@zereight/mcp-gitlab 2.1.58 → 2.1.59

package/README.ko.md

@@ -96,9 +96,21 @@ npm으로 설치할 수도 있습니다:
 npm install -g @zereight/mcp-gitlab
 ```
 
+또는 Nix를 사용해 이 플레이크를 자신의 플레이크에 추가할 수 있습니다:
+
+```nix
+# flake.nix
+inputs.gitlab-mcp.url = "github:zereight/gitlab-mcp";
+
+# wherever you configure your MCP client:
+command = lib.getExe inputs.gitlab-mcp.packages.${system}.default;
+```
+
+스토어 경로는 lock 파일에 고정되며, `nix flake update gitlab-mcp`로 업데이트합니다.
+
 예시는 기존 `mcp-gitlab`보다 충돌 가능성이 낮은 `zereight-mcp-gitlab` 별칭을 사용합니다. MCP 클라이언트가 찾지 못하면 `which zereight-mcp-gitlab`의 절대 경로를 사용하세요.
 
-전역 설치를 쓰지 않으려면 `npx -y @zereight/mcp-gitlab@2.1.57`처럼 직전 안정 버전(문서가 권장하는 버전)으로 고정하세요. 항상 최신 버전을 원하면 `npx -y @zereight/mcp-gitlab@latest`를 사용하세요. 새 버전이 나오면 서버가 시작 시 stderr로 알려줍니다(`GITLAB_DISABLE_VERSION_CHECK=true`로 비활성화 가능).
+전역 설치를 쓰지 않으려면 `npx -y @zereight/mcp-gitlab@2.1.58`처럼 직전 안정 버전(문서가 권장하는 버전)으로 고정하세요. 항상 최신 버전을 원하면 `npx -y @zereight/mcp-gitlab@latest`를 사용하세요. 새 버전이 나오면 서버가 시작 시 stderr로 알려줍니다(`GITLAB_DISABLE_VERSION_CHECK=true`로 비활성화 가능).
 
 #### CLI 인자 사용하기(환경 변수 문제가 있는 클라이언트용)
 

package/README.md

@@ -101,9 +101,21 @@ Or with npm:
 npm install -g @zereight/mcp-gitlab
 ```
 
+Or with Nix, by adding this flake to your own:
+
+```nix
+# flake.nix
+inputs.gitlab-mcp.url = "github:zereight/gitlab-mcp";
+
+# wherever you configure your MCP client:
+command = lib.getExe inputs.gitlab-mcp.packages.${system}.default;
+```
+
+The store path is pinned by your lock file; update it with `nix flake update gitlab-mcp`.
+
 The examples use `zereight-mcp-gitlab`, a less collision-prone alias for the legacy `mcp-gitlab` binary. If your MCP client cannot find it, use the absolute path from `which zereight-mcp-gitlab`.
 
-No global install? Pin `npx` to the previous stable release (the version these docs recommend), for example `npx -y @zereight/mcp-gitlab@2.1.57`. If you always want the newest release, use `npx -y @zereight/mcp-gitlab@latest` instead. The server prints a notice to stderr on startup when a newer version is available (disable with `GITLAB_DISABLE_VERSION_CHECK=true`).
+No global install? Pin `npx` to the previous stable release (the version these docs recommend), for example `npx -y @zereight/mcp-gitlab@2.1.58`. If you always want the newest release, use `npx -y @zereight/mcp-gitlab@latest` instead. The server prints a notice to stderr on startup when a newer version is available (disable with `GITLAB_DISABLE_VERSION_CHECK=true`).
 
 #### Using CLI Arguments (for clients with env var issues)
 

package/README.zh-CN.md

@@ -96,9 +96,21 @@ brew install zereight/gitlab-mcp/zereight-mcp-gitlab
 npm install -g @zereight/mcp-gitlab
 ```
 
+也可以使用 Nix，把此 flake 添加到你自己的 flake 中：
+
+```nix
+# flake.nix
+inputs.gitlab-mcp.url = "github:zereight/gitlab-mcp";
+
+# wherever you configure your MCP client:
+command = lib.getExe inputs.gitlab-mcp.packages.${system}.default;
+```
+
+存储路径由你的 lock 文件固定，使用 `nix flake update gitlab-mcp` 更新。
+
 示例使用 `zereight-mcp-gitlab`，这是比旧的 `mcp-gitlab` 更不容易冲突的别名。如果 MCP 客户端找不到它，请使用 `which zereight-mcp-gitlab` 输出的绝对路径。
 
-如果不想全局安装，请将 `npx` 固定到上一个稳定版本（即文档推荐的版本），例如 `npx -y @zereight/mcp-gitlab@2.1.57`。如果始终想使用最新版本，请改用 `npx -y @zereight/mcp-gitlab@latest`。有新版本发布时，服务器会在启动时通过 stderr 提示（可用 `GITLAB_DISABLE_VERSION_CHECK=true` 关闭）。
+如果不想全局安装，请将 `npx` 固定到上一个稳定版本（即文档推荐的版本），例如 `npx -y @zereight/mcp-gitlab@2.1.58`。如果始终想使用最新版本，请改用 `npx -y @zereight/mcp-gitlab@latest`。有新版本发布时，服务器会在启动时通过 stderr 提示（可用 `GITLAB_DISABLE_VERSION_CHECK=true` 关闭）。
 
 #### 使用 CLI 参数（适用于环境变量有问题的客户端）
 

package/build/index.js

@@ -104,8 +104,8 @@ import { parseSearchReplaceBlocks, applySearchReplace, applyUnifiedDiff, } from
 import { requireBearerAuth } from "@modelcontextprotocol/sdk/server/auth/middleware/bearerAuth.js";
 import { GitLabClientPool } from "./gitlab-client-pool.js";
 import { allTools, readOnlyTools, destructiveTools, deleteTools, parseEnabledToolsets, parseIndividualTools, buildFeatureFlagOverrides, isToolInEnabledToolset, TOOLSET_DEFINITIONS, ALL_TOOLSET_IDS, } from "./tools/registry.js";
-import { BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, // Added
-CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateMergeRequestNoteEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateRepositorySchema, CreateGroupSchema, CreateWikiPageSchema, CreateGroupWikiPageSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetBranchSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GitLabBlameEntrySchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetDeploymentSchema, GetEnvironmentSchema, GetNamespaceSchema, GitLabCiLintResultSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetProjectMilestoneSchema, GetProjectSchema, GetRepositoryTreeSchema, GetUsersSchema, GetUserSchema, GitLabUserFullSchema, WhoAmISchema, GitLabCurrentUserSchema, GetWikiPageSchema, GitLabCommitSchema, GitLabCommitStatusSchema, GitLabCompareResultSchema, GitLabContentSchema, GitLabCreateUpdateFileResponseSchema, GitLabDiffSchema, 
+import { BulkPublishDraftNotesSchema, CancelPipelineJobSchema, ErasePipelineJobSchema, CancelPipelineSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, // Added
+CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateMergeRequestNoteEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateRepositorySchema, CreateGroupSchema, CreateWikiPageSchema, CreateGroupWikiPageSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetBranchSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GitLabBlameEntrySchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetDeploymentSchema, CreateDeploymentSchema, UpdateDeploymentSchema, DeploymentApprovalSchema, ListDeploymentMergeRequestsSchema, GetEnvironmentSchema, UpdateEnvironmentSchema, StopEnvironmentSchema, StopStaleEnvironmentsSchema, DeleteReviewAppEnvironmentsSchema, PipelineTriggerIdSchema, ListPipelineTriggersSchema, CreatePipelineTriggerSchema, UpdatePipelineTriggerSchema, TriggerPipelineSchema, GetNamespaceSchema, GitLabCiLintResultSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetPipelineVariablesSchema, UpdatePipelineMetadataSchema, DeletePipelineSchema, PipelineReportSchema, WaitForPipelineSchema, WaitForPipelineJobSchema, PlayPipelineJobsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetRepositoryTreeSchema, GetUsersSchema, GetUserSchema, GitLabUserFullSchema, WhoAmISchema, GitLabCurrentUserSchema, GetWikiPageSchema, GitLabCommitSchema, GitLabCommitStatusSchema, GitLabCompareResultSchema, GitLabContentSchema, GitLabCreateUpdateFileResponseSchema, GitLabDiffSchema, 
 // Discussion Schemas
 GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
@@ -5184,11 +5184,12 @@ async function listPipelines(projectId, options = {}) {
  * @param {number} pipelineId - The ID of the pipeline
  * @returns {Promise<GitLabPipeline>} Pipeline details
  */
-async function getPipeline(projectId, pipelineId) {
+async function getPipeline(projectId, pipelineId, signal) {
     projectId = decodeURIComponent(projectId); // Decode project ID
     const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/pipelines/${encodeGitLabPathSegment(pipelineId)}`);
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
+        signal,
     });
     if (response.status === 404) {
         throw new Error(`Pipeline not found`);
@@ -5197,6 +5198,41 @@ async function getPipeline(projectId, pipelineId) {
     const data = await response.json();
     return GitLabPipelineSchema.parse(data);
 }
+async function getPipelineVariables(projectId, pipelineId, page, perPage) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/pipelines/${encodeGitLabPathSegment(pipelineId)}/variables`);
