feat(gitea): support extra outbound HTTP headers via GITEA_EXTRA_HEADERS

Add a GITEA_EXTRA_HEADERS environment variable that accepts a JSON
object of header name/value pairs (e.g. Cloudflare Access
credentials) and applies them to every outbound request to Gitea,
both the raw pkg/gitea.DoJSON/DoBytes path and the SDK-backed
pkg/gitea.NewClient path, without overriding Authorization,
Content-Type, or Accept.

Co-Authored-By: Codet <codet@commitgo.dev> (GPT-5-Codex)

.gitea/workflows/release-nightly.yml

@@ -10,8 +10,8 @@ jobs:
   release-image:
     runs-on: ubuntu-latest
     env:
-      REGISTRY: git.i3omb.com
+      DOCKER_ORG: gitea
-      IMAGE_NAME: gronod/gitea-mcp-server
+      DOCKER_LATEST: nightly
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
@@ -19,21 +19,21 @@ jobs:
           fetch-depth: 0 # all history for all branches and tags
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4
 
       - name: Set up Docker BuildX
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
-      - name: Login to container registry
+      - name: Login to DockerHub
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
-          registry: ${{ env.REGISTRY }}
+          username: ${{ secrets.DOCKER_USER }}
-          username: gronod
+          password: ${{ secrets.DOCKER_TOKEN }}
-          password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Get Meta
         id: meta
         run: |
+          echo REPO_NAME=$(echo ${GITHUB_REPOSITORY} | awk -F"/" '{print $2}') >> $GITHUB_OUTPUT
           echo REPO_VERSION=$(git describe --tags --always | sed 's/-/+/' | sed 's/^v//') >> $GITHUB_OUTPUT
 
       - name: Build and push
@@ -46,6 +46,6 @@ jobs:
             linux/arm64
           push: true
           tags: |
-            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:nightly
+            ${{ env.DOCKER_ORG }}/${{ steps.meta.outputs.REPO_NAME }}-server:${{ env.DOCKER_LATEST }}
           build-args: |
             VERSION=${{ steps.meta.outputs.REPO_VERSION }}

.gitea/workflows/release-tag.yml

@@ -13,6 +13,16 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
+      # The R2 upload only runs after goreleaser has already published
+      # the Gitea release, so fail early instead if the secrets are
+      # missing.
+      - name: Check R2 configuration
+        run: sh scripts/upload-r2.sh --check-config
+        env:
+          R2_ENDPOINT: ${{ secrets.R2_ENDPOINT }}
+          R2_BUCKET: ${{ secrets.R2_BUCKET }}
+          R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
+          R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
       - name: Set up Go
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
@@ -25,12 +35,27 @@ jobs:
         env:
           GITEA_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GORELEASER_FORCE_TOKEN: "gitea"
+      # goreleaser `publishers:` is a Pro-only feature, so the release
+      # artifacts are mirrored to Cloudflare R2 here instead.
+      - name: Upload binaries to Cloudflare R2
+        env:
+          R2_ENDPOINT: ${{ secrets.R2_ENDPOINT }}
+          R2_BUCKET: ${{ secrets.R2_BUCKET }}
+          R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
+          R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
+          VERSION: ${{ github.ref_name }}
+        run: |
+          for f in dist/*.tar.gz dist/*.zip dist/checksums.txt; do
+            [ -f "$f" ] || continue
+            echo "uploading $f"
+            sh scripts/upload-r2.sh "$f" "gitea-mcp/${VERSION#v}/$(basename "$f")"
+          done
 
   release-image:
     runs-on: ubuntu-latest
     env:
-      REGISTRY: git.i3omb.com
+      DOCKER_ORG: gitea
-      IMAGE_NAME: gronod/gitea-mcp-server
+      DOCKER_LATEST: latest
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
@@ -38,21 +63,21 @@ jobs:
           fetch-depth: 0 # all history for all branches and tags
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4
 
       - name: Set up Docker BuildX
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
-      - name: Login to container registry
+      - name: Login to DockerHub
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
-          registry: ${{ env.REGISTRY }}
+          username: ${{ secrets.DOCKER_USER }}
-          username: gronod
+          password: ${{ secrets.DOCKER_TOKEN }}
-          password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Get Meta
         id: meta
         run: |
+          echo REPO_NAME=$(echo ${GITHUB_REPOSITORY} | awk -F"/" '{print $2}') >> $GITHUB_OUTPUT
           echo REPO_VERSION=${GITHUB_REF_NAME#v} >> $GITHUB_OUTPUT
 
       - name: Build and push
@@ -67,5 +92,5 @@ jobs:
           build-args: |
             VERSION=${{ steps.meta.outputs.REPO_VERSION }}
           tags: |
-            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.REPO_VERSION }}
+            ${{ env.DOCKER_ORG }}/${{ steps.meta.outputs.REPO_NAME }}-server:${{ steps.meta.outputs.REPO_VERSION }}
-            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+            ${{ env.DOCKER_ORG }}/${{ steps.meta.outputs.REPO_NAME }}-server:${{ env.DOCKER_LATEST }}

.golangci.yml

@@ -74,7 +74,7 @@ linters:
           arguments:
             - [] # AllowList - do not remove as args for the rule are positional and won't work without lists first
             - [] # DenyList
-            - - skip-initialism-name-checks: true
+            - - skip-package-name-checks: true
     staticcheck:
       checks:
         - all
@@ -110,8 +110,7 @@ formatters:
         - blank
         - default
     gofumpt:
-      extra:
+      extra-rules: true
-        group-params: true
   exclusions:
     generated: lax
 run:

.goreleaser.yaml

@@ -71,6 +71,6 @@ release:
     Released by [GoReleaser](https://github.com/goreleaser/goreleaser).
 
 gitea_urls:
-  api: https://git.i3omb.com/api/v1
+  api: https://gitea.com/api/v1
-  download: https://git.i3omb.com
+  download: https://gitea.com
 force_token: gitea

BUILDING.md

@@ -4,7 +4,7 @@ This project includes PowerShell and batch scripts to build the gitea-mcp applic
 
 ## Prerequisites
 
-- Go 1.27 or later
+- Go 1.26 or later
 - Git (for version information)
 - PowerShell 5.1 or later (included with Windows 10/11)
 

Dockerfile

@@ -1,7 +1,7 @@
-# syntax=docker/dockerfile:1.27
+# syntax=docker/dockerfile:1.26
 
 # Build stage
-FROM --platform=$BUILDPLATFORM golang:1.27-alpine AS builder
+FROM --platform=$BUILDPLATFORM golang:1.26-alpine AS builder
 
 ARG VERSION=dev
 ARG TARGETOS
@@ -30,9 +30,6 @@ COPY --from=builder --chown=nonroot:nonroot /app/gitea-mcp .
 USER nonroot:nonroot
 
 LABEL org.opencontainers.image.version="${VERSION}"
-LABEL org.opencontainers.image.source="https://git.i3omb.com/gronod/gitea-mcp"
+LABEL org.opencontainers.image.source="https://gitea.com/gitea/gitea-mcp"
-
-HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
-    CMD ["/app/gitea-mcp", "-healthcheck"] || exit 1
 
 CMD ["/app/gitea-mcp"]

Makefile

@@ -3,8 +3,8 @@ EXECUTABLE := gitea-mcp
 VERSION ?= $(shell git describe --tags --always | sed 's/-/+/' | sed 's/^v//')
 LDFLAGS := -X "main.Version=$(VERSION)"
 
-GOLANGCI_LINT_PACKAGE ?= github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.13.2 # renovate: datasource=go
+GOLANGCI_LINT_PACKAGE ?= github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.12.2 # renovate: datasource=go
-GOVULNCHECK_PACKAGE ?= golang.org/x/vuln/cmd/govulncheck@v1.8.0 # renovate: datasource=go
+GOVULNCHECK_PACKAGE ?= golang.org/x/vuln/cmd/govulncheck@v1.6.0 # renovate: datasource=go
 
 GOTEST_FLAGS ?= -race -timeout 20m
 

README.md

@@ -4,14 +4,14 @@
 
 **Gitea MCP Server** connects a [Gitea](https://about.gitea.com) instance to [Model Context Protocol](https://modelcontextprotocol.io) clients, so repositories, issues, pull requests and more can be browsed and managed from an MCP-compatible chat interface.
 
-[![Install with Docker in VS Code](https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22git.i3omb.com/gronod/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}) [![Install with Docker in VS Code Insiders](https://img.shields.io/badge/VS_Code_Insiders-Install_Server-24bfa5?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22git.i3omb.com/gronod/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}&quality=insiders)
+[![Install with Docker in VS Code](https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22docker.gitea.com/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}) [![Install with Docker in VS Code Insiders](https://img.shields.io/badge/VS_Code_Insiders-Install_Server-24bfa5?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22docker.gitea.com/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}&quality=insiders)
 
 ## Installation
 
-Download a binary from the [releases page](https://git.i3omb.com/gronod/gitea-mcp/releases) and put it in your `PATH`, use the `git.i3omb.com/gronod/gitea-mcp-server` image, or build from source into `$GOPATH/bin` with `make` and Go 1.27 or later:
+Download a binary from the [releases page](https://gitea.com/gitea/gitea-mcp/releases) and put it in your `PATH`, use the `docker.gitea.com/gitea-mcp-server` image, or build from source into `$GOPATH/bin` with `make` and Go 1.26 or later:
 
 ```bash
-git clone https://git.i3omb.com/gronod/gitea-mcp.git
+git clone https://gitea.com/gitea/gitea-mcp.git
 cd gitea-mcp
 make install
 ```
@@ -20,14 +20,20 @@ make install
 
 Pass the Gitea host and access token as command-line flags or environment variables, flags take precedence. Run `gitea-mcp --help` for the full list of flags and environment variables. Logs are written to `$HOME/.gitea-mcp/gitea-mcp.log`, add `-d` for debug logging.
 
