@chatpanel/gateway 0.1.4 → 0.1.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/gateway",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Local privacy gateway — redacts PII out of OpenAI/Anthropic API traffic before it reaches a model, then restores it in the reply. Point opencode, codex, aider, Claude Code, etc. at it.",
   "type": "module",
   "bin": {

package/src/ner.js

@@ -9,9 +9,30 @@
 import { spawn } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { dirname, join } from 'node:path';
+import { existsSync } from 'node:fs';
+import os from 'node:os';
 
 const NER_DIR = join(dirname(fileURLToPath(import.meta.url)), '..', 'ner');
 
+// A login service (LaunchAgent / systemd) inherits a MINIMAL PATH — not your
+// shell's — so `bash` and a pyenv/homebrew `python3` aren't found. Resolve bash
+// absolutely and enrich PATH with the usual locations so run.sh + python3 work.
+function resolveBash() {
+  for (const p of ['/bin/bash', '/usr/bin/bash', '/usr/local/bin/bash', '/opt/homebrew/bin/bash']) {
+    if (existsSync(p)) return p;
+  }
+  return 'bash';
+}
+
+function enrichedPath(home = os.homedir(), base = process.env.PATH || '') {
+  const extra = [
+    '/opt/homebrew/bin', '/usr/local/bin', '/usr/bin', '/bin', '/usr/sbin', '/sbin',
+    join(home, '.pyenv', 'shims'), join(home, '.pyenv', 'bin'),
+    join(home, '.local', 'bin'),
+  ];
+  return [...new Set([...base.split(':').filter(Boolean), ...extra])].join(':');
+}
+
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 
 // Probe the ACTUAL /ner contract (POST {text} -> {entities}), not /health: many
@@ -61,9 +82,18 @@ export function startNer(cfg) {
 
     // 2) Otherwise launch the bundled spaCy server.
     try {
-      child = spawn('bash', ['run.sh'], {
+      child = spawn(resolveBash(), ['run.sh'], {
         cwd: NER_DIR,
-        env: { ...process.env, PORT: String(port) },
+        env: {
+          ...process.env,
+          PORT: String(port),
+          PATH: enrichedPath(),
+          // Force official PyPI: a machine pinned to a private/corp index (in
+          // pip.conf) can't reach it off-VPN, which breaks the one-time install.
+          PIP_INDEX_URL: process.env.CHATPANEL_PIP_INDEX_URL || 'https://pypi.org/simple',
+          PIP_EXTRA_INDEX_URL: '',
+          PIP_DISABLE_PIP_VERSION_CHECK: '1',
+        },
         stdio: ['ignore', 'pipe', 'pipe'],
       });
     } catch (e) {

package/src/server.js

@@ -31,7 +31,7 @@ import * as openai from './openai.js';
 import * as responses from './responses.js';
 import * as anthropic from './anthropic.js';
 
-export const VERSION = '0.1.4';
+export const VERSION = '0.1.6';
 
 const KNOWN_AGENTS = new Set(['codex', 'claude', 'opencode', 'pi', 'kiro', 'antigravity']);