@zereight/mcp-gitlab 2.0.30 → 2.0.32

package/build/index.js

@@ -36,21 +36,21 @@ import { CookieJar, parse as parseCookie } from "tough-cookie";
 import { fileURLToPath, URL } from "node:url";
 import { z } from "zod";
 import { zodToJsonSchema } from "zod-to-json-schema";
-import { initializeOAuth } from "./oauth.js";
+import { initializeOAuthClient } from "./oauth.js";
 import { GitLabClientPool } from "./gitlab-client-pool.js";
 // Add type imports for proxy agents
 import { Agent } from "node:http";
 import { Agent as HttpsAgent } from "node:https";
 import { BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateLabelSchema, // Added
-CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateRepositorySchema, CreateWikiPageSchema, DeleteDraftNoteSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, EditProjectMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetNamespaceSchema, 
+CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateRepositorySchema, CreateWikiPageSchema, DeleteDraftNoteSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, EditProjectMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetDeploymentSchema, GetEnvironmentSchema, GetNamespaceSchema, 
 // pipeline job schemas
 GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectMilestoneSchema, GetProjectSchema, GetRepositoryTreeSchema, GetUsersSchema, GetWikiPageSchema, GitLabCommitSchema, GitLabCompareResultSchema, GitLabContentSchema, GitLabCreateUpdateFileResponseSchema, GitLabDiffSchema, 
 // Discussion Schemas
 GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
 // Draft Notes Schemas
-GitLabDraftNoteSchema, GitLabForkSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabTreeSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
-ListMergeRequestDiscussionsSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListPipelineTriggerJobsSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, MarkdownUploadSchema, DownloadAttachmentSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, } from "./schemas.js";
+GitLabDraftNoteSchema, GitLabForkSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabTreeSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
+ListMergeRequestDiscussionsSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, MarkdownUploadSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, } from "./schemas.js";
 import { randomUUID } from "node:crypto";
 import { pino } from "pino";
 const logger = pino({
@@ -243,6 +243,28 @@ function validateConfiguration() {
 }
 const GITLAB_PERSONAL_ACCESS_TOKEN = getConfig("token", "GITLAB_PERSONAL_ACCESS_TOKEN");
 let OAUTH_ACCESS_TOKEN = null;
+let oauthClient = null;
+/**
+ * Ensure the OAuth token is valid before making an API call.
+ * Refreshes the token lazily (only when a tool is actually called).
+ * This avoids background timers that cause issues with multiple instances.
+ */
+async function ensureValidOAuthToken() {
+    if (!oauthClient)
+        return;
+    if (oauthClient.hasValidToken())
+        return;
+    try {
+        logger.info("OAuth token expired or missing, refreshing...");
+        const freshToken = await oauthClient.getAccessToken();
+        OAUTH_ACCESS_TOKEN = freshToken;
+        logger.info("OAuth token refreshed successfully");
+    }
+    catch (error) {
+        logger.error("Failed to refresh OAuth token:", error);
+        throw error;
+    }
+}
 const GITLAB_AUTH_COOKIE_PATH = getConfig("cookie-path", "GITLAB_AUTH_COOKIE_PATH");
 const USE_OAUTH = getConfig("use-oauth", "GITLAB_USE_OAUTH") === "true";
 const IS_OLD = getConfig("is-old", "GITLAB_IS_OLD") === "true";
@@ -457,7 +479,7 @@ const BASE_HEADERS = {
 /**
  * Build authentication headers dynamically based on context
  * In REMOTE_AUTHORIZATION mode, reads from AsyncLocalStorage session context
- * Otherwise, uses environment token
+ * Otherwise, uses environment token (OAuth token is refreshed lazily before each tool call)
  */
 function buildAuthHeaders() {
     if (REMOTE_AUTHORIZATION) {
@@ -572,7 +594,7 @@ const allTools = [
     },
     {
         name: "get_merge_request_approval_state",
-        description: "Get the approval state of a merge request including approval rules and who has approved",
+        description: "Get merge request approval details including approvers (uses approval_state when available, falls back to approvals endpoint)",
         inputSchema: toJSONSchema(GetMergeRequestApprovalStateSchema),
     },
     {
@@ -627,7 +649,7 @@ const allTools = [
     },
     {
         name: "get_merge_request",
