@zereight/mcp-gitlab 2.0.36 → 2.1.1

package/build/oauth.js

@@ -459,15 +459,15 @@ export class GitLabOAuth {
     /**
      * Get a valid access token, refreshing if necessary
      */
-    async getAccessToken() {
+    async getAccessToken(force = false) {
         let tokenData = this.loadToken();
-        // If no token or expired, start OAuth flow or refresh
+        // If no token or expired (or forced), start OAuth flow or refresh
         if (!tokenData) {
             logger.info("No stored token found. Starting OAuth flow...");
             tokenData = await this.startOAuthFlow();
         }
-        else if (this.isTokenExpired(tokenData)) {
-            logger.info("Token expired. Refreshing...");
+        else if (force || this.isTokenExpired(tokenData)) {
+            logger.info(force && !this.isTokenExpired(tokenData) ? "Force-refreshing OAuth token..." : "Token expired. Refreshing...");
             if (tokenData.refresh_token) {
                 try {
                     tokenData = await this.refreshAccessToken(tokenData.refresh_token);

package/build/schemas.js

@@ -1,4 +1,17 @@
 import { z } from "zod";
+// Helper: coerce a JSON-stringified array to an actual array.
+// LLMs sometimes send '["a", "b"]' (string) instead of ["a", "b"] (array).
+const coerceStringArray = z.preprocess((val) => {
+    if (typeof val === "string") {
+        try {
+            const parsed = JSON.parse(val);
+            if (Array.isArray(parsed))
+                return parsed;
+        }
+        catch { /* not JSON, fall through */ }
+    }
+    return val;
+}, z.array(z.string()));
 // Base schemas for common types
 export const GitLabAuthorSchema = z.object({
     name: z.string(),
@@ -904,7 +917,7 @@ export const GitLabMergeRequestSchema = z.object({
         .optional()
         .describe("Number of commits the source branch is behind the target branch"),
     rebase_in_progress: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Whether rebase is currently in progress for this merge request"),
     merge_when_pipeline_succeeds: z.coerce.boolean().optional(),
@@ -1135,9 +1148,17 @@ export const CreateOrUpdateFileSchema = ProjectParamsSchema.extend({
 });
 export const SearchRepositoriesSchema = z
     .object({
-    search: z.string().describe("Search query"), // Changed from query to match GitLab API
+    search: z.string().optional().describe("Search query"),
+    query: z.string().optional().describe("Search query (alias for 'search')"),
 })
-    .merge(PaginationOptionsSchema);
+    .merge(PaginationOptionsSchema)
+    .transform((data) => {
+    const search = data.search || data.query;
+    if (!search) {
+        throw new Error("Either 'search' or 'query' must be provided");
+    }
+    return { ...data, search, query: undefined };
+});
 export const CreateRepositorySchema = z.object({
     name: z.string().describe("Repository name"),
     description: z.string().optional().describe("Repository description"),
@@ -1222,12 +1243,12 @@ const MergeRequestOptionsSchema = {
     draft: z.coerce.boolean().optional().describe("Create as draft merge request"),
     allow_collaboration: z.coerce.boolean().optional().describe("Allow commits from upstream members"),
     remove_source_branch: z
-        .boolean()
+        .coerce.boolean()
         .nullable()
         .optional()
         .describe("Flag indicating if a merge request should remove the source branch when merging."),
     squash: z
-        .boolean()
+        .coerce.boolean()
         .nullable()
         .optional()
         .describe("If true, squash all commits into a single commit on merge."),
@@ -1246,7 +1267,7 @@ export const GetBranchDiffsSchema = ProjectParamsSchema.extend({
     from: z.string().describe("The base branch or commit SHA to compare from"),
     to: z.string().describe("The target branch or commit SHA to compare to"),
     straight: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Comparison method: false for '...' (default), true for '--'"),
     excluded_file_patterns: z
@@ -1273,7 +1294,7 @@ export const UpdateMergeRequestSchema = GetMergeRequestSchema.extend({
         .optional()
         .describe("New state (close/reopen) for the MR"),
     remove_source_branch: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Flag indicating if the source branch should be removed"),
     squash: z.coerce.boolean().optional().describe("Squash commits into a single commit when merging"),
