nothumanallowed 13.2.69 → 13.2.71

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.2.69",
+  "version": "13.2.71",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {
@@ -53,6 +53,9 @@
     "url": "https://github.com/adoslabsproject-gif/nothumanallowed"
   },
   "homepage": "https://nothumanallowed.com",
+  "scripts": {
+    "check-bundle": "node check-bundle.mjs"
+  },
   "dependencies": {
     "ws": "^8.18.0"
   }

package/src/commands/ui.mjs

@@ -2805,6 +2805,10 @@ export async function cmdUI(args) {
       if (pathname === '/api/studio/run' && method === 'POST') {
         const body = await parseBody(req);
         const { agent, task, context, stepDef } = body;
+        const stepPdfBase64 = body.pdfBase64 || null;
+        const stepPdfName = body.pdfName || null;
+        const stepImageBase64 = body.imageBase64 || null;
+        const stepImageMime = body.imageMimeType || 'image/jpeg';
         if (!agent || !task) { sendJSON(res, 400, { error: 'agent and task required' }); logRequest(method, pathname, 400, Date.now() - start); return; }
 
         res.writeHead(200, {
@@ -3009,11 +3013,48 @@ RULES:
 - Use .priority-list for action items, .source-item for each email/news source, .bar-row for any percentage data
 - Output must start with <div class="header"> and end with <div class="footer">`;
 
+          // ── Handle PDF/image attachment on first step ─────────────────
+          let attachmentText = '';
+          if (stepPdfBase64 && !isLiveDataAgent) {
+            sendToken('[Reading PDF...] ');
+            try {
+              // Extract base64 payload (strip data URL prefix if present)
+              const b64 = stepPdfBase64.includes(',') ? stepPdfBase64.split(',')[1] : stepPdfBase64;
+              const pdfBuffer = Buffer.from(b64, 'base64');
+              const extracted = extractTextFromPdf(pdfBuffer);
+              if (extracted && extracted.length > 20) {
+                attachmentText = `## ATTACHED PDF: ${stepPdfName || 'document.pdf'}\n${extracted.slice(0, 15000)}`;
+              } else {
+                // PDF has no extractable text (scanned) — use vision
+                try {
+                  const { callLLMVision } = await import('../services/llm.mjs');
+                  const visionResult = await withTimeout(
+                    callLLMVision(config, 'Extract all text and information from this PDF document.', task, { base64: b64, mimeType: 'application/pdf' }),
+                    60000
+                  );
+                  if (visionResult) attachmentText = `## ATTACHED PDF: ${stepPdfName || 'document.pdf'}\n${visionResult.slice(0, 15000)}`;
+                } catch {}
+              }
+            } catch (e) { attachmentText = `[PDF read failed: ${e.message}]`; }
+          } else if (stepImageBase64 && !isLiveDataAgent) {
+            sendToken('[Reading image...] ');
+            try {
+              const { callLLMVision } = await import('../services/llm.mjs');
+              const b64 = stepImageBase64.includes(',') ? stepImageBase64.split(',')[1] : stepImageBase64;
+              const visionResult = await withTimeout(
+                callLLMVision(config, 'Describe and extract all information from this image in detail.', task, { base64: b64, mimeType: stepImageMime }),
+                45000
+              );
+              if (visionResult) attachmentText = `## ATTACHED IMAGE: ${body.imageName || 'image'}\n${visionResult.slice(0, 8000)}`;
+            } catch (e) { attachmentText = `[Image read failed: ${e.message}]`; }
+          }
+
           let sysPrompt, userMsg;
 
