@zereight/mcp-gitlab 2.1.7 → 2.1.9

package/build/index.js

@@ -25,15 +25,13 @@ import { requireBearerAuth } from "@modelcontextprotocol/sdk/server/auth/middlew
 import { GitLabClientPool } from "./gitlab-client-pool.js";
 import { allTools, readOnlyTools, destructiveTools, parseEnabledToolsets, parseIndividualTools, buildFeatureFlagOverrides, isToolInEnabledToolset, TOOLSET_DEFINITIONS, ALL_TOOLSET_IDS, } from "./tools/registry.js";
 import { BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, // Added
-CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateMergeRequestNoteEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateRepositorySchema, CreateWikiPageSchema, CreateGroupWikiPageSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, EditProjectMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetDeploymentSchema, GetEnvironmentSchema, GetNamespaceSchema, 
-// pipeline job schemas
-GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectMilestoneSchema, GetProjectSchema, GetRepositoryTreeSchema, GetUsersSchema, GetWikiPageSchema, GitLabCommitSchema, GitLabCompareResultSchema, GitLabContentSchema, GitLabCreateUpdateFileResponseSchema, GitLabDiffSchema, 
+CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateMergeRequestNoteEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateRepositorySchema, CreateWikiPageSchema, CreateGroupWikiPageSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, EditProjectMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetDeploymentSchema, GetEnvironmentSchema, GetNamespaceSchema, GitLabCiLintResultSchema, GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectMilestoneSchema, GetProjectSchema, GetRepositoryTreeSchema, GetUsersSchema, GetWikiPageSchema, GitLabCommitSchema, GitLabCommitStatusSchema, GitLabCompareResultSchema, GitLabContentSchema, GitLabCreateUpdateFileResponseSchema, GitLabDiffSchema, 
 // Discussion Schemas
 GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
 // Draft Notes Schemas
-GitLabDraftNoteSchema, GitLabForkSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
-GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, } from "./schemas.js";
+GitLabDraftNoteSchema, GitLabForkSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitStatusesSchema, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
+GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, MarkAllTodosDoneSchema, MarkTodoDoneSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, } from "./schemas.js";
 import { randomUUID } from "node:crypto";
 import { pino } from "pino";
 const logger = pino({
@@ -396,9 +394,13 @@ function validateConfiguration() {
     const hasCookie = !!getConfig("cookie-path", "GITLAB_AUTH_COOKIE_PATH");
     const mcpOAuth = getConfig("mcp-oauth", "GITLAB_MCP_OAUTH") === "true";
     const mcpServerUrl = getConfig("mcp-server-url", "MCP_SERVER_URL");
+    const streamableHttp = getConfig("streamable-http", "STREAMABLE_HTTP") === "true";
     if (!remoteAuth && !useOAuth && !hasToken && !hasJobToken && !hasCookie && !mcpOAuth) {
         errors.push("Either --token, --job-token, --cookie-path, --use-oauth=true, --remote-auth=true, or --mcp-oauth=true must be set (or use environment variables)");
     }
+    if (streamableHttp && (hasToken || hasJobToken) && !remoteAuth && !mcpOAuth) {
+        errors.push("STREAMABLE_HTTP=true/--streamable-http with GITLAB_PERSONAL_ACCESS_TOKEN/--token or GITLAB_JOB_TOKEN/--job-token requires REMOTE_AUTHORIZATION=true/--remote-auth=true or GITLAB_MCP_OAUTH=true/--mcp-oauth=true");
+    }
     if (mcpOAuth) {
         if (!mcpServerUrl) {
             errors.push("MCP_SERVER_URL is required when GITLAB_MCP_OAUTH=true (e.g. https://mcp.example.com)");
@@ -1097,6 +1099,36 @@ async function listIssues(projectId, options = {}) {
     const data = await response.json();
     return z.array(GitLabIssueSchema).parse(data);
 }
+async function listTodos(options = {}) {
+    const url = new URL(`${getEffectiveApiUrl()}/todos`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value !== undefined) {
+            url.searchParams.append(key, String(value));
+        }
+    });
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return z.array(GitLabTodoSchema).parse(data);
+}
+async function markTodoDone(id) {
+    const response = await fetch(`${getEffectiveApiUrl()}/todos/${id}/mark_as_done`, {
+        ...getFetchConfig(),
+        method: "POST",
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabTodoSchema.parse(data);
+}
+async function markAllTodosDone() {
+    const response = await fetch(`${getEffectiveApiUrl()}/todos/mark_as_done`, {
+        ...getFetchConfig(),
+        method: "POST",
+    });
+    await handleGitLabError(response);
+}
 /**
  * List merge requests globally or for a specific GitLab project
  *
@@ -4769,6 +4801,38 @@ async function getPipelineJobOutput(projectId, jobId, limit, offset) {
     }
     return fullTrace;
 }
+async function validateCiLint(projectId, options) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/ci/lint`);
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+        method: "POST",
+        body: JSON.stringify(options),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabCiLintResultSchema.parse(data);
+}
+async function validateProjectCiLint(projectId, options) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/ci/lint`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value !== undefined) {
+            if (typeof value === "boolean") {
+                url.searchParams.append(key, value ? "true" : "false");
+            }
+            else {
+                url.searchParams.append(key, value.toString());
+            }
+        }
+    });
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabCiLintResultSchema.parse(data);
+}
 /**
  * List artifact files in a job's artifacts archive
  *
@@ -5327,6 +5391,56 @@ async function getCommitDiff(projectId, sha, full_diff) {
     }
     return allDiffs;
 }
+/**
+ * List statuses for a commit.
