@zereight/mcp-gitlab 2.1.57 → 2.1.59

package/build/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { getConfig, ENABLE_DYNAMIC_API_URL, GITLAB_AUTH_COOKIE_PATH, GITLAB_ALLOW_UNAUTHENTICATED_TOOL_DISCOVERY, GITLAB_CA_CERT_PATH, GITLAB_JOB_TOKEN, GITLAB_MCP_OAUTH, GITLAB_OAUTH_APP_ID, GITLAB_OAUTH_SCOPES, GITLAB_OAUTH_CALLBACK_PROXY, GITLAB_PERSONAL_ACCESS_TOKEN, GITLAB_POOL_MAX_SIZE, GITLAB_DISABLE_VERSION_CHECK, GITLAB_READ_ONLY_MODE, GITLAB_PERMISSION_MODE, GITLAB_TOOLSETS_RAW, GITLAB_TOOLS_RAW, HOST, HTTP_PROXY, HTTPS_PROXY, IS_OLD, MCP_SERVER_URL, NODE_TLS_REJECT_UNAUTHORIZED, NO_PROXY, OAUTH_STATELESS_CLIENT_TTL_SECONDS, OAUTH_STATELESS_MODE, OAUTH_STATELESS_PENDING_TTL_SECONDS, OAUTH_STATELESS_SESSION_TTL_SECONDS, OAUTH_STATELESS_STORED_TTL_SECONDS, PORT, REMOTE_AUTHORIZATION, SESSION_TIMEOUT_SECONDS, SSE, STREAMABLE_HTTP, MCP_TRUST_PROXY, USE_GITLAB_WIKI, USE_MILESTONE, USE_OAUTH, USE_PIPELINE, GITLAB_TOOL_POLICY_APPROVE_RAW, GITLAB_TOOL_POLICY_HIDDEN_RAW, GITLAB_OAUTH_ALLOWED_GROUPS_RAW, GITLAB_ALLOWED_GROUPS_RAW, GITLAB_OAUTH_ALLOWED_GROUPS, } from "./config.js";
+import { getConfig, ENABLE_DYNAMIC_API_URL, ENABLE_DYNAMIC_PROJECT_SCOPE, ENABLE_STRICT_PROJECT_SCOPE, GITLAB_AUTH_COOKIE_PATH, GITLAB_ALLOW_UNAUTHENTICATED_TOOL_DISCOVERY, GITLAB_CA_CERT_PATH, GITLAB_JOB_TOKEN, GITLAB_MCP_OAUTH, GITLAB_OAUTH_APP_ID, GITLAB_OAUTH_SCOPES, GITLAB_OAUTH_CALLBACK_PROXY, GITLAB_PERSONAL_ACCESS_TOKEN, GITLAB_POOL_MAX_SIZE, GITLAB_DISABLE_VERSION_CHECK, GITLAB_READ_ONLY_MODE, GITLAB_PERMISSION_MODE, GITLAB_TOOLSETS_RAW, GITLAB_TOOLS_RAW, HOST, HTTP_PROXY, HTTPS_PROXY, IS_OLD, MCP_SERVER_URL, NODE_TLS_REJECT_UNAUTHORIZED, NO_PROXY, OAUTH_STATELESS_CLIENT_TTL_SECONDS, OAUTH_STATELESS_MODE, OAUTH_STATELESS_PENDING_TTL_SECONDS, OAUTH_STATELESS_SESSION_TTL_SECONDS, OAUTH_STATELESS_STORED_TTL_SECONDS, PORT, REMOTE_AUTHORIZATION, SESSION_TIMEOUT_SECONDS, SSE, STREAMABLE_HTTP, MCP_TRUST_PROXY, USE_GITLAB_WIKI, USE_MILESTONE, USE_OAUTH, USE_PIPELINE, GITLAB_TOOL_POLICY_APPROVE_RAW, GITLAB_TOOL_POLICY_HIDDEN_RAW, GITLAB_OAUTH_ALLOWED_GROUPS_RAW, GITLAB_ALLOWED_GROUPS_RAW, GITLAB_OAUTH_ALLOWED_GROUPS, } from "./config.js";
 /** True when the server is running in remote/network mode (SSE or StreamableHTTP transport). */
 const IS_REMOTE = SSE || STREAMABLE_HTTP;
 const STREAMABLE_HTTP_AUTH_TOKEN = getConfig("streamable-http-auth-token", "STREAMABLE_HTTP_AUTH_TOKEN");
@@ -104,8 +104,8 @@ import { parseSearchReplaceBlocks, applySearchReplace, applyUnifiedDiff, } from
 import { requireBearerAuth } from "@modelcontextprotocol/sdk/server/auth/middleware/bearerAuth.js";
 import { GitLabClientPool } from "./gitlab-client-pool.js";
 import { allTools, readOnlyTools, destructiveTools, deleteTools, parseEnabledToolsets, parseIndividualTools, buildFeatureFlagOverrides, isToolInEnabledToolset, TOOLSET_DEFINITIONS, ALL_TOOLSET_IDS, } from "./tools/registry.js";
-import { BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, // Added
-CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateMergeRequestNoteEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateRepositorySchema, CreateGroupSchema, CreateWikiPageSchema, CreateGroupWikiPageSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetBranchSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GitLabBlameEntrySchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetDeploymentSchema, GetEnvironmentSchema, GetNamespaceSchema, GitLabCiLintResultSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetProjectMilestoneSchema, GetProjectSchema, GetRepositoryTreeSchema, GetUsersSchema, GetUserSchema, GitLabUserFullSchema, WhoAmISchema, GitLabCurrentUserSchema, GetWikiPageSchema, GitLabCommitSchema, GitLabCommitStatusSchema, GitLabCompareResultSchema, GitLabContentSchema, GitLabCreateUpdateFileResponseSchema, GitLabDiffSchema, 
+import { BulkPublishDraftNotesSchema, CancelPipelineJobSchema, ErasePipelineJobSchema, CancelPipelineSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, // Added
+CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateMergeRequestNoteEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateRepositorySchema, CreateGroupSchema, CreateWikiPageSchema, CreateGroupWikiPageSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetBranchSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GitLabBlameEntrySchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetDeploymentSchema, CreateDeploymentSchema, UpdateDeploymentSchema, DeploymentApprovalSchema, ListDeploymentMergeRequestsSchema, GetEnvironmentSchema, UpdateEnvironmentSchema, StopEnvironmentSchema, StopStaleEnvironmentsSchema, DeleteReviewAppEnvironmentsSchema, PipelineTriggerIdSchema, ListPipelineTriggersSchema, CreatePipelineTriggerSchema, UpdatePipelineTriggerSchema, TriggerPipelineSchema, GetNamespaceSchema, GitLabCiLintResultSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetPipelineVariablesSchema, UpdatePipelineMetadataSchema, DeletePipelineSchema, PipelineReportSchema, WaitForPipelineSchema, WaitForPipelineJobSchema, PlayPipelineJobsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetRepositoryTreeSchema, GetUsersSchema, GetUserSchema, GitLabUserFullSchema, WhoAmISchema, GitLabCurrentUserSchema, GetWikiPageSchema, GitLabCommitSchema, GitLabCommitStatusSchema, GitLabCompareResultSchema, GitLabContentSchema, GitLabCreateUpdateFileResponseSchema, GitLabDiffSchema, 
 // Discussion Schemas
 GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
@@ -430,6 +430,7 @@ function createServer() {
                     lastUsed: authData.lastUsed,
                     apiUrl: authData.apiUrl,
                     publicBaseUrl: authData.publicBaseUrl,
+                    allowedProjectIds: authData.allowedProjectIds,
                 };
                 // Run the handler within the retrieved context
                 const result = await sessionAuthStore.run(sessionContext, () => handleToolCall(request.params));
