Remove container requirement and gh CLI dependency from MCP gateway

- Remove container field requirement from MCPGatewayConfig schema
- Remove container field check in generateMCPGatewaySteps
- Remove gh extension check from gateway installation logic
- Replace gh CLI commands with curl for downloading awmg binary
- Update workflows (dev.md, smoke-copilot.md) to not specify container
- Update all tests to not expect/require container field
- Update documentation to remove container references
- Gateway now works as pure standalone CLI without Docker or gh CLI

This addresses the issue that the container ghcr.io/githubnext/mcp-gateway
does not exist, and ensures awmg is a simple Go CLI without gh extension
dependencies as requested.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Author: Copilot

.github/workflows/dev.lock.yml

@@ -13,7 +13,6 @@ permissions:
 
 sandbox:
   mcp:
-    container: ghcr.io/githubnext/mcp-gateway
     port: 8080
 
 tools:

.github/workflows/dev.md

@@ -22,7 +22,6 @@ network:
 sandbox:
   agent: awf  # Firewall enabled
   mcp:
-    container: ghcr.io/githubnext/mcp-gateway
     port: 8080
 tools:
   cache-memory: true

.github/workflows/smoke-copilot.lock.yml

@@ -127,7 +127,7 @@ The awmg binary is designed to work seamlessly with GitHub Agentic Workflows. Wh
 ---
 sandbox:
   mcp:
-    container: ghcr.io/githubnext/mcp-gateway
+    # MCP gateway runs as standalone awmg CLI
     port: 8080
 ---
 ```

.github/workflows/smoke-copilot.md

@@ -64,7 +64,6 @@ features:
 
 sandbox:
   mcp:
-    container: "ghcr.io/your-org/mcp-gateway"
     port: 8080
     api-key: "${{ secrets.MCP_GATEWAY_API_KEY }}"
 ```
@@ -80,7 +79,6 @@ features:
 sandbox:
   agent: awf
   mcp:
-    container: "ghcr.io/your-org/mcp-gateway"
     port: 8080
 ```
 
@@ -252,7 +250,7 @@ features:
 
 sandbox:
   mcp:
-    container: "ghcr.io/githubnext/mcp-gateway"
+    # MCP gateway runs as standalone awmg CLI
     version: "v1.0.0"
     port: 9000
     api-key: "${{ secrets.MCP_GATEWAY_API_KEY }}"

docs/awmg.md

@@ -45,7 +45,6 @@ permissions:
 engine: copilot
 sandbox:
   mcp:
-    container: ghcr.io/githubnext/mcp-gateway
     port: 8089
 tools:
   playwright:

docs/src/content/docs/reference/sandbox.md

@@ -2023,7 +2023,6 @@
                   "description": "API key for authenticating with the MCP gateway (supports ${{ secrets.* }} syntax)"
                 }
               },
-              "required": ["container"],
               "additionalProperties": false
             }
           },

pkg/cli/mcp_gateway_inspect_integration_test.go

@@ -63,11 +63,11 @@ func generateMCPGatewaySteps(workflowData *WorkflowData, mcpServersConfig map[st
 	}
 
 	config := getMCPGatewayConfig(workflowData)
-	if config == nil || config.Container == "" {
+	if config == nil {
 		return nil
 	}
 
-	gatewayLog.Printf("Generating MCP gateway steps for container: %s", config.Container)
+	gatewayLog.Print("Generating MCP gateway steps")
 
 	var steps []GitHubActionStep
 
@@ -121,18 +121,9 @@ func generateMCPGatewayStartStep(config *MCPGatewayConfig, mcpServersConfig map[
 		"            if [ -f \"./awmg\" ]; then",
 		"              echo 'Using local awmg build'",
 		"              AWMG_CMD=\"./awmg\"",
-		"            # Check if gh-aw extension is installed (has awmg)",
-		"            elif gh extension list 2>/dev/null | grep -q 'githubnext/gh-aw' && [ -f \"$HOME/.local/share/gh/extensions/gh-aw/awmg\" ]; then",
-		"              echo 'Using awmg from gh-aw extension'",
-		"              AWMG_CMD=\"$HOME/.local/share/gh/extensions/gh-aw/awmg\"",
 		"            else",
 		"              # Download awmg from releases",
 		"              echo 'Downloading awmg from GitHub releases...'",
-		"              AWMG_VERSION=$(gh release list --repo githubnext/gh-aw --limit 1 | grep -v draft | grep -v prerelease | head -n 1 | awk '{print $1}')",
-		"              if [ -z \"$AWMG_VERSION\" ]; then",
-		"                echo 'No release version found, using latest'",
-		"                AWMG_VERSION='latest'",
-		"              fi",
 		"              ",
 		"              # Detect platform",
 		"              OS=$(uname -s | tr '[:upper:]' '[:lower:]')",
@@ -143,14 +134,10 @@ func generateMCPGatewayStartStep(config *MCPGatewayConfig, mcpServersConfig map[
 		"              AWMG_BINARY=\"awmg-${OS}-${ARCH}\"",
 		"              if [ \"$OS\" = \"windows\" ]; then AWMG_BINARY=\"${AWMG_BINARY}.exe\"; fi",
 		"              ",
