nothumanallowed 13.5.142 → 13.5.144

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.142",
+  "version": "13.5.144",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -5776,7 +5776,7 @@ Per leggere un file (se hai bisogno di piu contesto):
 
 REGOLE CRITICHE:
 - Spiega SEMPRE in linguaggio naturale cosa stai facendo PRIMA dei blocchi tool
-- ${autofix ? 'MODALITA AUTO-FIX: il file incriminato è già incluso qui sotto. Riscrivilo COMPLETAMENTE con "write" — è più affidabile di "edit" quando il file ha già subito modifiche. REGOLE CRITICHE PER IL FIX: (1) SyntaxError "Unexpected token \';\'" in helmet/CSP = stai usando punto-e-virgola invece di virgola negli oggetti JS — usa VIRGOLE. (2) "Cannot find module \'./redis\'" = rimuovi il require e usa solo i moduli in package.json. (3) NON aggiungere require() di moduli non in package.json. Includi il contenuto COMPLETO del file nel campo "content".' : 'Usa "edit" (old/new) quando possibile, "write" solo per file nuovi o riscritture complete'}
+- ${autofix ? 'MODALITA AUTO-FIX: il file incriminato è già incluso qui sotto. Riscrivilo COMPLETAMENTE con "write" — è più affidabile di "edit" quando il file ha già subito modifiche. REGOLE CRITICHE PER IL FIX: (1) SyntaxError "Unexpected token \';\'" in helmet/CSP = stai usando punto-e-virgola invece di virgola negli oggetti JS — usa VIRGOLE. (2) "Cannot find module \'./redis\'" = rimuovi il require e usa solo i moduli in package.json. (3) NON aggiungere require() di moduli non in package.json. (4) SyntaxError "Unexpected identifier" con nomi spezzati tipo "create Transport" o "SMTP _HOST" o "trans porter" = c\'è uno SPAZIO nel mezzo di un nome di variabile/metodo/property — unisci le parole: createTransport, SMTP_HOST, transporter. (5) "nodemailer.createTransporter is not a function" = il metodo corretto di nodemailer e\' createTransport (senza r finale). Includi il contenuto COMPLETO del file nel campo "content".' : 'Usa "edit" (old/new) quando possibile, "write" solo per file nuovi o riscritture complete'}
 - old_string deve essere ESATTO come appare nel file (copy-paste)
 - Non inventare moduli npm: usa solo quelli in package.json o standard Node.js
 - Dopo ogni fix spiega brevemente cosa hai cambiato e perche
@@ -5834,7 +5834,7 @@ REGOLE CRITICHE:
                     _inTool = false;
                   }
                 }
-              }, { max_tokens: 4096 });
+              }, { max_tokens: 8192 });
               // Flush any remaining visible text after stream ends
               if (!_inTool && _toolBuf.trim()) sendEv({ type: 'text', token: _toolBuf });
             }
@@ -5854,18 +5854,35 @@ REGOLE CRITICHE:
           }
 
           // Parse and execute tool calls from response
-          // Sanitize JSON from LLM: replace literal newlines inside JSON strings with \n
-          // Models often write multiline strings without escaping, which breaks JSON.parse
+          // Sanitize JSON from LLM: replace literal newlines and invalid escape sequences inside JSON strings
+          // Models often write multiline strings without escaping, or use \s \d \w in regex inside content
           const sanitizeToolJson = (raw) => {
-            // Replace literal CR/LF inside JSON string values with escaped versions
-            // Strategy: walk char by char, track if we're inside a JSON string
+            // Valid JSON escape chars after backslash: " \ / b f n r t u
+            const validEscapes = new Set(['"', '\\', '/', 'b', 'f', 'n', 'r', 't', 'u']);
             let out = '';
             let inStr = false;
             let escaped = false;
             for (let ci = 0; ci < raw.length; ci++) {
               const ch = raw[ci];
-              if (escaped) { out += ch; escaped = false; continue; }
-              if (ch === '\\') { out += ch; escaped = true; continue; }
+              if (escaped) {
+                escaped = false;
+                // If this is not a valid JSON escape char, double the backslash
+                if (!validEscapes.has(ch)) {
+                  out += '\\\\' + ch;
+                } else {
+                  out += ch;
+                }
+                continue;
+              }
+              if (ch === '\\') {
+                if (inStr) {
+                  escaped = true;
+                  out += ch;
+                } else {
+                  out += ch;
+                }
+                continue;
+              }
               if (ch === '"') { inStr = !inStr; out += ch; continue; }
               if (inStr && (ch === '\n' || ch === '\r')) {
                 out += ch === '\n' ? '\\n' : '\\r';
@@ -5937,7 +5954,7 @@ REGOLE CRITICHE:
                   const fallbackSys = `Sei un esperto di Node.js. Riscrivi il seguente file correggendo questo problema: ${message.slice(0, 500)}
 Rispondi SOLO con il contenuto completo del file corretto, senza markdown fence, senza spiegazioni.`;
                   const fallbackUser = `FILE: ${toolCall.path}\n\`\`\`\n${content}\n\`\`\``;
-                  const newContent = await callLLM(config, fallbackSys, fallbackUser, { max_tokens: 4096 });
+                  const newContent = await callLLM(config, fallbackSys, fallbackUser, { max_tokens: 8192 });
                   const cleaned = newContent.replace(/^```[\w]*\n?/m, '').replace(/\n?```\s*$/m, '').trim();
                   if (cleaned && cleaned.length > 20) {
                     fs.writeFileSync(fp, cleaned, 'utf8');

