nothumanallowed 15.1.12 → 15.1.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "15.1.12",
+  "version": "15.1.14",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '15.1.12';
+export const VERSION = '15.1.14';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/message-responder.mjs

@@ -36,6 +36,16 @@ const ROUTING_TABLE = [
       'promemoria', 'ricordami', 'prenotazione', 'evento', 'eventi',
       'disponibilità', 'domani', 'settimana', 'oggi', 'questa settimana',
       'prossima settimana', 'orario', 'orari', 'stamattina', 'stasera',
+      // Calendar action verbs IT/EN — without these, "cancella appuntamento"
+      // falls through to CONDUCTOR which has no calendar context.
+      'cancella', 'cancellare', 'cancellalo', 'cancellali',
+      'elimina', 'eliminare', 'eliminalo', 'eliminali',
+      'rimuovi', 'rimuovere',
+      'sposta', 'spostare', 'sposto',
+      'modifica', 'modificare', 'modificalo',
+      'correggi', 'correggere',
+      'rinomina', 'rinominare',
+      'delete', 'remove', 'move', 'update', 'rename', 'reschedule',
       // Email EN+IT
       'email', 'emails', 'mail', 'inbox', 'unread', 'posta',
       'non lette', 'da leggere', 'controlla', 'controllare',
@@ -201,10 +211,19 @@ function isContinuationMessage(text, lastCtx) {
   // Short messages (≤ 6 words) without clear new-request keywords are likely continuations
   const words = lower.split(/\s+/);
   if (words.length <= 6) {
+    // ONLY truly fresh-topic verbs go here. Action verbs that operate on a
+    // referenced item ("cancella X", "elimina Y", "sposta Z") are NOT fresh
+    // requests — they continue the previous turn. Previously `delete` and
+    // `cancel` were here and broke sticky-mode for Italian users (because
+    // `cancel` is a substring of `cancella`).
     const NEW_REQUEST_KEYWORDS = ['calendario','appuntamento','email','posta','meteo','tempo',
       'crea','aggiungi','cerca','trova','mostra','mandami','dimmi','quanto','quando','dove',
-      'create','add','find','search','show','send','delete','cancel','weather','mail','event'];
-    const hasNewKeyword = NEW_REQUEST_KEYWORDS.some(k => lower.includes(k));
+      'create','add','find','search','show','send','weather','mail','event'];
+    // Use word-boundary matching to avoid false positives (e.g. "cancel" inside "cancella")
+    const hasNewKeyword = NEW_REQUEST_KEYWORDS.some(k => {
+      const re = new RegExp(`\\b${k}\\b`, 'i');
+      return re.test(lower);
+    });
     if (!hasNewKeyword) return true;
   }
 
@@ -301,12 +320,50 @@ async function callAgentWithTools(config, agentName, userMessage, languageOverri
     }
 
     history.push({ role: 'assistant', content: response });
-    userMessage = 'Tool results:\n' + toolResults.join('\n') + '\n\nNow give the user a short, clear confirmation in ' + language + '. Be direct — no preamble, no HERALD format. If an action was completed, say so clearly.';
+    // LANGUAGE enforcement up FRONT — putting it last allows Liara to ignore it.
+    // Repeat the instruction at the top so the model commits to it before reading
+    // the tool results, then again at the bottom for reinforcement.
+    userMessage =
+      `RISPOSTA OBBLIGATORIA IN ${language.toUpperCase()}. Tutta la frase deve essere in ${language}, niente inglese, niente lingue miste.\n\n` +
+      `Tool results:\n${toolResults.join('\n')}\n\n` +
+      `Now give the user a short, clear confirmation. Be direct — no preamble, no HERALD format. ` +
+      `If an action was completed, say so clearly. REMEMBER: reply ONLY in ${language}.`;
+  }
+
+  // Defensive language post-check: small models sometimes drop back to English
+  // even when instructed otherwise (especially after tool execution, where the
+  // English tool-result text biases the continuation). If the final reply is
+  // in a clearly different language than expected, translate it.
+  if (finalText && language && !looksLikeLanguage(finalText, language)) {
+    try {
+      const translatePrompt =
+        `Traduci il seguente messaggio in ${language}. Mantieni lo stesso significato, lo stesso tono, la stessa lunghezza. Restituisci SOLO la traduzione, senza preamboli o note.\n\nMessaggio:\n${finalText}`;
+      const translated = await callLLM(config,
+        `You are a precise translator. Translate the given text into ${language}. Output ONLY the translation, no commentary.`,
+        translatePrompt,
+        { max_tokens: 800 },
+      );
+      const cleaned = (translated || '').trim();
+      if (cleaned && cleaned.length > 0) finalText = cleaned;
+    } catch { /* keep the original if translation fails */ }
   }
 
