nothumanallowed 13.5.129 → 13.5.131

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.129",
+  "version": "13.5.131",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -5308,8 +5308,14 @@ module.exports = { validateEmail, sanitizeText, validatePassword, validateUserna
           let pkg = {};
           try { pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8')); } catch(_) {}
           if (!pkg.dependencies) pkg.dependencies = {};
+          // Remove server-side deps that can't run in sandbox
           delete pkg.dependencies.pg;
           delete pkg.dependencies.ioredis;
+          delete pkg.dependencies['pg-pool'];
+          delete pkg.dependencies.redis;
+          delete pkg.dependencies.mongoose;
+          delete pkg.dependencies.mysql2;
+          delete pkg.dependencies.sequelize;
           // Force known-good versions — LLM often generates non-existent patch versions
           pkg.dependencies.express = '^4.19.0';
           pkg.dependencies.bcryptjs = '^2.4.3';
@@ -5320,10 +5326,63 @@ module.exports = { validateEmail, sanitizeText, validatePassword, validateUserna
           pkg.dependencies.dotenv = '^16.4.0';
           pkg.dependencies.nodemailer = '^6.9.0';
           pkg.dependencies['express-validator'] = '^7.0.1';
+          // Auto-detect any require('pkg') in server JS files and add missing deps
+          const KNOWN_VERSIONS = {
+            'xss-clean': '^0.1.4', 'morgan': '^1.10.0', 'compression': '^1.7.4',
+            'multer': '^1.4.5-lts.1', 'uuid': '^9.0.0', 'axios': '^1.6.0',
+            'lodash': '^4.17.21', 'moment': '^2.30.1', 'dayjs': '^1.11.10',
+            'joi': '^17.12.0', 'zod': '^3.22.4', 'yup': '^1.3.3',
+            'stripe': '^14.21.0', 'passport': '^0.7.0', 'passport-local': '^1.0.0',
+            'passport-jwt': '^4.0.1', 'cookie-parser': '^1.4.6', 'body-parser': '^1.20.2',
+            'express-session': '^1.18.0', 'connect-flash': '^0.1.1', 'method-override': '^3.0.0',
+            'serve-static': '^1.15.0', 'path': '0.12.7', 'crypto': '^1.0.1',
+            'sanitize-html': '^2.12.0', 'dompurify': '^3.0.9', 'validator': '^13.11.0',
+            'express-mongo-sanitize': '^2.2.0', 'hpp': '^0.2.3', 'xss': '^1.0.14',
+            'winston': '^3.12.0', 'pino': '^8.19.0', 'chalk': '^5.3.0',
+            'socket.io': '^4.7.4', 'ws': '^8.16.0', 'ejs': '^3.1.9', 'pug': '^3.0.2',
+            'handlebars': '^4.7.8', 'nunjucks': '^3.2.4', 'sharp': '^0.33.3',
+            'qrcode': '^1.5.3', 'pdf-lib': '^1.17.1',
+          };
+          const NODE_BUILTINS = new Set(['fs','path','os','crypto','http','https','net','url','util',
+            'events','stream','buffer','child_process','process','querystring','readline','assert',
+            'zlib','dns','tls','cluster','worker_threads','perf_hooks','vm','v8','module',
+            'string_decoder','timers','punycode','domain','console','sys']);
+          function scanRequires(dir) {
+            const found = new Set();
+            const walk = (d) => {
+              let entries;
+              try { entries = fs.readdirSync(d, { withFileTypes: true }); } catch { return; }
+              for (const e of entries) {
+                if (e.name === 'node_modules' || e.name.startsWith('.')) continue;
+                const full = path.join(d, e.name);
+                if (e.isDirectory()) { walk(full); continue; }
+                if (!e.name.endsWith('.js') && !e.name.endsWith('.mjs') && !e.name.endsWith('.cjs')) continue;
+                let src;
+                try { src = fs.readFileSync(full, 'utf8'); } catch { continue; }
+                const re = /require\s*\(\s*['"]([^'"./][^'"]*)['"]\s*\)/g;
+                let m;
+                while ((m = re.exec(src)) !== null) {
+                  const pkg2 = m[1].startsWith('@') ? m[1].split('/').slice(0,2).join('/') : m[1].split('/')[0];
+                  if (!NODE_BUILTINS.has(pkg2)) found.add(pkg2);
+                }
+              }
+            };
+            walk(dir);
+            return found;
+          }
+          const detected = scanRequires(sandboxDir);
+          const missing = [];
+          for (const mod of detected) {
+            if (!pkg.dependencies[mod] && !pkg.devDependencies?.[mod]) {
+              pkg.dependencies[mod] = KNOWN_VERSIONS[mod] || 'latest';
+              missing.push(mod);
+            }
+          }
+          if (missing.length > 0) sendLog('🔍 Dipendenze auto-rilevate e aggiunte: ' + missing.join(', '));
           pkg.scripts = pkg.scripts || {};
           pkg.scripts.start = 'node server/index.js';
           fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2), 'utf8');
-          sendLog('📦 package.json ottimizzato per sandbox (rimosso pg, redis)');
+          sendLog('📦 package.json ottimizzato per sandbox (rimosso pg/redis, auto-scan require)');
 