@@ -1281,24 +1302,24 @@ export const UpdateMergeRequestSchema = GetMergeRequestSchema.extend({
 });
 export const MergeMergeRequestSchema = ProjectParamsSchema.extend({
     merge_request_iid: z.coerce.string().optional().describe("The IID of a merge request"),
-    auto_merge: z
+    auto_merge: z.coerce
         .boolean()
         .optional()
         .default(false)
         .describe("If true, the merge request merges when the pipeline succeeds."),
     merge_commit_message: z.string().optional().describe("Custom merge commit message"),
-    merge_when_pipeline_succeeds: z
+    merge_when_pipeline_succeeds: z.coerce
         .boolean()
         .optional()
         .default(false)
         .describe("If true, the merge request merges when the pipeline succeeds.in GitLab 17.11. Use"),
-    should_remove_source_branch: z
+    should_remove_source_branch: z.coerce
         .boolean()
         .optional()
         .default(false)
         .describe("Remove source branch after merge"),
     squash_commit_message: z.string().optional().describe("Custom squash commit message"),
-    squash: z
+    squash: z.coerce
         .boolean()
         .optional()
         .default(false)
@@ -1394,7 +1415,7 @@ export const ListMergeRequestDiffsSchema = GetMergeRequestSchema.extend({
     page: z.coerce.number().optional().describe("Page number for pagination (default: 1)"),
     per_page: z.coerce.number().optional().describe("Number of items per page (max: 100, default: 20)"),
     unidiff: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Present diffs in the unified diff format. Default is false. Introduced in GitLab 16.5."),
 });
@@ -1410,7 +1431,7 @@ export const GetMergeRequestFileDiffSchema = GetMergeRequestSchema.extend({
         .describe("List of file paths to retrieve diffs for (e.g. ['src/api/users.ts', 'src/repo/user.go']). " +
         "Call list_merge_request_changed_files first to get the full list of changed paths."),
     unidiff: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Present diff in the unified diff format. Default is false."),
 });
@@ -1421,7 +1442,7 @@ export const ListMergeRequestVersionsSchema = ProjectParamsSchema.extend({
 export const GetMergeRequestVersionSchema = ListMergeRequestVersionsSchema.extend({
     version_id: z.coerce.string().describe("The ID of the merge request diff version"),
     unidiff: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Present diffs in the unified diff format. Default is false. Introduced in GitLab 16.5."),
 });
@@ -1579,14 +1600,11 @@ export const UpdateIssueSchema = z.object({
     confidential: z.coerce.boolean().optional().describe("Set the issue to be confidential"),
     discussion_locked: z.coerce.boolean().optional().describe("Flag to lock discussions"),
     due_date: z.string().optional().describe("Date the issue is due (YYYY-MM-DD)"),
-    labels: z.array(z.string()).optional().describe("Array of label names"),
+    labels: coerceStringArray.optional().describe("Array of label names"),
     milestone_id: z.coerce.string().optional().describe("Milestone ID to assign"),
     state_event: z.enum(["close", "reopen"]).optional().describe("Update issue state (close/reopen)"),
     weight: z.coerce.number().optional().describe("Weight of the issue (numeric, typically hours of work)"),
-    issue_type: z
-        .enum(["issue", "incident", "test_case", "task"])
-        .optional()
-        .describe("The type of issue. One of issue, incident, test_case or task."),
+    issue_type: z.preprocess((val) => (typeof val === "string" ? val.toLowerCase() : val), z.enum(["issue", "incident", "test_case", "task"]).optional()).describe("The type of issue. One of issue, incident, test_case or task."),
 });
 export const DeleteIssueSchema = z.object({
     project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
@@ -1645,7 +1663,7 @@ export const ListProjectsSchema = z
     search_namespaces: z.coerce.boolean().optional().describe("Needs to be true if search is full path"),
     owned: z.coerce.boolean().optional().describe("Filter for projects owned by current user"),
     membership: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Filter for projects where current user is a member"),
     simple: z.coerce.boolean().optional().describe("Return only limited fields"),
@@ -1663,21 +1681,22 @@ export const ListProjectsSchema = z
         .optional()
