin_manifest() {
+  echo "$(_plugin_dir "$1")/karnel-plugin.json"
+}
+
+_plugin_installed() {
+  [[ -f "$(_plugin_manifest "$1")" ]]
+}
+
+_plugin_name_from_repo() {
+  local repo="$1"
+  basename "$repo" | sed 's/\.git$//'
+}
+
+install_plugin() {
+  local repo="$1"
+  local name
+  name="$(_plugin_name_from_repo "$repo")"
+
+  if _plugin_installed "$name"; then
+    log_info "Plugin '$name' is already installed"
+    return 2
+  fi
+
+  mkdir -p "$PLUGINS_DIR"
+  log_info "Installing plugin '$name' from $repo..."
+
+  if ! git clone "https://github.com/$repo.git" "$(_plugin_dir "$name")" 2>/dev/null; then
+    log_error "Failed to clone $repo"
+    return 1
+  fi
+
+  if [[ ! -f "$(_plugin_manifest "$name")" ]]; then
+    log_warn "Plugin '$name' has no karnel-plugin.json manifest"
+    log_info "Creating default manifest..."
+    cat > "$(_plugin_manifest "$name")" <<MANIFEST
+{
+  "name": "$name",
+  "version": "1.0.0",
+  "description": "Plugin installed from $repo",
+  "commands": [],
+  "tools": []
+}
+MANIFEST
+  fi
+
+  chmod +x "$(_plugin_dir "$name")/commands/"*.sh 2>/dev/null || true
+
+  log_success "Plugin '$name' installed"
+  return 0
+}
+
+uninstall_plugin() {
+  local name="$1"
+
+  if ! _plugin_installed "$name"; then
+    log_info "Plugin '$name' is not installed"
+    return 2
+  fi
+
+  log_info "Removing plugin '$name'..."
+  rm -rf "$(_plugin_dir "$name")"
+  log_success "Plugin '$name' removed"
+  return 0
+}
+
+update_plugin() {
+  local name="$1"
+
+  if ! _plugin_installed "$name"; then
+    log_info "Plugin '$name' is not installed"
+    return 2
+  fi
+
+  log_info "Updating plugin '$name'..."
+  if ! git -C "$(_plugin_dir "$name")" pull 2>/dev/null; then
+    log_error "Failed to update '$name'"
+    return 1
+  fi
+
+  log_success "Plugin '$name' updated"
+  return 0
+}
+
+reinstall_plugin() {
+  local name="$1"
+  uninstall_plugin "$name"
+  local repo
+  repo="$(git -C "$(_plugin_dir "$name")" remote get-url origin 2>/dev/null || echo "")"
+  repo="${repo#https://github.com/}"
+  repo="${repo%.git}"
+  if [[ -n "$repo" ]]; then
+    install_plugin "$repo"
+  else
+    log_error "Cannot determine repository for '$name'"
+    return 1
+  fi
+}
+
+_list_plugins() {
+  mkdir -p "$PLUGINS_DIR"
+  local found=0
+  for dir in "$PLUGINS_DIR"/*/; do
+    [[ -d "$dir" ]] || continue
+    local name
+    name="$(basename "$dir")"
+    if [[ -f "$dir/karnel-plugin.json" ]]; then
+      local desc
+      desc="$(sed -n 's/.*"description": "\(.*\)",/\1/p' "$dir/karnel-plugin.json" 2>/dev/null || echo "No description")"
+      printf "  ${D_GREEN}%-20s${NC} %s\n" "$name" "$desc"
+      found=1
+    fi
+  done
+  [[ $found -eq 0 ]] && echo "  No plugins installed"
+}
+
+_plugin_commands() {
+  mkdir -p "$PLUGINS_DIR"
+  for dir in "$PLUGINS_DIR"/*/; do
+    [[ -d "$dir" ]] || continue
+    local cmd_dir="$dir/commands"
+    [[ -d "$cmd_dir" ]] || continue
+    for cmd_file in "$cmd_dir"/*.sh; do
+      [[ -f "$cmd_file" ]] || continue
+      local cmd_name
+      cmd_name="$(basename "$cmd_file" .sh)"
+      echo "$cmd_file:$cmd_name"
+    done
+  done
+}
+
+_plugin_dispatch() {
+  local cmd="$1"
+  shift
+  while IFS=':' read -r cmd_file cmd_name; do
+    if [[ "$cmd_name" == "$cmd" ]]; then
+      source "$cmd_file"
+      if declare -f "${cmd_name}_main" &>/dev/null; then
+        "${cmd_name}_main" "$@"
+        return $?
+      fi
+    fi
+  done < <(_plugin_commands)
+  return 1
+}

