nothumanallowed 13.2.28 → 13.2.29

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.2.28",
+  "version": "13.2.29",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -2586,12 +2586,14 @@ Example output:
             const hasCalendar = /calendar|agenda|calendari/i.test(task);
             const hasSearch = /cerca|search|notizie|news/i.test(task);
             const hasCanvas = /html|dashboard|visua|report/i.test(task);
+            // Extract a short search query from the task (take key noun phrases, max 80 chars)
+            const searchQueryFallback = task.replace(/^[^:]+:\s*/,'').split(/[,\n]/)[0].slice(0,80).trim() || task.slice(0,80);
             steps = [];
-            if (hasEmail) steps.push({icon:'📧',agent:'EmailAgent',label:'Controlla email',prompt:task});
-            if (hasCalendar) steps.push({icon:'📅',agent:'CalendarAgent',label:'Rivedi calendario',prompt:task});
-            if (hasSearch || steps.length === 0) steps.push({icon:'🔍',agent:'WebSearchAgent',label:'Ricerca web',prompt:task});
-            steps.push({icon:'📰',agent:'HERALD',label:'Analisi e briefing',prompt:task});
-            if (hasCanvas) steps.push({icon:'📊',agent:'CanvasAgent',label:'Dashboard HTML',prompt:task});
+            if (hasEmail) steps.push({icon:'\u{1F4E7}',agent:'EmailAgent',label:'Controlla email',prompt:'Leggi le ultime email non lette e identifica elementi urgenti'});
+            if (hasCalendar) steps.push({icon:'\u{1F4C5}',agent:'CalendarAgent',label:'Rivedi calendario',prompt:'Controlla gli eventi di oggi e identifica eventuali conflitti'});
+            if (hasSearch || steps.length === 0) steps.push({icon:'\u{1F50D}',agent:'WebSearchAgent',label:'Ricerca web',prompt:searchQueryFallback});
+            steps.push({icon:'\u{1F4F0}',agent:'HERALD',label:'Analisi e briefing',prompt:'Analizza tutti i dati forniti e scrivi un briefing esecutivo dettagliato con priorit\u00e0 e raccomandazioni'});
+            if (hasCanvas) steps.push({icon:'\u{1F4CA}',agent:'CanvasAgent',label:'Dashboard HTML',prompt:'Crea una dashboard HTML visuale con i dati del briefing'});
           }
           if (!Array.isArray(steps) || !steps.length) {
             sendJSON(res, 500, { error: 'Empty workflow plan' });
@@ -2663,8 +2665,22 @@ Example output:
           } else if (agent === 'WebSearchAgent' || agent === 'ResearchAgent') {
             sendToken('[Searching the web and reading pages...] ');
             try {
+              // Extract a concise search query from the step prompt (avoid sending the whole task as query)
+              // The planner should provide a short query, but if not, extract key terms
+              let searchQuery = stepPrompt;
+              // If the prompt is very long (> 120 chars), extract the core search terms
+              if (searchQuery.length > 120) {
+                // Try to extract a meaningful short query
+                const keywordMatch = searchQuery.match(/(?:cerca|search|find|ricerca|notizie su|news about|latest on|aggiornamenti su)\s+(.{5,80}?)(?:\s+(?:e|and|per|for|poi|then)|$)/i);
+                if (keywordMatch) {
+                  searchQuery = keywordMatch[1].trim();
+                } else {
+                  // Take first meaningful clause before comma/period
+                  searchQuery = searchQuery.split(/[,\.\n]/)[0].slice(0, 100).trim();
+                }
+              }
               // Use deep search: fetches and reads top 3 pages for real content
-              const searchResult = await withTimeout(executeTool('web_search', { query: stepPrompt, deep: true }, config), 25000);
+              const searchResult = await withTimeout(executeTool('web_search', { query: searchQuery, deep: true }, config), 25000);
               toolData = typeof searchResult === 'string' ? searchResult : JSON.stringify(searchResult);
             } catch (e) { toolData = `Web search failed: ${e.message}`; }
 
