openclaw-navigator 2.0.0 → 2.1.0

package/cli.mjs

@@ -79,6 +79,35 @@ function getTailscaleIP() {
   return null;
 }
 
+function getTailscaleDNS() {
+  try {
+    const raw = execSync("tailscale status --json", { encoding: "utf8", timeout: 5000 });
+    const status = JSON.parse(raw);
+    const dns = status?.Self?.DNSName;
+    if (dns) return dns.replace(/\.$/, "");
+  } catch { /* ignore */ }
+  return null;
+}
+
+function setupTailscaleServe(localPort, httpsPort = 8443) {
+  try {
+    // Set up tailscale serve to proxy HTTPS → our local HTTP server
+    execSync(`tailscale serve --bg --https=${httpsPort} http://localhost:${localPort}`, {
+      stdio: "ignore",
+      timeout: 10_000,
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function teardownTailscaleServe(httpsPort = 8443) {
+  try {
+    execSync(`tailscale serve --https=${httpsPort} off`, { stdio: "ignore", timeout: 5000 });
+  } catch { /* ignore */ }
+}
+
 function commandExists(cmd) {
   try {
     execSync(`which ${cmd}`, { stdio: "ignore" });
@@ -396,9 +425,12 @@ ${BOLD}What this does:${RESET}
   const tailscaleIP = getTailscaleIP();
   const localIP = getLocalIP();
 
+  const tailscaleDNS = tailscaleIP ? getTailscaleDNS() : null;
+
   const methods = [];
   if (hasCloudflared) methods.push({ value: "cloudflare", label: "Cloudflare Tunnel (recommended)", hint: "works anywhere, no config" });
-  if (tailscaleIP) methods.push({ value: "tailscale", label: "Tailscale", hint: tailscaleIP });
+  if (tailscaleDNS) methods.push({ value: "tailscale-https", label: "Tailscale HTTPS (recommended)", hint: tailscaleDNS });
+  else if (tailscaleIP) methods.push({ value: "tailscale", label: "Tailscale (raw IP)", hint: tailscaleIP });
   methods.push({ value: "ssh", label: "SSH Tunnel", hint: "run SSH on your Mac" });
   if (localIP) methods.push({ value: "lan", label: "Direct LAN", hint: localIP });
 
@@ -406,6 +438,8 @@ ${BOLD}What this does:${RESET}
 
   // ── Step 3: Resolve gateway URL ───────────────────────────────────────
   let gatewayURL;
+  let usedTailscaleServe = false;
+  const tailscaleHttpsPort = 8443;
 
   switch (method) {
     case "cloudflare": {
@@ -421,6 +455,22 @@ ${BOLD}What this does:${RESET}
       gatewayURL = tunnelURL;
       break;
     }
+    case "tailscale-https": {
+      process.stdout.write(`\n${DIM}Setting up Tailscale HTTPS on port ${tailscaleHttpsPort}...${RESET}`);
+      const served = setupTailscaleServe(port, tailscaleHttpsPort);
+      process.stdout.write("\r" + " ".repeat(70) + "\r");
+      if (served) {
+        gatewayURL = `https://${tailscaleDNS}:${tailscaleHttpsPort}`;
+        usedTailscaleServe = true;
+        ok(`Tailscale HTTPS active: ${gatewayURL}`);
+      } else {
+        // Fallback to raw IP
+        warn("tailscale serve failed, falling back to raw IP");
+        gatewayURL = `http://${tailscaleIP}:${port}`;
+        ok(`Using Tailscale IP: ${tailscaleIP}:${port}`);
+      }
+      break;
+    }
     case "tailscale": {
       gatewayURL = `http://${tailscaleIP}:${port}`;
       ok(`Using Tailscale: ${tailscaleIP}:${port}`);
@@ -457,14 +507,22 @@ ${BOLD}What this does:${RESET}
   console.log(`${DIM}Press Ctrl+C to stop.${RESET}\n`);
 
   // Graceful shutdown
+  const cleanup = () => {
+    if (usedTailscaleServe) {
+      console.log(`${DIM}Removing tailscale serve...${RESET}`);
+      teardownTailscaleServe(tailscaleHttpsPort);
+    }
+    server.close();
+  };
+
   process.on("SIGINT", () => {
     console.log(`\n${DIM}Shutting down bridge...${RESET}`);
-    server.close();
+    cleanup();
     process.exit(0);
   });
 
   process.on("SIGTERM", () => {
-    server.close();
+    cleanup();
     process.exit(0);
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openclaw-navigator",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Self-contained Navigator bridge server — connects the Navigator browser to any machine",
   "license": "MIT",
   "bin": {