package/karnel/tools/security/all.sh

@@ -0,0 +1,42 @@
+SECURITY_TOOLS=(
+  "nmap"
+  "hydra"
+  "nikto"
+  "sqlmap"
+  "gobuster"
+  "dirb"
+  "wpscan"
+  "john"
+  "aircrack-ng"
+  "metasploit"
+)
+
+for _tool in "${SECURITY_TOOLS[@]}"; do
+  source "$(dirname "${BASH_SOURCE[0]}")/$_tool/install.sh"
+done
+
+_batch_security() {
+  local action="$1"
+  local action_past="$2"
+  local -n count_var="$3"
+  for tool in "${SECURITY_TOOLS[@]}"; do
+    func_name="${action}_${tool//-/_}"
+    loading "${action_past^}ing ${tool}" "$func_name"
+    case $? in
+      0) ((count_var++)) ;;
+      2) ((skipped_count++)) ;;
+      1) ((failed_count++)) ;;
+    esac
+  done
+}
+
+install_all_security() {
+  local installed_count=0 skipped_count=0 failed_count=0
+  _batch_security "install" "install" installed_count
+  echo
+  log_success "Security: $installed_count installed, $skipped_count skipped, $failed_count failed"
+}
+
+uninstall_all_security() { _batch_security "uninstall" "uninstall" _unused; }
+update_all_security()   { _batch_security "update" "update" _unused; }
+reinstall_all_security() { _batch_security "reinstall" "reinstall" _unused; }

package/karnel/tools/security/template.sh

@@ -0,0 +1,35 @@
+# Template for security tool installers.
+# Copy this file and replace TOOL_NAME with the actual tool name.
+
+_TOOL="tool"
+_TOOL_PKG="$1"
+
+install_${_TOOL}() {
+  if command -v "$_TOOL" &>/dev/null; then
+    log_info "$_TOOL is already installed"
+    return 2
+  fi
+  log_info "Installing $_TOOL..."
+  if pkg install -y "$_TOOL_PKG" 2>/dev/null || apt install -y "$_TOOL_PKG" 2>/dev/null; then
+    log_success "$_TOOL installed"
+    return 0
+  fi
+  log_error "Failed to install $_TOOL"
+  return 1
+}
+
+uninstall_${_TOOL}() {
+  log_info "Removing $_TOOL..."
+  pkg uninstall -y "$_TOOL_PKG" 2>/dev/null || true
+  log_success "$_TOOL removed"
+}
+
+update_${_TOOL}() {
+  log_info "$_TOOL updated via package manager"
+  return 2
+}
+
+reinstall_${_TOOL}() {
+  uninstall_$_TOOL
+  install_$_TOOL
+}

package/karnel/utils/banner.sh

@@ -103,23 +103,37 @@ _repeat() {
 # ================================================================
 # Counters
 # ================================================================
-_count_ai() { local c=0; for cmd in opencode claude gemini codex qwen vibe mimo hermes kimi ollama freebuff agy mmx pi engram codegraph command-code gentle-ai gga openclaude openclaw kiro crush odysseus kilocode kimchi cline omni-route ctx7 openspec; do command -v "$cmd" &>/dev/null && ((c++)); done; echo "$c"; }
-_count_lang() { local c=0; for cmd in node python python3 rustc go clang php perl; do command -v "$cmd" &>/dev/null && ((c++)); done; echo "$c"; }
-_count_db() { local c=0; command -v pg_ctl &>/dev/null && ((c++)); command -v mariadb &>/dev/null && ((c++)); command -v sqlite3 &>/dev/null && ((c++)); command -v mongod &>/dev/null && ((c++)); echo "$c"; }
-_uptime() {
-  if [[ -f /proc/uptime ]]; then
-    local secs; secs=$(awk '{print int($1)}' /proc/uptime 2>/dev/null)
-    local d=$((secs/86400)) h=$((secs%86400/3600)) m=$((secs%3600/60))
-    if (( d>0 )); then printf "%dd %dh" "$d" "$h"
-    elif (( h>0 )); then printf "%dh %dm" "$h" "$m"
-    else printf "%dm" "$m"; fi
-  else echo "?"; fi
+_count_ai() {
+  local reg="$KARNEL_PATH/tools/ai/all.sh"
+  local c=0
+  if [[ -f "$reg" ]]; then
+    while IFS= read -r line; do
+      [[ "$line" =~ ^[[:space:]]*\"([^\"]+)\" ]] || continue
+      local entry="${BASH_REMATCH[1]}"
+      local bin="${entry##*:}"
+      command -v "$bin" &>/dev/null && ((c++))
+    done < <(grep -E '^\s+"' "$reg" 2>/dev/null || true)
+  fi
+  echo "$c"
+}
+_count_lang() { local c=0; for cmd in node python rustc go clang php perl bun; do command -v "$cmd" &>/dev/null && ((c++)); done; echo "$c"; }
+_count_db() { local c=0; command -v pg_ctl &>/dev/null && ((c++)); command -v mariadb &>/dev/null && ((c++)); command -v sqlite3 &>/dev/null && ((c++)); command -v mongod &>/dev/null && ((c++)); command -v redis-cli &>/dev/null && ((c++)); echo "$c"; }
+_count_doctor() {
+  local doc_sh="$KARNEL_PATH/cli/commands/doctor/code_langs.sh"
+  if [[ -f "$doc_sh" ]]; then
+    local count; count=$(grep -c 'LANG_TOOLS\[' "$doc_sh" 2>/dev/null || echo 0)
+    echo "$count"
+  else echo "0"; fi
 }
-_ram_free() {
-  if [[ -f /proc/meminfo ]]; then
-    local kb; kb=$(grep MemAvailable /proc/meminfo 2>/dev/null | awk '{print $2}')
-    [[ -n "$kb" ]] && echo "$((kb/1024))MB" || echo "?"
-  else echo "?"; fi
+_pg_status() {
+  if command -v pg_ctl &>/dev/null; then
+    local data="$KARNEL_DATA/pg/data"
+    if [[ -d "$data" ]] && pg_ctl status -D "$data" &>/dev/null 2>&1; then
+      echo "ON"
+    else
+      echo "OFF"
+    fi
+  else echo "—"; fi
 }
 
