@wingman-ai/gateway 0.3.2 → 0.4.0

package/dist/cli/config/schema.cjs

@@ -50,10 +50,54 @@ const SearchConfigSchema = external_zod_namespaceObject.object({
     maxResults: external_zod_namespaceObject.number().min(1).max(20).optional().default(5).describe("Maximum number of search results to return")
 });
 const SkillsConfigSchema = external_zod_namespaceObject.object({
+    provider: external_zod_namespaceObject["enum"]([
+        "github",
+        "clawhub"
+    ]).default("github").describe("Skill source provider"),
     repositoryOwner: external_zod_namespaceObject.string().default("anthropics").describe("GitHub repository owner for skills"),
     repositoryName: external_zod_namespaceObject.string().default("skills").describe("GitHub repository name for skills"),
     githubToken: external_zod_namespaceObject.string().optional().describe("GitHub personal access token for higher API rate limits"),
-    skillsDirectory: external_zod_namespaceObject.string().default("skills").describe("Directory to install skills in")
+    clawhubBaseUrl: external_zod_namespaceObject.string().default("https://clawhub.ai").describe("Base URL for ClawHub skill API"),
+    skillsDirectory: external_zod_namespaceObject.string().default("skills").describe("Directory to install skills in"),
+    security: external_zod_namespaceObject.object({
+        scanOnInstall: external_zod_namespaceObject.boolean().optional().default(true).describe("Run a security scan for downloaded skills before installation"),
+        scannerCommand: external_zod_namespaceObject.string().optional().default("uvx").describe("Scanner runner command"),
+        scannerArgs: external_zod_namespaceObject.array(external_zod_namespaceObject.string().min(1)).optional().default([
+            "--from",
+            "mcp-scan>=0.4,<0.5",
+            "mcp-scan",
+            "--json",
+            "--skills"
+        ]).describe("Arguments prepended before the skill path for scanner execution"),
+        blockIssueCodes: external_zod_namespaceObject.array(external_zod_namespaceObject.string().min(1)).optional().default([
+            "MCP501",
+            "MCP506",
+            "MCP507",
+            "MCP508",
+            "MCP509",
+            "MCP510",
+            "MCP511"
+        ]).describe("Scanner issue codes that block installation")
+    }).optional().default({
+        scanOnInstall: true,
+        scannerCommand: "uvx",
+        scannerArgs: [
+            "--from",
+            "mcp-scan>=0.4,<0.5",
+            "mcp-scan",
+            "--json",
+            "--skills"
+        ],
+        blockIssueCodes: [
+            "MCP501",
+            "MCP506",
+            "MCP507",
+            "MCP508",
+            "MCP509",
+            "MCP510",
+            "MCP511"
+        ]
+    })
 });
 const BrowserTransportSchema = external_zod_namespaceObject["enum"]([
     "auto",
@@ -172,6 +216,27 @@ const DiscordAdapterSchema = external_zod_namespaceObject.object({
 const GatewayAdaptersSchema = external_zod_namespaceObject.object({
     discord: DiscordAdapterSchema.optional()
 }).default({});
+const GatewayMcpProxySchema = external_zod_namespaceObject.object({
+    enabled: external_zod_namespaceObject.boolean().optional().default(false).describe("Enable MCP stdio proxy wrapper for gateway agent execution"),
+    command: external_zod_namespaceObject.string().optional().default("uvx").describe("Proxy runner command"),
+    baseArgs: external_zod_namespaceObject.array(external_zod_namespaceObject.string().min(1)).optional().default([
+        "invariant-gateway@latest",
+        "mcp"
