nothumanallowed 13.5.173 → 13.5.175

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.173",
+  "version": "13.5.175",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -649,24 +649,19 @@ export async function cmdUI(args) {
             if (code === 0) {
               wsBroadcast({ type: 'npm-update', line: '\n✅ Update complete! Restarting server...\n', done: true });
               setTimeout(async () => {
-                // Self-restart: spawn the new nha binary with same args, then exit
-                // Works on Windows/Mac/Linux without PM2
+                // Self-restart: launch new nha ui process, then exit current one
                 try {
-                  const { execPath } = process;
-                  // Find the nha bin: look for it next to the current node executable
-                  // or use `nha` from PATH (npm -g installs it there)
+                  const { exec: execCmd } = await import('child_process');
                   const isWindows = process.platform === 'win32';
-                  const nhaCmd = isWindows ? 'nha.cmd' : 'nha';
-                  const restartArgs = ['ui', '--no-browser', ...(lanMode ? ['--lan'] : []), `--port=${port}`];
-                  const restartChild = spawn(nhaCmd, restartArgs, {
-                    detached: true,
-                    stdio: 'ignore',
-                    shell: isWindows,
-                    env: process.env,
-                  });
-                  restartChild.unref();
+                  const extraArgs = (lanMode ? ' --lan' : '') + (port !== DEFAULT_PORT ? ` --port=${port}` : '');
+                  if (isWindows) {
+                    // start /B launches detached in background on Windows
+                    execCmd(`start /B nha ui --no-browser${extraArgs}`, { shell: true });
+                  } else {
+                    execCmd(`nohup nha ui --no-browser${extraArgs} </dev/null >/dev/null 2>&1 &`);
+                  }
                 } catch (_) {}
-                process.exit(0);
+                setTimeout(() => process.exit(0), 500);
               }, 1500);
             } else {
               wsBroadcast({ type: 'npm-update', line: '\n❌ Update failed (exit code ' + code + '). Check output above.\n', error: true });
@@ -2819,7 +2814,12 @@ export async function cmdUI(args) {
           const browserThumbs = res._browserThumbs || [];
           sendSSE('done', { content: finalResponse, screenshotFiles: ssFiles, browserThumbs, inlineHtml: inlineEmbeds || '' });
         } catch (e) {
-          sendSSE('error', { message: e.message });
+          // SENTINEL blocked — send done with flag so client shows message but does NOT save to history
+          if (e.__sentinel_blocked) {
+            sendSSE('done', { content: e.message, __sentinel_blocked: true, screenshotFiles: [], browserThumbs: [], inlineHtml: '' });
+          } else {
+            sendSSE('error', { message: e.message });
+          }
         }
 
         res.end();

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.5.173';
+export const VERSION = '13.5.175';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/llm.mjs

@@ -563,6 +563,14 @@ export async function callLLMStream(config, systemPrompt, userMessage, onToken,
     }
     // Non-streaming: vLLM returns complete text — no BPE subword splitting issues
     const nhaJson = await nhaRes.json();
+    // SENTINEL blocked — throw special error so caller skips conversation persistence
+    if (nhaJson.__sentinel_blocked) {
+      const blockedMsg = nhaJson.choices?.[0]?.message?.content || 'Message blocked by SENTINEL.';
+      if (onToken) onToken(blockedMsg);
+      const err = new Error(blockedMsg);
+      err.__sentinel_blocked = true;
+      throw err;
+    }
     let fullNhaText = nhaJson.choices?.[0]?.message?.content || '';
     // Strip <think>...</think> blocks
     fullNhaText = fullNhaText.replace(/<think>[\s\S]*?<\/think>/g, '').trim();

package/src/services/web-ui.mjs

@@ -1036,7 +1036,7 @@ function sendChat(){
                 if(data.markers.indexOf('[CANVAS_CLEAR]')!==-1)closeCanvas();
               }
               if(currentEvent==='tool_synthesis'){chatHistory[streamIdx].content='';renderMessages();}
-              if(currentEvent==='done'){endStreaming();if(data.content){chatHistory[streamIdx].content=data.content.replace(/<think>[\\s\\S]*?<\\/think>/g,'').trim();}else{chatHistory[streamIdx].content=chatHistory[streamIdx].content.replace(/<think>[\\s\\S]*?<\\/think>/g,'').trim();}var ssf=data.screenshotFiles||[];for(var fi=0;fi<ssf.length;fi++){chatHistory[streamIdx].content+='\\n![Screenshot](/api/screenshots/'+ssf[fi]+')\\n';}if(data.inlineHtml){chatHistory[streamIdx].inlineHtml=data.inlineHtml;}var bt=data.browserThumbs||[];if(bt.length>0){var cd=getConvCanvasData();for(var bti=0;bti<bt.length;bti++){var exists=cd.browsers.some(function(b){return b.file===bt[bti].file;});if(!exists)cd.browsers.push({file:bt[bti].file,url:bt[bti].url,ts:new Date().toLocaleTimeString()});}browserIdx=cd.browsers.length-1;saveCanvasData();}renderMessages();loadConvList();if(activeConvId){setTimeout(function(){loadConv(activeConvId);},500);}}
+              if(currentEvent==='done'){endStreaming();if(data.__sentinel_blocked){chatHistory.splice(streamIdx-1,2);var sentinelWarn=data.content||'Message blocked by SENTINEL.';var el=document.getElementById('chatMessages');if(el){var warn=document.createElement('div');warn.className='msg msg--assistant';warn.style.cssText='border-left:3px solid #ff9800;margin:8px 0;opacity:0.85';warn.innerHTML='<div class="msg__label">SENTINEL</div><div class="msg__bubble md-body" style="color:#ff9800">'+esc(sentinelWarn)+'</div>';el.appendChild(warn);el.scrollTop=el.scrollHeight;}renderMessages();return;}if(data.content){chatHistory[streamIdx].content=data.content.replace(/<think>[\\s\\S]*?<\\/think>/g,'').trim();}else{chatHistory[streamIdx].content=chatHistory[streamIdx].content.replace(/<think>[\\s\\S]*?<\\/think>/g,'').trim();}var ssf=data.screenshotFiles||[];for(var fi=0;fi<ssf.length;fi++){chatHistory[streamIdx].content+='\\n![Screenshot](/api/screenshots/'+ssf[fi]+')\\n';}if(data.inlineHtml){chatHistory[streamIdx].inlineHtml=data.inlineHtml;}var bt=data.browserThumbs||[];if(bt.length>0){var cd=getConvCanvasData();for(var bti=0;bti<bt.length;bti++){var exists=cd.browsers.some(function(b){return b.file===bt[bti].file;});if(!exists)cd.browsers.push({file:bt[bti].file,url:bt[bti].url,ts:new Date().toLocaleTimeString()});}browserIdx=cd.browsers.length-1;saveCanvasData();}renderMessages();loadConvList();if(activeConvId){setTimeout(function(){loadConv(activeConvId);},500);}}
               if(currentEvent==='error'){endStreaming();chatHistory[streamIdx].content='Error: '+(data.message||'Unknown');renderMessages();}
             }catch(e){}
           }