           if (isCanvasAgent) {
             sysPrompt = canvasSystemPrompt;
-            userMsg = `Create a professional dashboard report for this data. Output ONLY the inner HTML body content (starting with <div class="header">):\n\n${context}`;
+            const canvasData = [attachmentText, context].filter(Boolean).join('\n\n');
+            userMsg = `Create a professional dashboard report for this data. Output ONLY the inner HTML body content (starting with <div class="header">):\n\n${canvasData}`;
           } else if (isLiveDataAgent) {
             // These agents fetched real data — use a focused prompt (no tool definitions to avoid JSON output)
             const agentInstruction = `You are ${agent}, a specialist AI agent inside NHA Studio. Today is ${today}. Respond entirely in ${language}.
@@ -3025,7 +3066,7 @@ CRITICAL: Do NOT invent, hallucinate, or add any data not present in the DATA se
 Do NOT output JSON, tool calls, or code blocks. Write in plain text with markdown headers.
 Always apply your analysis specifically to the subject mentioned in the WORKFLOW GOAL.
 
-${toolData ? `## DATA FROM TOOLS:\n${toolData}\n` : '## DATA: No data was retrieved by this agent.\n'}
+${attachmentText ? `## ATTACHED FILE CONTENT:\n${attachmentText}\n` : ''}${toolData ? `## DATA FROM TOOLS:\n${toolData}\n` : '## DATA: No data was retrieved by this agent.\n'}
 ${context ? `## OUTPUT FROM PREVIOUS AGENTS:\n${context}\n` : ''}
 
 Your task: ${stepPrompt}`;
@@ -3052,7 +3093,7 @@ CRITICAL RULES:
 - Be thorough and specific — this is for an executive briefing based on REAL data only
 - Always keep the OVERALL WORKFLOW GOAL in mind — apply your analysis specifically to the subject mentioned
 
-${toolData ? `## LIVE DATA FROM TOOLS:\n${toolData}\n` : '## LIVE DATA: No tool data was fetched for this step.\n'}
+${attachmentText ? `## ATTACHED FILE CONTENT:\n${attachmentText}\n` : ''}${toolData ? `## LIVE DATA FROM TOOLS:\n${toolData}\n` : '## LIVE DATA: No tool data was fetched for this step.\n'}
 ${context ? `## OUTPUT FROM PREVIOUS AGENTS:\n${context}\n` : ''}`;
             userMsg = hasRealData
               ? `Based ONLY on the real data above, complete this task specifically for the subject in the WORKFLOW GOAL: ${stepPrompt}`

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.2.69';
+export const VERSION = '13.2.71';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -3202,7 +3202,7 @@ function renderSidebar() {
       \x27<a href="https://nothumanallowed.com/docs/agents" target="_blank" class="nav-item" style="text-decoration:none"><span class="nav-item__icon">&#129302;</span> \x27+t(\x27nav_agents_guide\x27)+\x27</a>\x27+
       \x27<a href="https://nothumanallowed.com/docs/mobile" target="_blank" class="nav-item" style="text-decoration:none"><span class="nav-item__icon">&#128241;</span> \x27+t(\x27nav_mobile\x27)+\x27</a>\x27+
     \x27</div>\x27+
-    \x27<div style="padding:12px 16px;margin-top:auto;border-top:1px solid var(--border);font-size:10px;color:var(--dim)">nothumanallowed.com</div>\x27;
+    \x27<div style="padding:12px 16px;margin-top:auto;border-top:1px solid var(--border);font-size:10px;color:var(--dim)">nothumanallowed.com<span style="margin-left:6px;opacity:.5">v${VERSION}</span></div>\x27;
 }
 
 var studioState = {
@@ -3371,6 +3371,18 @@ function downloadStudioPDF() {
   var task = studioState.task || 'NHA Studio Report';
   var today = new Date().toLocaleDateString('it-IT', {day:'2-digit',month:'2-digit',year:'numeric'});
   var nodes = studioState.nodes || [];
+  var fileName = (task).slice(0, 60).replace(/[^a-z0-9\s]/gi,'').trim().replace(/\s+/g,'-') || 'NHA-Studio';
+
+  // If canvas exists, download the canvas HTML directly (preserves colors and layout)
+  if (studioState.canvas) {
+    var blob = new Blob([studioState.canvas], {type: 'text/html'});
+    var url = URL.createObjectURL(blob);
+    var a = document.createElement('a');
+    a.href = url; a.target = '_blank'; a.download = fileName + '.html';
+    document.body.appendChild(a); a.click(); document.body.removeChild(a);
+    setTimeout(function(){ URL.revokeObjectURL(url); }, 5000);
+    return;
+  }
 