+ *
+ * @param {string} projectId - Project ID or URL-encoded path
+ * @param {string} sha - The commit hash or name of a repository branch or tag
+ * @param {ListCommitStatusesOptions} options - List commit statuses options
+ * @returns {Promise<GitLabCommitStatus[]>} List of commit statuses
+ */
+async function listCommitStatuses(projectId, sha, options = {}) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/repository/commits/${encodeURIComponent(sha)}/statuses`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value !== undefined) {
+            url.searchParams.append(key, value.toString());
+        }
+    });
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return z.array(GitLabCommitStatusSchema).parse(data);
+}
+/**
+ * Create or update a commit status.
+ *
+ * @param {string} projectId - Project ID or URL-encoded path
+ * @param {string} sha - The commit hash
+ * @param {CreateCommitStatusOptions} options - Commit status fields
+ * @returns {Promise<GitLabCommitStatus>} The created commit status
+ */
+async function createCommitStatus(projectId, sha, options) {
+    if (options.name && options.context) {
+        throw new Error("Use either name or context when creating a commit status, not both.");
+    }
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/statuses/${encodeURIComponent(sha)}`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value !== undefined) {
+            url.searchParams.append(key, value.toString());
+        }
+    });
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+        method: "POST",
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabCommitStatusSchema.parse(data);
+}
 /**
  * Get the current authenticated user
  * 현재 인증된 사용자 가져오기
@@ -5791,7 +5905,7 @@ async function getTagSignature(projectId, tagName) {
 async function handleToolCall(params) {
     try {
         if (!params.arguments) {
-            throw new Error("Arguments are required");
+            params.arguments = {};
         }
         // Ensure session is established for every request if cookie authentication is enabled
         if (GITLAB_AUTH_COOKIE_PATH) {
@@ -6150,6 +6264,35 @@ async function handleToolCall(params) {
                 await deleteRestAwardEmoji(path);
                 return { content: [{ type: "text", text: "Issue note emoji reaction deleted successfully" }] };
             }
+            case "list_todos": {
+                const args = ListTodosSchema.parse(params.arguments);
+                const todos = await listTodos(args);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(todos, null, 2) }],
+                };
+            }
+            case "mark_todo_done": {
+                const args = MarkTodoDoneSchema.parse(params.arguments);
+                const todo = await markTodoDone(args.id);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(todo, null, 2) }],
+                };
+            }
+            case "mark_all_todos_done": {
+                MarkAllTodosDoneSchema.parse(params.arguments);
+                await markAllTodosDone();
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({
+                                status: "success",
+                                message: "All pending to-do items marked as done",
+                            }, null, 2),
+                        },
+                    ],
+                };
+            }
             case "get_merge_request": {
                 const args = GetMergeRequestSchema.parse(params.arguments);
                 const mergeRequest = await getMergeRequest(args.project_id, args.merge_request_iid, args.source_branch);
@@ -6902,6 +7045,22 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            case "validate_ci_lint": {
+                const args = ValidateCiLintSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const result = await validateCiLint(project_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+                };
+            }
+            case "validate_project_ci_lint": {
+                const args = ValidateProjectCiLintSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const result = await validateProjectCiLint(project_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+                };
+            }
             case "create_pipeline": {
                 const { project_id, ref, variables, inputs } = CreatePipelineSchema.parse(params.arguments);
                 const pipeline = await createPipeline(project_id, ref, variables, inputs);
@@ -7161,6 +7320,22 @@ async function handleToolCall(params) {
                     content: [{ type: "text", text: JSON.stringify(diff, null, 2) }],
                 };
             }
+            case "list_commit_statuses": {
+                const args = ListCommitStatusesSchema.parse(params.arguments);
+                const { project_id, sha, ...options } = args;
+                const statuses = await listCommitStatuses(project_id, sha, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(statuses, null, 2) }],
+                };
+            }
+            case "create_commit_status": {
+                const args = CreateCommitStatusSchema.parse(params.arguments);
+                const { project_id, sha, ...options } = args;
+                const status = await createCommitStatus(project_id, sha, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(status, null, 2) }],
+                };
+            }
             case "list_group_iterations": {
                 const args = ListGroupIterationsSchema.parse(params.arguments);
                 const iterations = await listGroupIterations(args.group_id, args);
@@ -7872,11 +8047,10 @@ async function startStreamableHTTPServer() {
         app._mcpOAuthProvider = oauthProvider;
         // Mount /callback route for callback proxy mode
         if (GITLAB_OAUTH_CALLBACK_PROXY) {
-            const callbackPath = `${issuerUrl.pathname.replace(/\/$/, "")}/callback`;
-            app.get(callbackPath, (req, res, next) => {
+            app.get("/callback", (req, res, next) => {
                 oauthProvider.handleCallback(req, res).catch(next);
             });
-            logger.info(`Callback proxy mode enabled — ${callbackPath} route mounted`);
+            logger.info(`Callback proxy mode enabled — /callback route mounted`);
         }
     }
     // Build bearer-auth middleware — no-op unless GITLAB_MCP_OAUTH is enabled.