-        description: "Get details of a merge request (Either mergeRequestIid or branchName must be provided)",
+        description: "Get details of a merge request with compact deployment, commit addition, and approval summaries (Either mergeRequestIid or branchName must be provided)",
         inputSchema: toJSONSchema(GetMergeRequestSchema),
     },
     {
@@ -915,6 +937,26 @@ const allTools = [
         description: "Get details of a specific pipeline in a GitLab project",
         inputSchema: toJSONSchema(GetPipelineSchema),
     },
+    {
+        name: "list_deployments",
+        description: "List deployments in a GitLab project with filtering options",
+        inputSchema: toJSONSchema(ListDeploymentsSchema),
+    },
+    {
+        name: "get_deployment",
+        description: "Get details of a specific deployment in a GitLab project",
+        inputSchema: toJSONSchema(GetDeploymentSchema),
+    },
+    {
+        name: "list_environments",
+        description: "List environments in a GitLab project",
+        inputSchema: toJSONSchema(ListEnvironmentsSchema),
+    },
+    {
+        name: "get_environment",
+        description: "Get details of a specific environment in a GitLab project",
+        inputSchema: toJSONSchema(GetEnvironmentSchema),
+    },
     {
         name: "list_pipeline_jobs",
         description: "List all jobs in a specific pipeline",
@@ -965,6 +1007,21 @@ const allTools = [
         description: "Cancel a running pipeline job",
         inputSchema: toJSONSchema(CancelPipelineJobSchema),
     },
+    {
+        name: "list_job_artifacts",
+        description: "List artifact files in a job's artifacts archive. Returns file names, paths, types, and sizes.",
+        inputSchema: toJSONSchema(ListJobArtifactsSchema),
+    },
+    {
+        name: "download_job_artifacts",
+        description: "Download the entire artifact archive (zip) for a job to a local path. Returns the saved file path.",
+        inputSchema: toJSONSchema(DownloadJobArtifactsSchema),
+    },
+    {
+        name: "get_job_artifact_file",
+        description: "Get the content of a single file from a job's artifacts by its path within the archive",
+        inputSchema: toJSONSchema(GetJobArtifactFileSchema),
+    },
     {
         name: "list_merge_requests",
         description: "List merge requests. Without project_id, lists MRs assigned to the authenticated user by default (use scope='all' for all accessible MRs). With project_id, lists MRs for that specific project.",
@@ -1122,10 +1179,17 @@ const readOnlyTools = new Set([
     "list_project_members",
     "get_pipeline",
     "list_pipelines",
+    "list_deployments",
+    "get_deployment",
+    "list_environments",
+    "get_environment",
     "list_pipeline_jobs",
     "list_pipeline_trigger_jobs",
     "get_pipeline_job",
     "get_pipeline_job_output",
+    "list_job_artifacts",
+    "download_job_artifacts",
+    "get_job_artifact_file",
     "list_labels",
     "get_label",
     "list_group_projects",
@@ -1176,6 +1240,10 @@ const milestoneToolNames = new Set([
 const pipelineToolNames = new Set([
     "list_pipelines",
     "get_pipeline",
+    "list_deployments",
+    "get_deployment",
+    "list_environments",
+    "get_environment",
     "list_pipeline_jobs",
     "list_pipeline_trigger_jobs",
     "get_pipeline_job",
@@ -1186,6 +1254,9 @@ const pipelineToolNames = new Set([
     "play_pipeline_job",
     "retry_pipeline_job",
     "cancel_pipeline_job",
+    "list_job_artifacts",
+    "download_job_artifacts",
+    "get_job_artifact_file",
 ]);
 const TOOLSET_DEFINITIONS = [
     {
@@ -1295,10 +1366,14 @@ const TOOLSET_DEFINITIONS = [
     },
     {
         id: "pipelines",
-        isDefault: false,
+        isDefault: true,
         tools: new Set([
             "list_pipelines",
             "get_pipeline",
+            "list_deployments",
+            "get_deployment",
+            "list_environments",
+            "get_environment",
             "list_pipeline_jobs",
             "list_pipeline_trigger_jobs",
             "get_pipeline_job",
@@ -1309,11 +1384,14 @@ const TOOLSET_DEFINITIONS = [
             "play_pipeline_job",
             "retry_pipeline_job",
             "cancel_pipeline_job",
+            "list_job_artifacts",
+            "download_job_artifacts",
+            "get_job_artifact_file",
         ]),
     },
     {
         id: "milestones",
-        isDefault: false,
+        isDefault: true,
         tools: new Set([
             "list_milestones",
             "get_milestone",
