nothumanallowed 13.5.48 → 13.5.50

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.48",
+  "version": "13.5.50",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -4115,7 +4115,47 @@ module.exports = { get, set, del, exists };
           fs.mkdirSync(path.join(sandboxDir, 'server', 'services'), { recursive: true });
           fs.writeFileSync(path.join(sandboxDir, 'server', 'services', 'cache.js'), cacheShim, 'utf8');
 
-          sendLog('🔧 Shim iniettati: DB (in-memory), Sentinel WAF, Cache');
+          // Patch all generated JS files: fix known wrong require() names
+          // The LLM often uses 'bcrypt' instead of 'bcryptjs', 'pg' instead of nothing, etc.
+          const requireFixes = [
+            [/require\(['"]bcrypt['"]\)/g,                 "require('bcryptjs')"],
+            [/require\(['"]node-postgres['"]\)/g,          "require('./db')"],
+            [/require\(['"]pg['"]\)/g,                     "require('./db')"],
+            [/require\(['"]ioredis['"]\)/g,                "require('../services/cache')"],
+            [/require\(['"]redis['"]\)/g,                  "require('../services/cache')"],
+            [/require\(['"]ip['"]\)/g,                     "({address:()=>'127.0.0.1',toLong:()=>0})"],
+            [/require\(['"]express-async-errors['"]\)/g,   "{}"],
+            [/require\(['"]multer['"]\)/g,                 "({single:()=>(r,s,n)=>n(),array:()=>(r,s,n)=>n(),memoryStorage:()=>({})})"],
+            [/require\(['"]sharp['"]\)/g,                  "({})"],
+            [/require\(['"]uuid['"]\)/g,                   "{v4:()=>Math.random().toString(36).slice(2)}"],
+            [/require\(['"]nanoid['"]\)/g,                 "{nanoid:()=>Math.random().toString(36).slice(2)}"],
+            [/require\(['"]joi['"]\)/g,                    "{object:()=>({keys:()=>({validate:()=>({error:null})})})}"],
+            [/require\(['"]zod['"]\)/g,                    "{z:{object:()=>({parse:(x)=>x}),string:()=>({min:()=>({max:()=>({email:()=>({optional:()=>({})})})})})}"],
+            [/require\(['"]winston['"]\)/g,                "{createLogger:()=>({info:()=>{},error:()=>{},warn:()=>{}}),transports:{Console:function(){}},format:{combine:()=>{},timestamp:()=>{},json:()=>{}}}"],
+            [/require\(['"]morgan['"]\)/g,                 "(()=>(r,s,n)=>n())"],
+            [/require\(['"]compression['"]\)/g,            "(()=>(r,s,n)=>n())"],
+            [/require\(['"]cookie-parser['"]\)/g,          "(()=>(r,s,n)=>{r.cookies=r.cookies||{};n()})"],
+            [/require\(['"]passport['"]\)/g,               "{initialize:()=>(r,s,n)=>n(),session:()=>(r,s,n)=>n(),authenticate:()=>(r,s,n)=>n&&n()}"],
+            [/require\(['"]express-session['"]\)/g,        "(()=>(r,s,n)=>{r.session=r.session||{};n()})"],
+            [/require\(['"]connect-flash['"]\)/g,          "(()=>(r,s,n)=>n())"],
+          ];
+          function patchJsFiles(dir) {
+            if (!fs.existsSync(dir)) return;
+            for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+              const full = path.join(dir, entry.name);
+              if (entry.isDirectory()) { patchJsFiles(full); continue; }
+              if (!entry.name.endsWith('.js')) continue;
+              let src = fs.readFileSync(full, 'utf8');
+              let changed = false;
+              for (const [pat, rep] of requireFixes) {
+                const next = src.replace(pat, rep);
+                if (next !== src) { src = next; changed = true; }
+              }
+              if (changed) fs.writeFileSync(full, src, 'utf8');
+            }
+          }
+          patchJsFiles(path.join(sandboxDir, 'server'));
+          sendLog('🔧 Shim iniettati: DB (in-memory), Sentinel WAF, Cache — require() patchati');
 
