@zereight/mcp-gitlab 2.1.12 → 2.1.14

package/build/index.js

@@ -1,5 +1,111 @@
 #!/usr/bin/env node
 import { getConfig, ENABLE_DYNAMIC_API_URL, GITLAB_AUTH_COOKIE_PATH, GITLAB_CA_CERT_PATH, GITLAB_JOB_TOKEN, GITLAB_MCP_OAUTH, GITLAB_OAUTH_APP_ID, GITLAB_OAUTH_SCOPES, GITLAB_OAUTH_CALLBACK_PROXY, GITLAB_PERSONAL_ACCESS_TOKEN, GITLAB_POOL_MAX_SIZE, GITLAB_READ_ONLY_MODE, GITLAB_TOOLSETS_RAW, GITLAB_TOOLS_RAW, HOST, HTTP_PROXY, HTTPS_PROXY, IS_OLD, MCP_SERVER_URL, NODE_TLS_REJECT_UNAUTHORIZED, NO_PROXY, OAUTH_STATELESS_CLIENT_TTL_SECONDS, OAUTH_STATELESS_MODE, OAUTH_STATELESS_PENDING_TTL_SECONDS, OAUTH_STATELESS_SESSION_TTL_SECONDS, OAUTH_STATELESS_STORED_TTL_SECONDS, PORT, REMOTE_AUTHORIZATION, SESSION_TIMEOUT_SECONDS, SSE, STREAMABLE_HTTP, USE_GITLAB_WIKI, USE_MILESTONE, USE_OAUTH, USE_PIPELINE, GITLAB_TOOL_POLICY_APPROVE_RAW, GITLAB_TOOL_POLICY_HIDDEN_RAW, } from "./config.js";
+/** True when the server is running in remote/network mode (SSE or StreamableHTTP transport). */
+const IS_REMOTE = SSE || STREAMABLE_HTTP;
+/**
+ * Encryption key for download tokens. When DOWNLOAD_TOKEN_SECRET is set
+ * (recommended for HA deployments behind a load balancer) the key is
+ * derived from that value so all replicas share the same key. Otherwise
+ * a random key is generated per process (tokens are not portable across
+ * restarts or replicas).
+ */
+const DOWNLOAD_TOKEN_KEY = (() => {
+    const secret = process.env.DOWNLOAD_TOKEN_SECRET;
+    if (secret) {
+        return createHash("sha256").update(secret).digest();
+    }
+    return randomBytes(32);
+})();
+/** Download token TTL in seconds (default 5 minutes). */
+const DOWNLOAD_TOKEN_TTL = Number.parseInt(process.env.DOWNLOAD_TOKEN_TTL || "300", 10);
+function createDownloadToken(header, token, apiUrl, resource) {
+    const iv = randomBytes(12);
+    const cipher = createCipheriv("aes-256-gcm", DOWNLOAD_TOKEN_KEY, iv);
+    const payload = JSON.stringify({
+        h: header,
+        t: token,
+        e: Math.floor(Date.now() / 1000) + DOWNLOAD_TOKEN_TTL,
+        ...(apiUrl ? { u: apiUrl } : {}),
+        ...(resource ? { r: resource.type, p: resource.params } : {}),
+    });
+    const encrypted = Buffer.concat([cipher.update(payload, "utf8"), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return Buffer.concat([iv, tag, encrypted]).toString("base64url");
+}
+function decryptDownloadToken(tokenStr) {
+    try {
+        const buf = Buffer.from(tokenStr, "base64url");
+        if (buf.length < 29)
+            return null;
+        const iv = buf.subarray(0, 12);
+        const tag = buf.subarray(12, 28);
+        const encrypted = buf.subarray(28);
+        const decipher = createDecipheriv("aes-256-gcm", DOWNLOAD_TOKEN_KEY, iv);
+        decipher.setAuthTag(tag);
+        const decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]);
+        const payload = JSON.parse(decrypted.toString("utf8"));
+        // Check TTL
+        if (payload.e && Math.floor(Date.now() / 1000) > payload.e) {
+            return null; // expired
+        }
+        return {
+            header: payload.h,
+            token: payload.t,
+            ...(payload.u ? { apiUrl: payload.u } : {}),
+            ...(payload.r ? { resourceType: payload.r, resourceParams: payload.p } : {}),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Build a URL pointing to the download proxy endpoint.
+ * Embeds an encrypted auth token (and API URL for dynamic routing)
+ * from the current session so the URL works standalone.
