nothumanallowed 13.5.71 → 13.5.73

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.71",
+  "version": "13.5.73",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -4278,6 +4278,50 @@ module.exports = { get, set, del, exists };
           fs.mkdirSync(path.join(sandboxDir, 'server', 'services'), { recursive: true });
           fs.writeFileSync(path.join(sandboxDir, 'server', 'services', 'cache.js'), cacheShim, 'utf8');
 
+          // Errors middleware shim — LLM often generates a custom error handler middleware file
+          const errorsShim = `
+// NHA WebCraft Sandbox — middleware/errors shim
+class AppError extends Error { constructor(message, statusCode) { super(message); this.statusCode = statusCode || 500; this.isOperational = true; } }
+function errorHandler(err, req, res, next) {
+  var code = err.statusCode || err.status || 500;
+  var msg = (process.env.NODE_ENV !== 'production' || err.isOperational) ? err.message : 'Internal Server Error';
+  res.status(code).json({ error: msg });
+}
+module.exports = errorHandler;
+module.exports.AppError = AppError;
+module.exports.errorHandler = errorHandler;
+`;
+          fs.mkdirSync(path.join(sandboxDir, 'server', 'middleware'), { recursive: true });
+          if (!fs.existsSync(path.join(sandboxDir, 'server', 'middleware', 'errors.js'))) {
+            fs.writeFileSync(path.join(sandboxDir, 'server', 'middleware', 'errors.js'), errorsShim, 'utf8');
+          }
+
+          // Models shim — LLM often generates require('../models/User') etc. that don't exist
+          // Create a generic User model shim backed by the in-memory DB shim
+          const userModelShim = `
+// NHA WebCraft Sandbox — models/User shim (in-memory, no PostgreSQL)
+const db = require('../db');
+const bcrypt = require('bcryptjs');
+const crypto = require('crypto');
+const User = {
+  findById: async function(id) { var r = await db.query('SELECT * FROM users WHERE id=$1',[id]); return (r.rows||[])[0]||null; },
+  findByEmail: async function(email) { var r = await db.query('SELECT * FROM users WHERE email=$1',[email]); return (r.rows||[])[0]||null; },
+  create: async function(data) {
+    var hash = data.password ? await bcrypt.hash(data.password,12) : data.password_hash||'';
+    var token = crypto.randomBytes(32).toString('hex');
+    var r = await db.query('INSERT INTO users (name,email,password_hash,verification_token) VALUES ($1,$2,$3,$4) RETURNING *',[data.name||data.username||'',data.email,hash,token]);
+    return (r.rows||[])[0]||null;
+  },
+  update: async function(id, data) { var r = await db.query('UPDATE users SET verified=true WHERE id=$1 RETURNING *',[id]); return (r.rows||[])[0]||null; },
+  findByVerificationToken: async function(token) { var r = await db.query('SELECT * FROM users WHERE verification_token=$1',[token]); return (r.rows||[])[0]||null; },
+};
+module.exports = User;
+`;
+          fs.mkdirSync(path.join(sandboxDir, 'server', 'models'), { recursive: true });
+          if (!fs.existsSync(path.join(sandboxDir, 'server', 'models', 'User.js'))) {
+            fs.writeFileSync(path.join(sandboxDir, 'server', 'models', 'User.js'), userModelShim, 'utf8');
+          }
+
           // Validators shim — LLM often generates require('../utils/validators') with helpers that don't exist
           const validatorsShim = `
 // NHA WebCraft Sandbox — utils/validators shim
@@ -4347,6 +4391,15 @@ module.exports = { validateEmail, sanitizeText, validatePassword, validateUserna
             [/require\(['"]\.\.\/\.\.\/config['"]\)/g,                 "{env:process.env}"],
             [/require\(['"]\.\.\/config['"]\)/g,                       "{env:process.env}"],
             [/require\(['"]\.\/config['"]\)/g,                         "{env:process.env}"],
+            // middleware/errors — LLM generates a custom error handler that doesn't exist
+            [/require\(['"]\.\.\/middleware\/errors['"]\)/g,   "require('../middleware/errors')"],
+            [/require\(['"]\.\/middleware\/errors['"]\)/g,     "require('./middleware/errors')"],
+            [/require\(['"]\.\.\/middleware\/errorHandler['"]\)/g, "require('../middleware/errors')"],
+            [/require\(['"]\.\.\/middleware\/error['"]\)/g,    "require('../middleware/errors')"],
+            // models/* — redirect to shims in server/models/
+            [/require\(['"]\.\.\/models\/User['"]\)/g,     "require('../models/User')"],
+            [/require\(['"]\.\/models\/User['"]\)/g,       "require('./models/User')"],
+            [/require\(['"]\.\.\/models\/user['"]\)/g,     "require('../models/User')"],
             // utils/* — LLM generates helpers that don't exist; redirect to shim
             [/require\(['"]\.\.\/utils\/validators['"]\)/g,   "require('../utils/validators')"],
             [/require\(['"]\.\/utils\/validators['"]\)/g,     "require('./utils/validators')"],
@@ -4474,6 +4527,7 @@ module.exports = { validateEmail, sanitizeText, validatePassword, validateUserna
           global._wcSandboxPort = freePort;
           global._wcSandboxDir = sandboxDir;
 
