@chatpanel/gateway 0.1.7 → 0.1.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/gateway",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Local privacy gateway — redacts PII out of OpenAI/Anthropic API traffic before it reaches a model, then restores it in the reply. Point opencode, codex, aider, Claude Code, etc. at it.",
   "type": "module",
   "bin": {

package/src/configstore.js

@@ -34,7 +34,8 @@ export function publicConfig(cfg, { proUnlocked = false } = {}) {
     redaction: {
       tier: cfg.redaction?.tier,
       redactSystem: cfg.redaction?.redactSystem !== false,
-      detection: cfg.redaction?.detection || { backend: 'off' },
+      // Never echo the detector's apiKey back (write-only, like the tokens).
+      detection: (() => { const { apiKey, ...d } = cfg.redaction?.detection || { backend: 'off' }; return d; })(),
       dictionary: Array.isArray(cfg.redaction?.dictionary) ? cfg.redaction.dictionary : [],
     },
     ner: cfg.ner,
@@ -51,6 +52,16 @@ export function applyConfigPatch(cfg, patch = {}) {
     if (typeof patch.bridge.url === 'string') cfg.bridge.url = patch.bridge.url;
     if (typeof patch.bridge.agent === 'string') cfg.bridge.agent = patch.bridge.agent;
   }
+  // api backend: where redacted traffic is forwarded (the client still picks the
+  // model + sends its own key).
+  if (patch.upstreams && typeof patch.upstreams === 'object') {
+    for (const k of ['openai', 'anthropic']) {
+      const u = patch.upstreams[k];
+      if (u && typeof u.baseUrl === 'string' && u.baseUrl.trim()) {
+        cfg.upstreams[k] = { ...cfg.upstreams[k], baseUrl: u.baseUrl.trim() };
+      }
+    }
+  }
   if (patch.redaction && typeof patch.redaction === 'object') {
     const r = patch.redaction;
     if (r.tier === 'basic' || r.tier === 'full') cfg.redaction.tier = r.tier;

package/src/ner.js

@@ -58,17 +58,20 @@ export function startNer(cfg) {
   const n = cfg.ner;
   if (!n || !n.autostart) return null;
 
-  // Respect an explicitly-configured detector — don't relaunch — but still apply
-  // the full-tier bump (else a persisted config with detection-on but tier:basic
-  // would never redact entities even though a detector is available).
+  const port = n.port || 9009;
+  const bundledUrl = `http://127.0.0.1:${port}/ner`;
+
+  // Respect a USER-configured detector pointing elsewhere (a custom NER, a local
+  // LLM) — don't relaunch — but still apply the full-tier bump. If detection is
+  // off OR points at our own bundled NER, fall through and (re)launch/adopt it,
+  // so a persisted "detection→bundled" config doesn't leave NER actually down.
   const det = cfg.redaction?.detection;
-  if (det && det.backend && det.backend !== 'off') {
+  const userDetector = det && det.backend && det.backend !== 'off' && det.url !== bundledUrl;
+  if (userDetector) {
     if (n.enableFullTier && cfg.redaction.tier !== 'full') cfg.redaction.tier = 'full';
-    console.log(`[ner] detection already configured (${det.backend}) — full tier ${cfg.redaction.tier === 'full' ? 'on' : 'off'}`);
+    console.log(`[ner] using configured detector (${det.backend} ${det.url || ''}) — full tier ${cfg.redaction.tier === 'full' ? 'on' : 'off'}`);
     return null;
   }
-
-  const port = n.port || 9009;
   let stopped = false;
   let child = null;
   const ac = new AbortController();
@@ -121,12 +124,12 @@ export function startNer(cfg) {
     });
 
     // 3) Poll for readiness; wire detection when up.
-    const deadline = Date.now() + 120_000; // generous: first run installs deps
+    const deadline = Date.now() + 300_000; // generous: first run installs deps
     while (Date.now() < deadline && !stopped) {
       if (await nerReachable(port, ac.signal)) { wire('ready'); return; }
       await sleep(1000);
     }
-    if (!stopped) console.log('[ner] not ready after 120s — continuing deterministic-only (run ./ner/run.sh manually to debug).');
+    if (!stopped) console.log('[ner] not ready after 300s — continuing deterministic-only (run ./ner/run.sh manually to debug).');
   })();
 
   const stop = () => {

package/src/server.js

@@ -31,7 +31,7 @@ import * as openai from './openai.js';
 import * as responses from './responses.js';
 import * as anthropic from './anthropic.js';
 
-export const VERSION = '0.1.7';
+export const VERSION = '0.1.9';
 
 const KNOWN_AGENTS = new Set(['codex', 'claude', 'opencode', 'pi', 'kiro', 'antigravity']);