@claw-link/gateway-host 0.3.0 → 0.3.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claw-link/gateway-host",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "ClawLink Host Gateway — a secure, outbound-only worker that bridges a local agent CLI (OpenClaw, Hermes, Claude, Codex, Cursor) to your ClawLink agents. No inbound ports; authenticated per-agent by a Host Token.",
   "homepage": "https://claw-link.co",
   "bin": {

package/src/transport/p2p.js

@@ -8,30 +8,51 @@
 //   consumer:  buf = await p2p.fetch(bridge, cid, key)         // resolve a peer + P2P fetch, else null
 //
 // `key` is a 32-byte Buffer (the per-transfer AEAD key, derived from the capsule's authorization).
+const os = require('os');
 const core = require('./core');
 
+// The QUIC socket binds 0.0.0.0 (all interfaces), but the native local_addr() reports 127.0.0.1 —
+// dialable only on THIS machine. For Mac↔Mac on a LAN we must announce a routable IPv4 instead.
+// (Cross-network/NAT hole-punching is a later rung; a peer that can't be reached falls back to relay.)
+function lanIpv4() {
+  for (const list of Object.values(os.networkInterfaces())) {
+    for (const i of list || []) {
+      if (i && i.family === 'IPv4' && !i.internal) return i.address;
+    }
+  }
+  return null;
+}
+
 class P2P {
   constructor(logger) {
     this.logger = logger || { info() {}, warn() {} };
     this.node = null;
     this.starting = null;
+    this.announceAddr = null; // routable addr we hand to peers (LAN IP : QUIC port)
   }
 
   available() {
     return !!(core.available && core.Transport);
   }
 
-  /** Start the native QUIC node once (idempotent). Returns the local transport addr, or null. */
+  /** Start the native QUIC node once (idempotent). Returns the routable announce addr, or null. */
   async start() {
     if (!this.available()) return null;
-    if (this.node) return this.node.localAddr();
+    if (this.announceAddr) return this.announceAddr;
     if (!this.starting) {
       this.starting = core.Transport.create()
-        .then((n) => { this.node = n; this.logger.info(`p2p transport up (core ${core.version}) at ${n.localAddr()}`); return n; })
+        .then((n) => {
+          this.node = n;
+          const port = String(n.localAddr()).split(':').pop();
+          const ip = lanIpv4();
+          this.announceAddr = ip ? `${ip}:${port}` : n.localAddr(); // routable from other LAN hosts
+          this.logger.info(`p2p transport up (core ${core.version}) listening :${port}, announce ${this.announceAddr}`);
+          return n;
+        })
         .catch((e) => { this.logger.warn('p2p transport start failed (using central relay):', e.message); this.node = null; return null; });
     }
     await this.starting;
-    return this.node ? this.node.localAddr() : null;
+    return this.node ? this.announceAddr : null;
   }
 
   /** Offer a blob for P2P fetch: AEAD-encrypt + store locally, announce cid→addr. Returns cid|null. */

package/src/worker.js

@@ -19,8 +19,9 @@ const VERSION = (() => { try { return require('../package.json').version; } catc
 // Generous (matches the server's 15-min reaper) so legitimate long generations,
 // which keep producing output, are never the ones that hit it.
 const JOB_MAX_MS = Number(process.env.CLAWHOST_JOB_MAX_MS) || 15 * 60 * 1000;
-// Offer outputs larger than this over P2P (matches the engine's TRANSPORT_MIN_BYTES).
-const TRANSPORT_MIN_BYTES = 32 * 1024;
+// Offer outputs larger than this over P2P (must match the engine's TRANSPORT_MIN_BYTES).
+// Lowered to 1 KiB for validation so a normal reply triggers P2P; raise for production.
+const TRANSPORT_MIN_BYTES = Number(process.env.CLAWHOST_TRANSPORT_MIN) || 1024;
 
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 let stopping = false;