   return { text: finalText || 'Fatto.', history };
 }
 
+/**
+ * Detect if a text is in the expected language. Used as a defensive check
+ * after the LLM produces the final tool-confirmation reply — small models
+ * sometimes drop back to English even when instructed otherwise.
+ * Returns true if the language seems right, false if a strong mismatch.
+ */
+function looksLikeLanguage(text, expectedLanguage) {
+  if (!text || !expectedLanguage) return true;
+  const detected = detectLanguage(text);
+  if (!detected) return true; // not enough signal, give benefit of the doubt
+  return detected === expectedLanguage;
+}
+
 // ── Telegram Bot (Long Polling via native fetch) ─────────────────────────────
 
 // ── User store for Telegram chat IDs (for broadcast notifications) ──────────

package/src/services/tool-executor.mjs

@@ -165,16 +165,15 @@ TOOLS:
     Use this when the user says: "inserisci", "aggiungi", "crea", "metti", "fissa", "prenota", "add", "create", "schedule", "book".
 
     PARAMETER MEANING (CRITICAL — most common mistake):
-      - summary  = the TITLE of the event (what you'd write on a calendar grid). Short, like "Tagliando BMW", "Riunione Cliente X", "Cena con Marta".
+      - summary  = the TITLE of the event (what you'd write on a calendar grid). Short, derived from what the user said.
       - description = optional NOTES/details. Leave empty unless the user gave extra context that doesn't fit in the title.
       - NEVER put the title in description. NEVER leave summary empty.
 
-    Example — user says "fissa tagliando BMW per il 15 maggio alle 17":
-      { "action": "calendar_create", "params": { "summary": "Tagliando BMW", "start": "2026-05-15T17:00:00", "end": "2026-05-15T18:00:00" } }
+    Always derive summary, date and time from the actual user message — never use literal values from this documentation.
 
     IMPORTANT: When user says "inserisci appuntamento" or "crea evento" → use calendar_create, NOT calendar_find.
     Extract the summary, date, and time from the user message. If end time is not specified, default to 1 hour after start.
-    The tool RESPONSE will include "(eventId: ABC123)" — REMEMBER this ID. If the user later says "correggi", "modifica", "cambia", "sposta", "elimina" referring to this same event, use calendar_update / calendar_move / calendar_delete with that exact eventId — do NOT create a second event.
+    The tool RESPONSE will include the real eventId in parentheses (a long lowercase alphanumeric Google ID — NEVER invent one). REMEMBER this exact value. If the user later says "correggi", "modifica", "cambia", "sposta", "elimina" referring to this same event, use calendar_update / calendar_move / calendar_delete with that exact eventId — do NOT create a second event. Never use placeholder IDs like "ABC123" or "event_123" — those are illustrative only.
 
 15. calendar_move(eventId: string, newStart: string, newEnd: string)
     Reschedule an event. ALWAYS confirm before moving.
@@ -191,13 +190,13 @@ TOOLS:
     Only include fields that need to change.
 
     HOW TO GET eventId — IN ORDER OF PREFERENCE:
-      1. From your OWN previous tool response in this conversation: when you ran calendar_create earlier, the response said "Event \"X\" created ... (eventId: ABC123)". Use that ABC123 directly. Do NOT search again.
-      2. If step 1 doesn't apply (event was created before this conversation), call calendar_find FIRST to look it up.
+      1. From your OWN previous tool response in this conversation: when you ran calendar_create / calendar_find / calendar_date earlier, the response contained the REAL eventId (a long lowercase alphanumeric Google-issued string). Use that exact value verbatim.
+      2. If step 1 doesn't apply, call calendar_find or calendar_date FIRST to look it up.
+      3. NEVER fabricate an eventId. NEVER copy placeholder strings from this documentation. Real eventIds come from Google Calendar tool responses only.
 
