nothumanallowed 9.3.15 → 9.3.17

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "9.3.15",
+  "version": "9.3.17",
   "description": "NotHumanAllowed — 38 AI agents + 58 tools + browser automation + web search. Streaming chat, headless Chrome CDP, multi-conversation, export. Gmail, Calendar, Drive, GitHub, Notion, Slack. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -233,6 +233,26 @@ export async function cmdUI(args) {
 
       // ── API Routes ────────────────────────────────────────────────────
 
+      // GET /api/screenshots/:filename — serve saved screenshots from disk
+      if (method === 'GET' && pathname.startsWith('/api/screenshots/')) {
+        const ssName = pathname.split('/').pop();
+        if (!ssName || ssName.includes('..') || !ssName.endsWith('.jpg')) {
+          sendJSON(res, 404, { error: 'not found' });
+          logRequest(method, pathname, 404, Date.now() - start);
+          return;
+        }
+        const ssPath = path.join(NHA_DIR, 'screenshots', ssName);
+        if (!fs.existsSync(ssPath)) {
+          sendJSON(res, 404, { error: 'screenshot not found' });
+          logRequest(method, pathname, 404, Date.now() - start);
+          return;
+        }
+        res.writeHead(200, { 'Content-Type': 'image/jpeg', 'Cache-Control': 'public, max-age=86400' });
+        res.end(fs.readFileSync(ssPath));
+        logRequest(method, pathname, 200, Date.now() - start);
+        return;
+      }
+
       // GET /api/status
       if (method === 'GET' && pathname === '/api/status') {
         sendJSON(res, 200, {
@@ -1001,7 +1021,7 @@ export async function cmdUI(args) {
           if (toolResults.length > 0) {
             // Second LLM call with real tool results — forces the LLM to use actual data
             const toolContext = toolResults.map(t => `[${t.action} result]: ${t.result.slice(0, 3000)}`).join('\n\n');
-            const followUp = `The user asked: "${body.message}"\n\nI executed these tools and got REAL results:\n\n${toolContext}\n\nNow respond to the user based ONLY on the REAL data above. Do NOT invent or fabricate any information. Present the actual results clearly.`;
+            const followUp = `The user asked: "${body.message}"\n\nI executed these tools and got REAL results:\n\n${toolContext}\n\nNow respond conversationally based ONLY on the REAL data above. Do NOT output any JSON blocks — just natural text.`;
             try {
               fullResponse = await callLLM(config, enrichedSystemPrompt, followUp);
             } catch {
@@ -1219,8 +1239,17 @@ export async function cmdUI(args) {
                   quality: 75,
                 });
                 if (!ssResult.error) {
-                  sendSSE('screenshot', { base64: ssResult.base64, format: 'jpeg' });
-                  toolResults.push({ action, result: `Screenshot captured (${Math.round(ssResult.size / 1024)}KB)` });
+                  // Save screenshot to disk for persistence across sessions
+                  const ssDir = path.join(NHA_DIR, 'screenshots');
+                  fs.mkdirSync(ssDir, { recursive: true });
+                  const ssFilename = `ss-${Date.now()}.jpg`;
+                  fs.writeFileSync(path.join(ssDir, ssFilename), Buffer.from(ssResult.base64, 'base64'));
+
+                  sendSSE('screenshot', { base64: ssResult.base64, format: 'jpeg', filename: ssFilename });
+                  toolResults.push({ action, result: `Screenshot captured (${Math.round(ssResult.size / 1024)}KB) [file: ${ssFilename}]` });
+                  // Store screenshot ref for persistence
+                  if (!res._screenshotFiles) res._screenshotFiles = [];
+                  res._screenshotFiles.push(ssFilename);
                   sendSSE('tool', { action, status: 'done', result: 'Screenshot captured' });
                 } else {
                   toolResults.push({ action, result: `Error: ${ssResult.message}` });
@@ -1234,14 +1263,20 @@ export async function cmdUI(args) {
               toolResults.push({ action, result: resultStr });
               sendSSE('tool', { action, status: 'done', result: typeof resultStr === 'string' ? resultStr.slice(0, 500) : '' });
 