 # ================================================================
@@ -236,16 +250,16 @@ _render_frame_line() {
 # ================================================================
 # Panel
 # ================================================================
-PANEL_HEADERS=("AI" "Lang" "DB" "Up" "RAM")
-PANEL_ICONS=("◆" "</>" "⛁" "↗" "◫")
+PANEL_HEADERS=("AI" "Lang" "DB" "Doctor" "PG")
+PANEL_ICONS=("◆" "</>" "⛁" "◈" "🐘")
 
 _panel_value() {
   case $1 in
     0) echo "${KAI_VAL:-$(_count_ai)}" ;;
     1) echo "${KLANG_VAL:-$(_count_lang)}" ;;
     2) echo "${KDB_VAL:-$(_count_db)}" ;;
-    3) echo "${KUP_VAL:-$(_uptime)}" ;;
-    4) echo "${KRAM_VAL:-$(_ram_free)}" ;;
+    3) echo "${KDOCTOR_VAL:-$(_count_doctor)}" ;;
+    4) echo "${KPG_VAL:-$(_pg_status)}" ;;
   esac
 }
 
@@ -430,8 +444,8 @@ _render_animated() {
 KAI_VAL=$(_count_ai)
 KLANG_VAL=$(_count_lang)
 KDB_VAL=$(_count_db)
-KUP_VAL=$(_uptime)
-KRAM_VAL=$(_ram_free)
+KDOCTOR_VAL=$(_count_doctor)
+KPG_VAL=$(_pg_status)
 
 # Cache banner for clear() override (capture only, no terminal output)
 _banner_output=$(_render 2>/dev/null) || true

package/karnel/utils/bootstrap.sh

@@ -7,6 +7,9 @@ __KARNEL_BOOTSTRAP_LOADED=1
 # registro de imports
 declare -A __KARNEL_IMPORTED
 
+# CAUTION: import() calls `source` from within a function. Any `declare` (without -g)
+# in the sourced file creates LOCAL variables scoped to import(), not globals.
+# Always use plain assignments (VAR=val) or `declare -g` for globals in sourced files.
 import() {
 	local base="${KARNEL_PATH}"
 	local resolved="${1//@/$base}.sh"

package/karnel/utils/env.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-KARNEL_VERSION="4.9.5"
+KARNEL_VERSION="4.10.0"
 
 # -------------------------
 # Directorios del usuario
@@ -26,6 +26,7 @@ KARNEL_CLI="$KARNEL_PATH/cli"
 KARNEL_TOOLS="$KARNEL_DATA/tools"
 KARNEL_RUN="$KARNEL_CACHE/run"
 KARNEL_LOGS="$KARNEL_CACHE/logs"
+KARNEL_PLUGINS="$KARNEL_DATA/plugins"
 
