@chatpanel/gateway 0.5.3 → 0.5.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/gateway",
-  "version": "0.5.3",
+  "version": "0.5.5",
   "description": "Local privacy gateway — redacts PII out of OpenAI/Anthropic API traffic before it reaches a model, then restores it in the reply. Point opencode, codex, aider, Claude Code, etc. at it.",
   "type": "module",
   "bin": {

package/src/configstore.js

@@ -17,6 +17,9 @@ export function persistConfig(cfg, path = configPath()) {
   mkdirSync(dirname(path), { recursive: true });
   const out = {
     host: cfg.host, port: cfg.port, backend: cfg.backend,
+    // Destinations (the configured agents + API models) MUST persist — otherwise a
+    // restart drops them and every model falls back to the default OpenAI upstream.
+    destinations: cfg.destinations,
     bridge: cfg.bridge, upstreams: cfg.upstreams, redaction: cfg.redaction,
     ner: cfg.ner, allowedOrigins: cfg.allowedOrigins, maxBodyBytes: cfg.maxBodyBytes,
     pro: cfg.pro, logRequests: cfg.logRequests, tools: cfg.tools,

package/src/router.js

@@ -13,18 +13,28 @@
 //
 // /v1/models aggregates every destination's models so clients can discover them.
 
-// Back-compat: if no destinations are configured, synthesize them from the legacy
-// backend/upstreams config so existing installs keep working unchanged.
+// The CLI agents the bridge can drive. A request for any of these ALWAYS routes to
+// the bridge relay — the agent runs under ITS OWN login (subscription / enterprise /
+// api, however it's configured), so the gateway never needs an API key for it. This
+// is the whole point: an OpenAI/Anthropic endpoint fronting already-logged-in
+// codex / claude code via the bridge.
+const KNOWN_AGENTS = ['codex', 'claude', 'opencode', 'pi', 'kiro', 'antigravity'];
+
+// Build the destination list: explicitly-configured destinations + the known agents
+// (always available as bridge destinations, even with zero saved config) + API
+// fallbacks for non-agent models on the api backend.
 export function listDestinations(cfg) {
-  if (Array.isArray(cfg.destinations) && cfg.destinations.length) return cfg.destinations;
-  if (cfg.backend === 'api') {
-    return [
-      { id: 'openai', type: 'api', protocol: 'openai', baseUrl: cfg.upstreams?.openai?.baseUrl, models: [] },
-      { id: 'anthropic', type: 'api', protocol: 'anthropic', baseUrl: cfg.upstreams?.anthropic?.baseUrl, models: [] },
-    ];
+  const configured = (Array.isArray(cfg.destinations) ? cfg.destinations : []).filter(Boolean);
+  const haveId = new Set(configured.map((d) => d.id));
+  const out = [...configured];
+  for (const a of KNOWN_AGENTS) {
+    if (!haveId.has(a)) out.push({ id: a, type: 'agent', agent: a, models: [a] });
+  }
+  if (cfg.backend === 'api' && !configured.some((d) => d.type === 'api')) {
+    out.push({ id: 'openai', type: 'api', protocol: 'openai', baseUrl: cfg.upstreams?.openai?.baseUrl, models: [] });
+    out.push({ id: 'anthropic', type: 'api', protocol: 'anthropic', baseUrl: cfg.upstreams?.anthropic?.baseUrl, models: [] });
   }
-  const agents = [...new Set([cfg.bridge?.agent || 'codex', 'codex', 'claude', 'opencode', 'pi'])];
-  return agents.map((a) => ({ id: a, type: 'agent', agent: a, models: [a] }));
+  return out;
 }
 
 // Pick the destination that serves `model` (explicit membership → id/agent match →
@@ -32,10 +42,17 @@ export function listDestinations(cfg) {
 export function resolveDestination(model, cfg, kind) {
   const dests = listDestinations(cfg);
   const wantsAnthropic = kind === 'anthropic';
+  const protoOk = (d) => (wantsAnthropic ? d.protocol === 'anthropic' : d.protocol !== 'anthropic');
   return (
+    // Explicit: a destination that serves this exact model (a known agent like codex
+    // matches its own agent destination here — so it ALWAYS goes to the bridge).
     (model && dests.find((d) => Array.isArray(d.models) && d.models.includes(model)))
     || (model && dests.find((d) => d.id === model || d.agent === model))
-    || dests.find((d) => d.type === 'agent' || (wantsAnthropic ? d.protocol === 'anthropic' : d.protocol !== 'anthropic'))
+    // No match: fall back to the BACKEND's natural default — an API destination on the
+    // api backend, an agent on the bridge backend. Never silently send an unknown
+    // model name to a CLI agent (that's why gemma must not hit codex).
+    || dests.find((d) => (cfg.backend === 'bridge' ? d.type === 'agent' : (d.type === 'api' && protoOk(d))))
+    || dests.find((d) => (cfg.backend === 'bridge' ? d.type === 'agent' : d.type === 'api'))
     || dests[0]
     || null
   );

package/src/server.js

@@ -33,7 +33,7 @@ import * as openai from './openai.js';
 import * as responses from './responses.js';
 import * as anthropic from './anthropic.js';
 
-export const VERSION = '0.5.3';
+export const VERSION = '0.5.5';
 
 const KNOWN_AGENTS = new Set(['codex', 'claude', 'opencode', 'pi', 'kiro', 'antigravity']);