@zereight/mcp-gitlab 2.1.16 → 2.1.18

package/README.md

@@ -647,6 +647,20 @@ Register the skill directory in your AI client to get optimal tool usage guidanc
 154. `search_group_code` - Search for code within a specific GitLab group (requires advanced search or exact code search to be enabled)
 155. `execute_graphql` - Execute a GitLab GraphQL query
 156. `list_merge_request_pipelines` - List pipelines for a merge request with pagination support
+157. `list_project_variables` - List CI/CD variables for a project with optional environment scope filter
+158. `get_project_variable` - Get a single CI/CD variable from a project by key, with optional environment scope filter
+159. `create_project_variable` - Create a new CI/CD variable in a project
+160. `update_project_variable` - Update an existing CI/CD variable in a project, with optional filter to disambiguate by environment scope
+161. `delete_project_variable` - Delete a CI/CD variable from a project, with optional filter to disambiguate by environment scope
+162. `list_group_variables` - List CI/CD variables for a group with optional environment scope filter
+163. `get_group_variable` - Get a single CI/CD variable from a group by key, with optional environment scope filter
+164. `create_group_variable` - Create a new CI/CD variable in a group
+165. `update_group_variable` - Update an existing CI/CD variable in a group, with optional filter to disambiguate by environment scope
+166. `delete_group_variable` - Delete a CI/CD variable from a group, with optional filter to disambiguate by environment scope
+167. `get_dependency_proxy_settings` - Get dependency proxy settings for a group (enabled status, blob count, total size, image prefix, TTL policy)
+168. `update_dependency_proxy_settings` - Update dependency proxy settings for a group (enable/disable, credentials for authenticated Docker Hub pulls)
+169. `list_dependency_proxy_blobs` - List cached dependency proxy blobs for a group with cursor-based pagination
+170. `purge_dependency_proxy_cache` - Schedule purge of all cached dependency proxy blobs for a group
 
 <!-- TOOLS-END -->
 

package/build/index.js

@@ -139,7 +139,7 @@ CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMerg
 GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
 // Draft Notes Schemas
-GitLabDraftNoteSchema, GitLabForkSchema, GitLabBranchSchema, GitLabGroupSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestPipelineSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitStatusesSchema, ListBranchesSchema, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
+GitLabDraftNoteSchema, GitLabForkSchema, GitLabBranchSchema, GitLabGroupSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestPipelineSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitStatusesSchema, ListBranchesSchema, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, GitLabCiVariableSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GitLabDependencyProxySchema, GitLabDependencyProxyBlobSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
 GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, MarkAllTodosDoneSchema, MarkTodoDoneSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, HealthCheckSchema, } from "./schemas.js";
 import { randomUUID, createCipheriv, createDecipheriv, randomBytes, createHash } from "node:crypto";
 import { pino } from "pino";
@@ -1389,16 +1389,9 @@ async function executeGraphQL(query, variables = {}) {
  * Resolve a project path and issue IID to a work item GraphQL GID.
  */
 async function resolveWorkItemGID(projectId, issueIid) {
-    projectId = decodeURIComponent(projectId);
-    const effectiveProjectId = getEffectiveProjectId(projectId);
-    // First get the project path via REST (needed for GraphQL namespace query)
-    const projectUrl = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}`);
-    const projectResponse = await fetch(projectUrl.toString(), {
-        ...getFetchConfig(),
-    });
-    await handleGitLabError(projectResponse);
-    const project = await projectResponse.json();
-    const projectPath = project.path_with_namespace;
+    // resolveProjectPath handles both project and group paths (including the
+    // group fallback), so work item tools work for group-level namespaces too.
+    const projectPath = await resolveProjectPath(projectId);
     // Resolve work item GID via GraphQL
     const data = await executeGraphQL(`query($path: ID!, $iid: String!) {
       namespace(fullPath: $path) {
@@ -1521,15 +1514,7 @@ async function removeIssueParent(projectId, issueIid) {
  * Requires Premium/Ultimate with configurable statuses enabled.
