@zereight/mcp-gitlab 2.1.55 → 2.1.57

package/build/gitlab-client-pool.js

@@ -1,9 +1,7 @@
-import { Agent } from "http";
-import { Agent as HttpsAgent } from "https";
-import { HttpProxyAgent } from "http-proxy-agent";
-import { HttpsProxyAgent } from "https-proxy-agent";
+import fs from "node:fs";
+import http from "node:http";
 import { SocksProxyAgent } from "socks-proxy-agent";
-import fs from "fs";
+import { Agent, Dispatcher, ProxyAgent } from "undici";
 /**
  * Checks if a URL should bypass the proxy based on NO_PROXY patterns.
  * Supports:
@@ -21,7 +19,6 @@ function shouldBypassProxy(url, noProxy) {
     if (!noProxy) {
         return false;
     }
-    // Parse URL to get hostname and port
     let hostname;
     let port;
     let protocol;
@@ -29,185 +26,224 @@ function shouldBypassProxy(url, noProxy) {
         const parsedUrl = new URL(url);
         hostname = parsedUrl.hostname.toLowerCase();
         protocol = parsedUrl.protocol;
-        // Use explicit port if provided, otherwise use default port based on protocol
-        port = parsedUrl.port || (protocol === 'https:' ? '443' : '80');
+        port = parsedUrl.port || (protocol === "https:" ? "443" : "80");
     }
     catch {
         return false;
     }
-    // Split NO_PROXY into patterns and trim whitespace
-    const patterns = noProxy.split(',').map(p => p.trim().toLowerCase()).filter(p => p.length > 0);
+    const patterns = noProxy
+        .split(",")
+        .map(p => p.trim().toLowerCase())
+        .filter(p => p.length > 0);
     for (const pattern of patterns) {
-        // Wildcard matches everything
-        if (pattern === '*') {
+        if (pattern === "*") {
             return true;
         }
-        // Handle port-specific patterns (e.g., "example.com:8080")
-        const [patternHost, patternPort] = pattern.split(':');
-        // If pattern specifies a port, check if it matches
+        const [patternHost, patternPort] = pattern.split(":");
         if (patternPort && port !== patternPort) {
             continue;
         }
-        // Check for domain suffix match (e.g., ".example.com")
-        if (patternHost.startsWith('.')) {
+        if (patternHost.startsWith(".")) {
             const suffix = patternHost.substring(1);
-            if (hostname === suffix || hostname.endsWith('.' + suffix)) {
+            if (hostname === suffix || hostname.endsWith("." + suffix)) {
                 return true;
             }
         }
-        // Check for exact hostname match
         else if (hostname === patternHost) {
             return true;
         }
     }
     return false;
 }
+class ProtocolDispatcher extends Dispatcher {
+    httpDirect;
+    httpsDirect;
+    httpProxyDispatcher;
+    httpsProxyDispatcher;
+    noProxy;
+    constructor(httpDirect, httpsDirect, httpProxyDispatcher, httpsProxyDispatcher, noProxy) {
+        super();
+        this.httpDirect = httpDirect;
+        this.httpsDirect = httpsDirect;
+        this.httpProxyDispatcher = httpProxyDispatcher;
+        this.httpsProxyDispatcher = httpsProxyDispatcher;
+        this.noProxy = noProxy;
+    }
+    dispatcherForOrigin(originText) {
+        const useHttps = originText.startsWith("https:");
+        const bypass = shouldBypassProxy(originText, this.noProxy);
+        if (bypass) {
+            return useHttps ? this.httpsDirect : this.httpDirect;
+        }
+        return useHttps ? this.httpsProxyDispatcher : this.httpProxyDispatcher;
+    }
+    dispatch(options, handler) {
+        const origin = options.origin;
+        const originText = origin instanceof URL ? origin.href : String(origin ?? "");
+        return this.dispatcherForOrigin(originText).dispatch(options, handler);
+    }
+}
+function createSocksConnect(proxyUrl, tls) {
+    const socksAgent = new SocksProxyAgent(proxyUrl);
+    return (options, callback) => {
+        const port = Number(options.port);
+        const host = options.hostname;
+        const dummyReq = http.request({
+            hostname: "127.0.0.1",
+            port: 9,
+            path: "/",
+            method: "HEAD",
+            agent: false,
+        });
+        dummyReq.on("error", () => undefined);
