[feat] Add Gateways (ongoing and far from properly tested) - #6049

Draft

junaway wants to merge 241 commits into

mainfrom

feat/add-gateways

Commits on Aug 12, 2026

chore(hosting): point the dev tunnel at the ingress, and match tunnels by upstream

jp-agenta
and
claude
committed
ad71d9d
docs(dev-ingress): split the design into research, specs and tasks

jp-agenta
and
claude
committed
a737af1
docs(agent): carry the gateways design set onto the base branch

jp-agenta
and
claude
committed
a212a68
docs(agent): refresh the design set on the base branch with the wave one workstreams

jp-agenta
and
claude
committed
2bacc2b
chore(hosting): add a second dev tunnel for the ingress, keep the store's

jp-agenta
and
claude
committed
0dd221c
docs(agent): settle the four seed-blocking rulings and the outbound guard

jp-agenta
and
claude
committed
aceb35c
chore(hosting): name the dev tunnels for what they publish

jp-agenta
and
claude
committed
96b6b89

Commits on Aug 13, 2026

feat(gateways): seed the domain with declarations

jp-agenta
and
claude
committed
6f89b67
feat(gateways): complete the exception mapping in the seed

jp-agenta
and
claude
committed
3e765ef
docs(agent): record R11, the exception-mapping gap found by writing the seed

jp-agenta
and
claude
committed
b28c962
docs(dev-ingress): clarify what the tunnel agent API variable names
jp-agenta
committed
01da465
chore(hosting): name dev tunnels for what they publish

jp-agenta
and
claude
committed
58531a5
chore(hosting): follow the vendor-prefix env convention for the tunnel domain

jp-agenta
and
claude
committed
da3a230
chore(hosting): give ngrok its own section in the dev env examples

jp-agenta
and
claude
committed
3ffbcb8
feat(gateways): add litellm as a direct API dependency, drop the entitlement gate

jp-agenta
and
claude
committed
5b58c14
fix(runner): prefer the https listing when matching the store's tunnel

jp-agenta
and
claude
committed
76786e6
core/access: add gateway endpoint permissions

jp-agenta
and
claude
committed
3014da4
core/gateways: implement GatewayPolicyService

jp-agenta
and
claude
committed
a834f13
test(gateways): unit tests for GatewayPolicyService

jp-agenta
and
claude
committed
ba1ec49
docs(wp3): check off tasks-wp3.md and hand off the routers.py diff

jp-agenta
and
claude
committed
846ca18
gateways(policy): implement CredentialResolver

jp-agenta
and
claude
committed
799a376
gateways(policy): add CredentialResolver unit tests

jp-agenta
and
claude
committed
246f82c
gateways(policy): check off tasks-wp2.md

jp-agenta
and
claude
committed
effd78c
gateways(db): add LlmEndpointDBA, McpEndpointDBA and McpGrantDBA mixins

jp-agenta
and
claude
committed
1e76dfe
gateways(db): add LlmEndpointDBE, McpEndpointDBE and McpGrantDBE

jp-agenta
and
claude
committed
25e7acd
docs(agent): correct the run-token citation in related-work

jp-agenta
and
claude
committed
688fcba
wp5: fake LLM adapter (in-process)

jp-agenta
and
claude
committed
46f6466
wp5: fake MCP adapter (in-process)

jp-agenta
and
claude
committed
9064436
gateways(db): add DBE<->DTO mappings for both planes, with unit tests

jp-agenta
and
claude
committed
75fc779
wp5: adapter interface contract tests

jp-agenta
and
claude
committed
8380751
gateways(db): implement LlmEndpointsDAO

jp-agenta
and
claude
committed
48065f2
gateways(db): implement McpEndpointsDAO and McpGrantsDAO

jp-agenta
and
claude
committed
15e31aa
wp5: deployable fake LLM server

jp-agenta
and
claude
committed
ab9ecab
wp5: deployable fake MCP server

jp-agenta
and
claude
committed
406c0aa
gateways(db): migration for llm_gateway_endpoints, mcp_gateway_endpoints and mcp_gateway_grants

jp-agenta
and
claude
committed
6203705
wp5: wire fakes into the local compose stack

jp-agenta
and
claude
committed
090e7e3
wp5: acceptance verification script + routers.py diff recorded (not applied)

jp-agenta
and
claude
committed
9625b5c
fix(runner): treat an unparsable store endpoint as a hard failure

jp-agenta
and
claude
committed
5e6fbfd
gateways(db): write integration tests for the three DAOs (not run)

jp-agenta
and
claude
committed
d6712d7
gateways(db): check off WP1's tasks-wp1.md checklist

jp-agenta
and
claude
committed
d7c27f6
wp5: stop naming the tunnel service, which dev-ingress renames

jp-agenta
and
claude
committed
a082bd6
docs(agent): tunnels belong to dev-ingress; the gateways add none