package/build/schemas.js

@@ -12,6 +12,16 @@ const coerceStringArray = z.preprocess((val) => {
     }
     return val;
 }, z.array(z.string()));
+const coerceBooleanString = z.preprocess((val) => {
+    if (typeof val === "string") {
+        const normalized = val.trim().toLowerCase();
+        if (normalized === "true")
+            return true;
+        if (normalized === "false")
+            return false;
+    }
+    return val;
+}, z.boolean());
 // Base schemas for common types
 export const GitLabAuthorSchema = z.object({
     name: z.string(),
@@ -275,6 +285,34 @@ export const ListPipelineTriggerJobsSchema = z
         .describe("The scope of trigger jobs to show"),
 })
     .merge(PaginationOptionsSchema);
+export const GitLabCiLintResultSchema = z.object({
+    valid: z.coerce.boolean(),
+    errors: z.array(z.string()),
+    warnings: z.array(z.string()).optional(),
+    merged_yaml: z.string().optional(),
+    includes: z.array(z.unknown()).optional(),
+    jobs: z.array(z.unknown()).optional(),
+});
+export const ValidateCiLintSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    content: z.string().describe("GitLab CI/CD YAML content to validate"),
+    dry_run: z.coerce.boolean().optional().describe("Run pipeline creation simulation"),
+    include_jobs: z.coerce.boolean().optional().describe("Include jobs in the lint response"),
+    ref: z.string().optional().describe("Branch or tag context for dry_run validation"),
+});
+export const ValidateProjectCiLintSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    content_ref: z
+        .string()
+        .optional()
+        .describe("Commit SHA, branch, or tag to read the existing CI config from"),
+    dry_run: z.coerce.boolean().optional().describe("Run pipeline creation simulation"),
+    dry_run_ref: z
+        .string()
+        .optional()
+        .describe("Branch or tag context for dry_run validation"),
+    include_jobs: z.coerce.boolean().optional().describe("Include jobs in the lint response"),
+});
 // Deployment related schemas
 export const GitLabDeploymentSchema = z.object({
     id: z.coerce.string(),
@@ -671,6 +709,35 @@ export const GitLabCommitSchema = z.object({
     trailers: z.record(z.string()).optional().default({}), // Git trailers, may be empty object
     extended_trailers: z.record(z.array(z.string())).optional().default({}), // Extended trailers, may be empty object
 });
+export const GitLabCommitStatusSchema = z
+    .object({
+    id: z.coerce.number().optional(),
+    sha: z.string(),
+    ref: z.string().nullable().optional(),
+    status: z.string(),
+    name: z.string().optional(),
+    context: z.string().optional(),
+    target_url: z.string().nullable().optional(),
+    description: z.string().nullable().optional(),
+    coverage: z.coerce.number().nullable().optional(),
+    allow_failure: z.coerce.boolean().optional(),
+    created_at: z.string().optional(),
+    started_at: z.string().nullable().optional(),
+    finished_at: z.string().nullable().optional(),
+    author: z
+        .object({
+        id: z.coerce.number().optional(),
+        name: z.string().optional(),
+        username: z.string().optional(),
+        state: z.string().optional(),
+        avatar_url: z.string().nullable().optional(),
+        web_url: z.string().optional(),
+    })
+        .passthrough()
+        .nullable()
+        .optional(),
+})
+    .passthrough();
 // Reference schema
 export const GitLabReferenceSchema = z.object({
     name: z.string(), // Changed from ref to match GitLab API
@@ -898,6 +965,7 @@ export const GitLabMergeRequestSchema = z.object({
     author: GitLabUserSchema,
     assignees: z.array(GitLabUserSchema).optional(),
     reviewers: z.array(GitLabUserSchema).optional(),
+    milestone: GitLabMilestoneSchema.nullable().optional(),
     source_branch: z.string(),
     target_branch: z.string(),
     diff_refs: GitLabMergeRequestDiffRefSchema.nullable().optional(),
@@ -1234,6 +1302,60 @@ export const CreateIssueSchema = ProjectParamsSchema.extend({
         .describe("The type of issue. One of issue, incident, test_case or task."),
     weight: z.coerce.number().optional().describe("Weight of the issue (numeric, typically hours of work)"),
