@zereight/mcp-gitlab 2.1.45 → 2.1.47

package/build/tools/registry.js

@@ -1,7 +1,7 @@
 import { zodToJsonSchema } from "zod-to-json-schema";
 import { toJSONSchema } from "../utils/schema.js";
 import { USE_GITLAB_WIKI, USE_MILESTONE, USE_PIPELINE, SSE, STREAMABLE_HTTP, } from "../config.js";
-import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupMilestonesSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListPipelinesSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, } from "../schemas.js";
+import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupMilestonesSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListPipelinesSchema, ListGroupMembersSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, } from "../schemas.js";
 const IS_REMOTE = SSE || STREAMABLE_HTTP;
 // Define all available tools
 export const allTools = [
@@ -449,6 +449,11 @@ export const allTools = [
         description: "List members of a GitLab project",
         inputSchema: toJSONSchema(ListProjectMembersSchema),
     },
+    {
+        name: "list_group_members",
+        description: "List members of a GitLab group with optional name or username search",
+        inputSchema: toJSONSchema(ListGroupMembersSchema),
+    },
     {
         name: "list_labels",
         description: "List labels for a project",
@@ -1161,6 +1166,7 @@ export const readOnlyTools = new Set([
     "get_project",
     "list_projects",
     "list_project_members",
+    "list_group_members",
     "get_pipeline",
     "list_pipelines",
     "list_deployments",
@@ -1477,6 +1483,7 @@ export const TOOLSET_DEFINITIONS = [
             "list_projects",
             "update_project",
             "list_project_members",
+            "list_group_members",
             "list_namespaces",
             "get_namespace",
             "verify_namespace",