@@ -1328,7 +1406,7 @@ const TOOLSET_DEFINITIONS = [
     },
     {
         id: "wiki",
-        isDefault: false,
+        isDefault: true,
         tools: new Set([
             "list_wiki_pages",
             "get_wiki_page",
@@ -1440,6 +1518,7 @@ if (GITLAB_TOOLSETS_RAW && (USE_PIPELINE || USE_MILESTONE || USE_GITLAB_WIKI)) {
     logger.warn("GITLAB_TOOLSETS is set alongside legacy flags (USE_PIPELINE, USE_MILESTONE, USE_GITLAB_WIKI). " +
         "Legacy flags add tools additively on top of the toolset selection and may produce unexpected results.");
 }
+const MERGE_REQUEST_DEPLOYMENT_SUMMARY_LIMIT = 10;
 /**
  * Smart URL handling for GitLab API
  *
@@ -1615,12 +1694,12 @@ async function getDefaultBranchRef(projectId) {
  * @returns {Promise<GitLabContent>} The file content
  */
 async function getFileContents(projectId, filePath, ref) {
-    projectId = decodeURIComponent(projectId); // Decode project ID
-    const effectiveProjectId = getEffectiveProjectId(projectId);
+    const decodedProjectId = projectId ? decodeURIComponent(projectId) : "";
+    const effectiveProjectId = getEffectiveProjectId(decodedProjectId);
     const encodedPath = encodeURIComponent(filePath);
     // Fall back to default branch if ref is not provided
     if (!ref) {
-        ref = await getDefaultBranchRef(projectId);
+        ref = await getDefaultBranchRef(decodedProjectId);
     }
     const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}/repository/files/${encodedPath}`);
     url.searchParams.append("ref", ref);
@@ -2454,6 +2533,7 @@ async function getMergeRequest(projectId, mergeRequestIid, branchName) {
     let url;
     if (mergeRequestIid) {
         url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/merge_requests/${mergeRequestIid}`);
+        url.searchParams.append("include_diverged_commits_count", "true");
     }
     else if (branchName) {
         url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/merge_requests?source_branch=${encodeURIComponent(branchName)}`);
@@ -2468,10 +2548,219 @@ async function getMergeRequest(projectId, mergeRequestIid, branchName) {
     const data = await response.json();
     // If response is an array (Comes from branchName search), return the first item if exist
     if (Array.isArray(data) && data.length > 0) {
-        return GitLabMergeRequestSchema.parse(data[0]);
+        const mergeRequest = GitLabMergeRequestSchema.parse(data[0]);
+        return getMergeRequest(projectId, mergeRequest.iid, undefined);
     }
     return GitLabMergeRequestSchema.parse(data);
 }
+async function getMergeRequestSourceCommitCount(projectId, mergeRequestIid) {
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/merge_requests/${mergeRequestIid}/commits`);
+    url.searchParams.append("per_page", "100");
+    let totalCount = 0;
+    let page = 1;
+    while (true) {
+        url.searchParams.set("page", String(page));
+        const response = await fetch(url.toString(), {
+            ...getFetchConfig(),
+        });
+        await handleGitLabError(response);
+        const data = await response.json();
+        if (!Array.isArray(data)) {
+            throw new Error("Unexpected merge request commits response format");
+        }
+        totalCount += data.length;
+        const nextPage = response.headers.get("x-next-page");
+        if (!nextPage) {
+            break;
+        }
+        page = Number.parseInt(nextPage, 10);
+        if (Number.isNaN(page) || page <= 0) {
+            break;
+        }
+    }
+    return totalCount;
+}
+async function getProjectMergeMethod(projectId) {
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}`);
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    const mergeMethod = z
+        .object({
+        merge_method: z.string().nullable().optional(),
+    })
+        .parse(data).merge_method;
+    return typeof mergeMethod === "string" ? mergeMethod : null;
+}
+function estimateMergeCommitCount(mergeMethod, sourceCommitCount) {
+    if (sourceCommitCount === 0) {
+        return 0;
+    }
+    if (mergeMethod === "merge") {
+        return 1;
+    }
+    if (mergeMethod === "ff" || mergeMethod === "rebase_merge") {
+        return 0;
+    }
+    return null;
+}
+async function buildMergeRequestCommitAdditionSummary(projectId, mergeRequest) {
+    try {
+        const sourceCommitCount = await getMergeRequestSourceCommitCount(projectId, mergeRequest.iid);
+        const mergeMethod = await getProjectMergeMethod(projectId);
+        const mergeCommitCount = estimateMergeCommitCount(mergeMethod, sourceCommitCount);