+Set `GITEA_EXTRA_HEADERS` to a JSON object of header name/value pairs to send with every outbound request to Gitea, for example when Gitea sits behind Cloudflare Access:
+
+```bash
+export GITEA_EXTRA_HEADERS='{"CF-Access-Client-Id":"id","CF-Access-Client-Secret":"secret"}'
+```
+
+These headers never override `Authorization`, `Content-Type`, or `Accept` set by `gitea-mcp` itself.
+
 ### MCP protocol and HTTP transport
 
 The server supports MCP up to `2026-07-28` and negotiates down to the client's version, advertising only the `tools` capability. Tool and Gitea failures return a `tools/call` result with `result.isError: true`, while malformed requests and server faults stay JSON-RPC errors.
 
 HTTP is always stateless: `/mcp` accepts POST only, without `Mcp-Session-Id`, standalone SSE or `Last-Event-ID` resumability. Origins are validated, and reverse proxies must forward `Mcp-Protocol-Version`, `Mcp-Method` and `Mcp-Name` unchanged. `Authorization: Bearer <token>` and `Authorization: token <token>` pass a Gitea credential per request, which is credential passthrough rather than MCP OAuth.
 
-HTTP mode also serves `/healthz`, which returns `200 OK` when the server is up. The Docker image's built-in `HEALTHCHECK` runs `gitea-mcp -healthcheck`, which dials `http://127.0.0.1:<port>/healthz` using the same `-p`/`-port` value (or `8080` by default) and exits `0` on success or `1` on failure. Stdio deployments do not serve `/healthz`, so override or disable the image's `HEALTHCHECK` when running in stdio mode.
-
 ### Claude Code
 
 Runs the server through `go run` and requires [Go](https://go.dev):
@@ -57,7 +63,7 @@ Use the install buttons at the top of this README, or add the block below to you
     "servers": {
       "gitea-mcp": {
         "command": "docker",
-        "args": ["run", "-i", "--rm", "-e", "GITEA_ACCESS_TOKEN", "git.i3omb.com/gronod/gitea-mcp-server"],
+        "args": ["run", "-i", "--rm", "-e", "GITEA_ACCESS_TOKEN", "docker.gitea.com/gitea-mcp-server"],
         "env": {
           "GITEA_ACCESS_TOKEN": "${input:gitea_token}"
         }
@@ -93,7 +99,7 @@ Add the following to `~/.vibe/config.toml`:
 name = "gitea"
 transport = "stdio"
 command = "docker"
-args = ["run", "--rm", "-i", "-e", "GITEA_ACCESS_TOKEN", "-e", "GITEA_HOST", "git.i3omb.com/gronod/gitea-mcp-server"]
+args = ["run", "--rm", "-i", "-e", "GITEA_ACCESS_TOKEN", "-e", "GITEA_HOST", "docker.gitea.com/gitea-mcp-server"]
 
 [mcp_servers.env]
 GITEA_ACCESS_TOKEN = "TOKEN"
@@ -160,8 +166,8 @@ Once configured, try `list all my repositories` in the chat box.
 | package_write                | packages     | Write  | Delete a package version (irreversible) |
 | list_issues                  | issue        | Read   | List repository issues |
 | attachment_read              | issue        | Read   | Read issue/comment attachments: list metadata, get metadata, or download content |
-| issue_read                   | issue        | Read   | Read issue: details, comments, labels, or dependency/blocking links |
+| issue_read                   | issue        | Read   | Read issue: details, comments, or labels |
-| issue_write                  | issue        | Write  | Write issues: create, update, manage comments, labels, and dependency/blocking links |
+| issue_write                  | issue        | Write  | Write issues: create, update, manage comments and labels |
 | list_pull_requests           | pull_request | Read   | List repository pull requests |
 | pull_request_read            | pull_request | Read   | Read pull request: details, diff, files, status, reviews, review comments |
 | pull_request_write           | pull_request | Write  | Write pull requests: create, update, close, reopen, merge, update branch, manage reviewers |
@@ -182,7 +188,6 @@ Once configured, try `list all my repositories` in the chat box.
 | create_branch                | branch       | Write  | Create a new branch |
 | delete_branch                | branch       | Write  | Delete a branch |
 | list_branches                | branch       | Read   | List repository branches |
-| rename_branch                | branch       | Write  | Rename a branch |
 | create_tag                   | tag          | Write  | Create a tag |
 | delete_tag                   | tag          | Write  | Delete a tag |
 | get_tag                      | tag          | Read   | Get tag details |

README.zh-cn.md

@@ -4,14 +4,14 @@
 
 **Gitea MCP 服务器** 将 [Gitea](https://about.gitea.com) 实例接入 [Model Context Protocol](https://modelcontextprotocol.io) 客户端，让仓库、问题、拉取请求等都能在兼容 MCP 的聊天界面中浏览和管理。
 
-[![在 VS Code 中使用 Docker 安装](https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22git.i3omb.com/gronod/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}) [![在 VS Code Insiders 中使用 Docker 安装](https://img.shields.io/badge/VS_Code_Insiders-Install_Server-24bfa5?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22git.i3omb.com/gronod/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}&quality=insiders)
+[![在 VS Code 中使用 Docker 安装](https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22docker.gitea.com/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}) [![在 VS Code Insiders 中使用 Docker 安装](https://img.shields.io/badge/VS_Code_Insiders-Install_Server-24bfa5?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22docker.gitea.com/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}&quality=insiders)
 
 ## 安装
 
-可从 [发布页面](https://git.i3omb.com/gronod/gitea-mcp/releases) 下载二进制文件并放入 `PATH`，或使用 `git.i3omb.com/gronod/gitea-mcp-server` 镜像，也可用 `make` 和 Go 1.27 及以上从源码构建到 `$GOPATH/bin`：
+可从 [发布页面](https://gitea.com/gitea/gitea-mcp/releases) 下载二进制文件并放入 `PATH`，或使用 `docker.gitea.com/gitea-mcp-server` 镜像，也可用 `make` 和 Go 1.26 及以上从源码构建到 `$GOPATH/bin`：
 
 ```bash
-git clone https://git.i3omb.com/gronod/gitea-mcp.git
+git clone https://gitea.com/gitea/gitea-mcp.git
 cd gitea-mcp
 make install
 ```
@@ -26,8 +26,6 @@ Gitea 主机和访问令牌可通过命令行参数或环境变量提供，命
 
 HTTP 传输固定为无状态：`/mcp` 仅接受 POST，没有 `Mcp-Session-Id`、独立 SSE 和 `Last-Event-ID` 断点续传。服务器会验证来源，反向代理必须原样转发 `Mcp-Protocol-Version`、`Mcp-Method` 和 `Mcp-Name`。`Authorization: Bearer <令牌>` 和 `Authorization: token <令牌>` 会在每个请求中传递 Gitea 凭据，这是凭据透传，而不是 MCP OAuth。
 
-HTTP 模式还提供 `/healthz` 端点，服务器正常运行时返回 `200 OK`。Docker 镜像内置的 `HEALTHCHECK` 会运行 `gitea-mcp -healthcheck`，它使用与 `-p`/`-port` 相同的端口（默认 `8080`）请求 `http://127.0.0.1:<端口>/healthz`，成功时退出码为 `0`，失败时为 `1`。stdio 部署不提供 `/healthz`，因此在 stdio 模式下运行时应覆盖或禁用镜像自带的 `HEALTHCHECK`。
-
 ### Claude Code
 
 通过 `go run` 运行服务器，需要安装 [Go](https://go.dev)：
@@ -57,7 +55,7 @@ claude mcp add --transport stdio --scope user gitea \
     "servers": {
       "gitea-mcp": {
         "command": "docker",
-        "args": ["run", "-i", "--rm", "-e", "GITEA_ACCESS_TOKEN", "git.i3omb.com/gronod/gitea-mcp-server"],
+        "args": ["run", "-i", "--rm", "-e", "GITEA_ACCESS_TOKEN", "docker.gitea.com/gitea-mcp-server"],
         "env": {
           "GITEA_ACCESS_TOKEN": "${input:gitea_token}"
         }
@@ -93,7 +91,7 @@ claude mcp add --transport stdio --scope user gitea \
 name = "gitea"
 transport = "stdio"
 command = "docker"
-args = ["run", "--rm", "-i", "-e", "GITEA_ACCESS_TOKEN", "-e", "GITEA_HOST", "git.i3omb.com/gronod/gitea-mcp-server"]
+args = ["run", "--rm", "-i", "-e", "GITEA_ACCESS_TOKEN", "-e", "GITEA_HOST", "docker.gitea.com/gitea-mcp-server"]
 
 [mcp_servers.env]
 GITEA_ACCESS_TOKEN = "TOKEN"
@@ -160,8 +158,8 @@ Cursor 等客户端可使用 stdio 命令：
 | package_write                | packages     | 写入 | 删除软件包版本（不可恢复） |
 | list_issues                  | issue        | 读取 | 列出仓库问题 |
 | attachment_read              | issue        | 读取 | 读取问题/评论附件：列出元数据、获取元数据或下载内容 |
-| issue_read                   | issue        | 读取 | 读取问题：详情、评论、标签或阻塞关系 |
+| issue_read                   | issue        | 读取 | 读取问题：详情、评论或标签 |
-| issue_write                  | issue        | 写入 | 写入问题：创建、更新、管理评论、标签和阻塞关系 |
+| issue_write                  | issue        | 写入 | 写入问题：创建、更新、管理评论和标签 |
 | list_pull_requests           | pull_request | 读取 | 列出仓库拉取请求 |
 | pull_request_read            | pull_request | 读取 | 读取拉取请求：详情、差异、变更文件、头部提交状态、审查、审查评论 |
 | pull_request_write           | pull_request | 写入 | 写入拉取请求：创建、更新、关闭、重新打开、合并、更新分支、管理审查者 |
@@ -182,7 +180,6 @@ Cursor 等客户端可使用 stdio 命令：
 | create_branch                | branch       | 写入 | 创建新分支 |
 | delete_branch                | branch       | 写入 | 删除分支 |
 | list_branches                | branch       | 读取 | 列出仓库分支 |
-| rename_branch                | branch       | 写入 | 重命名分支 |
 | create_tag                   | tag          | 写入 | 创建标签 |
 | delete_tag                   | tag          | 写入 | 删除标签 |
 | get_tag                      | tag          | 读取 | 获取标签详情 |

