nothumanallowed 6.3.3 → 6.3.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "6.3.3",
+  "version": "6.3.5",
   "description": "NotHumanAllowed — 38 AI agents for security, code, DevOps, data & daily ops. Per-agent memory, Telegram + Discord auto-responder, proactive intelligence daemon, voice chat, plugin system.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -9,6 +9,7 @@
 
 import http from 'http';
 import os from 'os';
+import crypto from 'crypto';
 import { exec } from 'child_process';
 import fs from 'fs';
 import path from 'path';
@@ -868,6 +869,57 @@ export async function cmdUI(args) {
 
   const server = http.createServer(handleRequest);
 
+  // ── WebSocket server on port 3848 (so the frontend can connect) ──────
+  const wsServer = http.createServer((req, res) => {
+    if (req.url === '/health') {
+      res.writeHead(200, { 'Content-Type': 'application/json', 'Access-Control-Allow-Origin': '*' });
+      res.end(JSON.stringify({ ok: true }));
+      return;
+    }
+    res.writeHead(404);
+    res.end();
+  });
+
+  const wsClients = new Set();
+
+  wsServer.on('upgrade', (req, socket, head) => {
+    const key = req.headers['sec-websocket-key'];
+    if (!key) { socket.destroy(); return; }
+
+    const acceptKey = crypto
+      .createHash('sha1')
+      .update(key + '258EAFA5-E914-47DA-95CA-5AB5DC86C11B')
+      .digest('base64');
+
+    socket.write(
+      'HTTP/1.1 101 Switching Protocols\r\n' +
+      'Upgrade: websocket\r\n' +
+      'Connection: Upgrade\r\n' +
+      `Sec-WebSocket-Accept: ${acceptKey}\r\n` +
+      '\r\n'
+    );
+
+    wsClients.add(socket);
+
+    socket.on('data', (buf) => {
+      if (buf.length < 2) return;
+      const opcode = buf[0] & 0x0f;
+      if (opcode === 0x08) { wsClients.delete(socket); socket.end(); }
+      if (opcode === 0x09) { socket.write(Buffer.from([0x8a, 0])); }
+    });
+    socket.on('close', () => wsClients.delete(socket));
+    socket.on('error', () => wsClients.delete(socket));
+  });
+
+  wsServer.on('error', (err) => {
+    if (err.code === 'EADDRINUSE') {
+      // Daemon already has it — that's fine, frontend will connect to daemon
+      return;
+    }
+  });
+
+  wsServer.listen(3848, HOST, () => {});
+
   server.on('error', (err) => {
     if (err.code === 'EADDRINUSE') {
       fail(`Port ${port} is already in use. Try: nha ui --port=${port + 1}`);

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '6.3.3';
+export const VERSION = '6.3.5';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -840,7 +840,7 @@ var ws = null;
 var wsReconnectTimer = null;
 function connectWebSocket() {
   try {
-    ws = new WebSocket('ws://127.0.0.1:3848');
+    ws = new WebSocket('ws://' + window.location.hostname + ':3848');
   } catch(e) { return; }
 
   ws.onopen = function() {