+        const summary = mergeCommitCount === null
+            ? null
+            : `${sourceCommitCount} commits and ${mergeCommitCount} merge commit${mergeCommitCount === 1 ? "" : "s"} will be added to ${mergeRequest.target_branch}.`;
+        return {
+            target_branch: mergeRequest.target_branch,
+            source_commits_count: sourceCommitCount,
+            merge_method: mergeMethod,
+            merge_commit_count: mergeCommitCount,
+            summary,
+        };
+    }
+    catch (error) {
+        const unavailableReason = error instanceof Error ? error.message : String(error);
+        return {
+            target_branch: mergeRequest.target_branch,
+            source_commits_count: null,
+            merge_method: null,
+            merge_commit_count: null,
+            summary: null,
+            unavailable_reason: unavailableReason,
+        };
+    }
+}
+async function buildMergeRequestApprovalSummary(projectId, mergeRequestIid) {
+    try {
+        const approvalState = await getMergeRequestApprovalState(projectId, mergeRequestIid);
+        const approvedByUsers = approvalState.approved_by || [];
+        const approvedByUsernames = approvalState.approved_by_usernames || approvedByUsers.map(user => user.username);
+        const inferredApproved = inferMergeRequestApproved(approvalState.rules);
+        return {
+            approved: approvalState.approved ?? inferredApproved,
+            user_has_approved: approvalState.user_has_approved ?? null,
+            user_can_approve: approvalState.user_can_approve ?? null,
+            approved_by: approvedByUsers,
+            approved_by_usernames: approvedByUsernames,
+            rules_count: approvalState.rules?.length ?? null,
+            source_endpoint: approvalState.source_endpoint ?? null,
+        };
+    }
+    catch (error) {
+        const unavailableReason = error instanceof Error ? error.message : String(error);
+        return {
+            approved: null,
+            user_has_approved: null,
+            user_can_approve: null,
+            approved_by: [],
+            approved_by_usernames: [],
+            rules_count: null,
+            source_endpoint: null,
+            unavailable_reason: unavailableReason,
+        };
+    }
+}
+function toMergeRequestDeploymentSummaryRecord(deployment) {
+    return {
+        id: deployment.id,
+        status: deployment.status,
+        ref: deployment.ref,
+        sha: deployment.sha,
+        created_at: deployment.created_at,
+        updated_at: deployment.updated_at,
+        finished_at: deployment.finished_at,
+        web_url: deployment.web_url,
+        environment: deployment.environment
+            ? {
+                id: deployment.environment.id,
+                name: deployment.environment.name,
+                slug: deployment.environment.slug,
+                external_url: deployment.environment.external_url,
+                state: deployment.environment.state,
+                tier: deployment.environment.tier,
+            }
+            : undefined,
+        deployable: deployment.deployable === null
+            ? null
+            : deployment.deployable
+                ? {
+                    id: deployment.deployable.id,
+                    name: deployment.deployable.name,
+                    status: deployment.deployable.status,
+                    stage: deployment.deployable.stage,
+                    web_url: deployment.deployable.web_url,
+                    pipeline: deployment.deployable.pipeline
+                        ? {
+                            id: deployment.deployable.pipeline.id,
+                            status: deployment.deployable.pipeline.status,
+                            ref: deployment.deployable.pipeline.ref,
+                            sha: deployment.deployable.pipeline.sha,
+                            web_url: deployment.deployable.pipeline.web_url,
+                        }
+                        : undefined,
+                }
+                : undefined,
+    };
+}
+function sortDeploymentsByCreatedAtDesc(deployments) {
+    return [...deployments].sort((a, b) => {
+        const aTime = Date.parse(a.created_at);
+        const bTime = Date.parse(b.created_at);
+        if (Number.isNaN(aTime) || Number.isNaN(bTime)) {
+            return b.created_at.localeCompare(a.created_at);
+        }
+        return bTime - aTime;
+    });
+}
+async function buildMergeRequestDeploymentSummary(projectId, mergeRequest) {