@@ -2813,37 +2829,43 @@ Output ONLY the full HTML. Replace all bracketed instructions above with real HT
 
           if (isCanvasAgent) {
             sysPrompt = canvasSystemPrompt;
-            userMsg = `Generate a beautiful HTML dashboard report for this content. Start immediately with <!DOCTYPE html>:\n\n${context.slice(0, 8000)}`;
+            userMsg = `Generate a beautiful HTML dashboard report for this content. Start immediately with <!DOCTYPE html>:\n\n${context.slice(0, 10000)}`;
           } else if (isLiveDataAgent) {
-            // These agents fetched real data — use buildSystemPrompt so they can call tools too
-            const agentInstruction = `You are ${agent}, a specialist AI agent inside NHA Studio. Respond in ${language}.\nYour task: ${stepPrompt}\n` +
-              (toolData ? `\n## DATA FROM TOOLS:\n${toolData.slice(0, 4000)}\n` : '') +
-              (context ? `\n## OUTPUT FROM PREVIOUS AGENTS:\n${context.slice(0, 3000)}\n` : '') +
-              `\nWrite your analysis in plain text in ${language}. Do NOT output JSON, tool calls, or code blocks. Summarize the data clearly.`;
-            sysPrompt = buildSystemPrompt(agent, agentInstruction, config);
+            // These agents fetched real data — use a focused prompt (no tool definitions to avoid JSON output)
+            const agentInstruction = `You are ${agent}, a specialist AI agent inside NHA Studio. Today is ${today}. Respond entirely in ${language}.
+
+CRITICAL: Do NOT invent, hallucinate, or add any data not present in the DATA sections below. ONLY use the exact data provided.
+Do NOT output JSON, tool calls, or code blocks. Write in plain text with markdown headers.
+
+${toolData ? `## DATA FROM TOOLS:\n${toolData.slice(0, 6000)}\n` : '## DATA: No data was retrieved by this agent.\n'}
+${context ? `## OUTPUT FROM PREVIOUS AGENTS:\n${context.slice(0, 4000)}\n` : ''}
+
+Your task: ${stepPrompt}`;
+            sysPrompt = agentInstruction;
             userMsg = toolData
-              ? `Summarize the data above for: ${stepPrompt}`
+              ? `Summarize and analyze the REAL data above. Do not add anything not present in the data.`
               : context
-              ? `Based on the previous output, complete: ${stepPrompt}`
+              ? `Based ONLY on the previous agent outputs above, complete: ${stepPrompt}`
               : stepPrompt;
           } else {
             // All other agents (WriterAgent, DataAnalystAgent, specialist agents, etc.)
             // Use a focused prompt with NO TOOL_DEFINITIONS to prevent JSON/tool-call output
+            const hasRealData = !!(toolData || context);
             sysPrompt = `You are ${agent}, a specialist AI agent inside NHA Studio. Today is ${today}. You MUST respond entirely in ${language}.
 
 CRITICAL RULES:
 - Do NOT output JSON, tool calls, function calls, or code blocks
-- Do NOT ask for more information — use only the data provided below
-- Write in plain prose, structured with headers and bullet points where appropriate
-- Be thorough and specific — this is for an executive briefing
-
-${toolData ? `## LIVE DATA:\n${toolData.slice(0, 4000)}\n` : ''}
-${context ? `## CONTEXT FROM PREVIOUS AGENTS:\n${context.slice(0, 5000)}\n` : ''}`;
-            userMsg = toolData
-              ? `Use the live data and context above to complete this task: ${stepPrompt}`
-              : context
-              ? `Using the context from previous steps, complete this task: ${stepPrompt}`
-              : stepPrompt;
+- NEVER invent, fabricate, or hallucinate data, events, emails, meetings, or news
+- ONLY use the EXACT data provided in the DATA sections below — if no data is provided, say so clearly
+- Do NOT add fictional examples, placeholder content, or generic suggestions not grounded in the data
+- Write in plain prose, structured with markdown headers (##) and bullet points (-)
+- Be thorough and specific — this is for an executive briefing based on REAL data only
+
+${toolData ? `## LIVE DATA FROM TOOLS:\n${toolData.slice(0, 6000)}\n` : '## LIVE DATA: No tool data was fetched for this step.\n'}
+${context ? `## OUTPUT FROM PREVIOUS AGENTS:\n${context.slice(0, 6000)}\n` : ''}`;
+            userMsg = hasRealData
+              ? `Based ONLY on the real data above, complete this task: ${stepPrompt}`
+              : `No real data is available. State clearly that no data was retrieved and explain what would be needed: ${stepPrompt}`;
           }
 
           // ── Stream LLM response ───────────────────────────────────────

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.2.28';
+export const VERSION = '13.2.29';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -3298,44 +3298,44 @@ function renderStudio(el) {
 