+ */
+function buildDownloadUrl(type, params) {
+    const base = MCP_SERVER_URL || `http://${HOST}:${PORT}`;
+    const baseUrl = new URL(base);
+    // Preserve any path prefix (e.g. /gitlab-mcp) from the base URL
+    const basePath = baseUrl.pathname.replace(/\/+$/, "");
+    const url = new URL(`${basePath}/downloads/${type}`, baseUrl.origin);
+    for (const [key, value] of Object.entries(params)) {
+        url.searchParams.set(key, value);
+    }
+    // Embed auth (and apiUrl when dynamic routing is active) from current session or static config
+    // Token is bound to the specific resource (type + params) to prevent URL tampering
+    const resource = { type, params };
+    const ctx = sessionAuthStore.getStore();
+    if (ctx?.token) {
+        const headerValue = ctx.header === "Authorization" ? `Bearer ${ctx.token}` : ctx.token;
+        const apiUrl = ENABLE_DYNAMIC_API_URL && ctx.apiUrl !== GITLAB_API_URL ? ctx.apiUrl : undefined;
+        url.searchParams.set("_token", createDownloadToken(ctx.header, headerValue, apiUrl, resource));
+    }
+    else {
+        // Fallback for SSE/static-token mode (no session auth context)
+        // Priority matches buildAuthHeaders: OAuth > PAT > JOB token
+        const staticToken = OAUTH_ACCESS_TOKEN || GITLAB_PERSONAL_ACCESS_TOKEN || GITLAB_JOB_TOKEN;
+        if (staticToken) {
+            let header;
+            let headerValue;
+            if (GITLAB_JOB_TOKEN && !GITLAB_PERSONAL_ACCESS_TOKEN && !OAUTH_ACCESS_TOKEN) {
+                header = "JOB-TOKEN";
+                headerValue = String(staticToken);
+            }
+            else if (IS_OLD) {
+                header = "Private-Token";
+                headerValue = String(staticToken);
+            }
+            else {
+                header = "Authorization";
+                headerValue = `Bearer ${staticToken}`;
+            }
+            url.searchParams.set("_token", createDownloadToken(header, headerValue, undefined, resource));
+        }
+    }
+    return url.toString();
+}
 import { loadKeyMaterialFromEnv, looksLikeStatelessSessionId, mintSessionId, openSessionId, } from "./stateless/index.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
@@ -10,6 +116,7 @@ import { AsyncLocalStorage } from "node:async_hooks";
 import express from "express";
 import fetchCookie from "fetch-cookie";
 import fs from "node:fs";
+import { pipeline as streamPipeline } from "node:stream/promises";
 import os from "node:os";
 import nodeFetch from "node-fetch";
 import path, { dirname } from "node:path";
@@ -26,14 +133,14 @@ import { requireBearerAuth } from "@modelcontextprotocol/sdk/server/auth/middlew
 import { GitLabClientPool } from "./gitlab-client-pool.js";
 import { allTools, readOnlyTools, destructiveTools, parseEnabledToolsets, parseIndividualTools, buildFeatureFlagOverrides, isToolInEnabledToolset, TOOLSET_DEFINITIONS, ALL_TOOLSET_IDS, } from "./tools/registry.js";
 import { BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, // Added
-CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateMergeRequestNoteEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateRepositorySchema, CreateWikiPageSchema, CreateGroupWikiPageSchema, DeleteBranchSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, EditProjectMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetBranchSchema, GetCommitDiffSchema, GetCommitSchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetDeploymentSchema, GetEnvironmentSchema, GetNamespaceSchema, GitLabCiLintResultSchema, GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectMilestoneSchema, GetProjectSchema, GetRepositoryTreeSchema, GetUsersSchema, GetUserSchema, GitLabUserFullSchema, WhoAmISchema, GitLabCurrentUserSchema, GetWikiPageSchema, GitLabCommitSchema, GitLabCommitStatusSchema, GitLabCompareResultSchema, GitLabContentSchema, GitLabCreateUpdateFileResponseSchema, GitLabDiffSchema, 
+CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateMergeRequestNoteEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateRepositorySchema, CreateGroupSchema, CreateWikiPageSchema, CreateGroupWikiPageSchema, DeleteBranchSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, EditProjectMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetBranchSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GitLabBlameEntrySchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetDeploymentSchema, GetEnvironmentSchema, GetNamespaceSchema, GitLabCiLintResultSchema, GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectMilestoneSchema, GetProjectSchema, GetRepositoryTreeSchema, GetUsersSchema, GetUserSchema, GitLabUserFullSchema, WhoAmISchema, GitLabCurrentUserSchema, GetWikiPageSchema, GitLabCommitSchema, GitLabCommitStatusSchema, GitLabCompareResultSchema, GitLabContentSchema, GitLabCreateUpdateFileResponseSchema, GitLabDiffSchema, 
