nothumanallowed 13.5.69 → 13.5.71

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.69",
+  "version": "13.5.71",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -4086,7 +4086,11 @@ ${completedHeadings ? `## SECTIONS ALREADY WRITTEN (headings only):\n${completed
           'Connection': 'keep-alive',
           'Access-Control-Allow-Origin': '*',
         });
-        const sendLog = (msg) => res.write(`data: ${JSON.stringify({ type: 'log', msg })}\n\n`);
+        const _sbLogLines = [];
+        const sendLog = (msg) => {
+          _sbLogLines.push(msg);
+          res.write(`data: ${JSON.stringify({ type: 'log', msg })}\n\n`);
+        };
         const sendReady = (port, dir) => res.write(`data: ${JSON.stringify({ type: 'ready', port, dir })}\n\n`);
         const sendError = (msg) => res.write(`data: ${JSON.stringify({ type: 'error', msg })}\n\n`);
 
@@ -4274,6 +4278,21 @@ module.exports = { get, set, del, exists };
           fs.mkdirSync(path.join(sandboxDir, 'server', 'services'), { recursive: true });
           fs.writeFileSync(path.join(sandboxDir, 'server', 'services', 'cache.js'), cacheShim, 'utf8');
 
+          // Validators shim — LLM often generates require('../utils/validators') with helpers that don't exist
+          const validatorsShim = `
+// NHA WebCraft Sandbox — utils/validators shim
+function validateEmail(email) { return typeof email === 'string' && /^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$/.test(email.trim()); }
+function sanitizeText(str) { return typeof str === 'string' ? str.replace(/<[^>]*>/g, '').trim() : ''; }
+function validatePassword(pwd) { return typeof pwd === 'string' && pwd.length >= 8; }
+function validateUsername(u) { return typeof u === 'string' && u.length >= 2 && u.length <= 50; }
+function validatePhone(p) { return typeof p === 'string' && /^[+]?[\\d\\s\\-().]{7,20}$/.test(p.trim()); }
+module.exports = { validateEmail, sanitizeText, validatePassword, validateUsername, validatePhone };
+`;
+          fs.mkdirSync(path.join(sandboxDir, 'server', 'utils'), { recursive: true });
+          if (!fs.existsSync(path.join(sandboxDir, 'server', 'utils', 'validators.js'))) {
+            fs.writeFileSync(path.join(sandboxDir, 'server', 'utils', 'validators.js'), validatorsShim, 'utf8');
+          }
+
           // Patch all generated JS files: fix known wrong require() names
           // The LLM often uses 'bcrypt' instead of 'bcryptjs', 'pg' instead of nothing, etc.
           const requireFixes = [
@@ -4293,6 +4312,21 @@ module.exports = { get, set, del, exists };
             [/require\(['"]winston['"]\)/g,                "{createLogger:()=>({info:()=>{},error:()=>{},warn:()=>{}}),transports:{Console:function(){}},format:{combine:()=>{},timestamp:()=>{},json:()=>{}}}"],
             [/require\(['"]morgan['"]\)/g,                 "(()=>(r,s,n)=>n())"],
             [/require\(['"]compression['"]\)/g,            "(()=>(r,s,n)=>n())"],
+            [/require\(['"]express-validator['"]\)/g,      "{body:()=>({isEmail:()=>({normalizeEmail:()=>({run:async()=>{}})}),isLength:()=>({run:async()=>{}}),trim:()=>({escape:()=>({run:async()=>{}})}),notEmpty:()=>({run:async()=>{}})}),validationResult:()=>({isEmpty:()=>true,array:()=>[]})}"],
+            [/require\(['"]validator['"]\)/g,              "{isEmail:(s)=>/^[^@\\s]+@[^@\\s]+[.][^@\\s]+$/.test(s),escape:(s)=>String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;'),trim:(s)=>String(s).trim(),isEmpty:(s)=>!s||!String(s).trim(),isLength:(s,o)=>{ var l=String(s).length; return (!o.min||l>=o.min)&&(!o.max||l<=o.max); }}"],
+            [/require\(['"]handlebars['"]\)/g,             "{compile:(t)=>(d)=>t.replace(/\\{\\{([^}]+)\\}\\}/g,(_,k)=>d[k.trim()]||''),registerHelper:()=>{},registerPartial:()=>{}}"],