 });
+export const GitLabTodoSchema = z.object({
+    id: z.coerce.number(),
+    project: z.unknown().optional(),
+    author: z.unknown().optional(),
+    action_name: z.string().optional(),
+    target_type: z.string().optional(),
+    target: z.unknown().optional(),
+    target_url: z.string().optional(),
+    body: z.string().optional(),
+    state: z.string(),
+    created_at: z.string().optional(),
+    updated_at: z.string().optional(),
+});
+export const ListTodosSchema = z
+    .object({
+    action: z
+        .enum([
+        "assigned",
+        "mentioned",
+        "build_failed",
+        "marked",
+        "approval_required",
+        "unmergeable",
+        "directly_addressed",
+        "merge_train_removed",
+        "member_access_requested",
+    ])
+        .optional()
+        .describe("Filter by to-do action"),
+    author_id: z.coerce.number().optional().describe("Filter by author ID"),
+    project_id: z.coerce.number().optional().describe("Filter by project ID"),
+    group_id: z.coerce.number().optional().describe("Filter by group ID"),
+    state: z.enum(["pending", "done"]).optional().describe("Filter by to-do state"),
+    type: z
+        .enum([
+        "Issue",
+        "MergeRequest",
+        "Commit",
+        "Epic",
+        "DesignManagement::Design",
+        "AlertManagement::Alert",
+        "Project",
+        "Namespace",
+        "Vulnerability",
+        "WikiPage::Meta",
+    ])
+        .optional()
+        .describe("Filter by to-do target type"),
+})
+    .merge(PaginationOptionsSchema);
+export const MarkTodoDoneSchema = z.object({
+    id: z.coerce.number().describe("The ID of the to-do item"),
+});
+export const MarkAllTodosDoneSchema = z.object({});
 const MergeRequestOptionsSchema = {
     title: z.string().describe("Merge request title"),
     description: z.string().optional().describe("Merge request description"),
@@ -2132,6 +2254,44 @@ export const GetCommitDiffSchema = z.object({
         .optional()
         .describe("Whether to return the full diff or only first page (default: false)"),
 });
+export const ListCommitStatusesSchema = z
+    .object({
+    project_id: z.coerce.string().describe("Project ID or complete URL-encoded path to project"),
+    sha: z.string().describe("The commit hash or name of a repository branch or tag"),
+    ref: z.string().optional().describe("Filter statuses by Git ref"),
+    stage: z.string().optional().describe("Filter statuses by build stage"),
+    name: z.string().optional().describe("Filter statuses by status name or context"),
+    pipeline_id: z.coerce.number().optional().describe("Filter statuses by pipeline ID"),
+    order_by: z
+        .enum(["id", "pipeline_id"])
+        .optional()
+        .describe("Field to order statuses by"),
+    sort: z.enum(["asc", "desc"]).optional().describe("Sort direction"),
+    all: coerceBooleanString.optional().describe("Return all statuses, not only latest ones"),
+})
+    .merge(PaginationOptionsSchema);
+export const CreateCommitStatusSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or complete URL-encoded path to project"),
+    sha: z.string().describe("The commit hash to set the status on"),
+    state: z
+        .enum(["pending", "running", "success", "failed", "canceled", "skipped"])
+        .describe("Commit status state"),
+    ref: z.string().max(255).optional().describe("The branch or tag ref"),
+    name: z
+        .string()
+        .max(255)
+        .optional()
+        .describe("Status name. GitLab defaults to 'default' when omitted."),
+    context: z
+        .string()
+        .max(255)
+        .optional()
+        .describe("Alias for name. Provide either name or context, not both."),
+    target_url: z.string().max(255).optional().describe("Target URL associated with this status"),
+    description: z.string().max(255).optional().describe("Short status description"),
+    coverage: z.coerce.number().optional().describe("Total code coverage for this status"),
+    pipeline_id: z.coerce.number().optional().describe("Pipeline ID to attach the status to"),
+});
 // Schema for listing issues assigned to the current user
 export const MyIssuesSchema = z.object({
     project_id: z