jp-agenta
and
claude
committed
3f08727
Merge branch 'chore/dev-ingress-tunnel' into feat/gateways
jp-agenta
committed
28c22ce
Merge branch 'feat/gateways-wp1' into feat/gateways
jp-agenta
committed
a542ae2
Merge branch 'feat/gateways-wp2' into feat/gateways
jp-agenta
committed
42e5264
Merge branch 'feat/gateways-wp3' into feat/gateways
jp-agenta
committed
8e0d89b
Merge branch 'feat/gateways-wp5' into feat/gateways
jp-agenta
committed
1dbf524
gateways: wire storage and the policy core into the composition root

jp-agenta
and
claude
committed
4ab973c
wp6: parse_llm_call_context

jp-agenta
and
claude
committed
b4b91ac
gateways(mcp): McpUpstreamRegistry

jp-agenta
and
claude
committed
1237b43
wp6: PassthroughLlmAdapter

jp-agenta
and
claude
committed
94eab6b
gateways(mcp): McpGatewayService CRUD delegation

jp-agenta
and
claude
committed
bd9c788
wp6: passthrough adapter joins the south-port contract suite

jp-agenta
and
claude
committed
6760fc5
gateways(llm): CRUD wire models

jp-agenta
and
claude
committed
559b100
gateways(mcp): CRUD + grant wire models

jp-agenta
and
claude
committed
1386a2e
gateways(mcp): list_endpoints three-namespace merge

jp-agenta
and
claude
committed
8cc9c8e
gateways(mcp): declare grants surface for WP17/WP18

jp-agenta
and
claude
committed
6721317
wp6: LlmGatewayProxy

jp-agenta
and
claude
committed
0b507d5
gateways(llm): LlmGatewayRouter CRUD

jp-agenta
and
claude
committed
313cf53
gateways(llm): LlmGatewayRouter tests

jp-agenta
and
claude
committed
a264bdd
gateways(mcp): McpGatewayRouter CRUD + grant reads

jp-agenta
and
claude
committed
5ac56d6
gateways(mcp): relay six-step orchestration

jp-agenta
and
claude
committed
96b68ee
gateways(mcp): McpGatewayRouter tests

jp-agenta
and
claude
committed
2f0df3a
wp6: mount diff documented in tasks-wp6.md + acceptance tests (not run)

jp-agenta
and
claude
committed
e8b0c59
gateways(mcp): HttpMcpAdapter south-port implementation

jp-agenta
and
claude
committed
6167ee2
gateways(mcp): check off WP9 tasks, record M2 entrypoint diff

jp-agenta
and
claude
committed
de42411
gateways(mcp): HttpMcpAdapter unit tests

jp-agenta
and
claude
committed
b740d6c
gateways(mcp): parse_mcp_call_context

jp-agenta
and
claude
committed
ddeb6fc
gateways(mcp): McpGatewayProxy routes

jp-agenta
and
claude
committed
508b023
gateways(mcp): McpGatewayProxy routing tests

jp-agenta
and
claude
committed
2da42b5
docs(gateways): check off WP8 tasks, hand off routers.py diff fragments

jp-agenta
and
claude
committed
8d41186
gateways(mcp): SSRF gate on custom endpoint registration

jp-agenta
and
claude
committed
560f3d0
wp7: catalog.py — generated standard endpoints

jp-agenta
and
claude
committed
cd7403c
wp7: registry.py — LlmUpstreamRegistry + select_upstream

jp-agenta
and
claude
committed
06775f6
wp7: TranslatedLlmAdapter

jp-agenta
and
claude
committed
aa96453
wp7: translated adapter joins the south-port contract suite

jp-agenta
and
claude
committed
fe400ae
wp7: LlmGatewayService management surface, list_models, relay_chat_completion

jp-agenta
and
claude
committed
3b89c9b
wp7: wire LlmGatewayService into the entrypoint (diff only)

jp-agenta
and
claude
committed
cb181ee
docs(agent): record R12 and R13, and fix the mount placeholder names

jp-agenta
and
claude
committed
3e2d6aa
wp7: acceptance verification

jp-agenta
and
claude
committed
a6761c7
gateways(mcp): replace handle_gateway_exceptions with the proxy's own protocol-error mapping

jp-agenta
and
claude
committed
4049768
gateways(mcp): assert status and stable cause for every mapped exception

jp-agenta
and
claude
committed
1fd54bd
docs(gateways): record the handle_gateway_exceptions correction in WP8 tasks

jp-agenta
and
claude
committed
177dbf9
Merge branch 'feat/gateways-wp6' into feat/gateways
jp-agenta
committed
0f9f524
Merge branch 'feat/gateways-wp7' into feat/gateways
jp-agenta
committed
caf65a5
Merge branch 'feat/gateways-wp8' into feat/gateways
jp-agenta
committed
bf475f1
Merge branch 'feat/gateways-wp9' into feat/gateways
jp-agenta
committed
6ab0518
Merge branch 'feat/gateways-wp10' into feat/gateways
jp-agenta
committed
f951223
gateways: wire both planes into the composition root (M2)