           // Create minimal .env for sandbox
           const envContent = [

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.5.129';
+export const VERSION = '13.5.131';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -7548,13 +7548,22 @@ function renderWebCraft(el) {
       '</div>' +
       '<div data-wc-files style="position:relative;flex:1;min-width:0;background:var(--bg2);border:1px solid var(--border);border-radius:10px;display:flex;flex-direction:column;height:100%;overflow:hidden">' +
         (wcState.repairing ?
-          '<div id="wcRepairOverlay" style="position:absolute;inset:0;background:rgba(0,0,0,0.75);backdrop-filter:blur(4px);border-radius:10px;z-index:50;display:flex;flex-direction:column;align-items:center;justify-content:center">'
-            +'<div style="font-size:38px;animation:wcRobotBob 1s ease-in-out infinite">&#128295;</div>'
-            +'<div style="font-size:13px;font-weight:700;color:#facc15;margin-top:12px">Correzione automatica in corso...</div>'
-            +'<div id="wcRepairCounter" style="font-size:11px;color:var(--dim);margin-top:6px">'+wcState.repairDone+' / '+wcState.repairTotal+' file</div>'
-            +'<div id="wcRepairFile" style="font-size:10px;color:#fde68a;font-family:var(--mono);margin-top:4px;max-width:280px;text-align:center;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">'+wcEsc(wcState.repairCurrent)+'</div>'
-            +'<div style="display:flex;gap:4px;margin-top:16px">'+[0,1,2,3,4].map(function(_,idx){ return '<div style="width:6px;height:6px;border-radius:50%;background:#facc15;animation:wcDot 1.1s ease-in-out infinite '+(idx*0.14)+'s"></div>'; }).join('')+'</div>'
-          +'</div>'
+          (_wcOverlayMinimized
+            ? '<div id="wcRepairOverlay" onclick="wcOverlayRestore()" style="position:absolute;bottom:12px;right:12px;z-index:50;background:rgba(0,0,0,0.85);border:1px solid rgba(234,179,8,0.6);border-radius:20px;padding:5px 12px;display:flex;align-items:center;gap:7px;cursor:pointer;animation:wcBubbleIn .2s ease;backdrop-filter:blur(4px)">'
+                +'<span style="font-size:16px;animation:wcRobotBob .9s ease-in-out infinite">&#128295;</span>'
+                +'<span style="font-size:10px;color:#facc15;font-weight:700;max-width:160px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">'+wcEsc(wcState.repairCurrent || 'Correzione...')+'</span>'
+                +'<span style="font-size:9px;color:var(--dim)">'+wcState.repairDone+'/'+wcState.repairTotal+'</span>'
+                +'<span style="display:flex;gap:3px">'+[0,1,2].map(function(_,idx){ return '<span style="width:4px;height:4px;border-radius:50%;background:#facc15;animation:wcDot 1.1s ease-in-out infinite '+(idx*0.18)+'s"></span>'; }).join('')+'</span>'
+              +'</div>'
+            : '<div id="wcRepairOverlay" onclick="wcOverlayMinimize()" title="Clicca per navigare i file" style="position:absolute;inset:0;background:rgba(0,0,0,0.75);backdrop-filter:blur(4px);border-radius:10px;z-index:50;display:flex;flex-direction:column;align-items:center;justify-content:center;cursor:pointer;animation:wcBubbleIn .3s ease">'
+                +'<div style="font-size:38px;animation:wcRobotBob 1s ease-in-out infinite">&#128295;</div>'
+                +'<div style="font-size:13px;font-weight:700;color:#facc15;margin-top:12px">Correzione automatica in corso...</div>'
+                +'<div style="font-size:10px;color:var(--dim);margin-top:4px">Clicca per navigare i file</div>'
+                +'<div id="wcRepairCounter" style="font-size:11px;color:var(--dim);margin-top:6px">'+wcState.repairDone+' / '+wcState.repairTotal+' file</div>'
+                +'<div id="wcRepairFile" style="font-size:10px;color:#fde68a;font-family:var(--mono);margin-top:4px;max-width:280px;text-align:center;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">'+wcEsc(wcState.repairCurrent)+'</div>'
+                +'<div style="display:flex;gap:4px;margin-top:16px">'+[0,1,2,3,4].map(function(_,idx){ return '<div style="width:6px;height:6px;border-radius:50%;background:#facc15;animation:wcDot 1.1s ease-in-out infinite '+(idx*0.14)+'s"></div>'; }).join('')+'</div>'
+              +'</div>'
+          )
         : wcState.running ? (
           _wcOverlayMinimized
           // Minimized: small pill in bottom-right corner
@@ -8069,7 +8078,7 @@ function wcOverlayMinimize() {
   renderWebCraft(document.getElementById('content'));
   if (_wcOverlayTimer) clearTimeout(_wcOverlayTimer);
   _wcOverlayTimer = setTimeout(function() {
-    if (wcState.running) { _wcOverlayMinimized = false; renderWebCraft(document.getElementById('content')); }
+    if (wcState.running || wcState.repairing) { _wcOverlayMinimized = false; renderWebCraft(document.getElementById('content')); }
   }, 10000);
 }