@wingman-ai/gateway 0.3.1 → 0.4.0

package/dist/cli/commands/skill.js

@@ -13,14 +13,17 @@ async function executeSkillCommand(args, options = {}) {
     const config = configLoader.loadConfig();
     try {
         const repository = new SkillRepository({
+            provider: config.skills?.provider,
             repositoryOwner: config.skills?.repositoryOwner,
             repositoryName: config.skills?.repositoryName,
-            githubToken: config.skills?.githubToken
+            githubToken: config.skills?.githubToken,
+            clawhubBaseUrl: config.skills?.clawhubBaseUrl
         });
         const service = new SkillService(repository, outputManager, logger, {
             workspace,
             skillsDirectory: config.skills?.skillsDirectory,
-            outputMode: args.outputMode
+            outputMode: args.outputMode,
+            security: config.skills?.security
         });
         const subcommand = args.subcommand;
         const subcommandArgs = args.args;
@@ -72,7 +75,7 @@ async function executeSkillCommand(args, options = {}) {
 }
 function showSkillHelp(outputManager) {
     if ("interactive" === outputManager.getMode()) console.log(`
-Wingman Skill Manager - Install skills from the Anthropic skills repository
+Wingman Skill Manager - Install skills from configured registries
 
 Usage:
   wingman skill browse              Browse available skills
@@ -95,10 +98,15 @@ Configuration:
   Skills can be configured in .wingman/wingman.config.json:
   {
     "skills": {
+      "provider": "github",
       "repositoryOwner": "anthropics",
       "repositoryName": "skills",
       "githubToken": "optional-token",
-      "skillsDirectory": "skills"
+      "clawhubBaseUrl": "https://clawhub.ai",
+      "skillsDirectory": "skills",
+      "security": {
+        "scanOnInstall": true
+      }
     }
   }
 `);

package/dist/cli/config/jsonSchema.cjs

@@ -0,0 +1,55 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, definition)=>{
+        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+            enumerable: true,
+            get: definition[key]
+        });
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+__webpack_require__.d(__webpack_exports__, {
+    buildWingmanConfigJsonSchema: ()=>buildWingmanConfigJsonSchema,
+    WINGMAN_CONFIG_JSON_SCHEMA_ID: ()=>WINGMAN_CONFIG_JSON_SCHEMA_ID
+});
+const external_zod_namespaceObject = require("zod");
+const external_schema_cjs_namespaceObject = require("./schema.cjs");
+const WINGMAN_CONFIG_JSON_SCHEMA_ID = "https://getwingmanai.com/schemas/wingman.config.schema.json";
+function buildWingmanConfigJsonSchema() {
+    const schema = external_zod_namespaceObject.toJSONSchema(external_schema_cjs_namespaceObject.WingmanConfigSchema, {
+        target: "draft-2020-12",
+        unrepresentable: "any"
+    });
+    const { $schema: _ignored, ...schemaWithoutMeta } = schema;
+    return {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        $id: WINGMAN_CONFIG_JSON_SCHEMA_ID,
+        title: "Wingman Config",
+        description: "Schema for .wingman/wingman.config.json",
+        ...schemaWithoutMeta
+    };
+}
+exports.WINGMAN_CONFIG_JSON_SCHEMA_ID = __webpack_exports__.WINGMAN_CONFIG_JSON_SCHEMA_ID;
+exports.buildWingmanConfigJsonSchema = __webpack_exports__.buildWingmanConfigJsonSchema;
+for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "WINGMAN_CONFIG_JSON_SCHEMA_ID",
+    "buildWingmanConfigJsonSchema"
+].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/cli/config/jsonSchema.d.ts

@@ -0,0 +1,2 @@
+export declare const WINGMAN_CONFIG_JSON_SCHEMA_ID = "https://getwingmanai.com/schemas/wingman.config.schema.json";
+export declare function buildWingmanConfigJsonSchema(): Record<string, unknown>;