+    ]).describe("Base arguments used before gateway proxy flags"),
+    projectName: external_zod_namespaceObject.string().optional().default("wingman-gateway").describe("Project name passed to the proxy runtime"),
+    pushExplorer: external_zod_namespaceObject.boolean().optional().default(false).describe("Enable remote trace push in proxy runtime"),
+    apiKey: external_zod_namespaceObject.string().optional().describe("Optional proxy API key"),
+    apiUrl: external_zod_namespaceObject.string().optional().describe("Optional proxy API URL")
+}).default({
+    enabled: false,
+    command: "uvx",
+    baseArgs: [
+        "invariant-gateway@latest",
+        "mcp"
+    ],
+    projectName: "wingman-gateway",
+    pushExplorer: false
+});
 const GatewayConfigSchema = external_zod_namespaceObject.object({
     host: external_zod_namespaceObject.string().default("127.0.0.1"),
     port: external_zod_namespaceObject.number().min(1).max(65535).default(18789),
@@ -188,6 +253,16 @@ const GatewayConfigSchema = external_zod_namespaceObject.object({
         allowInsecureAuth: false
     }),
     dynamicUiEnabled: external_zod_namespaceObject.boolean().optional().default(true),
+    mcpProxy: GatewayMcpProxySchema.optional().default({
+        enabled: false,
+        command: "uvx",
+        baseArgs: [
+            "invariant-gateway@latest",
+            "mcp"
+        ],
+        projectName: "wingman-gateway",
+        pushExplorer: false
+    }),
     adapters: GatewayAdaptersSchema.optional().default({})
 }).default({
     host: "127.0.0.1",
@@ -204,6 +279,16 @@ const GatewayConfigSchema = external_zod_namespaceObject.object({
         allowInsecureAuth: false
     },
     dynamicUiEnabled: true,
+    mcpProxy: {
+        enabled: false,
+        command: "uvx",
+        baseArgs: [
+            "invariant-gateway@latest",
+            "mcp"
+        ],
+        projectName: "wingman-gateway",
+        pushExplorer: false
+    },
     adapters: {}
 });
 const AgentListItemSchema = external_zod_namespaceObject.object({
@@ -301,9 +386,31 @@ const WingmanConfigSchema = external_zod_namespaceObject.object({
         outputMode: "auto"
     }),
     skills: SkillsConfigSchema.optional().default({
+        provider: "github",
         repositoryOwner: "anthropics",
         repositoryName: "skills",
-        skillsDirectory: "skills"
+        clawhubBaseUrl: "https://clawhub.ai",
+        skillsDirectory: "skills",
+        security: {
+            scanOnInstall: true,
+            scannerCommand: "uvx",
+            scannerArgs: [
+                "--from",
+                "mcp-scan>=0.4,<0.5",
+                "mcp-scan",
+                "--json",
+                "--skills"
+            ],
+            blockIssueCodes: [
+                "MCP501",
+                "MCP506",
+                "MCP507",
+                "MCP508",
+                "MCP509",
+                "MCP510",
+                "MCP511"
+            ]
+        }
     }),
     browser: BrowserConfigSchema.optional().default({
         profilesDir: ".wingman/browser-profiles",
@@ -335,6 +442,16 @@ const WingmanConfigSchema = external_zod_namespaceObject.object({
             allowInsecureAuth: false
         },
         dynamicUiEnabled: true,
+        mcpProxy: {
+            enabled: false,
+            command: "uvx",
+            baseArgs: [
+                "invariant-gateway@latest",
+                "mcp"
+            ],
+            projectName: "wingman-gateway",
+            pushExplorer: false
+        },
         adapters: {}
     }),
     agents: AgentsConfigSchema.optional().default({

