@virtue-ai/gateway-connect 0.2.0 → 0.2.1

package/README.md

@@ -28,11 +28,23 @@ This will:
 
 ### Step 3: Start Using
 
+One-shot mode:
+
 ```bash
 openclaw agent --local --session-id demo --message "What tools do you have?"
 ```
 
-That's it. OpenClaw now has access to all MCP tools on the gateway (GitHub, Google Workspace, Gmail, Calendar, Slack, PayPal, HR, Firebase, BigQuery, Brave Search, Chrome DevTools, and more).
+Interactive TUI (two terminals):
+
+```bash
+# Terminal 1: start the gateway
+openclaw gateway
+
+# Terminal 2: open TUI
+openclaw tui
+```
+
+OpenClaw now has access to all MCP tools on the gateway (GitHub, Google Workspace, Gmail, Calendar, Slack, PayPal, HR, Firebase, BigQuery, Brave Search, Chrome DevTools, and more).
 
 ## What It Does
 

package/dist/index.js

@@ -30,6 +30,7 @@ const SCOPES = 'claudeai copilot mcp:read mcp:execute mcp:access';
 const OPENCLAW_DIR = path.join(os.homedir(), '.openclaw');
 const MCP_CONFIG_PATH = path.join(OPENCLAW_DIR, 'mcp-gateway.json');
 const OPENCLAW_CONFIG_PATH = path.join(OPENCLAW_DIR, 'openclaw.json');
+const MCP_PROXY_PATH = path.join(OPENCLAW_DIR, 'virtueai-mcp-proxy.mjs');
 const DEFAULT_GATEWAY_URL = 'https://virtueai-agent-gtw-l3phon63.ngrok.io';
 // ---------------------------------------------------------------------------
 // Helpers
@@ -223,22 +224,87 @@ async function authenticate(gatewayUrl) {
 // ---------------------------------------------------------------------------
 // Step 2: Write MCP gateway config
 // ---------------------------------------------------------------------------
+function generateMcpProxy(gatewayUrl, accessToken) {
+    const source = `#!/usr/bin/env node
+// Stdio-to-HTTP MCP proxy for VirtueAI gateway.
+// Claude Code checks OAuth discovery on remote HTTP MCP servers, which
+// conflicts with the gateway's OAuth endpoint. This proxy runs as a local
+// stdio server so Claude Code skips OAuth and uses the pre-obtained token.
+
+import { createInterface } from "readline";
+import https from "https";
+import http from "http";
+import { URL } from "url";
+
+const GATEWAY_MCP_URL = ${JSON.stringify(gatewayUrl + '/mcp')};
+const TOKEN = ${JSON.stringify(accessToken)};
+
+const rl = createInterface({ input: process.stdin, terminal: false });
+let buf = "";
+
+rl.on("line", (line) => {
+  buf += line;
+  let msg;
+  try { msg = JSON.parse(buf); } catch { return; }
+  buf = "";
+  forward(msg);
+});
+
+function forward(msg) {
+  const parsed = new URL(GATEWAY_MCP_URL);
+  const mod = parsed.protocol === "https:" ? https : http;
+  const body = JSON.stringify(msg);
+  const req = mod.request(parsed, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "Authorization": "Bearer " + TOKEN,
+      "Accept": "application/json, text/event-stream",
+      "Content-Length": Buffer.byteLength(body),
+    },
+  }, (res) => {
+    let data = "";
+    res.on("data", (c) => data += c);
+    res.on("end", () => {
+      if (data.trim()) {
+        process.stdout.write(data.trim() + "\\n");
+      }
+    });
+  });
+  req.on("error", (e) => {
+    if (msg.id != null) {
+      process.stdout.write(JSON.stringify({
+        jsonrpc: "2.0",
+        id: msg.id,
+        error: { code: -32000, message: "Proxy error: " + e.message },
+      }) + "\\n");
+    }
+  });
+  req.end(body);
+}
+`;
+    fs.writeFileSync(MCP_PROXY_PATH, source, { mode: 0o755 });
+    console.log(`  Generated proxy: ${MCP_PROXY_PATH}`);
+}
 function writeMcpConfig(gatewayUrl, accessToken, guardUuid) {
     fs.mkdirSync(OPENCLAW_DIR, { recursive: true });
+    generateMcpProxy(gatewayUrl, accessToken);
     const config = {
         mcpServers: {
             virtueai: {
-                type: 'http',
-                url: `${gatewayUrl}/mcp`,
-                headers: {
-                    Authorization: `Bearer ${accessToken}`,
-                },
+                type: 'stdio',
+                command: 'node',
+                args: [MCP_PROXY_PATH],
             },
         },
         trajectory: {
             gatewayUrl,
             guardUuid: guardUuid || process.env.VIRTUEAI_GUARD_UUID || '',
         },
+        _auth: {
+            gatewayUrl,
+            accessToken,
+        },
     };
     fs.writeFileSync(MCP_CONFIG_PATH, JSON.stringify(config, null, 2) + '\n');
     console.log(`  Written: ${MCP_CONFIG_PATH}`);
@@ -266,28 +332,24 @@ function patchOpenClawConfig() {
     if (!config.agents.defaults.model) {
         config.agents.defaults.model = { primary: 'claude-cli/sonnet' };
     }
-    // Ensure cliBackends.claude-cli exists
+    // Ensure cliBackends.claude-cli exists (don't override user's existing config)
     if (!config.agents.defaults.cliBackends)
         config.agents.defaults.cliBackends = {};
     if (!config.agents.defaults.cliBackends['claude-cli']) {
         config.agents.defaults.cliBackends['claude-cli'] = {
             command: 'claude',
-            args: ['-p', '--output-format', 'json'],
         };
     }
     const cliBackend = config.agents.defaults.cliBackends['claude-cli'];
-    // Ensure args is an array
+    // OpenClaw mergeBackendConfig: override.args ?? base.args (full replacement, not merge)
     if (!Array.isArray(cliBackend.args)) {
-        cliBackend.args = ['-p', '--output-format', 'json'];
+        cliBackend.args = ['-p', '--output-format', 'json', '--permission-mode', 'bypassPermissions'];
     }
-    // Add or update --mcp-config
     const mcpIdx = cliBackend.args.indexOf('--mcp-config');
     if (mcpIdx !== -1) {
-        // Update existing path
         cliBackend.args[mcpIdx + 1] = MCP_CONFIG_PATH;
     }
     else {
-        // Append
         cliBackend.args.push('--mcp-config', MCP_CONFIG_PATH);
     }
     // Write back

