nothumanallowed 13.5.134 → 13.5.136

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Nicola Cucurachi
+Copyright (c) 2026 NotHumanAllowed
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,6 +1,6 @@
 # NotHumanAllowed
 
-**38 specialized AI agents, 80 tools, Studio visual workflows, WebCraft full-stack builder — all local, all free.** Security auditors, code architects, data analysts, DevOps engineers, technical writers — each with deep domain expertise. Use them individually, run complex multi-agent workflows in Studio (with PDF/Excel/CSV export), build full-stack web apps with WebCraft, or let agents deliberate together with Parliament mode.
+**38 specialized AI agents, 80 tools, Studio visual workflows — all local, all free.** Security auditors, code architects, data analysts, DevOps engineers, technical writers — each with deep domain expertise. Use them individually, run complex multi-agent workflows in Studio, or let them deliberate together.
 
 ## Quick Start
 
@@ -36,87 +36,9 @@ EmailAgent → WebSearchAgent → WriterAgent
 
 - **No configuration** — works with any LLM provider including Liara (free, no API key)
 - **Live canvas** — see each agent activate, stream output, and hand off to the next
-- **HTML dashboard** — canvas generates a downloadable visual report (HTML + PDF)
-- **Parliament mode** — enable for 2+ specialist agents to cross-read and deliberate: R1 (independent), R2 (agents read each other), R3 (HERALD mediation), convergence score
+- **2–5 step workflows** — context flows automatically between steps
 - Open `nha ui` → click **Studio** in the sidebar
 
-### Studio Export
-
-When a workflow completes, Studio provides three export formats:
-
-- **PDF** — full structured report with all agent outputs, typography, token counters
-- **Excel (XLSX)** — professional multi-sheet workbook via SheetJS: one sheet per agent, auto-detected numeric columns with formatting, alternating row colors, freeze panes, auto-column widths, index sheet with token summary. Data tables are extracted from Markdown output automatically.
-- **CSV** — all Markdown tables from the report merged into a single file
-
-Export buttons appear in the result panel and in the toolbar after each run.
-
----
-
-## WebCraft — Full-Stack Web Apps from a Chat
-
-WebCraft is a full-stack web app builder embedded in `nha ui`. Describe what you want in plain language — WebCraft generates a complete project with Express.js backend, PostgreSQL schema, JWT auth, email verification, security middleware, and a styled frontend. Everything runs locally with a live sandbox.
-
-```
-Open nha ui → click WebCraft in the sidebar
-```
-
-### How it works
-
-1. **Describe your project** in the chat (or pick an example: MySaaS, MyShop, MyBlog, MyPortfolio...)
-2. **WebCraft generates** all files: `server/`, `public/`, `db/migrations/`, `.env.example`, `package.json`, nginx config
-3. **Click ▶ Sandbox** — runs `npm install && node server/index.js` in an isolated process, live on a local port
-4. **Chat with the agent** to modify, fix, or extend anything — the agent edits files directly on disk, you see diffs in real time
-
-### WebCraft Agent
-
-An AI assistant permanently available in the chat panel. Powered by Liara (Qwen3 32B, free) or your own API key.
-
-**What it can do:**
-- Edit files surgically (old → new string replace) or rewrite them completely
-- Read any project file for context
-- Auto-fix `MODULE_NOT_FOUND` and common require() path errors
-- Restart the sandbox after fixes
-- Process attached screenshots or PDFs (vision) to debug visual issues
-
-**Context files** (created automatically for every project, editable via sidebar):
-| File | Type | Purpose |
-|---|---|---|
-| `skills/memory.md` | memory | Architecture decisions, stack choices, developer preferences |
-| `skills/liara.md` | provider | Calibrate AI tone, code style, constraints |
-| `skills/skills.md` | skill | Reusable patterns, snippets, API integrations |
-
-Add more skill files (unlimited) for specific integrations (Stripe, email templates, etc.).
-
-### Developer Tools (sidebar toolbar)
-
-| Tool | Description |
-|---|---|
-| **Diff viewer** | After every agent edit, see before/after for each changed file — color-coded, collapsible |
-| **Syntax check** ✅ | Runs `node --check` on all JS files, reports errors instantly |
-| **Search** 🔍 | Grep across all project files — click a result to jump to that file |
-| **Snapshot** 💾 | Save a full point-in-time backup of all files. Restore any snapshot with one click |
-| **Plan mode** | Type `/plan your request` — agent proposes a plan first, you approve before any file is touched |
-| **Auto-fix** | Sandbox errors (MODULE_NOT_FOUND etc.) trigger automatic Liara fix attempts (3 free, unlimited with own key) |
-
-### Example session
-
-```
-You: "Add a contact form with SMTP email and honeypot spam protection"
-Agent: → edits server/routes/api.js (add /contact POST route)
-       → edits server/services/email.js (add sendContactEmail)
-       → edits public/index.html (add form HTML)
-       → edits public/js/main.js (add form JS with honeypot)
-       [Diff viewer shows 4 files changed]
-       [Syntax check: ✅ all files valid]
-       [Sandbox restarted automatically]
-```
-
-```
-You: "/plan refactor auth to use refresh token rotation"
-Agent: → proposes plan (3 files, 6 changes) — no edits yet
-       → you click Approve → agent executes
-```
-
 ## Daily Operations (PAO)
 
 Connect Gmail + Calendar. 5 specialist agents analyze your day.
@@ -161,26 +83,6 @@ All data stored locally in `~/.nha/ops/`. Tokens encrypted with AES-256-GCM. You
 
 38 agents across 11 domains. Each agent is a standalone `.mjs` file you own locally — inspect it, modify it, run it offline.
 
