nothumanallowed 13.5.49 → 13.5.51

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.49",
+  "version": "13.5.51",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -4118,14 +4118,35 @@ module.exports = { get, set, del, exists };
           // Patch all generated JS files: fix known wrong require() names
           // The LLM often uses 'bcrypt' instead of 'bcryptjs', 'pg' instead of nothing, etc.
           const requireFixes = [
-            [/require\(['"]bcrypt['"]\)/g,           "require('bcryptjs')"],
-            [/require\(['"]node-postgres['"]\)/g,    "require('bcryptjs')"],
-            [/require\(['"]pg['"]\)/g,               "require('./db')"],
-            [/require\(['"]ioredis['"]\)/g,          "require('../services/cache')"],
-            [/require\(['"]redis['"]\)/g,            "require('../services/cache')"],
-            [/require\(['"]ip['"]\)/g,               "({address:()=>'127.0.0.1'})"],
-            [/require\(['"]express-async-errors['"]\)/g, "{}"],
-            [/require\(['"]multer['"]\)/g,           "({single:()=>(r,s,n)=>n(),array:()=>(r,s,n)=>n()})"],
+            [/require\(['"]bcrypt['"]\)/g,                 "require('bcryptjs')"],
+            [/require\(['"]node-postgres['"]\)/g,          "require('./db')"],
+            [/require\(['"]pg['"]\)/g,                     "require('./db')"],
+            [/require\(['"]ioredis['"]\)/g,                "require('../services/cache')"],
+            [/require\(['"]redis['"]\)/g,                  "require('../services/cache')"],
+            [/require\(['"]ip['"]\)/g,                     "({address:()=>'127.0.0.1',toLong:()=>0})"],
+            [/require\(['"]express-async-errors['"]\)/g,   "{}"],
+            [/require\(['"]multer['"]\)/g,                 "({single:()=>(r,s,n)=>n(),array:()=>(r,s,n)=>n(),memoryStorage:()=>({})})"],
+            [/require\(['"]sharp['"]\)/g,                  "({})"],
+            [/require\(['"]uuid['"]\)/g,                   "{v4:()=>Math.random().toString(36).slice(2)}"],
+            [/require\(['"]nanoid['"]\)/g,                 "{nanoid:()=>Math.random().toString(36).slice(2)}"],
+            [/require\(['"]joi['"]\)/g,                    "{object:()=>({keys:()=>({validate:()=>({error:null})})})}"],
+            [/require\(['"]zod['"]\)/g,                    "{z:{object:()=>({parse:(x)=>x}),string:()=>({min:()=>({max:()=>({email:()=>({optional:()=>({})})})})})}"],
+            [/require\(['"]winston['"]\)/g,                "{createLogger:()=>({info:()=>{},error:()=>{},warn:()=>{}}),transports:{Console:function(){}},format:{combine:()=>{},timestamp:()=>{},json:()=>{}}}"],
+            [/require\(['"]morgan['"]\)/g,                 "(()=>(r,s,n)=>n())"],
+            [/require\(['"]compression['"]\)/g,            "(()=>(r,s,n)=>n())"],
+            [/require\(['"]cookie-parser['"]\)/g,          "(()=>(r,s,n)=>{r.cookies=r.cookies||{};n()})"],
+            [/require\(['"]passport['"]\)/g,               "{initialize:()=>(r,s,n)=>n(),session:()=>(r,s,n)=>n(),authenticate:()=>(r,s,n)=>n&&n()}"],
+            [/require\(['"]express-session['"]\)/g,        "(()=>(r,s,n)=>{r.session=r.session||{};n()})"],
+            [/require\(['"]connect-flash['"]\)/g,          "(()=>(r,s,n)=>n())"],
+            // Fix wrong relative paths the LLM generates
+            [/require\(['"]\.\.\/middleware\/securityMiddleware['"]\)/g, "require('../middleware/security')"],
+            [/require\(['"]\.\/middleware\/securityMiddleware['"]\)/g,   "require('./middleware/security')"],
+            [/require\(['"]\.\.\/middleware\/authMiddleware['"]\)/g,     "require('../middleware/validate')"],
+            [/require\(['"]\.\/middleware\/authMiddleware['"]\)/g,       "require('./middleware/validate')"],
+            [/require\(['"]\.\.\/config\/database['"]\)/g,              "require('../db')"],
+            [/require\(['"]\.\/config\/database['"]\)/g,               "require('./db')"],
+            [/require\(['"]\.\.\/config\/db['"]\)/g,                   "require('../db')"],
+            [/require\(['"]\.\/config\/db['"]\)/g,                     "require('./db')"],
           ];
           function patchJsFiles(dir) {
             if (!fs.existsSync(dir)) return;
@@ -4226,7 +4247,20 @@ module.exports = { get, set, del, exists };
           global._wcSandboxDir = sandboxDir;
 