+          let _lastMissingModule = null;
           proc.stdout.on('data', d => { const l = d.toString().trim(); if (l) sendLog('  [server] ' + l); });
           proc.stderr.on('data', d => {
             const raw = d.toString();
@@ -4481,6 +4535,7 @@ module.exports = { validateEmail, sanitizeText, validatePassword, validateUserna
             const modMatch = raw.match(/Cannot find module '([^']+)'/);
             if (modMatch) {
               const missingMod = modMatch[1];
+              _lastMissingModule = missingMod;
               sendLog('  ❌ Modulo mancante: ' + missingMod);
               // Store error for auto-fix agent — will be picked up by frontend
               if (!global._wcAutoFixQueue) global._wcAutoFixQueue = [];
@@ -4502,7 +4557,7 @@ module.exports = { validateEmail, sanitizeText, validatePassword, validateUserna
                 s.on('connect', () => { s.destroy(); resolve(); });
                 s.on('error', () => {
                   s.destroy();
-                  if (++attempts > 20) reject(new Error('Server non risponde dopo 10s'));
+                  if (++attempts > 20) reject(new Error(_lastMissingModule ? "Cannot find module '" + _lastMissingModule + "'" : 'Server non risponde dopo 10s'));
                   else setTimeout(tryConnect, 500);
                 });
             };
@@ -4589,14 +4644,14 @@ module.exports = { validateEmail, sanitizeText, validatePassword, validateUserna
           return;
         }
 
-        // Rate-limit Liara: 3 per 5 minutes
+        // Rate-limit Liara: 6 per 5 minutes (autofix needs headroom for multi-crash startup sequences)
         const isLiara = !config.llm || !config.llm.apiKey || config.llm.provider === 'nha';
         if (isLiara) {
           if (!global._wcAgentCallLog) global._wcAgentCallLog = [];
           const fiveMinAgo = Date.now() - 5 * 60 * 1000;
           global._wcAgentCallLog = global._wcAgentCallLog.filter(t => t > fiveMinAgo);
-          if (global._wcAgentCallLog.length >= 3) {
-            sendJSON(res, 429, { error: 'Auto-fix rate limit: massimo 3 correzioni ogni 5 minuti con Liara. Usa una tua API key per correzioni illimitate.' });
+          if (global._wcAgentCallLog.length >= 6) {
+            sendJSON(res, 429, { error: 'Auto-fix rate limit: massimo 6 correzioni ogni 5 minuti con Liara. Usa una tua API key per correzioni illimitate.' });
             logRequest(method, pathname, 429, Date.now() - start);
             return;
           }

package/src/services/web-ui.mjs

@@ -6565,10 +6565,10 @@ function wcEsc(s){return s?String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').
 