+    if (page !== undefined)
+        url.searchParams.set("page", String(page));
+    if (perPage !== undefined)
+        url.searchParams.set("per_page", String(perPage));
+    const response = await fetch(url.toString(), { ...getFetchConfig() });
+    await handleGitLabError(response);
+    return response.json();
+}
+async function getPipelineReport(projectId, pipelineId, summary = false, page, perPage) {
+    projectId = decodeURIComponent(projectId);
+    const endpoint = summary ? "test_report_summary" : "test_report";
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/pipelines/${encodeGitLabPathSegment(pipelineId)}/${endpoint}`);
+    if (page !== undefined)
+        url.searchParams.set("page", String(page));
+    if (perPage !== undefined)
+        url.searchParams.set("per_page", String(perPage));
+    const response = await fetch(url.toString(), { ...getFetchConfig() });
+    await handleGitLabError(response);
+    return response.json();
+}
+async function deletePipeline(projectId, pipelineId) {
+    projectId = decodeURIComponent(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/pipelines/${encodeGitLabPathSegment(pipelineId)}`, { ...getFetchConfig(), method: "DELETE" });
+    await handleGitLabError(response);
+    return response.status === 204 ? { deleted: true } : response.json();
+}
+async function updatePipelineMetadata(projectId, pipelineId, name) {
+    projectId = decodeURIComponent(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/pipelines/${encodeGitLabPathSegment(pipelineId)}/metadata`, { ...getFetchConfig(), method: "PUT", body: JSON.stringify({ name }) });
+    await handleGitLabError(response);
+    return response.json();
+}
 /**
  * List deployments in a GitLab project
  *
@@ -5228,7 +5264,7 @@ async function listDeployments(projectId, options = {}) {
  */
 async function getDeployment(projectId, deploymentId) {
     projectId = decodeURIComponent(projectId);
-    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/deployments/${deploymentId}`);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/deployments/${encodeGitLabPathSegment(deploymentId)}`);
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
     });
@@ -5239,6 +5275,20 @@ async function getDeployment(projectId, deploymentId) {
     const data = await response.json();
     return GitLabDeploymentSchema.parse(data);
 }
+async function deploymentRequest(projectId, path = "", method = "GET", body, query) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/deployments${path}`);
+    for (const [key, value] of Object.entries(query ?? {})) {
+        if (value !== undefined)
+            url.searchParams.set(key, String(value));
+    }
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(), method,
+        body: body === undefined ? undefined : JSON.stringify(body),
+    });
+    await handleGitLabError(response);
+    return response.status === 204 ? { success: true } : response.json();
+}
 /**
  * List environments in a GitLab project
  *
@@ -5270,7 +5320,7 @@ async function listEnvironments(projectId, options = {}) {
  */
 async function getEnvironment(projectId, environmentId) {
     projectId = decodeURIComponent(projectId);
-    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/environments/${environmentId}`);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/environments/${encodeGitLabPathSegment(environmentId)}`);
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
     });
@@ -5281,6 +5331,36 @@ async function getEnvironment(projectId, environmentId) {
     const data = await response.json();
     return GitLabEnvironmentSchema.parse(data);
 }
+async function environmentRequest(projectId, path, method, body, query) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/environments${path}`);
+    for (const [key, value] of Object.entries(query ?? {}))
+        if (value !== undefined)
+            url.searchParams.set(key, String(value));
+    const response = await fetch(url.toString(), { ...getFetchConfig(), method, body: body === undefined ? undefined : JSON.stringify(body) });
+    await handleGitLabError(response);
+    return response.status === 204 ? { success: true } : response.json();
+}
+async function pipelineTriggerRequest(projectId, path = "", method = "GET", body) {
+    projectId = decodeURIComponent(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/triggers${path}`, { ...getFetchConfig(), method, body: body === undefined ? undefined : JSON.stringify(body) });
+    await handleGitLabError(response);
+    return response.status === 204 ? { success: true } : response.json();
+}
+async function triggerPipeline(projectId, token, ref, variables, inputs) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/trigger/pipeline`);
+    url.searchParams.set("token", token);
+    url.searchParams.set("ref", ref);
+    const body = {};
+    if (variables)
+        body.variables = variables;
+    if (inputs)
+        body.inputs = inputs;
+    const response = await fetch(url.toString(), { ...getFetchConfig(), method: "POST", body: Object.keys(body).length ? JSON.stringify(body) : undefined });
+    await handleGitLabError(response);
+    return response.json();
+}
 /**
  * List all jobs in a specific pipeline
  *
@@ -5345,11 +5425,12 @@ async function listPipelineTriggerJobs(projectId, pipelineId, options = {}) {
     const data = await response.json();
     return z.array(GitLabPipelineTriggerJobSchema).parse(data);
 }
-async function getPipelineJob(projectId, jobId) {
+async function getPipelineJob(projectId, jobId, signal) {
     projectId = decodeURIComponent(projectId); // Decode project ID
     const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/jobs/${encodeGitLabPathSegment(jobId)}`);
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
+        signal,
     });
     if (response.status === 404) {
         throw new Error(`Job not found`);
@@ -5819,13 +5900,15 @@ async function deletePipelineScheduleVariable(projectId, pipelineScheduleId, key
  * @param {Object} variables - Optional job variables
  * @returns {Promise<GitLabPipelineJob>} The run job
  */
-async function playPipelineJob(projectId, jobId, variables) {
+async function playPipelineJob(projectId, jobId, variables, jobInputs) {
     projectId = decodeURIComponent(projectId);
     const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/jobs/${encodeGitLabPathSegment(jobId)}/play`);
     const body = {};
     if (variables && variables.length > 0) {
         body.job_variables_attributes = variables;
     }
+    if (jobInputs)
+        body.job_inputs = jobInputs;
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
         method: "POST",
@@ -5835,6 +5918,15 @@ async function playPipelineJob(projectId, jobId, variables) {
     const data = await response.json();
     return GitLabPipelineJobSchema.parse(data);
 }
+async function playPipelineJobs(projectId, jobIds, variables, timeoutSeconds = 300, pollIntervalSeconds = 5) {
+    const jobs = [];
+    for (const jobId of jobIds) {
+        const played = await playPipelineJob(projectId, jobId, variables);
+        const completed = await waitForStatus(signal => getPipelineJob(projectId, played.id, signal), TERMINAL_JOB_STATUSES, timeoutSeconds, pollIntervalSeconds);
+        jobs.push(completed);
+    }
+    return jobs;
+}
 /**
  * Retry a job
  *
@@ -5842,17 +5934,46 @@ async function playPipelineJob(projectId, jobId, variables) {
  * @param {number} jobId - The ID of the job to retry
  * @returns {Promise<GitLabPipelineJob>} The retried job
  */
