nothumanallowed 15.1.13 → 15.1.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "15.1.13",
+  "version": "15.1.16",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/cli.mjs

@@ -55,12 +55,14 @@ export async function main(argv) {
     // npm version check (non-blocking). The one-liner uses --prefer-online to
     // bypass npm's metadata cache, which is the #1 reason `npm install -g`
     // appears to "do nothing" — it had stale "latest" in the local cache.
+    // Every command separated by `&&` so users can copy-paste the whole line.
     checkNpmVersion().then(result => {
       if (result?.updateAvailable) {
         console.log('');
         warn(`New NHA version available: ${result.current} → ${result.latest}`);
         info(`Run "nha update" (recommended — auto-installs npm + agents)`);
-        info(`Or manually: npm cache clean --force && npm install -g nothumanallowed@${result.latest} --prefer-online`);
+        info(`Or copy-paste this ENTIRE line (note: --prefer-online, not --pref-online):`);
+        info(`  npm cache clean --force && npm install -g nothumanallowed@${result.latest} --prefer-online && hash -r && nha version`);
       }
     }).catch(() => {});
   }

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '15.1.13';
+export const VERSION = '15.1.16';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/server/routes/studio.mjs

@@ -759,16 +759,35 @@ ${okBlock}`;
 
       tok('[Parlamento — Round 2: Cross-Reading & Refinamento] ');
       const r2Results = [];
+      // Per-agent timeout — if any single agent stalls (network, LLM hung)
+      // the loop must not block the whole deliberation. After this budget,
+      // fall back to the agent's Round 1 output and continue.
+      const PER_AGENT_TIMEOUT_MS = 90_000;
       for (const proposal of eligible) {
         tok(`[Round 2: ${proposal.label || proposal.agent}] `);
         const r2Sys = `You are ${proposal.agent}, a specialist AI agent in NHA Studio Parliament. Today is ${today}. Respond entirely in ${language}.\n\n## WORKFLOW GOAL: ${task}\n\n## YOUR ROUND 1 RESPONSE:\n${proposal.output.slice(0,3000)}\n\n## OTHER AGENTS' ROUND 1 PROPOSALS:\n${crossCtx(proposal.agent)}\n\nDELIBERATION ROUND 2 — REFINEMENT:\n1. Review the other agents' proposals carefully\n2. Incorporate valid points where you AGREE — mark with [AGREE]\n3. Flag genuine disagreements with [CONTRADICTION] and explain your reasoning with evidence\n4. Produce your COMPLETE REFINED response — thorough and exhaustive\n5. Keep analysis focused on: ${task}\n\nBe THOROUGH. Minimum 600 words of substantive refined analysis.`;
         let r2Out = '';
+        let fellBack = false;
         try {
-          await callLLMStream(config, r2Sys, 'Produce your refined Round 2 response. Write complete content under every heading — never leave a section title without body text.',
-            (t) => { r2Out += t; }, { max_tokens: 16384 });
-        } catch { r2Out = proposal.output; }
-        r2Results.push({ agent: proposal.agent, label: proposal.label, icon: proposal.icon, output: r2Out });
-        sse({ deliberation_r2: { agent: proposal.agent, label: proposal.label, icon: proposal.icon, output: r2Out } });
+          // Race the LLM stream against a hard timeout.
+          await Promise.race([
+            callLLMStream(config, r2Sys, 'Produce your refined Round 2 response. Write complete content under every heading — never leave a section title without body text.',
+              (t) => { r2Out += t; }, { max_tokens: 16384 }),
+            new Promise((_, reject) => setTimeout(() => reject(new Error('R2_AGENT_TIMEOUT')), PER_AGENT_TIMEOUT_MS)),
+          ]);
+        } catch (err) {
+          // Fallback: use Round 1 output so the rest of deliberation can proceed.
+          fellBack = true;
+          r2Out = proposal.output;
+          tok(`[Round 2 ${proposal.label || proposal.agent}: timeout — uso Round 1 come fallback] `);
+        }
+        // If the stream returned but produced no text (LLM hiccup), also fall back.
+        if (!r2Out || r2Out.trim().length < 50) {
+          fellBack = true;
+          r2Out = proposal.output;
+        }
+        r2Results.push({ agent: proposal.agent, label: proposal.label, icon: proposal.icon, output: r2Out, fellBack });
+        sse({ deliberation_r2: { agent: proposal.agent, label: proposal.label, icon: proposal.icon, output: r2Out, fellBack } });
       }
 