README.zh-tw.md

@@ -4,14 +4,14 @@
 
 **Gitea MCP 伺服器** 將 [Gitea](https://about.gitea.com) 實例接入 [Model Context Protocol](https://modelcontextprotocol.io) 客戶端，讓倉庫、問題、拉取請求等都能在相容 MCP 的聊天介面中瀏覽與管理。
 
-[![在 VS Code 中使用 Docker 安裝](https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22git.i3omb.com/gronod/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}) [![在 VS Code Insiders 中使用 Docker 安裝](https://img.shields.io/badge/VS_Code_Insiders-Install_Server-24bfa5?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22git.i3omb.com/gronod/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}&quality=insiders)
+[![在 VS Code 中使用 Docker 安裝](https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22docker.gitea.com/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}) [![在 VS Code Insiders 中使用 Docker 安裝](https://img.shields.io/badge/VS_Code_Insiders-Install_Server-24bfa5?style=flat-square&logo=visualstudiocode&logoColor=white)](https://insiders.vscode.dev/redirect/mcp/install?name=gitea&inputs=[{%22id%22:%22gitea_token%22,%22type%22:%22promptString%22,%22description%22:%22Gitea%20Personal%20Access%20Token%22,%22password%22:true}]&config={%22command%22:%22docker%22,%22args%22:[%22run%22,%22-i%22,%22--rm%22,%22-e%22,%22GITEA_ACCESS_TOKEN%22,%22docker.gitea.com/gitea-mcp-server%22],%22env%22:{%22GITEA_ACCESS_TOKEN%22:%22${input:gitea_token}%22}}&quality=insiders)
 
 ## 安裝
 
-可從 [發布頁面](https://git.i3omb.com/gronod/gitea-mcp/releases) 下載二進位檔並放入 `PATH`，或使用 `git.i3omb.com/gronod/gitea-mcp-server` 映像檔，也可用 `make` 與 Go 1.27 以上從原始碼建置到 `$GOPATH/bin`：
+可從 [發布頁面](https://gitea.com/gitea/gitea-mcp/releases) 下載二進位檔並放入 `PATH`，或使用 `docker.gitea.com/gitea-mcp-server` 映像檔，也可用 `make` 與 Go 1.26 以上從原始碼建置到 `$GOPATH/bin`：
 
 ```bash
-git clone https://git.i3omb.com/gronod/gitea-mcp.git
+git clone https://gitea.com/gitea/gitea-mcp.git
 cd gitea-mcp
 make install
 ```
@@ -26,8 +26,6 @@ Gitea 主機與存取令牌可透過命令列參數或環境變數提供，命
 
 HTTP 傳輸固定為無狀態：`/mcp` 只接受 POST，沒有 `Mcp-Session-Id`、獨立 SSE 與 `Last-Event-ID` 斷點續傳。伺服器會驗證來源，反向代理必須原樣轉發 `Mcp-Protocol-Version`、`Mcp-Method` 與 `Mcp-Name`。`Authorization: Bearer <令牌>` 與 `Authorization: token <令牌>` 會在每次請求中傳遞 Gitea 憑證，這是憑證透傳，而不是 MCP OAuth。
 
-HTTP 模式也會提供 `/healthz` 端點，伺服器正常運作時回傳 `200 OK`。Docker 映像內建的 `HEALTHCHECK` 會執行 `gitea-mcp -healthcheck`，它使用與 `-p`/`-port` 相同的連接埠（預設 `8080`）連線 `http://127.0.0.1:<連接埠>/healthz`，成功時結束碼為 `0`，失敗時為 `1`。stdio 部署不會提供 `/healthz`，因此在 stdio 模式下運作時應覆寫或停用映像內建的 `HEALTHCHECK`。
-
 ### Claude Code
 
 透過 `go run` 執行伺服器，需要安裝 [Go](https://go.dev)：
@@ -57,7 +55,7 @@ claude mcp add --transport stdio --scope user gitea \
     "servers": {
       "gitea-mcp": {
         "command": "docker",
-        "args": ["run", "-i", "--rm", "-e", "GITEA_ACCESS_TOKEN", "git.i3omb.com/gronod/gitea-mcp-server"],
+        "args": ["run", "-i", "--rm", "-e", "GITEA_ACCESS_TOKEN", "docker.gitea.com/gitea-mcp-server"],
         "env": {
           "GITEA_ACCESS_TOKEN": "${input:gitea_token}"
         }
@@ -93,7 +91,7 @@ claude mcp add --transport stdio --scope user gitea \
 name = "gitea"
 transport = "stdio"
 command = "docker"
-args = ["run", "--rm", "-i", "-e", "GITEA_ACCESS_TOKEN", "-e", "GITEA_HOST", "git.i3omb.com/gronod/gitea-mcp-server"]
+args = ["run", "--rm", "-i", "-e", "GITEA_ACCESS_TOKEN", "-e", "GITEA_HOST", "docker.gitea.com/gitea-mcp-server"]
 
 [mcp_servers.env]
 GITEA_ACCESS_TOKEN = "TOKEN"
@@ -160,8 +158,8 @@ Cursor 等客戶端可使用 stdio 命令：
 | package_write                | packages     | 寫入 | 刪除軟體套件版本（不可復原） |
 | list_issues                  | issue        | 讀取 | 列出倉庫問題 |
 | attachment_read              | issue        | 讀取 | 讀取問題/評論附件：列出中繼資料、取得中繼資料或下載內容 |
-| issue_read                   | issue        | 讀取 | 讀取問題：詳情、評論、標籤或阻塞關係 |
+| issue_read                   | issue        | 讀取 | 讀取問題：詳情、評論或標籤 |
-| issue_write                  | issue        | 寫入 | 寫入問題：創建、更新、管理評論、標籤和阻塞關係 |
+| issue_write                  | issue        | 寫入 | 寫入問題：創建、更新、管理評論和標籤 |
 | list_pull_requests           | pull_request | 讀取 | 列出倉庫拉取請求 |
 | pull_request_read            | pull_request | 讀取 | 讀取拉取請求：詳情、差異、變更檔案、頭部提交狀態、審查、審查評論 |
 | pull_request_write           | pull_request | 寫入 | 寫入拉取請求：創建、更新、關閉、重新開啟、合併、更新分支、管理審查者 |
@@ -182,7 +180,6 @@ Cursor 等客戶端可使用 stdio 命令：
 | create_branch                | branch       | 寫入 | 創建新分支 |
 | delete_branch                | branch       | 寫入 | 刪除分支 |
 | list_branches                | branch       | 讀取 | 列出倉庫分支 |
-| rename_branch                | branch       | 寫入 | 重新命名分支 |
 | create_tag                   | tag          | 寫入 | 創建標籤 |
 | delete_tag                   | tag          | 寫入 | 刪除標籤 |
 | get_tag                      | tag          | 讀取 | 取得標籤詳情 |

cmd/cmd.go

@@ -2,6 +2,7 @@ package cmd
 
 import (
 	"context"
+	"encoding/json"
 	"flag"
 	"fmt"
 	"io"
@@ -24,11 +25,9 @@ var (
 	tools                           string
 	scopes                          string
 	version                         bool
-	healthcheck                     bool
 	maxInlineAttachmentBytes        int
 	maxInlineAttachmentBytesFlagSet bool
 	osExit                          = os.Exit
-	healthcheckClient               = http.DefaultClient
 )
 
 func initFlagSet(fs *flag.FlagSet, args []string, getenv func(string) string, readFile func(string) ([]byte, error), stderr io.Writer) {
@@ -56,7 +55,6 @@ func initFlagSet(fs *flag.FlagSet, args []string, getenv func(string) string, re
 	fs.BoolVar(&flagPkg.Insecure, "insecure", false, "")
 	fs.BoolVar(&version, "v", false, "")
 	fs.BoolVar(&version, "version", false, "")
-	fs.BoolVar(&healthcheck, "healthcheck", false, "")
 	maxInlineAttachmentBytes = 5 * 1024 * 1024
 	fs.Func("max-inline-attachment-bytes", "", func(val string) error {
 		parsed, err := strconv.Atoi(val)
@@ -85,12 +83,12 @@ func initFlagSet(fs *flag.FlagSet, args []string, getenv func(string) string, re
 		fmt.Fprintf(w, "  -k, -insecure\tIgnore TLS certificate errors\n")
 		fmt.Fprintf(w, "  -max-inline-attachment-bytes <bytes>\tInline image attachments up to this size (default: 5242880)\n")
 		fmt.Fprintf(w, "  -v, -version\tPrint version and exit\n")
-		fmt.Fprintf(w, "  -healthcheck\tCheck a running HTTP server's /healthz endpoint and exit\n")
 		fmt.Fprintln(w)
 		fmt.Fprintln(w, "Environment variables:")
 		fmt.Fprintf(w, "  GITEA_ACCESS_TOKEN\tProvide access token\n")
 		fmt.Fprintf(w, "  GITEA_ACCESS_TOKEN_FILE\tPath to a file containing the access token (e.g. a Docker secret)\n")
 		fmt.Fprintf(w, "  GITEA_DEBUG\tSet to 'true' for debug mode\n")
+		fmt.Fprintf(w, "  GITEA_EXTRA_HEADERS\tJSON object of extra HTTP headers to send with Gitea API requests\n")
 		fmt.Fprintf(w, "  GITEA_HOST\tOverride Gitea host URL\n")
 		fmt.Fprintf(w, "  GITEA_INSECURE\tSet to 'true' to ignore TLS errors\n")
 		fmt.Fprintf(w, "  GITEA_MAX_INLINE_ATTACHMENT_BYTES\tOverride inline image attachment size limit in bytes\n")
@@ -169,6 +167,18 @@ func initFlagSet(fs *flag.FlagSet, args []string, getenv func(string) string, re
 			flagPkg.MaxInlineAttachmentBytes = parsed
 		}
 	}
+	if val := getenv("GITEA_EXTRA_HEADERS"); val != "" {
+		var headers map[string]string
+		if err := json.Unmarshal([]byte(val), &headers); err != nil {
+			fmt.Fprintf(stderr, "invalid GITEA_EXTRA_HEADERS: %v\n", err)
+			osExit(1)
+		}
+		extraHeaders := make(http.Header, len(headers))
+		for name, value := range headers {
+			extraHeaders.Set(name, value)
+		}
+		flagPkg.ExtraHeaders = extraHeaders
+	}
 }
 