-async function retryPipelineJob(projectId, jobId) {
+async function retryPipelineJob(projectId, jobId, jobInputs) {
     projectId = decodeURIComponent(projectId);
     const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/jobs/${encodeGitLabPathSegment(jobId)}/retry`);
     const response = await fetch(url.toString(), {
         ...getFetchConfig(),
         method: "POST",
+        body: jobInputs ? JSON.stringify({ job_inputs: jobInputs }) : undefined,
     });
     await handleGitLabError(response);
     const data = await response.json();
     return GitLabPipelineJobSchema.parse(data);
 }
+async function erasePipelineJob(projectId, jobId) {
+    projectId = decodeURIComponent(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/jobs/${encodeGitLabPathSegment(jobId)}/erase`, { ...getFetchConfig(), method: "POST" });
+    await handleGitLabError(response);
+    return response.status === 204 ? { erased: true } : response.json();
+}
+const TERMINAL_PIPELINE_STATUSES = new Set(["success", "failed", "canceled", "skipped", "manual"]);
+const TERMINAL_JOB_STATUSES = new Set(["success", "failed", "canceled", "skipped", "manual"]);
+async function waitForStatus(fetchStatus, terminalStatuses, timeoutSeconds = 300, pollIntervalSeconds = 5) {
+    const deadline = Date.now() + timeoutSeconds * 1000;
+    const fetchBeforeDeadline = async () => {
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+            throw new Error("Timed out waiting for terminal status");
+        return fetchStatus(AbortSignal.timeout(remaining));
+    };
+    let value = await fetchBeforeDeadline();
+    while (!terminalStatuses.has(value.status)) {
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+            break;
+        await new Promise(resolve => setTimeout(resolve, Math.min(pollIntervalSeconds * 1000, remaining)));
+        value = await fetchBeforeDeadline();
+    }
+    if (!terminalStatuses.has(value.status))
+        throw new Error(`Timed out waiting for terminal status; last status: ${value.status}`);
+    return value;
+}
 /**
  * Cancel a job
  *
@@ -8795,6 +8916,26 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            case "get_pipeline_variables": {
+                const { project_id, pipeline_id, page, per_page } = GetPipelineVariablesSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await getPipelineVariables(project_id, pipeline_id, page, per_page)) }] };
+            }
+            case "get_pipeline_test_report": {
+                const { project_id, pipeline_id, page, per_page } = PipelineReportSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await getPipelineReport(project_id, pipeline_id, false, page, per_page)) }] };
+            }
+            case "get_pipeline_test_report_summary": {
+                const { project_id, pipeline_id, page, per_page } = PipelineReportSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await getPipelineReport(project_id, pipeline_id, true, page, per_page)) }] };
+            }
+            case "delete_pipeline": {
+                const { project_id, pipeline_id } = DeletePipelineSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deletePipeline(project_id, pipeline_id)) }] };
+            }
+            case "update_pipeline_metadata": {
+                const { project_id, pipeline_id, name } = UpdatePipelineMetadataSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await updatePipelineMetadata(project_id, pipeline_id, name)) }] };
+            }
             case "list_deployments": {
                 const args = ListDeploymentsSchema.parse(params.arguments);
                 const { project_id, ...options } = args;
@@ -8810,6 +8951,26 @@ async function handleToolCall(params) {
                     content: [{ type: "text", text: JSON.stringify(deployment) }],
                 };
             }
+            case "create_deployment": {
+                const { project_id, ...body } = CreateDeploymentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deploymentRequest(project_id, "", "POST", body)) }] };
+            }
+            case "update_deployment": {
+                const { project_id, deployment_id, ...body } = UpdateDeploymentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deploymentRequest(project_id, `/${encodeGitLabPathSegment(deployment_id)}`, "PUT", body)) }] };
+            }
+            case "delete_deployment": {
+                const { project_id, deployment_id } = GetDeploymentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deploymentRequest(project_id, `/${encodeGitLabPathSegment(deployment_id)}`, "DELETE")) }] };
+            }
+            case "list_deployment_merge_requests": {
+                const { project_id, deployment_id, ...query } = ListDeploymentMergeRequestsSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deploymentRequest(project_id, `/${encodeGitLabPathSegment(deployment_id)}/merge_requests`, "GET", undefined, query)) }] };
+            }
+            case "approve_deployment": {
+                const { project_id, deployment_id, ...body } = DeploymentApprovalSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await deploymentRequest(project_id, `/${encodeGitLabPathSegment(deployment_id)}/approval`, "POST", body)) }] };
+            }
             case "list_environments": {
                 const args = ListEnvironmentsSchema.parse(params.arguments);
                 const { project_id, ...options } = args;
@@ -8825,6 +8986,50 @@ async function handleToolCall(params) {
                     content: [{ type: "text", text: JSON.stringify(environment) }],
                 };
             }
+            case "update_environment": {
+                const { project_id, environment_id, ...body } = UpdateEnvironmentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await environmentRequest(project_id, `/${encodeGitLabPathSegment(environment_id)}`, "PUT", body)) }] };
+            }
+            case "delete_environment": {
+                const { project_id, environment_id } = GetEnvironmentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await environmentRequest(project_id, `/${encodeGitLabPathSegment(environment_id)}`, "DELETE")) }] };
+            }
+            case "stop_environment": {
+                const { project_id, environment_id, force } = StopEnvironmentSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await environmentRequest(project_id, `/${encodeGitLabPathSegment(environment_id)}/stop`, "POST", undefined, { force })) }] };
+            }
+            case "stop_stale_environments": {
+                const { project_id, before } = StopStaleEnvironmentsSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await environmentRequest(project_id, "/stop_stale", "POST", undefined, { before })) }] };
+            }
+            case "delete_review_app_environments": {
+                const { project_id, ...query } = DeleteReviewAppEnvironmentsSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await environmentRequest(project_id, "/review_apps", "DELETE", undefined, query)) }] };
+            }
+            case "list_pipeline_triggers": {
+                const { project_id } = ListPipelineTriggersSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(redactSensitiveGitLabFields(await pipelineTriggerRequest(project_id))) }] };
+            }
+            case "get_pipeline_trigger": {
+                const { project_id, trigger_id } = PipelineTriggerIdSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(redactSensitiveGitLabFields(await pipelineTriggerRequest(project_id, `/${encodeGitLabPathSegment(trigger_id)}`))) }] };