@@ -707,6 +708,10 @@ function validateConfiguration() {
     if (enableDynamicApiUrl && !remoteAuth) {
         errors.push("ENABLE_DYNAMIC_API_URL=true requires REMOTE_AUTHORIZATION=true");
     }
+    const enableDynamicProjectScope = getConfig("enable-dynamic-project-scope", "ENABLE_DYNAMIC_PROJECT_SCOPE") === "true";
+    if (enableDynamicProjectScope && !remoteAuth) {
+        errors.push("ENABLE_DYNAMIC_PROJECT_SCOPE=true requires REMOTE_AUTHORIZATION=true");
+    }
     if (errors.length > 0) {
         logger.error("Configuration validation failed:");
         errors.forEach(err => logger.error(`  - ${err}`));
@@ -967,7 +972,8 @@ async function ensureSessionForRequest() {
             redirect: "follow",
         });
         // 401 means auth failed but the request completed - cookies were still exchanged
-        initialSessionRequestMade = response.ok || response.status === 401;
+        // 403 means insufficient scope (e.g. missing User: Read) but auth is valid
+        initialSessionRequestMade = response.ok || response.status === 401 || response.status === 403;
     }
     catch {
         logger.debug("Session warmup request failed, will retry on next request");
@@ -1048,6 +1054,47 @@ function getEffectiveApiUrl() {
     }
     return GITLAB_API_URL;
 }
+/**
+ * Get the effective project allowlist for the current request
+ * In REMOTE_AUTHORIZATION mode with ENABLE_DYNAMIC_PROJECT_SCOPE, reads the scope
+ * narrowed via the X-GitLab-Allowed-Project-Ids header from session context
+ * (already validated against GITLAB_ALLOWED_PROJECT_IDS by parseAuthHeaders)
+ * Otherwise, uses environment GITLAB_ALLOWED_PROJECT_IDS
+ */
+function getEffectiveAllowedProjectIds() {
+    if (ENABLE_DYNAMIC_PROJECT_SCOPE) {
+        const ctx = sessionAuthStore.getStore();
+        if (ctx?.allowedProjectIds && ctx.allowedProjectIds.length > 0) {
+            return ctx.allowedProjectIds;
+        }
+    }
+    return GITLAB_ALLOWED_PROJECT_IDS;
+}
+/**
+ * Reject tools that cannot be limited to allowed projects when
+ * ENABLE_STRICT_PROJECT_SCOPE is set and an allowlist is in effect
+ */
+function rejectIfStrictProjectScope(toolName) {
+    if (ENABLE_STRICT_PROJECT_SCOPE) {
+        rejectIfProjectScopedDeployment(toolName);
+    }
+}
+/**
+ * Filter a project listing down to the effective allowlist
+ * Applies only when ENABLE_STRICT_PROJECT_SCOPE is set and an allowlist is in effect
+ * Allowlist entries may be numeric IDs or full namespace paths
+ */
+function filterProjectsByAllowlist(projects) {
+    if (!ENABLE_STRICT_PROJECT_SCOPE) {
+        return projects;
+    }
+    const allowedProjectIds = getEffectiveAllowedProjectIds();
+    if (allowedProjectIds.length === 0) {
+        return projects;
+    }
+    return projects.filter(project => allowedProjectIds.includes(String(project.id)) ||
+        allowedProjectIds.includes(project.path_with_namespace));
+}
 /**
  * Get fetch configuration with proper client from pool
  * Uses connection pooling when dynamic API URLs are enabled
@@ -1217,20 +1264,21 @@ async function handleGitLabError(response) {
  * @throws {Error} If GITLAB_ALLOWED_PROJECT_IDS is set and the requested project is not in the whitelist
  */
 function getEffectiveProjectId(projectId) {
-    if (GITLAB_ALLOWED_PROJECT_IDS.length > 0) {
+    const allowedProjectIds = getEffectiveAllowedProjectIds();
+    if (allowedProjectIds.length > 0) {
         // If there's only one allowed project, use it as default
-        if (GITLAB_ALLOWED_PROJECT_IDS.length === 1 && !projectId) {
-            return GITLAB_ALLOWED_PROJECT_IDS[0];
+        if (allowedProjectIds.length === 1 && !projectId) {
+            return allowedProjectIds[0];
         }
         // If a project ID is provided, check if it's in the whitelist
-        if (projectId && !GITLAB_ALLOWED_PROJECT_IDS.includes(projectId)) {
-            throw new Error(`Access denied: Project ${projectId} is not in the allowed project list: ${GITLAB_ALLOWED_PROJECT_IDS.join(", ")}`);
+        if (projectId && !allowedProjectIds.includes(projectId)) {
+            throw new Error(`Access denied: Project ${projectId} is not in the allowed project list: ${allowedProjectIds.join(", ")}`);
         }
         // If no project ID provided but we have multiple allowed projects, require an explicit choice
-        if (!projectId && GITLAB_ALLOWED_PROJECT_IDS.length > 1) {
-            throw new Error(`Multiple projects allowed (${GITLAB_ALLOWED_PROJECT_IDS.join(", ")}). Please specify a project ID.`);
+        if (!projectId && allowedProjectIds.length > 1) {
+            throw new Error(`Multiple projects allowed (${allowedProjectIds.join(", ")}). Please specify a project ID.`);
         }
-        return projectId || GITLAB_ALLOWED_PROJECT_IDS[0];
+        return projectId || allowedProjectIds[0];
     }
     // Prioritize the passed projectId over GITLAB_PROJECT_ID to allow querying different projects
     if (projectId) {
@@ -1245,8 +1293,8 @@ function rejectIfProjectScopedDeployment(toolName) {
     if (GITLAB_PROJECT_ID) {
         throw new Error(`${toolName} is not allowed when GITLAB_PROJECT_ID is set (server is locked to a single project)`);
     }
-    if (GITLAB_ALLOWED_PROJECT_IDS.length > 0) {
-        throw new Error(`${toolName} is not allowed when GITLAB_ALLOWED_PROJECT_IDS is set (server access is restricted to configured projects)`);
+    if (getEffectiveAllowedProjectIds().length > 0) {
+        throw new Error(`${toolName} is not allowed while a project allowlist is in effect (GITLAB_ALLOWED_PROJECT_IDS or a session scope restricts access to configured projects)`);
     }
 }
 /**
@@ -1390,9 +1438,11 @@ async function createIssue(projectId, options) {
  */
 async function listIssues(projectId, options = {}) {
     let url;
-    if (projectId) {
-        projectId = decodeURIComponent(projectId); // Decode project ID
-        const effectiveProjectId = getEffectiveProjectId(projectId);