package/dist/cli/config/schema.d.ts

@@ -8,10 +8,21 @@ export declare const SearchConfigSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type SearchConfig = z.infer<typeof SearchConfigSchema>;
 export declare const SkillsConfigSchema: z.ZodObject<{
+    provider: z.ZodDefault<z.ZodEnum<{
+        github: "github";
+        clawhub: "clawhub";
+    }>>;
     repositoryOwner: z.ZodDefault<z.ZodString>;
     repositoryName: z.ZodDefault<z.ZodString>;
     githubToken: z.ZodOptional<z.ZodString>;
+    clawhubBaseUrl: z.ZodDefault<z.ZodString>;
     skillsDirectory: z.ZodDefault<z.ZodString>;
+    security: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        scanOnInstall: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        scannerCommand: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        scannerArgs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        blockIssueCodes: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type SkillsConfig = z.infer<typeof SkillsConfigSchema>;
 export declare const BrowserTransportSchema: z.ZodEnum<{
@@ -110,6 +121,15 @@ export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
         allowInsecureAuth: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>>>;
     dynamicUiEnabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    mcpProxy: z.ZodDefault<z.ZodOptional<z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        command: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        baseArgs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        projectName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        pushExplorer: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        apiKey: z.ZodOptional<z.ZodString>;
+        apiUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>>;
     adapters: z.ZodDefault<z.ZodOptional<z.ZodDefault<z.ZodObject<{
         discord: z.ZodOptional<z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
@@ -292,10 +312,21 @@ export declare const WingmanConfigSchema: z.ZodObject<{
         }>>;
     }, z.core.$strip>>;
     skills: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        provider: z.ZodDefault<z.ZodEnum<{
+            github: "github";
+            clawhub: "clawhub";
+        }>>;
         repositoryOwner: z.ZodDefault<z.ZodString>;
         repositoryName: z.ZodDefault<z.ZodString>;
         githubToken: z.ZodOptional<z.ZodString>;
+        clawhubBaseUrl: z.ZodDefault<z.ZodString>;
         skillsDirectory: z.ZodDefault<z.ZodString>;
+        security: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            scanOnInstall: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            scannerCommand: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            scannerArgs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+            blockIssueCodes: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        }, z.core.$strip>>>;
     }, z.core.$strip>>>;
     browser: z.ZodDefault<z.ZodOptional<z.ZodObject<{
         profilesDir: z.ZodDefault<z.ZodOptional<z.ZodString>>;
@@ -340,6 +371,15 @@ export declare const WingmanConfigSchema: z.ZodObject<{
             allowInsecureAuth: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strip>>>>;
         dynamicUiEnabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        mcpProxy: z.ZodDefault<z.ZodOptional<z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            command: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            baseArgs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+            projectName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            pushExplorer: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            apiKey: z.ZodOptional<z.ZodString>;
+            apiUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>>;
         adapters: z.ZodDefault<z.ZodOptional<z.ZodDefault<z.ZodObject<{
             discord: z.ZodOptional<z.ZodDefault<z.ZodObject<{
                 enabled: z.ZodDefault<z.ZodBoolean>;