     CRITICAL — "CORREGGI" / "MODIFICA" / "CAMBIA TITOLO" mappings:
-      When the user says "correggi", "modifica", "cambia", "rinomina", "sposta", "aggiorna" referring to the most recent event you just created, you MUST use calendar_update with the eventId from step 1 above.
+      When the user says "correggi", "modifica", "cambia", "rinomina", "sposta", "aggiorna" referring to the most recent event you just created, use calendar_update with the real eventId returned by your previous calendar_create call.
       Do NOT call calendar_create a second time — that would create a DUPLICATE event.
-      Example: you just created event ABC123 ("Visita BMW"). User says "correggi, il titolo è Tagliando BMW" → call calendar_update(eventId: "ABC123", summary: "Tagliando BMW"). Don't create a new event, don't delete-then-create.
 
 19. calendar_delete(eventId: string)
     Delete (permanently remove) a calendar event by its eventId.
@@ -667,7 +666,15 @@ RULES:
 // Used ONLY when provider === 'nha'. Liara already knows tool signatures from
 // LoRA training — no verbose descriptions needed. Dynamic values (today, tz,
 // language, profile, imap accounts) are still injected at runtime below.
-export const LIARA_TOOL_DEFINITIONS = `You are Liara, the NHA personal AI assistant.
+export const LIARA_TOOL_DEFINITIONS = `## LANGUAGE — HIGHEST PRIORITY
+
+You MUST write your ENTIRE response in {{LANGUAGE}}. Every sentence, every confirmation, every error message. This overrides everything else. Even when this prompt itself is written in English, your reply to the user must be in {{LANGUAGE}} only. Do NOT mix languages. Do NOT default to English.
+
+If {{LANGUAGE}} is Italian, write only in Italian: "L'appuntamento è stato cancellato." NOT "The event has been deleted." or "Both events have been deleted."
+
+---
+
+You are Liara, the NHA personal AI assistant.
 Today: {{TODAY}} | Timezone: {{TIMEZONE}} | Language: {{LANGUAGE}}
 
 When the user's request requires an action, output one or more fenced JSON blocks:
@@ -688,23 +695,22 @@ Never output a JSON block as a suggestion — every block executes immediately.
 
 ### Calendar
 calendar_create(summary, start, end, description?, attendees?, location?)
-  - summary = SHORT title (e.g. "Tagliando BMW"). REQUIRED. Do NOT leave empty.
+  - summary = SHORT title derived from what the user actually said. REQUIRED. Do NOT leave empty.
   - description = optional notes only. Do NOT put the title here.
   - start/end = ISO 8601 datetimes. Default end = start + 1 hour.
-  - The tool response includes "(eventId: ABC123)" — REMEMBER it for later updates.
-  Example — user: "fissa tagliando BMW 15 maggio ore 17":
-    {"action":"calendar_create","params":{"summary":"Tagliando BMW","start":"2026-05-15T17:00:00","end":"2026-05-15T18:00:00"}}
+  - The tool response includes the REAL eventId. Use that exact value verbatim for any subsequent operation on the same event. The eventId is a long alphanumeric string returned by Google — NEVER fabricate one.
+  - Always derive every parameter value from the user's message, never from this documentation.
 
 calendar_update(eventId, summary?, location?, description?, start?, end?)
   - Use this for "correggi", "modifica", "rinomina", "cambia titolo", "sposta", "aggiorna" referring to an event you JUST created or found.
-  - eventId comes from the previous calendar_create response or calendar_find result. NEVER guess it.
-  - Example — you just created event ABC123. User: "correggi, il titolo è Tagliando BMW":
-    {"action":"calendar_update","params":{"eventId":"ABC123","summary":"Tagliando BMW"}}
+  - eventId MUST come from a real tool response (calendar_create / calendar_find / calendar_date). NEVER invent it.
+  - DO NOT use placeholder strings like "ABC123", "DEF456", "abc123", "event_123" — those are not real eventIds.
+  - If you don't have a real eventId, call calendar_find or calendar_date FIRST. Do not guess.
 
