nothumanallowed 6.3.5 → 6.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "6.3.5",
+  "version": "6.4.1",
   "description": "NotHumanAllowed — 38 AI agents for security, code, DevOps, data & daily ops. Per-agent memory, Telegram + Discord auto-responder, proactive intelligence daemon, voice chat, plugin system.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -533,8 +533,8 @@ export async function cmdUI(args) {
         return;
       }
 
-      // ── Favicon (no-content) ──────────────────────────────────────────
-      if (pathname === '/favicon.ico') {
+      // ── Favicon + Apple touch icons (no-content, suppress 404) ────────
+      if (pathname === '/favicon.ico' || pathname.startsWith('/apple-touch-icon')) {
         res.writeHead(204);
         res.end();
         return;
@@ -598,6 +598,24 @@ export async function cmdUI(args) {
         return;
       }
 
+      // POST /api/email/read — read full email by ID
+      if (method === 'POST' && pathname === '/api/email/read') {
+        const body = await parseBody(req);
+        if (!body.messageId) {
+          sendJSON(res, 400, { error: 'messageId required' });
+          logRequest(method, pathname, 400, Date.now() - start);
+          return;
+        }
+        try {
+          const msg = await getMessage(config, body.messageId);
+          sendJSON(res, 200, { message: msg });
+        } catch (e) {
+          sendJSON(res, 200, { error: e.message });
+        }
+        logRequest(method, pathname, 200, Date.now() - start);
+        return;
+      }
+
       // GET /api/emails
       if (method === 'GET' && pathname === '/api/emails') {
         try {
@@ -869,20 +887,11 @@ export async function cmdUI(args) {
 
   const server = http.createServer(handleRequest);
 
-  // ── WebSocket server on port 3848 (so the frontend can connect) ──────
-  const wsServer = http.createServer((req, res) => {
-    if (req.url === '/health') {
-      res.writeHead(200, { 'Content-Type': 'application/json', 'Access-Control-Allow-Origin': '*' });
-      res.end(JSON.stringify({ ok: true }));
-      return;
-    }
-    res.writeHead(404);
-    res.end();
-  });
-
+  // ── WebSocket integrated in main server (same port, /ws path) ──────
   const wsClients = new Set();
 
-  wsServer.on('upgrade', (req, socket, head) => {
+  server.on('upgrade', (req, socket, head) => {
+    if (req.url !== '/ws') { socket.destroy(); return; }
     const key = req.headers['sec-websocket-key'];
     if (!key) { socket.destroy(); return; }
 
@@ -911,15 +920,6 @@ export async function cmdUI(args) {
     socket.on('error', () => wsClients.delete(socket));
   });
 
-  wsServer.on('error', (err) => {
-    if (err.code === 'EADDRINUSE') {
-      // Daemon already has it — that's fine, frontend will connect to daemon
-      return;
-    }
-  });
-
-  wsServer.listen(3848, HOST, () => {});
-
   server.on('error', (err) => {
     if (err.code === 'EADDRINUSE') {
       fail(`Port ${port} is already in use. Try: nha ui --port=${port + 1}`);