 // normalizeScope trims whitespace, lowercases, and converts internal spaces
@@ -188,14 +198,6 @@ func Execute() {
 		fmt.Fprintln(os.Stdout, flagPkg.Version)
 		return
 	}
-	if healthcheck {
-		if runHealthcheck(healthcheckClient, flagPkg.Port, os.Stdout, os.Stderr) {
-			osExit(0)
-		} else {
-			osExit(1)
-		}
-		return
-	}
 	if err := operation.Run(); err != nil {
 		if err == context.Canceled {
 			log.Info("Server shutdown due to context cancellation")

cmd/cmd_test.go

@@ -5,6 +5,7 @@ import (
 	"flag"
 	"maps"
 	"slices"
+	"strings"
 	"testing"
 
 	flagPkg "gitea.com/gitea/gitea-mcp/pkg/flag"
@@ -96,11 +97,53 @@ func TestInitFlagSetScopes(t *testing.T) {
 	}
 }
 
-func TestInitFlagSetHealthcheck(t *testing.T) {
+func TestInitFlagSetExtraHeaders(t *testing.T) {
-	t.Cleanup(func() { healthcheck = false })
+	t.Cleanup(func() { flagPkg.ExtraHeaders = nil })
+
+	getenv := func(key string) string {
+		if key == "GITEA_EXTRA_HEADERS" {
+			return `{"CF-Access-Client-Id":"id","CF-Access-Client-Secret":"secret"}`
+		}
+		return ""
+	}
+	readFile := func(string) ([]byte, error) { return nil, nil }
 	fs := flag.NewFlagSet("test", flag.ContinueOnError)
-	initFlagSet(fs, []string{"-healthcheck"}, func(string) string { return "" }, func(string) ([]byte, error) { return nil, nil }, &bytes.Buffer{})
+	var stderr bytes.Buffer
-	if !healthcheck {
+
-		t.Error("healthcheck = false, want true")
+	initFlagSet(fs, []string{}, getenv, readFile, &stderr)
+
+	if got := flagPkg.ExtraHeaders.Get("CF-Access-Client-Id"); got != "id" {
+		t.Errorf("ExtraHeaders[CF-Access-Client-Id] = %q, want %q", got, "id")
+	}
+	if got := flagPkg.ExtraHeaders.Get("CF-Access-Client-Secret"); got != "secret" {
+		t.Errorf("ExtraHeaders[CF-Access-Client-Secret] = %q, want %q", got, "secret")
+	}
+}
+
+func TestInitFlagSetExtraHeadersInvalidJSON(t *testing.T) {
+	t.Cleanup(func() { flagPkg.ExtraHeaders = nil })
+
+	origOsExit := osExit
+	var exitCode int
+	osExit = func(code int) { exitCode = code }
+	t.Cleanup(func() { osExit = origOsExit })
+
+	getenv := func(key string) string {
+		if key == "GITEA_EXTRA_HEADERS" {
+			return `not-json`
+		}
+		return ""
+	}
+	readFile := func(string) ([]byte, error) { return nil, nil }
+	fs := flag.NewFlagSet("test", flag.ContinueOnError)
+	var stderr bytes.Buffer
+
+	initFlagSet(fs, []string{}, getenv, readFile, &stderr)
+
+	if exitCode != 1 {
+		t.Errorf("exitCode = %d, want 1", exitCode)
+	}
+	if !strings.Contains(stderr.String(), "GITEA_EXTRA_HEADERS") {
+		t.Errorf("stderr = %q, want mention of GITEA_EXTRA_HEADERS", stderr.String())
 	}
 }

cmd/healthcheck.go

@@ -1,29 +0,0 @@
-package cmd
-
-import (
-	"fmt"
-	"io"
-	"net/http"
-)
-
-// runHealthcheck dials the /healthz endpoint on 127.0.0.1:port and reports
-// success or failure. It returns true when the server responds with a 2xx
-// status.
-func runHealthcheck(client *http.Client, port int, stdout, stderr io.Writer) bool {
-	url := fmt.Sprintf("http://127.0.0.1:%d/healthz", port)
-
-	resp, err := client.Get(url)
-	if err != nil {
-		fmt.Fprintf(stderr, "healthcheck failed: %v\n", err)
-		return false
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode < http.StatusOK || resp.StatusCode >= http.StatusMultipleChoices {
-		fmt.Fprintf(stderr, "healthcheck failed: unexpected status %s\n", resp.Status)
-		return false
-	}
-
-	fmt.Fprintln(stdout, "healthy")
-	return true
-}

cmd/healthcheck_test.go

@@ -1,81 +0,0 @@
-package cmd
-
-import (
-	"bytes"
-	"net"
-	"net/http"
-	"net/http/httptest"
-	"strconv"
-	"strings"
-	"testing"
-)
-
-func TestRunHealthcheck(t *testing.T) {
-	tests := []struct {
-		name       string
-		handler    http.HandlerFunc
-		port       func(server *httptest.Server) int
-		wantOK     bool
-		wantStdout string
-	}{
-		{
-			name: "server responds 200 OK",
-			handler: func(w http.ResponseWriter, r *http.Request) {
-				w.WriteHeader(http.StatusOK)
-			},
-			port:       serverPort,
-			wantOK:     true,
-			wantStdout: "healthy",
-		},
-		{
-			name: "server responds with an error status",
-			handler: func(w http.ResponseWriter, r *http.Request) {
-				w.WriteHeader(http.StatusInternalServerError)
-			},
-			port:   serverPort,
-			wantOK: false,
-		},
-		{
-			name:   "nothing listening on the port",
-			port:   func(*httptest.Server) int { return 1 },
-			wantOK: false,
-		},
-	}
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			var server *httptest.Server
-			if tt.handler != nil {
-				server = httptest.NewServer(tt.handler)
-				defer server.Close()
-			}
-
-			var stdout, stderr bytes.Buffer
-			ok := runHealthcheck(http.DefaultClient, tt.port(server), &stdout, &stderr)
-
-			if ok != tt.wantOK {
-				t.Errorf("runHealthcheck() = %v, want %v", ok, tt.wantOK)
-			}
-			if tt.wantStdout != "" && !strings.Contains(stdout.String(), tt.wantStdout) {
-				t.Errorf("stdout = %q, want it to contain %q", stdout.String(), tt.wantStdout)
-			}
-			if tt.wantOK && stderr.Len() != 0 {
-				t.Errorf("stderr = %q, want empty on success", stderr.String())
-			}
-			if !tt.wantOK && stderr.Len() == 0 {
-				t.Error("stderr is empty, want a failure message")
-			}
-		})
-	}
-}
-
-func serverPort(server *httptest.Server) int {
-	_, portStr, err := net.SplitHostPort(server.Listener.Addr().String())
-	if err != nil {
-		panic(err)
-	}
-	port, err := strconv.Atoi(portStr)
-	if err != nil {
-		panic(err)
-	}
-	return port
-}

go.mod

@@ -1,8 +1,8 @@
 module gitea.com/gitea/gitea-mcp
 
-go 1.27
+go 1.26.0
 
-toolchain go1.27.1
+toolchain go1.26.6
 
 require (
 	gitea.dev/sdk v1.2.0
@@ -17,14 +17,14 @@ require (
 	github.com/davidmz/go-pageant v1.0.2 // indirect
 	github.com/google/jsonschema-go v0.4.3 // indirect
 	github.com/hashicorp/go-version v1.9.0 // indirect
-	github.com/segmentio/asm v1.2.1 // indirect
+	github.com/segmentio/asm v1.1.3 // indirect
 	github.com/segmentio/encoding v0.5.4 // indirect
 	github.com/yosida95/uritemplate/v3 v3.0.2 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/crypto v0.56.0 // indirect
+	golang.org/x/crypto v0.54.0 // indirect
-	golang.org/x/oauth2 v0.36.0 // indirect
+	golang.org/x/oauth2 v0.35.0 // indirect
 	golang.org/x/sync v0.22.0 // indirect
 	golang.org/x/sys v0.47.0 // indirect
 	golang.org/x/time v0.15.0 // indirect
-	golang.org/x/tools v0.49.0 // indirect
+	golang.org/x/tools v0.47.0 // indirect
 )

go.sum

@@ -18,8 +18,8 @@ github.com/modelcontextprotocol/go-sdk v1.7.0 h1:yqjY2dsbKAC0LSuWZVBMrHgiG8ukXv6
 github.com/modelcontextprotocol/go-sdk v1.7.0/go.mod h1:dL7u98E/zjJTGzEq+j30jQ8K2k1mb6LeAH4inEcSGts=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/segmentio/asm v1.2.1 h1:DTNbBqs57ioxAD4PrArqftgypG4/qNpXoJx8TVXxPR0=
+github.com/segmentio/asm v1.1.3 h1:WM03sfUOENvvKexOLp+pCqgb/WDjsi7EK8gIsICtzhc=
-github.com/segmentio/asm v1.2.1/go.mod h1:BqMnlJP91P8d+4ibuonYZw9mfnzI9HfxselHZr5aAcs=
+github.com/segmentio/asm v1.1.3/go.mod h1:Ld3L4ZXGNcSLRg4JBsZ3//1+f/TjYl0Mzen/DQy1EJg=
 github.com/segmentio/encoding v0.5.4 h1:OW1VRern8Nw6ITAtwSZ7Idrl3MXCFwXHPgqESYfvNt0=
 github.com/segmentio/encoding v0.5.4/go.mod h1:HS1ZKa3kSN32ZHVZ7ZLPLXWvOVIiZtyJnO1gPH1sKt0=
 github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
@@ -37,11 +37,11 @@ go.uber.org/zap/exp v0.3.0/go.mod h1:5I384qq7XGxYyByIhHm6jg5CHkGY0nsTfbDLgDDlgJQ
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 golang.org/x/crypto v0.0.0-20210513164829-c07d793c2f9a/go.mod h1:P+XmwS30IXTQdn5tA2iutPOUgjI07+tq3H3K9MVA1s8=
-golang.org/x/crypto v0.56.0 h1:GUh5Ii4J5jtcseSMiRqr1jXCNHoxjeV9Fmekc2oLy6Y=
+golang.org/x/crypto v0.54.0 h1:YLIA59K4fiNzHzjnZt2tUJQjQtUWfWbeHBqKtk3eScw=
-golang.org/x/crypto v0.56.0/go.mod h1:OMW5y6CY9l38uPLmxU6l6pwcXp1obtLo3e6gT7gQR2I=
+golang.org/x/crypto v0.54.0/go.mod h1:KWL8ny2AZdGR2cWmzeHrp2azQPGogOv+HeQaVEXC2dk=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
-golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
+golang.org/x/oauth2 v0.35.0 h1:Mv2mzuHuZuY2+bkyWXIHMfhNdJAdwW3FuWeCPYN5GVQ=
-golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
+golang.org/x/oauth2 v0.35.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek=
 golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -54,8 +54,8 @@ golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=
 golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI=
+golang.org/x/tools v0.47.0 h1:7Kn5x/d1svx/PzryTsqeoZN4TZwqeH5pGWjefhLi/1Q=
-golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo=
+golang.org/x/tools v0.47.0/go.mod h1:dFHnyTvFWY212G+h7ZY4Vsp/K3U4/7W9TyVaAul8uCA=
 gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc=
 gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