 // Discussion Schemas
 GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
 // Draft Notes Schemas
-GitLabDraftNoteSchema, GitLabForkSchema, GitLabBranchSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestPipelineSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitStatusesSchema, ListBranchesSchema, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
-GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, MarkAllTodosDoneSchema, MarkTodoDoneSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, HealthCheckSchema, } from "./schemas.js";
-import { randomUUID } from "node:crypto";
+GitLabDraftNoteSchema, GitLabForkSchema, GitLabBranchSchema, GitLabGroupSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestPipelineSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitStatusesSchema, ListBranchesSchema, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
+GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, MarkAllTodosDoneSchema, MarkTodoDoneSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, HealthCheckSchema, } from "./schemas.js";
+import { randomUUID, createCipheriv, createDecipheriv, randomBytes, createHash } from "node:crypto";
 import { pino } from "pino";
 const logger = pino({
     level: process.env.LOG_LEVEL || "info",
@@ -937,6 +1044,14 @@ function getEffectiveProjectId(projectId) {
     }
     throw new Error("No project ID provided and GITLAB_PROJECT_ID is not set");
 }
+function rejectIfProjectScopedDeployment(toolName) {
+    if (GITLAB_PROJECT_ID) {
+        throw new Error(`${toolName} is not allowed when GITLAB_PROJECT_ID is set (server is locked to a single project)`);
+    }
+    if (GITLAB_ALLOWED_PROJECT_IDS.length > 0) {
+        throw new Error(`${toolName} is not allowed when GITLAB_ALLOWED_PROJECT_IDS is set (server access is restricted to configured projects)`);
+    }
+}
 /**
  * Create a fork of a GitLab project
  * 프로젝트 포크 생성 (Create a project fork)
@@ -4908,11 +5023,13 @@ async function downloadJobArtifacts(projectId, jobId, localPath) {
         throw new Error(`Job artifacts not found. The job may not have produced artifacts or the job ID is invalid.`);
     }
     await handleGitLabError(response);
-    const buffer = await response.arrayBuffer();
     const filename = `artifacts_job_${jobId}.zip`;
     const savePath = localPath ? path.join(localPath, filename) : filename;
     fs.mkdirSync(path.dirname(savePath), { recursive: true });
-    fs.writeFileSync(savePath, Buffer.from(buffer));
+    if (!response.body) {
+        throw new Error("No response body from GitLab");
+    }
+    await streamPipeline(response.body, fs.createWriteStream(savePath));
     return savePath;
 }
 /**
@@ -5416,6 +5533,33 @@ async function getCommitDiff(projectId, sha, full_diff) {
     }
     return allDiffs;
 }
+/**
+ * Get blame for a file at a specific ref.
+ *
+ * Wraps GitLab REST endpoint
+ *   GET /projects/:id/repository/files/:file_path/blame?ref=
+ * Returns an array of entries; each entry has `lines` (the source lines covered)
+ * and `commit` (the commit that last changed those lines: id, author, message, ...).
+ *
+ * @param {string} projectId  - Project ID or URL-encoded path
+ * @param {Omit<GetFileBlameOptions,"project_id">} options - file_path, ref, optional range_start/range_end
+ * @returns {Promise<GitLabBlameEntry[]>} Blame entries in source order.
+ */
+async function getFileBlame(projectId, options) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/repository/files/${encodeURIComponent(options.file_path)}/blame`);
+    url.searchParams.append("ref", options.ref);
+    if (options.range_start !== undefined && options.range_end !== undefined) {
+        url.searchParams.append("range[start]", options.range_start.toString());
+        url.searchParams.append("range[end]", options.range_end.toString());
+    }
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return z.array(GitLabBlameEntrySchema).parse(data);
+}
 /**
  * List statuses for a commit.
  *
@@ -5591,22 +5735,42 @@ async function listGroupIterations(groupId, options = {}) {
     return z.array(GroupIteration).parse(data);
 }
 /**
- * Upload a file to a GitLab project for use in markdown content
+ * Upload a file to a GitLab project for use in markdown content.