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '6.3.5';
+export const VERSION = '6.4.1';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -373,10 +373,50 @@ function renderEmails(el){
   var e=dash.emails;
   if(e.length===0){el.innerHTML='<div class="card" style="text-align:center;color:var(--dim);padding:30px">No unread emails</div>';return}
   var h='';e.forEach(function(x){
-    h+='<div class="card email"><div class="email__header"><span class="email__from">'+esc(x.from)+'</span><span class="email__date">'+esc(x.date)+'</span></div><div class="email__subject">'+esc(x.subject)+'</div><div class="email__snippet">'+esc((x.snippet||'').slice(0,150))+'</div></div>';
+    h+='<div class="card email" style="cursor:pointer" onclick="openEmail(\\x27'+esc(x.id)+'\\x27)"><div class="email__header"><span class="email__from">'+esc(x.from)+'</span><span class="email__date">'+esc(x.date)+'</span></div><div class="email__subject">'+esc(x.subject)+'</div><div class="email__snippet">'+esc((x.snippet||'').slice(0,150))+'</div><div style="font-size:10px;color:var(--green3);margin-top:6px">Click to read full email</div></div>';
   });
   el.innerHTML=h;
 }
+var openEmailId=null;
+function openEmail(id){
+  openEmailId=id;
+  var el=document.getElementById('content');
+  el.innerHTML='<div style="text-align:center;padding:40px"><div class="spinner"></div><div style="color:var(--dim)">Loading email...</div></div>';
+  apiPost('/api/email/read',{messageId:id}).then(function(r){
+    if(!r||r.error){el.innerHTML='<div class="card" style="color:var(--red);padding:20px">Error: '+(r&&r.error||'Failed to load email')+'</div>';return}
+    var m=r.message||r;
+    var h='<div style="margin-bottom:12px"><button class="btn btn--secondary" onclick="switchView(\\x27emails\\x27)" style="font-size:11px">&larr; Back to inbox</button></div>';
+    h+='<div class="card" style="padding:20px">';
+    h+='<div style="margin-bottom:12px;padding-bottom:12px;border-bottom:1px solid var(--border)">';
+    h+='<div style="font-size:16px;font-weight:700;color:var(--bright);margin-bottom:8px">'+esc(m.subject||'(no subject)')+'</div>';
+    h+='<div style="font-size:12px;color:var(--dim);margin-bottom:4px"><strong style="color:var(--text)">From:</strong> '+esc(m.from||'')+'</div>';
+    h+='<div style="font-size:12px;color:var(--dim);margin-bottom:4px"><strong style="color:var(--text)">To:</strong> '+esc(m.to||'')+'</div>';
+    h+='<div style="font-size:12px;color:var(--dim)"><strong style="color:var(--text)">Date:</strong> '+esc(m.date||'')+'</div>';
+    h+='</div>';
+    h+='<div style="font-size:13px;line-height:1.7;color:var(--text);white-space:pre-wrap;word-wrap:break-word">'+esc(m.body||m.snippet||'(no content)')+'</div>';
+    h+='</div>';
+    // Action buttons
+    h+='<div style="display:flex;gap:8px;margin-top:12px">';
+    h+='<button class="btn btn--primary" onclick="replyToEmail(\\x27'+esc(id)+'\\x27)" style="font-size:12px">Reply</button>';
+    h+='<button class="btn btn--secondary" onclick="askAgentAboutEmail(\\x27'+esc(id)+'\\x27)" style="font-size:12px">Ask SABER to scan</button>';
+    h+='</div>';
+    el.innerHTML=h;
+  });
+}
+function replyToEmail(id){
+  switchView('chat');
+  setTimeout(function(){
+    var inp=document.getElementById('chatInput');
+    if(inp){inp.value='Reply to email '+id+': ';inp.focus()}
+  },200);
+}
+function askAgentAboutEmail(id){
+  switchView('chat');
+  setTimeout(function(){
+    var inp=document.getElementById('chatInput');
+    if(inp){inp.value='Scan email '+id+' for phishing or security threats';inp.focus()}
+  },200);
+}
 
 // ---- CALENDAR (monthly grid + day detail modal) ----
 var calYear, calMonth;
@@ -684,7 +724,7 @@ function renderSettings(el) {
 }
 
 function settingsSection(id, title, desc, fields) {
-  var h = '<div class="card" style="margin-bottom:16px" id="settings-' + id + '">' +
+  var h = '<form class="card" style="margin-bottom:16px" id="settings-' + id + '" onsubmit="event.preventDefault();saveSettingsSection(\\x27' + id + '\\x27)">' +
     '<div class="card__title" style="color:var(--green);font-size:14px;margin-bottom:4px">' + esc(title) + '</div>' +
     '<div style="font-size:11px;color:var(--dim);margin-bottom:12px">' + esc(desc) + '</div>';
 
@@ -713,7 +753,7 @@ function settingsSection(id, title, desc, fields) {
     '<span id="settings-status-' + id + '" style="font-size:11px;color:var(--dim)"></span>' +
   '</div>';
 
-  h += '</div>';
+  h += '</form>';
   return h;
 }
 
@@ -840,7 +880,7 @@ var ws = null;
 var wsReconnectTimer = null;
 function connectWebSocket() {
   try {
-    ws = new WebSocket('ws://' + window.location.hostname + ':3848');
+    ws = new WebSocket('ws://' + window.location.host + '/ws');
   } catch(e) { return; }
 
   ws.onopen = function() {