nothumanallowed 16.0.58 → 16.0.60

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "16.0.58",
+  "version": "16.0.60",
   "description": "Local AI assistant: 80 tools (Gmail, Calendar, Drive, GitHub, Slack, browser, code, files), 38 agents, visual workflows (Studio, AWF, WebCraft). Install with `npm i -g nothumanallowed`, run with `nha ui`. Free tier built-in (Liara), no API key required. Your data stays on your PC — OAuth tokens local, no cloud. Open-source MIT.",
   "type": "module",
   "bin": {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '16.0.58';
+export const VERSION = '16.0.60';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/llm.mjs

@@ -605,7 +605,11 @@ export function _autoPrefixOpenRouterModel(model) {
  * Model names: "anthropic/claude-sonnet-4.5", "openai/gpt-4o", "google/gemini-2.5-pro"...
  */
 export async function callOpenRouter(apiKey, model, systemPrompt, userMessage, stream = false, opts = {}) {
+  const originalModel = model;
   model = _autoPrefixOpenRouterModel(model);
+  if (process.env.NHA_LOG_OPENROUTER === '1') {
+    console.error(`[openrouter] model resolved: "${originalModel}" → "${model}"`);
+  }
   const body = {
     model: model || 'anthropic/claude-sonnet-4.5',
     max_tokens: opts.max_tokens || 8192,
@@ -630,16 +634,34 @@ export async function callOpenRouter(apiKey, model, systemPrompt, userMessage, s
   });
   if (!res.ok) {
     const err = await res.text();
+    // Auto-recovery: if OpenRouter routed to OpenAI (model is openai/*) and
+    // returned 401 mentioning platform.openai.com, the OpenRouter account has
+    // BYOK enabled with an invalid/missing OpenAI key. Retry once with safe
+    // default model anthropic/claude-sonnet-4.5 (works with OpenRouter credit).
+    const isBYOKFailure = res.status === 401 &&
+      /platform\.openai\.com|Incorrect API key/i.test(err) &&
+      model.startsWith('openai/') &&
+      !opts._retriedFromByokFailure;
+    if (isBYOKFailure) {
+      if (process.env.NHA_LOG_OPENROUTER === '1') {
+        console.error(`[openrouter] BYOK failure on ${model}, retrying with anthropic/claude-sonnet-4.5`);
+      }
+      return callOpenRouter(apiKey, 'anthropic/claude-sonnet-4.5', systemPrompt, userMessage, stream, { ...opts, _retriedFromByokFailure: true });
+    }
     // OpenRouter often passes through misleading "platform.openai.com" key errors
     // when the real cause is (a) invalid OpenRouter key, (b) model name without
     // vendor prefix, (c) model requires BYOK. Provide an actionable hint.
     let hint = '';
     if (res.status === 401) {
-      hint = '\n  → 401 from OpenRouter usually means: (1) your sk-or-v1-... key is invalid/expired (regenerate at openrouter.ai/keys), or (2) the model name "' + model + '" needs a vendor prefix like "anthropic/' + model.replace(/^[a-z-]+\//, '') + '". This call auto-prefixed to "' + model + '".';
+      if (/platform\.openai\.com/i.test(err)) {
+        hint = `\n  → 401 with "platform.openai.com" hint: model "${model}" routes via OpenAI but your OpenRouter account either lacks credit or has BYOK enabled with an invalid OpenAI key.\n     Fix: (1) use an Anthropic/Gemini model instead (e.g. "anthropic/claude-sonnet-4.5"), OR (2) add credit at openrouter.ai/credits, OR (3) disable BYOK in OpenRouter Settings → Integrations.`;
+      } else {
+        hint = '\n  → 401 from OpenRouter: your sk-or-v1-... key is invalid/expired. Regenerate at openrouter.ai/keys.';
+      }
     } else if (res.status === 404) {
-      hint = '\n  → 404 from OpenRouter usually means the model "' + model + '" does not exist. See openrouter.ai/models for valid IDs.';
+      hint = '\n  → 404 from OpenRouter: model "' + model + '" does not exist. See openrouter.ai/models for valid IDs.';
     } else if (res.status === 402) {
-      hint = '\n  → 402 from OpenRouter means insufficient credits. Top up at openrouter.ai/credits.';
+      hint = '\n  → 402 from OpenRouter: insufficient credits. Top up at openrouter.ai/credits.';
     }
     throw new Error(`OpenRouter ${res.status}: ${err}${hint}`);
   }