+            }
+            case "create_pipeline_trigger": {
+                const { project_id, ...body } = CreatePipelineTriggerSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await pipelineTriggerRequest(project_id, "", "POST", body)) }] };
+            }
+            case "update_pipeline_trigger": {
+                const { project_id, trigger_id, ...body } = UpdatePipelineTriggerSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(redactSensitiveGitLabFields(await pipelineTriggerRequest(project_id, `/${encodeGitLabPathSegment(trigger_id)}`, "PUT", body))) }] };
+            }
+            case "delete_pipeline_trigger": {
+                const { project_id, trigger_id } = PipelineTriggerIdSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await pipelineTriggerRequest(project_id, `/${encodeGitLabPathSegment(trigger_id)}`, "DELETE")) }] };
+            }
+            case "trigger_pipeline": {
+                const { project_id, token, ref, variables, inputs } = TriggerPipelineSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await triggerPipeline(project_id, token, ref, variables, inputs)) }] };
+            }
             case "list_pipeline_jobs": {
                 const { project_id, pipeline_id, ...options } = ListPipelineJobsSchema.parse(params.arguments);
                 const jobs = await listPipelineJobs(project_id, pipeline_id, options);
@@ -9178,8 +9383,8 @@ async function handleToolCall(params) {
                 };
             }
             case "play_pipeline_job": {
-                const { project_id, job_id, job_variables_attributes } = PlayPipelineJobSchema.parse(params.arguments);
-                const job = await playPipelineJob(project_id, job_id, job_variables_attributes);
+                const { project_id, job_id, job_variables_attributes, job_inputs } = PlayPipelineJobSchema.parse(params.arguments);
+                const job = await playPipelineJob(project_id, job_id, job_variables_attributes, job_inputs);
                 return {
                     content: [
                         {
@@ -9189,9 +9394,14 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            case "play_pipeline_jobs": {
+                const { project_id, job_ids, job_variables_attributes, timeout_seconds, poll_interval_seconds } = PlayPipelineJobsSchema.parse(params.arguments);
+                const jobs = await playPipelineJobs(project_id, job_ids, job_variables_attributes, timeout_seconds, poll_interval_seconds);
+                return { content: [{ type: "text", text: JSON.stringify(jobs) }] };
+            }
             case "retry_pipeline_job": {
-                const { project_id, job_id } = RetryPipelineJobSchema.parse(params.arguments);
-                const job = await retryPipelineJob(project_id, job_id);
+                const { project_id, job_id, job_inputs } = RetryPipelineJobSchema.parse(params.arguments);
+                const job = await retryPipelineJob(project_id, job_id, job_inputs);
                 return {
                     content: [
                         {
@@ -9213,6 +9423,20 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            case "erase_pipeline_job": {
+                const { project_id, job_id } = ErasePipelineJobSchema.parse(params.arguments);
+                return { content: [{ type: "text", text: JSON.stringify(await erasePipelineJob(project_id, job_id)) }] };
+            }
+            case "wait_for_pipeline": {
+                const { project_id, pipeline_id, timeout_seconds, poll_interval_seconds } = WaitForPipelineSchema.parse(params.arguments);
+                const pipeline = await waitForStatus(signal => getPipeline(project_id, pipeline_id, signal), TERMINAL_PIPELINE_STATUSES, timeout_seconds, poll_interval_seconds);
+                return { content: [{ type: "text", text: JSON.stringify(pipeline) }] };
+            }
+            case "wait_for_job": {
+                const { project_id, job_id, timeout_seconds, poll_interval_seconds } = WaitForPipelineJobSchema.parse(params.arguments);
+                const job = await waitForStatus(signal => getPipelineJob(project_id, job_id, signal), TERMINAL_JOB_STATUSES, timeout_seconds, poll_interval_seconds);
+                return { content: [{ type: "text", text: JSON.stringify(job) }] };
+            }
             case "list_job_artifacts": {
                 const { project_id, job_id, ...options } = ListJobArtifactsSchema.parse(params.arguments);
                 const artifacts = await listJobArtifacts(project_id, job_id, options);

package/build/schemas.js

@@ -119,6 +119,8 @@ export const GitLabPipelineJobSchema = z.object({
     web_url: z.string().optional(),
     allow_failure: z.coerce.boolean().optional(),
     retried: z.coerce.boolean().optional(),
+    when: z.string().optional(),
+    needs: z.array(z.unknown()).optional(),
     tag_list: z.array(z.string()).optional(),
     runner: z
         .object({
@@ -257,6 +259,38 @@ export const GetPipelineSchema = z.object({
     project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
     pipeline_id: z.coerce.string().describe("The ID of the pipeline"),
 });
+export const GetPipelineVariablesSchema = GetPipelineSchema.merge(PaginationOptionsSchema);
+export const UpdatePipelineMetadataSchema = GetPipelineSchema.extend({
+    name: z.string().min(1).describe("New pipeline name"),
+});
+export const DeletePipelineSchema = GetPipelineSchema;
+export const PipelineReportSchema = GetPipelineSchema.merge(PaginationOptionsSchema);
+export const PlayPipelineJobsSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    job_ids: z
+        .array(z.coerce.string())
+        .min(1)
+        .refine((jobIds) => new Set(jobIds).size === jobIds.length, "job_ids must not contain duplicates")
+        .describe("Job IDs to play, in dependency order"),
+    job_variables_attributes: z
+        .array(z.object({ key: z.string(), value: z.string() }))
+        .optional()
+        .describe("Custom job variables to use when running each job"),
+    timeout_seconds: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(600)
+        .optional()
+        .describe("Maximum seconds to wait for each job to reach a terminal status (applied per job; total duration scales with the batch size)"),
+    poll_interval_seconds: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(30)
+        .optional()
+        .describe("Seconds between status polls while waiting for each job"),
+});
 export const GitLabMergeRequestPipelineSchema = z.object({
     id: z.coerce.string(),
     sha: z.string(),
@@ -380,6 +414,28 @@ export const GetCiCatalogResourceSchema = z.union([
     message: "Provide exactly one of id or full_path",
 });
 // Deployment related schemas
+const GitLabDeploymentApprovalUserSchema = z.object({
+    id: z.coerce.string().optional(),
+    username: z.string().optional(),
+    name: z.string().optional(),
+    state: z.string().optional(),
+    avatar_url: z.string().nullable().optional(),
+    web_url: z.string().optional(),
+});
+const GitLabDeploymentApprovalSchema = z.object({
+    user: GitLabDeploymentApprovalUserSchema.optional(),
+    status: z.string().optional(),
+    created_at: z.string().optional(),
+    comment: z.string().nullable().optional(),
+});
+const GitLabDeploymentApprovalRuleSchema = z.object({
+    user_id: z.coerce.string().nullable().optional(),
+    group_id: z.coerce.string().nullable().optional(),
+    access_level: z.coerce.number().nullable().optional(),
+    access_level_description: z.string().nullable().optional(),