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.5.142';
+export const VERSION = '13.5.144';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/tool-executor.mjs

@@ -574,6 +574,41 @@ RULES:
 - API TIP: For npm package info, use fetch_url with the registry API: fetch_url("https://registry.npmjs.org/PACKAGE/latest") for version/description, and fetch_url("https://api.npmjs.org/downloads/point/last-week/PACKAGE") for weekly downloads. These are JSON APIs, much more reliable than scraping the npm website.
 `.trim();
 
+// ── Liara compact system prompt ───────────────────────────────────────────────
+// Used ONLY when provider === 'nha'. Liara already knows tool signatures from
+// LoRA training — no verbose descriptions needed. Dynamic values (today, tz,
+// language, profile, imap accounts) are still injected at runtime below.
+export const LIARA_TOOL_DEFINITIONS = `You are Liara, the NHA personal AI assistant.
+Today: {{TODAY}} | Timezone: {{TIMEZONE}} | Language: {{LANGUAGE}}
+
+When the user's request requires an action, output one or more fenced JSON blocks:
+\`\`\`json
+{"action": "<tool_name>", "params": { ... }}
+\`\`\`
+Multiple blocks allowed for chaining. Include natural text before/between/after blocks.
+Never output a JSON block as a suggestion — every block executes immediately.
+
+AVAILABLE TOOLS:
+gmail_list · gmail_read · gmail_send · gmail_draft · gmail_reply · gmail_mark_read · gmail_mark_unread · gmail_archive · gmail_delete · gmail_send_attach
+imap_accounts · imap_list · imap_read · imap_send · imap_sync · imap_labels · imap_mark_read · imap_reply · imap_thread · imap_search · imap_mark_starred · imap_trash · imap_draft · imap_send_template · imap_bulk_send
+calendar_today · calendar_tomorrow · calendar_upcoming · calendar_week · calendar_create · calendar_move · calendar_find · calendar_update · schedule_meeting · schedule_draft_email
+task_list · task_add · task_done · task_move · task_delete · task_clear · task_edit
+contact_search · contact_add · contact_update · contact_delete
+gtask_list · gtask_add · gtask_complete
+note_add · note_list
+github_issues · github_prs · github_notifications · github_create_issue
+notion_search · notion_page
+slack_channels · slack_messages · slack_send
+web_search · fetch_url
+browser_open · browser_screenshot · browser_click · browser_type · browser_extract · browser_js · browser_wait · browser_scroll · browser_key · browser_close
+cron_add · cron_list · cron_remove
+screen_capture · screen_analyze
+canvas_render · canvas_clear
+collab_send · collab_read
+file_list · file_read · file_write · file_info · file_search
+drive_list · drive_read · drive_upload · drive_update · drive_delete · drive_info · drive_folder · drive_download
+maps_directions · notify_remind · birthdays_upcoming · birthday_add · execute_code`.trim();
+
 // ── Action Parser ────────────────────────────────────────────────────────────
 
 /**
@@ -749,7 +784,13 @@ export async function buildSystemPrompt(persona, personaDescription, config, ini
   };
   const language = config?.language || LANG_MAP[langCode] || 'English';
 
-  let prompt = TOOL_DEFINITIONS
+  // Liara (provider 'nha') uses the compact prompt — tool signatures are
+  // already baked into the LoRA weights, no verbose descriptions needed.
+  // All other providers get the full TOOL_DEFINITIONS with descriptions.
+  const isLiara = config?.llm?.provider === 'nha';
+  const baseDefinitions = isLiara ? LIARA_TOOL_DEFINITIONS : TOOL_DEFINITIONS;
+
+  let prompt = baseDefinitions
     .replace('{{TODAY}}', today)
     .replace('{{TIMEZONE}}', tz)
     .replace(/\{\{LANGUAGE\}\}/g, language);