package/build/utils/helpers.js

@@ -1,3 +1,208 @@
+import fs from "node:fs";
+import path from "node:path";
+/**
+ * Reject absolute paths and directory-traversal sequences for user-supplied
+ * local filesystem paths (e.g. local_path / file_path tool arguments).
+ *
+ * Returns the normalized relative path on success. This is a lexical check
+ * only — callers that touch the filesystem must also use
+ * {@link resolveSafeExistingPath}, {@link resolveSafeOutputDir}, or
+ * {@link resolveSafeOutputFile}.
+ */
+export function assertSafeRelativePath(inputPath, label = "path") {
+    const normalized = path.normalize(inputPath);
+    if (path.isAbsolute(normalized) ||
+        normalized === ".." ||
+        normalized.startsWith(".." + path.sep) ||
+        normalized.includes(path.sep + ".." + path.sep)) {
+        throw new Error(`Invalid ${label}: directory traversal is not allowed.`);
+    }
+    return normalized;
+}
+/** Snapshot and canonicalize the trusted base directory once per operation. */
+function resolveTrustedBaseDir(baseDir) {
+    const anchor = baseDir ?? process.cwd();
+    return fs.realpathSync(anchor);
+}
+function isInsideBase(candidate, baseReal) {
+    const relative = path.relative(baseReal, candidate);
+    // "" = same path; absolute relative = different Windows volume root.
+    return relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative));
+}
+/**
+ * Walk each path component under baseReal and reject symbolic links so a
+ * repository-controlled symlink cannot escape the trusted base directory.
+ */
+function assertNoSymlinkComponents(baseReal, relative, label) {
+    const parts = relative.split(path.sep).filter(part => part.length > 0 && part !== ".");
+    let current = baseReal;
+    for (const part of parts) {
+        const next = path.join(current, part);
+        let st;
+        try {
+            st = fs.lstatSync(next);
+        }
+        catch (err) {
+            const code = err.code;
+            if (code === "ENOENT") {
+                // Remaining components do not exist yet (typical for mkdir output dirs).
+                return;
+            }
+            throw err;
+        }
+        if (st.isSymbolicLink()) {
+            throw new Error(`Invalid ${label}: symbolic links are not allowed.`);
+        }
+        current = next;
+    }
+}
+/**
+ * Resolve a user-supplied relative path to an existing file/dir that is
+ * guaranteed to stay inside `baseDir` after symlink resolution.
+ */
+export function resolveSafeExistingPath(inputPath, label = "path", baseDir) {
+    const relative = assertSafeRelativePath(inputPath, label);
+    const baseReal = resolveTrustedBaseDir(baseDir);
+    assertNoSymlinkComponents(baseReal, relative, label);
+    const absolute = path.resolve(baseReal, relative);
+    if (!isInsideBase(absolute, baseReal)) {
+        throw new Error(`Invalid ${label}: path escapes the allowed directory.`);
+    }
+    if (!fs.existsSync(absolute)) {
+        throw new Error(`File not found: ${relative}`);
+    }
+    const real = fs.realpathSync(absolute);
+    if (!isInsideBase(real, baseReal)) {
+        throw new Error(`Invalid ${label}: path escapes the allowed directory.`);
+    }
+    return real;
+}
+/**
+ * Resolve a user-supplied relative output directory under `baseDir`, creating
+ * it if needed. Rejects symlink components and verifies the final real path
+ * remains inside the base.
+ */
+export function resolveSafeOutputDir(inputDir, label = "local_path", baseDir) {
+    const relative = assertSafeRelativePath(inputDir, label);
+    const baseReal = resolveTrustedBaseDir(baseDir);
+    assertNoSymlinkComponents(baseReal, relative, label);
+    const absolute = path.resolve(baseReal, relative);
+    // Reject escapes before mkdir so we never create dirs outside the base.
+    if (!isInsideBase(absolute, baseReal)) {
+        throw new Error(`Invalid ${label}: path escapes the allowed directory.`);
+    }
+    fs.mkdirSync(absolute, { recursive: true });
+    const real = fs.realpathSync(absolute);
+    if (!isInsideBase(real, baseReal)) {
+        throw new Error(`Invalid ${label}: path escapes the allowed directory.`);
+    }
+    return real;
+}
+/**
+ * Build a write destination under a trusted directory. Rejects an existing
+ * destination symlink so createWriteStream cannot follow it outside the base.
+ *
+ * When `inputDir` is omitted, the file is resolved under `baseDir` itself
+ * (still rejecting symlink destinations).
+ */
+export function resolveSafeOutputFile(filename, inputDir, label = "local_path", baseDir) {
+    if (!filename ||
+        filename === "." ||
+        filename === ".." ||
+        filename.includes("/") ||
+        filename.includes("\\") ||
+        filename.includes(path.sep)) {
+        throw new Error(`Invalid ${label}: directory separators are not allowed in filename.`);
+    }
+    const baseReal = resolveTrustedBaseDir(baseDir);
+    const dirReal = inputDir ? resolveSafeOutputDir(inputDir, label, baseReal) : baseReal;
+    const dest = path.join(dirReal, filename);
+    try {
+        const st = fs.lstatSync(dest);
+        if (st.isSymbolicLink()) {
+            throw new Error(`Invalid ${label}: symbolic links are not allowed.`);
+        }
+    }
+    catch (err) {
+        const code = err.code;
+        if (code !== "ENOENT") {
+            throw err;
+        }
+    }
+    return dest;
+}
+const READ_OPEN_FLAGS = fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0);
+const WRITE_OPEN_FLAGS = fs.constants.O_WRONLY |
+    fs.constants.O_CREAT |
+    fs.constants.O_TRUNC |
+    (fs.constants.O_NOFOLLOW ?? 0);
+/**
+ * Validate and read a file in one step so callers never reuse a path string
+ * after a symlink swap (final-component TOCTOU mitigation via O_NOFOLLOW).
+ */
+export function readSafeExistingFile(inputPath, label = "path", baseDir) {
+    const relative = assertSafeRelativePath(inputPath, label);
+    const baseReal = resolveTrustedBaseDir(baseDir);
+    assertNoSymlinkComponents(baseReal, relative, label);
+    const absolute = path.resolve(baseReal, relative);
+    if (!isInsideBase(absolute, baseReal)) {
+        throw new Error(`Invalid ${label}: path escapes the allowed directory.`);
+    }
+    if (!fs.existsSync(absolute)) {
+        throw new Error(`File not found: ${relative}`);
+    }
+    const fd = fs.openSync(absolute, READ_OPEN_FLAGS);
+    try {
+        const st = fs.fstatSync(fd);
+        if (st.isSymbolicLink()) {
+            throw new Error(`Invalid ${label}: symbolic links are not allowed.`);
+        }
+        const real = fs.realpathSync(absolute);
+        if (!isInsideBase(real, baseReal)) {
+            throw new Error(`Invalid ${label}: path escapes the allowed directory.`);
+        }
+        return { buffer: fs.readFileSync(fd), basename: path.basename(relative) };
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+/**
+ * Validate an output destination and open a write stream immediately so the
+ * path is not handed back for a separate createWriteStream call.
+ */
+export function openSafeOutputWriteStream(filename, inputDir, label = "local_path", baseDir) {
+    if (!filename ||
+        filename === "." ||
+        filename === ".." ||
+        filename.includes("/") ||
+        filename.includes("\\") ||
+        filename.includes(path.sep)) {
+        throw new Error(`Invalid ${label}: directory separators are not allowed in filename.`);
+    }
+    const dirReal = inputDir
+        ? resolveSafeOutputDir(inputDir, label, baseDir)
+        : resolveTrustedBaseDir(baseDir);
+    const dest = path.join(dirReal, filename);
+    try {
+        const st = fs.lstatSync(dest);
+        if (st.isSymbolicLink()) {
+            throw new Error(`Invalid ${label}: symbolic links are not allowed.`);
+        }
+    }
+    catch (err) {
+        const code = err.code;
+        if (code !== "ENOENT") {
+            throw err;
+        }
+    }
+    const fd = fs.openSync(dest, WRITE_OPEN_FLAGS, 0o666);
+    const stream = fs.createWriteStream(null, {
+        fd,
+        autoClose: true,
+    });
+    return { stream, path: dest };
+}
 /**
  * Estimate the number of merge commits that will be added based on the merge method.
  */

package/build/utils/logger.js

@@ -18,6 +18,10 @@ const REDACT_PATHS = [
     "*.sessionId",
     "ctx.sessionId",
     "context.sessionId",
+    "approval_password",
+    "*.approval_password",
+    "arguments.approval_password",
+    "params.arguments.approval_password",
 ];
 /**
  * Create a pino logger with consistent redaction, level, format, and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.1.45",
+  "version": "2.1.47",
   "mcpName": "io.github.zereight/gitlab-mcp",
   "description": "GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more",
   "keywords": [
@@ -53,7 +53,7 @@
     "test": "npm run test:all",
     "test:all": "npm run build && npm run test:mock && npm run test:live",
     "test:mock": "bash scripts/run-mock-tests.sh",
-    "test:stateless": "npm run build && node --import tsx/esm --test --experimental-test-isolation=none test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts",
+    "test:stateless": "npm run build && node --import tsx/esm --test --experimental-test-isolation=none test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts test/stateless/consumed-proxy-code-cache.test.ts",
     "test:mcp-oauth": "npm run build && node --import tsx/esm --test test/mcp-oauth-tests.ts",
     "test:live": "node test/validate-api.js",
     "test:consumer-smoke": "bash scripts/consumer-install-smoke.sh",