         .describe("Return projects sorted in ascending or descending order"),
     with_issues_enabled: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Filter projects with issues feature enabled"),
     with_merge_requests_enabled: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Filter projects with merge requests feature enabled"),
     min_access_level: z.coerce.number().optional().describe("Filter by minimum access level"),
+    topic: z.string().optional().describe("Filter by topic (projects tagged with this topic)"),
 })
     .merge(PaginationOptionsSchema);
 // Label operation schemas
 export const ListLabelsSchema = z.object({
     project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
     with_counts: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Whether or not to include issue and merge request counts"),
     include_ancestor_groups: z.coerce.boolean().optional().describe("Include ancestor groups"),
@@ -1729,11 +1748,11 @@ export const ListGroupProjectsSchema = z
         .optional()
         .describe("Filter by project visibility"),
     with_issues_enabled: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Filter projects with issues feature enabled"),
     with_merge_requests_enabled: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Filter projects with merge requests feature enabled"),
     min_access_level: z.coerce.number().optional().describe("Filter by minimum access level"),
@@ -1742,6 +1761,7 @@ export const ListGroupProjectsSchema = z
     statistics: z.coerce.boolean().optional().describe("Include project statistics"),
     with_custom_attributes: z.coerce.boolean().optional().describe("Include custom attributes"),
     with_security_reports: z.coerce.boolean().optional().describe("Include security reports"),
+    topic: z.string().optional().describe("Filter by topic (projects tagged with this topic)"),
 })
     .merge(PaginationOptionsSchema);
 // Add wiki operation schemas
@@ -1785,7 +1805,7 @@ export const GitLabWikiPageSchema = z.object({
 export const ListGroupWikiPagesSchema = z
     .object({
     group_id: z.coerce.string().describe("Group ID or URL-encoded path"),
-    with_content: z.boolean().optional().describe("Include content of the wiki pages"),
+    with_content: z.coerce.boolean().optional().describe("Include content of the wiki pages"),
 })
     .merge(PaginationOptionsSchema);
 export const GetGroupWikiPageSchema = z.object({
@@ -1966,7 +1986,7 @@ export const CreateDraftNoteSchema = ProjectParamsSchema.extend({
         .describe("The ID of a discussion the draft note replies to"),
     position: MergeRequestThreadPositionSchema.optional().describe("Position when creating a diff note"),
     resolve_discussion: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Whether to resolve the discussion when publishing"),
 });
@@ -1977,7 +1997,7 @@ export const UpdateDraftNoteSchema = ProjectParamsSchema.extend({
     body: z.string().optional().describe("The content of the draft note"),
     position: MergeRequestThreadPositionSchema.optional().describe("Position when creating a diff note"),
     resolve_discussion: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Whether to resolve the discussion when publishing"),
 });
@@ -2085,7 +2105,7 @@ export const ListCommitsSchema = z.object({
     all: z.coerce.boolean().optional().describe("Retrieve every commit from the repository"),
     with_stats: z.coerce.boolean().optional().describe("Stats about each commit are added to the response"),
     first_parent: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Follow only the first parent commit upon seeing a merge commit"),
     order: z.enum(["default", "topo"]).optional().describe("List commits in order"),
@@ -2102,7 +2122,7 @@ export const GetCommitDiffSchema = z.object({
     project_id: z.coerce.string().describe("Project ID or complete URL-encoded path to project"),
     sha: z.string().describe("The commit hash or name of a repository branch or tag"),
     full_diff: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Whether to return the full diff or only first page (default: false)"),
 });
@@ -2145,7 +2165,7 @@ export const ListProjectMembersSchema = z.object({
     user_ids: z.array(z.coerce.number()).optional().describe("Filter by user IDs"),
     skip_users: z.array(z.coerce.number()).optional().describe("User IDs to exclude"),
     include_inheritance: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Include inherited members. Defaults to false."),