   // 38 specialist agents sidebar
   var SPECIALIST_AGENTS = [
-    {icon:'\\u{1F6E1}',name:'saber',desc:'Security audits, pentest, OWASP'},
-    {icon:'\\u{1F50D}',name:'zero',desc:'Vulnerability & dependency audit'},
-    {icon:'\\u2713',name:'veritas',desc:'Fact-checking & hallucination detection'},
-    {icon:'\\u{1F52C}',name:'ade',desc:'Full security review, forensics'},
-    {icon:'\\u{1F512}',name:'heimdall',desc:'OAuth, JWT, RBAC design'},
-    {icon:'\\u{1F4BB}',name:'jarvis',desc:'Full-stack architecture & API'},
-    {icon:'\\u2699',name:'forge',desc:'CI/CD, deployment, infra'},
-    {icon:'\\u{1F527}',name:'pipe',desc:'Build systems, Airflow, automation'},
-    {icon:'\\u{1F4DF}',name:'shell',desc:'Shell scripts, CLI tools'},
-    {icon:'\\u{1F41B}',name:'glitch',desc:'Debugging & root cause'},
-    {icon:'\\u{1F4CA}',name:'oracle',desc:'Data analysis, stats, ML'},
-    {icon:'\\u{1F9EE}',name:'logos',desc:'Logic, proofs, formal reasoning'},
-    {icon:'\\u{1F5FA}',name:'atlas',desc:'Terraform, CloudFormation, IaC'},
-    {icon:'\\u{1F30D}',name:'cartographer',desc:'Geo data, mapping, routing'},
-    {icon:'\\u270D',name:'scheherazade',desc:'Docs, tutorials, blog posts'},
-    {icon:'\\u{1F4DD}',name:'quill',desc:'Posts, summaries, abstracts'},
-    {icon:'\\u{1F3A8}',name:'muse',desc:'Creative brainstorming & ideation'},
-    {icon:'\\u{1F58C}',name:'murasaki',desc:'UI/UX design, accessibility'},
-    {icon:'\\u{1F517}',name:'hermes',desc:'Kafka, RabbitMQ, event-driven'},
-    {icon:'\\u{1F50C}',name:'link',desc:'Community, reputation, engagement'},
-    {icon:'\\u{1F310}',name:'mercury',desc:'Finance, market, ROI analysis'},
-    {icon:'\\u2638',name:'shogun',desc:'Kubernetes, Helm, pod security'},
-    {icon:'\\u{1F504}',name:'flux',desc:'GitOps, rollback planning'},
-    {icon:'\\u23F0',name:'cron',desc:'GitHub Actions, GitLab CI'},
-    {icon:'\\u{1F30E}',name:'babel',desc:'API integration, microservices'},
-    {icon:'\\u{1F5E3}',name:'polyglot',desc:'i18n, localization, translation'},
-    {icon:'\\u{1F4E2}',name:'herald',desc:'News analysis, trend detection'},
-    {icon:'\\u{1F4E1}',name:'echo',desc:'Content repurposing: blog→social'},
-    {icon:'\\u26A1',name:'macro',desc:'Batch processing, data migration'},
-    {icon:'\\u{1F525}',name:'prometheus',desc:'Strategy, architecture trade-offs'},
-    {icon:'\\u26A0',name:'cassandra',desc:'Risk prediction, worst-case analysis'},
-    {icon:'\\u{1F9E0}',name:'athena',desc:'Tech evaluation, benchmarks'},
-    {icon:'\\u{1F441}',name:'sauron',desc:'Performance profiling, bottlenecks'},
-    {icon:'\\u{1F3BC}',name:'conductor',desc:'Workflow orchestration'},
-    {icon:'\\u{1F9ED}',name:'navi',desc:'Data profiling, schema inference'},
-    {icon:'\\u{1F4C8}',name:'edi',desc:'A/B testing, hypothesis testing'},
-    {icon:'\\u26C8',name:'tempest',desc:'Climate, weather, environmental'},
-    {icon:'\\u{1F37D}',name:'epicure',desc:'Recipes, nutrition, dietary'},
+    {icon:'\u{1F6E1}',name:'saber',desc:'Security audits, pentest, OWASP'},
+    {icon:'\u{1F50D}',name:'zero',desc:'Vulnerability & dependency audit'},
+    {icon:'\u2713',name:'veritas',desc:'Fact-checking & hallucination detection'},
+    {icon:'\u{1F52C}',name:'ade',desc:'Full security review, forensics'},
+    {icon:'\u{1F512}',name:'heimdall',desc:'OAuth, JWT, RBAC design'},
+    {icon:'\u{1F4BB}',name:'jarvis',desc:'Full-stack architecture & API'},
+    {icon:'\u2699',name:'forge',desc:'CI/CD, deployment, infra'},