  */
 async function listIssueStatuses(projectId, workItemType = "issue") {
-    projectId = decodeURIComponent(projectId);
-    const effectiveProjectId = getEffectiveProjectId(projectId);
-    // Get project path
-    const projectUrl = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}`);
-    const projectResponse = await fetch(projectUrl.toString(), {
-        ...getFetchConfig(),
-    });
-    await handleGitLabError(projectResponse);
-    const project = await projectResponse.json();
+    const projectPath = await resolveProjectPath(projectId);
     const typeName = WORK_ITEM_TYPE_NAMES[workItemType] || "Issue";
     const data = await executeGraphQL(`query($path: ID!, $typeName: IssueType) {
       namespace(fullPath: $path) {
@@ -1557,7 +1542,7 @@ async function listIssueStatuses(projectId, workItemType = "issue") {
           }
         }
       }
-    }`, { path: project.path_with_namespace, typeName: typeName.replace(/ /g, "_").toUpperCase() });
+    }`, { path: projectPath, typeName: typeName.replace(/ /g, "_").toUpperCase() });
     const typeNodes = data.namespace?.workItemTypes?.nodes;
     if (!typeNodes || typeNodes.length === 0) {
         throw new Error(`Work item type '${typeName}' not found in project`);
@@ -1953,6 +1938,22 @@ async function resolveProjectPath(projectId) {
     const projectResponse = await fetch(projectUrl.toString(), {
         ...getFetchConfig(),
     });
+    // On project 404, fall back to groups — but only for path-like identifiers.
+    // Numeric IDs must not fall back: group and project IDs share no namespace,
+    // so a numeric project 404 should fail immediately rather than silently
+    // resolving to an unrelated group with the same integer ID.
+    if (projectResponse.status === 404 && !/^\d+$/.test(effectiveProjectId)) {
+        const groupUrl = new URL(`${getEffectiveApiUrl()}/groups/${encodeURIComponent(effectiveProjectId)}`);
+        const groupResponse = await fetch(groupUrl.toString(), {
+            ...getFetchConfig(),
+        });
+        if (groupResponse.ok) {
+            const group = await groupResponse.json();
+            return group.full_path;
+        }
+        // Surface the group error
+        await handleGitLabError(groupResponse);
+    }
     await handleGitLabError(projectResponse);
     const project = await projectResponse.json();
     return project.path_with_namespace;
@@ -5741,6 +5742,217 @@ async function listGroupIterations(groupId, options = {}) {
     const data = await response.json();
     return z.array(GroupIteration).parse(data);
 }
+// --- CI/CD Variables ---
+async function listProjectVariables(projectId, options = {}) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/variables`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (key === "filter" && typeof value === "object" && value !== null) {
+            Object.entries(value).forEach(([fKey, fVal]) => {
+                url.searchParams.append(`filter[${fKey}]`, fVal);
+            });
+        }
+        else if (typeof value === "boolean") {
+            url.searchParams.append(key, value ? "true" : "false");
+        }
+        else {
+            url.searchParams.append(key, String(value));
+        }
+    });
+    const response = await fetch(url.toString(), getFetchConfig());
+    await handleGitLabError(response);
+    const data = await response.json();
+    return z.array(GitLabCiVariableSchema).parse(data);
+}
+async function getProjectVariable(projectId, key, filter) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/variables/${encodeURIComponent(key)}`);
+    if (filter?.environment_scope) {
+        url.searchParams.append("filter[environment_scope]", filter.environment_scope);
+    }
+    const response = await fetch(url.toString(), getFetchConfig());
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabCiVariableSchema.parse(data);
+}
+async function createProjectVariable(projectId, options) {
