nothumanallowed 9.3.3 → 9.3.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "9.3.3",
+  "version": "9.3.5",
   "description": "NotHumanAllowed — 38 AI agents + 58 tools + browser automation + web search. Streaming chat, headless Chrome CDP, multi-conversation, export. Gmail, Calendar, Drive, GitHub, Notion, Slack. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '9.3.3';
+export const VERSION = '9.3.5';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/tool-executor.mjs

@@ -270,8 +270,8 @@ TOOLS:
 47. web_search(query: string, deep?: boolean)
     Search the web using DuckDuckGo. Returns titles, URLs, and snippets.
     Set deep=true to also fetch and extract the top 3 pages' full content (slower but more detailed).
-    Use this when the user asks about current events, recent news, or needs up-to-date information
-    that you don't have in your training data.
+    ALWAYS use this for ANY web search request ("search for X", "find X", "look up X", "cerca X").
+    Do NOT open Google/Bing in the browser for searches — use this tool instead. It's faster and never gets blocked.
 
 48. fetch_url(url: string)
     Fetch a web page and extract its text content. SSRF-protected (blocks private IPs, localhost).
@@ -284,6 +284,7 @@ TOOLS:
     Open a URL in a headless Chrome browser. Launches Chrome automatically on first use.
     SSRF-protected (blocks private IPs, localhost). Renders JavaScript, SPAs, and dynamic pages.
     Use this when you need to interact with a page (click, type, screenshot) or when fetch_url fails on JS-rendered content.
+    WARNING: Do NOT use this to search the web — use web_search instead. Google/Bing block automated browsers with CAPTCHAs.
 
 50. browser_screenshot(fullPage?: boolean, format?: "png"|"jpeg"|"webp", quality?: number, saveTo?: string)
     Capture a screenshot of the current browser page.
@@ -330,6 +331,7 @@ TOOLS:
     Close the browser. Frees resources. Browser auto-closes when NHA exits.
 
 RULES:
+- CRITICAL: For web searches ("search for X", "find X online", "look up X"), ALWAYS use web_search — NEVER open Google/Bing/DuckDuckGo in the browser. web_search is faster, more reliable, and doesn't get blocked by CAPTCHAs. Only use browser_open for interacting with specific websites (filling forms, clicking buttons, taking screenshots of specific pages).
 - For search/read operations, execute immediately and present results conversationally.
 - For write/send/delete operations (gmail_send, gmail_reply, gmail_delete, calendar_create, calendar_move, calendar_update, contact_delete, task_done, notify_remind), DESCRIBE what you're about to do and include the JSON block so the system can ask the user for confirmation.
 - For schedule_meeting and schedule_draft_email, execute immediately — these are read operations that suggest slots.
@@ -1090,10 +1092,25 @@ export async function executeTool(action, params, config) {
 
     // ── Browser Automation ────────────────────────────────────────────
     case 'browser_open': {
-      const be = await import('./browser-engine.mjs');
       const url = params.url;
       if (!url) return 'A URL is required.';
 
+      // Intercept search engine URLs — redirect to web_search tool
+      const searchEngines = /^https?:\/\/(www\.)?(google|bing|duckduckgo|yahoo|baidu|yandex)\.(com|it|co\.uk|de|fr|es|org|net)/i;
+      if (searchEngines.test(url)) {
+        // Extract search query if present in URL
+        try {
+          const u = new URL(url);
+          const q = u.searchParams.get('q') || u.searchParams.get('query') || u.searchParams.get('p');
+          if (q) {
+            return `REDIRECT: Use web_search instead. Search engines block automated browsers. Executing web_search for "${q}"...\n\n` +
+              await executeTool('web_search', { query: q }, config);
+          }
+        } catch {}
+        return 'Do NOT open search engines in the browser — they block automated access with CAPTCHAs. Use the web_search tool instead: {"action": "web_search", "params": {"query": "your search terms"}}';
+      }
+
+      const be = await import('./browser-engine.mjs');
       const result = await be.browserOpen(url, {
         waitForLoad: params.waitForLoad !== false,
       });