nothumanallowed 15.1.11 → 15.1.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "15.1.11",
+  "version": "15.1.13",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '15.1.11';
+export const VERSION = '15.1.13';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/message-responder.mjs

@@ -36,6 +36,16 @@ const ROUTING_TABLE = [
       'promemoria', 'ricordami', 'prenotazione', 'evento', 'eventi',
       'disponibilità', 'domani', 'settimana', 'oggi', 'questa settimana',
       'prossima settimana', 'orario', 'orari', 'stamattina', 'stasera',
+      // Calendar action verbs IT/EN — without these, "cancella appuntamento"
+      // falls through to CONDUCTOR which has no calendar context.
+      'cancella', 'cancellare', 'cancellalo', 'cancellali',
+      'elimina', 'eliminare', 'eliminalo', 'eliminali',
+      'rimuovi', 'rimuovere',
+      'sposta', 'spostare', 'sposto',
+      'modifica', 'modificare', 'modificalo',
+      'correggi', 'correggere',
+      'rinomina', 'rinominare',
+      'delete', 'remove', 'move', 'update', 'rename', 'reschedule',
       // Email EN+IT
       'email', 'emails', 'mail', 'inbox', 'unread', 'posta',
       'non lette', 'da leggere', 'controlla', 'controllare',
@@ -201,10 +211,19 @@ function isContinuationMessage(text, lastCtx) {
   // Short messages (≤ 6 words) without clear new-request keywords are likely continuations
   const words = lower.split(/\s+/);
   if (words.length <= 6) {
+    // ONLY truly fresh-topic verbs go here. Action verbs that operate on a
+    // referenced item ("cancella X", "elimina Y", "sposta Z") are NOT fresh
+    // requests — they continue the previous turn. Previously `delete` and
+    // `cancel` were here and broke sticky-mode for Italian users (because
+    // `cancel` is a substring of `cancella`).
     const NEW_REQUEST_KEYWORDS = ['calendario','appuntamento','email','posta','meteo','tempo',
       'crea','aggiungi','cerca','trova','mostra','mandami','dimmi','quanto','quando','dove',
-      'create','add','find','search','show','send','delete','cancel','weather','mail','event'];
-    const hasNewKeyword = NEW_REQUEST_KEYWORDS.some(k => lower.includes(k));
+      'create','add','find','search','show','send','weather','mail','event'];
+    // Use word-boundary matching to avoid false positives (e.g. "cancel" inside "cancella")
+    const hasNewKeyword = NEW_REQUEST_KEYWORDS.some(k => {
+      const re = new RegExp(`\\b${k}\\b`, 'i');
+      return re.test(lower);
+    });
     if (!hasNewKeyword) return true;
   }
 

package/src/services/tool-executor.mjs

@@ -174,7 +174,7 @@ TOOLS:
 
     IMPORTANT: When user says "inserisci appuntamento" or "crea evento" → use calendar_create, NOT calendar_find.
     Extract the summary, date, and time from the user message. If end time is not specified, default to 1 hour after start.
-    The tool RESPONSE will include "(eventId: ABC123)" — REMEMBER this ID. If the user later says "correggi", "modifica", "cambia", "sposta", "elimina" referring to this same event, use calendar_update / calendar_move / calendar_delete with that exact eventId — do NOT create a second event.
+    The tool RESPONSE will include the real eventId in parentheses (a long lowercase alphanumeric Google ID — NEVER invent one). REMEMBER this exact value. If the user later says "correggi", "modifica", "cambia", "sposta", "elimina" referring to this same event, use calendar_update / calendar_move / calendar_delete with that exact eventId — do NOT create a second event. Never use placeholder IDs like "ABC123" or "event_123" — those are illustrative only.
 
 15. calendar_move(eventId: string, newStart: string, newEnd: string)
     Reschedule an event. ALWAYS confirm before moving.
@@ -191,13 +191,13 @@ TOOLS:
     Only include fields that need to change.
 
     HOW TO GET eventId — IN ORDER OF PREFERENCE:
-      1. From your OWN previous tool response in this conversation: when you ran calendar_create earlier, the response said "Event \"X\" created ... (eventId: ABC123)". Use that ABC123 directly. Do NOT search again.
-      2. If step 1 doesn't apply (event was created before this conversation), call calendar_find FIRST to look it up.
+      1. From your OWN previous tool response in this conversation: when you ran calendar_create / calendar_find / calendar_date earlier, the response contained the REAL eventId (a long lowercase alphanumeric Google-issued string). Use that exact value verbatim.
+      2. If step 1 doesn't apply, call calendar_find or calendar_date FIRST to look it up.
+      3. NEVER fabricate an eventId. NEVER copy placeholder strings from this documentation. Real eventIds come from Google Calendar tool responses only.
 