+        dummyReq.destroy();
+        const connectThroughSocks = (connectOpts) => {
+            void socksAgent
+                .connect(dummyReq, connectOpts)
+                .then(socket => {
+                callback(null, socket);
+            })
+                .catch((error) => {
+                const err = error instanceof Error ? error : new Error("SOCKS connect failed");
+                callback(err, null);
+            });
+        };
+        if (options.protocol === "https:") {
+            connectThroughSocks({
+                secureEndpoint: true,
+                host,
+                port,
+                servername: options.servername,
+                rejectUnauthorized: tls.rejectUnauthorized,
+                ca: tls.ca,
+            });
+            return;
+        }
+        connectThroughSocks({
+            secureEndpoint: false,
+            host,
+            port,
+        });
+    };
+}
+function createDispatcher(proxyUrl, tls) {
+    const hasTls = tls.rejectUnauthorized === false || tls.ca !== undefined;
+    if (proxyUrl?.startsWith("socks")) {
+        return new Agent({ connect: createSocksConnect(proxyUrl, tls) });
+    }
+    if (proxyUrl) {
+        if (hasTls) {
+            return new ProxyAgent({ uri: proxyUrl, requestTls: tls });
+        }
+        return new ProxyAgent(proxyUrl);
+    }
+    if (hasTls) {
+        return new Agent({ connect: tls });
+    }
+    return new Agent();
+}
 /**
- * Manages a pool of HTTP/HTTPS agents for different GitLab API URLs.
+ * Manages a pool of undici dispatchers for different GitLab API URLs.
  * This allows the server to efficiently handle requests to multiple GitLab instances
- * by reusing agents and their underlying TCP connections.
+ * by reusing dispatchers and their underlying TCP connections.
  */
 export class GitLabClientPool {
     clients = new Map();
     options;
     constructor(options) {
         this.options = options;
-        // Initialization is now done on-demand
     }
-    /**
-     * Creates a pair of HTTP and HTTPS agents for a specific API URL,
-     * considering proxy and SSL/TLS settings.
-     * @param apiUrl The base URL for which to create the agents.
-     * @returns A `ClientAgents` object containing the configured agents.
-     */
-    createAgentsForUrl(apiUrl) {
+    createDispatchersForUrl(apiUrl) {
         const { httpProxy, httpsProxy, noProxy, rejectUnauthorized, caCertPath } = this.options;
-        let sslOptions = {};
+        const tls = {};
         if (rejectUnauthorized === false) {
-            sslOptions.rejectUnauthorized = false;
+            tls.rejectUnauthorized = false;
         }
         else if (caCertPath) {
             try {
-                sslOptions.ca = fs.readFileSync(caCertPath);
+                tls.ca = fs.readFileSync(caCertPath);
             }
             catch (error) {
                 console.error(`Failed to read CA certificate from ${caCertPath}:`, error);
                 throw new Error(`Failed to read CA certificate: ${caCertPath}`);
             }
         }
-        // Check if this URL should bypass the proxy
+        const httpDirect = createDispatcher(undefined, tls);
+        const httpsDirect = createDispatcher(undefined, tls);
+        const httpProxyDispatcher = createDispatcher(httpProxy, tls);
+        const httpsProxyDispatcher = createDispatcher(httpsProxy, tls);
         const bypassProxy = shouldBypassProxy(apiUrl, noProxy);
-        let httpAgent;
-        let httpsAgent;
-        // Configure HTTP agent with proxy if specified and not bypassed
-        if (httpProxy && !bypassProxy) {
-            httpAgent = httpProxy.startsWith("socks")
-                ? new SocksProxyAgent(httpProxy)
-                : new HttpProxyAgent(httpProxy);
-        }
-        else {
-            httpAgent = new Agent({ keepAlive: true });
-        }
-        // Configure HTTPS agent with proxy and SSL options if specified and not bypassed
-        if (httpsProxy && !bypassProxy) {
-            httpsAgent = httpsProxy.startsWith("socks")
-                // The `as any` cast is used here to bypass a TypeScript type mismatch error.
