@wingman-ai/gateway 0.3.2 → 0.4.0

package/dist/agent/config/mcpClientManager.cjs

@@ -52,15 +52,7 @@ class MCPClientManager {
             for (const [key, value] of Object.entries(stdioServer.env || {}))resolvedEnv[key] = resolveEnvValue(value);
             const runtimeEnv = this.applyRuntimeEnv(resolvedEnv);
             const defaultToolTimeout = getDefaultToolTimeout(stdioServer);
-            mcpServers[server.name] = {
-                transport: "stdio",
-                command: stdioServer.command,
-                args: stdioServer.args || [],
-                env: runtimeEnv,
-                ...void 0 !== defaultToolTimeout ? {
-                    defaultToolTimeout
-                } : {}
-            };
+            mcpServers[server.name] = this.buildStdioServerConfig(stdioServer, runtimeEnv, defaultToolTimeout);
         } else if ("sse" === server.transport) {
             const sseServer = server;
             const defaultToolTimeout = getDefaultToolTimeout(sseServer);
@@ -83,6 +75,51 @@ class MCPClientManager {
             }
         };
     }
+    buildStdioServerConfig(server, env, defaultToolTimeout) {
+        const baseConfig = {
+            transport: "stdio",
+            command: server.command,
+            args: server.args || [],
+            env,
+            ...void 0 !== defaultToolTimeout ? {
+                defaultToolTimeout
+            } : {}
+        };
+        if (!this.proxyConfig?.enabled) return baseConfig;
+        const proxyCommand = this.proxyConfig.command?.trim() || "uvx";
+        const proxyBaseArgs = this.proxyConfig.baseArgs && this.proxyConfig.baseArgs.length > 0 ? this.proxyConfig.baseArgs : [
+            "invariant-gateway@latest",
+            "mcp"
+        ];
+        const proxyEnv = {
+            ...env
+        };
+        if (this.proxyConfig.apiKey) proxyEnv.INVARIANT_API_KEY = this.proxyConfig.apiKey;
+        if (this.proxyConfig.apiUrl) {
+            proxyEnv.INVARIANT_API_URL = this.proxyConfig.apiUrl;
+            proxyEnv.GUARDRAILS_API_URL = this.proxyConfig.apiUrl;
+        }
+        const proxyArgs = [
+            ...proxyBaseArgs,
+            "--project-name",
+            this.proxyConfig.projectName || "wingman-gateway",
+            ...this.proxyConfig.pushExplorer ? [
+                "--push-explorer"
+            ] : [],
+            "--exec",
+            baseConfig.command,
+            ...baseConfig.args || []
+        ];
+        return {
+            transport: "stdio",
+            command: proxyCommand,
+            args: proxyArgs,
+            env: proxyEnv,
+            ...void 0 !== defaultToolTimeout ? {
+                defaultToolTimeout
+            } : {}
+        };
+    }
     applyRuntimeEnv(env) {
         if (!this.executionWorkspace) return env;
         const next = {
@@ -176,9 +213,11 @@ class MCPClientManager {
         _define_property(this, "logger", void 0);
         _define_property(this, "serverConfigs", void 0);
         _define_property(this, "executionWorkspace", void 0);
+        _define_property(this, "proxyConfig", void 0);
         this.logger = logger;
         this.serverConfigs = this.mergeConfigs(configs);
         this.executionWorkspace = options?.executionWorkspace?.trim() || null;
+        this.proxyConfig = options?.proxyConfig;
     }
 }
 function resolveEnvValue(value) {

package/dist/agent/config/mcpClientManager.d.ts

@@ -1,6 +1,15 @@
 import type { StructuredTool } from "@langchain/core/tools";
 import type { Logger } from "@/logger.js";
 import type { MCPServersConfig } from "@/types/mcp.js";
+export type MCPProxyConfig = {
+    enabled?: boolean;
+    command?: string;
+    baseArgs?: string[];
+    projectName?: string;
+    pushExplorer?: boolean;
+    apiKey?: string;
+    apiUrl?: string;
+};
 /**
  * Manages MCP server connections and tool retrieval
  * Handles server lifecycle: initialization, tool loading, and cleanup
@@ -10,8 +19,10 @@ export declare class MCPClientManager {
     private logger;
     private serverConfigs;
     private executionWorkspace;
+    private proxyConfig;
     constructor(configs: MCPServersConfig[], logger: Logger, options?: {
         executionWorkspace?: string | null;
+        proxyConfig?: MCPProxyConfig;
     });
     /**
      * Merge multiple MCP configurations (global + agent-specific)
@@ -22,6 +33,7 @@ export declare class MCPClientManager {
      * Convert Wingman MCP config to MultiServerMCPClient format
      */
     private buildClientConfig;
+    private buildStdioServerConfig;
     private applyRuntimeEnv;
     /**
      * Initialize MCP client and connect to servers