+    {icon:'\u{1F527}',name:'pipe',desc:'Build systems, Airflow, automation'},
+    {icon:'\u{1F4DF}',name:'shell',desc:'Shell scripts, CLI tools'},
+    {icon:'\u{1F41B}',name:'glitch',desc:'Debugging & root cause'},
+    {icon:'\u{1F4CA}',name:'oracle',desc:'Data analysis, stats, ML'},
+    {icon:'\u{1F9EE}',name:'logos',desc:'Logic, proofs, formal reasoning'},
+    {icon:'\u{1F5FA}',name:'atlas',desc:'Terraform, CloudFormation, IaC'},
+    {icon:'\u{1F30D}',name:'cartographer',desc:'Geo data, mapping, routing'},
+    {icon:'\u270D',name:'scheherazade',desc:'Docs, tutorials, blog posts'},
+    {icon:'\u{1F4DD}',name:'quill',desc:'Posts, summaries, abstracts'},
+    {icon:'\u{1F3A8}',name:'muse',desc:'Creative brainstorming & ideation'},
+    {icon:'\u{1F58C}',name:'murasaki',desc:'UI/UX design, accessibility'},
+    {icon:'\u{1F517}',name:'hermes',desc:'Kafka, RabbitMQ, event-driven'},
+    {icon:'\u{1F50C}',name:'link',desc:'Community, reputation, engagement'},
+    {icon:'\u{1F310}',name:'mercury',desc:'Finance, market, ROI analysis'},
+    {icon:'\u2638',name:'shogun',desc:'Kubernetes, Helm, pod security'},
+    {icon:'\u{1F504}',name:'flux',desc:'GitOps, rollback planning'},
+    {icon:'\u23F0',name:'cron',desc:'GitHub Actions, GitLab CI'},
+    {icon:'\u{1F30E}',name:'babel',desc:'API integration, microservices'},
+    {icon:'\u{1F5E3}',name:'polyglot',desc:'i18n, localization, translation'},
+    {icon:'\u{1F4E2}',name:'herald',desc:'News analysis, trend detection'},
+    {icon:'\u{1F4E1}',name:'echo',desc:'Content repurposing: blog\u2192social'},
+    {icon:'\u26A1',name:'macro',desc:'Batch processing, data migration'},
+    {icon:'\u{1F525}',name:'prometheus',desc:'Strategy, architecture trade-offs'},
+    {icon:'\u26A0',name:'cassandra',desc:'Risk prediction, worst-case analysis'},
+    {icon:'\u{1F9E0}',name:'athena',desc:'Tech evaluation, benchmarks'},
+    {icon:'\u{1F441}',name:'sauron',desc:'Performance profiling, bottlenecks'},
+    {icon:'\u{1F3BC}',name:'conductor',desc:'Workflow orchestration'},
+    {icon:'\u{1F9ED}',name:'navi',desc:'Data profiling, schema inference'},
+    {icon:'\u{1F4C8}',name:'edi',desc:'A/B testing, hypothesis testing'},
+    {icon:'\u26C8',name:'tempest',desc:'Climate, weather, environmental'},
+    {icon:'\u{1F37D}',name:'epicure',desc:'Recipes, nutrition, dietary'},
   ];
   var specialistHtml = SPECIALIST_AGENTS.map(function(t){
     var ic = t.icon;
@@ -3392,7 +3392,7 @@ function renderStudio(el) {
 
         '<div style="display:flex;align-items:center;gap:8px;margin:8px 0">' +
           '<div id="studioTokenBar" style="font-size:10px;color:var(--dim);font-family:var(--mono);flex:1"></div>' +
-          '<button id="studioCanvasBtn" onclick="var p=document.getElementById(\\x27canvasPanel\\x27);if(p)p.classList.add(\\x27open\\x27)" style="display:none;font-size:10px;padding:3px 9px;background:none;border:1px solid var(--green3);border-radius:5px;color:var(--green);cursor:pointer;font-family:var(--mono)">&#9632; Open Canvas</button>' +
+          '<button id="studioCanvasBtn" onclick="openCanvasPanel()" style="display:none;font-size:12px;padding:5px 14px;background:var(--greendim);border:1px solid var(--green3);border-radius:6px;color:var(--green);cursor:pointer;font-weight:700">&#9632; ' + t('canvas_open') + '</button>' +
         '</div>' +
         '<div class="studio-canvas" id="studioNodes"></div>' +
         '<div class="studio-log" id="studioLog" style="display:none"></div>' +