+    const lookupSha = mergeRequest.merge_commit_sha ?? mergeRequest.diff_refs?.head_sha ?? null;
+    if (!lookupSha) {
+        return {
+            lookup_sha: null,
+            sort: "created_at_desc",
+            limit: MERGE_REQUEST_DEPLOYMENT_SUMMARY_LIMIT,
+            total_count: 0,
+            returned_count: 0,
+            records: [],
+        };
+    }
+    try {
+        const deployments = await listDeployments(projectId, {
+            sha: lookupSha,
+            order_by: "created_at",
+            sort: "desc",
+            per_page: 100,
+        });
+        const sortedDeployments = sortDeploymentsByCreatedAtDesc(deployments);
+        const records = sortedDeployments
+            .slice(0, MERGE_REQUEST_DEPLOYMENT_SUMMARY_LIMIT)
+            .map(toMergeRequestDeploymentSummaryRecord);
+        return {
+            lookup_sha: lookupSha,
+            sort: "created_at_desc",
+            limit: MERGE_REQUEST_DEPLOYMENT_SUMMARY_LIMIT,
+            total_count: sortedDeployments.length,
+            returned_count: records.length,
+            records,
+        };
+    }
+    catch (error) {
+        const unavailableReason = error instanceof Error ? error.message : String(error);
+        return {
+            lookup_sha: lookupSha,
+            sort: "created_at_desc",
+            limit: MERGE_REQUEST_DEPLOYMENT_SUMMARY_LIMIT,
+            total_count: 0,
+            returned_count: 0,
+            records: [],
+            unavailable_reason: unavailableReason,
+        };
+    }
+}
 /**
  * Get merge request changes/diffs
  * MR 변경사항 조회 함수 (Function to retrieve merge request changes)
@@ -2666,13 +2955,61 @@ async function unapproveMergeRequest(projectId, mergeRequestIid) {
  */
 async function getMergeRequestApprovalState(projectId, mergeRequestIid) {
     projectId = decodeURIComponent(projectId);
-    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/merge_requests/${mergeRequestIid}/approval_state`);
-    const response = await fetch(url.toString(), {
+    const approvalStateUrl = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/merge_requests/${mergeRequestIid}/approval_state`);
+    const approvalStateResponse = await fetch(approvalStateUrl.toString(), {
         ...getFetchConfig(),
         method: "GET",
     });
-    await handleGitLabError(response);
-    return GitLabMergeRequestApprovalStateSchema.parse(await response.json());
+    if (approvalStateResponse.status === 404) {
+        return getMergeRequestApprovalsFallback(projectId, mergeRequestIid);
+    }
+    await handleGitLabError(approvalStateResponse);
+    const parsedApprovalState = GitLabMergeRequestApprovalStateSchema.parse(await approvalStateResponse.json());
+    const approvedByUsers = getUniqueApprovalUsers((parsedApprovalState.rules || []).flatMap(rule => rule.approved_by || []));
+    const approvedByUsernames = approvedByUsers.map(user => user.username);
+    return {
+        ...parsedApprovalState,
+        approved_by: approvedByUsers,
+        approved_by_usernames: approvedByUsernames,
+        source_endpoint: "approval_state",
+    };
+}
+async function getMergeRequestApprovalsFallback(projectId, mergeRequestIid) {
+    const approvalsUrl = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/merge_requests/${mergeRequestIid}/approvals`);
+    const approvalsResponse = await fetch(approvalsUrl.toString(), {
+        ...getFetchConfig(),
+        method: "GET",
+    });
+    await handleGitLabError(approvalsResponse);
+    const parsedApprovals = GitLabMergeRequestApprovalsResponseSchema.parse(await approvalsResponse.json());
+    const approvedByUsers = getUniqueApprovalUsers((parsedApprovals.approved_by || []).map(approvedByEntry => approvedByEntry.user));
+    const approvedByUsernames = approvedByUsers.map(user => user.username);
+    return GitLabMergeRequestApprovalStateSchema.parse({
+        approved: parsedApprovals.approved,
+        user_has_approved: parsedApprovals.user_has_approved,
+        user_can_approve: parsedApprovals.user_can_approve,
+        approved_by: approvedByUsers,
+        approved_by_usernames: approvedByUsernames,
+        source_endpoint: "approvals",
+    });
+}
+function getUniqueApprovalUsers(users) {
+    const uniqueUsers = new Map();
+    for (const user of users) {
+        if (!uniqueUsers.has(user.id)) {
+            uniqueUsers.set(user.id, user);
+        }
+    }
+    return [...uniqueUsers.values()];
+}
+function inferMergeRequestApproved(rules) {
+    if (!rules || rules.length === 0) {
+        return null;
+    }