package/dist/agent/config/mcpClientManager.js

@@ -24,15 +24,7 @@ class MCPClientManager {
             for (const [key, value] of Object.entries(stdioServer.env || {}))resolvedEnv[key] = resolveEnvValue(value);
             const runtimeEnv = this.applyRuntimeEnv(resolvedEnv);
             const defaultToolTimeout = getDefaultToolTimeout(stdioServer);
-            mcpServers[server.name] = {
-                transport: "stdio",
-                command: stdioServer.command,
-                args: stdioServer.args || [],
-                env: runtimeEnv,
-                ...void 0 !== defaultToolTimeout ? {
-                    defaultToolTimeout
-                } : {}
-            };
+            mcpServers[server.name] = this.buildStdioServerConfig(stdioServer, runtimeEnv, defaultToolTimeout);
         } else if ("sse" === server.transport) {
             const sseServer = server;
             const defaultToolTimeout = getDefaultToolTimeout(sseServer);
@@ -55,6 +47,51 @@ class MCPClientManager {
             }
         };
     }
+    buildStdioServerConfig(server, env, defaultToolTimeout) {
+        const baseConfig = {
+            transport: "stdio",
+            command: server.command,
+            args: server.args || [],
+            env,
+            ...void 0 !== defaultToolTimeout ? {
+                defaultToolTimeout
+            } : {}
+        };
+        if (!this.proxyConfig?.enabled) return baseConfig;
+        const proxyCommand = this.proxyConfig.command?.trim() || "uvx";
+        const proxyBaseArgs = this.proxyConfig.baseArgs && this.proxyConfig.baseArgs.length > 0 ? this.proxyConfig.baseArgs : [
+            "invariant-gateway@latest",
+            "mcp"
+        ];
+        const proxyEnv = {
+            ...env
+        };
+        if (this.proxyConfig.apiKey) proxyEnv.INVARIANT_API_KEY = this.proxyConfig.apiKey;
+        if (this.proxyConfig.apiUrl) {
+            proxyEnv.INVARIANT_API_URL = this.proxyConfig.apiUrl;
+            proxyEnv.GUARDRAILS_API_URL = this.proxyConfig.apiUrl;
+        }
+        const proxyArgs = [
+            ...proxyBaseArgs,
+            "--project-name",
+            this.proxyConfig.projectName || "wingman-gateway",
+            ...this.proxyConfig.pushExplorer ? [
+                "--push-explorer"
+            ] : [],
+            "--exec",
+            baseConfig.command,
+            ...baseConfig.args || []
+        ];
+        return {
+            transport: "stdio",
+            command: proxyCommand,
+            args: proxyArgs,
+            env: proxyEnv,
+            ...void 0 !== defaultToolTimeout ? {
+                defaultToolTimeout
+            } : {}
+        };
+    }
     applyRuntimeEnv(env) {
         if (!this.executionWorkspace) return env;
         const next = {
@@ -148,9 +185,11 @@ class MCPClientManager {
         _define_property(this, "logger", void 0);
         _define_property(this, "serverConfigs", void 0);
         _define_property(this, "executionWorkspace", void 0);
+        _define_property(this, "proxyConfig", void 0);
         this.logger = logger;
         this.serverConfigs = this.mergeConfigs(configs);
         this.executionWorkspace = options?.executionWorkspace?.trim() || null;
+        this.proxyConfig = options?.proxyConfig;
     }
 }
 function resolveEnvValue(value) {

