@chatpanel/gateway 0.6.92 → 0.6.93

package/README.md

@@ -60,6 +60,13 @@ chatpanel-gateway
 #     bridge   : starting the embedded bridge (v0.11.20)
 ```
 
+On Windows, if `chatpanel-gateway` is "not recognized" right after `npm i -g`, npm's global bin
+folder is not on that shell's PATH yet: open a new PowerShell, or run it by path —
+`node "$(npm root -g)/@chatpanel/gateway/bin/chatpanel-gateway.js" --install`. npm may also warn
+that `boolean@3.2.0` is deprecated and that `onnxruntime-node` / `sharp` / `protobufjs` run install
+scripts: all three come through `@huggingface/transformers` (the native model runtime) and are
+expected.
+
 `GET /health` says which bridge it runs: `bridge.mode` is `embedded`, `standalone`,
 `adopted` or `off`. `CHATPANEL_BRIDGE_MANAGED=off` (or `bridge.managed: false`) turns the
 supervision off for a host that runs its own bridge — the desktop app does. A

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/gateway",
-  "version": "0.6.92",
+  "version": "0.6.93",
   "description": "Local privacy gateway — redacts PII out of OpenAI/Anthropic API traffic before it reaches a model, then restores it in the reply. Point opencode, codex, aider, Claude Code, etc. at it.",
   "type": "module",
   "bin": {
@@ -27,7 +27,7 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@chatpanel/bridge": "^0.11.20",
+    "@chatpanel/bridge": "^0.11.21",
     "@chatpanel/pii": "^0.7.4",
     "@huggingface/transformers": "^4.2.0",
     "onnxruntime-web": "1.26.0-dev.20260416-b7804b056c",

package/src/bridge.js

@@ -158,13 +158,25 @@ export async function openBridgeChat({ bridgeUrl, agent, token, messages, system
     options: options || {},
     ...(Array.isArray(specs) && specs.length ? { pageTools: { specs } } : {}),
   }), signal, tokenPath);
-  if (!res.ok || !res.body) {
-    const detail = await res.text().catch(() => '');
-    throw new Error(`bridge /chat HTTP ${res.status}${detail ? `: ${detail.slice(0, 200)}` : ''}`);
-  }
+  if (!res.ok || !res.body) throw new Error(await bridgeRefusal(res));
   return res;
 }
 
+/**
+ * What the bridge said when it refused a turn, as a sentence. The bridge answers
+ * `{ error: { message } }` — and for the commonest first-run failure that message is the
+ * whole story ("Claude Code isn't signed in … run `claude`, type `/login` …"). Wrapping it in
+ * `bridge /chat HTTP 503: {"error":{"message":"…` and cutting it at 200 characters turned the
+ * one useful sentence into JSON debris.
+ */
+export async function bridgeRefusal(res) {
+  const text = await res.text().catch(() => '');
+  let message = '';
+  try { const j = JSON.parse(text); message = String(j?.error?.message || j?.error || j?.message || '').trim(); } catch { /* not JSON */ }
+  if (message) return message.slice(0, 600);
+  return `bridge /chat HTTP ${res.status}${text ? `: ${text.slice(0, 200)}` : ''}`;
+}
+
 // Stream a turn through the bridge. Calls onText(restorableChunk) for each delta, and
 // onActivity(event) for everything else the agent reports — status lines, the working
 // directory, tool calls, reasoning.
@@ -177,10 +189,7 @@ export async function streamBridgeChat({ bridgeUrl, agent, token, messages, syst
     options: options || {},
   }), signal, tokenPath);
 
-  if (!res.ok || !res.body) {
-    const detail = await res.text().catch(() => '');
-    throw new Error(`bridge /chat HTTP ${res.status}${detail ? `: ${detail.slice(0, 200)}` : ''}`);
-  }
+  if (!res.ok || !res.body) throw new Error(await bridgeRefusal(res));
 
   const reader = res.body.getReader();
   const decoder = new TextDecoder();

package/src/server.js

@@ -63,7 +63,7 @@ import * as openai from './openai.js';
 import * as responses from './responses.js';
 import * as anthropic from './anthropic.js';
 
-export const VERSION = '0.6.92';
+export const VERSION = '0.6.93';
 
 // WARM search tier — SQLite + FTS5 record store (falls back to an encrypted-JSON
 // store if SQLite can't load), fed by the extension's ingest sync + backup-ingest.