     per_page: z.coerce.number().optional().describe("Number of items per page (default: 20, max: 100)"),
@@ -2216,11 +2236,11 @@ export const ListGroupIterationsSchema = z
         .optional()
         .describe("Fields in which fuzzy search should be performed with the query given in the argument search. The available options are title and cadence_title. Default is [title]."),
     include_ancestors: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Include iterations for group and its ancestors. Defaults to true."),
     include_descendants: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Include iterations for group and its descendants. Defaults to false."),
     updated_before: z
@@ -2255,8 +2275,8 @@ export const GitLabEventSchema = z
     created_at: z.string(),
     author: GitLabEventAuthorSchema,
     author_username: z.string(),
-    imported: z.coerce.boolean(),
-    imported_from: z.string(),
+    imported: z.coerce.boolean().optional(),
+    imported_from: z.string().nullable().optional(),
 })
     .passthrough(); // Allow additional fields
 // List events schema
@@ -2419,7 +2439,7 @@ export const ListReleasesSchema = z
         .optional()
         .describe("The direction of the order. Either desc (default) for descending order or asc for ascending order."),
     include_html_description: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("If true, a response includes HTML rendered Markdown of the release description."),
 })
@@ -2428,7 +2448,7 @@ export const GetReleaseSchema = z.object({
     project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
     tag_name: z.string().describe("The Git tag the release is associated with"),
     include_html_description: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("If true, a response includes HTML rendered Markdown of the release description."),
 });
@@ -2511,7 +2531,7 @@ export const ListJobArtifactsSchema = z.object({
         .optional()
         .describe("Directory path within the artifacts archive (defaults to root)"),
     recursive: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("Whether to list artifacts recursively"),
 });
@@ -2593,8 +2613,8 @@ export const CreateWorkItemSchema = z.object({
         .default("issue")
         .describe("Type of work item to create. Defaults to 'issue'."),
     description: z.string().optional().describe("Description of the work item (Markdown supported)"),
-    labels: z.array(z.string()).optional().describe("Array of label names to assign"),
-    assignee_usernames: z.array(z.string()).optional().describe("Array of usernames to assign"),
+    labels: coerceStringArray.optional().describe("Array of label names to assign"),
+    assignee_usernames: coerceStringArray.optional().describe("Array of usernames to assign"),
     parent_iid: z.coerce.number().optional().describe("IID of the parent work item to set hierarchy"),
     weight: z.coerce.number().optional().describe("Weight of the work item"),
     health_status: z.enum(["onTrack", "needsAttention", "atRisk"]).optional().describe("Set health status"),
@@ -2607,9 +2627,9 @@ export const CreateWorkItemSchema = z.object({
 export const UpdateWorkItemSchema = WorkItemParamsSchema.extend({
     title: z.string().optional().describe("New title"),
     description: z.string().optional().describe("New description (Markdown supported)"),
-    add_labels: z.array(z.string()).optional().describe("Label names to add"),
-    remove_labels: z.array(z.string()).optional().describe("Label names to remove"),
-    assignee_usernames: z.array(z.string()).optional().describe("Set assignees by username (replaces existing)"),
+    add_labels: coerceStringArray.optional().describe("Label names to add"),
+    remove_labels: coerceStringArray.optional().describe("Label names to remove"),
+    assignee_usernames: coerceStringArray.optional().describe("Set assignees by username (replaces existing)"),
     state_event: z.enum(["close", "reopen"]).optional().describe("Close or reopen the work item"),
     weight: z.coerce.number().optional().describe("Set weight (issues, tasks, epics only)"),
     status: z.string().optional().describe("Set status by ID. Use list_work_item_statuses to get available status IDs."),
@@ -2617,11 +2637,11 @@ export const UpdateWorkItemSchema = WorkItemParamsSchema.extend({