+ *
+ * Accepts either a local file path or inline base64-encoded content
+ * (the latter is useful for remote deployments where the client cannot
+ * write to the server's filesystem).
  *
  * @param {string} projectId - The ID or URL-encoded path of the project
- * @param {string} filePath - Path to the local file to upload
+ * @param {string} filePath - Path to the local file to upload (optional if content provided)
+ * @param {string} content - Base64-encoded file content (optional if filePath provided)
+ * @param {string} filename - Filename for the uploaded content (required when content provided)
  * @returns {Promise<GitLabMarkdownUpload>} The upload response
  */
-async function markdownUpload(projectId, filePath) {
+async function markdownUpload(projectId, filePath, content, filename) {
     projectId = decodeURIComponent(projectId);
     const effectiveProjectId = getEffectiveProjectId(projectId);
-    // Check if file exists
-    if (!fs.existsSync(filePath)) {
-        throw new Error(`File not found: ${filePath}`);
+    let fileBuffer;
+    let fileName;
+    if (IS_REMOTE && filePath) {
+        throw new Error("file_path cannot be used in remote mode. Provide base64-encoded content and filename instead.");
+    }
+    if (content) {
+        // Inline content mode (remote deployments)
+        fileBuffer = Buffer.from(content, "base64");
+        fileName = filename || "upload";
+    }
+    else if (filePath) {
+        // Local file mode
+        if (!fs.existsSync(filePath)) {
+            throw new Error(`File not found: ${filePath}`);
+        }
+        fileBuffer = fs.readFileSync(filePath);
+        fileName = path.basename(filePath);
+    }
+    else {
+        throw new Error("Either file_path or content must be provided");
     }
-    // Read the file
-    const fileBuffer = fs.readFileSync(filePath);
-    const fileName = path.basename(filePath);
     // Create form data
     const FormData = (await import("form-data")).default;
     const form = new FormData();
@@ -5652,8 +5816,6 @@ async function downloadAttachment(projectId, secret, filename, localPath) {
     if (!response.ok) {
         await handleGitLabError(response);
     }
-    // Get the file content as buffer
-    const buffer = Buffer.from(await response.arrayBuffer());
     const mimeType = getImageMimeType(filename);
     // For non-image files, always save to disk.
     // For image files, only save to disk if local_path is explicitly provided.
@@ -5676,9 +5838,15 @@ async function downloadAttachment(projectId, secret, filename, localPath) {
         if (!fs.existsSync(dir)) {
             fs.mkdirSync(dir, { recursive: true });
         }
-        fs.writeFileSync(savePath, buffer);
-        return { buffer, filename, mimeType, savedPath: savePath };
+        // Stream directly to disk instead of buffering in memory
+        if (!response.body) {
+            throw new Error("No response body from GitLab");
+        }
+        await streamPipeline(response.body, fs.createWriteStream(savePath));
+        return { buffer: Buffer.alloc(0), filename, mimeType, savedPath: savePath };
     }
+    // Images returned inline — buffer into memory for base64 encoding
+    const buffer = Buffer.from(await response.arrayBuffer());
     return { buffer, filename, mimeType };
 }
 /**
@@ -5959,6 +6127,10 @@ async function handleToolCall(params) {
                 delete args.work_item_iid;
             }
         }
+        // Centralized read-only guard: reject write tools even if client bypasses list_tools filtering
+        if (GITLAB_READ_ONLY_MODE && !readOnlyTools.has(params.name)) {
+            throw new Error(`${params.name} is not allowed in read-only mode`);
+        }
         logger.info({ tool: params.name, event: "tool_call_start" }, `tool_call_start: ${params.name}`);
         switch (params.name) {
             case "execute_graphql": {
@@ -6009,9 +6181,7 @@ async function handleToolCall(params) {
                 }
             }
             case "fork_repository": {
-                if (GITLAB_PROJECT_ID) {
-                    throw new Error("Direct project ID is set. So fork_repository is not allowed");
-                }
+                rejectIfProjectScopedDeployment("fork_repository");
                 const forkArgs = ForkRepositorySchema.parse(params.arguments);
                 try {
                     const forkedProject = await forkProject(forkArgs.project_id, forkArgs.namespace);
@@ -6110,15 +6280,40 @@ async function handleToolCall(params) {
                 };
             }
             case "create_repository": {
-                if (GITLAB_PROJECT_ID) {
-                    throw new Error("Direct project ID is set. So fork_repository is not allowed");
-                }
+                rejectIfProjectScopedDeployment("create_repository");
                 const args = CreateRepositorySchema.parse(params.arguments);
                 const repository = await createRepository(args);
                 return {
                     content: [{ type: "text", text: JSON.stringify(repository, null, 2) }],
                 };
             }
+            case "create_group": {
+                rejectIfProjectScopedDeployment("create_group");
+                const args = CreateGroupSchema.parse(params.arguments);
+                const url = new URL(`${getEffectiveApiUrl()}/groups`);
+                const body = {
+                    name: args.name,
+                    path: args.path,
+                };
+                if (args.description)
+                    body.description = args.description;
