@chatpanel/gateway 0.1.1 → 0.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/gateway",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Local privacy gateway — redacts PII out of OpenAI/Anthropic API traffic before it reaches a model, then restores it in the reply. Point opencode, codex, aider, Claude Code, etc. at it.",
   "type": "module",
   "bin": {

package/src/config.js

@@ -7,6 +7,7 @@
 
 import { readFileSync, existsSync } from 'node:fs';
 import { join } from 'node:path';
+import os from 'node:os';
 
 const DEFAULTS = {
   host: '127.0.0.1',
@@ -100,7 +101,9 @@ function deepMerge(base, over) {
 export function loadConfig(env = process.env) {
   let cfg = DEFAULTS;
 
-  const path = env.CHATPANEL_GATEWAY_CONFIG || join(process.cwd(), 'gateway.config.json');
+  // Writable per-user location by default (NOT cwd — a login service runs with
+  // cwd "/", which is read-only). Same path persistConfig() writes to.
+  const path = env.CHATPANEL_GATEWAY_CONFIG || join(os.homedir(), '.chatpanel', 'gateway.config.json');
   if (existsSync(path)) {
     try {
       cfg = deepMerge(cfg, JSON.parse(readFileSync(path, 'utf8')));

package/src/configstore.js

@@ -2,15 +2,19 @@
 // configure it live over the localhost API (GET/POST /config). The gateway stays
 // authoritative — the extension is just a UI client.
 
-import { writeFileSync } from 'node:fs';
-import { join } from 'node:path';
+import { writeFileSync, mkdirSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import os from 'node:os';
 
+// Default to a writable per-user location, NOT process.cwd(): when the gateway
+// runs as a login service its cwd is "/" (read-only → EROFS on save).
 export function configPath(env = process.env) {
-  return env.CHATPANEL_GATEWAY_CONFIG || join(process.cwd(), 'gateway.config.json');
+  return env.CHATPANEL_GATEWAY_CONFIG || join(os.homedir(), '.chatpanel', 'gateway.config.json');
 }
 
 // Persist the user-editable subset (not derived runtime state).
 export function persistConfig(cfg, path = configPath()) {
+  mkdirSync(dirname(path), { recursive: true });
   const out = {
     host: cfg.host, port: cfg.port, backend: cfg.backend,
     bridge: cfg.bridge, upstreams: cfg.upstreams, redaction: cfg.redaction,

package/src/ner.js

@@ -68,7 +68,10 @@ export function startNer(cfg) {
   });
 
   // Poll for readiness without blocking server start; wire detection when up.
+  // `stopped` MUST be declared before the async poller below references it (else a
+  // temporal-dead-zone ReferenceError crashes startup when autostart is on).
   const ac = new AbortController();
+  let stopped = false;
   (async () => {
     const deadline = Date.now() + 120_000; // generous: first run installs deps
     while (Date.now() < deadline && !stopped) {
@@ -88,7 +91,6 @@ export function startNer(cfg) {
     if (!stopped) console.log('[ner] not ready after 120s — continuing deterministic-only (run ./ner/run.sh manually to debug).');
   })();
 
-  let stopped = false;
   const stop = () => {
     if (stopped) return;
     stopped = true;

package/src/server.js

@@ -31,7 +31,7 @@ import * as openai from './openai.js';
 import * as responses from './responses.js';
 import * as anthropic from './anthropic.js';
 
-export const VERSION = '0.1.1';
+export const VERSION = '0.1.3';
 
 const KNOWN_AGENTS = new Set(['codex', 'claude', 'opencode', 'pi', 'kiro', 'antigravity']);