nothumanallowed 13.5.135 → 13.5.136

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Nicola Cucurachi
+Copyright (c) 2026 NotHumanAllowed
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,6 +1,6 @@
 # NotHumanAllowed
 
-**38 specialized AI agents, 80 tools, Studio visual workflows, WebCraft full-stack builder — all local, all free.** Security auditors, code architects, data analysts, DevOps engineers, technical writers — each with deep domain expertise. Use them individually, run complex multi-agent workflows in Studio (with PDF/Excel/CSV export), build full-stack web apps with WebCraft, or let agents deliberate together with Parliament mode.
+**38 specialized AI agents, 80 tools, Studio visual workflows — all local, all free.** Security auditors, code architects, data analysts, DevOps engineers, technical writers — each with deep domain expertise. Use them individually, run complex multi-agent workflows in Studio, or let them deliberate together.
 
 ## Quick Start
 
@@ -36,87 +36,9 @@ EmailAgent → WebSearchAgent → WriterAgent
 
 - **No configuration** — works with any LLM provider including Liara (free, no API key)
 - **Live canvas** — see each agent activate, stream output, and hand off to the next
-- **HTML dashboard** — canvas generates a downloadable visual report (HTML + PDF)
-- **Parliament mode** — enable for 2+ specialist agents to cross-read and deliberate: R1 (independent), R2 (agents read each other), R3 (HERALD mediation), convergence score
+- **2–5 step workflows** — context flows automatically between steps
 - Open `nha ui` → click **Studio** in the sidebar
 
-### Studio Export
-
-When a workflow completes, Studio provides three export formats:
-
-- **PDF** — full structured report with all agent outputs, typography, token counters
-- **Excel (XLSX)** — professional multi-sheet workbook via SheetJS: one sheet per agent, auto-detected numeric columns with formatting, alternating row colors, freeze panes, auto-column widths, index sheet with token summary. Data tables are extracted from Markdown output automatically.
-- **CSV** — all Markdown tables from the report merged into a single file
-
-Export buttons appear in the result panel and in the toolbar after each run.
-
----
-
-## WebCraft — Full-Stack Web Apps from a Chat
-
-WebCraft is a full-stack web app builder embedded in `nha ui`. Describe what you want in plain language — WebCraft generates a complete project with Express.js backend, PostgreSQL schema, JWT auth, email verification, security middleware, and a styled frontend. Everything runs locally with a live sandbox.
-
-```
-Open nha ui → click WebCraft in the sidebar
-```
-
-### How it works
-
-1. **Describe your project** in the chat (or pick an example: MySaaS, MyShop, MyBlog, MyPortfolio...)
-2. **WebCraft generates** all files: `server/`, `public/`, `db/migrations/`, `.env.example`, `package.json`, nginx config
-3. **Click ▶ Sandbox** — runs `npm install && node server/index.js` in an isolated process, live on a local port
-4. **Chat with the agent** to modify, fix, or extend anything — the agent edits files directly on disk, you see diffs in real time
-
-### WebCraft Agent
-
-An AI assistant permanently available in the chat panel. Powered by Liara (Qwen3 32B, free) or your own API key.
-
-**What it can do:**
-- Edit files surgically (old → new string replace) or rewrite them completely
-- Read any project file for context
-- Auto-fix `MODULE_NOT_FOUND` and common require() path errors
-- Restart the sandbox after fixes
-- Process attached screenshots or PDFs (vision) to debug visual issues
-
-**Context files** (created automatically for every project, editable via sidebar):
-| File | Type | Purpose |
-|---|---|---|
-| `skills/memory.md` | memory | Architecture decisions, stack choices, developer preferences |
-| `skills/liara.md` | provider | Calibrate AI tone, code style, constraints |
-| `skills/skills.md` | skill | Reusable patterns, snippets, API integrations |
-
-Add more skill files (unlimited) for specific integrations (Stripe, email templates, etc.).
-
-### Developer Tools (sidebar toolbar)
-
-| Tool | Description |
-|---|---|
-| **Diff viewer** | After every agent edit, see before/after for each changed file — color-coded, collapsible |
-| **Syntax check** ✅ | Runs `node --check` on all JS files, reports errors instantly |
-| **Search** 🔍 | Grep across all project files — click a result to jump to that file |
-| **Snapshot** 💾 | Save a full point-in-time backup of all files. Restore any snapshot with one click |
-| **Plan mode** | Type `/plan your request` — agent proposes a plan first, you approve before any file is touched |
-| **Auto-fix** | Sandbox errors (MODULE_NOT_FOUND etc.) trigger automatic Liara fix attempts (3 free, unlimited with own key) |
-
-### Example session
-
-```
-You: "Add a contact form with SMTP email and honeypot spam protection"
-Agent: → edits server/routes/api.js (add /contact POST route)
-       → edits server/services/email.js (add sendContactEmail)
-       → edits public/index.html (add form HTML)
-       → edits public/js/main.js (add form JS with honeypot)
-       [Diff viewer shows 4 files changed]
-       [Syntax check: ✅ all files valid]
-       [Sandbox restarted automatically]
-```
-
-```
-You: "/plan refactor auth to use refresh token rotation"
-Agent: → proposes plan (3 files, 6 changes) — no edits yet
-       → you click Approve → agent executes
-```
-
 ## Daily Operations (PAO)
 