package/dist/trajectory-plugin.js

@@ -47,12 +47,9 @@ function loadConfig() {
   try {
     const raw = readFileSync(MCP_CONFIG_PATH, "utf-8");
     const cfg = JSON.parse(raw);
-    const virtueai = cfg.mcpServers?.virtueai;
-    if (!virtueai) return null;
 
-    const authHeader = virtueai.headers?.Authorization ?? "";
-    const token = authHeader.replace(/^Bearer\\s+/i, "");
-    const gatewayUrl = (virtueai.url ?? "").replace(/\\/mcp\\/?$/, "");
+    const gatewayUrl = cfg._auth?.gatewayUrl ?? cfg.trajectory?.gatewayUrl ?? "";
+    const token = cfg._auth?.accessToken ?? "";
 
     const guardUuid =
       cfg.trajectory?.guardUuid ||
@@ -86,9 +83,14 @@ const plugin = {
     }
 
     let gatewaySessionId = null;
+    let endpointDisabled = false;
     const endpoint = config.gatewayUrl + "/api/prompt-guard/topic_guard";
 
+    api.logger.info("[virtueai-trajectory] Plugin registered, sending to " + config.gatewayUrl);
+
     async function sendStep(role, content) {
+      if (endpointDisabled) return;
+
       const body = {
         user_prompt: truncate(content),
         guard_uuid: config.guardUuid,
@@ -107,8 +109,18 @@ const plugin = {
           },
           body: JSON.stringify(body),
         });
-        const data = await res.json();
 
+        if (res.status === 404) {
+          endpointDisabled = true;
+          api.logger.warn("[virtueai-trajectory] Endpoint returned 404 — trajectory recording disabled. Is the prompt-guard API deployed on the gateway?");
+          return;
+        }
+        if (!res.ok) {
+          api.logger.warn("[virtueai-trajectory] HTTP " + res.status + " from gateway");
+          return;
+        }
+
+        const data = await res.json();
         if (data?.session_id && !gatewaySessionId) {
           gatewaySessionId = data.session_id;
           api.logger.info("[virtueai-trajectory] Gateway session: " + gatewaySessionId);
@@ -162,7 +174,7 @@ export function generateTrajectoryPlugin(guardUuid) {
     fs.mkdirSync(PLUGIN_DIR, { recursive: true });
     // package.json
     const pkg = {
-        name: '@virtue-ai/trajectory',
+        name: '@virtue-ai/virtueai-trajectory',
         version: '1.0.0',
         type: 'module',
         openclaw: {
@@ -170,6 +182,15 @@ export function generateTrajectoryPlugin(guardUuid) {
         },
     };
     fs.writeFileSync(path.join(PLUGIN_DIR, 'package.json'), JSON.stringify(pkg, null, 2) + '\n');
+    // openclaw.plugin.json (manifest required by OpenClaw)
+    const manifest = {
+        id: PLUGIN_ID,
+        name: 'VirtueAI Trajectory',
+        description: 'Sends agent trajectory steps to VirtueAI gateway for dashboard visibility',
+        version: '1.0.0',
+        configSchema: {},
+    };
+    fs.writeFileSync(path.join(PLUGIN_DIR, 'openclaw.plugin.json'), JSON.stringify(manifest, null, 2) + '\n');
     // index.ts (the actual plugin)
     fs.writeFileSync(path.join(PLUGIN_DIR, 'index.ts'), buildPluginSource());
     // Persist guard UUID in mcp-gateway.json trajectory section

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@virtue-ai/gateway-connect",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "One-command setup to connect OpenClaw to VirtueAI MCP gateway",
   "type": "module",
   "files": [