-calendar_delete(eventId)  — Delete an event you have the eventId for. Confirm first.
+calendar_delete(eventId)  — Delete an event you have a REAL eventId for. Same rules as update: never invent, never use placeholders.
 calendar_move(eventId, newStart, newEnd)  — Reschedule.
 calendar_find(query, daysAhead?)  — Search events by name. Returns eventIds. Use ONLY when you don't already have the id.
-calendar_today() / calendar_tomorrow() / calendar_date(date) / calendar_upcoming(hours?) / calendar_week(startDate?) / calendar_month(month?)  — Read-only listings.
+calendar_today() / calendar_tomorrow() / calendar_date(date) / calendar_upcoming(hours?) / calendar_week(startDate?) / calendar_month(month?)  — Read-only listings. **When the user says "elimina gli appuntamenti di [date]", call calendar_date(date) FIRST to get real eventIds, then calendar_delete with each real id.**
 schedule_meeting(clientName, subject, location, durationMinutes, dateFrom, dateTo)  — Find optimal slots considering travel time.
 
 ### Gmail / IMAP
@@ -1532,9 +1538,21 @@ export async function executeTool(action, params, config) {
     }
 
     case 'calendar_update': {
+      let eventId = String(params.eventId || '').trim();
+      if (!eventId) return 'eventId required. Call calendar_find or calendar_date first to get the REAL eventId.';
+
+      // Reject obvious placeholder IDs (model copied from prompt examples)
+      const PLACEHOLDERS = new Set([
+        'abc123', 'def456', 'xyz789', 'event_123', 'event_123456789',
+        '123', '456', 'foo', 'bar', 'baz', 'example', 'placeholder',
+        'eventid', 'event_id', 'id', 'null', 'undefined',
+      ]);
+      if (PLACEHOLDERS.has(eventId.toLowerCase())) {
+        return `"${eventId}" is a placeholder, not a real eventId. Call calendar_find or calendar_date FIRST to get real eventIds.`;
+      }
+
       // Smart eventId resolution: if it looks like a name instead of a Google Calendar ID, search for it
-      let eventId = params.eventId;
-      if (eventId && (eventId.includes(' ') || eventId.length < 10 || /[A-Z]/.test(eventId))) {
+      if (eventId.includes(' ') || eventId.length < 10 || /[A-Z]/.test(eventId)) {
         const from = new Date();
         const to = new Date(from.getTime() + 14 * 86400000);
         const events = await listEvents(config, 'primary', from, to);
@@ -1581,7 +1599,20 @@ export async function executeTool(action, params, config) {
 
     case 'calendar_delete': {
       if (!params.eventId) return 'eventId required. Call calendar_find or calendar_date first to get the REAL eventId.';
-      let delEventId = params.eventId;
+      let delEventId = String(params.eventId).trim();
+
+      // Reject placeholder IDs the model may have copied verbatim from prompt
+      // examples or hallucinated wholesale. These are obvious giveaways — real
+      // Google Calendar eventIds are long lowercase alphanumeric strings, not
+      // dictionary words.
+      const PLACEHOLDER_IDS = new Set([
+        'abc123', 'def456', 'xyz789', 'event_123', 'event_123456789',
+        '123', '456', 'foo', 'bar', 'baz', 'example', 'placeholder',
+        'eventid', 'event_id', 'id', 'null', 'undefined',
+      ]);
+      if (PLACEHOLDER_IDS.has(delEventId.toLowerCase())) {
+        return `"${delEventId}" is a placeholder, not a real eventId. Call calendar_date(YYYY-MM-DD) or calendar_find(query) FIRST to get the real eventIds, then call calendar_delete with one of those values.`;
+      }
 
       // Branch A — looks like a free-text search query (spaces, caps, very short).
       // The model passed a NAME instead of an ID — resolve to ID via listEvents.