           // Patch package.json to remove pg, add only what's needed
           const pkgPath = path.join(sandboxDir, 'package.json');
@@ -4198,7 +4238,20 @@ module.exports = { get, set, del, exists };
           global._wcSandboxDir = sandboxDir;
 
           proc.stdout.on('data', d => { const l = d.toString().trim(); if (l) sendLog('  [server] ' + l); });
-          proc.stderr.on('data', d => { const l = d.toString().trim(); if (l) sendLog('  [server] ' + l); });
+          proc.stderr.on('data', d => {
+            const raw = d.toString();
+            // Extract meaningful error: MODULE_NOT_FOUND
+            const modMatch = raw.match(/Cannot find module '([^']+)'/);
+            if (modMatch) {
+              sendLog('  ❌ Modulo mancante: ' + modMatch[1]);
+              sendLog('  → Questo modulo non è supportato in sandbox. Contatta il supporto NHA.');
+              return;
+            }
+            // Skip node internals noise
+            const l = raw.trim();
+            if (!l || l.startsWith('at ') || l.startsWith('(node:') || l === '^') return;
+            sendLog('  [server] ' + l);
+          });
 
           // Wait for server to be ready (max 10s)
           await new Promise((resolve, reject) => {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.5.48';
+export const VERSION = '13.5.50';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -6245,6 +6245,7 @@ var wcState = {
 var wcRightTab = 'files';
 var wcMainTab = 'new';     // 'new' | 'projects'
 var wcProjectsList = [];   // cached list from server
+var wcSandboxExpanded = {};  // { phaseKey: true/false }
 
 function wcEsc(s){return s?String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;'):''}
 
@@ -6375,6 +6376,8 @@ function wcPickExample(i) {
 function wcTabFiles() { wcRightTab = 'files'; renderWebCraft(document.getElementById('content')); }
 function wcTabPreview() { wcRightTab = 'preview'; renderWebCraft(document.getElementById('content')); }
 function wcOpenSandbox() { if (wcState.sandbox.port) window.open('http://127.0.0.1:' + wcState.sandbox.port, '_blank'); }
+var _wcPhaseKeys = ['files','shims','pkg','env','deps','install','start'];
+function wcTogglePhase(idx) { var k = _wcPhaseKeys[idx]; if (k) { wcSandboxExpanded[k] = !wcSandboxExpanded[k]; renderWebCraft(document.getElementById('content')); } }
 
 function wcMainTabNew() { wcMainTab = 'new'; renderWebCraft(document.getElementById('content')); }
 function wcMainTabProjects() {
@@ -6640,30 +6643,49 @@ function wcSandboxPanelHtml() {
   var statusColor = { done:'var(--green)', active:'var(--amber)', pending:'var(--dim)', error:'var(--red)' };
   var statusIcon  = { done:'&#10003;', active:'&#9203;', pending:'&#9675;', error:'&#10060;' };
 
-  var phasesHtml = phases.map(function(ph){
+  var phasesHtml = phases.map(function(ph, phi){
     var st = phaseStatus(ph.key);
     var lines = byPhase[ph.key] || [];
-    // Filter noise: skip npm audit/funding lines
     var clean = lines.filter(function(l){ return l.indexOf('npm fund') === -1 && l.indexOf('run ') === -1 && l.indexOf('npm audit') === -1; });
-    // Collapse file list: show count instead of every file
-    var detail = '';
-    if (ph.key === 'files' && clean.length > 2) {
-      var count = clean.filter(function(l){ return l.indexOf('✓') !== -1; }).length;
-      detail = count ? '<div style="font-size:10px;color:var(--dim);margin-top:2px">'+count+' file scritti</div>' : '';
-    } else if (ph.key === 'deps' && clean.length > 2) {
-      var depCount = clean.filter(function(l){ return l.indexOf('•') !== -1; }).length;
-      detail = depCount ? '<div style="font-size:10px;color:var(--dim);margin-top:2px">'+depCount+' dipendenze</div>' : '';
+    var isOpen = !!wcSandboxExpanded[ph.key];
+    var hasContent = clean.length > 0;
+
+    // Summary line (always visible)
+    var summary = '';
+    if (ph.key === 'files') {
+      var cnt = clean.filter(function(l){ return l.indexOf('✓') !== -1; }).length;
+      summary = cnt ? cnt + ' file scritti' : '';
+    } else if (ph.key === 'deps') {
+      var dcnt = clean.filter(function(l){ return l.indexOf('•') !== -1; }).length;
+      summary = dcnt ? dcnt + ' dipendenze' : '';
     } else if (clean.length > 0) {
-      var shown = clean.filter(function(l){ return l.trim() && l.indexOf('Percorso:') === -1; }).slice(-2);
-      detail = shown.map(function(l){ return '<div style="font-size:10px;font-family:var(--mono);color:var(--dim);margin-top:2px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis">'+wcEsc(l.trim())+'</div>'; }).join('');
+      var last = clean.filter(function(l){ return l.trim(); }).slice(-1)[0] || '';
+      summary = wcEsc(last.trim().slice(0, 60));
     }
-    return '<div style="display:flex;gap:10px;align-items:flex-start;padding:8px 12px;border-bottom:1px solid var(--border)">' +
-      '<span style="font-size:13px;flex-shrink:0">'+ph.icon+'</span>' +
-      '<div style="flex:1;min-width:0">' +
-        '<div style="font-size:11px;font-weight:600;color:'+(st==='pending'?'var(--dim)':'var(--text)')+'">'+ph.label+'</div>' +
-        detail +
+
+    // Expanded detail — all lines
+    var expandedHtml = '';
+    if (isOpen && hasContent) {
+      expandedHtml = '<div style="margin-top:6px;padding:8px;background:var(--bg);border-radius:6px;max-height:180px;overflow-y:auto">' +
+        clean.map(function(l){
+          var col = l.indexOf('❌') !== -1 || l.indexOf('Error') !== -1 ? 'var(--red)' : l.indexOf('✓') !== -1 || l.indexOf('✅') !== -1 ? 'var(--green)' : 'var(--dim)';
+          return '<div style="font-size:10px;font-family:var(--mono);color:'+col+';line-height:1.6;white-space:pre-wrap;word-break:break-all">'+wcEsc(l)+'</div>';
+        }).join('') +
+      '</div>';
+    }
+
+    var clickable = hasContent && st !== 'pending';
+    return '<div style="border-bottom:1px solid var(--border)">' +
+      '<div onclick="'+(clickable?'wcTogglePhase('+phi+')':'')+'" style="display:flex;gap:10px;align-items:center;padding:9px 12px;cursor:'+(clickable?'pointer':'default')+'">' +
+        '<span style="font-size:13px;flex-shrink:0">'+ph.icon+'</span>' +
+        '<div style="flex:1;min-width:0">' +
+          '<div style="font-size:11px;font-weight:600;color:'+(st==='pending'?'var(--dim)':'var(--text)')+'">'+ph.label+'</div>' +
+          (summary && !isOpen ? '<div style="font-size:10px;color:var(--dim);margin-top:1px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis">'+summary+'</div>' : '') +
+        '</div>' +
+        (clickable ? '<span style="font-size:10px;color:var(--dim);flex-shrink:0">'+(isOpen?'&#9650;':'&#9660;')+'</span>' : '') +
+        '<span style="font-size:13px;color:'+statusColor[st]+';flex-shrink:0;margin-left:4px">'+statusIcon[st]+'</span>' +
       '</div>' +
-      '<span style="font-size:13px;color:'+statusColor[st]+';flex-shrink:0">'+statusIcon[st]+'</span>' +
+      (isOpen ? '<div style="padding:0 12px 10px">' + expandedHtml + '</div>' : '') +
     '</div>';
   }).join('');