') + ')', 'gi'); if (regex.test(text)) { found = true; var frag = document.createDocumentFragment(); var parts = text.split(regex); parts.forEach(function(part, i) { if (i % 2 === 0) { frag.appendChild(document.createTextNode(part)); } else { var span = document.createElement('span'); span.className = 'userscript-highlight'; span.textContent = part; frag.appendChild(span); } }); node.parentNode.replaceChild(frag, node); } }); } else if (node.nodeType === 1 && node.childNodes) { // element var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT']; if (!skipTags.includes(node.tagName)) { Array.from(node.childNodes).forEach(highlight); } } } highlight(document.body); // Re-highlight on dynamic content var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1 || node.nodeType === 3) highlight(node); }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Strip utm_, fbclid, gclid, etc. from all links on page (function() { var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid', 'ref', 'ref_src', 'source', 'medium', 'campaign']; function cleanUrl(url) { try { var u = new URL(url, window.location.origin); var changed = false; trackingParams.forEach(function(p) { if (u.searchParams.has(p)) { u.searchParams.delete(p); changed = true; } }); return changed ? u.toString() : url; } catch (e) { return url; } } function cleanLinks() { document.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } cleanLinks(); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1) { if (node.tagName === 'A') cleanLinks(); node.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Auto-enable theater mode on YouTube (function() { function tryTheater() { var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]'); if (btn && !btn.classList.contains('activated')) { btn.click(); } } // Try immediately tryTheater(); // Try after navigation (SPA) var lastUrl = location.href; setInterval(function() { if (location.href !== lastUrl) { lastUrl = location.href; setTimeout(tryTheater, 500); } }, 1000); // Also try on player load var observer = new MutationObserver(tryTheater); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Remove or un-stick sticky/fixed headers that block content (function() { function unstick() { document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) { if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') { el.style.position = 'static'; el.style.top = 'auto'; el.style.zIndex = 'auto'; } }); } unstick(); var observer = new MutationObserver(unstick); observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] }); })(); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); })(); Make omitted Gateway protocolType mean unrestricted · Issue #2084 · aws/agentcore-cli · GitHub
Skip to content

Make omitted Gateway protocolType mean unrestricted #2084

Open
Open
Make omitted Gateway protocolType mean unrestricted#2084
Labels
enhancementNew feature or request

Description

@aidandaly24
aidandaly24
opened on Aug 24, 2026

Description

Make an omitted Gateway protocolType consistently mean an unrestricted
Gateway across the old CLI, project schema, and L3 construct.

The current project contract has an unintuitive compatibility mapping:

agentcore.json valueCurrent behavior
omittedMCP-only
"MCP"MCP-only
"None"unrestricted; L3 omits the service field

The AgentCore service itself uses omission for an unrestricted Gateway and
explicit "MCP" for an MCP-only Gateway. The CLI contract should align:

agentcore.json valueDesired behavior
omittedunrestricted
"MCP"MCP-only
"None"accepted as a legacy unrestricted value

The command experience should be:

# Unrestricted; protocolType omitted
agentcore add gateway --name tools
# MCP-only
agentcore add gateway --name tools --protocol-type MCP

This needs a coordinated compatibility migration. Existing schema-v1 projects
with omitted protocolType historically mean MCP, and imported MCP Gateways are
currently persisted with the field omitted. Those projects must not silently
become unrestricted when the L3 default changes.

This was intentionally deferred from #2028 so that PR can
preserve the currently published schema and L3 behavior.

Acceptance Criteria

  • Omitting --protocol-type in the old CLI persists no protocolType field and deploys an unrestricted Gateway.
  • --protocol-type MCP persists "protocolType": "MCP" and deploys an MCP-only Gateway.
  • The old CLI no longer needs customers to pass --protocol-type None; existing "None" project values remain valid.
  • Importing an MCP Gateway persists explicit "protocolType": "MCP".
  • Existing projects where omission historically meant MCP are migrated or normalized to explicit "MCP" before consuming the new L3 behavior.
  • The L3 treats omitted protocolType as unrestricted and explicit "MCP" as MCP-only.
  • Semantic-search protocol configuration remains usable on unrestricted Gateways when supported by the service.
  • The old CLI, project-based refactor, schema copies, generated CDK, and L3 tests use the same contract.
  • Release sequencing publishes the compatible L3 version before either CLI updates its exact L3 pin.
  • Regression tests prove existing MCP projects do not silently widen to unrestricted access.

Additional Context

This is a cross-repository compatibility change involving:

  • old CLI authoring, import, migration, generated CDK, and dependency pinning;
  • project-based refactor command and schema behavior;
  • aws/agentcore-l3-cdk-constructs schema and Gateway synthesis.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions