@chatpanel/gateway 0.6.8 → 0.6.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/gateway",
-  "version": "0.6.8",
+  "version": "0.6.10",
   "description": "Local privacy gateway — redacts PII out of OpenAI/Anthropic API traffic before it reaches a model, then restores it in the reply. Point opencode, codex, aider, Claude Code, etc. at it.",
   "type": "module",
   "bin": {

package/src/config.js

@@ -139,5 +139,16 @@ export function loadConfig(env = process.env) {
   if (env.ANTHROPIC_BASE_URL) cfg = deepMerge(cfg, { upstreams: { anthropic: { baseUrl: env.ANTHROPIC_BASE_URL } } });
   if (env.CHATPANEL_REDACTION_TIER) cfg = deepMerge(cfg, { redaction: { tier: env.CHATPANEL_REDACTION_TIER } });
 
+  // A persisted port of 0 means "let the OS pick a random port" — fatal for a
+  // service that clients reach at a FIXED address: the extension, install.sh, and
+  // OpenCode/Pi all hardcode 4320. A stale/corrupt config that wrote 0 would bind a
+  // random ephemeral port and look "running but unreachable". Coerce 0 / NaN / out-
+  // of-range back to the default so the gateway is always where clients expect it.
+  const p = Number(cfg.port);
+  if (!Number.isInteger(p) || p < 1 || p > 65535) {
+    if (cfg.port !== DEFAULTS.port) console.warn(`[gateway] ignoring invalid port ${JSON.stringify(cfg.port)} — using ${DEFAULTS.port}`);
+    cfg = deepMerge(cfg, { port: DEFAULTS.port });
+  }
+
   return cfg;
 }

package/src/log.js

@@ -0,0 +1,21 @@
+// Timestamped console. Gateway logs (NER lifecycle, per-request redaction lines,
+// entitlement refresh) are useless for debugging without a clock — prefix every
+// console line with a local YYYY-MM-DD HH:MM:SS stamp. Call once at startup,
+// before anything logs. Idempotent (won't double-wrap if called twice).
+
+let installed = false;
+
+function stamp(d = new Date()) {
+  const p = (n, w = 2) => String(n).padStart(w, '0');
+  return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())} `
+    + `${p(d.getHours())}:${p(d.getMinutes())}:${p(d.getSeconds())}`;
+}
+
+export function installTimestampedConsole() {
+  if (installed) return;
+  installed = true;
+  for (const method of ['log', 'info', 'warn', 'error']) {
+    const orig = console[method].bind(console);
+    console[method] = (...args) => orig(`[${stamp()}]`, ...args);
+  }
+}

package/src/server.js

@@ -27,6 +27,7 @@ import { streamBridgeChat, readBridgeToken, openBridgeChat } from './bridge.js';
 import { createRelaySession, getRelaySession, endRelaySession, pumpBridgeStream, deliverToolResult, toolsToSpecs, parseToolCallId } from './toolrelay.js';
 import { shaperFor } from './shape.js';
 import { startNer } from './ner.js';
+import { installTimestampedConsole } from './log.js';
 import * as nerEngine from './ner-engine.js';
 import { MODEL_CATALOG, isKnownModel } from './models.js';
 import { resolvePro, checkQuota, consume, usage } from './freegate.js';
@@ -36,7 +37,7 @@ import * as openai from './openai.js';
 import * as responses from './responses.js';
 import * as anthropic from './anthropic.js';
 
-export const VERSION = '0.6.8';
+export const VERSION = '0.6.10';
 
 const KNOWN_AGENTS = new Set(['codex', 'claude', 'opencode', 'pi', 'kiro', 'antigravity']);
 
@@ -704,12 +705,27 @@ export function createGateway(cfg = loadConfig()) {
 }
 
 export function start(cfg = loadConfig()) {
+  installTimestampedConsole(); // every gateway log line gets a clock — before anything logs
   const server = createGateway(cfg);
   const ner = startNer(cfg); // may mutate cfg.redaction when it comes up
   // Re-validate the stored Pro entitlement online on an interval, so a refunded /
   // revoked subscription drops the gateway to Free instead of riding the offline
   // token to its exp (see entitlement-refresh.js).
   const entitlement = startEntitlementRefresh(cfg);
+  // Fail LOUD on a port clash instead of crashing with a raw stack trace. We bind a
+  // FIXED port (4320) so the extension / install.sh / OpenCode can always find us; if
+  // something else already holds it, tell the user exactly how to recover (pick a new
+  // port, restart, and point the extension's Gateway tab at it) rather than silently
+  // dying or drifting to a random port.
+  server.on('error', (e) => {
+    if (e && e.code === 'EADDRINUSE') {
+      console.error(`Port ${cfg.port} is already in use — another app (or a second gateway) has it.`);
+      console.error(`Fix: free the port, or set a different one — edit "port" in ${configPath()} (or the extension's Gateway tab) and restart. The extension must point at the same port.`);
+      process.exit(1);
+    }
+    console.error(`Gateway server error: ${e?.message || e}`);
+    process.exit(1);
+  });
   server.listen(cfg.port, cfg.host, () => {
     console.log(`ChatPanel Privacy Gateway v${VERSION} on http://${cfg.host}:${cfg.port}`);
     console.log(`  backend  : ${cfg.backend}` + (cfg.backend === 'bridge' ? ` (agent: ${cfg.bridge.agent}, via ${cfg.bridge.url})` : ''));