+    projectId = decodeURIComponent(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/variables`, { ...getFetchConfig(), method: "POST", body: JSON.stringify(options) });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabCiVariableSchema.parse(data);
+}
+async function updateProjectVariable(projectId, key, options) {
+    projectId = decodeURIComponent(projectId);
+    const { filter, ...body } = options;
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/variables/${encodeURIComponent(key)}`);
+    if (filter?.environment_scope) {
+        url.searchParams.append("filter[environment_scope]", filter.environment_scope);
+    }
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+        method: "PUT",
+        body: JSON.stringify(body),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabCiVariableSchema.parse(data);
+}
+async function deleteProjectVariable(projectId, key, filter) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/variables/${encodeURIComponent(key)}`);
+    if (filter?.environment_scope) {
+        url.searchParams.append("filter[environment_scope]", filter.environment_scope);
+    }
+    const response = await fetch(url.toString(), { ...getFetchConfig(), method: "DELETE" });
+    await handleGitLabError(response);
+}
+async function listGroupVariables(groupId, options = {}) {
+    const encoded = encodeURIComponent(decodeURIComponent(groupId));
+    const url = new URL(`${getEffectiveApiUrl()}/groups/${encoded}/variables`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (key === "filter" && typeof value === "object" && value !== null) {
+            Object.entries(value).forEach(([fKey, fVal]) => {
+                url.searchParams.append(`filter[${fKey}]`, fVal);
+            });
+        }
+        else if (typeof value === "boolean") {
+            url.searchParams.append(key, value ? "true" : "false");
+        }
+        else {
+            url.searchParams.append(key, String(value));
+        }
+    });
+    const response = await fetch(url.toString(), getFetchConfig());
+    await handleGitLabError(response);
+    const data = await response.json();
+    return z.array(GitLabCiVariableSchema).parse(data);
+}
+async function getGroupVariable(groupId, key, filter) {
+    const encoded = encodeURIComponent(decodeURIComponent(groupId));
+    const url = new URL(`${getEffectiveApiUrl()}/groups/${encoded}/variables/${encodeURIComponent(key)}`);
+    if (filter?.environment_scope) {
+        url.searchParams.append("filter[environment_scope]", filter.environment_scope);
+    }
+    const response = await fetch(url.toString(), getFetchConfig());
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabCiVariableSchema.parse(data);
+}
+async function createGroupVariable(groupId, options) {
+    const encoded = encodeURIComponent(decodeURIComponent(groupId));
+    const response = await fetch(`${getEffectiveApiUrl()}/groups/${encoded}/variables`, {
+        ...getFetchConfig(),
+        method: "POST",
+        body: JSON.stringify(options),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabCiVariableSchema.parse(data);
+}
+async function updateGroupVariable(groupId, key, options) {
+    const encoded = encodeURIComponent(decodeURIComponent(groupId));
+    const { filter, ...body } = options;
+    const url = new URL(`${getEffectiveApiUrl()}/groups/${encoded}/variables/${encodeURIComponent(key)}`);
+    if (filter?.environment_scope) {
+        url.searchParams.append("filter[environment_scope]", filter.environment_scope);
+    }
+    const response = await fetch(url.toString(), { ...getFetchConfig(), method: "PUT", body: JSON.stringify(body) });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabCiVariableSchema.parse(data);
+}
+async function deleteGroupVariable(groupId, key, filter) {
+    const encoded = encodeURIComponent(decodeURIComponent(groupId));
+    const url = new URL(`${getEffectiveApiUrl()}/groups/${encoded}/variables/${encodeURIComponent(key)}`);