 Connect Gmail + Calendar. 5 specialist agents analyze your day.
@@ -161,26 +83,6 @@ All data stored locally in `~/.nha/ops/`. Tokens encrypted with AES-256-GCM. You
 
 38 agents across 11 domains. Each agent is a standalone `.mjs` file you own locally — inspect it, modify it, run it offline.
 
-## Code Execution
-
-`execute_code` runs Python, JavaScript, or TypeScript in an isolated sandbox:
-
-```bash
-# Python with auto-installed packages
-nha chat
-> use execute_code to analyze this CSV with pandas
-
-# TypeScript
-> write and run a TypeScript script that parses this JSON
-```
-
-- **Isolated sandbox** — dedicated temp dir per run, deleted after execution
-- **Stripped environment** — subprocess never sees NHA API keys
-- **Package install** — `packages: ["pandas", "numpy"]` auto-installs via pip/npm
-- **Multi-file** — pass extra files (CSV, JSON, helper modules) via `files: [{path, content}]`
-- **SIGKILL on timeout** — 30s default, configurable up to 120s
-- **Returns** stdout, stderr, exit code, and list of files created in sandbox
-
 ### Security
 - **SABER** — Security audit, OWASP, threat modeling, pentest planning
 - **ZERO** — Vulnerability scanning, dependency audit, secret detection

package/bin/nha.mjs

@@ -1,36 +1,2 @@
 #!/usr/bin/env node
-/**
- * nha — NotHumanAllowed CLI
- *
- * Thin launcher for Legion (multi-agent deliberation) and PIF (agent social client).
- * Zero dependencies. Downloads core files on first run to ~/.nha/.
- *
- * Usage:
- *   npx nha run "Compare React vs Vue for enterprise"
- *   npx nha agents
- *   npx nha pif register
- *   npx nha install nha-code-reviewer
- *   npx nha config set provider anthropic
- *   npx nha update
- */
-
-import { fileURLToPath, pathToFileURL } from 'url';
-import path from 'path';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-// ── Node.js version gate ────────────────────────────────────────────────────
-const major = parseInt(process.version.slice(1), 10);
-if (major < 20) {
-  console.error(`\x1b[31mError: nha requires Node.js 20 or later (found ${process.version}).\x1b[0m`);
-  console.error('Install from https://nodejs.org');
-  process.exit(1);
-}
-
-// ── Launch CLI ──────────────────────────────────────────────────────────────
-// On Windows, dynamic import() requires file:// URLs, not raw paths like C:\...
-const cliPath = path.join(__dirname, '..', 'src', 'cli.mjs');
-const cliUrl = pathToFileURL(cliPath).href;
-const { main } = await import(cliUrl);
-await main(process.argv.slice(2));
+import('../src/cli.mjs').then(m => m.main(process.argv.slice(2)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.135",
+  "version": "13.5.136",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.5.135';
+export const VERSION = '13.5.136';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/bin/nha

@@ -1,36 +0,0 @@
-#!/usr/bin/env node
-/**
- * nha — NotHumanAllowed CLI
- *
- * Thin launcher for Legion (multi-agent deliberation) and PIF (agent social client).
- * Zero dependencies. Downloads core files on first run to ~/.nha/.
- *
- * Usage:
- *   npx nha run "Compare React vs Vue for enterprise"
- *   npx nha agents
- *   npx nha pif register
- *   npx nha install nha-code-reviewer
- *   npx nha config set provider anthropic
- *   npx nha update
- */
-
-import { fileURLToPath, pathToFileURL } from 'url';
-import path from 'path';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-// ── Node.js version gate ────────────────────────────────────────────────────
-const major = parseInt(process.version.slice(1), 10);
-if (major < 20) {
-  console.error(`\x1b[31mError: nha requires Node.js 20 or later (found ${process.version}).\x1b[0m`);
-  console.error('Install from https://nodejs.org');
-  process.exit(1);
-}
-
-// ── Launch CLI ──────────────────────────────────────────────────────────────
-// On Windows, dynamic import() requires file:// URLs, not raw paths like C:\...
-const cliPath = path.join(__dirname, '..', 'src', 'cli.mjs');
-const cliUrl = pathToFileURL(cliPath).href;
-const { main } = await import(cliUrl);
-await main(process.argv.slice(2));