nothumanallowed 15.1.58 → 15.1.60

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "15.1.58",
+  "version": "15.1.60",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/cli.mjs

@@ -63,6 +63,10 @@ export async function main(argv) {
         info(`Run "nha update" (recommended — auto-installs npm + agents)`);
         info(`Or copy-paste this ENTIRE line (note: --prefer-online, not --pref-online):`);
         info(`  npm cache clean --force && npm install -g nothumanallowed@${result.latest} --prefer-online && hash -r && nha version`);
+        info(`⚠ If you ran the install WITHOUT "hash -r" at the end and now get`);
+        info(`   "bash: ...node/vX.Y.Z/bin/nha: No such file", run:  hash -r`);
+        info(`   (or just close and reopen the terminal). It's a bash path cache issue,`);
+        info(`   not an install failure — your nha package is already updated.`);
       }
     }).catch(() => {});
   }

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '15.1.58';
+export const VERSION = '15.1.60';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/message-responder.mjs

@@ -952,6 +952,7 @@ class TelegramResponder {
           // the LLM entirely: parse the proposal, resolve the eventId via
           // calendar_date / calendar_find, then call calendar_delete /
           // calendar_move directly. The user gets a guaranteed real result.
+          this._lastDirectAuditChatId = chatId;
           const directResult = await this._tryDirectAction(lastCtx.agentReply || '', this.config);
           if (directResult) {
             this.log(`[Telegram] ${fromUser}: direct-action ${directResult.action} → ${directResult.success ? 'OK' : 'FAIL'}`);
@@ -1043,6 +1044,7 @@ class TelegramResponder {
         // touching the API, OR invent the event list when asked for "all
         // appointments of May". By running the calendar tool server-side, the
         // user always sees REAL data — never fabricated.
+        this._lastDirectAuditChatId = chatId;
         const directFresh = await this._tryDirectFreshCalendarAction(cleanText, this.config);
         if (directFresh) {
           this.log(`[Telegram] ${fromUser}: direct-fresh ${directFresh.action} → ${directFresh.success ? 'OK' : 'FAIL'}`);
@@ -1103,6 +1105,13 @@ class TelegramResponder {
       let responseText;
       let responseHistory = null;
 
+      // Inject cross-agent action audit log into the enriched message so any
+      // agent invoked for this chat is aware of what other agents already did
+      // (calendar deletes, email sends, task creations, etc.). Without this,
+      // HERALD would forget a deletion executed via direct-action 2 turns ago.
+      const auditNote = this._renderAuditForPrompt(chatId);
+      if (auditNote) enrichedMessage = auditNote + enrichedMessage;
+
       if (TOOL_AGENTS.has(agent)) {
         const result = await callAgentWithTools(this.config, agent, enrichedMessage, detectedLang, preHistory);
         responseText = result.text;
@@ -1271,6 +1280,13 @@ class TelegramResponder {
       const message = ok
         ? `Fatto. Ho cancellato "${summary}"${dateStr ? ` del ${this._formatDateIT(dateStr)}` : ''}${match.time ? ` alle ${match.time}` : ''}.`
         : `Non sono riuscito a cancellare l'evento: ${delResult}`;
+      if (this._lastDirectAuditChatId) {
+        this._recordAudit(this._lastDirectAuditChatId, {
+          tool: 'calendar_delete',
+          success: ok,
+          summary: `${summary}${dateStr ? ` del ${this._formatDateIT(dateStr)}` : ''}${match.time ? ` alle ${match.time}` : ''} (eventId ${match.eventId.slice(0, 16)}…)`,
+        });
+      }
       return { action: 'calendar_delete', success: ok, message };
     } catch (err) {
       return { action: 'calendar_delete', success: false, message: `Errore nella cancellazione: ${err.message}` };
@@ -1354,6 +1370,36 @@ class TelegramResponder {
     return events;
   }
 
+  // ── Action audit log (cross-agent memory of REAL executions) ─────────────
+  // Every direct-action OR LLM-mediated tool call that mutates external state
+  // (calendar, email, tasks, contacts, files, github, slack…) is appended
+  // here. The log is per chatId, persisted to disk, capped at 50 entries.
+  //
+  // When ANY agent is invoked for this chat, the recent audit entries are
+  // prepended to the user message as "AZIONI RECENTI ESEGUITE". Result: a
+  // user who deleted a calendar event via HERALD and then asks JARVIS about
+  // it ten minutes later — JARVIS sees the deletion in the audit log and
+  // can answer factually. No more "have I done that?" amnesia.
+  _recordAudit(chatId, entry) {
+    const ctx = this._lastContextByChatId[chatId] || (this._lastContextByChatId[chatId] = {});
+    if (!Array.isArray(ctx.auditLog)) ctx.auditLog = [];
+    ctx.auditLog.push({ ts: Date.now(), ...entry });
+    if (ctx.auditLog.length > 50) ctx.auditLog = ctx.auditLog.slice(-50);
+    this._persistContext();
+  }
+
+  _renderAuditForPrompt(chatId, maxEntries = 10) {
+    const ctx = this._lastContextByChatId[chatId];
+    if (!ctx || !Array.isArray(ctx.auditLog) || ctx.auditLog.length === 0) return '';
+    const recent = ctx.auditLog.slice(-maxEntries);
+    const lines = recent.map(e => {
+      const time = new Date(e.ts).toLocaleString('it-IT', { day: '2-digit', month: 'short', hour: '2-digit', minute: '2-digit' });
+      const status = e.success === false ? '✗ FALLITA' : '✓ OK';
+      return `- ${time} · ${e.tool} · ${status} · ${e.summary || ''}`;
+    });
+    return `\n\n[AZIONI RECENTI ESEGUITE IN QUESTA CONVERSAZIONE — fonte di verità sui fatti già accaduti]\n${lines.join('\n')}\n[FINE AZIONI RECENTI]\n`;
+  }
+
   _formatDateIT(isoDate) {
     const m = String(isoDate || '').match(/^(\d{4})-(\d{2})-(\d{2})$/);
     if (!m) return isoDate;
@@ -1564,6 +1610,15 @@ class TelegramResponder {
         const message = ok
           ? `Fatto. Ho cancellato "${summary}"${dateStr ? ` del ${this._formatDateIT(dateStr)}` : ''}${match.time ? ` alle ${match.time}` : ''}.`
           : `Non sono riuscito a cancellare l'evento: ${delResult}`;
+        // Audit log — every agent in this chat will see this entry on their
+        // next invocation, so no one forgets the deletion happened.
+        if (this._lastDirectAuditChatId) {
+          this._recordAudit(this._lastDirectAuditChatId, {
+            tool: 'calendar_delete',
+            success: ok,
+            summary: `${summary}${dateStr ? ` del ${this._formatDateIT(dateStr)}` : ''}${match.time ? ` alle ${match.time}` : ''} (eventId ${match.eventId.slice(0, 16)}…)`,
+          });
+        }
         return { action: 'calendar_delete', success: ok, message };
       } catch (e) {
         return { action: 'calendar_delete', success: false, message: `Errore nella cancellazione: ${e.message}` };