package/dist/cli/config/jsonSchema.js

@@ -0,0 +1,18 @@
+import { toJSONSchema } from "zod";
+import { WingmanConfigSchema } from "./schema.js";
+const WINGMAN_CONFIG_JSON_SCHEMA_ID = "https://getwingmanai.com/schemas/wingman.config.schema.json";
+function buildWingmanConfigJsonSchema() {
+    const schema = toJSONSchema(WingmanConfigSchema, {
+        target: "draft-2020-12",
+        unrepresentable: "any"
+    });
+    const { $schema: _ignored, ...schemaWithoutMeta } = schema;
+    return {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        $id: WINGMAN_CONFIG_JSON_SCHEMA_ID,
+        title: "Wingman Config",
+        description: "Schema for .wingman/wingman.config.json",
+        ...schemaWithoutMeta
+    };
+}
+export { WINGMAN_CONFIG_JSON_SCHEMA_ID, buildWingmanConfigJsonSchema };

package/dist/cli/config/loader.cjs

@@ -133,9 +133,31 @@ class WingmanConfigLoader {
                 outputMode: "auto"
             },
             skills: {
+                provider: "github",
                 repositoryOwner: "anthropics",
                 repositoryName: "skills",
-                skillsDirectory: "skills"
+                clawhubBaseUrl: "https://clawhub.ai",
+                skillsDirectory: "skills",
+                security: {
+                    scanOnInstall: true,
+                    scannerCommand: "uvx",
+                    scannerArgs: [
+                        "--from",
+                        "mcp-scan>=0.4,<0.5",
+                        "mcp-scan",
+                        "--json",
+                        "--skills"
+                    ],
+                    blockIssueCodes: [
+                        "MCP501",
+                        "MCP506",
+                        "MCP507",
+                        "MCP508",
+                        "MCP509",
+                        "MCP510",
+                        "MCP511"
+                    ]
+                }
             },
             browser: {
                 profilesDir: ".wingman/browser-profiles",
@@ -167,6 +189,16 @@ class WingmanConfigLoader {
                     allowInsecureAuth: false
                 },
                 dynamicUiEnabled: true,
+                mcpProxy: {
+                    enabled: false,
+                    command: "uvx",
+                    baseArgs: [
+                        "invariant-gateway@latest",
+                        "mcp"
+                    ],
+                    projectName: "wingman-gateway",
+                    pushExplorer: false
+                },
                 adapters: {}
             },
             agents: {

package/dist/cli/config/loader.js

@@ -105,9 +105,31 @@ class WingmanConfigLoader {
                 outputMode: "auto"
             },
             skills: {
+                provider: "github",
                 repositoryOwner: "anthropics",
                 repositoryName: "skills",
-                skillsDirectory: "skills"
+                clawhubBaseUrl: "https://clawhub.ai",
+                skillsDirectory: "skills",
+                security: {
+                    scanOnInstall: true,
+                    scannerCommand: "uvx",
+                    scannerArgs: [
+                        "--from",
+                        "mcp-scan>=0.4,<0.5",
+                        "mcp-scan",
+                        "--json",
+                        "--skills"
+                    ],
+                    blockIssueCodes: [
+                        "MCP501",
+                        "MCP506",
+                        "MCP507",
+                        "MCP508",
+                        "MCP509",
+                        "MCP510",
+                        "MCP511"
+                    ]
+                }
             },
             browser: {
                 profilesDir: ".wingman/browser-profiles",
@@ -139,6 +161,16 @@ class WingmanConfigLoader {
                     allowInsecureAuth: false
                 },
                 dynamicUiEnabled: true,
+                mcpProxy: {
+                    enabled: false,
+                    command: "uvx",
+                    baseArgs: [
+                        "invariant-gateway@latest",
+                        "mcp"
+                    ],
+                    projectName: "wingman-gateway",
+                    pushExplorer: false
+                },
                 adapters: {}
             },
             agents: {