+            [/require\(['"]express-handlebars['"]\)/g,     "{engine:()=>(p,o,cb)=>cb(null,'<html>'+JSON.stringify(o)+'</html>')}"],
+            [/require\(['"]hbs['"]\)/g,                    "{registerHelper:()=>{},registerPartial:()=>{}}"],
+            [/require\(['"]ejs['"]\)/g,                    "{render:(t,d)=>t.replace(/<%=([^%]+)%>/g,(_,k)=>d[k.trim()]||''),renderFile:(f,d,o,cb)=>{ if(typeof o==='function'){o(null,'');}else if(cb){cb(null,'');} }}"],
+            [/require\(['"]pug['"]\)/g,                    "{compile:()=>(d)=>'',renderFile:(f,d,cb)=>cb&&cb(null,'')}"],
+            [/require\(['"]nunjucks['"]\)/g,               "{configure:()=>({}),render:(t,d)=>JSON.stringify(d),renderString:(t,d)=>JSON.stringify(d)}"],
+            [/require\(['"]mustache['"]\)/g,               "{render:(t,d)=>t.replace(/\\{\\{([^}]+)\\}\\}/g,(_,k)=>d[k.trim()]||'')}"],
+            [/require\(['"]marked['"]\)/g,                 "{marked:(s)=>s,parse:(s)=>s}"],
+            [/require\(['"]highlight\.js['"]\)/g,          "{highlight:(c)=>({value:c}),highlightAuto:(c)=>({value:c})}"],
+            [/require\(['"]nodemailer['"]\)/g,             "{createTransport:()=>({sendMail:(o,cb)=>{ if(cb)cb(null,{messageId:'sandbox-'+Date.now()}); return Promise.resolve({messageId:'sandbox'}); }})}"],
+            [/require\(['"]stripe['"]\)/g,                 "(()=>({customers:{create:async()=>({id:'cus_sandbox'})},paymentIntents:{create:async()=>({id:'pi_sandbox',client_secret:'sandbox_secret'})}}))()"],
+            [/require\(['"]@sendgrid\/mail['"]\)/g,        "{setApiKey:()=>{},send:async()=>({statusCode:202})}"],
+            [/require\(['"]twilio['"]\)/g,                 "(()=>({messages:{create:async()=>({sid:'SM_sandbox'})}}))()"],
             [/require\(['"]cookie-parser['"]\)/g,          "(()=>(r,s,n)=>{r.cookies=r.cookies||{};n()})"],
             [/require\(['"]passport['"]\)/g,               "{initialize:()=>(r,s,n)=>n(),session:()=>(r,s,n)=>n(),authenticate:()=>(r,s,n)=>n&&n()}"],
             [/require\(['"]express-session['"]\)/g,        "(()=>(r,s,n)=>{r.session=r.session||{};n()})"],
@@ -4313,6 +4347,14 @@ module.exports = { get, set, del, exists };
             [/require\(['"]\.\.\/\.\.\/config['"]\)/g,                 "{env:process.env}"],
             [/require\(['"]\.\.\/config['"]\)/g,                       "{env:process.env}"],
             [/require\(['"]\.\/config['"]\)/g,                         "{env:process.env}"],
+            // utils/* — LLM generates helpers that don't exist; redirect to shim
+            [/require\(['"]\.\.\/utils\/validators['"]\)/g,   "require('../utils/validators')"],
+            [/require\(['"]\.\/utils\/validators['"]\)/g,     "require('./utils/validators')"],
+            [/require\(['"]\.\.\/utils\/validation['"]\)/g,   "require('../utils/validators')"],
+            [/require\(['"]\.\.\/helpers\/validators['"]\)/g, "require('../utils/validators')"],
+            [/require\(['"]\.\.\/utils\/helpers['"]\)/g,      "{sanitize:(s)=>String(s).trim(),escape:(s)=>String(s).replace(/</g,'&lt;')}"],
+            [/require\(['"]\.\.\/utils\/logger['"]\)/g,       "{info:()=>{},error:()=>{},warn:()=>{},debug:()=>{}}"],
+            [/require\(['"]\.\.\/utils\/errors['"]\)/g,       "{AppError:class AppError extends Error{constructor(m,s){super(m);this.statusCode=s||500;}}}"],
             // rateLimiter: LLM sometimes creates a separate file instead of importing from security.js
             [/require\(['"]\.\.\/middleware\/rateLimiter['"]\)/g,      "require('../middleware/security')"],
             [/require\(['"]\.\/middleware\/rateLimiter['"]\)/g,        "require('./middleware/security')"],
@@ -4468,8 +4510,44 @@ module.exports = { get, set, del, exists };
           });
 