operation/actions/config.go

@@ -148,7 +148,7 @@ func listRepoActionSecretsFn(ctx context.Context, args map[string]any) (*mcp.Cal
 	}
 
 	secrets, _, err := client.Actions.ListRepoSecrets(ctx, owner, repo, gitea_sdk.ListRepoActionsSecretOption{
-		Page: page, PageSize: pageSize,
+		ListOptions: gitea_sdk.ListOptions{Page: page, PageSize: pageSize},
 	})
 	if err != nil {
 		return to.ErrorResult(fmt.Errorf("list repo action secrets err: %v", err))
@@ -228,7 +228,7 @@ func listOrgActionSecretsFn(ctx context.Context, args map[string]any) (*mcp.Call
 	}
 
 	secrets, _, err := client.Actions.ListOrgSecrets(ctx, org, gitea_sdk.ListOrgActionsSecretOption{
-		Page: page, PageSize: pageSize,
+		ListOptions: gitea_sdk.ListOptions{Page: page, PageSize: pageSize},
 	})
 	if err != nil {
 		return to.ErrorResult(fmt.Errorf("list org action secrets err: %v", err))
@@ -428,7 +428,7 @@ func listOrgActionVariablesFn(ctx context.Context, args map[string]any) (*mcp.Ca
 		return to.ErrorResult(fmt.Errorf("get gitea client err: %v", err))
 	}
 	variables, _, err := client.Actions.ListOrgVariables(ctx, org, gitea_sdk.ListOrgActionsVariableOption{
-		Page: page, PageSize: pageSize,
+		ListOptions: gitea_sdk.ListOptions{Page: page, PageSize: pageSize},
 	})
 	if err != nil {
 		return to.ErrorResult(fmt.Errorf("list org action variables err: %v", err))

operation/issue/blocking.go

@@ -1,181 +0,0 @@
-package issue
-
-import (
-	"context"
-	"fmt"
-	"net/http"
-	"net/url"
-
-	"gitea.com/gitea/gitea-mcp/pkg/gitea"
-	"gitea.com/gitea/gitea-mcp/pkg/params"
-	"gitea.com/gitea/gitea-mcp/pkg/to"
-
-	gitea_sdk "gitea.dev/sdk"
-	"github.com/modelcontextprotocol/go-sdk/mcp"
-)
-
-// issueMeta carries owner/repo in the body; the SDK's IssueMeta only has Index
-// and Gitea resolves the body repo from those fields.
-type issueMeta struct {
-	Index int64  `json:"index"`
-	Owner string `json:"owner"`
-	Repo  string `json:"repo"`
-}
-
-func listIssueBlocksFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, error) {
-	owner, repo, index, err := issueRef(args)
-	if err != nil {
-		return to.ErrorResult(err)
-	}
-	page, pageSize := params.GetPagination(args, 30)
-	client, err := gitea.ClientFromContext(ctx)
-	if err != nil {
-		return to.ErrorResult(fmt.Errorf("get gitea client err: %v", err))
-	}
-	listOpt := gitea_sdk.ListOptions{Page: page, PageSize: pageSize}
-	issues, _, err := client.Issues.ListIssueBlocks(ctx, owner, repo, index, gitea_sdk.ListIssueBlocksOptions{
-		ListOptions: listOpt,
-	})
-	if err != nil {
-		return to.ErrorResult(fmt.Errorf("list %v/%v/issue/%v/blocks err: %v", owner, repo, index, err))
-	}
-	return to.TextResult(slimIssues(issues))
-}
-
-func blockIssueFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, error) {
-	return setIssueBlockingFn(ctx, args, true)
-}
-
-func unblockIssueFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, error) {
-	return setIssueBlockingFn(ctx, args, false)
-}
-
-func setIssueBlockingFn(ctx context.Context, args map[string]any, block bool) (*mcp.CallToolResult, error) {
-	owner, repo, index, err := issueRef(args)
-	if err != nil {
-		return to.ErrorResult(err)
-	}
-	blocked, err := params.GetIndex(args, "blocked_issue")
-	if err != nil {
-		return to.ErrorResult(err)
-	}
-	blockedOwner, blockedRepo := relatedIssueRepo(args, "blocked_owner", "blocked_repo", owner, repo)
-	method := http.MethodPost
-	if !block {
-		method = http.MethodDelete
-	}
-	var issue gitea_sdk.Issue
-	path := fmt.Sprintf("repos/%s/%s/issues/%d/blocks", url.PathEscape(owner), url.PathEscape(repo), index)
-	if _, err := gitea.DoJSON(ctx, method, path, nil, issueMeta{Index: blocked, Owner: blockedOwner, Repo: blockedRepo}, &issue); err != nil {
-		return to.ErrorResult(fmt.Errorf("update %v/%v/issue/%v/blocks err: %v", owner, repo, index, err))
-	}
-	return to.TextResult(slimIssue(&issue))
-}
-
-func listIssueDependenciesFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, error) {
-	owner, repo, index, err := issueRef(args)
-	if err != nil {
-		return to.ErrorResult(err)
-	}
-	page, pageSize := params.GetPagination(args, 30)
-	client, err := gitea.ClientFromContext(ctx)
-	if err != nil {
-		return to.ErrorResult(fmt.Errorf("get gitea client err: %v", err))
-	}
-	listOpt := gitea_sdk.ListOptions{Page: page, PageSize: pageSize}
-	issues, _, err := client.Issues.ListIssueDependencies(ctx, owner, repo, index, gitea_sdk.ListIssueDependenciesOptions{
-		ListOptions: listOpt,
-	})
-	if err != nil {
-		return to.ErrorResult(fmt.Errorf("list %v/%v/issue/%v/dependencies err: %v", owner, repo, index, err))
-	}
-	return to.TextResult(slimIssues(issues))
-}
-
-func addIssueDependencyFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, error) {
-	return setIssueDependencyFn(ctx, args, true)
-}
-
-func removeIssueDependencyFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, error) {
-	return setIssueDependencyFn(ctx, args, false)
-}
-
-func setIssueDependencyFn(ctx context.Context, args map[string]any, add bool) (*mcp.CallToolResult, error) {
-	owner, repo, index, err := issueRef(args)
-	if err != nil {
-		return to.ErrorResult(err)
-	}
-	blocking, err := params.GetIndex(args, "blocking_issue")
-	if err != nil {
-		return to.ErrorResult(err)
-	}
-	blockingOwner, blockingRepo := relatedIssueRepo(args, "blocking_owner", "blocking_repo", owner, repo)
-	method := http.MethodPost
-	if !add {
-		method = http.MethodDelete
-	}
-	var issue gitea_sdk.Issue
-	path := fmt.Sprintf("repos/%s/%s/issues/%d/dependencies", url.PathEscape(owner), url.PathEscape(repo), index)
-	if _, err := gitea.DoJSON(ctx, method, path, nil, issueMeta{Index: blocking, Owner: blockingOwner, Repo: blockingRepo}, &issue); err != nil {
-		return to.ErrorResult(fmt.Errorf("update %v/%v/issue/%v/dependencies err: %v", owner, repo, index, err))
-	}
-	return to.TextResult(slimIssue(&issue))
-}
-
-func checkIssueBlockedFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, error) {
-	owner, repo, index, err := issueRef(args)
-	if err != nil {
-		return to.ErrorResult(err)
-	}
-	page, pageSize := params.GetPagination(args, 30)
-	client, err := gitea.ClientFromContext(ctx)
-	if err != nil {
-		return to.ErrorResult(fmt.Errorf("get gitea client err: %v", err))
-	}
-	listOpt := gitea_sdk.ListOptions{Page: page, PageSize: pageSize}
-	issues, _, err := client.Issues.ListIssueDependencies(ctx, owner, repo, index, gitea_sdk.ListIssueDependenciesOptions{
-		ListOptions: listOpt,
-	})
-	if err != nil {
-		return to.ErrorResult(fmt.Errorf("list %v/%v/issue/%v/dependencies err: %v", owner, repo, index, err))
-	}
-	openBlockers := make([]map[string]any, 0)
-	for _, issue := range issues {
-		if issue == nil {
-			continue
-		}
-		if issue.State == gitea_sdk.StateOpen || issue.State == "" {
-			openBlockers = append(openBlockers, slimIssue(issue))
-		}
-	}
-	return to.TextResult(map[string]any{
-		"blocked":            len(openBlockers) > 0,
-		"total_dependencies": len(issues),
-		"open_blockers":      len(openBlockers),
-		"blockers":           slimIssues(issues),
-		"open":               openBlockers,
-	})
-}
-
-func relatedIssueRepo(args map[string]any, ownerKey, repoKey, owner, repo string) (string, string) {
-	if o := params.GetOptionalString(args, ownerKey, ""); o != "" {
-		owner = o
-	}
-	if r := params.GetOptionalString(args, repoKey, ""); r != "" {
-		repo = r
-	}
-	return owner, repo
-}
-
-func issueRef(args map[string]any) (owner, repo string, index int64, err error) {
-	if owner, err = params.GetString(args, "owner"); err != nil {
-		return "", "", 0, err
-	}
-	if repo, err = params.GetString(args, "repo"); err != nil {
-		return "", "", 0, err
-	}
-	if index, err = params.GetIndex(args, "issue_number"); err != nil {
-		return "", "", 0, err
-	}
-	return owner, repo, index, nil
-}

