@chatpanel/gateway 0.6.92 → 0.6.94

package/README.md

@@ -60,6 +60,13 @@ chatpanel-gateway
 #     bridge   : starting the embedded bridge (v0.11.20)
 ```
 
+On Windows, if `chatpanel-gateway` is "not recognized" right after `npm i -g`, npm's global bin
+folder is not on that shell's PATH yet: open a new PowerShell, or run it by path —
+`node "$(npm root -g)/@chatpanel/gateway/bin/chatpanel-gateway.js" --install`. npm may also warn
+that `boolean@3.2.0` is deprecated and that `onnxruntime-node` / `sharp` / `protobufjs` run install
+scripts: all three come through `@huggingface/transformers` (the native model runtime) and are
+expected.
+
 `GET /health` says which bridge it runs: `bridge.mode` is `embedded`, `standalone`,
 `adopted` or `off`. `CHATPANEL_BRIDGE_MANAGED=off` (or `bridge.managed: false`) turns the
 supervision off for a host that runs its own bridge — the desktop app does. A

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/gateway",
-  "version": "0.6.92",
+  "version": "0.6.94",
   "description": "Local privacy gateway — redacts PII out of OpenAI/Anthropic API traffic before it reaches a model, then restores it in the reply. Point opencode, codex, aider, Claude Code, etc. at it.",
   "type": "module",
   "bin": {
@@ -27,7 +27,7 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@chatpanel/bridge": "^0.11.20",
+    "@chatpanel/bridge": "^0.11.21",
     "@chatpanel/pii": "^0.7.4",
     "@huggingface/transformers": "^4.2.0",
     "onnxruntime-web": "1.26.0-dev.20260416-b7804b056c",

package/src/bridge.js

@@ -158,13 +158,25 @@ export async function openBridgeChat({ bridgeUrl, agent, token, messages, system
     options: options || {},
     ...(Array.isArray(specs) && specs.length ? { pageTools: { specs } } : {}),
   }), signal, tokenPath);
-  if (!res.ok || !res.body) {
-    const detail = await res.text().catch(() => '');
-    throw new Error(`bridge /chat HTTP ${res.status}${detail ? `: ${detail.slice(0, 200)}` : ''}`);
-  }
+  if (!res.ok || !res.body) throw new Error(await bridgeRefusal(res));
   return res;
 }
 
+/**
+ * What the bridge said when it refused a turn, as a sentence. The bridge answers
+ * `{ error: { message } }` — and for the commonest first-run failure that message is the
+ * whole story ("Claude Code isn't signed in … run `claude`, type `/login` …"). Wrapping it in
+ * `bridge /chat HTTP 503: {"error":{"message":"…` and cutting it at 200 characters turned the
+ * one useful sentence into JSON debris.
+ */
+export async function bridgeRefusal(res) {
+  const text = await res.text().catch(() => '');
+  let message = '';
+  try { const j = JSON.parse(text); message = String(j?.error?.message || j?.error || j?.message || '').trim(); } catch { /* not JSON */ }
+  if (message) return message.slice(0, 600);
+  return `bridge /chat HTTP ${res.status}${text ? `: ${text.slice(0, 200)}` : ''}`;
+}
+
 // Stream a turn through the bridge. Calls onText(restorableChunk) for each delta, and
 // onActivity(event) for everything else the agent reports — status lines, the working
 // directory, tool calls, reasoning.
@@ -177,10 +189,7 @@ export async function streamBridgeChat({ bridgeUrl, agent, token, messages, syst
     options: options || {},
   }), signal, tokenPath);
 
-  if (!res.ok || !res.body) {
-    const detail = await res.text().catch(() => '');
-    throw new Error(`bridge /chat HTTP ${res.status}${detail ? `: ${detail.slice(0, 200)}` : ''}`);
-  }
+  if (!res.ok || !res.body) throw new Error(await bridgeRefusal(res));
 
   const reader = res.body.getReader();
   const decoder = new TextDecoder();

package/src/server.js

@@ -63,7 +63,7 @@ import * as openai from './openai.js';
 import * as responses from './responses.js';
 import * as anthropic from './anthropic.js';
 
-export const VERSION = '0.6.92';
+export const VERSION = '0.6.94';
 
 // WARM search tier — SQLite + FTS5 record store (falls back to an encrypted-JSON
 // store if SQLite can't load), fed by the extension's ingest sync + backup-ingest.

package/src/service.js

@@ -81,6 +81,19 @@ const WIN_RUN_KEY = 'HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run';
 const WIN_RUN_NAME = 'ChatPanelGateway';
 const winVbs = () => path.join(os.homedir(), '.chatpanel', 'gateway-launch.vbs');
 
+/**
+ * Stop every running gateway process — the exe, the npm build under node, and the embedded
+ * bridge child (`--bridge`) — except this one. Matched on the command line, because on the
+ * npm path the process is `node.exe` and `taskkill /IM chatpanel-gateway.exe` never saw it.
+ * launchd restarts the macOS service for us; Windows has no supervisor, so `--install` after an
+ * update used to launch a second instance that died on the busy port while the OLD build kept
+ * answering /health with its old version.
+ */
+function winStopRunning() {
+  const ps = `Get-CimInstance Win32_Process | Where-Object { $_.CommandLine -match 'chatpanel-gateway' -and $_.ProcessId -ne ${process.pid} } | ForEach-Object { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue }`;
+  run('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', ps], { timeout: 15000 });
+  run('taskkill', ['/IM', 'chatpanel-gateway.exe', '/F']); // belt and braces for the exe
+}
 function winInstall() {
   const { program, args } = resolveLaunch();
   const parts = [program, ...args].map((p) => `""${p}""`).join(' ');
@@ -89,11 +102,14 @@ function winInstall() {
   writeFileSync(vbs, `CreateObject("WScript.Shell").Run "${parts}", 0, False\r\n`);
   const r = run('reg', ['add', WIN_RUN_KEY, '/v', WIN_RUN_NAME, '/t', 'REG_SZ', '/d', `wscript.exe "${vbs}"`, '/f']);
   if (r.status !== 0) throw new Error((r.stderr || '').trim() || 'reg add failed');
+  winStopRunning();
+  // Give the port a moment to be released before the new instance binds it.
+  run('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', 'Start-Sleep -Milliseconds 800']);
   run('wscript.exe', [vbs]);
 }
 function winUninstall() {
   run('reg', ['delete', WIN_RUN_KEY, '/v', WIN_RUN_NAME, '/f']);
-  run('taskkill', ['/IM', 'chatpanel-gateway.exe', '/F']);
+  winStopRunning();
 }
 function winStatus() {
   return run('reg', ['query', WIN_RUN_KEY, '/v', WIN_RUN_NAME]).status === 0;