     parent_project_id: z.coerce.string().optional().describe("Project ID or path of the parent work item (defaults to same project as the work item)"),
     remove_parent: z.coerce.boolean().optional().describe("Set to true to remove the parent from hierarchy"),
     children_to_add: z.array(z.object({
-        project_id: z.coerce.string().describe("Project ID or path of the child work item"),
+        project_id: z.coerce.string().optional().describe("Project ID or path of the child work item. Defaults to the parent work item's project if omitted."),
         iid: z.coerce.number().describe("IID of the child work item"),
     })).optional().describe("Array of children to add to this work item's hierarchy"),
     children_to_remove: z.array(z.object({
-        project_id: z.coerce.string().describe("Project ID or path of the child work item"),
+        project_id: z.coerce.string().optional().describe("Project ID or path of the child work item. Defaults to the parent work item's project if omitted."),
         iid: z.coerce.number().describe("IID of the child work item"),
     })).optional().describe("Array of children to remove from this work item's hierarchy"),
     health_status: z.enum(["onTrack", "needsAttention", "atRisk"]).optional().describe("Set health status on issues and epics"),
@@ -2631,12 +2651,12 @@ export const UpdateWorkItemSchema = WorkItemParamsSchema.extend({
     iteration_id: z.string().optional().describe("Iteration ID (e.g. 'gid://gitlab/Iteration/123' or numeric ID). Use list_group_iterations to find available iterations."),
     confidential: z.coerce.boolean().optional().describe("Set confidentiality"),
     linked_items_to_add: z.array(z.object({
-        project_id: z.coerce.string().describe("Project ID or path of the work item to link"),
+        project_id: z.coerce.string().optional().describe("Project ID or path of the work item to link. Defaults to the same project if omitted."),
         iid: z.coerce.number().describe("IID of the work item to link"),
         link_type: z.enum(["RELATED", "BLOCKED_BY", "BLOCKS"]).optional().default("RELATED").describe("Link type: RELATED, BLOCKED_BY, or BLOCKS. Defaults to RELATED."),
     })).optional().describe("Work items to link"),
     linked_items_to_remove: z.array(z.object({
-        project_id: z.coerce.string().describe("Project ID or path of the linked work item to remove"),
+        project_id: z.coerce.string().optional().describe("Project ID or path of the linked work item to remove. Defaults to the same project if omitted."),
         iid: z.coerce.number().describe("IID of the linked work item to remove"),
     })).optional().describe("Linked work items to remove"),
     custom_fields: z.array(z.object({
@@ -2693,6 +2713,98 @@ export const ListCustomFieldDefinitionsSchema = z.object({
         .default("issue")
         .describe("The work item type to list custom field definitions for. Defaults to 'issue'."),
 });
+// --- Emoji Reaction schemas (REST: MRs and Issues) ---
+const emojiNameField = z.string().describe("Name of the emoji without colons (e.g. 'thumbsup', 'rocket', 'eyes')");
+const awardIdField = z.coerce.string().describe("The ID of the emoji reaction to delete");
+const noteEmojiDiscussionField = z.coerce.string().optional().describe("The ID of a discussion thread. Required for notes that are discussion replies; omit for top-level notes.");
+export const CreateMergeRequestEmojiReactionSchema = ProjectParamsSchema.extend({
+    merge_request_iid: z.coerce.string().describe("The IID of a merge request"),
+    name: emojiNameField,
+});
+export const DeleteMergeRequestEmojiReactionSchema = ProjectParamsSchema.extend({
+    merge_request_iid: z.coerce.string().describe("The IID of a merge request"),
+    award_id: awardIdField,
+});
+export const CreateMergeRequestNoteEmojiReactionSchema = ProjectParamsSchema.extend({
+    merge_request_iid: z.coerce.string().describe("The IID of a merge request"),
+    note_id: z.coerce.string().describe("The ID of a note (comment or thread reply)"),
+    discussion_id: noteEmojiDiscussionField,
+    name: emojiNameField,
+});
+export const DeleteMergeRequestNoteEmojiReactionSchema = ProjectParamsSchema.extend({
+    merge_request_iid: z.coerce.string().describe("The IID of a merge request"),
+    note_id: z.coerce.string().describe("The ID of a note (comment or thread reply)"),
+    discussion_id: noteEmojiDiscussionField,
+    award_id: awardIdField,
+});