     CRITICAL — "CORREGGI" / "MODIFICA" / "CAMBIA TITOLO" mappings:
-      When the user says "correggi", "modifica", "cambia", "rinomina", "sposta", "aggiorna" referring to the most recent event you just created, you MUST use calendar_update with the eventId from step 1 above.
+      When the user says "correggi", "modifica", "cambia", "rinomina", "sposta", "aggiorna" referring to the most recent event you just created, use calendar_update with the real eventId returned by your previous calendar_create call.
       Do NOT call calendar_create a second time — that would create a DUPLICATE event.
-      Example: you just created event ABC123 ("Visita BMW"). User says "correggi, il titolo è Tagliando BMW" → call calendar_update(eventId: "ABC123", summary: "Tagliando BMW"). Don't create a new event, don't delete-then-create.
 
 19. calendar_delete(eventId: string)
     Delete (permanently remove) a calendar event by its eventId.
@@ -691,20 +691,20 @@ calendar_create(summary, start, end, description?, attendees?, location?)
   - summary = SHORT title (e.g. "Tagliando BMW"). REQUIRED. Do NOT leave empty.
   - description = optional notes only. Do NOT put the title here.
   - start/end = ISO 8601 datetimes. Default end = start + 1 hour.
-  - The tool response includes "(eventId: ABC123)" — REMEMBER it for later updates.
-  Example — user: "fissa tagliando BMW 15 maggio ore 17":
+  - The tool response includes the REAL eventId in parentheses, e.g. "(eventId: <some-google-id>)". Use that exact value verbatim for subsequent operations. **The eventId is a long lowercase alphanumeric string returned by Google — NEVER make one up.**
+  Example — user says "fissa tagliando BMW 15 maggio ore 17":
     {"action":"calendar_create","params":{"summary":"Tagliando BMW","start":"2026-05-15T17:00:00","end":"2026-05-15T18:00:00"}}
 
 calendar_update(eventId, summary?, location?, description?, start?, end?)
   - Use this for "correggi", "modifica", "rinomina", "cambia titolo", "sposta", "aggiorna" referring to an event you JUST created or found.
-  - eventId comes from the previous calendar_create response or calendar_find result. NEVER guess it.
-  - Example — you just created event ABC123. User: "correggi, il titolo è Tagliando BMW":
-    {"action":"calendar_update","params":{"eventId":"ABC123","summary":"Tagliando BMW"}}
+  - eventId MUST come from a real tool response (calendar_create / calendar_find / calendar_date). NEVER invent it.
+  - DO NOT use placeholder strings like "ABC123", "DEF456", "abc123", "event_123" — those are not real eventIds.
+  - If you don't have a real eventId, call calendar_find or calendar_date FIRST. Do not guess.
 
-calendar_delete(eventId)  — Delete an event you have the eventId for. Confirm first.
+calendar_delete(eventId)  — Delete an event you have a REAL eventId for. Same rules as update: never invent, never use placeholders.
 calendar_move(eventId, newStart, newEnd)  — Reschedule.
 calendar_find(query, daysAhead?)  — Search events by name. Returns eventIds. Use ONLY when you don't already have the id.
-calendar_today() / calendar_tomorrow() / calendar_date(date) / calendar_upcoming(hours?) / calendar_week(startDate?) / calendar_month(month?)  — Read-only listings.
+calendar_today() / calendar_tomorrow() / calendar_date(date) / calendar_upcoming(hours?) / calendar_week(startDate?) / calendar_month(month?)  — Read-only listings. **When the user says "elimina gli appuntamenti di [date]", call calendar_date(date) FIRST to get real eventIds, then calendar_delete with each real id.**
 schedule_meeting(clientName, subject, location, durationMinutes, dateFrom, dateTo)  — Find optimal slots considering travel time.
 
 ### Gmail / IMAP
@@ -1532,9 +1532,21 @@ export async function executeTool(action, params, config) {
     }
 
     case 'calendar_update': {
+      let eventId = String(params.eventId || '').trim();
+      if (!eventId) return 'eventId required. Call calendar_find or calendar_date first to get the REAL eventId.';
+
+      // Reject obvious placeholder IDs (model copied from prompt examples)
+      const PLACEHOLDERS = new Set([
+        'abc123', 'def456', 'xyz789', 'event_123', 'event_123456789',
+        '123', '456', 'foo', 'bar', 'baz', 'example', 'placeholder',
+        'eventid', 'event_id', 'id', 'null', 'undefined',
+      ]);
+      if (PLACEHOLDERS.has(eventId.toLowerCase())) {
+        return `"${eventId}" is a placeholder, not a real eventId. Call calendar_find or calendar_date FIRST to get real eventIds.`;
+      }
+
       // Smart eventId resolution: if it looks like a name instead of a Google Calendar ID, search for it
-      let eventId = params.eventId;
-      if (eventId && (eventId.includes(' ') || eventId.length < 10 || /[A-Z]/.test(eventId))) {
+      if (eventId.includes(' ') || eventId.length < 10 || /[A-Z]/.test(eventId)) {
         const from = new Date();
         const to = new Date(from.getTime() + 14 * 86400000);
         const events = await listEvents(config, 'primary', from, to);
@@ -1566,16 +1578,39 @@ export async function executeTool(action, params, config) {
       if (Object.keys(patch).length === 0) {
         return 'No fields to update. Specify at least one of: summary (title), location, description, start, end.';
       }
-      await updateEvent(config, 'primary', eventId, patch);
+      try {
+        await updateEvent(config, 'primary', eventId, patch);
+      } catch (err) {
+        const msg = String(err?.message || err);
+        if (msg.includes('404') || msg.toLowerCase().includes('not found')) {
+          return `eventId "${eventId}" does NOT exist in Google Calendar. The ID looks invented — DO NOT retry with this value. Call calendar_date or calendar_find FIRST to retrieve real eventIds, then call calendar_update with one of those.`;
+        }
+        throw err;
+      }
       const changes = Object.keys(patch).join(', ');
       return `Event updated successfully (changed: ${changes})${newSummary ? `. New title: "${newSummary}"` : ''}${params.location ? `. New location: ${params.location}` : ''}`;
     }
 