package/dist/cli/config/schema.cjs

@@ -50,10 +50,54 @@ const SearchConfigSchema = external_zod_namespaceObject.object({
     maxResults: external_zod_namespaceObject.number().min(1).max(20).optional().default(5).describe("Maximum number of search results to return")
 });
 const SkillsConfigSchema = external_zod_namespaceObject.object({
+    provider: external_zod_namespaceObject["enum"]([
+        "github",
+        "clawhub"
+    ]).default("github").describe("Skill source provider"),
     repositoryOwner: external_zod_namespaceObject.string().default("anthropics").describe("GitHub repository owner for skills"),
     repositoryName: external_zod_namespaceObject.string().default("skills").describe("GitHub repository name for skills"),
     githubToken: external_zod_namespaceObject.string().optional().describe("GitHub personal access token for higher API rate limits"),
-    skillsDirectory: external_zod_namespaceObject.string().default("skills").describe("Directory to install skills in")
+    clawhubBaseUrl: external_zod_namespaceObject.string().default("https://clawhub.ai").describe("Base URL for ClawHub skill API"),
+    skillsDirectory: external_zod_namespaceObject.string().default("skills").describe("Directory to install skills in"),
+    security: external_zod_namespaceObject.object({
+        scanOnInstall: external_zod_namespaceObject.boolean().optional().default(true).describe("Run a security scan for downloaded skills before installation"),
+        scannerCommand: external_zod_namespaceObject.string().optional().default("uvx").describe("Scanner runner command"),
+        scannerArgs: external_zod_namespaceObject.array(external_zod_namespaceObject.string().min(1)).optional().default([
+            "--from",
+            "mcp-scan>=0.4,<0.5",
+            "mcp-scan",
+            "--json",
+            "--skills"
+        ]).describe("Arguments prepended before the skill path for scanner execution"),
+        blockIssueCodes: external_zod_namespaceObject.array(external_zod_namespaceObject.string().min(1)).optional().default([
+            "MCP501",
+            "MCP506",
+            "MCP507",
+            "MCP508",
+            "MCP509",
+            "MCP510",
+            "MCP511"
+        ]).describe("Scanner issue codes that block installation")
+    }).optional().default({
+        scanOnInstall: true,
+        scannerCommand: "uvx",
+        scannerArgs: [
+            "--from",
+            "mcp-scan>=0.4,<0.5",
+            "mcp-scan",
+            "--json",
+            "--skills"
+        ],
+        blockIssueCodes: [
+            "MCP501",
+            "MCP506",
+            "MCP507",
+            "MCP508",
+            "MCP509",
+            "MCP510",
+            "MCP511"
+        ]
+    })
 });
 const BrowserTransportSchema = external_zod_namespaceObject["enum"]([
     "auto",
@@ -172,6 +216,27 @@ const DiscordAdapterSchema = external_zod_namespaceObject.object({
 const GatewayAdaptersSchema = external_zod_namespaceObject.object({
     discord: DiscordAdapterSchema.optional()
 }).default({});
+const GatewayMcpProxySchema = external_zod_namespaceObject.object({
+    enabled: external_zod_namespaceObject.boolean().optional().default(false).describe("Enable MCP stdio proxy wrapper for gateway agent execution"),
+    command: external_zod_namespaceObject.string().optional().default("uvx").describe("Proxy runner command"),
+    baseArgs: external_zod_namespaceObject.array(external_zod_namespaceObject.string().min(1)).optional().default([
+        "invariant-gateway@latest",
+        "mcp"
+    ]).describe("Base arguments used before gateway proxy flags"),
+    projectName: external_zod_namespaceObject.string().optional().default("wingman-gateway").describe("Project name passed to the proxy runtime"),
+    pushExplorer: external_zod_namespaceObject.boolean().optional().default(false).describe("Enable remote trace push in proxy runtime"),
+    apiKey: external_zod_namespaceObject.string().optional().describe("Optional proxy API key"),
+    apiUrl: external_zod_namespaceObject.string().optional().describe("Optional proxy API URL")
+}).default({
+    enabled: false,
+    command: "uvx",
+    baseArgs: [
+        "invariant-gateway@latest",
+        "mcp"
+    ],
+    projectName: "wingman-gateway",
+    pushExplorer: false
+});
 const GatewayConfigSchema = external_zod_namespaceObject.object({
     host: external_zod_namespaceObject.string().default("127.0.0.1"),
     port: external_zod_namespaceObject.number().min(1).max(65535).default(18789),
@@ -188,6 +253,16 @@ const GatewayConfigSchema = external_zod_namespaceObject.object({
         allowInsecureAuth: false
     }),
     dynamicUiEnabled: external_zod_namespaceObject.boolean().optional().default(true),
+    mcpProxy: GatewayMcpProxySchema.optional().default({
+        enabled: false,
+        command: "uvx",
+        baseArgs: [
+            "invariant-gateway@latest",
+            "mcp"
+        ],
+        projectName: "wingman-gateway",
+        pushExplorer: false
+    }),
     adapters: GatewayAdaptersSchema.optional().default({})
 }).default({
     host: "127.0.0.1",
@@ -204,6 +279,16 @@ const GatewayConfigSchema = external_zod_namespaceObject.object({
         allowInsecureAuth: false
     },
     dynamicUiEnabled: true,
+    mcpProxy: {
+        enabled: false,
+        command: "uvx",
+        baseArgs: [
+            "invariant-gateway@latest",
+            "mcp"
+        ],
+        projectName: "wingman-gateway",
+        pushExplorer: false
+    },
     adapters: {}
 });
 const AgentListItemSchema = external_zod_namespaceObject.object({
@@ -301,9 +386,31 @@ const WingmanConfigSchema = external_zod_namespaceObject.object({
         outputMode: "auto"
     }),
     skills: SkillsConfigSchema.optional().default({
+        provider: "github",
         repositoryOwner: "anthropics",
         repositoryName: "skills",
-        skillsDirectory: "skills"
+        clawhubBaseUrl: "https://clawhub.ai",
+        skillsDirectory: "skills",
+        security: {
+            scanOnInstall: true,
+            scannerCommand: "uvx",
+            scannerArgs: [
+                "--from",
+                "mcp-scan>=0.4,<0.5",
+                "mcp-scan",
+                "--json",
+                "--skills"
+            ],
+            blockIssueCodes: [
+                "MCP501",
+                "MCP506",
+                "MCP507",
+                "MCP508",
+                "MCP509",
+                "MCP510",
+                "MCP511"
+            ]
+        }
     }),
     browser: BrowserConfigSchema.optional().default({
         profilesDir: ".wingman/browser-profiles",
@@ -335,6 +442,16 @@ const WingmanConfigSchema = external_zod_namespaceObject.object({
             allowInsecureAuth: false
         },
         dynamicUiEnabled: true,
+        mcpProxy: {
+            enabled: false,
+            command: "uvx",
+            baseArgs: [
+                "invariant-gateway@latest",
+                "mcp"
+            ],
+            projectName: "wingman-gateway",
+            pushExplorer: false
+        },
         adapters: {}
     }),
     agents: AgentsConfigSchema.optional().default({