operation/issue/blocking_test.go

@@ -1,207 +0,0 @@
-package issue
-
-import (
-	"context"
-	"encoding/json"
-	"fmt"
-	"maps"
-	"net/http"
-	"net/http/httptest"
-	"strings"
-	"testing"
-
-	"gitea.com/gitea/gitea-mcp/pkg/flag"
-
-	"github.com/modelcontextprotocol/go-sdk/mcp"
-)
-
-func Test_issueBlocking(t *testing.T) {
-	const (
-		owner = "octo"
-		repo  = "demo"
-	)
-	blocksPath := fmt.Sprintf("/api/v1/repos/%s/%s/issues/42/blocks", owner, repo)
-	depsPath := fmt.Sprintf("/api/v1/repos/%s/%s/issues/42/dependencies", owner, repo)
-
-	tests := []struct {
-		name       string
-		fn         func(context.Context, map[string]any) (*mcp.CallToolResult, error)
-		args       map[string]any
-		wantPath   string
-		wantMethod string
-		wantQuery  string
-		wantIndex  float64
-		wantOwner  string
-		wantRepo   string
-		wantBody   string
-	}{
-		{
-			name:       "list blocks paginates",
-			fn:         listIssueBlocksFn,
-			args:       map[string]any{"page": float64(2), "per_page": float64(10)},
-			wantPath:   blocksPath,
-			wantMethod: http.MethodGet,
-			wantQuery:  "limit=10&page=2",
-		},
-		{
-			name:       "block issue posts index",
-			fn:         blockIssueFn,
-			args:       map[string]any{"blocked_issue": float64(7)},
-			wantPath:   blocksPath,
-			wantMethod: http.MethodPost,
-			wantIndex:  7,
-			wantOwner:  owner,
-			wantRepo:   repo,
-		},
-		{
-			name: "block issue posts cross-repo target",
-			fn:   blockIssueFn,
-			args: map[string]any{
-				"blocked_issue": float64(7),
-				"blocked_owner": "other",
-				"blocked_repo":  "elsewhere",
-			},
-			wantPath:   blocksPath,
-			wantMethod: http.MethodPost,
-			wantIndex:  7,
-			wantOwner:  "other",
-			wantRepo:   "elsewhere",
-		},
-		{
-			name:       "unblock issue deletes with index",
-			fn:         unblockIssueFn,
-			args:       map[string]any{"blocked_issue": float64(7)},
-			wantPath:   blocksPath,
-			wantMethod: http.MethodDelete,
-			wantIndex:  7,
-			wantOwner:  owner,
-			wantRepo:   repo,
-		},
-		{
-			name:       "list dependencies paginates",
-			fn:         listIssueDependenciesFn,
-			args:       map[string]any{"page": float64(3), "per_page": float64(5)},
-			wantPath:   depsPath,
-			wantMethod: http.MethodGet,
-			wantQuery:  "limit=5&page=3",
-		},
-		{
-			name:       "add dependency posts index",
-			fn:         addIssueDependencyFn,
-			args:       map[string]any{"blocking_issue": float64(9)},
-			wantPath:   depsPath,
-			wantMethod: http.MethodPost,
-			wantIndex:  9,
-			wantOwner:  owner,
-			wantRepo:   repo,
-		},
-		{
-			name: "add dependency posts cross-repo target",
-			fn:   addIssueDependencyFn,
-			args: map[string]any{
-				"blocking_issue": float64(9),
-				"blocking_owner": "other",
-				"blocking_repo":  "elsewhere",
-			},
-			wantPath:   depsPath,
-			wantMethod: http.MethodPost,
-			wantIndex:  9,
-			wantOwner:  "other",
-			wantRepo:   "elsewhere",
-		},
-		{
-			name:       "remove dependency deletes with index",
-			fn:         removeIssueDependencyFn,
-			args:       map[string]any{"blocking_issue": float64(9)},
-			wantPath:   depsPath,
-			wantMethod: http.MethodDelete,
-			wantIndex:  9,
-			wantOwner:  owner,
-			wantRepo:   repo,
-		},
-		{
-			name:       "check blocked summarizes open dependencies",
-			fn:         checkIssueBlockedFn,
-			args:       map[string]any{"page": float64(1), "per_page": float64(30)},
-			wantPath:   depsPath,
-			wantMethod: http.MethodGet,
-			wantQuery:  "limit=30&page=1",
-			wantBody:   `"blocked":true`,
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			var (
-				gotMethod string
-				gotPath   string
-				gotQuery  string
-				gotBody   map[string]any
-			)
-			handler := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-				switch r.URL.Path {
-				case "/api/v1/version":
-					w.Header().Set("Content-Type", "application/json")
-					_, _ = w.Write([]byte(`{"version":"1.27.2"}`))
-				case blocksPath, depsPath:
-					gotMethod = r.Method
-					gotPath = r.URL.Path
-					gotQuery = r.URL.RawQuery
-					_ = json.NewDecoder(r.Body).Decode(&gotBody)
-					w.Header().Set("Content-Type", "application/json")
-					if r.Method == http.MethodGet {
-						_, _ = w.Write([]byte(`[{"number":7,"title":"blocked","state":"open"}]`))
-					} else {
-						_, _ = w.Write([]byte(`{"number":7,"title":"blocked","state":"open"}`))
-					}
-				default:
-					http.NotFound(w, r)
-				}
-			})
-			server := httptest.NewServer(handler)
-			defer server.Close()
-
-			origHost, origToken, origVersion := flag.Host, flag.Token, flag.Version
-			flag.Host, flag.Token, flag.Version = server.URL, "", "test"
-			defer func() { flag.Host, flag.Token, flag.Version = origHost, origToken, origVersion }()
-
-			args := map[string]any{"owner": owner, "repo": repo, "issue_number": float64(42)}
-			maps.Copy(args, tt.args)
-			res, err := tt.fn(context.Background(), args)
-			if err != nil {
-				t.Fatalf("handler error = %v", err)
-			}
-			if res.IsError {
-				t.Fatalf("unexpected error result: %v", res.Content)
-			}
-			if gotMethod != tt.wantMethod {
-				t.Fatalf("method = %s, want %s", gotMethod, tt.wantMethod)
-			}
-			if gotPath != tt.wantPath {
-				t.Fatalf("path = %s, want %s", gotPath, tt.wantPath)
-			}
-			if tt.wantQuery != "" && gotQuery != tt.wantQuery {
-				t.Fatalf("query = %s, want %s", gotQuery, tt.wantQuery)
-			}
-			if tt.wantIndex != 0 {
-				if gotBody["index"] != tt.wantIndex {
-					t.Fatalf("body index = %v, want %v", gotBody["index"], tt.wantIndex)
-				}
-				if gotBody["owner"] != tt.wantOwner {
-					t.Fatalf("body owner = %v, want %s", gotBody["owner"], tt.wantOwner)
-				}
-				if gotBody["repo"] != tt.wantRepo {
-					t.Fatalf("body repo = %v, want %s", gotBody["repo"], tt.wantRepo)
-				}
-			}
-			body := res.Content[0].(*mcp.TextContent).Text
-			if tt.wantBody != "" {
-				if !strings.Contains(body, tt.wantBody) {
-					t.Fatalf("expected %s in output, got: %s", tt.wantBody, body)
-				}
-			} else if !strings.Contains(body, `"number":7`) && !strings.Contains(body, `"number": 7`) {
-				t.Fatalf("expected slim issue in output, got: %s", body)
-			}
-		})
-	}
-}

operation/issue/issue.go

@@ -55,21 +55,19 @@ var (
 
 	IssueReadTool = tool.NewDefinition(
 		IssueReadToolName,
-		"Read issue: details, comments, labels, or dependency/blocking links. list_dependencies is issues that block this one (blocked-by); list_blocks is issues this one blocks. check_blocked summarizes whether any of those dependencies are still open. These methods 404 if the repo has issue dependencies disabled.",
+		"Read issue: details, comments, or labels.",
 		annotation.ReadOnly("Read issue details"),
-		tool.String("method", tool.Required(), tool.Enum("get", "get_comments", "get_labels", "list_blocks", "list_dependencies", "check_blocked")),
+		tool.String("method", tool.Required(), tool.Enum("get", "get_comments", "get_labels")),
 		tool.String("owner", tool.Required(), tool.Description(params.OwnerDesc)),
 		tool.String("repo", tool.Required(), tool.Description(params.RepoDesc)),
 		tool.Number("issue_number", tool.Required()),
-		tool.Number("page", tool.Description(params.PageDesc), tool.Default(1)),
-		tool.Number("per_page", tool.Description(params.PaginationDesc), tool.Default(30)),
 	)
 
