test: align interceptor unit tests with FIX-BATCH-3 changes

Four unit tests asserted against pre-FIX-BATCH-3 behavior. Bringing them
in line with the shipped code:

1. logs/__tests__/interceptor.test.ts — error message no longer mentions
   the internal field name `interceptorFunctionName`. Assert against the
   new "has no Lambda function" copy that the user actually sees.
2. shared/__tests__/interceptor-mode-check.test.ts — error message no
   longer leaks `deployed-state.json`. Assert against the new
   "is not deployed" copy.
3. schema/.../interceptor.test.ts — schema fields are .optional() and
   defaults are applied at consumption time (not parse time), so a
   sparse parse leaves them undefined rather than filling them in.
4. operations/deploy/__tests__/preflight.test.ts — the new
   validateGatewayTargetLambdas() preflight imports getCredentialProvider
   from aws/account.js. Stub it in the existing vi.mock so existing
   fixtures (which have no lambda-function-arn targets) keep working.

Author: aidandaly24

src/cli/commands/logs/__tests__/interceptor.test.ts

@@ -93,7 +93,7 @@ describe('handleLogsInterceptor', () => {
     const r = await handleLogsInterceptor({ name: 'auth' });
     expect(r.success).toBe(false);
     if (!r.success) {
-      expect(r.error.message).toMatch(/interceptorFunctionName/);
+      expect(r.error.message).toMatch(/has no Lambda function/);
       expect(r.error.message).toMatch(/agentcore deploy/);
     }
   });

src/cli/commands/shared/__tests__/interceptor-mode-check.test.ts

@@ -68,7 +68,7 @@ describe('lookupInterceptor', () => {
 
   it('throws ResourceNotFoundError when name is missing', async () => {
     mockReadDeployedState.mockResolvedValue(deployedState({}));
-    await expect(lookupInterceptor('nope')).rejects.toThrow(/not found in deployed-state/);
+    await expect(lookupInterceptor('nope')).rejects.toThrow(/is not deployed/);
   });
 });
 

src/cli/operations/deploy/__tests__/preflight.test.ts

@@ -54,6 +54,9 @@ vi.mock('../../../cdk/local-cdk-project.js', () => ({
 
 vi.mock('../../../aws/account.js', () => ({
   validateAwsCredentials: mockValidateAwsCredentials,
+  // Stub for validateGatewayTargetLambdas — never reached in these tests because
+  // none of the fixtures have lambda-function-arn gateway targets.
+  getCredentialProvider: () => () => Promise.resolve({ accessKeyId: 'x', secretAccessKey: 'x' }),
 }));
 
 describe('validateProject', () => {

src/schema/schemas/primitives/__tests__/interceptor.test.ts

@@ -6,7 +6,7 @@ import { InterceptorSchema } from '../interceptor';
 import { describe, expect, it } from 'vitest';
 
 describe('InterceptorSchema', () => {
-  it('accepts a managed entry with required defaults applied', () => {
+  it('accepts a managed entry with optional fields omitted (defaults applied at consumption time)', () => {
     const r = InterceptorSchema.safeParse({
       name: 'auth-check',
       gatewayName: 'my-gw',
@@ -15,10 +15,14 @@ describe('InterceptorSchema', () => {
     });
     expect(r.success).toBe(true);
     if (r.success) {
-      // Defaults apply
-      expect(r.data.passRequestHeaders).toBe(true);
-      expect(r.data.config.managed?.runtime).toBe('python3.12');
-      expect(r.data.config.managed?.timeoutSeconds).toBe(30);
+      // Schema parse keeps user-edited JSON sparse — defaults are NOT injected here.
+      // Consumers (CDK constructs, primitive add flows) apply defaults via
+      // `?? INTERCEPTOR_DEFAULTS.X` at use time. See INTERCEPTOR_DEFAULTS in
+      // schema/schemas/primitives/interceptor.ts.
+      expect(r.data.passRequestHeaders).toBeUndefined();
+      expect(r.data.config.managed?.runtime).toBeUndefined();
+      expect(r.data.config.managed?.timeoutSeconds).toBeUndefined();
+      expect(r.data.config.managed?.entrypoint).toBeUndefined();
     }
   });