package/dist/cli/config/schema.d.ts

@@ -8,10 +8,21 @@ export declare const SearchConfigSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type SearchConfig = z.infer<typeof SearchConfigSchema>;
 export declare const SkillsConfigSchema: z.ZodObject<{
+    provider: z.ZodDefault<z.ZodEnum<{
+        github: "github";
+        clawhub: "clawhub";
+    }>>;
     repositoryOwner: z.ZodDefault<z.ZodString>;
     repositoryName: z.ZodDefault<z.ZodString>;
     githubToken: z.ZodOptional<z.ZodString>;
+    clawhubBaseUrl: z.ZodDefault<z.ZodString>;
     skillsDirectory: z.ZodDefault<z.ZodString>;
+    security: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        scanOnInstall: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        scannerCommand: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        scannerArgs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        blockIssueCodes: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type SkillsConfig = z.infer<typeof SkillsConfigSchema>;
 export declare const BrowserTransportSchema: z.ZodEnum<{
@@ -110,6 +121,15 @@ export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
         allowInsecureAuth: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>>>;
     dynamicUiEnabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    mcpProxy: z.ZodDefault<z.ZodOptional<z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        command: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        baseArgs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        projectName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        pushExplorer: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        apiKey: z.ZodOptional<z.ZodString>;
+        apiUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>>;
     adapters: z.ZodDefault<z.ZodOptional<z.ZodDefault<z.ZodObject<{
         discord: z.ZodOptional<z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
@@ -292,10 +312,21 @@ export declare const WingmanConfigSchema: z.ZodObject<{
         }>>;
     }, z.core.$strip>>;
     skills: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        provider: z.ZodDefault<z.ZodEnum<{
+            github: "github";
+            clawhub: "clawhub";
+        }>>;
         repositoryOwner: z.ZodDefault<z.ZodString>;
         repositoryName: z.ZodDefault<z.ZodString>;
         githubToken: z.ZodOptional<z.ZodString>;
+        clawhubBaseUrl: z.ZodDefault<z.ZodString>;
         skillsDirectory: z.ZodDefault<z.ZodString>;
+        security: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            scanOnInstall: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            scannerCommand: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            scannerArgs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+            blockIssueCodes: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        }, z.core.$strip>>>;
     }, z.core.$strip>>>;
     browser: z.ZodDefault<z.ZodOptional<z.ZodObject<{
         profilesDir: z.ZodDefault<z.ZodOptional<z.ZodString>>;
@@ -340,6 +371,15 @@ export declare const WingmanConfigSchema: z.ZodObject<{
             allowInsecureAuth: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strip>>>>;
         dynamicUiEnabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        mcpProxy: z.ZodDefault<z.ZodOptional<z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            command: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            baseArgs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+            projectName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            pushExplorer: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            apiKey: z.ZodOptional<z.ZodString>;
+            apiUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>>;
         adapters: z.ZodDefault<z.ZodOptional<z.ZodDefault<z.ZodObject<{
             discord: z.ZodOptional<z.ZodDefault<z.ZodObject<{
                 enabled: z.ZodDefault<z.ZodBoolean>;