+export const CreateIssueEmojiReactionSchema = ProjectParamsSchema.extend({
+    issue_iid: z.coerce.string().describe("The IID of an issue"),
+    name: emojiNameField,
+});
+export const DeleteIssueEmojiReactionSchema = ProjectParamsSchema.extend({
+    issue_iid: z.coerce.string().describe("The IID of an issue"),
+    award_id: awardIdField,
+});
+export const CreateIssueNoteEmojiReactionSchema = ProjectParamsSchema.extend({
+    issue_iid: z.coerce.string().describe("The IID of an issue"),
+    note_id: z.coerce.string().describe("The ID of a note (comment or thread reply)"),
+    discussion_id: noteEmojiDiscussionField,
+    name: emojiNameField,
+});
+export const DeleteIssueNoteEmojiReactionSchema = ProjectParamsSchema.extend({
+    issue_iid: z.coerce.string().describe("The IID of an issue"),
+    note_id: z.coerce.string().describe("The ID of a note (comment or thread reply)"),
+    discussion_id: noteEmojiDiscussionField,
+    award_id: awardIdField,
+});
+// --- Emoji Reaction schemas (GraphQL: Work Items) ---
+export const CreateWorkItemEmojiReactionSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    iid: z.coerce.number().describe("The internal ID of the work item"),
+    name: emojiNameField,
+});
+export const DeleteWorkItemEmojiReactionSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    iid: z.coerce.number().describe("The internal ID of the work item"),
+    name: emojiNameField,
+});
+export const CreateWorkItemNoteEmojiReactionSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    iid: z.coerce.number().describe("The internal ID of the work item"),
+    note_id: z.string().describe("The GraphQL GID of the note (e.g. 'gid://gitlab/Note/123' from list_work_item_notes)"),
+    name: emojiNameField,
+});
+export const DeleteWorkItemNoteEmojiReactionSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    iid: z.coerce.number().describe("The internal ID of the work item"),
+    note_id: z.string().describe("The GraphQL GID of the note (e.g. 'gid://gitlab/Note/123' from list_work_item_notes)"),
+    name: emojiNameField,
+});
+export const ListMergeRequestEmojiReactionsSchema = ProjectParamsSchema.extend({
+    merge_request_iid: z.coerce.string().describe("The IID of a merge request"),
+});
+export const ListMergeRequestNoteEmojiReactionsSchema = ProjectParamsSchema.extend({
+    merge_request_iid: z.coerce.string().describe("The IID of a merge request"),
+    note_id: z.coerce.string().describe("The ID of a note (comment or thread reply)"),
+    discussion_id: noteEmojiDiscussionField,
+});
+export const ListIssueEmojiReactionsSchema = ProjectParamsSchema.extend({
+    issue_iid: z.coerce.string().describe("The IID of an issue"),
+});
+export const ListIssueNoteEmojiReactionsSchema = ProjectParamsSchema.extend({
+    issue_iid: z.coerce.string().describe("The IID of an issue"),
+    note_id: z.coerce.string().describe("The ID of a note (comment or thread reply)"),
+    discussion_id: noteEmojiDiscussionField,
+});
+export const ListWorkItemEmojiReactionsSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    iid: z.coerce.number().describe("The internal ID of the work item"),
+});
+export const ListWorkItemNoteEmojiReactionsSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    iid: z.coerce.number().describe("The internal ID of the work item"),
+    note_id: z.string().describe("The GraphQL GID of the note (e.g. 'gid://gitlab/Note/123' from list_work_item_notes)"),
+});
 // --- Incident Timeline Event schemas ---
 export const GetTimelineEventsSchema = z.object({
     project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
@@ -2740,7 +2852,7 @@ export const ListWebhookEventsSchema = z
         .optional()
         .describe("Filter by response status code (e.g. 200, 500) or category: successful, client_failure, server_failure"),
     summary: z
-        .boolean()
+        .coerce.boolean()
         .optional()
         .describe("If true, return only summary fields (id, url, trigger, response_status, execution_duration) without full request/response payloads. Recommended for overview queries to avoid huge responses."),
     per_page: z

package/build/test/mcp-oauth-tests.js

@@ -139,6 +139,55 @@ describe("MCP OAuth — Discovery Endpoints", () => {
         assert.ok(body.resource, "Should have resource field");
         console.log("  ✓ Protected resource metadata returned");
     });
+    test("path-prefixed MCP_SERVER_URL serves path-aware discovery metadata", async () => {