package/dist/agent/tests/mcpClientManager.test.cjs

@@ -117,6 +117,56 @@ const getClientConfig = (manager)=>manager.buildClientConfig();
         const clientConfig = getClientConfig(manager);
         (0, external_vitest_namespaceObject.expect)(clientConfig.mcpServers["fal-ai"].defaultToolTimeout).toBe(300000);
     });
+    (0, external_vitest_namespaceObject.it)("wraps stdio servers with proxy command when enabled", ()=>{
+        const configs = [
+            {
+                servers: [
+                    {
+                        name: "fal-ai",
+                        transport: "stdio",
+                        command: "bun",
+                        args: [
+                            "run",
+                            "src/tools/mcp-fal-ai.ts"
+                        ],
+                        env: {
+                            EXISTING: "value"
+                        }
+                    }
+                ]
+            }
+        ];
+        const manager = new mcpClientManager_cjs_namespaceObject.MCPClientManager(configs, testLogger, {
+            proxyConfig: {
+                enabled: true,
+                command: "uvx",
+                baseArgs: [
+                    "invariant-gateway@latest",
+                    "mcp"
+                ],
+                projectName: "wingman-gateway",
+                apiKey: "test-api-key",
+                apiUrl: "https://explorer.invariantlabs.ai"
+            }
+        });
+        const clientConfig = getClientConfig(manager);
+        const server = clientConfig.mcpServers["fal-ai"];
+        (0, external_vitest_namespaceObject.expect)(server.command).toBe("uvx");
+        (0, external_vitest_namespaceObject.expect)(server.args).toEqual([
+            "invariant-gateway@latest",
+            "mcp",
+            "--project-name",
+            "wingman-gateway",
+            "--exec",
+            "bun",
+            "run",
+            "src/tools/mcp-fal-ai.ts"
+        ]);
+        (0, external_vitest_namespaceObject.expect)(server.env.EXISTING).toBe("value");
+        (0, external_vitest_namespaceObject.expect)(server.env.INVARIANT_API_KEY).toBe("test-api-key");
+        (0, external_vitest_namespaceObject.expect)(server.env.INVARIANT_API_URL).toBe("https://explorer.invariantlabs.ai");
+        (0, external_vitest_namespaceObject.expect)(server.env.GUARDRAILS_API_URL).toBe("https://explorer.invariantlabs.ai");
+    });
 });
 for(var __rspack_i in __webpack_exports__)exports[__rspack_i] = __webpack_exports__[__rspack_i];
 Object.defineProperty(exports, '__esModule', {

package/dist/agent/tests/mcpClientManager.test.js

@@ -115,4 +115,54 @@ describe("MCPClientManager runtime env", ()=>{
         const clientConfig = getClientConfig(manager);
         expect(clientConfig.mcpServers["fal-ai"].defaultToolTimeout).toBe(300000);
     });
+    it("wraps stdio servers with proxy command when enabled", ()=>{
+        const configs = [
+            {
+                servers: [
+                    {
+                        name: "fal-ai",
+                        transport: "stdio",
+                        command: "bun",
+                        args: [
+                            "run",
+                            "src/tools/mcp-fal-ai.ts"
+                        ],
+                        env: {
+                            EXISTING: "value"
+                        }
+                    }
+                ]
+            }
+        ];
+        const manager = new MCPClientManager(configs, testLogger, {
+            proxyConfig: {
+                enabled: true,
+                command: "uvx",
+                baseArgs: [
+                    "invariant-gateway@latest",
+                    "mcp"
+                ],
+                projectName: "wingman-gateway",
+                apiKey: "test-api-key",
+                apiUrl: "https://explorer.invariantlabs.ai"
+            }
+        });
+        const clientConfig = getClientConfig(manager);
+        const server = clientConfig.mcpServers["fal-ai"];
+        expect(server.command).toBe("uvx");
+        expect(server.args).toEqual([
+            "invariant-gateway@latest",
+            "mcp",
+            "--project-name",
+            "wingman-gateway",
+            "--exec",
+            "bun",
+            "run",
+            "src/tools/mcp-fal-ai.ts"
+        ]);
+        expect(server.env.EXISTING).toBe("value");
+        expect(server.env.INVARIANT_API_KEY).toBe("test-api-key");
+        expect(server.env.INVARIANT_API_URL).toBe("https://explorer.invariantlabs.ai");
+        expect(server.env.GUARDRAILS_API_URL).toBe("https://explorer.invariantlabs.ai");
+    });
 });

package/dist/cli/commands/skill.cjs

@@ -41,14 +41,17 @@ async function executeSkillCommand(args, options = {}) {
     const config = configLoader.loadConfig();
     try {
         const repository = new skillRepository_cjs_namespaceObject.SkillRepository({
+            provider: config.skills?.provider,
             repositoryOwner: config.skills?.repositoryOwner,
             repositoryName: config.skills?.repositoryName,
-            githubToken: config.skills?.githubToken
+            githubToken: config.skills?.githubToken,
+            clawhubBaseUrl: config.skills?.clawhubBaseUrl
         });
         const service = new skillService_cjs_namespaceObject.SkillService(repository, outputManager, logger, {
             workspace,
             skillsDirectory: config.skills?.skillsDirectory,
-            outputMode: args.outputMode
+            outputMode: args.outputMode,
+            security: config.skills?.security
         });
         const subcommand = args.subcommand;
         const subcommandArgs = args.args;
@@ -100,7 +103,7 @@ async function executeSkillCommand(args, options = {}) {
 }
 function showSkillHelp(outputManager) {
     if ("interactive" === outputManager.getMode()) console.log(`
-Wingman Skill Manager - Install skills from the Anthropic skills repository
+Wingman Skill Manager - Install skills from configured registries
 
