nothumanallowed 13.5.50 → 13.5.51

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.50",
+  "version": "13.5.51",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -4138,6 +4138,15 @@ module.exports = { get, set, del, exists };
             [/require\(['"]passport['"]\)/g,               "{initialize:()=>(r,s,n)=>n(),session:()=>(r,s,n)=>n(),authenticate:()=>(r,s,n)=>n&&n()}"],
             [/require\(['"]express-session['"]\)/g,        "(()=>(r,s,n)=>{r.session=r.session||{};n()})"],
             [/require\(['"]connect-flash['"]\)/g,          "(()=>(r,s,n)=>n())"],
+            // Fix wrong relative paths the LLM generates
+            [/require\(['"]\.\.\/middleware\/securityMiddleware['"]\)/g, "require('../middleware/security')"],
+            [/require\(['"]\.\/middleware\/securityMiddleware['"]\)/g,   "require('./middleware/security')"],
+            [/require\(['"]\.\.\/middleware\/authMiddleware['"]\)/g,     "require('../middleware/validate')"],
+            [/require\(['"]\.\/middleware\/authMiddleware['"]\)/g,       "require('./middleware/validate')"],
+            [/require\(['"]\.\.\/config\/database['"]\)/g,              "require('../db')"],
+            [/require\(['"]\.\/config\/database['"]\)/g,               "require('./db')"],
+            [/require\(['"]\.\.\/config\/db['"]\)/g,                   "require('../db')"],
+            [/require\(['"]\.\/config\/db['"]\)/g,                     "require('./db')"],
           ];
           function patchJsFiles(dir) {
             if (!fs.existsSync(dir)) return;

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.5.50';
+export const VERSION = '13.5.51';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -6689,7 +6689,7 @@ function wcSandboxPanelHtml() {
     '</div>';
   }).join('');
 
-  return '<div style="display:flex;flex-direction:column;flex:1;min-height:0">' +
+  return '<div style="display:flex;flex-direction:column;flex:1;min-height:0;overflow-y:auto">' +
     phasesHtml +
     (sb.error ? '<div style="padding:10px 14px;color:var(--red);font-size:11px;font-family:var(--mono);border-top:1px solid var(--border)">&#10060; '+wcEsc(sb.error)+'</div>' : '') +
   '</div>';