+        const mockPort = await findMockServerPort(MOCK_GITLAB_PORT_BASE + 25);
+        const prefixedMockGitLab = new MockGitLabServer({
+            port: mockPort,
+            validTokens: [MOCK_OAUTH_TOKEN],
+        });
+        await prefixedMockGitLab.start();
+        const scopedServers = [];
+        try {
+            const mockGitLabUrl = prefixedMockGitLab.getUrl();
+            addOAuthEndpoints(prefixedMockGitLab, MOCK_OAUTH_TOKEN, MOCK_CLIENT_ID, mockGitLabUrl);
+            const mcpPort = await findAvailablePort(MCP_SERVER_PORT_BASE + 25);
+            const mcpBaseUrl = `http://${HOST}:${mcpPort}`;
+            const issuerPath = "/gitlab-mcp";
+            const prefixedServerUrl = `${mcpBaseUrl}${issuerPath}`;
+            const server = await launchServer({
+                mode: TransportMode.STREAMABLE_HTTP,
+                port: mcpPort,
+                timeout: 5000,
+                env: {
+                    STREAMABLE_HTTP: "true",
+                    GITLAB_MCP_OAUTH: "true",
+                    GITLAB_OAUTH_APP_ID: "test-oauth-app-id",
+                    GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+                    MCP_SERVER_URL: prefixedServerUrl,
+                    MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL: "true",
+                },
+            });
+            scopedServers.push(server);
+            const authMetadataRes = await fetch(`${mcpBaseUrl}/.well-known/oauth-authorization-server${issuerPath}`);
+            assert.strictEqual(authMetadataRes.status, 200, "Should return 200");
+            const authMetadata = (await authMetadataRes.json());
+            assert.strictEqual(authMetadata.issuer, prefixedServerUrl);
+            assert.strictEqual(authMetadata.authorization_endpoint, `${prefixedServerUrl}/authorize`);
+            assert.strictEqual(authMetadata.token_endpoint, `${prefixedServerUrl}/token`);
+            assert.strictEqual(authMetadata.registration_endpoint, `${prefixedServerUrl}/register`);
+            assert.strictEqual(authMetadata.revocation_endpoint, `${prefixedServerUrl}/revoke`);
+            const resourceMetadataRes = await fetch(`${mcpBaseUrl}/.well-known/oauth-protected-resource${issuerPath}/mcp`);
+            assert.strictEqual(resourceMetadataRes.status, 200, "Should return 200");
+            const resourceMetadata = (await resourceMetadataRes.json());
+            assert.strictEqual(resourceMetadata.resource, prefixedServerUrl);
+            assert.deepStrictEqual(resourceMetadata.authorization_servers, [prefixedServerUrl]);
+            console.log("  ✓ Path-prefixed discovery metadata returned at RFC well-known URLs");
+        }
+        finally {
+            cleanupServers(scopedServers);
+            await prefixedMockGitLab.stop();
+        }
+    });
 });
 // ---------------------------------------------------------------------------
 // Test suite: /mcp auth enforcement

package/build/test/schema-tests.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env ts-node
-import { GetFileContentsSchema, GitLabFileContentSchema, CreatePipelineSchema, CreateIssueNoteSchema } from '../schemas.js';
+import { GetFileContentsSchema, GitLabFileContentSchema, CreatePipelineSchema, CreateIssueNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateIssueEmojiReactionSchema, DeleteMergeRequestEmojiReactionSchema, DeleteIssueEmojiReactionSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema } from '../schemas.js';
 function runGetFileContentsSchemaTests() {
     console.log('🧪 Testing GetFileContentsSchema...');
     const cases = [
@@ -371,13 +371,69 @@ function runCreateIssueNoteSchemaTests() {
     console.log(`\nResults: ${passed} passed, ${failed} failed`);
     return { passed, failed };
 }
+function runEmojiReactionSchemaTests() {
+    console.log('\n🧪 Testing Emoji Reaction Schemas...');
+    const cases = [
+        { name: 'schema:create_mr_emoji:valid', schema: CreateMergeRequestEmojiReactionSchema, input: { project_id: 'my/project', merge_request_iid: '42', name: 'thumbsup' }, expected: { project_id: 'my/project', merge_request_iid: '42', name: 'thumbsup' } },
+        { name: 'schema:create_mr_emoji:numeric-iid-coerced', schema: CreateMergeRequestEmojiReactionSchema, input: { project_id: 'my/project', merge_request_iid: 42, name: 'rocket' }, expected: { merge_request_iid: '42', name: 'rocket' } },