+    if (rules.some(rule => typeof rule.approved !== "boolean")) {
+        return null;
+    }
+    return rules.every(rule => rule.approved === true);
 }
 /**
  * Create a new note (comment) on an issue or merge request
@@ -3409,6 +3746,90 @@ async function getPipeline(projectId, pipelineId) {
     const data = await response.json();
     return GitLabPipelineSchema.parse(data);
 }
+/**
+ * List deployments in a GitLab project
+ *
+ * @param {string} projectId - The ID or URL-encoded path of the project
+ * @param {ListDeploymentsOptions} options - Options for filtering deployments
+ * @returns {Promise<GitLabDeployment[]>} List of deployments
+ */
+async function listDeployments(projectId, options = {}) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/deployments`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value !== undefined) {
+            url.searchParams.append(key, value.toString());
+        }
+    });
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return z.array(GitLabDeploymentSchema).parse(data);
+}
+/**
+ * Get details of a specific deployment
+ *
+ * @param {string} projectId - The ID or URL-encoded path of the project
+ * @param {number | string} deploymentId - The ID of the deployment
+ * @returns {Promise<GitLabDeployment>} Deployment details
+ */
+async function getDeployment(projectId, deploymentId) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/deployments/${deploymentId}`);
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    if (response.status === 404) {
+        throw new Error(`Deployment not found`);
+    }
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabDeploymentSchema.parse(data);
+}
+/**
+ * List environments in a GitLab project
+ *
+ * @param {string} projectId - The ID or URL-encoded path of the project
+ * @param {ListEnvironmentsOptions} options - Options for filtering environments
+ * @returns {Promise<GitLabEnvironment[]>} List of environments
+ */
+async function listEnvironments(projectId, options = {}) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/environments`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value !== undefined) {
+            url.searchParams.append(key, value.toString());
+        }
+    });
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return z.array(GitLabEnvironmentSchema).parse(data);
+}
+/**
+ * Get details of a specific environment
+ *
+ * @param {string} projectId - The ID or URL-encoded path of the project
+ * @param {number | string} environmentId - The ID of the environment
+ * @returns {Promise<GitLabEnvironment>} Environment details
+ */
+async function getEnvironment(projectId, environmentId) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/environments/${environmentId}`);
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    if (response.status === 404) {
+        throw new Error(`Environment not found`);
+    }
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabEnvironmentSchema.parse(data);
+}
 /**
  * List all jobs in a specific pipeline
  *
@@ -3533,21 +3954,107 @@ async function getPipelineJobOutput(projectId, jobId, limit, offset) {
     }
     return fullTrace;
 }
+/**
+ * List artifact files in a job's artifacts archive
+ *
+ * @param {string} projectId - The ID or URL-encoded path of the project
+ * @param {string} jobId - The ID of the job
+ * @param {Object} options - Options for listing artifacts
+ * @returns {Promise<GitLabArtifactEntry[]>} List of artifact entries
+ */
+async function listJobArtifacts(projectId, jobId, options = {}) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/jobs/${jobId}/artifacts/tree`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value !== undefined) {
+            if (typeof value === "boolean") {
+                url.searchParams.append(key, value ? "true" : "false");
+            }
+            else {
+                url.searchParams.append(key, value.toString());
+            }
+        }
+    });
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    if (response.status === 404) {
+        throw new Error(`Job artifacts not found. The job may not have produced artifacts or the job ID is invalid.`);
+    }
+    await handleGitLabError(response);
+    const data = await response.json();
+    return z.array(GitLabArtifactEntrySchema).parse(data);
+}
+/**
+ * Download the entire artifact archive for a job and save to disk
+ *
+ * @param {string} projectId - The ID or URL-encoded path of the project
+ * @param {string} jobId - The ID of the job
+ * @param {string} localPath - Optional local directory to save the archive