-                // The `socks-proxy-agent` documentation indicates that TLS options like
-                // `rejectUnauthorized` and `ca` are valid in the constructor's options
-                // object, but the type definitions in this environment seem to disagree.
-                // This cast ensures the options are passed through at runtime.
-                ? new SocksProxyAgent(httpsProxy, sslOptions)
-                : new HttpsProxyAgent(httpsProxy, { ...sslOptions });
-        }
-        else {
-            httpsAgent = new HttpsAgent({ ...sslOptions, keepAlive: true });
-        }
-        return { httpAgent, httpsAgent };
+        return {
+            httpDispatcher: bypassProxy ? httpDirect : httpProxyDispatcher,
+            httpsDispatcher: bypassProxy ? httpsDirect : httpsProxyDispatcher,
+            dispatcher: new ProtocolDispatcher(httpDirect, httpsDirect, httpProxyDispatcher, httpsProxyDispatcher, noProxy),
+        };
     }
     /**
-     * Retrieves the appropriate agent (HTTP or HTTPS) for a given API URL.
-     * If an agent for the URL does not exist, it creates and caches one.
-     * @param apiUrl The full URL of the request.
-     * @returns The corresponding `Agent` for the URL's protocol.
+     * Retrieves the protocol-specific dispatcher for a given API URL.
+     * Used by NO_PROXY tests to distinguish Agent vs ProxyAgent.
      */
     getOrCreateAgentForUrl(apiUrl) {
-        const agents = this.getOrCreateAgentsForUrl(apiUrl);
+        const dispatchers = this.getOrCreateDispatchersForUrl(apiUrl);
         const url = new URL(apiUrl);
-        return url.protocol === "https:" ? agents.httpsAgent : agents.httpAgent;
+        return url.protocol === "https:" ? dispatchers.httpsDispatcher : dispatchers.httpDispatcher;
     }
     /**
-     * Returns an agent-selection function for use with node-fetch's `agent` option.
-     * The returned function picks the correct HTTP or HTTPS agent based on the
-     * request URL's protocol. This is critical for self-hosted GitLab instances
-     * where the server may redirect between HTTP and HTTPS (e.g., when
-     * `external_url` differs from the actual internal protocol).
-     * @param apiUrl The base API URL used to look up or create the agent pair.
-     * @returns A function `(parsedURL: URL) => Agent` suitable for node-fetch.
+     * Returns a dispatcher that picks HTTP vs HTTPS based on the request origin.
+     * Needed when a self-hosted GitLab redirects between HTTP and HTTPS.
      */
-    getAgentFunctionForUrl(apiUrl) {
-        const agents = this.getOrCreateAgentsForUrl(apiUrl);
-        return (parsedURL) => {
-            return parsedURL.protocol === "https:" ? agents.httpsAgent : agents.httpAgent;
-        };
+    getDispatcherForUrl(apiUrl) {
+        return this.getOrCreateDispatchersForUrl(apiUrl).dispatcher;
     }
     /**
-     * Ensures agents exist for the given API URL and returns the pair.
-     * @param apiUrl The full URL of the request.
-     * @returns The `ClientAgents` (both HTTP and HTTPS agents) for the URL.
+     * Which inner dispatcher would handle `originUrl` after following a redirect
+     * from `apiUrl`. Used to verify NO_PROXY is re-evaluated per origin.