+        { name: 'schema:create_mr_emoji:reject-missing-name', schema: CreateMergeRequestEmojiReactionSchema, input: { project_id: 'my/project', merge_request_iid: '42' }, shouldFail: true },
+        { name: 'schema:delete_mr_emoji:valid', schema: DeleteMergeRequestEmojiReactionSchema, input: { project_id: 'my/project', merge_request_iid: '42', award_id: '123' }, expected: { merge_request_iid: '42', award_id: '123' } },
+        { name: 'schema:create_issue_emoji:valid', schema: CreateIssueEmojiReactionSchema, input: { project_id: 'my/project', issue_iid: '10', name: 'thumbsdown' }, expected: { issue_iid: '10', name: 'thumbsdown' } },
+        { name: 'schema:create_issue_emoji:reject-missing-name', schema: CreateIssueEmojiReactionSchema, input: { project_id: 'my/project', issue_iid: '10' }, shouldFail: true },
+        { name: 'schema:delete_issue_emoji:valid', schema: DeleteIssueEmojiReactionSchema, input: { project_id: 'my/project', issue_iid: '10', award_id: '99' }, expected: { issue_iid: '10', award_id: '99' } },
+        { name: 'schema:create_work_item_emoji:valid', schema: CreateWorkItemEmojiReactionSchema, input: { project_id: 'my/project', iid: 5, name: 'rocket' }, expected: { iid: 5, name: 'rocket' } },
+        { name: 'schema:create_work_item_emoji:reject-missing-name', schema: CreateWorkItemEmojiReactionSchema, input: { project_id: 'my/project', iid: 5 }, shouldFail: true },
+        { name: 'schema:create_work_item_note_emoji:valid', schema: CreateWorkItemNoteEmojiReactionSchema, input: { project_id: 'my/project', iid: 5, note_id: 'gid://gitlab/Note/123', name: 'thumbsup' }, expected: { iid: 5, note_id: 'gid://gitlab/Note/123', name: 'thumbsup' } },
+        { name: 'schema:create_work_item_note_emoji:reject-missing-note-id', schema: CreateWorkItemNoteEmojiReactionSchema, input: { project_id: 'my/project', iid: 5, name: 'thumbsup' }, shouldFail: true },
+    ];
+    let passed = 0;
+    let failed = 0;
+    cases.forEach(testCase => {
+        const result = { name: testCase.name, status: 'failed' };
+        const parsed = testCase.schema.safeParse(testCase.input);
+        if (testCase.shouldFail) {
+            if (parsed.success) {
+                result.error = 'Expected schema validation to fail';
+            }
+            else {
+                result.status = 'passed';
+            }
+        }
+        else if (parsed.success) {
+            const expected = testCase.expected || {};
+            const matches = Object.entries(expected).every(([key, value]) => {
+                return parsed.data[key] === value;
+            });
+            if (matches) {
+                result.status = 'passed';
+            }
+            else {
+                result.error = `Unexpected parsed result: ${JSON.stringify(parsed.data)}`;
+            }
+        }
+        else {
+            result.error = parsed.error?.message || 'Schema validation failed';
+        }
+        if (result.status === 'passed') {
+            passed++;
+            console.log(`✅ ${result.name}`);
+        }
+        else {
+            failed++;
+            console.log(`❌ ${result.name}: ${result.error}`);
+        }
+    });
+    console.log(`\nResults: ${passed} passed, ${failed} failed`);
+    return { passed, failed };
+}
 if (import.meta.url === `file://${process.argv[1]}`) {
     const getFileContentsResult = runGetFileContentsSchemaTests();
     const fileContentResult = runGitLabFileContentSchemaTests();
     const createPipelineResult = runCreatePipelineSchemaTests();
     const createIssueNoteResult = runCreateIssueNoteSchemaTests();
-    const totalPassed = getFileContentsResult.passed + fileContentResult.passed + createPipelineResult.passed + createIssueNoteResult.passed;
-    const totalFailed = getFileContentsResult.failed + fileContentResult.failed + createPipelineResult.failed + createIssueNoteResult.failed;
+    const emojiReactionResult = runEmojiReactionSchemaTests();
+    const totalPassed = getFileContentsResult.passed + fileContentResult.passed + createPipelineResult.passed + createIssueNoteResult.passed + emojiReactionResult.passed;
+    const totalFailed = getFileContentsResult.failed + fileContentResult.failed + createPipelineResult.failed + createIssueNoteResult.failed + emojiReactionResult.failed;
     console.log(`\nTotal Results: ${totalPassed} passed, ${totalFailed} failed`);
     if (totalFailed > 0) {
         process.exit(1);