+ * @returns {Promise<string>} The path where the artifact archive was saved
+ */
+async function downloadJobArtifacts(projectId, jobId, localPath) {
+    projectId = decodeURIComponent(projectId);
+    const effectiveProjectId = getEffectiveProjectId(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}/jobs/${jobId}/artifacts`);
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    if (response.status === 404) {
+        throw new Error(`Job artifacts not found. The job may not have produced artifacts or the job ID is invalid.`);
+    }
+    await handleGitLabError(response);
+    const buffer = await response.arrayBuffer();
+    const filename = `artifacts_job_${jobId}.zip`;
+    const savePath = localPath ? path.join(localPath, filename) : filename;
+    fs.mkdirSync(path.dirname(savePath), { recursive: true });
+    fs.writeFileSync(savePath, Buffer.from(buffer));
+    return savePath;
+}
+/**
+ * Download a single file from a job's artifacts
+ *
+ * @param {string} projectId - The ID or URL-encoded path of the project
+ * @param {string} jobId - The ID of the job
+ * @param {string} artifactPath - Path to the file within the artifacts archive
+ * @returns {Promise<string>} The file content as text
+ */
+async function getJobArtifactFile(projectId, jobId, artifactPath) {
+    projectId = decodeURIComponent(projectId);
+    const effectiveProjectId = getEffectiveProjectId(projectId);
+    const encodedArtifactPath = artifactPath
+        .split("/")
+        .map(segment => encodeURIComponent(segment))
+        .join("/");
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}/jobs/${jobId}/artifacts/${encodedArtifactPath}`);
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    if (response.status === 404) {
+        throw new Error(`Artifact file not found: ${artifactPath}`);
+    }
+    await handleGitLabError(response);
+    return await response.text();
+}
 /**
  * Create a new pipeline
  *
  * @param {string} projectId - The ID or URL-encoded path of the project
  * @param {string} ref - The branch or tag to run the pipeline on
  * @param {Array} variables - Optional variables for the pipeline
+ * @param {Record<string, string>} inputs - Optional input parameters for the pipeline
  * @returns {Promise<GitLabPipeline>} The created pipeline
  */
-async function createPipeline(projectId, ref, variables) {
+async function createPipeline(projectId, ref, variables, inputs) {
     projectId = decodeURIComponent(projectId); // Decode project ID
     const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/pipeline`);
     const body = { ref };
     if (variables && variables.length > 0) {
         body.variables = variables;
     }
+    if (inputs && Object.keys(inputs).length > 0) {
+        body.inputs = inputs;
+    }
     const response = await fetch(url.toString(), {
         method: "POST",
         headers: {
@@ -4450,6 +4957,8 @@ async function handleToolCall(params) {
         if (GITLAB_AUTH_COOKIE_PATH) {
             await ensureSessionForRequest();
         }
+        // Lazy OAuth token refresh: only validate/refresh when a tool is actually called
+        await ensureValidOAuthToken();
         logger.info(params.name);
         switch (params.name) {
             case "execute_graphql": {
@@ -4678,8 +5187,22 @@ async function handleToolCall(params) {
             case "get_merge_request": {
                 const args = GetMergeRequestSchema.parse(params.arguments);
                 const mergeRequest = await getMergeRequest(args.project_id, args.merge_request_iid, args.source_branch);
+                const deploymentSummary = await buildMergeRequestDeploymentSummary(args.project_id, mergeRequest);
+                const commitAdditionSummary = await buildMergeRequestCommitAdditionSummary(args.project_id, mergeRequest);
+                const approvalSummary = await buildMergeRequestApprovalSummary(args.project_id, mergeRequest.iid);
+                const mergeRequestWithDeploymentSummary = {
+                    ...mergeRequest,
+                    deployment_summary: deploymentSummary,
+                    commit_addition_summary: commitAdditionSummary,
+                    approval_summary: approvalSummary,
+                };
                 return {
-                    content: [{ type: "text", text: JSON.stringify(mergeRequest, null, 2) }],
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify(mergeRequestWithDeploymentSummary, null, 2),
+                        },
+                    ],
                 };
             }