jp-agenta
and
claude
committed
d757214
gateways: keep the host allowlist an escape hatch, not configuration

jp-agenta
and
claude
committed
6a704d1
gateways: rename the fake upstreams to mocks, and fold their check into pytest

jp-agenta
and
claude
committed
c66f2ef
gateways: make the integration layer actually run

jp-agenta
and
claude
committed
b84f55d
tests: integration Postgres falls back to published loopback

jp-agenta
and
claude
committed
7e61f12
gateways: say secret, not credential

jp-agenta
and
claude
committed
112e116
gateways: fix the review's findings

jp-agenta
and
claude
committed
0bc5437
gateways: split builtin from standard; agenta is a builtin provider

jp-agenta
and
claude
committed
cd3dfd0
gateways: bring entities.md up to what was built

jp-agenta
and
claude
committed
cfc3570

Commits on Aug 14, 2026

Commits on Aug 24, 2026

[chore] Add initial script
jp-agenta
committed
c06fb1b
[chore] Add compose test runner
jp-agenta
committed
55cf087
[chore] Make compose environment setup repeatable
jp-agenta
committed
61f1c93
[fix] Support empty test runner arguments
jp-agenta
committed
ebdd7a6
[fix] Use local Postgres for compose tests
jp-agenta
committed
b683025
[fix] Package gateway test layers
jp-agenta
committed
3bee506
[docs] Define gateway mock matrix work packages
jp-agenta
committed
e9bee63
[feat] Add development gateway mock catalogue
jp-agenta
committed
c59f913
[test] Add gateway mock acceptance matrix
jp-agenta
committed
a31f82f
fix: simplify gateway development mocks
jp-agenta
committed
2e16537
fix: expose bundled store for host tests
jp-agenta
committed
446e8b6
Merge remote-tracking branch 'origin/main' into feat/add-gateways
jp-agenta
committed
7752103
fix: order gateway imports
jp-agenta
committed
162730b
feat: complete gateway mock and harness coverage
jp-agenta
committed
46c59cf
docs: schedule gateway follow-on work
jp-agenta
committed
43f7b2e
docs: require gateway work package test coverage
jp-agenta
committed
31255e5
feat: add MCP OAuth foundation coverage
jp-agenta
committed
a7137d7
feat: validate cloud gateway endpoint urls
jp-agenta
committed
1fb56bb
feat: add MCP OAuth consent flow coverage
jp-agenta
committed
48d85f1
fix: add OAuth grant secret kind to gateway migration
jp-agenta
committed
a8d3ac3
fix(runner): support local import and relay watches on macOS
jp-agenta
committed
c207ffe
docs(gateways): close OAuth and base URL review findings
jp-agenta
committed
74e5078
docs(gateways): reconcile design with implementation
jp-agenta
committed
2716524

Commits on Aug 25, 2026

chore(gateways): simplify implementation comments
jp-agenta
committed
19828af

Commits on Aug 26, 2026

fix(gateways): close review defects and specify MCP harness coverage
jp-agenta
committed
5e4e0c4
test(gateways): cover mock mcp harness routes
jp-agenta
committed
4fa228c
feat(runner): deliver gateway MCPs to Pi
jp-agenta
committed
fa0d847
docs(gateways): record mock MCP implementation status
jp-agenta
committed
da007cc
docs(gateways): record implementation gaps and MCP follow-ups
jp-agenta
committed
f5c5487
docs(gateways): distinguish Composio credential modes
jp-agenta
committed
ba577a0
docs(gateways): reuse existing Agenta tool capability
jp-agenta
committed
2702d34
fix(gateways): support standard MCP JSON-RPC clients
jp-agenta
committed
397dc87
feat(gateways): relay builtin Composio MCP sessions
jp-agenta
committed
e7d1d18
feat(gateways): expose scoped Agenta tools over MCP
jp-agenta
committed
eacf7fe
test(gateways): cover scoped Agenta MCP credentials
jp-agenta
committed
e970fc6
feat(gateways): add project-key Composio MCP
jp-agenta
committed
6da2cc8

Commits on Aug 27, 2026

feat: complete gateway provider integration
jp-agenta
committed
8620618
merge: integrate main into gateway implementation
jp-agenta
committed
6fed77e
fix: normalize runner error details
jp-agenta
committed
39c0a55

Commits on Aug 29, 2026

fix: stabilize gateway acceptance environments
jp-agenta
committed
37deb1f
Merge remote-tracking branch 'origin/main' into feat/add-gateways
jp-agenta
committed
a238b9d
fix: build runner extensions before tests
jp-agenta
committed
5f45ce5