           proc.stdout.on('data', d => { const l = d.toString().trim(); if (l) sendLog('  [server] ' + l); });
-          proc.stderr.on('data', d => { const l = d.toString().trim(); if (l) sendLog('  [server] ' + l); });
+          proc.stderr.on('data', d => {
+            const raw = d.toString();
+            // Extract meaningful error: MODULE_NOT_FOUND
+            const modMatch = raw.match(/Cannot find module '([^']+)'/);
+            if (modMatch) {
+              sendLog('  ❌ Modulo mancante: ' + modMatch[1]);
+              sendLog('  → Questo modulo non è supportato in sandbox. Contatta il supporto NHA.');
+              return;
+            }
+            // Skip node internals noise
+            const l = raw.trim();
+            if (!l || l.startsWith('at ') || l.startsWith('(node:') || l === '^') return;
+            sendLog('  [server] ' + l);
+          });
 
           // Wait for server to be ready (max 10s)
           await new Promise((resolve, reject) => {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.5.49';
+export const VERSION = '13.5.51';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -6376,7 +6376,8 @@ function wcPickExample(i) {
 function wcTabFiles() { wcRightTab = 'files'; renderWebCraft(document.getElementById('content')); }
 function wcTabPreview() { wcRightTab = 'preview'; renderWebCraft(document.getElementById('content')); }
 function wcOpenSandbox() { if (wcState.sandbox.port) window.open('http://127.0.0.1:' + wcState.sandbox.port, '_blank'); }
-function wcTogglePhase(key) { wcSandboxExpanded[key] = !wcSandboxExpanded[key]; renderWebCraft(document.getElementById('content')); }
+var _wcPhaseKeys = ['files','shims','pkg','env','deps','install','start'];
+function wcTogglePhase(idx) { var k = _wcPhaseKeys[idx]; if (k) { wcSandboxExpanded[k] = !wcSandboxExpanded[k]; renderWebCraft(document.getElementById('content')); } }
 
 function wcMainTabNew() { wcMainTab = 'new'; renderWebCraft(document.getElementById('content')); }
 function wcMainTabProjects() {
@@ -6642,7 +6643,7 @@ function wcSandboxPanelHtml() {
   var statusColor = { done:'var(--green)', active:'var(--amber)', pending:'var(--dim)', error:'var(--red)' };
   var statusIcon  = { done:'✓', active:'⏳', pending:'○', error:'❌' };
 
-  var phasesHtml = phases.map(function(ph){
+  var phasesHtml = phases.map(function(ph, phi){
     var st = phaseStatus(ph.key);
     var lines = byPhase[ph.key] || [];
     var clean = lines.filter(function(l){ return l.indexOf('npm fund') === -1 && l.indexOf('run ') === -1 && l.indexOf('npm audit') === -1; });
@@ -6675,7 +6676,7 @@ function wcSandboxPanelHtml() {
 
     var clickable = hasContent && st !== 'pending';
     return '<div style="border-bottom:1px solid var(--border)">' +
-      '<div onclick="'+( clickable ? 'wcTogglePhase('+JSON.stringify(ph.key)+')' : '' )+'" style="display:flex;gap:10px;align-items:center;padding:9px 12px;cursor:'+(clickable?'pointer':'default')+'">' +
+      '<div onclick="'+(clickable?'wcTogglePhase('+phi+')':'')+'" style="display:flex;gap:10px;align-items:center;padding:9px 12px;cursor:'+(clickable?'pointer':'default')+'">' +
         '<span style="font-size:13px;flex-shrink:0">'+ph.icon+'</span>' +
         '<div style="flex:1;min-width:0">' +
           '<div style="font-size:11px;font-weight:600;color:'+(st==='pending'?'var(--dim)':'var(--text)')+'">'+ph.label+'</div>' +
@@ -6688,7 +6689,7 @@ function wcSandboxPanelHtml() {
     '</div>';
   }).join('');
 
-  return '<div style="display:flex;flex-direction:column;flex:1;min-height:0">' +
+  return '<div style="display:flex;flex-direction:column;flex:1;min-height:0;overflow-y:auto">' +
     phasesHtml +
     (sb.error ? '<div style="padding:10px 14px;color:var(--red);font-size:11px;font-family:var(--mono);border-top:1px solid var(--border)">&#10060; '+wcEsc(sb.error)+'</div>' : '') +
   '</div>';