+                if (args.visibility)
+                    body.visibility = args.visibility;
+                if (args.parent_id)
+                    body.parent_id = args.parent_id;
+                const response = await fetch(url.toString(), {
+                    ...getFetchConfig(),
+                    method: "POST",
+                    headers: { ...getFetchConfig().headers, "Content-Type": "application/json" },
+                    body: JSON.stringify(body),
+                });
+                await handleGitLabError(response);
+                const data = await response.json();
+                const group = GitLabGroupSchema.parse(data);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(group, null, 2) }],
+                };
+            }
             case "get_file_contents": {
                 const args = GetFileContentsSchema.parse(params.arguments);
                 const contents = await getFileContents(args.project_id, args.file_path, args.ref);
@@ -7293,6 +7488,15 @@ async function handleToolCall(params) {
             }
             case "download_job_artifacts": {
                 const { project_id, job_id, local_path } = DownloadJobArtifactsSchema.parse(params.arguments);
+                if (IS_REMOTE) {
+                    if (local_path) {
+                        throw new Error("local_path cannot be used in remote mode — use the returned download_url instead");
+                    }
+                    const downloadUrl = buildDownloadUrl("job-artifacts", { project_id, job_id });
+                    return {
+                        content: [{ type: "text", text: JSON.stringify({ download_url: downloadUrl, filename: `artifacts_job_${job_id}.zip` }, null, 2) }],
+                    };
+                }
                 const filePath = await downloadJobArtifacts(project_id, job_id, local_path);
                 return {
                     content: [
@@ -7466,6 +7670,14 @@ async function handleToolCall(params) {
                     content: [{ type: "text", text: JSON.stringify(diff, null, 2) }],
                 };
             }
+            case "get_file_blame": {
+                const args = GetFileBlameSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const blame = await getFileBlame(project_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(blame, null, 2) }],
+                };
+            }
             case "list_commit_statuses": {
                 const args = ListCommitStatusesSchema.parse(params.arguments);
                 const { project_id, sha, ...options } = args;
@@ -7490,6 +7702,13 @@ async function handleToolCall(params) {
                 };
             }
             case "upload_markdown": {
+                if (IS_REMOTE) {
+                    const args = MarkdownUploadRemoteSchema.parse(params.arguments);
+                    const upload = await markdownUpload(args.project_id, undefined, args.content, args.filename);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(upload, null, 2) }],
+                    };
+                }
                 const args = MarkdownUploadSchema.parse(params.arguments);
                 const upload = await markdownUpload(args.project_id, args.file_path);
                 return {
@@ -7498,6 +7717,19 @@ async function handleToolCall(params) {
             }
             case "download_attachment": {
                 const args = DownloadAttachmentSchema.parse(params.arguments);
+                if (IS_REMOTE && args.local_path) {
+                    throw new Error("local_path cannot be used in remote mode — use the returned download_url instead");
+                }
+                // In remote mode for non-image files, return proxy URL
+                const mimeType = getImageMimeType(args.filename);
+                if (IS_REMOTE && !mimeType) {
+                    const downloadUrl = buildDownloadUrl("attachment", {
+                        project_id: args.project_id, secret: args.secret, filename: args.filename,
+                    });
+                    return {
+                        content: [{ type: "text", text: JSON.stringify({ download_url: downloadUrl, filename: args.filename }, null, 2) }],
+                    };
+                }
                 const result = await downloadAttachment(args.project_id, args.secret, args.filename, args.local_path);
                 if (result.mimeType && !args.local_path) {
                     // Return image inline as base64 so the AI can see it
@@ -7593,6 +7825,14 @@ async function handleToolCall(params) {
             }
             case "download_release_asset": {
                 const args = DownloadReleaseAssetSchema.parse(params.arguments);
+                if (IS_REMOTE) {
+                    const downloadUrl = buildDownloadUrl("release-asset", {
+                        project_id: args.project_id, tag_name: args.tag_name, direct_asset_path: args.direct_asset_path,
+                    });
+                    return {
+                        content: [{ type: "text", text: JSON.stringify({ download_url: downloadUrl, filename: args.direct_asset_path.split("/").pop() || args.direct_asset_path }, null, 2) }],
+                    };
+                }
                 const assetContent = await downloadReleaseAsset(args.project_id, args.tag_name, args.direct_asset_path);
                 return {
                     content: [{ type: "text", text: assetContent }],
@@ -7789,6 +8029,182 @@ async function startStdioServer() {
     };
     await serverInstance.connect(transport);
 }
+/**
+ * Register the /downloads/:type proxy endpoint on an Express app.
