nothumanallowed 6.4.0 → 6.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "6.4.0",
+  "version": "6.4.2",
   "description": "NotHumanAllowed — 38 AI agents for security, code, DevOps, data & daily ops. Per-agent memory, Telegram + Discord auto-responder, proactive intelligence daemon, voice chat, plugin system.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -533,8 +533,8 @@ export async function cmdUI(args) {
         return;
       }
 
-      // ── Favicon (no-content) ──────────────────────────────────────────
-      if (pathname === '/favicon.ico') {
+      // ── Favicon + Apple touch icons (no-content, suppress 404) ────────
+      if (pathname === '/favicon.ico' || pathname.startsWith('/apple-touch-icon')) {
         res.writeHead(204);
         res.end();
         return;
@@ -887,11 +887,12 @@ export async function cmdUI(args) {
 
   const server = http.createServer(handleRequest);
 
-  // ── WebSocket integrated in main server (same port, /ws path) ──────
+  // ── WebSocket on separate port (3848) to avoid HTTP handler conflicts ──
+  const wsPort = port + 1; // 3848 when port is 3847
+  const wsHttpServer = http.createServer((req, res) => { res.writeHead(426); res.end(); });
   const wsClients = new Set();
 
-  server.on('upgrade', (req, socket, head) => {
-    if (req.url !== '/ws') { socket.destroy(); return; }
+  wsHttpServer.on('upgrade', (req, socket, head) => {
     const key = req.headers['sec-websocket-key'];
     if (!key) { socket.destroy(); return; }
 
@@ -920,6 +921,9 @@ export async function cmdUI(args) {
     socket.on('error', () => wsClients.delete(socket));
   });
 
+  wsHttpServer.on('error', () => {}); // Silently ignore if port busy
+  wsHttpServer.listen(wsPort, HOST, () => {});
+
   server.on('error', (err) => {
     if (err.code === 'EADDRINUSE') {
       fail(`Port ${port} is already in use. Try: nha ui --port=${port + 1}`);

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '6.4.0';
+export const VERSION = '6.4.2';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -724,7 +724,7 @@ function renderSettings(el) {
 }
 
 function settingsSection(id, title, desc, fields) {
-  var h = '<div class="card" style="margin-bottom:16px" id="settings-' + id + '">' +
+  var h = '<form class="card" style="margin-bottom:16px" id="settings-' + id + '" onsubmit="event.preventDefault();saveSettingsSection(\\x27' + id + '\\x27)">' +
     '<div class="card__title" style="color:var(--green);font-size:14px;margin-bottom:4px">' + esc(title) + '</div>' +
     '<div style="font-size:11px;color:var(--dim);margin-bottom:12px">' + esc(desc) + '</div>';
 
@@ -753,7 +753,7 @@ function settingsSection(id, title, desc, fields) {
     '<span id="settings-status-' + id + '" style="font-size:11px;color:var(--dim)"></span>' +
   '</div>';
 
-  h += '</div>';
+  h += '</form>';
   return h;
 }
 
@@ -880,7 +880,8 @@ var ws = null;
 var wsReconnectTimer = null;
 function connectWebSocket() {
   try {
-    ws = new WebSocket('ws://' + window.location.host + '/ws');
+    var wsPort = parseInt(window.location.port || '3847') + 1;
+    ws = new WebSocket('ws://' + window.location.hostname + ':' + wsPort);
   } catch(e) { return; }
 
   ws.onopen = function() {