package/src/services/message-responder.mjs

@@ -2672,7 +2672,69 @@ class TelegramResponder {
           }
         }
       } catch (e) { this.log(`[direct] pagination failed: ${e.message}`); }
-      // Fall through if no cached list
+
+      // NO CACHE FALLBACK (Giovanni's recurring bug): if user asks "mostra i
+      // prossimi" but no calendar list was cached in this session, the LLM
+      // hallucinates plausible-but-fake events. Instead, run calendar_upcoming
+      // for the next 7 days directly here. Deterministic, zero LLM call.
+      try {
+        const { listEvents } = await import('./google-calendar.mjs');
+        const now = new Date();
+        const weekAhead = new Date(now.getTime() + 7 * 86400000);
+        const evs = await listEvents(config, 'primary', now, weekAhead);
+        if (Array.isArray(evs) && evs.length > 0) {
+          const items = evs.map(e => ({
+            eventId: e.id,
+            id: e.id,
+            summary: e.summary || '(senza titolo)',
+            time: (e.start || '').slice(11, 16),
+            date: (e.start || '').slice(0, 10),
+            start: e.start,
+          }));
+          // Persist into list-cache so subsequent "mostra i prossimi" paginates
+          try {
+            const { rememberList } = await import('./list-cache.mjs');
+            rememberList(chatId || '__last_list__', 'calendar', items);
+          } catch {}
+          const pageSize = 8;
+          const firstSlice = items.slice(0, pageSize);
+          const lines = [`📅 Prossimi eventi (7 giorni, ${items.length} totali):`];
+          const byDay = new Map();
+          for (const e of firstSlice) {
+            const day = e.date || 'misc';
+            if (!byDay.has(day)) byDay.set(day, []);
+            byDay.get(day).push(e);
+          }
+          for (const [day, evs] of [...byDay.entries()].sort()) {
+            const d = day !== 'misc' ? new Date(day + 'T12:00:00').toLocaleDateString('it-IT', { weekday: 'short', day: 'numeric', month: 'short' }) : '';
+            if (d) lines.push(`\n${d}:`);
+            for (const e of evs) lines.push(`  ${e.time || '—'} — ${e.summary}`);
+          }
+          if (items.length > pageSize) {
+            lines.push(`\n... ${items.length - pageSize} eventi rimanenti. Scrivi "mostra i prossimi" per continuare.`);
+          } else {
+            lines.push(`\n✓ Fine elenco.`);
+          }
+          // Track shownCount so next "mostra i prossimi" works
+          try {
+            const cacheFile = path.join(os.homedir(), '.nha', 'list-cache.json');
+            const cacheNow = fs.existsSync(cacheFile) ? JSON.parse(fs.readFileSync(cacheFile, 'utf-8')) : {};
+            const key = chatId || '__last_list__';
+            if (!cacheNow[key]) cacheNow[key] = {};
+            cacheNow[key].lastList_calendar_shownCount = pageSize;
+            fs.writeFileSync(cacheFile, JSON.stringify(cacheNow, null, 2));
+          } catch {}
+          this.log(`[direct] PAGINATION fallback: fetched ${items.length} events from calendar_upcoming(7d)`);
+          return { action: 'calendar_page', success: true, message: lines.join('\n') };
+        }
+        // No events in next 7 days — say so explicitly, do NOT fall to LLM
+        return { action: 'calendar_page', success: true, message: '📅 Nessun evento programmato nei prossimi 7 giorni. Scrivi "appuntamenti di [data/mese]" per cercare in un altro periodo.' };
+      } catch (e) {
+        this.log(`[direct] pagination fallback failed: ${e.message}`);
+        // CRITICAL: do NOT fall through to LLM — return error instead of
+        // letting HERALD hallucinate fake events (Giovanni's bug).
+        return { action: 'calendar_page', success: false, message: `Non riesco a leggere il calendario in questo momento (${e.message.slice(0, 100)}). Verifica la connessione Google in Settings.` };
+      }
     }
 
     // ─── ANAPHORIC delete + CONFIRMATION yes ────────────────────────────────