     case 'calendar_delete': {
-      if (!params.eventId) return 'eventId required. Call calendar_find first to get the eventId.';
-      // Smart eventId resolution: if it looks like a name instead of a Google Calendar ID, search for it
-      let delEventId = params.eventId;
-      if (delEventId && (delEventId.includes(' ') || delEventId.length < 10 || /[A-Z]/.test(delEventId))) {
+      if (!params.eventId) return 'eventId required. Call calendar_find or calendar_date first to get the REAL eventId.';
+      let delEventId = String(params.eventId).trim();
+
+      // Reject placeholder IDs the model may have copied verbatim from prompt
+      // examples or hallucinated wholesale. These are obvious giveaways — real
+      // Google Calendar eventIds are long lowercase alphanumeric strings, not
+      // dictionary words.
+      const PLACEHOLDER_IDS = new Set([
+        'abc123', 'def456', 'xyz789', 'event_123', 'event_123456789',
+        '123', '456', 'foo', 'bar', 'baz', 'example', 'placeholder',
+        'eventid', 'event_id', 'id', 'null', 'undefined',
+      ]);
+      if (PLACEHOLDER_IDS.has(delEventId.toLowerCase())) {
+        return `"${delEventId}" is a placeholder, not a real eventId. Call calendar_date(YYYY-MM-DD) or calendar_find(query) FIRST to get the real eventIds, then call calendar_delete with one of those values.`;
+      }
+
+      // Branch A — looks like a free-text search query (spaces, caps, very short).
+      // The model passed a NAME instead of an ID — resolve to ID via listEvents.
+      if (delEventId.includes(' ') || delEventId.length < 10 || /[A-Z]/.test(delEventId)) {
         const fromD = new Date();
         const toD = new Date(fromD.getTime() + 60 * 86400000);
         const evts = await listEvents(config, 'primary', fromD, toD);
@@ -1583,11 +1618,39 @@ export async function executeTool(action, params, config) {
         if (m) {
           delEventId = m.id;
         } else {
-          return `Could not find event matching "${params.eventId}" in the next 60 days. Use calendar_find to search first.`;
+          return `Could not find event matching "${params.eventId}" in the next 60 days. Use calendar_find or calendar_date to get the real eventId first.`;
+        }
+      }
+
+      // Branch B — try the delete. If Google returns 404 the ID is invalid
+      // (almost always means the model hallucinated it). Surface this clearly
+      // to the LLM so its next turn doesn't try the same fake ID again.
+      try {
+        await deleteEvent(config, 'primary', delEventId);
+        return `Event ${delEventId} deleted successfully.`;
+      } catch (err) {
+        const msg = String(err?.message || err);
+        const is404 = msg.includes('404') || msg.toLowerCase().includes('not found');
+        if (is404) {
+          // Try to look up real events near the requested date (if user hinted one)
+          const hintDate = params.date || params.day || params.on;
+          let hint = '';
+          if (hintDate) {
+            try {
+              const d = new Date(hintDate + 'T00:00:00');
+              const from = d;
+              const to = new Date(d.getTime() + 86400000);
+              const evts = await listEvents(config, 'primary', from, to);
+              if (evts.length > 0) {
+                hint = `\n\nReal events on ${hintDate} (use these IDs, NOT invented ones):\n` +
+                  evts.map(e => `- [eventId: ${e.id}] ${formatTime(e.start)} — ${e.summary || '(no title)'}`).join('\n');
+              }
+            } catch { /* ignore */ }
+          }
+          return `eventId "${delEventId}" does NOT exist in Google Calendar. Looks like it was invented — DO NOT retry with this ID. Call calendar_date(YYYY-MM-DD) or calendar_find(query) FIRST to get the real eventId, then call calendar_delete with the value you receive.${hint}`;
         }
+        throw err;
       }
-      await deleteEvent(config, 'primary', delEventId);
-      return `Event deleted successfully.`;
     }
 
     // ── Smart Scheduling ──────────────────────────────────────────────────