@chatpanel/gateway 0.6.34 → 0.6.35

package/bin/chatpanel-gateway.js

@@ -3,6 +3,7 @@
 //
 //   chatpanel-gateway              start the gateway (foreground)
 //   chatpanel-gateway mcp          stdio MCP server exposing warm history as tools
+//   chatpanel-gateway local        show the local runtime — bridge + gateway, one view
 //   chatpanel-gateway --install    register login auto-start + start now
 //   chatpanel-gateway --uninstall  remove login auto-start
 //   chatpanel-gateway --status     is auto-start registered?
@@ -19,6 +20,10 @@ try {
     // server.js (which would open a second handle on the warm SQLite store).
     const { runMcpServer } = await import('../src/mcp.js');
     await runMcpServer();
+  } else if (arg === 'local') {
+    // Read-only unified view of both services. No server.js import — just HTTP probes.
+    const { localStatus, formatLocalStatus } = await import('../src/local-status.js');
+    process.stdout.write(formatLocalStatus(await localStatus()));
   } else {
     const { start, VERSION } = await import('../src/server.js');
     const { installService, uninstallService, serviceStatus } = await import('../src/service.js');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/gateway",
-  "version": "0.6.34",
+  "version": "0.6.35",
   "description": "Local privacy gateway \u2014 redacts PII out of OpenAI/Anthropic API traffic before it reaches a model, then restores it in the reply. Point opencode, codex, aider, Claude Code, etc. at it.",
   "type": "module",
   "bin": {

package/src/local-status.js

@@ -0,0 +1,104 @@
+// local-status.js — one view of ChatPanel's local runtime: the bridge and the gateway.
+//
+// U3 of docs/bridge-gateway-unification.md: a person should be able to ask "what's running
+// locally?" once and get a straight answer, without knowing there are two services on two
+// ports. This is the read side of that — it probes both over HTTP and reports. It does NOT
+// control either service (start/stop stays with each module's own installer, which owns its
+// launchd/systemd unit); managing another module's service from here would duplicate the
+// knowledge of how to do it and drift.
+//
+// The bridge is OPTIONAL from the gateway's side and the gateway is OPTIONAL from the
+// bridge's — so a missing one is reported plainly, never as an error.
+
+import { loadConfig } from './config.js';
+
+function gatewayUrl() {
+  try {
+    return `http://127.0.0.1:${loadConfig().port || 4320}`;
+  } catch {
+    return 'http://127.0.0.1:4320';
+  }
+}
+
+function bridgeUrl() {
+  try {
+    return String(loadConfig().bridge?.url || 'http://127.0.0.1:4319').replace(/\/+$/, '');
+  } catch {
+    return 'http://127.0.0.1:4319';
+  }
+}
+
+async function probe(url, path = '/health') {
+  try {
+    const res = await fetch(url + path, { signal: AbortSignal.timeout(2500) });
+    if (!res.ok) return { ok: false, reason: `HTTP ${res.status}` };
+    return { ok: true, data: await res.json().catch(() => ({})) };
+  } catch (e) {
+    return { ok: false, reason: e?.name === 'TimeoutError' ? 'no response' : (e?.message || 'unreachable') };
+  }
+}
+
+/**
+ * A structured picture of the local runtime — for the `local` command and for the gateway
+ * to log at startup. Pure except the two probes; the caller decides how to render it.
+ */
+export async function localStatus() {
+  const gwUrl = gatewayUrl();
+  const brUrl = bridgeUrl();
+  const [gw, br] = await Promise.all([probe(gwUrl), probe(brUrl)]);
+  const skills = br.ok ? await probe(brUrl, '/skills').then((r) => (r.ok ? (r.data.skills || []).length : null)).catch(() => null) : null;
+  return {
+    gateway: {
+      url: gwUrl,
+      running: gw.ok,
+      version: gw.ok ? gw.data.version : null,
+      tier: gw.ok ? gw.data.tier : null,
+      reason: gw.ok ? null : gw.reason,
+    },
+    bridge: {
+      url: brUrl,
+      running: br.ok,
+      version: br.ok ? br.data.version : null,
+      agents: br.ok ? (br.data.agents || []).filter((a) => a.available).length : null,
+      skills: skills ?? (br.ok ? br.data.skills?.count ?? null : null),
+      reason: br.ok ? null : br.reason,
+    },
+  };
+}
+
+/** Human-readable block for the CLI. */
+export function formatLocalStatus(s) {
+  const line = (name, m, extra) => {
+    const dot = m.running ? '●' : '○';
+    const head = m.running ? `${name}  running · v${m.version}` : `${name}  not running${m.reason ? ` (${m.reason})` : ''}`;
+    return `  ${dot} ${head}\n      ${extra}`;
+  };
+  const gw = line('Gateway', s.gateway, s.gateway.running
+    ? `Privacy layer: redaction, routing, voice. ${s.gateway.url}`
+    : `Optional upgrade (redaction, routing, voice). Start with: chatpanel-gateway --install`);
+  const brExtra = s.bridge.running
+    ? `Local agents & skills${s.bridge.agents != null ? ` · ${s.bridge.agents} agent(s)` : ''}${s.bridge.skills != null ? ` · ${s.bridge.skills} skill(s)` : ''}. ${s.bridge.url}`
+    : `Runs your local coding agents and skills. Start with: curl -fsSL https://dl.chatpanel.net/bridge/install.sh | bash`;
+  const br = line('Bridge', s.bridge, brExtra);
+  const summary = s.bridge.running && s.gateway.running
+    ? 'Both running — local traffic can route through the gateway\'s privacy layer.'
+    : s.bridge.running
+      ? 'Bridge up. The gateway is an optional upgrade.'
+      : s.gateway.running
+        ? 'Gateway up. Start the bridge to use local agents and skills.'
+        : 'Neither running.';
+  return `ChatPanel local\n\n${gw}\n\n${br}\n\n  ${summary}\n`;
+}
+
+/**
+ * One-line note for the gateway to log at startup, so the operator sees the unified picture
+ * without running anything. Never throws; a probe failure just says "not detected".
+ */
+export async function bridgePresenceNote() {
+  const br = await probe(bridgeUrl());
+  if (br.ok) {
+    const n = (br.data.skills?.count ?? null);
+    return `bridge detected at ${bridgeUrl()} (v${br.data.version}${n != null ? `, ${n} skills` : ''}) — its agents and skills are available through this gateway.`;
+  }
+  return `bridge not detected at ${bridgeUrl()} — local agents/skills are unavailable until it runs (curl -fsSL https://dl.chatpanel.net/bridge/install.sh | bash). The gateway runs fine without it.`;
+}