           sendLog(`✅ Sandbox pronta!`);
+
+          // Write sandbox log to skills/ so the agent can read it as context
+          try {
+            const _nl = '\n';
+            const logTs = new Date().toISOString().replace('T', ' ').slice(0, 19);
+            const logName = projName + '-' + logTs.replace(/[: ]/g, '-') + '.log';
+            const logsDir = path.join(sandboxDir, 'skills');
+            fs.mkdirSync(logsDir, { recursive: true });
+            // Keep only last 3 log files to avoid bloat
+            const existing = fs.readdirSync(logsDir).filter(f => f.endsWith('.log') && f.startsWith(projName + '-'));
+            existing.sort().slice(0, -2).forEach(f => { try { fs.unlinkSync(path.join(logsDir, f)); } catch(_) {} });
+            const logContent = '# Sandbox Log — ' + projName + _nl + 'Avviato: ' + logTs + _nl + 'Porta: ' + freePort + _nl + _nl + _sbLogLines.join(_nl);
+            fs.writeFileSync(path.join(logsDir, logName), logContent, 'utf8');
+            // Also update _index.json so the UI knows the type
+            const idxPath = path.join(logsDir, '_index.json');
+            let idx = {};
+            try { idx = JSON.parse(fs.readFileSync(idxPath, 'utf8')); } catch(_) {}
+            idx[logName] = 'log';
+            fs.writeFileSync(idxPath, JSON.stringify(idx), 'utf8');
+          } catch(_) {}
+
           sendReady(freePort, sandboxDir);
         } catch (e) {
+          // Write error log too
+          try {
+            const _nl = '\n';
+            const logTs = new Date().toISOString().replace('T', ' ').slice(0, 19);
+            const logName = projName + '-' + logTs.replace(/[: ]/g, '-') + '-ERROR.log';
+            const logsDir = path.join(sandboxDir, 'skills');
+            fs.mkdirSync(logsDir, { recursive: true });
+            const logContent = '# Sandbox Log — ' + projName + ' [ERRORE]' + _nl + 'Avviato: ' + logTs + _nl + _nl + _sbLogLines.join(_nl) + _nl + _nl + '❌ ERRORE: ' + e.message;
+            fs.writeFileSync(path.join(logsDir, logName), logContent, 'utf8');
+            const idxPath = path.join(logsDir, '_index.json');
+            let idx = {};
+            try { idx = JSON.parse(fs.readFileSync(idxPath, 'utf8')); } catch(_) {}
+            idx[logName] = 'log';
+            fs.writeFileSync(idxPath, JSON.stringify(idx), 'utf8');
+          } catch(_) {}
           sendError(e.message);
         }
         res.end();
@@ -4548,7 +4626,7 @@ module.exports = { get, set, del, exists };
             let typeIndex = {};
             if (fs.existsSync(indexPath)) { try { typeIndex = JSON.parse(fs.readFileSync(indexPath, 'utf8')); } catch(_) {} }
             const defaultType = (n) => n === 'memory.md' ? 'memory' : n === 'liara.md' ? 'provider' : 'skill';
-            const sections = { memory: [], provider: [], skill: [] };
+            const sections = { memory: [], provider: [], skill: [], log: [] };
             for (const fname of fs.readdirSync(skillsDir)) {
               if (!fname.endsWith('.md')) continue;
               try {
@@ -4563,6 +4641,7 @@ module.exports = { get, set, del, exists };
             if (sections.memory.length) parts.push('MEMORIA PROGETTO:\n' + sections.memory.join('\n\n'));
             if (sections.provider.length) parts.push('ISTRUZIONI MODELLO AI:\n' + sections.provider.join('\n\n'));
             if (sections.skill.length) parts.push('SKILLS & PATTERN:\n' + sections.skill.join('\n\n'));
+            if (sections.log && sections.log.length) parts.push('LOG AVVIO SANDBOX (ultimo):\n' + sections.log[sections.log.length - 1]);
             if (parts.length) skillsContext = '\n' + parts.join('\n\n') + '\n';
           }
 