+    if (filter?.environment_scope) {
+        url.searchParams.append("filter[environment_scope]", filter.environment_scope);
+    }
+    const response = await fetch(url.toString(), { ...getFetchConfig(), method: "DELETE" });
+    await handleGitLabError(response);
+}
+// --- Dependency Proxy ---
+async function resolveGroupFullPath(groupId) {
+    const decoded = decodeURIComponent(groupId);
+    if (/^\d+$/.test(decoded)) {
+        const response = await fetch(`${getEffectiveApiUrl()}/groups/${decoded}`, getFetchConfig());
+        await handleGitLabError(response);
+        const data = z.object({ full_path: z.string() }).parse(await response.json());
+        return data.full_path;
+    }
+    return decoded;
+}
+async function getDependencyProxySettings(groupPath) {
+    const fullPath = await resolveGroupFullPath(groupPath);
+    const data = await executeGraphQL(`query($fullPath: ID!) {
+      group(fullPath: $fullPath) {
+        dependencyProxySetting { enabled }
+        dependencyProxyBlobCount
+        dependencyProxyTotalSize
+        dependencyProxyImagePrefix
+        dependencyProxyImageTtlPolicy { enabled ttl }
+      }
+    }`, { fullPath });
+    const g = data.group;
+    if (!g)
+        throw new Error(`Group not found: ${fullPath}`);
+    return GitLabDependencyProxySchema.parse({
+        enabled: g.dependencyProxySetting?.enabled ?? false,
+        blob_count: g.dependencyProxyBlobCount,
+        total_size: g.dependencyProxyTotalSize,
+        image_prefix: g.dependencyProxyImagePrefix,
+        ttl_policy: g.dependencyProxyImageTtlPolicy,
+    });
+}
+async function updateDependencyProxySettings(groupPath, options) {
+    if (options.enabled === undefined && options.identity === undefined && options.secret === undefined) {
+        throw new Error("At least one of enabled, identity, or secret must be provided");
+    }
+    const fullPath = await resolveGroupFullPath(groupPath);
+    const input = { groupPath: fullPath };
+    if (options.enabled !== undefined)
+        input["enabled"] = options.enabled;
+    if (options.identity !== undefined)
+        input["identity"] = options.identity;
+    if (options.secret !== undefined)
+        input["secret"] = options.secret;
+    const mutationResult = await executeGraphQL(`mutation($input: UpdateDependencyProxySettingsInput!) {
+      updateDependencyProxySettings(input: $input) { errors }
+    }`, { input });
+    const errors = mutationResult.updateDependencyProxySettings?.errors;
+    if (errors && errors.length > 0) {
+        throw new Error(`Failed to update dependency proxy settings: ${errors.join(", ")}`);
+    }
+    return getDependencyProxySettings(fullPath);
+}
+async function listDependencyProxyBlobs(groupPath, options = {}) {
+    const fullPath = await resolveGroupFullPath(groupPath);
+    const data = await executeGraphQL(`query($fullPath: ID!, $first: Int, $after: String) {
+      group(fullPath: $fullPath) {
+        dependencyProxyBlobs(first: $first, after: $after) {
+          nodes { fileName size createdAt }
+          pageInfo { hasNextPage endCursor }
+        }
+      }
+    }`, { fullPath, first: options.first ?? 20, after: options.after });
+    const conn = data.group?.dependencyProxyBlobs;
+    if (!conn)
+        throw new Error(`Group not found or dependency proxy not enabled: ${fullPath}`);
+    return {
+        blobs: conn.nodes.map(n => GitLabDependencyProxyBlobSchema.parse({ file_name: n.fileName, size: n.size, created_at: n.createdAt })),
+        pageInfo: conn.pageInfo,
+    };
+}
+async function purgeDependencyProxyCache(groupId) {
+    const encoded = encodeURIComponent(decodeURIComponent(groupId));
+    const url = new URL(`${getEffectiveApiUrl()}/groups/${encoded}/dependency_proxy/cache`);
+    const response = await fetch(url.toString(), { ...getFetchConfig(), method: "DELETE" });
+    await handleGitLabError(response);
+}
 /**
  * Upload a file to a GitLab project for use in markdown content.