package/dist/cli/config/schema.js

@@ -11,10 +11,54 @@ const SearchConfigSchema = object({
     maxResults: number().min(1).max(20).optional().default(5).describe("Maximum number of search results to return")
 });
 const SkillsConfigSchema = object({
+    provider: external_zod_enum([
+        "github",
+        "clawhub"
+    ]).default("github").describe("Skill source provider"),
     repositoryOwner: string().default("anthropics").describe("GitHub repository owner for skills"),
     repositoryName: string().default("skills").describe("GitHub repository name for skills"),
     githubToken: string().optional().describe("GitHub personal access token for higher API rate limits"),
-    skillsDirectory: string().default("skills").describe("Directory to install skills in")
+    clawhubBaseUrl: string().default("https://clawhub.ai").describe("Base URL for ClawHub skill API"),
+    skillsDirectory: string().default("skills").describe("Directory to install skills in"),
+    security: object({
+        scanOnInstall: external_zod_boolean().optional().default(true).describe("Run a security scan for downloaded skills before installation"),
+        scannerCommand: string().optional().default("uvx").describe("Scanner runner command"),
+        scannerArgs: array(string().min(1)).optional().default([
+            "--from",
+            "mcp-scan>=0.4,<0.5",
+            "mcp-scan",
+            "--json",
+            "--skills"
+        ]).describe("Arguments prepended before the skill path for scanner execution"),
+        blockIssueCodes: array(string().min(1)).optional().default([
+            "MCP501",
+            "MCP506",
+            "MCP507",
+            "MCP508",
+            "MCP509",
+            "MCP510",
+            "MCP511"
+        ]).describe("Scanner issue codes that block installation")
+    }).optional().default({
+        scanOnInstall: true,
+        scannerCommand: "uvx",
+        scannerArgs: [
+            "--from",
+            "mcp-scan>=0.4,<0.5",
+            "mcp-scan",
+            "--json",
+            "--skills"
+        ],
+        blockIssueCodes: [
+            "MCP501",
+            "MCP506",
+            "MCP507",
+            "MCP508",
+            "MCP509",
+            "MCP510",
+            "MCP511"
+        ]
+    })
 });
 const BrowserTransportSchema = external_zod_enum([
     "auto",
@@ -133,6 +177,27 @@ const DiscordAdapterSchema = object({
 const GatewayAdaptersSchema = object({
     discord: DiscordAdapterSchema.optional()
 }).default({});
+const GatewayMcpProxySchema = object({
+    enabled: external_zod_boolean().optional().default(false).describe("Enable MCP stdio proxy wrapper for gateway agent execution"),
+    command: string().optional().default("uvx").describe("Proxy runner command"),
+    baseArgs: array(string().min(1)).optional().default([
+        "invariant-gateway@latest",
+        "mcp"
+    ]).describe("Base arguments used before gateway proxy flags"),
+    projectName: string().optional().default("wingman-gateway").describe("Project name passed to the proxy runtime"),
+    pushExplorer: external_zod_boolean().optional().default(false).describe("Enable remote trace push in proxy runtime"),
+    apiKey: string().optional().describe("Optional proxy API key"),
+    apiUrl: string().optional().describe("Optional proxy API URL")
+}).default({
+    enabled: false,
+    command: "uvx",
+    baseArgs: [
+        "invariant-gateway@latest",
+        "mcp"
+    ],
+    projectName: "wingman-gateway",
+    pushExplorer: false
+});
 const GatewayConfigSchema = object({
     host: string().default("127.0.0.1"),
     port: number().min(1).max(65535).default(18789),
@@ -149,6 +214,16 @@ const GatewayConfigSchema = object({
         allowInsecureAuth: false
     }),
     dynamicUiEnabled: external_zod_boolean().optional().default(true),
+    mcpProxy: GatewayMcpProxySchema.optional().default({
+        enabled: false,
+        command: "uvx",
+        baseArgs: [
+            "invariant-gateway@latest",
+            "mcp"
+        ],
+        projectName: "wingman-gateway",
+        pushExplorer: false
+    }),
     adapters: GatewayAdaptersSchema.optional().default({})
 }).default({
     host: "127.0.0.1",
@@ -165,6 +240,16 @@ const GatewayConfigSchema = object({
         allowInsecureAuth: false
     },
     dynamicUiEnabled: true,
+    mcpProxy: {
+        enabled: false,
+        command: "uvx",
+        baseArgs: [
+            "invariant-gateway@latest",
+            "mcp"
+        ],
+        projectName: "wingman-gateway",
+        pushExplorer: false
+    },
     adapters: {}
 });
 const AgentListItemSchema = object({
@@ -262,9 +347,31 @@ const WingmanConfigSchema = object({
         outputMode: "auto"
     }),
     skills: SkillsConfigSchema.optional().default({
+        provider: "github",
         repositoryOwner: "anthropics",
         repositoryName: "skills",
-        skillsDirectory: "skills"
+        clawhubBaseUrl: "https://clawhub.ai",
+        skillsDirectory: "skills",
+        security: {
+            scanOnInstall: true,
+            scannerCommand: "uvx",
+            scannerArgs: [
+                "--from",
+                "mcp-scan>=0.4,<0.5",
+                "mcp-scan",
+                "--json",
+                "--skills"
+            ],
+            blockIssueCodes: [
+                "MCP501",
+                "MCP506",
+                "MCP507",
+                "MCP508",
+                "MCP509",
+                "MCP510",
+                "MCP511"
+            ]
+        }
     }),
     browser: BrowserConfigSchema.optional().default({
         profilesDir: ".wingman/browser-profiles",
@@ -296,6 +403,16 @@ const WingmanConfigSchema = object({
             allowInsecureAuth: false
         },
         dynamicUiEnabled: true,
+        mcpProxy: {
+            enabled: false,
+            command: "uvx",
+            baseArgs: [
+                "invariant-gateway@latest",
+                "mcp"
+            ],
+            projectName: "wingman-gateway",
+            pushExplorer: false
+        },
         adapters: {}
     }),
     agents: AgentsConfigSchema.optional().default({

