nothumanallowed 13.5.167 → 13.5.169

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.167",
+  "version": "13.5.169",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -625,6 +625,29 @@ export async function cmdUI(args) {
         return;
       }
 
+      // POST /api/update-npm — install latest nothumanallowed package and restart
+      if (method === 'POST' && pathname === '/api/update-npm') {
+        sendJSON(res, 200, { ok: true, message: 'Update started' });
+        logRequest(method, pathname, 200, Date.now() - start);
+        // Stream npm install output via WebSocket, then restart
+        setTimeout(async () => {
+          const { spawn } = await import('child_process');
+          wsBroadcast({ type: 'npm-update', line: '⟳ Running: npm install -g nothumanallowed@latest\n' });
+          const child = spawn('npm', ['install', '-g', 'nothumanallowed@latest'], { stdio: ['ignore', 'pipe', 'pipe'] });
+          child.stdout.on('data', (d) => wsBroadcast({ type: 'npm-update', line: d.toString() }));
+          child.stderr.on('data', (d) => wsBroadcast({ type: 'npm-update', line: d.toString() }));
+          child.on('close', (code) => {
+            if (code === 0) {
+              wsBroadcast({ type: 'npm-update', line: '\n✅ Update complete! Restarting server...\n', done: true });
+            } else {
+              wsBroadcast({ type: 'npm-update', line: '\n❌ Update failed (exit code ' + code + '). Check output above.\n', error: true });
+            }
+            setTimeout(() => process.exit(0), 1500);
+          });
+        }, 100);
+        return;
+      }
+
       // GET /api/version/check — check npm registry for latest version
       if (method === 'GET' && pathname === '/api/version/check') {
         try {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.5.167';
+export const VERSION = '13.5.169';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/message-responder.mjs

@@ -8,7 +8,8 @@
  * Routing: keyword-based (no LLM call) to save API costs. Falls back to CONDUCTOR.
  */
 
-import { callAgent } from './llm.mjs';
+import { callAgent, callLLM } from './llm.mjs';
+import { buildSystemPrompt, parseActions, executeTool, TOOL_DEFINITIONS } from './tool-executor.mjs';
 import https from 'https';
 import http from 'http';
 import { URL } from 'url';
@@ -109,6 +110,64 @@ function routeMessage(text, useAutoRoute = true) {
   return bestAgent;
 }
 
+// ── Tool-aware agent call (LLM + tool execution loop) ────────────────────────
+
+/**
+ * Call an agent with full tool execution support.
+ * Like chat.mjs but headless — no confirmation prompts, all tools auto-executed.
+ * Returns a human-readable summary of what was done.
+ */
+async function callAgentWithTools(config, agentName, userMessage) {
+  const today = new Date().toISOString().split('T')[0];
+  const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
+  const locale = Intl.DateTimeFormat().resolvedOptions().locale || 'en';
+  const LANG_MAP = { en: 'English', it: 'Italian', es: 'Spanish', fr: 'French', de: 'German', pt: 'Portuguese', nl: 'Dutch', pl: 'Polish', ru: 'Russian', ja: 'Japanese', ko: 'Korean', zh: 'Chinese', ar: 'Arabic', hi: 'Hindi', tr: 'Turkish' };
+  const language = config?.language || LANG_MAP[locale.split('-')[0]] || 'English';
+
+  const systemPrompt = TOOL_DEFINITIONS
+    .replace('{{TODAY}}', today)
+    .replace('{{TIMEZONE}}', tz)
+    .replace(/\{\{LANGUAGE\}\}/g, language);
+
+  // Multi-turn: serialize history as [User]/[Assistant] string (same pattern as chat.mjs)
+  const history = []; // [{role, content}]
+  let finalText = '';
+
+  for (let round = 0; round < 3; round++) {
+    // Build serialized message
+    const parts = history.map(h => (h.role === 'user' ? '[User]' : '[Assistant]') + ' ' + h.content);
+    parts.push('[User] ' + userMessage);
+    if (round > 0) {
+      // Replace last user with tool results continuation
+    }
+    const serialized = parts.join('\n\n');
+
+    const response = await callLLM(config, systemPrompt, serialized);
+    const { textParts, actions } = parseActions(response);
+    finalText = textParts.join('\n').trim();
+
+    if (actions.length === 0) break; // No tools — pure text response
+
+    // Execute all tools and collect results
+    const toolResults = [];
+    for (const { action, params } of actions) {
+      try {
+        const result = await executeTool(action, params, config);
+        const resultStr = typeof result === 'string' ? result : JSON.stringify(result);
+        toolResults.push(`[${action}] ${resultStr}`);
+      } catch (err) {
+        toolResults.push(`[${action}] Error: ${err.message}`);
+      }
+    }
+
+    // Feed results back: append assistant response + tool results as next user turn
+    history.push({ role: 'assistant', content: response });
+    userMessage = 'Tool results:\n' + toolResults.join('\n') + '\n\nNow give the user a concise confirmation in ' + language + '. Do NOT use HERALD format — respond conversationally.';
+  }
+
+  return finalText || 'Done.';
+}
+
 // ── Telegram Bot (Long Polling via native fetch) ─────────────────────────────
 
 class TelegramResponder {
@@ -226,8 +285,11 @@ class TelegramResponder {
       // Send typing indicator
       await this._telegramCall('sendChatAction', { chat_id: chatId, action: 'typing' });
 
-      // Call agent
-      const response = await callAgent(this.config, agent, cleanText);
+      // Tool-capable agents use the full tool execution loop
+      // Pure reasoning/analysis agents use the simple callAgent (no tools)
+      const TOOL_AGENTS = new Set(['herald', 'hermes', 'edi', 'jarvis', 'flux', 'echo', 'mercury', 'pipe', 'navi', 'link', 'prometheus', 'tempest']);
+      const callFn = TOOL_AGENTS.has(agent) ? callAgentWithTools : callAgent;
+      const response = await callFn(this.config, agent, cleanText);
 