 # -------------------------
 # Crear directorios

package/karnel/utils/install.sh

@@ -0,0 +1,107 @@
+#!/usr/bin/env bash
+
+LOG_FILE="${LOG_FILE:-$KARNEL_CACHE/install_ai.log}"
+
+# ── Dependency installation ────────────────────────────────────
+
+declare -A _INSTALL_DEPS_CACHE
+
+install_deps() {
+  local -n deps=$1
+  local pkg_name bin_name
+  for pkg_name in "${!deps[@]}"; do
+    bin_name="${deps[$pkg_name]}"
+    if ! command -v "$bin_name" &>/dev/null; then
+      if ! pkg install "$pkg_name" -y &>>"$LOG_FILE"; then
+        log_error "Failed to install $pkg_name"
+        return 1
+      fi
+    fi
+  done
+  return 0
+}
+
+# ── Glibc installation ─────────────────────────────────────────
+
+install_glibc() {
+  if [[ ! -f $PREFIX/etc/apt/sources.list.d/glibc.list ]]; then
+    if ! pkg install glibc-repo -y &>>"$LOG_FILE"; then
+      log_error "Failed to install glibc-repo"
+      return 1
+    fi
+  fi
+  if [[ ! -f $PREFIX/glibc/lib/libc.so.6 ]]; then
+    if ! pkg install glibc -y &>>"$LOG_FILE"; then
+      log_error "Failed to install glibc"
+      return 1
+    fi
+  fi
+  return 0
+}
+
+# ── GitHub release helpers ─────────────────────────────────────
+
+github_latest_tag() {
+  local repo="$1"
+  curl -fsSL "https://api.github.com/repos/$repo/releases/latest" |
+    grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/'
+}
+
+github_download_release() {
+  local repo="$1" version="$2" asset="$3" outdir="$4"
+  local url="https://github.com/$repo/releases/download/$version/$asset"
+  local tmpfile="$outdir/$(basename "$asset")"
+  mkdir -p "$outdir"
+  if ! curl -fsSL "$url" -o "$tmpfile" &>>"$LOG_FILE"; then
+    log_error "Failed to download $asset from $repo"
+    return 1
+  fi
+  echo "$tmpfile"
+}
+
+extract_tarball() {
+  local tarball="$1" outdir="$2"
+  if ! tar -zxf "$tarball" -C "$outdir" &>>"$LOG_FILE"; then
+    log_error "Failed to extract $tarball"
+    return 1
+  fi
+  rm -f "$tarball"
+  return 0
+}
+
+github_download_and_extract() {
+  local repo="$1" version="$2" asset="$3" outdir="$4"
+  local tarball
+  tarball=$(github_download_release "$repo" "$version" "$asset" "$outdir") || return 1
+  extract_tarball "$tarball" "$outdir" || return 1
+  return 0
+}
+
+# ── C helper compilation ───────────────────────────────────────
+
+compile_helper() {
+  local src="$1" out="$2"
+  if [ ! -f "$src" ]; then
+    log_error "Helper source not found at $src"
+    return 1
+  fi
+  if ! cc -O2 -o "$out" "$src" &>>"$LOG_FILE"; then
+    log_error "Failed to compile $src"
+    return 1
+  fi
+  chmod +x "$out"
+  return 0
+}
+
+# ── Wrapper generator ─────────────────────────────────────────
+
+generate_wrapper() {
+  local template="$1" ubuntu_root="$2" output="$3"
+  if [ ! -f "$template" ]; then
+    log_error "Wrapper template not found at $template"
+    return 1
+  fi
+  sed "s|__UBUNTU_ROOTFS__|$ubuntu_root|g" "$template" >"$output"
+  chmod +x "$output"
+  return 0
+}

package/karnel/utils/proot.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+
+detect_ubuntu_root() {
+  local root
+  root="$(find /data/data/com.termux -maxdepth 10 -type d \
+    -name "rootfs" -path "*/containers/ubuntu/*" 2>/dev/null | head -1)"
+  if [ -z "$root" ]; then
+    root="$(find /data/data/com.termux -maxdepth 10 -type d \
+      -name "ubuntu" -path "*/installed-rootfs/*" 2>/dev/null | head -1)"
+  fi
+  echo "$root"
+}
+
+proot_ubuntu() {
+  proot-distro login --shared-tmp ubuntu -- "$@"
+}
+
+proot_install_ubuntu() {
+  local dist="${1:-ubuntu:24.04}"
+  if ! command -v proot-distro &>/dev/null; then
+    pkg install proot-distro -y &>>"$LOG_FILE"
+  fi
+  if [ ! -d "$(detect_ubuntu_root)" ]; then
+    proot-distro install "$dist" &>>"$LOG_FILE"
+  fi
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.9.5",
+  "version": "4.10.0",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"