 Usage:
   wingman skill browse              Browse available skills
@@ -123,10 +126,15 @@ Configuration:
   Skills can be configured in .wingman/wingman.config.json:
   {
     "skills": {
+      "provider": "github",
       "repositoryOwner": "anthropics",
       "repositoryName": "skills",
       "githubToken": "optional-token",
-      "skillsDirectory": "skills"
+      "clawhubBaseUrl": "https://clawhub.ai",
+      "skillsDirectory": "skills",
+      "security": {
+        "scanOnInstall": true
+      }
     }
   }
 `);

package/dist/cli/commands/skill.js

@@ -13,14 +13,17 @@ async function executeSkillCommand(args, options = {}) {
     const config = configLoader.loadConfig();
     try {
         const repository = new SkillRepository({
+            provider: config.skills?.provider,
             repositoryOwner: config.skills?.repositoryOwner,
             repositoryName: config.skills?.repositoryName,
-            githubToken: config.skills?.githubToken
+            githubToken: config.skills?.githubToken,
+            clawhubBaseUrl: config.skills?.clawhubBaseUrl
         });
         const service = new SkillService(repository, outputManager, logger, {
             workspace,
             skillsDirectory: config.skills?.skillsDirectory,
-            outputMode: args.outputMode
+            outputMode: args.outputMode,
+            security: config.skills?.security
         });
         const subcommand = args.subcommand;
         const subcommandArgs = args.args;
@@ -72,7 +75,7 @@ async function executeSkillCommand(args, options = {}) {
 }
 function showSkillHelp(outputManager) {
     if ("interactive" === outputManager.getMode()) console.log(`
-Wingman Skill Manager - Install skills from the Anthropic skills repository
+Wingman Skill Manager - Install skills from configured registries
 
 Usage:
   wingman skill browse              Browse available skills
@@ -95,10 +98,15 @@ Configuration:
   Skills can be configured in .wingman/wingman.config.json:
   {
     "skills": {
+      "provider": "github",
       "repositoryOwner": "anthropics",
       "repositoryName": "skills",
       "githubToken": "optional-token",
-      "skillsDirectory": "skills"
+      "clawhubBaseUrl": "https://clawhub.ai",
+      "skillsDirectory": "skills",
+      "security": {
+        "scanOnInstall": true
+      }
     }
   }
 `);

package/dist/cli/config/jsonSchema.cjs

@@ -0,0 +1,55 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, definition)=>{
+        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+            enumerable: true,
+            get: definition[key]
+        });
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+__webpack_require__.d(__webpack_exports__, {
+    buildWingmanConfigJsonSchema: ()=>buildWingmanConfigJsonSchema,
+    WINGMAN_CONFIG_JSON_SCHEMA_ID: ()=>WINGMAN_CONFIG_JSON_SCHEMA_ID
+});
+const external_zod_namespaceObject = require("zod");
+const external_schema_cjs_namespaceObject = require("./schema.cjs");
+const WINGMAN_CONFIG_JSON_SCHEMA_ID = "https://getwingmanai.com/schemas/wingman.config.schema.json";
+function buildWingmanConfigJsonSchema() {
+    const schema = external_zod_namespaceObject.toJSONSchema(external_schema_cjs_namespaceObject.WingmanConfigSchema, {
+        target: "draft-2020-12",
+        unrepresentable: "any"
+    });
+    const { $schema: _ignored, ...schemaWithoutMeta } = schema;
+    return {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        $id: WINGMAN_CONFIG_JSON_SCHEMA_ID,
+        title: "Wingman Config",
+        description: "Schema for .wingman/wingman.config.json",
+        ...schemaWithoutMeta
+    };
+}
+exports.WINGMAN_CONFIG_JSON_SCHEMA_ID = __webpack_exports__.WINGMAN_CONFIG_JSON_SCHEMA_ID;
+exports.buildWingmanConfigJsonSchema = __webpack_exports__.buildWingmanConfigJsonSchema;
+for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "WINGMAN_CONFIG_JSON_SCHEMA_ID",
+    "buildWingmanConfigJsonSchema"
+].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/cli/config/jsonSchema.d.ts