+    if (projectId || (ENABLE_STRICT_PROJECT_SCOPE && getEffectiveAllowedProjectIds().length > 0)) {
+        // In strict scope, never fall back to the instance-wide endpoint;
+        // resolve the default project (or fail for a multi-project allowlist)
+        const decodedProjectId = projectId ? decodeURIComponent(projectId) : "";
+        const effectiveProjectId = getEffectiveProjectId(decodedProjectId);
         url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}/issues`);
     }
     else {
@@ -1486,11 +1536,18 @@ function appendMergeRequestFilters(url, options) {
  * @returns {Promise<GitLabMergeRequest[]>} List of merge requests
  */
 async function listMergeRequests(projectId, options = {}) {
-    const decodedProjectId = projectId ? decodeURIComponent(projectId) : undefined;
-    const endpoint = decodedProjectId
-        ? `${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(decodedProjectId))}/merge_requests`
-        : `${getEffectiveApiUrl()}/merge_requests`;
-    const url = new URL(endpoint);
+    const decodedProjectId = projectId ? decodeURIComponent(projectId) : "";
+    let url;
+    if (decodedProjectId ||
+        (ENABLE_STRICT_PROJECT_SCOPE && getEffectiveAllowedProjectIds().length > 0)) {
+        // In strict scope, never fall back to the instance-wide endpoint;
+        // resolve the default project (or fail for a multi-project allowlist)
+        const effectiveProjectId = getEffectiveProjectId(decodedProjectId);
+        url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}/merge_requests`);
+    }
+    else {
+        url = new URL(`${getEffectiveApiUrl()}/merge_requests`);
+    }
     appendMergeRequestFilters(url, options);
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
@@ -2179,8 +2236,8 @@ async function resolveProjectOrGroupPath(projectId) {
     const namespaceMatch = decodedProjectId.match(/^(group|project):(.+)$/i);
     const explicitKind = namespaceMatch?.[1]?.toLowerCase();
     const requestedProjectId = namespaceMatch ? namespaceMatch[2] : decodedProjectId;
-    if (explicitKind === "group" && GITLAB_ALLOWED_PROJECT_IDS.length > 0) {
-        throw new Error("group:<id-or-path> cannot be used when GITLAB_ALLOWED_PROJECT_IDS is set, because the project allowlist does not cover groups");
+    if (explicitKind === "group" && getEffectiveAllowedProjectIds().length > 0) {
+        throw new Error("group:<id-or-path> cannot be used while a project allowlist is in effect (GITLAB_ALLOWED_PROJECT_IDS or a session scope), because the project allowlist does not cover groups");
     }
     const effectiveProjectId = getEffectiveProjectId(requestedProjectId);
     if (explicitKind === "group") {
@@ -2202,7 +2259,7 @@ async function resolveProjectOrGroupPath(projectId) {
     // resolving to an unrelated group with the same integer ID.
     if (projectResponse.status === 404 &&
         !explicitKind &&
-        GITLAB_ALLOWED_PROJECT_IDS.length === 0 &&
+        getEffectiveAllowedProjectIds().length === 0 &&
         !/^\d+$/.test(effectiveProjectId)) {
         const groupUrl = new URL(`${getEffectiveApiUrl()}/groups/${encodeURIComponent(effectiveProjectId)}`);
         const groupResponse = await fetch(groupUrl.toString(), {
@@ -3522,14 +3579,19 @@ async function searchProjects(query, page = 1, perPage = 20) {
         const errorBody = await response.text();
         throw new Error(`GitLab API error: ${response.status} ${response.statusText}\n${errorBody}`);
     }
-    const projects = (await response.json());
+    const unfiltered = (await response.json());
+    const projects = filterProjectsByAllowlist(unfiltered);
     const totalCount = response.headers.get("x-total");
     const totalPages = response.headers.get("x-total-pages");
-    // GitLab API doesn't return these headers for results > 10,000
+    const nextPage = response.headers.get("x-next-page");
+    // GitLab API doesn't return the total headers for results > 10,000
+    // Keep the unfiltered totals so callers paginate past pages the allowlist filter thinned out;
+    // without them, total_pages stays unset and next_page carries the continuation signal
     const count = totalCount ? Number.parseInt(totalCount, 10) : projects.length;
     return GitLabSearchResponseSchema.parse({
         count,
-        total_pages: totalPages ? Number.parseInt(totalPages, 10) : Math.ceil(count / perPage),
+        total_pages: totalPages ? Number.parseInt(totalPages, 10) : undefined,
+        next_page: nextPage ? Number.parseInt(nextPage, 10) : undefined,
         current_page: page,
         items: projects,
     });
@@ -4623,7 +4685,7 @@ async function listProjects(options = {}) {
     await handleGitLabError(response);
     // Parse and return the data
     const data = await response.json();
-    return z.array(GitLabProjectSchema).parse(data);
+    return filterProjectsByAllowlist(z.array(GitLabProjectSchema).parse(data));
 }
 /**
  * List labels for a project
@@ -4789,7 +4851,7 @@ async function listGroupProjects(options) {
     });
     await handleGitLabError(response);
     const projects = await response.json();
-    return GitLabProjectSchema.array().parse(projects);
+    return filterProjectsByAllowlist(GitLabProjectSchema.array().parse(projects));
 }
 // Webhook API helper functions
 /**
@@ -4800,6 +4862,7 @@ function buildWebhookBaseUrl(projectId, groupId) {
         projectId = decodeURIComponent(projectId);
         return `${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/hooks`;
     }
+    rejectIfStrictProjectScope("group webhooks");
     const decodedGroupId = decodeURIComponent(groupId);
     return `${getEffectiveApiUrl()}/groups/${encodeURIComponent(decodedGroupId)}/hooks`;
 }
@@ -5121,11 +5184,12 @@ async function listPipelines(projectId, options = {}) {
  * @param {number} pipelineId - The ID of the pipeline
  * @returns {Promise<GitLabPipeline>} Pipeline details
  */