       // Truncate if too long for Telegram (4096 char limit)
       const truncated = response.length > 4000
@@ -607,8 +669,10 @@ class DiscordResponder {
       // Send typing indicator
       await this._discordApiCall('POST', `/channels/${channelId}/typing`);
 
-      // Call agent
-      const response = await callAgent(this.config, agent, cleanText);
+      // Tool-capable agents use the full tool execution loop
+      const TOOL_AGENTS = new Set(['herald', 'hermes', 'edi', 'jarvis', 'flux', 'echo', 'mercury', 'pipe', 'navi', 'link', 'prometheus', 'tempest']);
+      const callFn = TOOL_AGENTS.has(agent) ? callAgentWithTools : callAgent;
+      const response = await callFn(this.config, agent, cleanText);
 
       // Discord message limit is 2000 chars
       const truncated = response.length > 1900

package/src/services/web-ui.mjs

@@ -3808,9 +3808,56 @@ function handleDaemonEvent(msg) {
         }
       }
       break;
+
+    case 'npm-update':
+      var upLog = document.getElementById('npmUpdateLog');
+      if (upLog) {
+        upLog.textContent += msg.line || '';
+        upLog.scrollTop = upLog.scrollHeight;
+      }
+      if (msg.done) {
+        var upStatus = document.getElementById('npmUpdateStatus');
+        if (upStatus) upStatus.textContent = 'Restarting server — reconnecting...';
+        // Poll until server is back up, then reload
+        setTimeout(function pollReconnect() {
+          fetch(API + '/api/status').then(function() {
+            window.location.reload();
+          }).catch(function() {
+            setTimeout(pollReconnect, 1500);
+          });
+        }, 3000);
+      }
+      if (msg.error) {
+        var upStatus2 = document.getElementById('npmUpdateStatus');
+        if (upStatus2) { upStatus2.textContent = 'Update failed. See output above.'; upStatus2.style.color = 'var(--red)'; }
+        var upBtn = document.getElementById('npmUpdateCloseBtn');
+        if (upBtn) upBtn.style.display = 'inline-block';
+      }
+      break;
   }
 }
 
+function npmUpdate() {
+  // Show modal
+  var existing = document.getElementById('npmUpdateModal');
+  if (existing) existing.remove();
+  var modal = document.createElement('div');
+  modal.id = 'npmUpdateModal';
+  modal.style.cssText = 'position:fixed;inset:0;background:rgba(0,0,0,.7);z-index:9999;display:flex;align-items:center;justify-content:center';
+  modal.innerHTML =
+    '<div style="background:var(--bg2);border:1px solid var(--border);border-radius:10px;padding:24px;width:540px;max-width:95vw;display:flex;flex-direction:column;gap:12px">' +
+      '<div style="font-size:14px;font-weight:700;color:var(--fg)">&#8593; Updating NotHumanAllowed</div>' +
+      '<div id="npmUpdateStatus" style="font-size:11px;color:var(--dim)">Installing latest version...</div>' +
+      '<pre id="npmUpdateLog" style="background:var(--bg);border:1px solid var(--border);border-radius:6px;padding:12px;font-size:10px;color:var(--green);max-height:300px;overflow-y:auto;white-space:pre-wrap;word-break:break-all;margin:0"></pre>' +
+      '<div style="display:flex;justify-content:flex-end">' +
+        '<button id="npmUpdateCloseBtn" onclick="document.getElementById(String.fromCharCode(110,112,109,85,112,100,97,116,101,77,111,100,97,108)).remove()" style="display:none;padding:6px 16px;background:var(--bg);color:var(--dim);border:1px solid var(--border);border-radius:5px;cursor:pointer;font-size:11px">Close</button>' +
+      '</div>' +
+    '</div>';
+  document.body.appendChild(modal);
+  // Start update
+  apiPost('/api/update-npm', {}).catch(function(){});
+}
+
 // ---- VOICE INPUT (in chat view) ----
 var voiceRecognition = null;
 var voiceRecording = false;
@@ -4164,7 +4211,7 @@ function renderSidebar() {
       \x27<a href="https://nothumanallowed.com/docs/mobile" target="_blank" class="nav-item" style="text-decoration:none"><span class="nav-item__icon">&#128241;</span> \x27+t(\x27nav_mobile\x27)+\x27</a>\x27+
     \x27</div>\x27+
     \x27<div style="padding:12px 16px;margin-top:auto;border-top:1px solid var(--border);font-size:10px;color:var(--dim)">nothumanallowed.com<span style="margin-left:6px;opacity:.5">v${VERSION}</span>\x27+
-    (_updateInfo&&_updateInfo.updateAvailable?\x27<span style="margin-left:8px;background:#f59e0b;color:#000;border-radius:4px;padding:1px 6px;font-weight:700;cursor:pointer" title="Run: npm i -g nothumanallowed to update to v\x27+(_updateInfo.latest||\x27\x27)+\x27">&#8593; Update v\x27+(_updateInfo.latest||\x27\x27)+\x27</span>\x27:\x27\x27)+
+    (_updateInfo&&_updateInfo.updateAvailable?\x27<span onclick="npmUpdate()" style="margin-left:8px;background:#f59e0b;color:#000;border-radius:4px;padding:1px 6px;font-weight:700;cursor:pointer" title="Click to update to v\x27+(_updateInfo.latest||\x27\x27)+\x27">&#8593; Update v\x27+(_updateInfo.latest||\x27\x27)+\x27</span>\x27:\x27\x27)+
     \x27</div>\x27;
 }