-              // If the tool produced a screenshot (web_search with screenshot=true), send it via SSE
+              // If the tool produced a screenshot (web_search with screenshot=true), send it via SSE and save to disk
               if (resultStr.includes('[Screenshot of results captured')) {
                 try {
                   const be = await import('../services/browser-engine.mjs');
                   if (be.isBrowserRunning()) {
                     const ssResult = await be.browserScreenshot({ fullPage: false, format: 'jpeg', quality: 75 });
                     if (!ssResult.error) {
-                      sendSSE('screenshot', { base64: ssResult.base64, format: 'png' });
+                      const ssDir = path.join(NHA_DIR, 'screenshots');
+                      fs.mkdirSync(ssDir, { recursive: true });
+                      const ssFilename = `ss-${Date.now()}.jpg`;
+                      fs.writeFileSync(path.join(ssDir, ssFilename), Buffer.from(ssResult.base64, 'base64'));
+                      sendSSE('screenshot', { base64: ssResult.base64, format: 'jpeg', filename: ssFilename });
+                      if (!res._screenshotFiles) res._screenshotFiles = [];
+                      res._screenshotFiles.push(ssFilename);
                     }
                   }
                 } catch { /* screenshot send failed */ }
@@ -1256,23 +1291,31 @@ export async function cmdUI(args) {
           let finalResponse = fullResponse;
           if (toolResults.length > 0) {
             const toolContext = toolResults.map(t => `[${t.action} result]: ${t.result.slice(0, 3000)}`).join('\n\n');
-            const followUp = `The user asked: "${msg}"\n\nI executed these tools and got REAL results:\n\n${toolContext}\n\nNow respond to the user based ONLY on the REAL data above. Present the actual results clearly.`;
+            const followUp = `The user asked: "${msg}"\n\nI executed these tools and got REAL results:\n\n${toolContext}\n\nNow respond to the user conversationally based ONLY on the REAL data above. Present the results clearly. Do NOT output any JSON blocks — just natural text.`;
             sendSSE('tool_synthesis', {});
             try {
               finalResponse = await callLLMStream(config, enrichedPrompt, followUp, (chunk) => {
                 sendSSE('token', { content: chunk });
               });
+              // Strip any JSON blocks the LLM might have emitted anyway
+              finalResponse = finalResponse.replace(/```json[\s\S]*?```/g, '').trim();
             } catch {
               finalResponse = toolResults.map(t => `${t.action}: ${t.result}`).join('\n\n');
             }
           }
 
-          // Persist to conversation
+          // Persist to conversation (append screenshot references so they survive reload)
           if (convId) {
             try {
+              let persistedResponse = finalResponse;
+              const ssFiles = res._screenshotFiles || [];
+              if (ssFiles.length > 0) {
+                const ssRefs = ssFiles.map(f => `\n![Screenshot](/api/screenshots/${f})`).join('');
+                persistedResponse = finalResponse + ssRefs;
+              }
               const conv = loadConversation(convId);
               if (conv) {
-                addMessages(conv, msg, finalResponse);
+                addMessages(conv, msg, persistedResponse);
               }
             } catch {}
           }

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '9.3.15';
+export const VERSION = '9.3.17';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -405,7 +405,8 @@ function renderMessages(){
   var h='';chatHistory.forEach(function(m){
     var raw=m.content||'';
     var imgs=[];var idx=0;
-    var safe=raw.replace(/!\\[([^\\]]*)\\]\\((data:image\\/[a-z]+;base64,[A-Za-z0-9+\\/=]+)\\)/g,function(_,alt,src){var ph='__IMG'+idx+'__';imgs.push({ph:ph,alt:alt,src:src});idx++;return ph;});
+    // Match both base64 inline images and /api/screenshots/ URLs
+    var safe=raw.replace(/!\\[([^\\]]*)\\]\\(((?:data:image\\/[a-z]+;base64,[A-Za-z0-9+\\/=]+|\\/api\\/screenshots\\/[a-zA-Z0-9._-]+))\\)/g,function(_,alt,src){var ph='__IMG'+idx+'__';imgs.push({ph:ph,alt:alt,src:src});idx++;return ph;});
     var content=esc(safe);
     for(var i=0;i<imgs.length;i++){content=content.replace(imgs[i].ph,'<img class="screenshot-preview" alt="'+esc(imgs[i].alt)+'" src="'+imgs[i].src+'">');}
     h+='<div class="msg msg--'+esc(m.role)+'"><div class="msg__label">'+esc(m.role==='user'?'You':'NHA')+'</div><div class="msg__bubble">'+content+'</div></div>';
@@ -539,8 +540,10 @@ function sendChat(){
               }
               if(currentEvent==='screenshot'&&data.base64){
                 if(!chatHistory[streamIdx]._screenshots)chatHistory[streamIdx]._screenshots=[];
-                chatHistory[streamIdx]._screenshots.push('data:image/'+(data.format||'png')+';base64,'+data.base64);
-                chatHistory[streamIdx].content+='\\n![Screenshot](data:image/'+(data.format||'png')+';base64,'+data.base64+')\\n';
+                // Use file URL if available (persists across sessions), fall back to base64
+                var ssUrl=data.filename?'/api/screenshots/'+data.filename:'data:image/'+(data.format||'jpeg')+';base64,'+data.base64;
+                chatHistory[streamIdx]._screenshots.push(ssUrl);
+                chatHistory[streamIdx].content+='\\n![Screenshot]('+ssUrl+')\\n';
                 renderMessages();
               }
               if(currentEvent==='tool_synthesis'){chatHistory[streamIdx].content='';renderMessages();}