package/dist/cli/config/schema.js

@@ -11,10 +11,54 @@ const SearchConfigSchema = object({
     maxResults: number().min(1).max(20).optional().default(5).describe("Maximum number of search results to return")
 });
 const SkillsConfigSchema = object({
+    provider: external_zod_enum([
+        "github",
+        "clawhub"
+    ]).default("github").describe("Skill source provider"),
     repositoryOwner: string().default("anthropics").describe("GitHub repository owner for skills"),
     repositoryName: string().default("skills").describe("GitHub repository name for skills"),
     githubToken: string().optional().describe("GitHub personal access token for higher API rate limits"),
-    skillsDirectory: string().default("skills").describe("Directory to install skills in")
+    clawhubBaseUrl: string().default("https://clawhub.ai").describe("Base URL for ClawHub skill API"),
+    skillsDirectory: string().default("skills").describe("Directory to install skills in"),
+    security: object({
+        scanOnInstall: external_zod_boolean().optional().default(true).describe("Run a security scan for downloaded skills before installation"),
+        scannerCommand: string().optional().default("uvx").describe("Scanner runner command"),
+        scannerArgs: array(string().min(1)).optional().default([
+            "--from",
+            "mcp-scan>=0.4,<0.5",
+            "mcp-scan",
+            "--json",
+            "--skills"
+        ]).describe("Arguments prepended before the skill path for scanner execution"),
+        blockIssueCodes: array(string().min(1)).optional().default([
+            "MCP501",
+            "MCP506",
+            "MCP507",
+            "MCP508",
+            "MCP509",
+            "MCP510",
+            "MCP511"
+        ]).describe("Scanner issue codes that block installation")
+    }).optional().default({
+        scanOnInstall: true,
+        scannerCommand: "uvx",
+        scannerArgs: [
+            "--from",
+            "mcp-scan>=0.4,<0.5",
+            "mcp-scan",
+            "--json",
+            "--skills"
+        ],
+        blockIssueCodes: [
+            "MCP501",
+            "MCP506",
+            "MCP507",
+            "MCP508",
+            "MCP509",
+            "MCP510",
+            "MCP511"
+        ]
+    })
 });
 const BrowserTransportSchema = external_zod_enum([
     "auto",
@@ -133,6 +177,27 @@ const DiscordAdapterSchema = object({
 const GatewayAdaptersSchema = object({
     discord: DiscordAdapterSchema.optional()
 }).default({});
+const GatewayMcpProxySchema = object({
+    enabled: external_zod_boolean().optional().default(false).describe("Enable MCP stdio proxy wrapper for gateway agent execution"),
+    command: string().optional().default("uvx").describe("Proxy runner command"),
+    baseArgs: array(string().min(1)).optional().default([
+        "invariant-gateway@latest",
+        "mcp"
+    ]).describe("Base arguments used before gateway proxy flags"),
+    projectName: string().optional().default("wingman-gateway").describe("Project name passed to the proxy runtime"),
+    pushExplorer: external_zod_boolean().optional().default(false).describe("Enable remote trace push in proxy runtime"),
+    apiKey: string().optional().describe("Optional proxy API key"),
+    apiUrl: string().optional().describe("Optional proxy API URL")
+}).default({
+    enabled: false,
+    command: "uvx",
+    baseArgs: [
+        "invariant-gateway@latest",
+        "mcp"
+    ],
+    projectName: "wingman-gateway",
+    pushExplorer: false
+});
 const GatewayConfigSchema = object({
     host: string().default("127.0.0.1"),
     port: number().min(1).max(65535).default(18789),
@@ -149,6 +214,16 @@ const GatewayConfigSchema = object({
         allowInsecureAuth: false
     }),
     dynamicUiEnabled: external_zod_boolean().optional().default(true),
+    mcpProxy: GatewayMcpProxySchema.optional().default({
+        enabled: false,
+        command: "uvx",
+        baseArgs: [
+            "invariant-gateway@latest",
+            "mcp"
+        ],
+        projectName: "wingman-gateway",
+        pushExplorer: false
+    }),
     adapters: GatewayAdaptersSchema.optional().default({})
 }).default({
     host: "127.0.0.1",
@@ -165,6 +240,16 @@ const GatewayConfigSchema = object({
         allowInsecureAuth: false
     },
     dynamicUiEnabled: true,
+    mcpProxy: {
+        enabled: false,
+        command: "uvx",
+        baseArgs: [
+            "invariant-gateway@latest",
+            "mcp"
+        ],
+        projectName: "wingman-gateway",
+        pushExplorer: false
+    },
     adapters: {}
 });
 const AgentListItemSchema = object({
@@ -262,9 +347,31 @@ const WingmanConfigSchema = object({
         outputMode: "auto"
     }),
     skills: SkillsConfigSchema.optional().default({
+        provider: "github",
         repositoryOwner: "anthropics",
         repositoryName: "skills",
-        skillsDirectory: "skills"
+        clawhubBaseUrl: "https://clawhub.ai",
+        skillsDirectory: "skills",
+        security: {
+            scanOnInstall: true,
+            scannerCommand: "uvx",
+            scannerArgs: [
+                "--from",
+                "mcp-scan>=0.4,<0.5",
+                "mcp-scan",
+                "--json",
+                "--skills"
+            ],
+            blockIssueCodes: [
+                "MCP501",
+                "MCP506",
+                "MCP507",
+                "MCP508",
+                "MCP509",
+                "MCP510",
+                "MCP511"
+            ]
+        }
     }),
     browser: BrowserConfigSchema.optional().default({
         profilesDir: ".wingman/browser-profiles",
@@ -296,6 +403,16 @@ const WingmanConfigSchema = object({
             allowInsecureAuth: false
         },
         dynamicUiEnabled: true,
+        mcpProxy: {
+            enabled: false,
+            command: "uvx",
+            baseArgs: [
+                "invariant-gateway@latest",
+                "mcp"
+            ],
+            projectName: "wingman-gateway",
+            pushExplorer: false
+        },
         adapters: {}
     }),
     agents: AgentsConfigSchema.optional().default({