+ * Streams GitLab API responses directly to the client. Auth is read from
+ * an encrypted `_token` query param (self-contained URL) or from request headers.
+ */
+function registerDownloadProxy(app, maxRequestsPerMinute = Number.parseInt(process.env.MAX_REQUESTS_PER_MINUTE || "60", 10)) {
+    const downloadRateLimits = {};
+    let lastEviction = Date.now();
+    const checkDownloadRateLimit = (token) => {
+        const now = Date.now();
+        // Evict expired entries every 60s to prevent unbounded growth
+        if (now - lastEviction > 60000) {
+            for (const key of Object.keys(downloadRateLimits)) {
+                if (now > downloadRateLimits[key].resetAt)
+                    delete downloadRateLimits[key];
+            }
+            lastEviction = now;
+        }
+        const entry = downloadRateLimits[token];
+        if (!entry || now > entry.resetAt) {
+            downloadRateLimits[token] = { count: 1, resetAt: now + 60000 };
+            return true;
+        }
+        if (entry.count >= maxRequestsPerMinute)
+            return false;
+        entry.count++;
+        return true;
+    };
+    app.get("/downloads/:type", async (req, res) => {
+        const headers = { Accept: "application/octet-stream" };
+        let rateLimitKey;
+        // Try embedded encrypted token first (self-contained URL), then headers
+        const encryptedToken = req.query._token;
+        let tokenApiUrl;
+        if (encryptedToken) {
+            const decrypted = decryptDownloadToken(encryptedToken);
+            if (!decrypted) {
+                res.status(401).json({ error: "Invalid or expired download token" });
+                return;
+            }
+            // Verify resource binding — token must match the requested type and params
+            if (decrypted.resourceType || decrypted.resourceParams) {
+                const { type } = req.params;
+                const queryParams = {};
+                for (const [k, v] of Object.entries(req.query)) {
+                    if (k !== "_token" && typeof v === "string")
+                        queryParams[k] = v;
+                }
+                if (decrypted.resourceType !== type ||
+                    JSON.stringify(decrypted.resourceParams) !== JSON.stringify(queryParams)) {
+                    res.status(403).json({ error: "Download token does not match the requested resource" });
+                    return;
+                }
+            }
+            headers[decrypted.header] = decrypted.token;
+            rateLimitKey = decrypted.token;
+            tokenApiUrl = decrypted.apiUrl;
+        }
+        else {
+            const privateToken = req.headers["private-token"];
+            const jobToken = req.headers["job-token"];
+            const authHeader = req.headers["authorization"];
+            if (privateToken) {
+                headers["Private-Token"] = privateToken;
+                rateLimitKey = privateToken;
+            }
+            else if (jobToken) {
+                headers["JOB-TOKEN"] = jobToken;
+                rateLimitKey = jobToken;
+            }
+            else if (authHeader) {
+                headers["Authorization"] = authHeader;
+                rateLimitKey = authHeader;
+            }
+            else {
+                res.status(401).json({ error: "Authentication required" });
+                return;
+            }
+        }
+        if (!checkDownloadRateLimit(rateLimitKey)) {
+            res.status(429).json({ error: "Rate limit exceeded" });
+            return;
+        }
+        // API URL: prefer token-embedded URL, then X-GitLab-API-URL header, then default
+        let apiUrl = tokenApiUrl || GITLAB_API_URL;
+        if (!tokenApiUrl) {
+            const dynamicApiUrl = req.headers["x-gitlab-api-url"]?.trim();
+            if (ENABLE_DYNAMIC_API_URL && dynamicApiUrl) {
+                try {
+                    new URL(dynamicApiUrl);
+                    apiUrl = normalizeGitLabApiUrl(dynamicApiUrl);
+                }
+                catch {
+                    res.status(400).json({ error: "Invalid X-GitLab-API-URL" });
+                    return;
+                }
+            }
+        }
+        const { type } = req.params;
+        let gitlabUrl;
+        try {
+            switch (type) {
+                case "job-artifacts": {
+                    const { project_id, job_id } = req.query;