+    required_approvals: z.coerce.number().optional(),
+    deployment_approvals: z.array(GitLabDeploymentApprovalSchema).optional(),
+});
 export const GitLabDeploymentSchema = z.object({
     id: z.coerce.string(),
     iid: z.coerce.string().optional(),
@@ -427,6 +483,11 @@ export const GitLabDeploymentSchema = z.object({
     })
         .optional(),
     web_url: z.string().optional(),
+    pending_approval_count: z.coerce.number().optional(),
+    approvals: z.array(GitLabDeploymentApprovalSchema).optional(),
+    approval_summary: z
+        .object({ rules: z.array(GitLabDeploymentApprovalRuleSchema).optional() })
+        .optional(),
 });
 export const ListDeploymentsSchema = z
     .object({
@@ -457,6 +518,19 @@ export const GetDeploymentSchema = z.object({
     project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
     deployment_id: z.coerce.string().describe("The ID of the deployment"),
 });
+export const CreateDeploymentSchema = z.object({
+    project_id: z.coerce.string(), environment: z.string(), sha: z.string(), ref: z.string(),
+    tag: z.boolean(), status: z.enum(["running", "success", "failed", "canceled"]),
+});
+export const UpdateDeploymentSchema = GetDeploymentSchema.extend({
+    status: z.enum(["running", "success", "failed", "canceled"]),
+});
+export const DeploymentApprovalSchema = GetDeploymentSchema.extend({
+    status: z.enum(["approved", "rejected"]),
+    comment: z.string().optional(),
+    represented_as: z.string().optional(),
+});
+export const ListDeploymentMergeRequestsSchema = GetDeploymentSchema.merge(PaginationOptionsSchema);
 // Environment related schemas
 const GitLabEnvironmentLastDeploymentSchema = z.object({
     id: z.coerce.string().optional(),
@@ -496,6 +570,31 @@ export const GetEnvironmentSchema = z.object({
     project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
     environment_id: z.coerce.string().describe("The ID of the environment"),
 });
+export const UpdateEnvironmentSchema = GetEnvironmentSchema.extend({
+    external_url: z.string().url().nullable().optional(),
+    tier: z.enum(["production", "staging", "testing", "development", "other"]).optional(),
+    auto_stop_setting: z.enum(["always", "with_action"]).optional(),
+});
+export const StopEnvironmentSchema = GetEnvironmentSchema.extend({ force: coerceBooleanString.optional() });
+export const StopStaleEnvironmentsSchema = z.object({ project_id: z.coerce.string(), before: z.string() });
+export const DeleteReviewAppEnvironmentsSchema = z.object({
+    project_id: z.coerce.string(), before: z.string().optional(), limit: z.coerce.number().optional(),
+    dry_run: coerceBooleanString
+        .optional()
+        .describe("Preview the cleanup when true (default); set to false to schedule deletion one week later"),
+});
+export const PipelineTriggerIdSchema = z.object({ project_id: z.coerce.string(), trigger_id: z.coerce.string() });
+export const ListPipelineTriggersSchema = z.object({ project_id: z.coerce.string() });
+export const CreatePipelineTriggerSchema = z.object({ project_id: z.coerce.string(), description: z.string() });
+export const UpdatePipelineTriggerSchema = PipelineTriggerIdSchema.extend({ description: z.string() });
+export const TriggerPipelineSchema = z.object({
+    project_id: z.coerce.string(), token: z.string(), ref: z.string(),
+    variables: z.record(z.string()).optional(),
+    inputs: z
+        .record(z.unknown())
+        .optional()
+        .describe("Structured pipeline inputs; supported from GitLab 17.10 behind a feature flag and generally available from GitLab 18.1. Omit on older GitLab versions."),
+});
 // Schema for creating a new pipeline
 export const CreatePipelineSchema = z.object({
     project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
@@ -771,15 +870,51 @@ export const PlayPipelineJobSchema = z.object({
     }))
         .optional()
         .describe("Custom job variables to use when running the job"),
+    job_inputs: z.record(z.unknown()).optional().describe("Typed job input values"),
 });
 // Schema for retrying a job
-export const RetryPipelineJobSchema = PipelineJobControlSchema;
+export const RetryPipelineJobSchema = PipelineJobControlSchema.extend({
+    job_inputs: z.record(z.unknown()).optional().describe("Typed job input values"),
+});
 // Schema for canceling a job
 export const CancelPipelineJobSchema = z.object({
     project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
     job_id: z.coerce.string().describe("The ID of the job"),
     force: z.coerce.boolean().optional().describe("Force cancellation of the job"),
 });
+export const ErasePipelineJobSchema = PipelineJobControlSchema;
+export const WaitForPipelineSchema = GetPipelineSchema.extend({
+    timeout_seconds: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(600)
+        .optional()
+        .describe("Maximum seconds to wait for this pipeline to reach a terminal status"),
+    poll_interval_seconds: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(30)
+        .optional()
+        .describe("Seconds between status polls while waiting for this pipeline"),
+});
+export const WaitForPipelineJobSchema = PipelineJobControlSchema.extend({
+    timeout_seconds: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(600)
+        .optional()
+        .describe("Maximum seconds to wait for this job to reach a terminal status"),
+    poll_interval_seconds: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(30)
+        .optional()
+        .describe("Seconds between status polls while waiting for this job"),
+});
 // User schemas
 export const GitLabUserSchema = z.object({
     username: z.string().optional(), // Changed from login to match GitLab API
@@ -2360,8 +2495,7 @@ export const ListGroupMergeRequestsSchema = ListMergeRequestsSchema.omit({
     project_id: true,
 }).extend({
     group_id: z.coerce.string().describe("Group ID or URL-encoded path"),
-    non_archived: z.coerce
-        .boolean()
+    non_archived: coerceBooleanString
         .optional()
         .describe("Return merge requests from non-archived projects only. Defaults to true."),
     source_project_id: z.coerce

package/build/scripts/check-skill-sync.js

@@ -22,6 +22,11 @@ const REFERENCE_FIELD_ALLOWLIST = new Set([
     "new_file",
     "new_path",
     "old_path",
+    "name",
+    "page",
+    "per_page",
+    "pipeline_id",
+    "job_inputs",
     "project_id",
     "renamed_file",
 ]);

package/build/test/test-deployment-tools.js

@@ -62,7 +62,7 @@ async function callTool(toolName, args, env) {
             env: {
                 ...process.env,
                 ...env,
-                GITLAB_READ_ONLY_MODE: "true",
+                GITLAB_READ_ONLY_MODE: env.GITLAB_READ_ONLY_MODE ?? "true",
                 USE_PIPELINE: "true",
             },
         });
@@ -238,8 +238,62 @@ describe("deployment and environment tools", () => {
                     stage: "deploy",
                     pipeline: { id: "190349", status: "success", ref: "master", sha: "abc123" },
                 },
+                pending_approval_count: 1,
+                approvals: [
+                    {
+                        user: {
+                            id: "100",
+                            username: "security-user-1",
+                            name: "Security User",
+                            state: "active",
+                            web_url: "https://gitlab.example.com/security-user-1",
+                        },
+                        status: "approved",