package/dist/cli/core/agentInvoker.cjs

@@ -345,7 +345,8 @@ class AgentInvoker {
             if (mcpConfigs.length > 0) {
                 this.logger.debug("Initializing MCP client for agent invocation");
                 this.mcpManager = new mcpClientManager_cjs_namespaceObject.MCPClientManager(mcpConfigs, this.logger, {
-                    executionWorkspace
+                    executionWorkspace,
+                    proxyConfig: this.mcpProxyConfig
                 });
                 await this.mcpManager.initialize();
                 const mcpTools = await this.mcpManager.getTools();
@@ -600,6 +601,7 @@ class AgentInvoker {
         _define_property(this, "terminalSessionManager", void 0);
         _define_property(this, "workdir", null);
         _define_property(this, "defaultOutputDir", null);
+        _define_property(this, "mcpProxyConfig", void 0);
         this.outputManager = options.outputManager;
         this.logger = options.logger;
         this.workspace = options.workspace || process.cwd();
@@ -608,6 +610,7 @@ class AgentInvoker {
         this.terminalSessionManager = options.terminalSessionManager || (0, terminal_session_manager_cjs_namespaceObject.getSharedTerminalSessionManager)();
         this.workdir = options.workdir || null;
         this.defaultOutputDir = options.defaultOutputDir || null;
+        this.mcpProxyConfig = options.mcpProxyConfig;
         const configLoader = new loader_cjs_namespaceObject.WingmanConfigLoader(this.configDir, this.workspace);
         this.wingmanConfig = configLoader.loadConfig();
         this.loader = new agentLoader_cjs_namespaceObject.AgentLoader(this.configDir, this.workspace, this.wingmanConfig);

package/dist/cli/core/agentInvoker.d.ts

@@ -1,4 +1,5 @@
 import type { WingmanAgentConfig } from "@/agent/config/agentConfig.js";
+import { type MCPProxyConfig } from "@/agent/config/mcpClientManager.js";
 import { type TerminalSessionManager } from "@/agent/tools/terminal_session_manager.js";
 import type { WingmanAgent } from "@/types/agents.js";
 import type { Logger } from "../../logger.js";
@@ -14,6 +15,7 @@ export interface AgentInvokerOptions {
     terminalSessionManager?: TerminalSessionManager;
     workdir?: string | null;
     defaultOutputDir?: string | null;
+    mcpProxyConfig?: MCPProxyConfig;
 }
 export interface InvokeAgentOptions {
     signal?: AbortSignal;
@@ -149,6 +151,7 @@ export declare class AgentInvoker {
     private terminalSessionManager;
     private workdir;
     private defaultOutputDir;
+    private mcpProxyConfig;
     constructor(options: AgentInvokerOptions);
     findAllAgents(): WingmanAgentConfig[];
     /**

package/dist/cli/core/agentInvoker.js

@@ -296,7 +296,8 @@ class AgentInvoker {
             if (mcpConfigs.length > 0) {
                 this.logger.debug("Initializing MCP client for agent invocation");
                 this.mcpManager = new MCPClientManager(mcpConfigs, this.logger, {
-                    executionWorkspace
+                    executionWorkspace,
+                    proxyConfig: this.mcpProxyConfig
                 });
                 await this.mcpManager.initialize();
                 const mcpTools = await this.mcpManager.getTools();
@@ -551,6 +552,7 @@ class AgentInvoker {
         _define_property(this, "terminalSessionManager", void 0);
         _define_property(this, "workdir", null);
         _define_property(this, "defaultOutputDir", null);
+        _define_property(this, "mcpProxyConfig", void 0);
         this.outputManager = options.outputManager;
         this.logger = options.logger;
         this.workspace = options.workspace || process.cwd();
@@ -559,6 +561,7 @@ class AgentInvoker {
         this.terminalSessionManager = options.terminalSessionManager || getSharedTerminalSessionManager();
         this.workdir = options.workdir || null;
         this.defaultOutputDir = options.defaultOutputDir || null;
+        this.mcpProxyConfig = options.mcpProxyConfig;
         const configLoader = new WingmanConfigLoader(this.configDir, this.workspace);
         this.wingmanConfig = configLoader.loadConfig();
         this.loader = new AgentLoader(this.configDir, this.workspace, this.wingmanConfig);