 	IssueWriteTool = tool.NewDefinition(
 		IssueWriteToolName,
-		"Write issues: create, update, manage comments, labels, and dependency/blocking links. block_issue makes issue_number block blocked_issue; add_dependency makes issue_number depend on blocking_issue. Cross-repo links use blocked_owner/blocked_repo or blocking_owner/blocking_repo (instance must allow cross-repository dependencies). Repo must have issue dependencies enabled or Gitea returns 404.",
+		"Write issues: create, update, manage comments and labels.",
 		annotation.Write("Create or update issues, comments, and labels"),
-		tool.String("method", tool.Required(), tool.Enum("create", "update", "add_comment", "edit_comment", "add_labels", "remove_label", "replace_labels", "clear_labels", "block_issue", "unblock_issue", "add_dependency", "remove_dependency")),
+		tool.String("method", tool.Required(), tool.Enum("create", "update", "add_comment", "edit_comment", "add_labels", "remove_label", "replace_labels", "clear_labels")),
 		tool.String("owner", tool.Required(), tool.Description(params.OwnerDesc)),
 		tool.String("repo", tool.Required(), tool.Description(params.RepoDesc)),
 		tool.Number("issue_number", tool.Description("required except for 'create'")),
@@ -84,12 +82,6 @@ var (
 		tool.String("ref", tool.Description("branch to associate")),
 		tool.String("deadline", tool.Description("ISO 8601")),
 		tool.Boolean("remove_deadline"),
-		tool.Number("blocked_issue", tool.Description("issue number that issue_number blocks (required for 'block_issue'/'unblock_issue')")),
-		tool.String("blocked_owner", tool.Description("owner of blocked_issue; defaults to owner")),
-		tool.String("blocked_repo", tool.Description("repo of blocked_issue; defaults to repo")),
-		tool.Number("blocking_issue", tool.Description("issue number that blocks issue_number (required for 'add_dependency'/'remove_dependency')")),
-		tool.String("blocking_owner", tool.Description("owner of blocking_issue; defaults to owner")),
-		tool.String("blocking_repo", tool.Description("repo of blocking_issue; defaults to repo")),
 	)
 )
 
@@ -120,12 +112,6 @@ func issueReadFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult,
 		return getIssueCommentsByIndexFn(ctx, args)
 	case "get_labels":
 		return getIssueLabelsFn(ctx, args)
-	case "list_blocks":
-		return listIssueBlocksFn(ctx, args)
-	case "list_dependencies":
-		return listIssueDependenciesFn(ctx, args)
-	case "check_blocked":
-		return checkIssueBlockedFn(ctx, args)
 	default:
 		return to.ErrorResult(fmt.Errorf("unknown method: %s", method))
 	}
@@ -153,14 +139,6 @@ func issueWriteFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult
 		return replaceIssueLabelsFn(ctx, args)
 	case "clear_labels":
 		return clearIssueLabelsFn(ctx, args)
-	case "block_issue":
-		return blockIssueFn(ctx, args)
-	case "unblock_issue":
-		return unblockIssueFn(ctx, args)
-	case "add_dependency":
-		return addIssueDependencyFn(ctx, args)
-	case "remove_dependency":
-		return removeIssueDependencyFn(ctx, args)
 	default:
 		return to.ErrorResult(fmt.Errorf("unknown method: %s", method))
 	}
@@ -209,8 +187,10 @@ func listRepoIssuesFn(ctx context.Context, args map[string]any) (*mcp.CallToolRe
 		State:      gitea_sdk.StateType(state),
 		Labels:     labels,
 		Milestones: milestones,
-		Page:       page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize:   pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	switch args["type"] {
 	case "issues":

operation/label/label.go

@@ -116,8 +116,10 @@ func listRepoLabelsFn(ctx context.Context, args map[string]any) (*mcp.CallToolRe
 	page, pageSize := params.GetPagination(args, 30)
 
 	opt := gitea_sdk.ListLabelsOptions{
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {
@@ -259,8 +261,10 @@ func listOrgLabelsFn(ctx context.Context, args map[string]any) (*mcp.CallToolRes
 	page, pageSize := params.GetPagination(args, 30)
 
 	opt := gitea_sdk.ListOrgLabelsOptions{
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {

operation/milestone/milestone.go

@@ -134,10 +134,12 @@ func listMilestonesFn(ctx context.Context, args map[string]any) (*mcp.CallToolRe
 	name := params.GetOptionalString(args, "name", "")
 	page, pageSize := params.GetPagination(args, 30)
 	opt := gitea_sdk.ListMilestoneOption{
-		State:    gitea_sdk.StateType(state),
+		State: gitea_sdk.StateType(state),
-		Name:     name,
+		Name:  name,
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {

operation/notification/notification.go

@@ -95,8 +95,10 @@ func notificationWriteFn(ctx context.Context, args map[string]any) (*mcp.CallToo
 func listNotificationsFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, error) {
 	page, pageSize := params.GetPagination(args, 30)
 	opt := gitea_sdk.ListNotificationOptions{
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	if status, ok := args["status"].(string); ok {
 		opt.Status = []gitea_sdk.NotificationStatus{gitea_sdk.NotificationStatus(status)}

operation/operation.go

@@ -133,7 +133,6 @@ func newHTTPServer(addr string, s *mcp.Server) *http.Server {
 			PropagateRequestCancellation: true,
 		},
 	)))
-	mux.HandleFunc("/healthz", handleHealthz)
 	return &http.Server{
 		Addr:              addr,
 		Handler:           mux,
@@ -141,12 +140,6 @@ func newHTTPServer(addr string, s *mcp.Server) *http.Server {
 	}
 }
 
-func handleHealthz(w http.ResponseWriter, _ *http.Request) {
-	w.Header().Set("Content-Type", "text/plain; charset=utf-8")
-	w.WriteHeader(http.StatusOK)
-	_, _ = w.Write([]byte("ok\n"))
-}
-
 func Run() error {
 	mcpServer = newMCPServer(flag.Version)
 	RegisterTool(mcpServer)

operation/operation_test.go

@@ -1,10 +1,6 @@
 package operation
 
-import (
+import "testing"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-)
 
 func TestNewHTTPServerConfig(t *testing.T) {
 	server := newHTTPServer(":12345", newMCPServer("test"))
@@ -22,21 +18,6 @@ func TestNewHTTPServerConfig(t *testing.T) {
 	}
 }
 
-func TestHealthzEndpoint(t *testing.T) {
-	server := newHTTPServer(":0", newMCPServer("test"))
-
-	req := httptest.NewRequest(http.MethodGet, "/healthz", nil)
-	rec := httptest.NewRecorder()
-	server.Handler.ServeHTTP(rec, req)
-
-	if rec.Code != http.StatusOK {
-		t.Errorf("status = %d, want %d", rec.Code, http.StatusOK)
-	}
-	if body := rec.Body.String(); body == "" {
-		t.Error("body is empty, want a non-empty health message")
-	}
-}
-
 func TestParseAuthToken(t *testing.T) {
 	tests := []struct {
 		name      string

operation/pull/pull.go

@@ -349,8 +349,10 @@ func listRepoPullRequestsFn(ctx context.Context, args map[string]any) (*mcp.Call
 		State:     gitea_sdk.StateType(state),
 		Sort:      sort,
 		Milestone: milestone,
-		Page:      page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize:  pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {
@@ -507,8 +509,10 @@ func listPullRequestReviewsFn(ctx context.Context, args map[string]any) (*mcp.Ca
 	}
 
 	reviews, _, err := client.PullRequests.ListPullReviews(ctx, owner, repo, index, gitea_sdk.ListPullReviewsOptions{
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	})
 	if err != nil {
 		return to.ErrorResult(fmt.Errorf("list reviews for %v/%v/pr/%v err: %v", owner, repo, index, err))
@@ -574,7 +578,7 @@ func listPullRequestReviewCommentsFn(ctx context.Context, args map[string]any) (
 	} else {
 		page, pageSize := params.GetPagination(args, 30)
 		reviews, _, err := client.PullRequests.ListPullReviews(ctx, owner, repo, index, gitea_sdk.ListPullReviewsOptions{
-			Page: page, PageSize: pageSize,
+			ListOptions: gitea_sdk.ListOptions{Page: page, PageSize: pageSize},
 		})
 		if err != nil {
 			return to.ErrorResult(fmt.Errorf("list reviews for %v/%v/pr/%v err: %v", owner, repo, index, err))
@@ -1045,7 +1049,7 @@ func getPullRequestFilesFn(ctx context.Context, args map[string]any) (*mcp.CallT
 		return to.ErrorResult(fmt.Errorf("get gitea client err: %v", err))
 	}
 	files, _, err := client.PullRequests.ListPullRequestFiles(ctx, owner, repo, index, gitea_sdk.ListPullRequestFilesOptions{
-		Page: page, PageSize: pageSize,
+		ListOptions: gitea_sdk.ListOptions{Page: page, PageSize: pageSize},
 	})
 	if err != nil {
 		return to.ErrorResult(fmt.Errorf("get %v/%v/pr/%v files err: %v", owner, repo, index, err))

operation/repo/branch.go

@@ -2,7 +2,6 @@ package repo
 
 import (
 	"context"
-	"errors"
 	"fmt"
 
 	"gitea.com/gitea/gitea-mcp/pkg/annotation"
@@ -22,7 +21,6 @@ const (
 	CreateBranchToolName = "create_branch"
 	DeleteBranchToolName = "delete_branch"
 	ListBranchesToolName = "list_branches"
-	RenameBranchToolName = "rename_branch"
 )
 
 var (
@@ -54,16 +52,6 @@ var (
 		tool.Number("page", tool.Description(params.PageDesc), tool.Default(1)),
 		tool.Number("per_page", tool.Description(params.PaginationDesc), tool.Default(30)),
 	)
-
-	RenameBranchTool = tool.NewDefinition(
-		RenameBranchToolName,
-		"Rename an existing branch in a repository.",
-		annotation.Write("Rename a branch"),
-		tool.String("owner", tool.Required(), tool.Description(params.OwnerDesc)),
-		tool.String("repo", tool.Required(), tool.Description(params.RepoDesc)),
-		tool.String("branch", tool.Required()),
-		tool.String("new_name", tool.Required()),
-	)
 )
 
 func init() {
@@ -79,10 +67,6 @@ func init() {
 		Tool:    ListBranchesTool,
 		Handler: ListBranchesFn,
 	})
-	BranchTool.RegisterWrite(tool.ServerTool{
-		Tool:    RenameBranchTool,
-		Handler: RenameBranchFn,
-	})
 }
 
 func CreateBranchFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, error) {
@@ -151,8 +135,10 @@ func ListBranchesFn(ctx context.Context, args map[string]any) (*mcp.CallToolResu
 	}
 	page, pageSize := params.GetPagination(args, 30)
 	opt := gitea_sdk.ListRepoBranchesOptions{
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {
@@ -165,36 +151,3 @@ func ListBranchesFn(ctx context.Context, args map[string]any) (*mcp.CallToolResu
 