+                    if (!project_id || !job_id) {
+                        res.status(400).json({ error: "project_id and job_id are required" });
+                        return;
+                    }
+                    const effectiveProjectId = getEffectiveProjectId(decodeURIComponent(project_id));
+                    gitlabUrl = `${apiUrl}/projects/${encodeURIComponent(effectiveProjectId)}/jobs/${job_id}/artifacts`;
+                    break;
+                }
+                case "attachment": {
+                    const { project_id, secret, filename } = req.query;
+                    if (!project_id || !secret || !filename) {
+                        res.status(400).json({ error: "project_id, secret, and filename are required" });
+                        return;
+                    }
+                    const effectiveProjectId = getEffectiveProjectId(decodeURIComponent(project_id));
+                    gitlabUrl = `${apiUrl}/projects/${encodeURIComponent(effectiveProjectId)}/uploads/${secret}/${filename}`;
+                    break;
+                }
+                case "release-asset": {
+                    const { project_id, tag_name, direct_asset_path } = req.query;
+                    if (!project_id || !tag_name || !direct_asset_path) {
+                        res.status(400).json({ error: "project_id, tag_name, and direct_asset_path are required" });
+                        return;
+                    }
+                    const effectiveProjectId = getEffectiveProjectId(decodeURIComponent(project_id));
+                    gitlabUrl = `${apiUrl}/projects/${encodeURIComponent(effectiveProjectId)}/releases/${encodeURIComponent(tag_name)}/downloads/${direct_asset_path}`;
+                    break;
+                }
+                default:
+                    res.status(400).json({ error: `Unknown download type: ${type}` });
+                    return;
+            }
+        }
+        catch (e) {
+            // getEffectiveProjectId throws on access-denied
+            const message = e instanceof Error ? e.message : "Invalid parameters";
+            res.status(403).json({ error: message });
+            return;
+        }
+        try {
+            const agent = clientPool.getAgentFunctionForUrl(apiUrl);
+            const gitlabResponse = await nodeFetch(gitlabUrl, { headers, agent });
+            if (!gitlabResponse.ok) {
+                res.status(gitlabResponse.status).json({
+                    error: `GitLab API error: ${gitlabResponse.status} ${gitlabResponse.statusText}`,
+                });
+                return;
+            }
+            const contentType = gitlabResponse.headers.get("content-type");
+            const contentDisposition = gitlabResponse.headers.get("content-disposition");
+            const contentLength = gitlabResponse.headers.get("content-length");
+            if (contentType)
+                res.setHeader("Content-Type", contentType);
+            if (contentDisposition)
+                res.setHeader("Content-Disposition", contentDisposition);
+            if (contentLength)
+                res.setHeader("Content-Length", contentLength);
+            if (gitlabResponse.body) {
+                gitlabResponse.body.pipe(res);
+            }
+            else {
+                res.status(502).json({ error: "No response body from GitLab" });
+            }
+        }
+        catch (error) {
+            logger.error("Download proxy error:", error);
+            if (!res.headersSent) {
+                res.status(502).json({ error: "Failed to proxy download from GitLab" });
+            }
+        }
+    });
+}
 /**
  * Start server with traditional SSE transport
  */
@@ -7815,6 +8231,7 @@ async function startSSEServer() {
             res.status(400).send("No transport found for sessionId");
         }
     });
+    registerDownloadProxy(app);
     app.get("/health", (_, res) => {
         res.status(200).json({
             status: "healthy",
@@ -8184,6 +8601,7 @@ async function startStreamableHTTPServer() {
     };
     // Configure Express middleware
     app.use(express.json());
+    registerDownloadProxy(app);
     // MCP OAuth — mount auth router and prepare bearer-auth middleware
     if (GITLAB_MCP_OAUTH) {
         // Trust first proxy so express-rate-limit uses X-Forwarded-For for real client IP.