-		"              # Download from releases",
-		"              if [ \"$AWMG_VERSION\" = \"latest\" ]; then",
-		"                gh release download --repo githubnext/gh-aw --pattern \"$AWMG_BINARY\" --dir /tmp || true",
-		"              else",
-		"                gh release download \"$AWMG_VERSION\" --repo githubnext/gh-aw --pattern \"$AWMG_BINARY\" --dir /tmp || true",
-		"              fi",
-		"              ",
-		"              if [ -f \"/tmp/$AWMG_BINARY\" ]; then",
+		"              # Download from releases using curl (no gh CLI dependency)",
+		"              RELEASE_URL=\"https://github.com/githubnext/gh-aw/releases/latest/download/$AWMG_BINARY\"",
+		"              echo \"Downloading from $RELEASE_URL\"",
+		"              if curl -L -f -o \"/tmp/$AWMG_BINARY\" \"$RELEASE_URL\"; then",
 		"                chmod +x \"/tmp/$AWMG_BINARY\"",
 		"                AWMG_CMD=\"/tmp/$AWMG_BINARY\"",
 		"                echo 'Downloaded awmg successfully'",

pkg/parser/schemas/main_workflow_schema.json

@@ -25,20 +25,17 @@ func TestParseMCPGatewayTool(t *testing.T) {
 			expected: nil,
 		},
 		{
-			name: "minimal config with container only",
+			name: "minimal config with port only",
 			input: map[string]any{
-				"container": "ghcr.io/githubnext/mcp-gateway",
+				"port": 8080,
 			},
 			expected: &MCPGatewayConfig{
-				Container: "ghcr.io/githubnext/mcp-gateway",
-				Port:      DefaultMCPGatewayPort,
+				Port: 8080,
 			},
 		},
 		{
 			name: "full config",
 			input: map[string]any{
-				"container":      "ghcr.io/githubnext/mcp-gateway",
-				"version":        "v1.0.0",
 				"port":           8888,
 				"api-key":        "${{ secrets.API_KEY }}",
 				"args":           []any{"-v", "--debug"},
@@ -48,8 +45,6 @@ func TestParseMCPGatewayTool(t *testing.T) {
 				},
 			},
 			expected: &MCPGatewayConfig{
-				Container:      "ghcr.io/githubnext/mcp-gateway",
-				Version:        "v1.0.0",
 				Port:           8888,
 				APIKey:         "${{ secrets.API_KEY }}",
 				Args:           []string{"-v", "--debug"},
@@ -58,26 +53,19 @@ func TestParseMCPGatewayTool(t *testing.T) {
 			},
 		},
 		{
-			name: "numeric version",
-			input: map[string]any{
-				"container": "ghcr.io/githubnext/mcp-gateway",
-				"version":   1.0,
-			},
+			name: "empty config",
+			input: map[string]any{},
 			expected: &MCPGatewayConfig{
-				Container: "ghcr.io/githubnext/mcp-gateway",
-				Version:   "1",
-				Port:      DefaultMCPGatewayPort,
+				Port: DefaultMCPGatewayPort,
 			},
 		},
 		{
 			name: "float port",
 			input: map[string]any{
-				"container": "ghcr.io/githubnext/mcp-gateway",
-				"port":      8888.0,
+				"port": 8888.0,
 			},
 			expected: &MCPGatewayConfig{
-				Container: "ghcr.io/githubnext/mcp-gateway",
-				Port:      8888,
+				Port: 8888,
 			},
 		},
 	}
@@ -133,19 +121,17 @@ func TestIsMCPGatewayEnabled(t *testing.T) {
 			data: &WorkflowData{
 				SandboxConfig: &SandboxConfig{
 					MCP: &MCPGatewayConfig{
-						Container: "test",
+						Port: 8080,
 					},
 				},
 			},
 			expected: true,
 		},
 		{
-			name: "sandbox.mcp configured",
+			name: "sandbox.mcp with empty config",
 			data: &WorkflowData{
 				SandboxConfig: &SandboxConfig{
-					MCP: &MCPGatewayConfig{
-						Container: "test",
-					},
+					MCP: &MCPGatewayConfig{},
 				},
 			},
 			expected: true,
@@ -185,8 +171,7 @@ func TestGetMCPGatewayConfig(t *testing.T) {
 			data: &WorkflowData{
 				SandboxConfig: &SandboxConfig{
 					MCP: &MCPGatewayConfig{
-						Container: "test-image",
-						Port:      9090,
+						Port: 9090,
 					},
 				},
 			},
@@ -199,7 +184,6 @@ func TestGetMCPGatewayConfig(t *testing.T) {
 			result := getMCPGatewayConfig(tt.data)
 			if tt.hasConfig {
 				require.NotNil(t, result)
-				assert.Equal(t, "test-image", result.Container)
 				assert.Equal(t, 9090, result.Port)
 			} else {
 				assert.Nil(t, result)
@@ -226,8 +210,7 @@ func TestGenerateMCPGatewaySteps(t *testing.T) {
 			data: &WorkflowData{
 				SandboxConfig: &SandboxConfig{
 					MCP: &MCPGatewayConfig{
-						Container: "test-gateway",
-						Port:      8080,
+						Port: 8080,
 					},
 				},
 				Features: map[string]bool{
@@ -251,8 +234,7 @@ func TestGenerateMCPGatewaySteps(t *testing.T) {
 
 func TestGenerateMCPGatewayStartStep(t *testing.T) {
 	config := &MCPGatewayConfig{
-		Container: "ghcr.io/githubnext/mcp-gateway",
-		Port:      8080,
+		Port: 8080,
 	}
 	mcpServers := map[string]any{
 		"github": map[string]any{},