nothumanallowed 15.1.23 → 15.1.25

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "15.1.23",
+  "version": "15.1.25",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '15.1.23';
+export const VERSION = '15.1.25';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/server/routes/webcraft.mjs

@@ -112,6 +112,13 @@ class SandboxManager {
     if (this.isRunning()) {
       emit({ type: 'phase', phase: 'cleanup', msg: 'Stopping previous sandbox...' });
       await this.stop();
+      // CRITICAL: `stop()` sets `_stoppedByUser = true` so the dying process'
+      // crash isn't misreported. We MUST reset it here, otherwise the brand
+      // new sandbox we're about to spawn will exit silently on any crash —
+      // bypassing both Tier 1 (npm install) and Tier 2 (LLM/rename) autofix.
+      // This was the root cause of the "require is not defined — no autofix
+      // ever runs" bug. The flag intent is per-process, not persistent.
+      this._stoppedByUser = false;
     }
 
     if (!fs.existsSync(projectDir)) {
@@ -242,9 +249,22 @@ class SandboxManager {
 
     // ── Crash handling — auto-fix missing modules ─────────────────────────
     const exitCode = typeof healthy === 'object' ? healthy.exitCode : -1;
-    // If user pressed Stop, don't report as crash
-    if (this._stoppedByUser) return;
+    // If user pressed Stop, don't report as crash. We ALSO log this so we
+    // can see in the UI when the stoppedByUser flag is what's blocking the
+    // autofix flow (was a real bug pre-15.1.24).
+    if (this._stoppedByUser) {
+      emit({ type: 'warn', msg: 'Crash handling skipped: _stoppedByUser=true (user pressed Stop, or previous stop() leaked the flag). If this is unexpected, restart nha ui to pick up the latest fix.' });
+      return;
+    }
     emit({ type: 'status', msg: `Process exited with code ${exitCode}` });
+    // Surface the captured stderr right away so the user sees the REAL error
+    // (not just the post-Tier-2 summary). This is the diagnostic gold.
+    if (stderrBuf && stderrBuf.trim()) {
+      const stderrSnippet = stderrBuf.split('\n').slice(0, 12).join('\n');
+      emit({ type: 'log', msg: `[stderr captured]\n${stderrSnippet}` });
+    } else {
+      emit({ type: 'warn', msg: 'Process exited but no stderr was captured — exit may have been instant.' });
+    }
 
     // ── Tier 1: missing module → npm install + retry ─────────────────────
     const missingMatch = stderrBuf.match(/Cannot find module ['"]([^'"]+)['"]/);