   // Build sections for each agent
   function mdToPdfHtml(raw) {
@@ -3780,11 +3792,31 @@ function runStudioStep(idx, node, task, context, stepDef, signal) {
   return new Promise(function(resolve) {
     var output = '';
     var canvasHtml = null;
-    // Inject attachment context into first step (idx===0) if present
-    var effectiveContext = (idx === 0 && studioState.attachmentContext)
-      ? (studioState.attachmentContext + (context ? String.fromCharCode(10) + String.fromCharCode(10) + context : ''))
-      : context;
-    var body = JSON.stringify({stepIdx: idx, agent: node.agent, task: task, context: effectiveContext, stepDef: stepDef});
+    // Inject attachment into first step only — pass PDF/image as dedicated fields,
+    // NOT as raw base64 in context (would cause 100k+ token overflow for any real PDF).
+    var bodyObj = {stepIdx: idx, agent: node.agent, task: task, context: context, stepDef: stepDef};
+    if (idx === 0 && studioState.attachmentContext) {
+      var ac = studioState.attachmentContext;
+      var isPdfAttach = ac.indexOf('[ATTACHED PDF:') === 0;
+      var isImgAttach = ac.indexOf('[ATTACHED IMAGE:') === 0;
+      // Extract base64 data URL from attachment context
+      var b64Match = ac.indexOf('Base64: ');
+      var dataUrl = b64Match >= 0 ? ac.slice(b64Match + 8).trim() : '';
+      if (isPdfAttach && dataUrl) {
+        // Pass PDF as dedicated field — agent/llm handles it natively
+        bodyObj.pdfBase64 = dataUrl;
+        bodyObj.pdfName = studioState.attachmentName;
+        // Add a short note in context instead of the full base64
+        bodyObj.context = '[User attached PDF: ' + studioState.attachmentName + ']' +
+          (context ? String.fromCharCode(10) + String.fromCharCode(10) + context : '');
+      } else if (isImgAttach && dataUrl) {
+        bodyObj.imageBase64 = dataUrl;
+        bodyObj.imageMimeType = dataUrl.indexOf('data:image/png') === 0 ? 'image/png' : 'image/jpeg';
+        bodyObj.context = '[User attached image: ' + studioState.attachmentName + ']' +
+          (context ? String.fromCharCode(10) + String.fromCharCode(10) + context : '');
+      }
+    }
+    var body = JSON.stringify(bodyObj);
     var fetchOpts = {method: 'POST', headers: {'Content-Type': 'application/json'}, body: body};
     if (signal) fetchOpts.signal = signal;
 
@@ -4205,7 +4237,7 @@ function init(){
   if(cp)makeDraggable(cp,\x27.cvs-header\x27);
   // Telemetry ping — fire and forget
   setTimeout(function(){
-    fetch(\x27https://nothumanallowed.com/api/v1/telemetry/ping\x27,{method:\x27POST\x27,headers:{\x27Content-Type\x27:\x27application/json\x27},body:JSON.stringify({platform:\x27web-ui\x27,version:VERSION})}).catch(function(){});
+    fetch(\x27https://nothumanallowed.com/api/v1/telemetry/ping\x27,{method:\x27POST\x27,headers:{\x27Content-Type\x27:\x27application/json\x27},body:JSON.stringify({platform:\x27web-ui\x27,version:\x27${VERSION}\x27})}).catch(function(){});
   },3000);
 }
 init();