             case "get_merge_request_diffs": {
@@ -5138,6 +5661,36 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            case "list_deployments": {
+                const args = ListDeploymentsSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const deployments = await listDeployments(project_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(deployments, null, 2) }],
+                };
+            }
+            case "get_deployment": {
+                const { project_id, deployment_id } = GetDeploymentSchema.parse(params.arguments);
+                const deployment = await getDeployment(project_id, deployment_id);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(deployment, null, 2) }],
+                };
+            }
+            case "list_environments": {
+                const args = ListEnvironmentsSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const environments = await listEnvironments(project_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(environments, null, 2) }],
+                };
+            }
+            case "get_environment": {
+                const { project_id, environment_id } = GetEnvironmentSchema.parse(params.arguments);
+                const environment = await getEnvironment(project_id, environment_id);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(environment, null, 2) }],
+                };
+            }
             case "list_pipeline_jobs": {
                 const { project_id, pipeline_id, ...options } = ListPipelineJobsSchema.parse(params.arguments);
                 const jobs = await listPipelineJobs(project_id, pipeline_id, options);
@@ -5187,8 +5740,8 @@ async function handleToolCall(params) {
                 };
             }
             case "create_pipeline": {
-                const { project_id, ref, variables } = CreatePipelineSchema.parse(params.arguments);
-                const pipeline = await createPipeline(project_id, ref, variables);
+                const { project_id, ref, variables, inputs } = CreatePipelineSchema.parse(params.arguments);
+                const pipeline = await createPipeline(project_id, ref, variables, inputs);
                 return {
                     content: [
                         {
@@ -5258,6 +5811,42 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            case "list_job_artifacts": {
+                const { project_id, job_id, ...options } = ListJobArtifactsSchema.parse(params.arguments);
+                const artifacts = await listJobArtifacts(project_id, job_id, options);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify(artifacts, null, 2),
+                        },
+                    ],
+                };
+            }
+            case "download_job_artifacts": {
+                const { project_id, job_id, local_path } = DownloadJobArtifactsSchema.parse(params.arguments);
+                const filePath = await downloadJobArtifacts(project_id, job_id, local_path);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({ success: true, file_path: filePath }, null, 2),
+                        },
+                    ],
+                };
+            }
+            case "get_job_artifact_file": {
+                const { project_id, job_id, artifact_path } = GetJobArtifactFileSchema.parse(params.arguments);
+                const fileContent = await getJobArtifactFile(project_id, job_id, artifact_path);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: fileContent,
+                        },
+                    ],
+                };
+            }
             case "list_merge_requests": {
                 const args = ListMergeRequestsSchema.parse(params.arguments);
                 const mergeRequests = await listMergeRequests(args.project_id, args);
@@ -6004,9 +6593,10 @@ async function runServer() {
             logger.info("Using OAuth authentication...");
             try {
                 const gitlabBaseUrl = GITLAB_API_URL.replace(/\/api\/v4$/, "");
-                OAUTH_ACCESS_TOKEN = await initializeOAuth(gitlabBaseUrl);
+                const oauthResult = await initializeOAuthClient(gitlabBaseUrl);
+                oauthClient = oauthResult.client;
+                OAUTH_ACCESS_TOKEN = oauthResult.accessToken;
                 logger.info("OAuth authentication successful");
-                // Note: Headers are automatically generated by buildAuthHeaders() using OAUTH_ACCESS_TOKEN
             }
             catch (error) {
                 logger.error("OAuth authentication failed:", error);