nothumanallowed 15.1.31 → 15.1.32

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "15.1.31",
+  "version": "15.1.32",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '15.1.31';
+export const VERSION = '15.1.32';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/server/routes/webcraft.mjs

@@ -14,9 +14,15 @@
 
 import fs   from 'fs';
 import path from 'path';
-import { exec, spawn } from 'child_process';
-import { createServer } from 'net';
+import { exec, spawn, execSync } from 'child_process';
+import { createServer, Socket } from 'net';
 import { promisify } from 'util';
+import { createRequire } from 'module';
+// `require` shim for the rare spots where CJS-style require() was historically
+// used in this ESM file. Without this, every `require(...)` here throws
+// "ReferenceError: require is not defined" — which is exactly the bug that
+// took 31 releases to diagnose because it surfaced in the SSE error channel.
+const require = createRequire(import.meta.url);
 import { sendJSON, sendError, parseBody, sendSSE } from '../index.mjs';
 import { loadConfig }   from '../../config.mjs';
 import { callLLM, callLLMStream, callLLMWithTools, getApiKey, fixQwen3BPE } from '../../services/llm.mjs';
@@ -2410,9 +2416,9 @@ export function register(router) {
       path.resolve(__dir, '../../../node_modules/.bin/tsc'),
       path.resolve(__dir, '../../../../node_modules/.bin/tsc'),
     ];
-    // Also try global
+    // Also try global — execSync imported at top of file (ESM).
     try {
-      const globalTsc = require('child_process').execSync('which tsc 2>/dev/null || where tsc 2>nul', { encoding: 'utf-8', timeout: 3000 }).trim();
+      const globalTsc = execSync('which tsc 2>/dev/null || where tsc 2>nul', { encoding: 'utf-8', timeout: 3000 }).trim();
       if (globalTsc) candidates.push(globalTsc);
     } catch {}
     for (const c of candidates) {
@@ -3525,8 +3531,11 @@ function _waitForPort(port, timeoutMs) {
   return new Promise((resolve) => {
     const deadline = Date.now() + timeoutMs;
     const check = () => {
-      // Try to connect to the port — if connection succeeds, the server is listening
-      const { Socket } = require('net');
+      // Use the ESM-imported Socket — NEVER `require('net')` here, this file
+      // is .mjs and `require` is not defined in ESM. The require call here
+      // was the single root cause of "[error] require is not defined" with
+      // no autofix flow visible — the crash happened INSIDE the nha ui
+      // server itself (in this exact function), not in the child sandbox.
       const sock = new Socket();
       sock.setTimeout(500);
       sock.once('connect', () => { sock.destroy(); resolve(true); });