nothumanallowed 16.0.24 → 16.0.25

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "nothumanallowed",
-  "version": "16.0.24",
-  "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
+  "version": "16.0.25",
+  "description": "Local AI assistant: 80 tools (Gmail, Calendar, Drive, GitHub, Slack, browser, code, files), 38 agents, visual workflows (Studio, AWF, WebCraft). Install with `npm i -g nothumanallowed`, run with `nha ui`. Free tier built-in (Liara), no API key required. Your data stays on your PC — OAuth tokens local, no cloud. Open-source MIT.",
   "type": "module",
   "bin": {
     "nha": "bin/nha",

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '16.0.24';
+export const VERSION = '16.0.25';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/server/routes/webcraft.mjs

@@ -3442,7 +3442,7 @@ export const _SHIMMED_MODULES = new Set([
   'pg', 'redis', 'ioredis', 'helmet', 'mongoose', 'sequelize',
   'dotenv', 'cors', 'morgan', 'body-parser', 'cookie-parser',
   'compression', 'express-rate-limit', 'jsonwebtoken', 'bcryptjs', 'bcrypt',
-  'uuid', 'lodash', 'debug', 'chalk', 'multer', 'axios',
+  'uuid', 'lodash', 'debug', 'chalk', 'multer', 'axios', 'express',
 ]);
 
 /** Read declared dependencies from package.json (deps + devDeps + peer). */
@@ -3991,6 +3991,107 @@ multer.diskStorage = (opts) => ({ _kind: 'disk', opts });
 multer.memoryStorage = () => ({ _kind: 'memory' });
 module.exports = multer;
 module.exports.default = multer;
+`;
+
+  // express — minimal HTTP framework shim (route matching, middleware chain,
+  // req.params/query/body, res.json/send/status). Enough to boot a typical
+  // LLM-generated Express app even without express in node_modules.
+  const expressShim = `
+const http = require('http');
+const url = require('url');
+
+function parseBody(req) {
+  return new Promise((resolve) => {
+    let raw = '';
+    req.on('data', (c) => { raw += c; });
+    req.on('end', () => {
+      const ct = req.headers['content-type'] || '';
+      try {
+        if (/json/i.test(ct)) resolve(raw ? JSON.parse(raw) : {});
+        else if (/urlencoded/i.test(ct)) {
+          const o = {};
+          for (const p of raw.split('&')) { const [k, v] = p.split('=').map(decodeURIComponent); if (k) o[k] = v || ''; }
+          resolve(o);
+        } else resolve(raw);
+      } catch { resolve(raw); }
+    });
+  });
+}
+
+function compilePath(p) {
+  if (p instanceof RegExp) return { re: p, keys: [] };
+  const keys = [];
+  const re = '^' + String(p).replace(/:([^/]+)/g, (_m, k) => { keys.push(k); return '([^/]+)'; }) + '/?$';
+  return { re: new RegExp(re), keys };
+}
+
+function createApp() {
+  const stack = [];
+  const settings = {};
+  function use(arg, ...rest) {
+    if (typeof arg === 'function') stack.push({ method: 'ALL', re: /.*/, keys: [], handlers: [arg, ...rest] });
+    else { const c = compilePath(arg); stack.push({ method: 'ALL', re: c.re, keys: c.keys, handlers: rest.flat() }); }
+    return app;
+  }
+  function addRoute(method) {
+    return (path, ...handlers) => { const c = compilePath(path); stack.push({ method, re: c.re, keys: c.keys, handlers: handlers.flat() }); return app; };
+  }
+  const app = async function (req, res) {
+    const parsed = url.parse(req.url, true);
+    req.path = parsed.pathname;
+    req.query = parsed.query;
+    if (['POST', 'PUT', 'PATCH'].includes(req.method)) req.body = await parseBody(req);
+    if (!res.json) {
+      res.json = function (obj) { this.setHeader('Content-Type', 'application/json'); this.end(JSON.stringify(obj)); return this; };
+      res.send = function (data) { if (typeof data === 'object') return this.json(data); this.end(String(data)); return this; };
+      res.status = function (n) { this.statusCode = n; return this; };
+      res.sendStatus = function (n) { this.statusCode = n; this.end(http.STATUS_CODES[n] || ''); return this; };
+      res.redirect = function (loc) { this.statusCode = 302; this.setHeader('Location', loc); this.end(); return this; };
+    }
+    let i = 0;
+    const next = (err) => {
+      if (err) { res.statusCode = 500; return res.end('Error: ' + (err.message || err)); }
+      while (i < stack.length) {
+        const layer = stack[i++];
+        if (layer.method !== 'ALL' && layer.method !== req.method) continue;
+        const m = req.path.match(layer.re);
+        if (!m) continue;
+        req.params = {};
+        layer.keys.forEach((k, idx) => { req.params[k] = m[idx + 1]; });
+        let hIdx = 0;
+        const runHandlers = (e) => {
+          if (e) return next(e);
+          if (hIdx >= layer.handlers.length) return next();
+          const h = layer.handlers[hIdx++];
+          try { return h.length === 4 ? h(e, req, res, runHandlers) : h(req, res, runHandlers); }
+          catch (err) { return next(err); }
+        };
+        return runHandlers();
+      }
+      res.statusCode = 404;
+      res.end('Cannot ' + req.method + ' ' + req.path);
+    };
+    next();
+  };
+  app.use = use;
+  app.get = addRoute('GET'); app.post = addRoute('POST'); app.put = addRoute('PUT');
+  app.delete = addRoute('DELETE'); app.patch = addRoute('PATCH'); app.options = addRoute('OPTIONS');
+  app.all = (path, ...handlers) => { const c = compilePath(path); stack.push({ method: 'ALL', re: c.re, keys: c.keys, handlers: handlers.flat() }); return app; };
+  app.set = (k, v) => { settings[k] = v; return app; };
+  app.get_setting = (k) => settings[k];
+  app.disable = (k) => { settings[k] = false; return app; };
+  app.enable = (k) => { settings[k] = true; return app; };
+  app.listen = function (port, cb) { const server = http.createServer(app); server.listen(port, cb); return server; };
+  return app;
+}
+
+const express = createApp;
+express.json = function (opts) { return async (req, res, next) => { if (/json/i.test(req.headers['content-type'] || '')) req.body = await parseBody(req); next(); }; };
+express.urlencoded = function (opts) { return async (req, res, next) => { if (/urlencoded/i.test(req.headers['content-type'] || '')) req.body = await parseBody(req); next(); }; };
+express.static = function (root) { return (req, res, next) => next(); };
+express.Router = function () { const r = createApp(); return r; };
+module.exports = express;
+module.exports.default = express;
 `;
 
   // axios — minimal fetch-based replacement
@@ -4067,6 +4168,7 @@ module.exports.default = proxy;
     'chalk.js': chalkShim,
     'multer.js': multerShim,
     'axios.js': axiosShim,
+    'express.js': expressShim,
     'noop.js': noopShim,
   };
   for (const [name, content] of Object.entries(shimFiles)) {