@@ -0,0 +1,2 @@
+export declare const WINGMAN_CONFIG_JSON_SCHEMA_ID = "https://getwingmanai.com/schemas/wingman.config.schema.json";
+export declare function buildWingmanConfigJsonSchema(): Record<string, unknown>;

package/dist/cli/config/jsonSchema.js

@@ -0,0 +1,18 @@
+import { toJSONSchema } from "zod";
+import { WingmanConfigSchema } from "./schema.js";
+const WINGMAN_CONFIG_JSON_SCHEMA_ID = "https://getwingmanai.com/schemas/wingman.config.schema.json";
+function buildWingmanConfigJsonSchema() {
+    const schema = toJSONSchema(WingmanConfigSchema, {
+        target: "draft-2020-12",
+        unrepresentable: "any"
+    });
+    const { $schema: _ignored, ...schemaWithoutMeta } = schema;
+    return {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        $id: WINGMAN_CONFIG_JSON_SCHEMA_ID,
+        title: "Wingman Config",
+        description: "Schema for .wingman/wingman.config.json",
+        ...schemaWithoutMeta
+    };
+}
+export { WINGMAN_CONFIG_JSON_SCHEMA_ID, buildWingmanConfigJsonSchema };

package/dist/cli/config/loader.cjs

@@ -133,9 +133,31 @@ class WingmanConfigLoader {
                 outputMode: "auto"
             },
             skills: {
+                provider: "github",
                 repositoryOwner: "anthropics",
                 repositoryName: "skills",
-                skillsDirectory: "skills"
+                clawhubBaseUrl: "https://clawhub.ai",
+                skillsDirectory: "skills",
+                security: {
+                    scanOnInstall: true,
+                    scannerCommand: "uvx",
+                    scannerArgs: [
+                        "--from",
+                        "mcp-scan>=0.4,<0.5",
+                        "mcp-scan",
+                        "--json",
+                        "--skills"
+                    ],
+                    blockIssueCodes: [
+                        "MCP501",
+                        "MCP506",
+                        "MCP507",
+                        "MCP508",
+                        "MCP509",
+                        "MCP510",
+                        "MCP511"
+                    ]
+                }
             },
             browser: {
                 profilesDir: ".wingman/browser-profiles",
@@ -167,6 +189,16 @@ class WingmanConfigLoader {
                     allowInsecureAuth: false
                 },
                 dynamicUiEnabled: true,
+                mcpProxy: {
+                    enabled: false,
+                    command: "uvx",
+                    baseArgs: [
+                        "invariant-gateway@latest",
+                        "mcp"
+                    ],
+                    projectName: "wingman-gateway",
+                    pushExplorer: false
+                },
                 adapters: {}
             },
             agents: {

package/dist/cli/config/loader.js

@@ -105,9 +105,31 @@ class WingmanConfigLoader {
                 outputMode: "auto"
             },
             skills: {
+                provider: "github",
                 repositoryOwner: "anthropics",
                 repositoryName: "skills",
-                skillsDirectory: "skills"
+                clawhubBaseUrl: "https://clawhub.ai",
+                skillsDirectory: "skills",
+                security: {
+                    scanOnInstall: true,
+                    scannerCommand: "uvx",
+                    scannerArgs: [
+                        "--from",
+                        "mcp-scan>=0.4,<0.5",
+                        "mcp-scan",
+                        "--json",
+                        "--skills"
+                    ],
+                    blockIssueCodes: [
+                        "MCP501",
+                        "MCP506",
+                        "MCP507",
+                        "MCP508",
+                        "MCP509",
+                        "MCP510",
+                        "MCP511"
+                    ]
+                }
             },
             browser: {
                 profilesDir: ".wingman/browser-profiles",
@@ -139,6 +161,16 @@ class WingmanConfigLoader {
                     allowInsecureAuth: false
                 },
                 dynamicUiEnabled: true,
+                mcpProxy: {
+                    enabled: false,
+                    command: "uvx",
+                    baseArgs: [
+                        "invariant-gateway@latest",
+                        "mcp"
+                    ],
+                    projectName: "wingman-gateway",
+                    pushExplorer: false
+                },
                 adapters: {}
             },
             agents: {