package/src/services/web-ui.mjs

@@ -6727,11 +6727,11 @@ function wcOpenSandbox() { if (wcState.sandbox.port) window.open('http://127.0.0
 // ── WebCraft Context Files (Skills / Memory / Provider) ───────────────────────
 
 function wcFileTypeIcon(type) {
-  return type === 'memory' ? '🧠' : type === 'provider' ? '🤖' : '📋';
+  return type === 'memory' ? '🧠' : type === 'provider' ? '🤖' : type === 'log' ? '📄' : '📋';
 }
 function wcFileTypeBadge(type) {
-  var colors = { memory: '#7c5cbf', provider: '#2a7fff', skill: '#1a7a4a' };
-  var labels = { memory: 'memory', provider: 'provider', skill: 'skill' };
+  var colors = { memory: '#7c5cbf', provider: '#2a7fff', skill: '#1a7a4a', log: '#555' };
+  var labels = { memory: 'memory', provider: 'provider', skill: 'skill', log: 'log' };
   return '<span style="font-size:9px;padding:1px 5px;border-radius:3px;background:' + (colors[type]||'#444') + ';color:#fff;margin-left:4px;flex-shrink:0">' + (labels[type]||type) + '</span>';
 }
 
@@ -6756,14 +6756,16 @@ function wcSkillsPanelHtml() {
   // Can add new skill only (memory + provider are singletons already in defaults)
   var rows = wcSkills.map(function(s, si) {
     var isSingleton = s.type === 'memory' || s.type === 'provider';
+    var isLog = s.type === 'log';
     var isEmpty = !s.content || s.content.trim() === '';
     return '<div style="display:flex;align-items:center;gap:4px;padding:5px 0;border-bottom:1px solid var(--border)">' +
       '<span style="font-size:13px;flex-shrink:0">' + wcFileTypeIcon(s.type) + '</span>' +
-      '<span style="font-size:11px;color:var(--text);flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">' + wcEsc(s.name) + '</span>' +
+      '<span style="font-size:11px;color:'+(isLog?'var(--dim)':'var(--text)')+';flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap" title="'+wcEsc(s.name)+'">' + wcEsc(s.name) + '</span>' +
       wcFileTypeBadge(s.type) +
-      (isEmpty ? '<span title="Vuoto" style="font-size:9px;color:#e09020;flex-shrink:0">&#9888;</span>' : '') +
-      '<button onclick="wcOpenSkill('+si+')" title="Modifica" style="background:none;border:none;color:var(--dim);cursor:pointer;font-size:12px;padding:2px 4px;flex-shrink:0">&#9998;</button>' +
-      (!isSingleton ? '<button onclick="wcClearSkill('+si+')" title="Svuota" style="background:none;border:none;color:var(--dim);cursor:pointer;font-size:11px;padding:2px 4px;flex-shrink:0">&#128465;</button>' : '') +
+      (!isLog && isEmpty ? '<span title="Vuoto" style="font-size:9px;color:#e09020;flex-shrink:0">&#9888;</span>' : '') +
+      '<button onclick="wcOpenSkill('+si+')" title="'+(isLog?'Visualizza log':'Modifica')+'" style="background:none;border:none;color:var(--dim);cursor:pointer;font-size:12px;padding:2px 4px;flex-shrink:0">'+(isLog?'&#128065;':'&#9998;')+'</button>' +
+      (!isSingleton && !isLog ? '<button onclick="wcClearSkill('+si+')" title="Svuota" style="background:none;border:none;color:var(--dim);cursor:pointer;font-size:11px;padding:2px 4px;flex-shrink:0">&#128465;</button>' : '') +
+      (isLog ? '<button onclick="wcDeleteSkill('+si+')" title="Elimina log" style="background:none;border:none;color:var(--dim);cursor:pointer;font-size:11px;padding:2px 4px;flex-shrink:0">&#128465;</button>' : '') +
     '</div>';
   }).join('');
   return '<div style="background:var(--bg2);border:1px solid var(--border);border-radius:10px;padding:14px">' +