       const r2Conv = measureConvergence(r2Results.map(r => r.output));
@@ -792,9 +811,22 @@ ${okBlock}`;
       const medSys = `You are HERALD, the Parliament Mediator in NHA Studio. Today is ${today}. Respond entirely in ${language}.\n\n## WORKFLOW GOAL: ${task}\n\n## ALL AGENTS' REFINED POSITIONS (Round 2):\n${allR2Ctx}${contBlock}\n\n${medTask}\n\nCRITICAL: NEVER write a heading without immediately writing full content below it. Every section MUST have at least 5-8 concrete bullet points or detailed paragraphs. Be EXHAUSTIVE.`;
 
       let mediationOutput = '';
+      const HERALD_TIMEOUT_MS = 120_000;
       try {
-        await callLLMStream(config, medSys, 'Produce the Parliament final synthesis. Be thorough and complete.', (t) => { mediationOutput += t; }, { max_tokens: 16384 });
-      } catch {}
+        await Promise.race([
+          callLLMStream(config, medSys, 'Produce the Parliament final synthesis. Be thorough and complete.', (t) => { mediationOutput += t; }, { max_tokens: 16384 }),
+          new Promise((_, reject) => setTimeout(() => reject(new Error('HERALD_TIMEOUT')), HERALD_TIMEOUT_MS)),
+        ]);
+      } catch (err) {
+        // HERALD timed out — emit whatever we got so the client isn't stuck.
+        tok(`[HERALD mediation: timeout dopo ${HERALD_TIMEOUT_MS/1000}s — restituisco contenuto parziale] `);
+      }
+      // If absolutely nothing came back, fall back to a concatenation of the
+      // r2 outputs so the user has SOMETHING to read instead of a blank panel.
+      if (!mediationOutput || mediationOutput.trim().length < 50) {
+        mediationOutput = `# Sintesi automatica (HERALD non disponibile)\n\n` +
+          r2Results.map(r => `## ${r.label || r.agent}\n${r.output.slice(0, 2000)}`).join('\n\n---\n\n');
+      }
       sse({ deliberation_r3: { output: mediationOutput, converged } });
 
       clearInterval(keepalive);

package/src/services/message-responder.mjs

@@ -320,12 +320,50 @@ async function callAgentWithTools(config, agentName, userMessage, languageOverri
     }
 
     history.push({ role: 'assistant', content: response });
-    userMessage = 'Tool results:\n' + toolResults.join('\n') + '\n\nNow give the user a short, clear confirmation in ' + language + '. Be direct — no preamble, no HERALD format. If an action was completed, say so clearly.';
+    // LANGUAGE enforcement up FRONT — putting it last allows Liara to ignore it.
+    // Repeat the instruction at the top so the model commits to it before reading
+    // the tool results, then again at the bottom for reinforcement.
+    userMessage =
+      `RISPOSTA OBBLIGATORIA IN ${language.toUpperCase()}. Tutta la frase deve essere in ${language}, niente inglese, niente lingue miste.\n\n` +
+      `Tool results:\n${toolResults.join('\n')}\n\n` +
+      `Now give the user a short, clear confirmation. Be direct — no preamble, no HERALD format. ` +
+      `If an action was completed, say so clearly. REMEMBER: reply ONLY in ${language}.`;
+  }
+
+  // Defensive language post-check: small models sometimes drop back to English
+  // even when instructed otherwise (especially after tool execution, where the
+  // English tool-result text biases the continuation). If the final reply is
+  // in a clearly different language than expected, translate it.
+  if (finalText && language && !looksLikeLanguage(finalText, language)) {
+    try {
+      const translatePrompt =
+        `Traduci il seguente messaggio in ${language}. Mantieni lo stesso significato, lo stesso tono, la stessa lunghezza. Restituisci SOLO la traduzione, senza preamboli o note.\n\nMessaggio:\n${finalText}`;
+      const translated = await callLLM(config,
+        `You are a precise translator. Translate the given text into ${language}. Output ONLY the translation, no commentary.`,
+        translatePrompt,
+        { max_tokens: 800 },
+      );
+      const cleaned = (translated || '').trim();
+      if (cleaned && cleaned.length > 0) finalText = cleaned;
+    } catch { /* keep the original if translation fails */ }
   }
 
   return { text: finalText || 'Fatto.', history };
 }
 
+/**
+ * Detect if a text is in the expected language. Used as a defensive check
+ * after the LLM produces the final tool-confirmation reply — small models
+ * sometimes drop back to English even when instructed otherwise.
+ * Returns true if the language seems right, false if a strong mismatch.
+ */
+function looksLikeLanguage(text, expectedLanguage) {
+  if (!text || !expectedLanguage) return true;
+  const detected = detectLanguage(text);
+  if (!detected) return true; // not enough signal, give benefit of the doubt
+  return detected === expectedLanguage;
+}
+
 // ── Telegram Bot (Long Polling via native fetch) ─────────────────────────────
 