-async function getPipeline(projectId, pipelineId) {
+async function getPipeline(projectId, pipelineId, signal) {
     projectId = decodeURIComponent(projectId); // Decode project ID
     const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/pipelines/${encodeGitLabPathSegment(pipelineId)}`);
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
+        signal,
     });
     if (response.status === 404) {
         throw new Error(`Pipeline not found`);
@@ -5134,6 +5198,41 @@ async function getPipeline(projectId, pipelineId) {
     const data = await response.json();
     return GitLabPipelineSchema.parse(data);
 }
+async function getPipelineVariables(projectId, pipelineId, page, perPage) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/pipelines/${encodeGitLabPathSegment(pipelineId)}/variables`);
+    if (page !== undefined)
+        url.searchParams.set("page", String(page));
+    if (perPage !== undefined)
+        url.searchParams.set("per_page", String(perPage));
+    const response = await fetch(url.toString(), { ...getFetchConfig() });
+    await handleGitLabError(response);
+    return response.json();
+}
+async function getPipelineReport(projectId, pipelineId, summary = false, page, perPage) {
+    projectId = decodeURIComponent(projectId);
+    const endpoint = summary ? "test_report_summary" : "test_report";
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/pipelines/${encodeGitLabPathSegment(pipelineId)}/${endpoint}`);
+    if (page !== undefined)
+        url.searchParams.set("page", String(page));
+    if (perPage !== undefined)
+        url.searchParams.set("per_page", String(perPage));
+    const response = await fetch(url.toString(), { ...getFetchConfig() });
+    await handleGitLabError(response);
+    return response.json();
+}
+async function deletePipeline(projectId, pipelineId) {
+    projectId = decodeURIComponent(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/pipelines/${encodeGitLabPathSegment(pipelineId)}`, { ...getFetchConfig(), method: "DELETE" });
+    await handleGitLabError(response);
+    return response.status === 204 ? { deleted: true } : response.json();
+}
+async function updatePipelineMetadata(projectId, pipelineId, name) {
+    projectId = decodeURIComponent(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/pipelines/${encodeGitLabPathSegment(pipelineId)}/metadata`, { ...getFetchConfig(), method: "PUT", body: JSON.stringify({ name }) });
+    await handleGitLabError(response);
+    return response.json();
+}
 /**
  * List deployments in a GitLab project
  *
@@ -5165,7 +5264,7 @@ async function listDeployments(projectId, options = {}) {
  */
 async function getDeployment(projectId, deploymentId) {
     projectId = decodeURIComponent(projectId);
-    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/deployments/${deploymentId}`);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/deployments/${encodeGitLabPathSegment(deploymentId)}`);
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
     });
@@ -5176,6 +5275,20 @@ async function getDeployment(projectId, deploymentId) {
     const data = await response.json();
     return GitLabDeploymentSchema.parse(data);
 }
+async function deploymentRequest(projectId, path = "", method = "GET", body, query) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/deployments${path}`);
+    for (const [key, value] of Object.entries(query ?? {})) {
+        if (value !== undefined)
+            url.searchParams.set(key, String(value));
+    }
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(), method,
+        body: body === undefined ? undefined : JSON.stringify(body),
+    });
+    await handleGitLabError(response);
+    return response.status === 204 ? { success: true } : response.json();
+}
 /**
  * List environments in a GitLab project
  *
@@ -5207,7 +5320,7 @@ async function listEnvironments(projectId, options = {}) {
  */
 async function getEnvironment(projectId, environmentId) {
     projectId = decodeURIComponent(projectId);
-    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/environments/${environmentId}`);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/environments/${encodeGitLabPathSegment(environmentId)}`);
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
     });
@@ -5218,6 +5331,36 @@ async function getEnvironment(projectId, environmentId) {
     const data = await response.json();
     return GitLabEnvironmentSchema.parse(data);
 }
+async function environmentRequest(projectId, path, method, body, query) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/environments${path}`);
+    for (const [key, value] of Object.entries(query ?? {}))
+        if (value !== undefined)
+            url.searchParams.set(key, String(value));
+    const response = await fetch(url.toString(), { ...getFetchConfig(), method, body: body === undefined ? undefined : JSON.stringify(body) });
+    await handleGitLabError(response);
+    return response.status === 204 ? { success: true } : response.json();
+}
+async function pipelineTriggerRequest(projectId, path = "", method = "GET", body) {
+    projectId = decodeURIComponent(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/triggers${path}`, { ...getFetchConfig(), method, body: body === undefined ? undefined : JSON.stringify(body) });
+    await handleGitLabError(response);
+    return response.status === 204 ? { success: true } : response.json();
+}
+async function triggerPipeline(projectId, token, ref, variables, inputs) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/trigger/pipeline`);
+    url.searchParams.set("token", token);
+    url.searchParams.set("ref", ref);
+    const body = {};
+    if (variables)
+        body.variables = variables;
+    if (inputs)
+        body.inputs = inputs;
+    const response = await fetch(url.toString(), { ...getFetchConfig(), method: "POST", body: Object.keys(body).length ? JSON.stringify(body) : undefined });