      */
-    getOrCreateAgentsForUrl(apiUrl) {
+    getDispatcherForOrigin(apiUrl, originUrl) {
+        const dispatcher = this.getOrCreateDispatchersForUrl(apiUrl).dispatcher;
+        if (dispatcher instanceof ProtocolDispatcher) {
+            return dispatcher.dispatcherForOrigin(originUrl);
+        }
+        return dispatcher;
+    }
+    getOrCreateDispatchersForUrl(apiUrl) {
         const url = new URL(apiUrl);
-        const baseUrl = `${url.protocol}//${url.host}${url.pathname.substring(0, url.pathname.lastIndexOf('/api/v4') + '/api/v4'.length)}`;
+        const apiIndex = url.pathname.lastIndexOf("/api/v4");
+        const basePath = apiIndex === -1 ? url.pathname : url.pathname.substring(0, apiIndex + "/api/v4".length);
+        const baseUrl = `${url.protocol}//${url.host}${basePath}`;
         if (!this.clients.has(baseUrl)) {
-            // Check pool size limit
             if (this.options.poolMaxSize !== undefined && this.clients.size >= this.options.poolMaxSize) {
                 throw new Error(`Server capacity reached: Connection pool is full (max ${this.options.poolMaxSize} instances). Please try again later.`);
             }
-            this.clients.set(baseUrl, this.createAgentsForUrl(baseUrl));
+            this.clients.set(baseUrl, this.createDispatchersForUrl(baseUrl));
         }
-        const agents = this.clients.get(baseUrl);
-        if (!agents) {
-            // This should not happen given the logic above, but it satisfies TypeScript
+        const dispatchers = this.clients.get(baseUrl);
+        if (!dispatchers) {
             throw new Error(`Failed to create or get client for URL: ${baseUrl}`);
         }
-        return agents;
+        return dispatchers;
     }
-    /**
-     * Retrieves the client agents for a specific base API URL.
-     * @param apiUrl The base API URL (e.g., "https://gitlab.com/api/v4").
-     * @returns The `ClientAgents` object or undefined if not found.
-     */
     getClient(apiUrl) {
         return this.clients.get(apiUrl);
     }
-    /**
-     * Returns the default client agents, which corresponds to the first URL in the list.
-     * @returns The default `ClientAgents`.
-     */
     getDefaultClient() {
         const defaultUrl = this.options.apiUrls?.[0];
         if (!defaultUrl) {
             throw new Error("No default API URL configured.");
         }
         if (!this.clients.has(defaultUrl)) {
-            this.clients.set(defaultUrl, this.createAgentsForUrl(defaultUrl));
+            this.clients.set(defaultUrl, this.createDispatchersForUrl(defaultUrl));
         }
-        return this.clients.get(defaultUrl);
+        const client = this.clients.get(defaultUrl);
+        if (!client) {
+            throw new Error("No default API URL configured.");
+        }
+        return client;
     }
-    /**
-     * Destroy all pooled agents and clear pool state.
-     * This should be called on graceful shutdown so sockets are closed
-     * and the process can exit cleanly.
-     */
     closeAll() {
-        for (const [, agents] of this.clients) {
-            const destroyIfSupported = (agent) => {
-                if (agent && typeof agent.destroy === "function") {
-                    agent.destroy();
-                }
-            };
-            destroyIfSupported(agents.httpAgent);
-            destroyIfSupported(agents.httpsAgent);
+        for (const [, dispatchers] of this.clients) {
+            void dispatchers.httpDispatcher.destroy();
+            void dispatchers.httpsDispatcher.destroy();
         }
         this.clients.clear();
     }

package/build/index.js

@@ -69,7 +69,7 @@ import fetchCookie from "fetch-cookie";
 import fs from "node:fs";
 import { pipeline as streamPipeline } from "node:stream/promises";
 import os from "node:os";
-import nodeFetch from "node-fetch";
+import { fetch as undiciFetch, File, FormData } from "undici";
 import path from "node:path";
 import { CookieJar, parse as parseCookie } from "tough-cookie";
 import { URL } from "node:url";
@@ -111,7 +111,7 @@ GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
 // Draft Notes Schemas