+                        created_at: "2026-02-20T16:33:00.000Z",
+                        comment: "Looks good to me",
+                    },
+                ],
+                approval_summary: {
+                    rules: [
+                        {
+                            group_id: "134",
+                            access_level: null,
+                            access_level_description: "security-group",
+                            required_approvals: 2,
+                            deployment_approvals: [
+                                {
+                                    user: {
+                                        id: "100",
+                                        username: "security-user-1",
+                                        name: "Security User",
+                                        state: "active",
+                                        web_url: "https://gitlab.example.com/security-user-1",
+                                    },
+                                    status: "approved",
+                                    created_at: "2026-02-20T16:33:00.000Z",
+                                    comment: "Looks good to me",
+                                },
+                            ],
+                        },
+                    ],
+                },
             });
         });
+        mockGitLab.addMockHandler("post", `/projects/${TEST_PROJECT_ID}/deployments`, (_req, res) => {
+            res.status(201).json({ id: "created-deployment", status: "created" });
+        });
+        mockGitLab.addMockHandler("put", `/projects/${TEST_PROJECT_ID}/deployments/${TEST_DEPLOYMENT_ID}`, (_req, res) => {
+            res.json({ id: TEST_DEPLOYMENT_ID, status: "success" });
+        });
+        mockGitLab.addMockHandler("delete", `/projects/${TEST_PROJECT_ID}/deployments/${TEST_DEPLOYMENT_ID}`, (_req, res) => {
+            res.status(204).send();
+        });
+        mockGitLab.addMockHandler("get", `/projects/${TEST_PROJECT_ID}/deployments/${TEST_DEPLOYMENT_ID}/merge_requests`, (_req, res) => {
+            res.json([{ iid: TEST_MERGE_REQUEST_IID, title: "Shipped change" }]);
+        });
+        mockGitLab.addMockHandler("post", `/projects/${TEST_PROJECT_ID}/deployments/${TEST_DEPLOYMENT_ID}/approval`, (_req, res) => {
+            res.json({ id: TEST_DEPLOYMENT_ID, status: "approved" });
+        });
         mockGitLab.addMockHandler("get", `/projects/${TEST_PROJECT_ID}/environments`, (req, res) => {
             res.json([
                 {
@@ -298,6 +352,35 @@ describe("deployment and environment tools", () => {
         assert.strictEqual(result.id, TEST_DEPLOYMENT_ID);
         assert.strictEqual(result.ref, "master");
         assert.strictEqual(result.status, "success");
+        assert.strictEqual(result.pending_approval_count, 1);
+        assert.strictEqual(result.approvals[0].status, "approved");
+        assert.strictEqual(result.approvals[0].user.username, "security-user-1");
+        assert.strictEqual(result.approval_summary.rules[0].group_id, "134");
+        assert.strictEqual(result.approval_summary.rules[0].deployment_approvals[0].comment, "Looks good to me");
+    });
+    test("supports deployment lifecycle and approval operations", async () => {
+        const env = {
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+            GITLAB_READ_ONLY_MODE: "false",
+        };
+        const created = await callTool("create_deployment", {
+            project_id: TEST_PROJECT_ID,
+            environment: "stage",
+            sha: "abc123",
+            ref: "master",
+            tag: false,
+            status: "running",
+        }, env);
+        assert.strictEqual(created.id, "created-deployment");
+        const updated = await callTool("update_deployment", { project_id: TEST_PROJECT_ID, deployment_id: TEST_DEPLOYMENT_ID, status: "success" }, env);
+        assert.strictEqual(updated.status, "success");
+        const mergeRequests = await callTool("list_deployment_merge_requests", { project_id: TEST_PROJECT_ID, deployment_id: TEST_DEPLOYMENT_ID }, env);
+        assert.strictEqual(mergeRequests[0].iid, TEST_MERGE_REQUEST_IID);
+        const approval = await callTool("approve_deployment", { project_id: TEST_PROJECT_ID, deployment_id: TEST_DEPLOYMENT_ID, status: "approved" }, env);
+        assert.strictEqual(approval.status, "approved");
+        const deleted = await callTool("delete_deployment", { project_id: TEST_PROJECT_ID, deployment_id: TEST_DEPLOYMENT_ID }, env);
+        assert.deepStrictEqual(deleted, { success: true });
     });
     test("list_environments returns environment list", async () => {
         const result = await callTool("list_environments", { project_id: TEST_PROJECT_ID }, {

package/build/test/test-permission-mode.js

@@ -67,6 +67,7 @@ const MODIFY_SAMPLE_TOOLS = [
     "create_branch",
     "push_files",
     "merge_merge_request",
+    "stop_stale_environments",
 ];
 const READ_SAMPLE_TOOLS = ["list_issues", "get_project", "list_merge_requests"];
 describe("Permission Mode", { concurrency: 1 }, () => {

package/build/test/test-toolset-filtering.js

@@ -23,7 +23,7 @@ const TOOLSET_TOOL_COUNTS = {
     projects: 11,
     labels: 5,
     ci: 4,
-    pipelines: 31,
+    pipelines: 56,
     milestones: 17,
     wiki: 10,
     releases: 7,

package/build/tools/registry.js

@@ -2,7 +2,7 @@ import { zodToJsonSchema } from "zod-to-json-schema";
 import { toJSONSchema } from "../utils/schema.js";
 import { USE_GITLAB_WIKI, USE_MILESTONE, USE_PIPELINE, SSE, STREAMABLE_HTTP, } from "../config.js";
 import { getToolDescription } from "./tool-descriptions.js";
-import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWebhookSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWebhookSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupMilestonesSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListGroupMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListPipelinesSchema, ListPipelineSchedulesSchema, GetPipelineScheduleSchema, ListPipelineSchedulePipelinesSchema, CreatePipelineScheduleSchema, UpdatePipelineScheduleSchema, DeletePipelineScheduleSchema, PlayPipelineScheduleSchema, TakeOwnershipPipelineScheduleSchema, GetPipelineScheduleVariableSchema, CreatePipelineScheduleVariableSchema, UpdatePipelineScheduleVariableSchema, DeletePipelineScheduleVariableSchema, ListGroupMembersSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWebhookSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, } from "../schemas.js";
+import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, ErasePipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWebhookSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWebhookSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, CreateDeploymentSchema, UpdateDeploymentSchema, DeploymentApprovalSchema, ListDeploymentMergeRequestsSchema, GetDraftNoteSchema, GetEnvironmentSchema, UpdateEnvironmentSchema, StopEnvironmentSchema, StopStaleEnvironmentsSchema, DeleteReviewAppEnvironmentsSchema, PipelineTriggerIdSchema, ListPipelineTriggersSchema, CreatePipelineTriggerSchema, UpdatePipelineTriggerSchema, TriggerPipelineSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetPipelineVariablesSchema, UpdatePipelineMetadataSchema, DeletePipelineSchema, PipelineReportSchema, WaitForPipelineSchema, WaitForPipelineJobSchema, PlayPipelineJobsSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupMilestonesSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListGroupMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListPipelinesSchema, ListPipelineSchedulesSchema, GetPipelineScheduleSchema, ListPipelineSchedulePipelinesSchema, CreatePipelineScheduleSchema, UpdatePipelineScheduleSchema, DeletePipelineScheduleSchema, PlayPipelineScheduleSchema, TakeOwnershipPipelineScheduleSchema, GetPipelineScheduleVariableSchema, CreatePipelineScheduleVariableSchema, UpdatePipelineScheduleVariableSchema, DeletePipelineScheduleVariableSchema, ListGroupMembersSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWebhookSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, } from "../schemas.js";
