@chatpanel/gateway 0.6.9 → 0.6.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/gateway",
-  "version": "0.6.9",
+  "version": "0.6.10",
   "description": "Local privacy gateway — redacts PII out of OpenAI/Anthropic API traffic before it reaches a model, then restores it in the reply. Point opencode, codex, aider, Claude Code, etc. at it.",
   "type": "module",
   "bin": {

package/src/config.js

@@ -139,5 +139,16 @@ export function loadConfig(env = process.env) {
   if (env.ANTHROPIC_BASE_URL) cfg = deepMerge(cfg, { upstreams: { anthropic: { baseUrl: env.ANTHROPIC_BASE_URL } } });
   if (env.CHATPANEL_REDACTION_TIER) cfg = deepMerge(cfg, { redaction: { tier: env.CHATPANEL_REDACTION_TIER } });
 
+  // A persisted port of 0 means "let the OS pick a random port" — fatal for a
+  // service that clients reach at a FIXED address: the extension, install.sh, and
+  // OpenCode/Pi all hardcode 4320. A stale/corrupt config that wrote 0 would bind a
+  // random ephemeral port and look "running but unreachable". Coerce 0 / NaN / out-
+  // of-range back to the default so the gateway is always where clients expect it.
+  const p = Number(cfg.port);
+  if (!Number.isInteger(p) || p < 1 || p > 65535) {
+    if (cfg.port !== DEFAULTS.port) console.warn(`[gateway] ignoring invalid port ${JSON.stringify(cfg.port)} — using ${DEFAULTS.port}`);
+    cfg = deepMerge(cfg, { port: DEFAULTS.port });
+  }
+
   return cfg;
 }

package/src/server.js

@@ -37,7 +37,7 @@ import * as openai from './openai.js';
 import * as responses from './responses.js';
 import * as anthropic from './anthropic.js';
 
-export const VERSION = '0.6.9';
+export const VERSION = '0.6.10';
 
 const KNOWN_AGENTS = new Set(['codex', 'claude', 'opencode', 'pi', 'kiro', 'antigravity']);
 
@@ -712,6 +712,20 @@ export function start(cfg = loadConfig()) {
   // revoked subscription drops the gateway to Free instead of riding the offline
   // token to its exp (see entitlement-refresh.js).
   const entitlement = startEntitlementRefresh(cfg);
+  // Fail LOUD on a port clash instead of crashing with a raw stack trace. We bind a
+  // FIXED port (4320) so the extension / install.sh / OpenCode can always find us; if
+  // something else already holds it, tell the user exactly how to recover (pick a new
+  // port, restart, and point the extension's Gateway tab at it) rather than silently
+  // dying or drifting to a random port.
+  server.on('error', (e) => {
+    if (e && e.code === 'EADDRINUSE') {
+      console.error(`Port ${cfg.port} is already in use — another app (or a second gateway) has it.`);
+      console.error(`Fix: free the port, or set a different one — edit "port" in ${configPath()} (or the extension's Gateway tab) and restart. The extension must point at the same port.`);
+      process.exit(1);
+    }
+    console.error(`Gateway server error: ${e?.message || e}`);
+    process.exit(1);
+  });
   server.listen(cfg.port, cfg.host, () => {
     console.log(`ChatPanel Privacy Gateway v${VERSION} on http://${cfg.host}:${cfg.port}`);
     console.log(`  backend  : ${cfg.backend}` + (cfg.backend === 'bridge' ? ` (agent: ${cfg.bridge.agent}, via ${cfg.bridge.url})` : ''));