 GitLabDraftNoteSchema, GitLabForkSchema, GitLabBranchSchema, GitLabProtectedBranchSchema, GitLabGroupSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestPipelineSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabGroupMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineScheduleSchema, GitLabPipelineScheduleVariableSchema, GitLabPipelineSchedulePlayResultSchema, ListPipelineSchedulesSchema, GetPipelineScheduleSchema, ListPipelineSchedulePipelinesSchema, CreatePipelineScheduleSchema, UpdatePipelineScheduleSchema, DeletePipelineScheduleSchema, PlayPipelineScheduleSchema, TakeOwnershipPipelineScheduleSchema, GetPipelineScheduleVariableSchema, CreatePipelineScheduleVariableSchema, UpdatePipelineScheduleVariableSchema, DeletePipelineScheduleVariableSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitStatusesSchema, ListBranchesSchema, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, GitLabCiVariableSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GitLabDependencyProxySchema, GitLabDependencyProxyBlobSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
-GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestsSchema, ListGroupMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListProjectMembersSchema, ListGroupMembersSchema, ListProjectMilestonesSchema, ListGroupMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, MarkAllTodosDoneSchema, MarkTodoDoneSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, HealthCheckSchema, } from "./schemas.js";
+GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestsSchema, ListGroupMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListProjectMembersSchema, ListGroupMembersSchema, ListProjectMilestonesSchema, ListGroupMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, MarkAllTodosDoneSchema, MarkTodoDoneSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, CreateWebhookSchema, UpdateWebhookSchema, DeleteWebhookSchema, ListWebhookEventsSchema, GetWebhookEventSchema, HealthCheckSchema, } from "./schemas.js";
 import { randomUUID, timingSafeEqual, } from "node:crypto";
 import { createLogger } from "./utils/logger.js";
 const logger = createLogger();
@@ -913,7 +913,7 @@ function defaultAuthRetryConfig() {
 }
 // Cookie jar and fetch - reloaded when cookie file changes
 let cookieJar = null;
-let fetch = wrapWithAuthRetry(nodeFetch, defaultAuthRetryConfig());
+let fetch = wrapWithAuthRetry(undiciFetch, defaultAuthRetryConfig());
 let lastCookieMtime = 0;
 let cookieReloadLock = null; // Mutex to prevent parallel reloads
 // Auth proxies may redirect and set cookies on the first request. We make a throwaway
@@ -933,7 +933,7 @@ async function reloadCookiesIfChanged() {
                 lastCookieMtime = mtime;
                 const newJar = await createCookieJar();
                 cookieJar = newJar;
-                fetch = wrapWithAuthRetry(newJar ? fetchCookie(nodeFetch, newJar) : nodeFetch, defaultAuthRetryConfig());
+                fetch = wrapWithAuthRetry(newJar ? fetchCookie(undiciFetch, newJar) : undiciFetch, defaultAuthRetryConfig());
                 initialSessionRequestMade = false;
             }
         }
@@ -942,7 +942,7 @@ async function reloadCookiesIfChanged() {
             if (cookieJar) {
                 logger.info("Cookie file removed, clearing cached cookies");
                 cookieJar = null;
-                fetch = wrapWithAuthRetry(nodeFetch, defaultAuthRetryConfig());
+                fetch = wrapWithAuthRetry(undiciFetch, defaultAuthRetryConfig());
                 lastCookieMtime = 0;
                 initialSessionRequestMade = false;
             }
@@ -1060,10 +1060,10 @@ function getEffectiveApiUrl() {
  */
 const getFetchConfig = () => {
     const effectiveApiUrl = getEffectiveApiUrl();
-    const agent = clientPool.getAgentFunctionForUrl(effectiveApiUrl);
+    const dispatcher = clientPool.getDispatcherForUrl(effectiveApiUrl);
     return {
         headers: { ...BASE_HEADERS, ...buildAuthHeaders() },
-        agent: agent,
+        dispatcher,
     };
 };
 // Compute at startup
@@ -1193,7 +1193,7 @@ if (getPositionalCliCommand(process.argv) !== "auth" &&
  * Utility function for handling GitLab API errors
  * API 에러 처리를 위한 유틸리티 함수 (Utility function for handling API errors)
  *
- * @param {import("node-fetch").Response} response - The response from GitLab API
+ * @param {Response} response - The response from GitLab API
  * @throws {Error} Throws an error with response details if the request failed
  */
