nothumanallowed 9.9.4 → 9.9.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "9.9.4",
+  "version": "9.9.5",
   "description": "NotHumanAllowed — 38 AI agents, 53 tools. Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, GitHub, Notion, Slack, voice chat, 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/commands/ui.mjs

@@ -1869,17 +1869,56 @@ export async function cmdUI(args) {
 
   const server = http.createServer(handleRequest);
 
-  // ── WebSocket via ws package (compatible with Node.js 20-24+) ──────
-  let wss = null;
-  try {
-    const { WebSocketServer } = await import('ws');
-    wss = new WebSocketServer({ server });
-    wss.on('connection', (ws) => {
-      ws.on('error', () => {});
+  // ── WebSocket handler — accept browser WS and relay daemon events ──
+  server.on('upgrade', (req, socket) => {
+    const key = req.headers['sec-websocket-key'];
+    if (!key) { socket.destroy(); return; }
+
+    const acceptKey = crypto
+      .createHash('sha1')
+      .update(key + '258EAFA5-E914-47DA-95CA-5AB5DC86C11B')
+      .digest('base64');
+
+    socket.write(
+      'HTTP/1.1 101 Switching Protocols\r\n' +
+      'Upgrade: websocket\r\n' +
+      'Connection: Upgrade\r\n' +
+      'Sec-WebSocket-Accept: ' + acceptKey + '\r\n' +
+      '\r\n'
+    );
+
+    // Connect to daemon WS on port 3848 and relay messages
+    let daemonWs = null;
+    try {
+      const daemonReq = http.request({
+        hostname: '127.0.0.1', port: 3848, path: '/',
+        headers: { 'Upgrade': 'websocket', 'Connection': 'Upgrade', 'Sec-WebSocket-Key': crypto.randomBytes(16).toString('base64'), 'Sec-WebSocket-Version': '13' },
+      });
+      daemonReq.on('upgrade', (res, daemonSocket) => {
+        daemonWs = daemonSocket;
+        // Relay daemon → browser
+        daemonSocket.on('data', (buf) => { try { socket.write(buf); } catch {} });
+        daemonSocket.on('close', () => {});
+        daemonSocket.on('error', () => {});
+      });
+      daemonReq.on('error', () => {}); // daemon not running — WS works without it
+      daemonReq.end();
+    } catch {}
+
+    // Handle browser → daemon (ping/pong)
+    socket.on('data', (buf) => {
+      if (buf.length < 2) return;
+      const opcode = buf[0] & 0x0f;
+      if (opcode === 0x08) { socket.end(); if (daemonWs) daemonWs.end(); return; }
+      if (opcode === 0x09) { // ping → pong
+        const pong = Buffer.alloc(2);
+        pong[0] = 0x8a; pong[1] = 0;
+        socket.write(pong);
+      }
     });
-  } catch {
-    // ws package not available — WS disabled, everything else works
-  }
+    socket.on('close', () => { if (daemonWs) try { daemonWs.end(); } catch {} });
+    socket.on('error', () => { if (daemonWs) try { daemonWs.end(); } catch {} });
+  });
 
   server.on('error', (err) => {
     if (err.code === 'EADDRINUSE') {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '9.9.4';
+export const VERSION = '9.9.5';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/web-ui.mjs

@@ -1928,7 +1928,7 @@ var wsMaxRetries = 3;
 function connectWebSocket() {
   if (wsRetryCount >= wsMaxRetries) return; // Stop trying after 3 failures
   try {
-    ws = new WebSocket('ws://' + window.location.hostname + ':3848');
+    ws = new WebSocket('ws://' + window.location.host + '/ws');
   } catch(e) { return; }
 
   ws.onopen = function() {