 const IS_REMOTE = SSE || STREAMABLE_HTTP;
 // Define all available tools
 export const allTools = [
@@ -550,6 +550,15 @@ export const allTools = [
         description: "Get details of a specific pipeline",
         inputSchema: toJSONSchema(GetPipelineSchema),
     },
+    {
+        name: "get_pipeline_variables",
+        description: "Get variables configured for a pipeline",
+        inputSchema: toJSONSchema(GetPipelineVariablesSchema),
+    },
+    { name: "get_pipeline_test_report", description: "Get pipeline test report", inputSchema: toJSONSchema(PipelineReportSchema) },
+    { name: "get_pipeline_test_report_summary", description: "Get pipeline test report summary", inputSchema: toJSONSchema(PipelineReportSchema) },
+    { name: "delete_pipeline", description: "Delete a pipeline. Requires the project Owner role, cannot be undone, and does not automatically delete child pipelines.", inputSchema: toJSONSchema(DeletePipelineSchema) },
+    { name: "update_pipeline_metadata", description: "Update pipeline metadata", inputSchema: toJSONSchema(UpdatePipelineMetadataSchema) },
     {
         name: "list_deployments",
         description: "List deployments with filtering options",
@@ -557,9 +566,14 @@ export const allTools = [
     },
     {
         name: "get_deployment",
-        description: "Get details of a specific deployment",
+        description: "Get deployment details, including approval_summary, approvals, and pending_approval_count when GitLab provides them",
         inputSchema: toJSONSchema(GetDeploymentSchema),
     },
+    { name: "create_deployment", description: "Create a deployment", inputSchema: toJSONSchema(CreateDeploymentSchema) },
+    { name: "update_deployment", description: "Update a deployment status", inputSchema: toJSONSchema(UpdateDeploymentSchema) },
+    { name: "delete_deployment", description: "Delete a deployment", inputSchema: toJSONSchema(GetDeploymentSchema) },
+    { name: "list_deployment_merge_requests", description: "List merge requests shipped with a deployment", inputSchema: toJSONSchema(ListDeploymentMergeRequestsSchema) },
+    { name: "approve_deployment", description: "Approve or reject a protected-environment deployment", inputSchema: toJSONSchema(DeploymentApprovalSchema) },
     {
         name: "list_environments",
         description: "List environments in a project",
@@ -570,6 +584,17 @@ export const allTools = [
         description: "Get details of a specific environment",
         inputSchema: toJSONSchema(GetEnvironmentSchema),
     },
+    { name: "update_environment", description: "Update an environment", inputSchema: toJSONSchema(UpdateEnvironmentSchema) },
+    { name: "delete_environment", description: "Delete a stopped environment", inputSchema: toJSONSchema(GetEnvironmentSchema) },
+    { name: "stop_environment", description: "Stop an environment", inputSchema: toJSONSchema(StopEnvironmentSchema) },
+    { name: "stop_stale_environments", description: "Stop eligible stale environments; protected environments are excluded and environments are stopped, not deleted", inputSchema: toJSONSchema(StopStaleEnvironmentsSchema) },
+    { name: "delete_review_app_environments", description: "Schedule deletion of stopped review-app environments one week later; dry_run defaults to true and actual scheduling requires dry_run=false", inputSchema: toJSONSchema(DeleteReviewAppEnvironmentsSchema) },
+    { name: "list_pipeline_triggers", description: "List project pipeline trigger tokens", inputSchema: toJSONSchema(ListPipelineTriggersSchema) },
+    { name: "get_pipeline_trigger", description: "Get a project pipeline trigger", inputSchema: toJSONSchema(PipelineTriggerIdSchema) },
+    { name: "create_pipeline_trigger", description: "Create a project pipeline trigger", inputSchema: toJSONSchema(CreatePipelineTriggerSchema) },
+    { name: "update_pipeline_trigger", description: "Update a project pipeline trigger", inputSchema: toJSONSchema(UpdatePipelineTriggerSchema) },
+    { name: "delete_pipeline_trigger", description: "Delete a project pipeline trigger", inputSchema: toJSONSchema(PipelineTriggerIdSchema) },
+    { name: "trigger_pipeline", description: "Trigger a pipeline with a pipeline trigger token", inputSchema: toJSONSchema(TriggerPipelineSchema) },
     {
         name: "list_pipeline_jobs",
         description: "List all jobs in a specific pipeline",
@@ -690,6 +715,11 @@ export const allTools = [
         description: "Run a manual pipeline job",
         inputSchema: toJSONSchema(PlayPipelineJobSchema),
     },
+    {
+        name: "play_pipeline_jobs",
+        description: "Play multiple manual pipeline jobs sequentially",
+        inputSchema: toJSONSchema(PlayPipelineJobsSchema),
+    },
     {
         name: "retry_pipeline_job",
         description: "Retry a failed or canceled pipeline job",
@@ -700,6 +730,9 @@ export const allTools = [
         description: "Cancel a running pipeline job",
         inputSchema: toJSONSchema(CancelPipelineJobSchema),
     },
+    { name: "erase_pipeline_job", description: "Erase a pipeline job log and artifacts", inputSchema: toJSONSchema(ErasePipelineJobSchema) },
+    { name: "wait_for_pipeline", description: "Wait for a pipeline to reach a terminal status", inputSchema: toJSONSchema(WaitForPipelineSchema) },
+    { name: "wait_for_job", description: "Wait for a job to reach a terminal status", inputSchema: toJSONSchema(WaitForPipelineJobSchema) },
     {
         name: "list_job_artifacts",
         description: "List artifact files in a job's archive",
@@ -1250,6 +1283,9 @@ export const readOnlyTools = new Set([
     "list_project_members",
     "list_group_members",
     "get_pipeline",
+    "get_pipeline_variables",
+    "get_pipeline_test_report",
+    "get_pipeline_test_report_summary",
     "list_pipelines",
     "list_pipeline_schedules",
     "get_pipeline_schedule",
@@ -1257,12 +1293,17 @@ export const readOnlyTools = new Set([
     "get_pipeline_schedule_variable",
     "list_deployments",
     "get_deployment",
+    "list_deployment_merge_requests",
     "list_environments",
     "get_environment",
+    "list_pipeline_triggers",
+    "get_pipeline_trigger",
     "list_pipeline_jobs",
     "list_pipeline_trigger_jobs",
     "get_pipeline_job",
     "get_pipeline_job_output",
+    "wait_for_pipeline",
+    "wait_for_job",
     "validate_ci_lint",
     "validate_project_ci_lint",
     "list_ci_catalog_resources",
@@ -1335,6 +1376,13 @@ export const readOnlyTools = new Set([
 ]);
 // Define which tools are destructive (data loss potential)
 export const destructiveTools = new Set([
+    "delete_pipeline",
+    "erase_pipeline_job",
+    "delete_deployment",
+    "approve_deployment",
+    "delete_environment",
+    "delete_review_app_environments",
+    "delete_pipeline_trigger",
     "delete_issue",
     "delete_issue_link",
     "delete_label",
@@ -1369,6 +1417,12 @@ export const destructiveTools = new Set([
 // Tools that permanently delete resources — blocked in "modify" permission mode.