 async function handleGitLabError(response) {
@@ -4816,6 +4816,54 @@ async function listWebhooks(options) {
     await handleGitLabError(response);
     return (await response.json());
 }
+function buildWebhookMutationBody(options) {
+    const body = {};
+    for (const [key, value] of Object.entries(options)) {
+        if (key === "project_id" || key === "group_id" || key === "hook_id")
+            continue;
+        if (value !== undefined)
+            body[key] = value;
+    }
+    return body;
+}
+/**
+ * Create a webhook on a project or group
+ */
+async function createWebhook(options) {
+    const url = buildWebhookBaseUrl(options.project_id, options.group_id);
+    const response = await fetch(url, {
+        ...getFetchConfig(),
+        method: "POST",
+        body: JSON.stringify(buildWebhookMutationBody(options)),
+    });
+    await handleGitLabError(response);
+    return await response.json();
+}
+/**
+ * Update a webhook on a project or group
+ */
+async function updateWebhook(options) {
+    const url = `${buildWebhookBaseUrl(options.project_id, options.group_id)}/${options.hook_id}`;
+    const response = await fetch(url, {
+        ...getFetchConfig(),
+        method: "PUT",
+        body: JSON.stringify(buildWebhookMutationBody(options)),
+    });
+    await handleGitLabError(response);
+    return await response.json();
+}
+/**
+ * Delete a webhook from a project or group
+ */
+async function deleteWebhook(options) {
+    const url = `${buildWebhookBaseUrl(options.project_id, options.group_id)}/${options.hook_id}`;
+    const response = await fetch(url, {
+        ...getFetchConfig(),
+        method: "DELETE",
+    });
+    await handleGitLabError(response);
+    return { status: "deleted", hook_id: options.hook_id };
+}
 /**
  * Fetch a single page of webhook events
  */
@@ -7015,15 +7063,11 @@ async function markdownUpload(projectId, filePath, content, filename) {
         throw new Error("Either file_path or content must be provided");
     }
     // Create form data
-    const FormData = (await import("form-data")).default;
     const form = new FormData();
-    form.append("file", fileBuffer, {
-        filename: fileName,
-        contentType: "application/octet-stream",
-    });
+    form.append("file", new File([fileBuffer], fileName, { type: "application/octet-stream" }));
     const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}/uploads`);
     const defaultFetchConfig = getFetchConfig();
-    delete defaultFetchConfig.headers["Content-Type"]; // Let form-data set the correct Content-Type with boundary
+    delete defaultFetchConfig.headers["Content-Type"];
     const response = await fetch(url.toString(), {
         ...defaultFetchConfig,
         method: "POST",
@@ -9744,6 +9788,27 @@ async function handleToolCall(params) {
                     content: [{ type: "text", text: JSON.stringify(webhooks) }],
                 };
             }
+            case "create_webhook": {
+                const args = CreateWebhookSchema.parse(params.arguments);
+                const webhook = await createWebhook(args);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(webhook) }],
+                };
+            }
+            case "update_webhook": {
+                const args = UpdateWebhookSchema.parse(params.arguments);
+                const webhook = await updateWebhook(args);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(webhook) }],
+                };
+            }
+            case "delete_webhook": {
+                const args = DeleteWebhookSchema.parse(params.arguments);
+                const result = await deleteWebhook(args);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(result) }],
+                };
+            }
             case "list_webhook_events": {
                 const args = ListWebhookEventsSchema.parse(params.arguments);
                 const events = await listWebhookEvents(args);
@@ -9981,8 +10046,8 @@ function buildDownloadProxyDeps() {
         encodeGitLabPathSegment,
         encodeGitLabPath,
         getEffectiveProjectId,
-        getAgentFunctionForUrl: clientPool.getAgentFunctionForUrl.bind(clientPool),
-        fetch: nodeFetch,
+        getDispatcherForUrl: clientPool.getDispatcherForUrl.bind(clientPool),
+        fetch: undiciFetch,
         logger,
     };
 }