feat: mcp gateway schema types (auth, outbound auth, OAuth credentials) (#375)

* ci: add feat/gateway-integration branch to workflow triggers (#376)

* feat: mcp gateway schema types (auth, outbound auth, OAuth credentials)

* fix: address CR feedback — scopes optional, specific validation errors

Author: aidandaly24

.github/workflows/build-and-test.yml

@@ -2,9 +2,9 @@ name: Build and Test
 
 on:
   push:
-    branches: ['main']
+    branches: ['main', 'feat/gateway-integration']
   pull_request:
-    branches: ['main']
+    branches: ['main', 'feat/gateway-integration']
 
 permissions:
   contents: read

.github/workflows/codeql.yml

@@ -2,11 +2,11 @@ name: CodeQL
 
 on:
   push:
-    branches: ['main']
+    branches: ['main', 'feat/gateway-integration']
   pull_request:
-    branches: ['main']
+    branches: ['main', 'feat/gateway-integration']
   pull_request_target:
-    branches: ['main']
+    branches: ['main', 'feat/gateway-integration']
 
 # Cancel in-progress runs when a new commit is pushed
 concurrency:

.github/workflows/e2e-tests.yml

@@ -6,7 +6,7 @@ on:
         description: 'AWS region for deployment'
         default: 'us-east-1'
   pull_request_target:
-    branches: [main]
+    branches: [main, feat/gateway-integration]
 
 permissions:
   id-token: write # OIDC — lets GitHub assume an AWS IAM role via short-lived token (no stored keys)

.github/workflows/lint.yml

@@ -2,9 +2,9 @@ name: Quality and Safety Checks
 
 on:
   push:
-    branches: ['main']
+    branches: ['main', 'feat/gateway-integration']
   pull_request:
-    branches: ['main']
+    branches: ['main', 'feat/gateway-integration']
 
 permissions:
   contents: read

.github/workflows/pr-size.yml

@@ -4,7 +4,7 @@ name: PR Size Check and Label
 # Safe because this workflow only reads PR metadata — it never checks out untrusted code.
 on:
   pull_request_target:
-    branches: [main]
+    branches: [main, feat/gateway-integration]
 
 jobs:
   label-size:

.github/workflows/pr-title.yml

@@ -2,7 +2,7 @@ name: Validate PR Title
 
 on:
   pull_request_target:
-    branches: [main]
+    branches: [main, feat/gateway-integration]
     types: [opened, edited, synchronize, reopened]
 
 jobs:

src/cli/operations/mcp/create-mcp.ts

@@ -126,7 +126,7 @@ export async function getExistingToolNames(): Promise<string[]> {
     // Gateway targets
     for (const gateway of mcpSpec.agentCoreGateways) {
       for (const target of gateway.targets) {
-        for (const toolDef of target.toolDefinitions) {
+        for (const toolDef of target.toolDefinitions ?? []) {
           toolNames.push(toolDef.name);
         }
       }
@@ -256,7 +256,7 @@ export async function createToolFromWizard(config: AddMcpToolConfig): Promise<Cr
     // Check for duplicate tool names
     for (const toolDef of toolDefs) {
       for (const existingTarget of gateway.targets) {
-        if (existingTarget.toolDefinitions.some(t => t.name === toolDef.name)) {
+        if ((existingTarget.toolDefinitions ?? []).some(t => t.name === toolDef.name)) {
           throw new Error(`Tool "${toolDef.name}" already exists in gateway "${gateway.name}".`);
         }
       }

src/cli/operations/remove/remove-mcp-tool.ts

@@ -109,7 +109,7 @@ export async function previewRemoveMcpTool(tool: RemovableMcpTool): Promise<Remo
     }
 
     // Tool definitions in mcp-defs
-    for (const toolDef of target.toolDefinitions) {
+    for (const toolDef of target.toolDefinitions ?? []) {
       if (mcpDefs.tools[toolDef.name]) {
         summary.push(`Removing tool definition: ${toolDef.name}`);
       }
@@ -179,7 +179,7 @@ function computeRemovedToolMcpDefs(
     const gateway = mcpSpec.agentCoreGateways.find(g => g.name === tool.gatewayName);
     const target = gateway?.targets.find(t => t.name === tool.name);
     if (target) {
-      for (const toolDef of target.toolDefinitions) {
+      for (const toolDef of target.toolDefinitions ?? []) {
         toolNamesToRemove.push(toolDef.name);
       }
     }

src/cli/tui/screens/mcp/useAddGatewayWizard.ts

@@ -5,6 +5,7 @@ import { useCallback, useMemo, useState } from 'react';
 /** Maps authorizer type to the next step after authorizer selection */
 const AUTHORIZER_NEXT_STEP: Record<GatewayAuthorizerType, AddGatewayStep> = {
   NONE: 'agents',
+  AWS_IAM: 'agents',
   CUSTOM_JWT: 'jwt-config',
 };
 

src/schema/schemas/__tests__/mcp.test.ts

@@ -261,6 +261,11 @@ describe('AgentCoreGatewayTargetSchema', () => {
       name: 'myTarget',
       targetType: 'lambda',
       toolDefinitions: [validToolDef],
+      compute: {
+        host: 'Lambda',
+        implementation: { language: 'Python', path: 'tools', handler: 'h' },
+        pythonVersion: 'PYTHON_3_12',
+      },
     });
     expect(result.success).toBe(true);
   });
@@ -270,6 +275,11 @@ describe('AgentCoreGatewayTargetSchema', () => {
       name: 'myTarget',
       targetType: 'lambda',
       toolDefinitions: [],
+      compute: {
+        host: 'Lambda',
+        implementation: { language: 'Python', path: 'tools', handler: 'h' },
+        pythonVersion: 'PYTHON_3_12',
+      },
     });
     expect(result.success).toBe(false);
   });
@@ -303,6 +313,11 @@ describe('AgentCoreGatewaySchema', () => {
         name: 'target1',
         targetType: 'lambda',
         toolDefinitions: [validToolDef],
+        compute: {
+          host: 'Lambda',
+          implementation: { language: 'Python', path: 'tools', handler: 'h' },
+          pythonVersion: 'PYTHON_3_12',
+        },
       },
     ],
   };
@@ -387,7 +402,18 @@ describe('AgentCoreMcpSpecSchema', () => {
       agentCoreGateways: [
         {
           name: 'gw1',
-          targets: [{ name: 't1', targetType: 'lambda', toolDefinitions: [validToolDef] }],
+          targets: [
+            {
+              name: 't1',
+              targetType: 'lambda',
+              toolDefinitions: [validToolDef],
+              compute: {
+                host: 'Lambda',
+                implementation: { language: 'Python', path: 'tools', handler: 'h' },
+                pythonVersion: 'PYTHON_3_12',
+              },
+            },
+          ],
         },
       ],
     });