 // Narrower than destructiveTools: merge/protect/push are modifications, not deletions.
 export const deleteTools = new Set([
+    "delete_pipeline",
+    "erase_pipeline_job",
+    "delete_deployment",
+    "delete_environment",
+    "delete_review_app_environments",
+    "delete_pipeline_trigger",
     "delete_branch",
     "delete_draft_note",
     "delete_group_variable",
@@ -1433,14 +1487,39 @@ export const milestoneToolNames = new Set([
 export const pipelineToolNames = new Set([
     "list_pipelines",
     "get_pipeline",
+    "get_pipeline_variables",
+    "get_pipeline_test_report",
+    "get_pipeline_test_report_summary",
+    "delete_pipeline",
+    "update_pipeline_metadata",
     "list_deployments",
     "get_deployment",
+    "create_deployment",
+    "update_deployment",
+    "delete_deployment",
+    "list_deployment_merge_requests",
+    "approve_deployment",
     "list_environments",
     "get_environment",
+    "update_environment",
+    "delete_environment",
+    "stop_environment",
+    "stop_stale_environments",
+    "delete_review_app_environments",
+    "list_pipeline_triggers",
+    "get_pipeline_trigger",
+    "create_pipeline_trigger",
+    "update_pipeline_trigger",
+    "delete_pipeline_trigger",
+    "trigger_pipeline",
     "list_pipeline_jobs",
     "list_pipeline_trigger_jobs",
     "get_pipeline_job",
     "get_pipeline_job_output",
+    "play_pipeline_jobs",
+    "erase_pipeline_job",
+    "wait_for_pipeline",
+    "wait_for_job",
     "validate_ci_lint",
     "validate_project_ci_lint",
     "create_pipeline",
@@ -1629,10 +1708,31 @@ export const TOOLSET_DEFINITIONS = [
         tools: new Set([
             "list_pipelines",
             "get_pipeline",
+            "get_pipeline_variables",
+            "get_pipeline_test_report",
+            "get_pipeline_test_report_summary",
+            "delete_pipeline",
+            "update_pipeline_metadata",
             "list_deployments",
             "get_deployment",
+            "create_deployment",
+            "update_deployment",
+            "delete_deployment",
+            "list_deployment_merge_requests",
+            "approve_deployment",
             "list_environments",
             "get_environment",
+            "update_environment",
+            "delete_environment",
+            "stop_environment",
+            "stop_stale_environments",
+            "delete_review_app_environments",
+            "list_pipeline_triggers",
+            "get_pipeline_trigger",
+            "create_pipeline_trigger",
+            "update_pipeline_trigger",
+            "delete_pipeline_trigger",
+            "trigger_pipeline",
             "list_pipeline_jobs",
             "list_pipeline_trigger_jobs",
             "get_pipeline_job",
@@ -1653,8 +1753,12 @@ export const TOOLSET_DEFINITIONS = [
             "update_pipeline_schedule_variable",
             "delete_pipeline_schedule_variable",
             "play_pipeline_job",
+            "play_pipeline_jobs",
             "retry_pipeline_job",
             "cancel_pipeline_job",
+            "erase_pipeline_job",
+            "wait_for_pipeline",
+            "wait_for_job",
             "list_job_artifacts",
             "download_job_artifacts",
             "get_job_artifact_file",

package/build/tools/tool-descriptions.js

@@ -46,6 +46,8 @@ const TOOL_GUIDANCE = {
     create_pipeline_schedule_variable: "Use this to attach a new variable to a pipeline schedule so its scheduled pipelines receive it; use `update_pipeline_schedule_variable` when the key already exists and `create_project_variable` for a project-wide variable. `variable_type` defaults to `env_var` and `key` is limited to 255 characters matching /[a-zA-Z0-9_]+/. It creates remote CI configuration, requires the Developer, Maintainer, or Owner role and ownership of the schedule, and returns the new variable or a validation, duplicate-key, or permission error.",
     update_pipeline_schedule_variable: "Use this to change the value or type of an existing pipeline schedule variable; use `create_pipeline_schedule_variable` when the key does not exist yet. It changes remote CI configuration that scheduled pipelines consume, requires the Developer, Maintainer, or Owner role and ownership of the schedule, and returns the updated variable or a missing-key, validation, or permission error.",
     delete_pipeline_schedule_variable: "Use this only after confirming the key with `get_pipeline_schedule` or `get_pipeline_schedule_variable`; use `update_pipeline_schedule_variable` to change a value without removing it. The operation permanently removes the variable from the schedule so later scheduled pipelines no longer receive it, requires the Developer, Maintainer, or Owner role and ownership of the schedule, and returns a confirmation or a missing-key or permission error.",
+    stop_stale_environments: "Use this to stop eligible stale environments in a project. GitLab excludes protected environments, and this operation stops environments without deleting them. It requires the necessary project permission and returns the result or a validation, permission, or rate-limit error.",
+    delete_review_app_environments: "Use this to clean up stopped review-app environments after verifying the scope. GitLab schedules deletion one week later rather than deleting environments immediately; `dry_run` defaults to `true`, so actual scheduling requires `dry_run: false`. It requires the necessary project permission and returns the cleanup result or a validation, permission, or rate-limit error.",
 };
 const PARAMETER_GUIDANCE = "When `project_id` or `group_id` is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.";
 function ensureSentence(text) {

package/build/utils/redact-sensitive.js

@@ -3,16 +3,23 @@
  * MCP tool results become part of the AI conversation context, so these must
  * never be forwarded to the model.
  */
-const SENSITIVE_GITLAB_FIELDS = ["runners_token", "import_url"];
+const SENSITIVE_GITLAB_FIELDS = ["runners_token", "import_url", "token"];
 /**
  * Strip known sensitive fields from a GitLab API response object before it is
  * returned as an MCP tool result. Mutates and returns the same object.
+ * Recurses into arrays (e.g. list responses) since those hold one object per item.
  *
- * Used for raw passthrough responses (get_project / update_project) that do not
- * go through a Zod schema, since Zod would otherwise strip unknown keys for us.
+ * Used for raw passthrough responses (get_project / update_project,
+ * list/get_pipeline_trigger) that do not go through a Zod schema, since Zod
+ * would otherwise strip unknown keys for us. Do NOT apply to
+ * create_pipeline_trigger: its response carries the newly issued token once.
  */
 export function redactSensitiveGitLabFields(data) {
-    if (data && typeof data === "object") {
+    if (Array.isArray(data)) {
+        for (const item of data)
+            redactSensitiveGitLabFields(item);
+    }
+    else if (data && typeof data === "object") {
         for (const key of SENSITIVE_GITLAB_FIELDS) {
             delete data[key];
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.1.58",
+  "version": "2.1.59",
   "mcpName": "io.github.zereight/gitlab-mcp",
   "description": "GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more",
   "keywords": [