nothumanallowed 10.3.0 → 10.3.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "10.3.0",
+  "version": "10.3.2",
   "description": "NotHumanAllowed — 38 AI agents, 53 tools. Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, GitHub, Notion, Slack, voice chat, 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -383,17 +383,43 @@ export async function cmdUI(args) {
 
         if (collabAction === 'send' && method === 'POST') {
           const body = await parseBody(req);
-          // For simplicity in web UI, send as plaintext (public channel mode)
-          // In private mode, encryption happens client-side
+          // Encrypt with the same channel key used by CLI
+          const channelKey = crypto.createHash('sha256').update('alexandria-channel-key-v1').update(body.channelId).digest();
+          const nonce = crypto.randomBytes(12);
+          const cipher = crypto.createCipheriv('aes-256-gcm', channelKey, nonce);
+          const encrypted = Buffer.concat([cipher.update(body.message, 'utf-8'), cipher.final()]);
+          const tag = cipher.getAuthTag();
+          const ciphertext = Buffer.concat([encrypted, tag]).toString('base64');
+
           const r = await fetch(ALEX_API + '/channels/' + body.channelId + '/messages', {
             method: 'POST', headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ senderFingerprint: identity.fingerprint, nonce: 'webui', ciphertext: Buffer.from(body.message).toString('base64'), type: 'text' }),
+            body: JSON.stringify({ senderFingerprint: identity.fingerprint, nonce: nonce.toString('base64'), ciphertext, type: 'text' }),
           });
           sendJSON(res, 200, await r.json());
           logRequest(method, pathname, 200, Date.now() - start);
           return;
         }
 
+        if (collabAction === 'delete' && method === 'POST') {
+          const body = await parseBody(req);
+          // Remove from local channels file
+          const chFile = path.join(collabDir, 'channels.json');
+          let localChannels = [];
+          if (fs.existsSync(chFile)) { try { localChannels = JSON.parse(fs.readFileSync(chFile, 'utf-8')); } catch {} }
+          localChannels = localChannels.filter(c => c.id !== body.channelId);
+          fs.writeFileSync(chFile, JSON.stringify(localChannels, null, 2), { mode: 0o600 });
+          // Try to delete from server too
+          try {
+            await fetch(ALEX_API + '/channels/' + body.channelId, {
+              method: 'DELETE', headers: { 'Content-Type': 'application/json' },
+              body: JSON.stringify({ fingerprint: identity.fingerprint }),
+            });
+          } catch {}
+          sendJSON(res, 200, { ok: true });
+          logRequest(method, pathname, 200, Date.now() - start);
+          return;
+        }
+
         if (collabAction === 'publish' && method === 'POST') {
           const body = await parseBody(req);
           // Load conversation and publish as public channel

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '10.3.0';
+export const VERSION = '10.3.2';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -1644,6 +1644,7 @@ function renderCollabChannelList(){
     h+='<div onclick="collabSelect(\\x27'+ch.id+'\\x27)" style="padding:8px 12px;cursor:pointer;border-left:3px solid '+(active?'var(--amber)':'transparent')+';background:'+(active?'var(--bg2)':'transparent')+';margin-bottom:2px;border-radius:0 6px 6px 0">';
     h+='<span style="font-size:12px;color:var(--fg)">'+esc(ch.name)+'</span>';
     h+='<span style="font-size:9px;color:var(--dim);margin-left:8px">'+ch.id.slice(0,8)+'...</span>';
+    h+='<button onclick="event.stopPropagation();collabDeleteChannel(\\x27'+ch.id+'\\x27)" style="float:right;background:none;border:none;color:var(--red);cursor:pointer;font-size:10px;font-family:var(--mono);opacity:0.5" title="Delete channel">del</button>';
     h+='</div>';
   }
   el.innerHTML=h;
@@ -1675,6 +1676,18 @@ function collabJoinChannel(){
   });
 }
 
+function collabDeleteChannel(id){
+  if(!confirm('Delete this channel? Messages will be lost.'))return;
+  // Remove from local file
+  collabChannels=collabChannels.filter(function(c){return c.id!==id});
+  apiPost('/api/collab/channels',{id:'__delete__'+id}).catch(function(){});
+  // Delete from server
+  fetch(API+'/api/collab/delete',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({channelId:id})}).catch(function(){});
+  if(collabActiveChannel===id)collabActiveChannel=null;
+  renderCollabChannelList();
+  var msgEl=document.getElementById('collabMessages');
+  if(msgEl)msgEl.innerHTML='<div style="text-align:center;color:var(--dim);padding:40px;font-size:12px">Channel deleted</div>';
+}
 function collabSelect(id){
   collabActiveChannel=id;
   collabLoadMessages();