+    await handleGitLabError(response);
+    return response.json();
+}
 /**
  * List all jobs in a specific pipeline
  *
@@ -5282,11 +5425,12 @@ async function listPipelineTriggerJobs(projectId, pipelineId, options = {}) {
     const data = await response.json();
     return z.array(GitLabPipelineTriggerJobSchema).parse(data);
 }
-async function getPipelineJob(projectId, jobId) {
+async function getPipelineJob(projectId, jobId, signal) {
     projectId = decodeURIComponent(projectId); // Decode project ID
     const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/jobs/${encodeGitLabPathSegment(jobId)}`);
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
+        signal,
     });
     if (response.status === 404) {
         throw new Error(`Job not found`);
@@ -5756,13 +5900,15 @@ async function deletePipelineScheduleVariable(projectId, pipelineScheduleId, key
  * @param {Object} variables - Optional job variables
  * @returns {Promise<GitLabPipelineJob>} The run job
  */
-async function playPipelineJob(projectId, jobId, variables) {
+async function playPipelineJob(projectId, jobId, variables, jobInputs) {
     projectId = decodeURIComponent(projectId);
     const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/jobs/${encodeGitLabPathSegment(jobId)}/play`);
     const body = {};
     if (variables && variables.length > 0) {
         body.job_variables_attributes = variables;
     }
+    if (jobInputs)
+        body.job_inputs = jobInputs;
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
         method: "POST",
@@ -5772,6 +5918,15 @@ async function playPipelineJob(projectId, jobId, variables) {
     const data = await response.json();
     return GitLabPipelineJobSchema.parse(data);
 }
+async function playPipelineJobs(projectId, jobIds, variables, timeoutSeconds = 300, pollIntervalSeconds = 5) {
+    const jobs = [];
+    for (const jobId of jobIds) {
+        const played = await playPipelineJob(projectId, jobId, variables);
+        const completed = await waitForStatus(signal => getPipelineJob(projectId, played.id, signal), TERMINAL_JOB_STATUSES, timeoutSeconds, pollIntervalSeconds);
+        jobs.push(completed);
+    }
+    return jobs;
+}
 /**
  * Retry a job
  *
@@ -5779,17 +5934,46 @@ async function playPipelineJob(projectId, jobId, variables) {
  * @param {number} jobId - The ID of the job to retry
  * @returns {Promise<GitLabPipelineJob>} The retried job
  */
-async function retryPipelineJob(projectId, jobId) {
+async function retryPipelineJob(projectId, jobId, jobInputs) {
     projectId = decodeURIComponent(projectId);
     const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/jobs/${encodeGitLabPathSegment(jobId)}/retry`);
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
         method: "POST",
+        body: jobInputs ? JSON.stringify({ job_inputs: jobInputs }) : undefined,
     });
     await handleGitLabError(response);
     const data = await response.json();
     return GitLabPipelineJobSchema.parse(data);
 }
+async function erasePipelineJob(projectId, jobId) {
+    projectId = decodeURIComponent(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/jobs/${encodeGitLabPathSegment(jobId)}/erase`, { ...getFetchConfig(), method: "POST" });
+    await handleGitLabError(response);
+    return response.status === 204 ? { erased: true } : response.json();
+}
+const TERMINAL_PIPELINE_STATUSES = new Set(["success", "failed", "canceled", "skipped", "manual"]);
+const TERMINAL_JOB_STATUSES = new Set(["success", "failed", "canceled", "skipped", "manual"]);
+async function waitForStatus(fetchStatus, terminalStatuses, timeoutSeconds = 300, pollIntervalSeconds = 5) {
+    const deadline = Date.now() + timeoutSeconds * 1000;
+    const fetchBeforeDeadline = async () => {
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+            throw new Error("Timed out waiting for terminal status");
+        return fetchStatus(AbortSignal.timeout(remaining));
+    };
+    let value = await fetchBeforeDeadline();
+    while (!terminalStatuses.has(value.status)) {
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+            break;
+        await new Promise(resolve => setTimeout(resolve, Math.min(pollIntervalSeconds * 1000, remaining)));
+        value = await fetchBeforeDeadline();
+    }
+    if (!terminalStatuses.has(value.status))
+        throw new Error(`Timed out waiting for terminal status; last status: ${value.status}`);
+    return value;
+}
 /**
  * Cancel a job
  *
@@ -6813,15 +6997,16 @@ async function resolveProjectFullPath(projectId) {
  * Allowlist entries may be numeric IDs or full namespace paths.
  */
 function assertVulnerabilityProjectAllowed(vulnerabilityId, project) {
-    if (GITLAB_ALLOWED_PROJECT_IDS.length === 0) {
+    const allowedProjectIds = getEffectiveAllowedProjectIds();
+    if (allowedProjectIds.length === 0) {
         return;
     }
     const fullPath = project?.fullPath ?? undefined;
     const numericId = project?.id?.match(/^gid:\/\/gitlab\/Project\/(\d+)$/)?.[1];
-    const allowed = (fullPath !== undefined && GITLAB_ALLOWED_PROJECT_IDS.includes(fullPath)) ||
-        (numericId !== undefined && GITLAB_ALLOWED_PROJECT_IDS.includes(numericId));
+    const allowed = (fullPath !== undefined && allowedProjectIds.includes(fullPath)) ||
+        (numericId !== undefined && allowedProjectIds.includes(numericId));
     if (!allowed) {
-        throw new Error(`Access denied: Vulnerability ${vulnerabilityId} belongs to project ${fullPath ?? numericId ?? "unknown"}, which is not in the allowed project list: ${GITLAB_ALLOWED_PROJECT_IDS.join(", ")}`);
+        throw new Error(`Access denied: Vulnerability ${vulnerabilityId} belongs to project ${fullPath ?? numericId ?? "unknown"}, which is not in the allowed project list: ${allowedProjectIds.join(", ")}`);
     }
 }
 /**
@@ -6831,7 +7016,7 @@ function assertVulnerabilityProjectAllowed(vulnerabilityId, project) {
  * is not configured.
