nothumanallowed 6.4.2 → 6.4.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "6.4.2",
+  "version": "6.4.3",
   "description": "NotHumanAllowed — 38 AI agents for security, code, DevOps, data & daily ops. Per-agent memory, Telegram + Discord auto-responder, proactive intelligence daemon, voice chat, plugin system.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -490,6 +490,11 @@ export async function cmdUI(args) {
   // ── Route Handlers ──────────────────────────────────────────────────────
 
   async function handleRequest(req, res) {
+    // Skip WebSocket upgrade requests — handled by server.on('upgrade')
+    if (req.headers.upgrade && req.headers.upgrade.toLowerCase() === 'websocket') {
+      return; // Don't respond — let the upgrade event handle it
+    }
+
     const start = Date.now();
     const url = new URL(req.url, `http://${HOST}:${port}`);
     const pathname = url.pathname;
@@ -533,8 +538,8 @@ export async function cmdUI(args) {
         return;
       }
 
-      // ── Favicon + Apple touch icons (no-content, suppress 404) ────────
-      if (pathname === '/favicon.ico' || pathname.startsWith('/apple-touch-icon')) {
+      // ── Favicon + Apple touch icons + browser probes (suppress 404) ────
+      if (pathname === '/favicon.ico' || pathname.startsWith('/apple-touch-icon') || pathname.startsWith('/.well-known')) {
         res.writeHead(204);
         res.end();
         return;
@@ -887,12 +892,10 @@ export async function cmdUI(args) {
 
   const server = http.createServer(handleRequest);
 
-  // ── WebSocket on separate port (3848) to avoid HTTP handler conflicts ──
-  const wsPort = port + 1; // 3848 when port is 3847
-  const wsHttpServer = http.createServer((req, res) => { res.writeHead(426); res.end(); });
+  // ── WebSocket on same port as HTTP (upgrade handler) ──────────────────
   const wsClients = new Set();
 
-  wsHttpServer.on('upgrade', (req, socket, head) => {
+  server.on('upgrade', (req, socket, head) => {
     const key = req.headers['sec-websocket-key'];
     if (!key) { socket.destroy(); return; }
 
@@ -921,9 +924,6 @@ export async function cmdUI(args) {
     socket.on('error', () => wsClients.delete(socket));
   });
 
-  wsHttpServer.on('error', () => {}); // Silently ignore if port busy
-  wsHttpServer.listen(wsPort, HOST, () => {});
-
   server.on('error', (err) => {
     if (err.code === 'EADDRINUSE') {
       fail(`Port ${port} is already in use. Try: nha ui --port=${port + 1}`);

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '6.4.2';
+export const VERSION = '6.4.3';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -880,8 +880,7 @@ var ws = null;
 var wsReconnectTimer = null;
 function connectWebSocket() {
   try {
-    var wsPort = parseInt(window.location.port || '3847') + 1;
-    ws = new WebSocket('ws://' + window.location.hostname + ':' + wsPort);
+    ws = new WebSocket('ws://' + window.location.host);
   } catch(e) { return; }
 
   ws.onopen = function() {