 // ── User store for Telegram chat IDs (for broadcast notifications) ──────────
@@ -509,8 +547,9 @@ class TelegramResponder {
       const msg =
         `🆕 NHA v${latest} disponibile!\n\n` +
         `Una nuova versione di NotHumanAllowed è stata pubblicata.\n\n` +
-        `Aggiorna con:\nnpm install -g nothumanallowed@latest\n\n` +
-        `Poi riavvia il bot con: nha ops stop && nha ops start`;
+        `Aggiorna con UN SOLO comando (copia e incolla tutto):\n` +
+        `npm cache clean --force && npm install -g nothumanallowed@latest --prefer-online && nha ops stop && nha ops start\n\n` +
+        `Importante: usa esattamente "--prefer-online" (NON "--pref-online") e tieni tutti i "&&" tra i comandi.`;
 
       this.log(`[Telegram] Broadcasting update notification v${latest} to ${chatIds.length} users`);
 

package/src/services/tool-executor.mjs

@@ -165,12 +165,11 @@ TOOLS:
     Use this when the user says: "inserisci", "aggiungi", "crea", "metti", "fissa", "prenota", "add", "create", "schedule", "book".
 
     PARAMETER MEANING (CRITICAL — most common mistake):
-      - summary  = the TITLE of the event (what you'd write on a calendar grid). Short, like "Tagliando BMW", "Riunione Cliente X", "Cena con Marta".
+      - summary  = the TITLE of the event (what you'd write on a calendar grid). Short, derived from what the user said.
       - description = optional NOTES/details. Leave empty unless the user gave extra context that doesn't fit in the title.
       - NEVER put the title in description. NEVER leave summary empty.
 
-    Example — user says "fissa tagliando BMW per il 15 maggio alle 17":
-      { "action": "calendar_create", "params": { "summary": "Tagliando BMW", "start": "2026-05-15T17:00:00", "end": "2026-05-15T18:00:00" } }
+    Always derive summary, date and time from the actual user message — never use literal values from this documentation.
 
     IMPORTANT: When user says "inserisci appuntamento" or "crea evento" → use calendar_create, NOT calendar_find.
     Extract the summary, date, and time from the user message. If end time is not specified, default to 1 hour after start.
@@ -667,7 +666,15 @@ RULES:
 // Used ONLY when provider === 'nha'. Liara already knows tool signatures from
 // LoRA training — no verbose descriptions needed. Dynamic values (today, tz,
 // language, profile, imap accounts) are still injected at runtime below.
-export const LIARA_TOOL_DEFINITIONS = `You are Liara, the NHA personal AI assistant.
+export const LIARA_TOOL_DEFINITIONS = `## LANGUAGE — HIGHEST PRIORITY
+
+You MUST write your ENTIRE response in {{LANGUAGE}}. Every sentence, every confirmation, every error message. This overrides everything else. Even when this prompt itself is written in English, your reply to the user must be in {{LANGUAGE}} only. Do NOT mix languages. Do NOT default to English.
+
+If {{LANGUAGE}} is Italian, write only in Italian: "L'appuntamento è stato cancellato." NOT "The event has been deleted." or "Both events have been deleted."
+
+---
+
+You are Liara, the NHA personal AI assistant.
 Today: {{TODAY}} | Timezone: {{TIMEZONE}} | Language: {{LANGUAGE}}
 
 When the user's request requires an action, output one or more fenced JSON blocks:
@@ -688,12 +695,11 @@ Never output a JSON block as a suggestion — every block executes immediately.
 
 ### Calendar
 calendar_create(summary, start, end, description?, attendees?, location?)
-  - summary = SHORT title (e.g. "Tagliando BMW"). REQUIRED. Do NOT leave empty.
+  - summary = SHORT title derived from what the user actually said. REQUIRED. Do NOT leave empty.
   - description = optional notes only. Do NOT put the title here.
   - start/end = ISO 8601 datetimes. Default end = start + 1 hour.
-  - The tool response includes the REAL eventId in parentheses, e.g. "(eventId: <some-google-id>)". Use that exact value verbatim for subsequent operations. **The eventId is a long lowercase alphanumeric string returned by Google — NEVER make one up.**
-  Example — user says "fissa tagliando BMW 15 maggio ore 17":
-    {"action":"calendar_create","params":{"summary":"Tagliando BMW","start":"2026-05-15T17:00:00","end":"2026-05-15T18:00:00"}}
+  - The tool response includes the REAL eventId. Use that exact value verbatim for any subsequent operation on the same event. The eventId is a long alphanumeric string returned by Google — NEVER fabricate one.
+  - Always derive every parameter value from the user's message, never from this documentation.
 
 calendar_update(eventId, summary?, location?, description?, start?, end?)
   - Use this for "correggi", "modifica", "rinomina", "cambia titolo", "sposta", "aggiorna" referring to an event you JUST created or found.