 function renderWebCraft(el) {
   var fileTabsHtml = wcState.generatedFiles.length > 0
-    ? '<div style="display:flex;gap:0;overflow-x:auto;border-bottom:1px solid var(--border);margin-bottom:0;flex-shrink:0">' +
+    ? '<div id="wcFileTabsRow" style="display:flex;gap:0;overflow-x:auto;border-bottom:1px solid var(--border);margin-bottom:0;flex-shrink:0;scrollbar-width:none">' +
         wcState.generatedFiles.map(function(f,i){
           var active = i === wcState.activeFile;
-          return '<button onclick="wcSetFile('+i+')" style="padding:6px 14px;font-size:11px;font-family:var(--mono);font-weight:'+(active?'700':'400')+';background:'+(active?'var(--bg3)':'transparent')+';border:none;border-bottom:2px solid '+(active?'var(--green3)':'transparent')+';color:'+(active?'var(--green)':'var(--dim)')+';cursor:pointer;white-space:nowrap;flex-shrink:0">'+wcEsc(f.name)+'</button>';
+          return '<button id="wcTab'+i+'" onclick="wcSetFile('+i+')" style="padding:6px 14px;font-size:11px;font-family:var(--mono);font-weight:'+(active?'700':'400')+';background:'+(active?'var(--bg3)':'transparent')+';border:none;border-bottom:2px solid '+(active?'var(--green3)':'transparent')+';color:'+(active?'var(--green)':'var(--dim)')+';cursor:pointer;white-space:nowrap;flex-shrink:0">'+wcEsc(f.name)+'</button>';
         }).join('') +
       '</div>'
     : '';
@@ -7366,7 +7366,7 @@ function wcStopAutoFixPoller() {
 async function wcTriggerAutoFix(missingModule) {
   if (wcChatRunning) return;
   var fixMsg = 'AUTO-FIX: Cannot find module ' + missingModule + String.fromCharCode(10) + 'Analizza tutti i file del progetto e correggi il require/import per questo modulo. Se il modulo non esiste, rimuovi il require e implementa la funzionalita con moduli disponibili o Node.js built-in.';
-  wcChat.push({ role: 'user', text: '&#129302; Auto-fix modulo mancante: ' + missingModule });
+  wcChat.push({ role: 'user', text: '\uD83E\uDD16 Auto-fix modulo mancante: ' + missingModule });
   wcChatRunning = true;
   renderWebCraft(document.getElementById('content'));
   wcScrollChatToBottom();
@@ -7495,7 +7495,13 @@ function wcAddField() {
   wcState.authFields.push({name:'field'+wcState.authFields.length,label:'New field',type:'text',required:false});
   renderWebCraft(document.getElementById('content'));
 }
-function wcSetFile(i) { wcState.activeFile = i; renderWebCraft(document.getElementById('content')); }
+function wcSetFile(i) {
+  wcState.activeFile = i;
+  renderWebCraft(document.getElementById('content'));
+  // Scroll active tab into view after render
+  var tab = document.getElementById('wcTab' + i);
+  if (tab) tab.scrollIntoView({ behavior: 'smooth', block: 'nearest', inline: 'nearest' });
+}
 
 // ── WebCraft: Diff Viewer ─────────────────────────────────────────────────────
 function wcDiffLines(before, after) {
@@ -8078,7 +8084,7 @@ async function wcFixSandboxError() {
     String.fromCharCode(10) + String.fromCharCode(10) +
     'STACKTRACE COMPLETO:' + String.fromCharCode(10) + errText;
   // Push as user message so it appears in chat
-  wcChat.push({ role: 'user', text: '&#129302; Correggi errore sandbox' });
+  wcChat.push({ role: 'user', text: '\uD83E\uDD16 Correggi errore sandbox' });
   wcScrollChatToBottom();
   wcChatRunning = true;
   renderWebCraft(document.getElementById('content'));