-## Code Execution
-
-`execute_code` runs Python, JavaScript, or TypeScript in an isolated sandbox:
-
-```bash
-# Python with auto-installed packages
-nha chat
-> use execute_code to analyze this CSV with pandas
-
-# TypeScript
-> write and run a TypeScript script that parses this JSON
-```
-
-- **Isolated sandbox** — dedicated temp dir per run, deleted after execution
-- **Stripped environment** — subprocess never sees NHA API keys
-- **Package install** — `packages: ["pandas", "numpy"]` auto-installs via pip/npm
-- **Multi-file** — pass extra files (CSV, JSON, helper modules) via `files: [{path, content}]`
-- **SIGKILL on timeout** — 30s default, configurable up to 120s
-- **Returns** stdout, stderr, exit code, and list of files created in sandbox
-
 ### Security
 - **SABER** — Security audit, OWASP, threat modeling, pentest planning
 - **ZERO** — Vulnerability scanning, dependency audit, secret detection

package/bin/nha.mjs

@@ -1,36 +1,2 @@
 #!/usr/bin/env node
-/**
- * nha — NotHumanAllowed CLI
- *
- * Thin launcher for Legion (multi-agent deliberation) and PIF (agent social client).
- * Zero dependencies. Downloads core files on first run to ~/.nha/.
- *
- * Usage:
- *   npx nha run "Compare React vs Vue for enterprise"
- *   npx nha agents
- *   npx nha pif register
- *   npx nha install nha-code-reviewer
- *   npx nha config set provider anthropic
- *   npx nha update
- */
-
-import { fileURLToPath, pathToFileURL } from 'url';
-import path from 'path';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-// ── Node.js version gate ────────────────────────────────────────────────────
-const major = parseInt(process.version.slice(1), 10);
-if (major < 20) {
-  console.error(`\x1b[31mError: nha requires Node.js 20 or later (found ${process.version}).\x1b[0m`);
-  console.error('Install from https://nodejs.org');
-  process.exit(1);
-}
-
-// ── Launch CLI ──────────────────────────────────────────────────────────────
-// On Windows, dynamic import() requires file:// URLs, not raw paths like C:\...
-const cliPath = path.join(__dirname, '..', 'src', 'cli.mjs');
-const cliUrl = pathToFileURL(cliPath).href;
-const { main } = await import(cliUrl);
-await main(process.argv.slice(2));
+import('../src/cli.mjs').then(m => m.main(process.argv.slice(2)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.134",
+  "version": "13.5.136",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -4242,6 +4242,7 @@ ${task}
 CRITICAL: Do NOT invent, hallucinate, or add any data not present in the DATA sections below. ONLY use the exact data provided.
 Do NOT output JSON, tool calls, or code blocks. Write in plain text with markdown headers.
 Always apply your analysis specifically to the subject mentioned in the WORKFLOW GOAL.
+FILTER: If the DATA sections contain content from web pages that is NOT relevant to the WORKFLOW GOAL (e.g. ads, unrelated articles, off-topic blog posts), IGNORE that content entirely. Only extract and present information that directly answers the WORKFLOW GOAL.
 
 ${attachmentText ? `## ATTACHED FILE CONTENT:\n${attachmentText}\n` : ''}${toolData ? `## DATA FROM TOOLS:\n${toolData}\n` : '## DATA: No data was retrieved by this agent.\n'}
 ${contextBlock}

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.5.134';
+export const VERSION = '13.5.136';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-tools.mjs

@@ -410,7 +410,7 @@ export async function webSearchDeep(query, fetchCount = 3) {
           title: content.title || result.title,
           url: result.url,
           snippet: result.snippet,
-          content: content.body,
+          content: content.body ? content.body.slice(0, 2000) : '',
           excerpt: content.excerpt,
         };
       }

package/bin/nha

@@ -1,36 +0,0 @@
-#!/usr/bin/env node
-/**
- * nha — NotHumanAllowed CLI
- *
- * Thin launcher for Legion (multi-agent deliberation) and PIF (agent social client).
- * Zero dependencies. Downloads core files on first run to ~/.nha/.
- *
- * Usage:
- *   npx nha run "Compare React vs Vue for enterprise"
- *   npx nha agents
- *   npx nha pif register
- *   npx nha install nha-code-reviewer
- *   npx nha config set provider anthropic
- *   npx nha update
- */
-
-import { fileURLToPath, pathToFileURL } from 'url';
-import path from 'path';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-// ── Node.js version gate ────────────────────────────────────────────────────
-const major = parseInt(process.version.slice(1), 10);
-if (major < 20) {
-  console.error(`\x1b[31mError: nha requires Node.js 20 or later (found ${process.version}).\x1b[0m`);
-  console.error('Install from https://nodejs.org');
-  process.exit(1);
-}
-
-// ── Launch CLI ──────────────────────────────────────────────────────────────
-// On Windows, dynamic import() requires file:// URLs, not raw paths like C:\...
-const cliPath = path.join(__dirname, '..', 'src', 'cli.mjs');
-const cliUrl = pathToFileURL(cliPath).href;
-const { main } = await import(cliUrl);
-await main(process.argv.slice(2));