nothumanallowed 13.5.68 → 13.5.69

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.68",
+  "version": "13.5.69",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -4321,11 +4321,12 @@ module.exports = { get, set, del, exists };
             [/require\(['"]\.\.\/middleware\/limiter['"]\)/g,          "require('../middleware/security')"],
             [/require\(['"]\.\/middleware\/limiter['"]\)/g,            "require('./middleware/security')"],
           ];
-          function patchJsFiles(dir) {
+          function patchJsFiles(dir, rootDir) {
             if (!fs.existsSync(dir)) return;
+            const _rootDir = rootDir || dir;
             for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
               const full = path.join(dir, entry.name);
-              if (entry.isDirectory()) { patchJsFiles(full); continue; }
+              if (entry.isDirectory()) { patchJsFiles(full, _rootDir); continue; }
               if (!entry.name.endsWith('.js')) continue;
               let src = fs.readFileSync(full, 'utf8');
               let changed = false;
@@ -4333,10 +4334,22 @@ module.exports = { get, set, del, exists };
                 const next = src.replace(pat, rep);
                 if (next !== src) { src = next; changed = true; }
               }
+              // Context-aware db path fix: if file is in a subdirectory of server/
+              // (e.g. routes/, middleware/, services/) and does require('./db'),
+              // correct to require('../db') since db.js lives in server/
+              const depth = path.relative(_rootDir, dir).split(path.sep).filter(Boolean).length;
+              if (depth > 0) {
+                const prefix = '../'.repeat(depth);
+                const next2 = src.replace(/require\(['"]\.\/db['"]\)/g, "require('" + prefix + "db')");
+                if (next2 !== src) { src = next2; changed = true; }
+                // Also fix ./models/* → ../models/*
+                const next3 = src.replace(/require\(['"]\.\/(models\/[^'"]+)['"]\)/g, "require('../$1')");
+                if (next3 !== src) { src = next3; changed = true; }
+              }
               if (changed) fs.writeFileSync(full, src, 'utf8');
             }
           }
-          patchJsFiles(path.join(sandboxDir, 'server'));
+          patchJsFiles(path.join(sandboxDir, 'server'), path.join(sandboxDir, 'server'));
           sendLog('🔧 Shim iniettati: DB (in-memory), Sentinel WAF, Cache — require() patchati');
 
           // Patch package.json to remove pg, add only what's needed