Claude Code: Fix A2A port routing - expose a2a-proxy on external port 7860

- Move a2a-proxy from internal 7861 to external 7860 (Docker exposed)
- Move uvicorn to internal 7862 (only accessed by proxy)
- Fixes external A2A health checks failing due to unreachable proxy

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

entrypoint.sh

@@ -139,11 +139,11 @@ echo "=========================================="
 echo "Starting A2A proxy..."
 echo "=========================================="
 
-# Start a2a-proxy on port 7861 in background
-# Routes A2A traffic to FastAPI backend
+# Start a2a-proxy on port 7860 in background (EXTERNAL port)
+# Routes A2A traffic to FastAPI backend on internal port
 if [ -f "/app/scripts/a2a-proxy.cjs" ]; then
-    echo "✓ Starting a2a-proxy.cjs on port 7861..."
-    node /app/scripts/a2a-proxy.cjs > /app/logs/a2a-proxy.log 2>&1 &
+    echo "✓ Starting a2a-proxy.cjs on port 7860 (external)..."
+    OPENCLAW_PORT=7862 LISTEN_PORT=7860 node /app/scripts/a2a-proxy.cjs > /app/logs/a2a-proxy.log 2>&1 &
     A2A_PID=$!
     echo "  A2A proxy PID: $A2A_PID"
     # Record PID for cleanup on shutdown
@@ -157,9 +157,9 @@ echo "=========================================="
 echo "Starting uvicorn..."
 echo "=========================================="
 
-# Start uvicorn in background (not exec, so we can wait at the end)
-echo "✓ Starting uvicorn on port ${PORT:-7860}..."
-uvicorn app:app --host 0.0.0.0 --port "${PORT:-7860}" > /app/logs/uvicorn.log 2>&1 &
+# Start uvicorn on INTERNAL port 7862 (a2a-proxy faces external on 7860)
+echo "✓ Starting uvicorn on internal port 7862..."
+uvicorn app:app --host 0.0.0.0 --port 7862 > /app/logs/uvicorn.log 2>&1 &
 UVICORN_PID=$!
 echo "  Uvicorn PID: $UVICORN_PID"
 echo $UVICORN_PID > /tmp/uvicorn.pid
@@ -174,12 +174,12 @@ sleep 3
 # Check if processes exist
 ps aux | grep -E "(uvicorn|node.*a2a-proxy)" | grep -v grep || echo "  WARNING: Some processes may not have started"
 
-# CRITICAL: Verify uvicorn is actually accepting connections on port 7860
+# CRITICAL: Verify uvicorn is actually accepting connections on internal port 7862
 echo ""
-echo "Verifying uvicorn is accepting connections..."
+echo "Verifying uvicorn is accepting connections on internal port 7862..."
 for i in {1..10}; do
-    if curl -s -o /dev/null -w "%{http_code}" http://127.0.0.1:7860/ | grep -q "200\|401"; then
-        echo "  ✓ Uvicorn is accepting connections on port 7860"
+    if curl -s -o /dev/null -w "%{http_code}" http://127.0.0.1:7862/health | grep -q "200\|401"; then
+        echo "  ✓ Uvicorn is accepting connections on port 7862"
         break
     else
         if [ $i -eq 10 ]; then
@@ -197,8 +197,8 @@ echo ""
 echo "=========================================="
 echo "Cain is running!"
 echo "=========================================="
-echo "API: http://0.0.0.0:${PORT:-7860}"
-echo "A2A Proxy: http://0.0.0.0:7861"
+echo "A2A Proxy (external): http://0.0.0.0:7860"
+echo "FastAPI (internal): http://0.0.0.0:7862"
 echo "Worker: Integrated (FastAPI background thread)"
 echo ""
 echo "PIDs:"
@@ -212,7 +212,7 @@ while true; do
     # Check if uvicorn is still running
     if ! kill -0 $UVICORN_PID 2>/dev/null; then
         echo "WARNING: Uvicorn died (PID $UVICORN_PID), restarting..."
-        uvicorn app:app --host 0.0.0.0 --port "${PORT:-7860}" > /app/logs/uvicorn.log 2>&1 &
+        uvicorn app:app --host 0.0.0.0 --port 7862 > /app/logs/uvicorn.log 2>&1 &
         UVICORN_PID=$!
         echo "  Uvicorn restarted with PID: $UVICORN_PID"
         echo $UVICORN_PID > /tmp/uvicorn.pid