nothumanallowed 3.1.0 → 3.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "NotHumanAllowed — 38 AI agents for security, code, DevOps, data & daily ops. Ask agents directly, plan your day with 5 specialist agents, manage tasks, connect Gmail + Calendar.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -658,7 +658,7 @@ export async function cmdUI(args) {
     console.log('');
 
     if (!noBrowser) {
-      openBrowser(url);
+      openBrowser(localUrl);
     }
   });
 

package/src/services/ops-pipeline.mjs

@@ -99,7 +99,7 @@ export async function runPlanningPipeline(config, opts = {}) {
   if (emails.length > 0) {
     parallelPromises.push(
       callAgent(config, 'saber',
-        `Scan these emails for security threats. For each email, classify as SAFE or FLAGGED with reason.\n\nEMAILS:\n${emailContext}\n\nRespond with a JSON object: { "safe": [indices], "flagged": [{ "index": N, "reason": "..." }], "risk_notes": ["..."] }`,
+        `Analyze these emails for REAL security threats. Be smart — distinguish between:\n- LEGITIMATE notifications (Google login alerts from the user's own devices, npm publish confirmations, GitHub 2FA, password change confirmations the user initiated) → these are SAFE\n- ACTUAL threats (phishing links, spoofed senders, social engineering, urgent money requests, unknown login locations, credential harvesting) → these are FLAGGED\n\nDo NOT flag routine service notifications as threats. Only flag emails that require the user's immediate security attention.\n\nEMAILS:\n${emailContext}\n\nRespond with a JSON object: { "safe": [indices], "flagged": [{ "index": N, "reason": "..." }], "risk_notes": ["..."] }`,
       ).then(r => { agentResults.saber = r; ok('SABER: Email security scan complete'); })
        .catch(e => { warn(`SABER failed: ${e.message}`); agentResults.saber = '{"safe":[],"flagged":[],"risk_notes":["scan failed"]}'; })
     );
@@ -141,7 +141,13 @@ export async function runPlanningPipeline(config, opts = {}) {
   // ── Phase 6: CONDUCTOR — Synthesize daily plan ─────────────────────────
   info('Phase 6: CONDUCTOR synthesizing daily plan...');
 
-  const conductorPrompt = `You are the NHA Daily Planner. Synthesize intelligence from 4 specialist agents into a structured daily plan.
+  const conductorPrompt = `You are the NHA Daily Planner. Synthesize intelligence from 4 specialist agents into a structured, practical daily plan.
+
+IMPORTANT GUIDELINES:
+- Be PRACTICAL, not alarmist. Routine notifications (Google login alerts from your own devices, npm publish confirmations, GitHub security notices) are NOT security incidents.
+- Only escalate to "security_alerts" if there is a GENUINE, actionable threat (unknown logins from strange locations, actual phishing, credential leaks).
+- Focus on making the user's day productive, not on creating false urgency.
+- Suggest realistic time blocks based on the actual task complexity.
 
 AGENT REPORTS:
 ${agentResults.saber ? `\n[SABER — Security Scan]\n${agentResults.saber}` : ''}

package/src/services/web-ui.mjs

@@ -70,8 +70,8 @@ input:focus,textarea:focus{border-color:var(--green3)}
 .dash-section h2{font-size:13px;color:var(--cyan);margin-bottom:12px;text-transform:uppercase;letter-spacing:1px}
 
 /* Chat */
-#chat-view{display:flex;flex-direction:column;height:100%;overflow:hidden}
-#chat-messages{flex:1;overflow-y:auto;padding:0 0 12px 0}
+#chat-view{display:flex;flex-direction:column;height:calc(100vh - 52px);overflow:hidden}
+#chat-messages{flex:1;overflow-y:auto;padding:0 0 12px 0;-webkit-overflow-scrolling:touch}
 .msg{margin-bottom:12px;display:flex;gap:10px}
 .msg-user .msg-bubble{background:var(--bg3);border:1px solid var(--borderbright);border-radius:8px 8px 2px 8px;padding:10px 14px;max-width:80%;margin-left:auto;color:var(--textbright)}
 .msg-assistant .msg-bubble{background:var(--greendim);border:1px solid var(--green3);border-radius:8px 8px 8px 2px;padding:10px 14px;max-width:85%;color:var(--text);white-space:pre-wrap;word-wrap:break-word}
@@ -185,9 +185,11 @@ input:focus,textarea:focus{border-color:var(--green3)}
 /* Mobile */
 #mobile-toggle{display:none;background:none;color:var(--green);font-size:20px;padding:4px 8px}
 @media(max-width:768px){
-  #sidebar{position:fixed;left:-260px;top:0;height:100%;z-index:100;transition:left .25s;width:260px}
+  #sidebar{position:fixed;left:-260px;top:0;height:100%;z-index:100;transition:left .25s;width:260px;box-shadow:4px 0 20px rgba(0,0,0,0.8)}
   #sidebar.open{left:0}
+  #sidebar.open~#main #content::before{content:'';position:fixed;inset:52px 0 0 0;background:rgba(0,0,0,0.6);z-index:50}
   #mobile-toggle{display:block}
+  #content{padding:12px}
   .dash-grid{grid-template-columns:1fr}
   .agents-grid{grid-template-columns:repeat(auto-fill,minmax(150px,1fr))}
   .msg-user .msg-bubble,.msg-assistant .msg-bubble{max-width:95%}
@@ -287,6 +289,13 @@ function switchView(view) {
 function toggleSidebar() {
   document.getElementById('sidebar').classList.toggle('open');
 }
+// Close sidebar when tapping outside on mobile
+document.getElementById('main').addEventListener('click', (e) => {
+  const sidebar = document.getElementById('sidebar');
+  if (sidebar.classList.contains('open')) {
+    sidebar.classList.remove('open');
+  }
+});
 
 // ── Clock ──────────────────────────────────────────────────────────────────
 function updateClock() {
@@ -779,18 +788,20 @@ document.getElementById('agent-modal').addEventListener('click', e => {
 
 // ── Init ───────────────────────────────────────────────────────────────────
 async function init() {
+  // Show loading immediately
+  const el = document.getElementById('content');
+  if (el) el.innerHTML = '<div style="display:flex;align-items:center;justify-content:center;height:60vh;flex-direction:column"><div class="spinner"></div><div style="color:var(--textdim);margin-top:12px">Loading dashboard...</div></div>';
+
   try {
     await loadDashboard();
   } catch (e) {
     console.error('Dashboard load error:', e);
   }
-  try {
-    loadPlan().catch(e => console.error('Plan load error:', e));
-    loadAgents().catch(e => console.error('Agents load error:', e));
-  } catch (e) {
-    console.error('Init error:', e);
-  }
   renderView();
+  try {
+    loadPlan().catch(()=>{});
+    loadAgents().catch(()=>{});
+  } catch {}
   // Auto-refresh every 2 minutes
   setInterval(() => loadDashboard().then(() => { if (currentView === 'dashboard') renderView(); }).catch(()=>{}), 120000);
 }