  */
 async function ensureVulnerabilityProjectAllowed(vulnerabilityId) {
-    if (GITLAB_ALLOWED_PROJECT_IDS.length === 0) {
+    if (getEffectiveAllowedProjectIds().length === 0) {
         return;
     }
     const data = await executeGraphQL(`query getVulnerabilityProject($id: VulnerabilityID!) {
@@ -7558,6 +7743,7 @@ async function handleToolCall(params) {
                 };
             }
             case "search_code": {
+                rejectIfStrictProjectScope("search_code");
                 const args = SearchCodeSchema.parse(params.arguments);
                 const results = await searchBlobs({
                     search: args.search,
@@ -7588,6 +7774,7 @@ async function handleToolCall(params) {
                 };
             }
             case "search_group_code": {
+                rejectIfStrictProjectScope("search_group_code");
                 const args = SearchGroupCodeSchema.parse(params.arguments);
                 const results = await searchBlobs({
                     search: args.search,
@@ -7850,6 +8037,7 @@ async function handleToolCall(params) {
                 };
             }
             case "list_todos": {
+                rejectIfStrictProjectScope("list_todos");
                 const args = ListTodosSchema.parse(params.arguments);
                 const todos = await listTodos(args);
                 return {
@@ -7857,6 +8045,7 @@ async function handleToolCall(params) {
                 };
             }
             case "mark_todo_done": {
+                rejectIfStrictProjectScope("mark_todo_done");
                 const args = MarkTodoDoneSchema.parse(params.arguments);
                 const todo = await markTodoDone(args.id);
                 return {
@@ -7864,6 +8053,7 @@ async function handleToolCall(params) {
                 };
             }
             case "mark_all_todos_done": {
+                rejectIfStrictProjectScope("mark_all_todos_done");
                 MarkAllTodosDoneSchema.parse(params.arguments);
                 await markAllTodosDone();
                 return {
@@ -8115,6 +8305,7 @@ async function handleToolCall(params) {
                 };
             }
             case "list_group_members": {
+                rejectIfStrictProjectScope("list_group_members");
                 const args = ListGroupMembersSchema.parse(params.arguments);
                 const { group_id, ...options } = args;
                 const members = await listGroupMembers(group_id, options);
@@ -8637,6 +8828,7 @@ async function handleToolCall(params) {
                 };
             }
             case "list_group_wiki_pages": {
+                rejectIfStrictProjectScope("list_group_wiki_pages");
                 const { group_id, page, per_page, with_content, render_html } = ListGroupWikiPagesSchema.parse(params.arguments);
                 const wikiPages = await listGroupWikiPages(group_id, {
                     page,
@@ -8649,6 +8841,7 @@ async function handleToolCall(params) {
                 };
             }
             case "get_group_wiki_page": {
+                rejectIfStrictProjectScope("get_group_wiki_page");
                 const { group_id, slug, render_html } = GetGroupWikiPageSchema.parse(params.arguments);
                 const wikiPage = await getGroupWikiPage(group_id, slug, render_html);
                 return {
@@ -8656,6 +8849,7 @@ async function handleToolCall(params) {
                 };
             }
             case "create_group_wiki_page": {
+                rejectIfStrictProjectScope("create_group_wiki_page");
                 const { group_id, title, content, format } = CreateGroupWikiPageSchema.parse(params.arguments);
                 const wikiPage = await createGroupWikiPage(group_id, title, content, format);
                 return {
@@ -8663,6 +8857,7 @@ async function handleToolCall(params) {
                 };
             }
             case "update_group_wiki_page": {
+                rejectIfStrictProjectScope("update_group_wiki_page");
                 const { group_id, slug, title, content, format } = UpdateGroupWikiPageSchema.parse(params.arguments);
                 const wikiPage = await updateGroupWikiPage(group_id, slug, title, content, format);
                 return {
@@ -8670,6 +8865,7 @@ async function handleToolCall(params) {
                 };
             }
             case "delete_group_wiki_page": {
+                rejectIfStrictProjectScope("delete_group_wiki_page");
                 const { group_id, slug } = DeleteGroupWikiPageSchema.parse(params.arguments);
                 await deleteGroupWikiPage(group_id, slug);
                 return {
@@ -8720,6 +8916,26 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            case "get_pipeline_variables": {
+                const { project_id, pipeline_id, page, per_page } = GetPipelineVariablesSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await getPipelineVariables(project_id, pipeline_id, page, per_page)) }] };
+            }
+            case "get_pipeline_test_report": {
+                const { project_id, pipeline_id, page, per_page } = PipelineReportSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await getPipelineReport(project_id, pipeline_id, false, page, per_page)) }] };
+            }
+            case "get_pipeline_test_report_summary": {
+                const { project_id, pipeline_id, page, per_page } = PipelineReportSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await getPipelineReport(project_id, pipeline_id, true, page, per_page)) }] };
+            }
+            case "delete_pipeline": {
+                const { project_id, pipeline_id } = DeletePipelineSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deletePipeline(project_id, pipeline_id)) }] };
+            }
+            case "update_pipeline_metadata": {
+                const { project_id, pipeline_id, name } = UpdatePipelineMetadataSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await updatePipelineMetadata(project_id, pipeline_id, name)) }] };
+            }
             case "list_deployments": {
                 const args = ListDeploymentsSchema.parse(params.arguments);
                 const { project_id, ...options } = args;
@@ -8735,6 +8951,26 @@ async function handleToolCall(params) {
                     content: [{ type: "text", text: JSON.stringify(deployment) }],
                 };
             }
+            case "create_deployment": {
+                const { project_id, ...body } = CreateDeploymentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deploymentRequest(project_id, "", "POST", body)) }] };
+            }
+            case "update_deployment": {
+                const { project_id, deployment_id, ...body } = UpdateDeploymentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deploymentRequest(project_id, `/${encodeGitLabPathSegment(deployment_id)}`, "PUT", body)) }] };
+            }
+            case "delete_deployment": {
+                const { project_id, deployment_id } = GetDeploymentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deploymentRequest(project_id, `/${encodeGitLabPathSegment(deployment_id)}`, "DELETE")) }] };
+            }
+            case "list_deployment_merge_requests": {
+                const { project_id, deployment_id, ...query } = ListDeploymentMergeRequestsSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deploymentRequest(project_id, `/${encodeGitLabPathSegment(deployment_id)}/merge_requests`, "GET", undefined, query)) }] };
+            }
+            case "approve_deployment": {
+                const { project_id, deployment_id, ...body } = DeploymentApprovalSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deploymentRequest(project_id, `/${encodeGitLabPathSegment(deployment_id)}/approval`, "POST", body)) }] };
+            }
             case "list_environments": {
                 const args = ListEnvironmentsSchema.parse(params.arguments);
                 const { project_id, ...options } = args;
@@ -8750,6 +8986,50 @@ async function handleToolCall(params) {