  *
@@ -7711,6 +7923,121 @@ async function handleToolCall(params) {
                     content: [{ type: "text", text: JSON.stringify(iterations, null, 2) }],
                 };
             }
+            // --- CI/CD Variables ---
+            case "list_project_variables": {
+                const args = ListProjectVariablesSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const variables = await listProjectVariables(project_id, options);
+                return { content: [{ type: "text", text: JSON.stringify(variables, null, 2) }] };
+            }
+            case "get_project_variable": {
+                const args = GetProjectVariableSchema.parse(params.arguments);
+                const variable = await getProjectVariable(args.project_id, args.key, args.filter);
+                return { content: [{ type: "text", text: JSON.stringify(variable, null, 2) }] };
+            }
+            case "create_project_variable": {
+                const args = CreateProjectVariableSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const variable = await createProjectVariable(project_id, options);
+                return { content: [{ type: "text", text: JSON.stringify(variable, null, 2) }] };
+            }
+            case "update_project_variable": {
+                const args = UpdateProjectVariableSchema.parse(params.arguments);
+                const { project_id, key, ...options } = args;
+                const variable = await updateProjectVariable(project_id, key, options);
+                return { content: [{ type: "text", text: JSON.stringify(variable, null, 2) }] };
+            }
+            case "delete_project_variable": {
+                const args = DeleteProjectVariableSchema.parse(params.arguments);
+                await deleteProjectVariable(args.project_id, args.key, args.filter);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({ status: "success", message: `Variable '${args.key}' deleted from project` }, null, 2),
+                        },
+                    ],
+                };
+            }
+            case "list_group_variables": {
+                rejectIfProjectScopedDeployment("list_group_variables");
+                const args = ListGroupVariablesSchema.parse(params.arguments);
+                const { group_id, ...options } = args;
+                const variables = await listGroupVariables(group_id, options);
+                return { content: [{ type: "text", text: JSON.stringify(variables, null, 2) }] };
+            }
+            case "get_group_variable": {
+                rejectIfProjectScopedDeployment("get_group_variable");
+                const args = GetGroupVariableSchema.parse(params.arguments);
+                const variable = await getGroupVariable(args.group_id, args.key, args.filter);
+                return { content: [{ type: "text", text: JSON.stringify(variable, null, 2) }] };
+            }
+            case "create_group_variable": {
+                rejectIfProjectScopedDeployment("create_group_variable");
+                const args = CreateGroupVariableSchema.parse(params.arguments);
+                const { group_id, ...options } = args;
+                const variable = await createGroupVariable(group_id, options);
+                return { content: [{ type: "text", text: JSON.stringify(variable, null, 2) }] };
+            }
+            case "update_group_variable": {
+                rejectIfProjectScopedDeployment("update_group_variable");
+                const args = UpdateGroupVariableSchema.parse(params.arguments);
+                const { group_id, key, ...options } = args;
+                const variable = await updateGroupVariable(group_id, key, options);
+                return { content: [{ type: "text", text: JSON.stringify(variable, null, 2) }] };
+            }
+            case "delete_group_variable": {
+                rejectIfProjectScopedDeployment("delete_group_variable");
+                const args = DeleteGroupVariableSchema.parse(params.arguments);
+                await deleteGroupVariable(args.group_id, args.key, args.filter);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({ status: "success", message: `Variable '${args.key}' deleted from group` }, null, 2),
+                        },
+                    ],
+                };
+            }
+            case "get_dependency_proxy_settings": {
+                rejectIfProjectScopedDeployment("get_dependency_proxy_settings");
+                const args = GetDependencyProxySettingsSchema.parse(params.arguments);
+                const settings = await getDependencyProxySettings(args.group_id);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(settings, null, 2) }],
+                };
+            }
+            case "update_dependency_proxy_settings": {
+                rejectIfProjectScopedDeployment("update_dependency_proxy_settings");
+                const args = UpdateDependencyProxySettingsSchema.parse(params.arguments);
+                const { group_id, ...options } = args;
+                const settings = await updateDependencyProxySettings(group_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(settings, null, 2) }],
+                };
+            }
+            case "list_dependency_proxy_blobs": {
+                rejectIfProjectScopedDeployment("list_dependency_proxy_blobs");
+                const args = ListDependencyProxyBlobsSchema.parse(params.arguments);
+                const { group_id, ...options } = args;
+                const result = await listDependencyProxyBlobs(group_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+                };
+            }
+            case "purge_dependency_proxy_cache": {
+                rejectIfProjectScopedDeployment("purge_dependency_proxy_cache");
+                const args = PurgeDependencyProxyCacheSchema.parse(params.arguments);
+                await purgeDependencyProxyCache(args.group_id);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({ status: "success", message: "Dependency proxy cache purge scheduled" }, null, 2),
+                        },
+                    ],
+                };
+            }
             case "upload_markdown": {
                 if (IS_REMOTE) {
                     const args = MarkdownUploadRemoteSchema.parse(params.arguments);