package/src/server.js

@@ -45,7 +45,7 @@ import * as openai from './openai.js';
 import * as responses from './responses.js';
 import * as anthropic from './anthropic.js';
 
-export const VERSION = '0.6.34';
+export const VERSION = '0.6.35';
 
 // WARM search tier — SQLite + FTS5 record store (falls back to an encrypted-JSON
 // store if SQLite can't load), fed by the extension's ingest sync + backup-ingest.
@@ -1013,6 +1013,13 @@ export function start(cfg = loadConfig()) {
   server.listen(cfg.port, cfg.host, () => {
     console.log(`ChatPanel Privacy Gateway v${VERSION} on http://${cfg.host}:${cfg.port}`);
     console.log(`  backend  : ${cfg.backend}` + (cfg.backend === 'bridge' ? ` (agent: ${cfg.bridge.agent}, via ${cfg.bridge.url})` : ''));
+    // U3: report the bridge at startup so the operator sees the unified picture without
+    // running anything. Detect only — never force-spawn a managed service. Best-effort and
+    // non-fatal: a probe failure just logs "not detected".
+    import('./local-status.js')
+      .then((m) => m.bridgePresenceNote())
+      .then((note) => console.log(`  bridge   : ${note}`))
+      .catch(() => {});
     console.log(`  redaction: ${cfg.redaction.tier}` + (cfg.redaction.detection?.backend && cfg.redaction.detection.backend !== 'off'
       ? ` + ${cfg.redaction.detection.backend} detector` : (cfg.ner?.autostart ? ' (+ NER starting…)' : '')));
     // M7: a non-loopback bind exposes the gateway on the LAN, where the per-request