                     content: [{ type: "text", text: JSON.stringify(environment) }],
                 };
             }
+            case "update_environment": {
+                const { project_id, environment_id, ...body } = UpdateEnvironmentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await environmentRequest(project_id, `/${encodeGitLabPathSegment(environment_id)}`, "PUT", body)) }] };
+            }
+            case "delete_environment": {
+                const { project_id, environment_id } = GetEnvironmentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await environmentRequest(project_id, `/${encodeGitLabPathSegment(environment_id)}`, "DELETE")) }] };
+            }
+            case "stop_environment": {
+                const { project_id, environment_id, force } = StopEnvironmentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await environmentRequest(project_id, `/${encodeGitLabPathSegment(environment_id)}/stop`, "POST", undefined, { force })) }] };
+            }
+            case "stop_stale_environments": {
+                const { project_id, before } = StopStaleEnvironmentsSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await environmentRequest(project_id, "/stop_stale", "POST", undefined, { before })) }] };
+            }
+            case "delete_review_app_environments": {
+                const { project_id, ...query } = DeleteReviewAppEnvironmentsSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await environmentRequest(project_id, "/review_apps", "DELETE", undefined, query)) }] };
+            }
+            case "list_pipeline_triggers": {
+                const { project_id } = ListPipelineTriggersSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(redactSensitiveGitLabFields(await pipelineTriggerRequest(project_id))) }] };
+            }
+            case "get_pipeline_trigger": {
+                const { project_id, trigger_id } = PipelineTriggerIdSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(redactSensitiveGitLabFields(await pipelineTriggerRequest(project_id, `/${encodeGitLabPathSegment(trigger_id)}`))) }] };
+            }
+            case "create_pipeline_trigger": {
+                const { project_id, ...body } = CreatePipelineTriggerSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await pipelineTriggerRequest(project_id, "", "POST", body)) }] };
+            }
+            case "update_pipeline_trigger": {
+                const { project_id, trigger_id, ...body } = UpdatePipelineTriggerSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(redactSensitiveGitLabFields(await pipelineTriggerRequest(project_id, `/${encodeGitLabPathSegment(trigger_id)}`, "PUT", body))) }] };
+            }
+            case "delete_pipeline_trigger": {
+                const { project_id, trigger_id } = PipelineTriggerIdSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await pipelineTriggerRequest(project_id, `/${encodeGitLabPathSegment(trigger_id)}`, "DELETE")) }] };
+            }
+            case "trigger_pipeline": {
+                const { project_id, token, ref, variables, inputs } = TriggerPipelineSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await triggerPipeline(project_id, token, ref, variables, inputs)) }] };
+            }
             case "list_pipeline_jobs": {
                 const { project_id, pipeline_id, ...options } = ListPipelineJobsSchema.parse(params.arguments);
                 const jobs = await listPipelineJobs(project_id, pipeline_id, options);
@@ -9103,8 +9383,8 @@ async function handleToolCall(params) {
                 };
             }
             case "play_pipeline_job": {
-                const { project_id, job_id, job_variables_attributes } = PlayPipelineJobSchema.parse(params.arguments);
-                const job = await playPipelineJob(project_id, job_id, job_variables_attributes);
+                const { project_id, job_id, job_variables_attributes, job_inputs } = PlayPipelineJobSchema.parse(params.arguments);
+                const job = await playPipelineJob(project_id, job_id, job_variables_attributes, job_inputs);
                 return {
                     content: [
                         {
@@ -9114,9 +9394,14 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            case "play_pipeline_jobs": {
+                const { project_id, job_ids, job_variables_attributes, timeout_seconds, poll_interval_seconds } = PlayPipelineJobsSchema.parse(params.arguments);
+                const jobs = await playPipelineJobs(project_id, job_ids, job_variables_attributes, timeout_seconds, poll_interval_seconds);
+                return { content: [{ type: "text", text: JSON.stringify(jobs) }] };
+            }
             case "retry_pipeline_job": {
-                const { project_id, job_id } = RetryPipelineJobSchema.parse(params.arguments);
-                const job = await retryPipelineJob(project_id, job_id);
+                const { project_id, job_id, job_inputs } = RetryPipelineJobSchema.parse(params.arguments);
+                const job = await retryPipelineJob(project_id, job_id, job_inputs);
                 return {
                     content: [
                         {
@@ -9138,6 +9423,20 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            case "erase_pipeline_job": {
+                const { project_id, job_id } = ErasePipelineJobSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await erasePipelineJob(project_id, job_id)) }] };
+            }
+            case "wait_for_pipeline": {
+                const { project_id, pipeline_id, timeout_seconds, poll_interval_seconds } = WaitForPipelineSchema.parse(params.arguments);
+                const pipeline = await waitForStatus(signal => getPipeline(project_id, pipeline_id, signal), TERMINAL_PIPELINE_STATUSES, timeout_seconds, poll_interval_seconds);
+                return { content: [{ type: "text", text: JSON.stringify(pipeline) }] };
+            }
+            case "wait_for_job": {
+                const { project_id, job_id, timeout_seconds, poll_interval_seconds } = WaitForPipelineJobSchema.parse(params.arguments);
+                const job = await waitForStatus(signal => getPipelineJob(project_id, job_id, signal), TERMINAL_JOB_STATUSES, timeout_seconds, poll_interval_seconds);
+                return { content: [{ type: "text", text: JSON.stringify(job) }] };
+            }
             case "list_job_artifacts": {
                 const { project_id, job_id, ...options } = ListJobArtifactsSchema.parse(params.arguments);
                 const artifacts = await listJobArtifacts(project_id, job_id, options);
@@ -9192,6 +9491,7 @@ async function handleToolCall(params) {
                 };
             }
             case "list_group_merge_requests": {
+                rejectIfStrictProjectScope("list_group_merge_requests");
                 const { group_id, ...options } = ListGroupMergeRequestsSchema.parse(params.arguments);
                 const cleanedOptions = cleanMutuallyExclusiveIdUsernameOptions(options, LIST_MERGE_REQUESTS_ID_USERNAME_PAIRS);
                 const mergeRequests = await listGroupMergeRequests(group_id, cleanedOptions);
@@ -9311,6 +9611,7 @@ async function handleToolCall(params) {
                 };
             }
             case "list_group_milestones": {
+                rejectIfStrictProjectScope("list_group_milestones");
                 const { group_id, ...options } = ListGroupMilestonesSchema.parse(params.arguments);
                 const milestones = await listGroupMilestones(group_id, options);
                 return {
@@ -9323,6 +9624,7 @@ async function handleToolCall(params) {
                 };
             }
             case "get_group_milestone": {
+                rejectIfStrictProjectScope("get_group_milestone");
                 const { group_id, milestone_id } = GetGroupMilestoneSchema.parse(params.arguments);
                 const milestone = await getGroupMilestone(group_id, milestone_id);
                 return {