package/dist/cli/core/agentInvoker.cjs

@@ -345,7 +345,8 @@ class AgentInvoker {
             if (mcpConfigs.length > 0) {
                 this.logger.debug("Initializing MCP client for agent invocation");
                 this.mcpManager = new mcpClientManager_cjs_namespaceObject.MCPClientManager(mcpConfigs, this.logger, {
-                    executionWorkspace
+                    executionWorkspace,
+                    proxyConfig: this.mcpProxyConfig
                 });
                 await this.mcpManager.initialize();
                 const mcpTools = await this.mcpManager.getTools();
@@ -600,6 +601,7 @@ class AgentInvoker {
         _define_property(this, "terminalSessionManager", void 0);
         _define_property(this, "workdir", null);
         _define_property(this, "defaultOutputDir", null);
+        _define_property(this, "mcpProxyConfig", void 0);
         this.outputManager = options.outputManager;
         this.logger = options.logger;
         this.workspace = options.workspace || process.cwd();
@@ -608,6 +610,7 @@ class AgentInvoker {
         this.terminalSessionManager = options.terminalSessionManager || (0, terminal_session_manager_cjs_namespaceObject.getSharedTerminalSessionManager)();
         this.workdir = options.workdir || null;
         this.defaultOutputDir = options.defaultOutputDir || null;
+        this.mcpProxyConfig = options.mcpProxyConfig;
         const configLoader = new loader_cjs_namespaceObject.WingmanConfigLoader(this.configDir, this.workspace);
         this.wingmanConfig = configLoader.loadConfig();
         this.loader = new agentLoader_cjs_namespaceObject.AgentLoader(this.configDir, this.workspace, this.wingmanConfig);