@@ -9335,6 +9637,7 @@ async function handleToolCall(params) {
                 };
             }
             case "create_group_milestone": {
+                rejectIfStrictProjectScope("create_group_milestone");
                 const { group_id, ...options } = CreateGroupMilestoneSchema.parse(params.arguments);
                 const milestone = await createGroupMilestone(group_id, options);
                 return {
@@ -9347,6 +9650,7 @@ async function handleToolCall(params) {
                 };
             }
             case "edit_group_milestone": {
+                rejectIfStrictProjectScope("edit_group_milestone");
                 const { group_id, milestone_id, ...options } = EditGroupMilestoneSchema.parse(params.arguments);
                 const milestone = await editGroupMilestone(group_id, milestone_id, options);
                 return {
@@ -9359,6 +9663,7 @@ async function handleToolCall(params) {
                 };
             }
             case "delete_group_milestone": {
+                rejectIfStrictProjectScope("delete_group_milestone");
                 const { group_id, milestone_id } = DeleteGroupMilestoneSchema.parse(params.arguments);
                 await deleteGroupMilestone(group_id, milestone_id);
                 return {
@@ -9374,6 +9679,7 @@ async function handleToolCall(params) {
                 };
             }
             case "get_group_milestone_issue": {
+                rejectIfStrictProjectScope("get_group_milestone_issue");
                 const { group_id, milestone_id, ...options } = GetGroupMilestoneIssuesSchema.parse(params.arguments);
                 const issues = await getGroupMilestoneIssues(group_id, milestone_id, options);
                 return {
@@ -9386,6 +9692,7 @@ async function handleToolCall(params) {
                 };
             }
             case "get_group_milestone_merge_requests": {
+                rejectIfStrictProjectScope("get_group_milestone_merge_requests");
                 const { group_id, milestone_id, ...options } = GetGroupMilestoneMergeRequestsSchema.parse(params.arguments);
                 const mergeRequests = await getGroupMilestoneMergeRequests(group_id, milestone_id, options);
                 return {
@@ -9398,6 +9705,7 @@ async function handleToolCall(params) {
                 };
             }
             case "get_group_milestone_burndown_events": {
+                rejectIfStrictProjectScope("get_group_milestone_burndown_events");
                 const { group_id, milestone_id, ...options } = GetGroupMilestoneBurndownEventsSchema.parse(params.arguments);
                 const events = await getGroupMilestoneBurndownEvents(group_id, milestone_id, options);
                 return {
@@ -9455,6 +9763,7 @@ async function handleToolCall(params) {
                 };
             }
             case "list_group_iterations": {
+                rejectIfStrictProjectScope("list_group_iterations");
                 const args = ListGroupIterationsSchema.parse(params.arguments);
                 const iterations = await listGroupIterations(args.group_id, args);
                 return {
@@ -9653,6 +9962,7 @@ async function handleToolCall(params) {
                 };
             }
             case "list_events": {
+                rejectIfStrictProjectScope("list_events");
                 const args = ListEventsSchema.parse(params.arguments);
                 const events = await listEvents(args);
                 return {
@@ -10248,7 +10558,28 @@ async function startStreamableHTTPServer() {
         const privateToken = req.headers["private-token"] || "";
         const jobToken = req.headers["job-token"] || "";
         const dynamicApiUrl = req.headers["x-gitlab-api-url"]?.trim();
+        const requestedProjectScope = req.headers["x-gitlab-allowed-project-ids"]?.trim();
         let apiUrl = GITLAB_API_URL; // Default API URL
+        let allowedProjectIds;
+        // Only process the requested project scope if the feature is enabled
+        if (ENABLE_DYNAMIC_PROJECT_SCOPE && requestedProjectScope !== undefined) {
+            const requested = requestedProjectScope
+                .split(",")
+                .map(id => id.trim())
+                .filter(Boolean);
+            if (requested.length === 0) {
+                logger.warn("Empty X-GitLab-Allowed-Project-Ids provided");
+                return null;
+            }
+            if (GITLAB_ALLOWED_PROJECT_IDS.length > 0) {
+                const outOfScope = requested.filter(id => !GITLAB_ALLOWED_PROJECT_IDS.includes(id));
+                if (outOfScope.length > 0) {
+                    logger.warn(`X-GitLab-Allowed-Project-Ids requested projects outside GITLAB_ALLOWED_PROJECT_IDS: ${outOfScope.join(", ")}`);
+                    return null; // Reject if the header tries to widen the configured allowlist
+                }
+            }
+            allowedProjectIds = requested;
+        }
         // Only process dynamic URL if the feature is enabled
         if (ENABLE_DYNAMIC_API_URL && dynamicApiUrl) {
             try {
@@ -10284,7 +10615,7 @@ async function startStreamableHTTPServer() {
         }
         // Validate token and return AuthData object
         if (token && header && validateToken(token)) {
-            return { header, token, lastUsed: Date.now(), apiUrl };
+            return { header, token, lastUsed: Date.now(), apiUrl, allowedProjectIds };
         }
         return null;
     };
@@ -10434,6 +10765,7 @@ async function startStreamableHTTPServer() {
                 header: headerAuth.header,
                 token: headerAuth.token,
                 apiUrl: headerAuth.apiUrl,
+                allowedProjectIds: headerAuth.allowedProjectIds,
             };
             freshAuthPresent = true;
         }
@@ -10462,7 +10794,12 @@ async function startStreamableHTTPServer() {
             if (looksLikeStatelessSessionId(incomingSid)) {
                 const opened = openSessionId(material, incomingSid, sessionTtlSeconds);
                 if (opened) {
-                    effective = { header: opened.h, token: opened.t, apiUrl: opened.u };
+                    effective = {
+                        header: opened.h,
+                        token: opened.t,
+                        apiUrl: opened.u,
+                        allowedProjectIds: opened.p,
+                    };
                     metrics.statelessAuthFromSealedSid++;
                 }
                 else {
@@ -10508,6 +10845,7 @@ async function startStreamableHTTPServer() {
             header: effective.header,
             token: effective.token,
             apiUrl: effective.apiUrl,
+            allowedProjectIds: effective.allowedProjectIds,
         });
         if (freshAuthPresent) {
             metrics.statelessSidRotated++;
@@ -10526,6 +10864,7 @@ async function startStreamableHTTPServer() {
             lastUsed: Date.now(),
             apiUrl: effective.apiUrl,
             publicBaseUrl: getForwardedPublicBaseUrl(req, MCP_TRUST_PROXY),
+            allowedProjectIds: effective.allowedProjectIds,
         };
         // Step 4: create a fresh transport per request.
         // DNS rebinding protection is enforced by requireMcpHostAndOrigin middleware;
@@ -11052,6 +11391,7 @@ async function startStreamableHTTPServer() {
                 lastUsed: authData.lastUsed,
                 apiUrl: authData.apiUrl,
                 publicBaseUrl: authData.publicBaseUrl,
+                allowedProjectIds: authData.allowedProjectIds,
             };
             // Run the entire request handling within AsyncLocalStorage context
             await sessionAuthStore.run(ctx, handleRequest);
@@ -11130,6 +11470,7 @@ async function startStreamableHTTPServer() {
                     lastUsed: authData.lastUsed,
                     apiUrl: authData.apiUrl,
                     publicBaseUrl: authData.publicBaseUrl,
+                    allowedProjectIds: authData.allowedProjectIds,
                 };
                 await sessionAuthStore.run(ctx, handleGetRequest);
             }