 	return to.TextResult(slimBranches(branches))
 }
-
-func RenameBranchFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, error) {
-	owner, err := params.GetString(args, "owner")
-	if err != nil {
-		return to.ErrorResult(err)
-	}
-	repo, err := params.GetString(args, "repo")
-	if err != nil {
-		return to.ErrorResult(err)
-	}
-	branch, err := params.GetString(args, "branch")
-	if err != nil {
-		return to.ErrorResult(err)
-	}
-	newName, err := params.GetString(args, "new_name")
-	if err != nil {
-		return to.ErrorResult(err)
-	}
-
-	client, err := gitea.ClientFromContext(ctx)
-	if err != nil {
-		return to.ErrorResult(fmt.Errorf("get gitea client err: %v", err))
-	}
-	successful, _, err := client.Repositories.RenameRepoBranch(ctx, owner, repo, branch, gitea_sdk.RenameRepoBranchOption{Name: newName})
-	if err != nil {
-		return to.ErrorResult(fmt.Errorf("rename branch error: %v", err))
-	}
-	if !successful {
-		return to.ErrorResult(errors.New("rename branch error: unsuccessful"))
-	}
-
-	return to.TextResult("Branch renamed")
-}

operation/repo/branch_test.go

@@ -1,136 +0,0 @@
-package repo
-
-import (
-	"context"
-	"encoding/json"
-	"fmt"
-	"net/http"
-	"net/http/httptest"
-	"strings"
-	"sync"
-	"testing"
-
-	"gitea.com/gitea/gitea-mcp/pkg/flag"
-
-	"github.com/modelcontextprotocol/go-sdk/mcp"
-)
-
-func TestRenameBranchFnMissingArgs(t *testing.T) {
-	fullArgs := map[string]any{
-		"owner":    "octo",
-		"repo":     "demo",
-		"branch":   "old-name",
-		"new_name": "new-name",
-	}
-
-	for _, missing := range []string{"owner", "repo", "branch", "new_name"} {
-		t.Run(missing, func(t *testing.T) {
-			args := map[string]any{}
-			for k, v := range fullArgs {
-				if k != missing {
-					args[k] = v
-				}
-			}
-
-			result, err := RenameBranchFn(context.Background(), args)
-			if err != nil {
-				t.Fatalf("RenameBranchFn() error = %v", err)
-			}
-			if !result.IsError {
-				t.Fatalf("RenameBranchFn() with missing %q, want error result", missing)
-			}
-		})
-	}
-}
-
-func TestRenameBranchFn(t *testing.T) {
-	const (
-		owner   = "octo"
-		repo    = "demo"
-		branch  = "old-name"
-		newName = "new-name"
-	)
-
-	for _, tc := range []struct {
-		name         string
-		serverStatus int
-		wantErr      bool
-		wantContains string
-	}{
-		{"success", http.StatusNoContent, false, "Branch renamed"},
-		{"server error", http.StatusInternalServerError, true, "rename branch error"},
-	} {
-		t.Run(tc.name, func(t *testing.T) {
-			var (
-				mu      sync.Mutex
-				gotBody map[string]any
-			)
-
-			renamePath := fmt.Sprintf("/api/v1/repos/%s/%s/branches/%s", owner, repo, branch)
-			server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-				switch r.URL.Path {
-				case "/api/v1/version":
-					_, _ = w.Write([]byte(`{"version":"1.24.0"}`))
-				case renamePath:
-					mu.Lock()
-					_ = json.NewDecoder(r.Body).Decode(&gotBody)
-					mu.Unlock()
-					w.WriteHeader(tc.serverStatus)
-				default:
-					http.NotFound(w, r)
-				}
-			}))
-			defer server.Close()
-
-			origHost, origToken := flag.Host, flag.Token
-			flag.Host, flag.Token = server.URL, ""
-			defer func() { flag.Host, flag.Token = origHost, origToken }()
-
-			result, err := RenameBranchFn(context.Background(), map[string]any{
-				"owner":    owner,
-				"repo":     repo,
-				"branch":   branch,
-				"new_name": newName,
-			})
-			if err != nil {
-				t.Fatalf("RenameBranchFn() error = %v", err)
-			}
-
-			if result.IsError != tc.wantErr {
-				t.Fatalf("RenameBranchFn() IsError = %v, want %v (result: %v)", result.IsError, tc.wantErr, result)
-			}
-
-			text := result.Content[0].(*mcp.TextContent).Text
-			if !strings.Contains(text, tc.wantContains) {
-				t.Fatalf("result = %s, want it to contain %q", text, tc.wantContains)
-			}
-
-			if !tc.wantErr {
-				mu.Lock()
-				defer mu.Unlock()
-				if gotBody["name"] != newName {
-					t.Fatalf("request body name = %v, want %s", gotBody["name"], newName)
-				}
-			}
-		})
-	}
-}
-
-func TestRenameBranchToolRegistration(t *testing.T) {
-	found := false
-	for _, registered := range BranchTool.WriteTools() {
-		if registered.Tool.Name == RenameBranchToolName {
-			found = true
-			break
-		}
-	}
-	if !found {
-		t.Fatalf("%q is not registered as a write tool", RenameBranchToolName)
-	}
-
-	for _, registered := range BranchTool.ReadTools() {
-		if registered.Tool.Name == RenameBranchToolName {
-			t.Fatalf("%q is registered as a read tool, want write only", RenameBranchToolName)
-		}
-	}
-}

operation/repo/commit.go

@@ -69,10 +69,12 @@ func ListRepoCommitsFn(ctx context.Context, args map[string]any) (*mcp.CallToolR
 	sha, _ := args["sha"].(string)
 	path, _ := args["path"].(string)
 	opt := gitea_sdk.ListCommitOptions{
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
-		SHA:      sha,
+			PageSize: pageSize,
-		Path:     path,
+		},
+		SHA:  sha,
+		Path: path,
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {

operation/repo/file.go

@@ -266,9 +266,11 @@ func DeleteFileFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult
 		return to.ErrorResult(err)
 	}
 	opt := gitea_sdk.DeleteFileOptions{
-		Message:    message,
+		FileOptions: gitea_sdk.FileOptions{
-		BranchName: branchName,
+			Message:    message,
-		SHA:        sha,
+			BranchName: branchName,
+		},
+		SHA: sha,
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {

operation/repo/release.go

@@ -236,8 +236,10 @@ func ListReleasesFn(ctx context.Context, args map[string]any) (*mcp.CallToolResu
 		return to.ErrorResult(fmt.Errorf("get gitea client err: %v", err))
 	}
 	releases, _, err := client.Releases.ListReleases(ctx, owner, repo, gitea_sdk.ListReleasesOptions{
-		Page:         page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize:     pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 		IsDraft:      params.GetOptionalBoolPtr(args, "is_draft"),
 		IsPreRelease: params.GetOptionalBoolPtr(args, "is_pre_release"),
 	})

operation/repo/repo.go

@@ -170,8 +170,10 @@ func ForkRepoFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult,
 func ListMyReposFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, error) {
 	page, pageSize := params.GetPagination(args, 30)
 	opt := gitea_sdk.ListReposOptions{
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {
@@ -192,8 +194,10 @@ func ListOrgReposFn(ctx context.Context, args map[string]any) (*mcp.CallToolResu
 	}
 	page, pageSize := params.GetPagination(args, 100)
 	opt := gitea_sdk.ListOrgReposOptions{
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {

operation/repo/tag.go

@@ -185,8 +185,10 @@ func ListTagsFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult,
 		return to.ErrorResult(fmt.Errorf("get gitea client err: %v", err))
 	}
 	tags, _, err := client.Repositories.ListRepoTags(ctx, owner, repo, gitea_sdk.ListRepoTagsOptions{
-		Page:     int(page),
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: int(pageSize),
+			Page:     int(page),
+			PageSize: int(pageSize),
+		},
 	})
 	if err != nil {
 		return to.ErrorResult(fmt.Errorf("list tags error: %v", err))

operation/repo/tree.go

@@ -54,8 +54,10 @@ func GetRepoTreeFn(ctx context.Context, args map[string]any) (*mcp.CallToolResul
 	page, pageSize := params.GetPagination(args, 30)
 
 	opt := gitea_sdk.ListTreeOptions{
-		Page:      page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize:  pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 		Ref:       treeSHA,
 		Recursive: recursive,
 	}

operation/search/search.go

@@ -102,9 +102,11 @@ func UsersFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, err
 	}
 	page, pageSize := params.GetPagination(args, 30)
 	opt := gitea_sdk.SearchUsersOption{
-		KeyWord:  keyword,
+		KeyWord: keyword,
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {
@@ -131,8 +133,10 @@ func OrgTeamsFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult,
 	opt := gitea_sdk.SearchTeamsOptions{
 		Query:              query,
 		IncludeDescription: includeDescription,
-		Page:               page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize:           pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {
@@ -164,8 +168,10 @@ func ReposFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, err
 		IsArchived:           params.GetOptionalBoolPtr(args, "isArchived"),
 		Sort:                 sort,
 		Order:                order,
-		Page:                 page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize:             pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {
@@ -186,9 +192,11 @@ func IssuesFn(ctx context.Context, args map[string]any) (*mcp.CallToolResult, er
 	page, pageSize := params.GetPagination(args, 30)
 
 	opt := gitea_sdk.ListIssueOption{
-		KeyWord:  query,
+		KeyWord: query,
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	if state, ok := args["state"].(string); ok {
 		opt.State = gitea_sdk.StateType(state)

operation/timetracking/timetracking.go

@@ -200,8 +200,10 @@ func listTrackedTimesFn(ctx context.Context, args map[string]any) (*mcp.CallTool
 	}
 
 	times, _, err := client.Issues.ListIssueTrackedTimes(ctx, owner, repo, index, gitea_sdk.ListTrackedTimesOptions{
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	})
 	if err != nil {
 		return to.ErrorResult(fmt.Errorf("list tracked times for %s/%s#%d err: %v", owner, repo, index, err))
@@ -288,8 +290,10 @@ func listRepoTimesFn(ctx context.Context, args map[string]any) (*mcp.CallToolRes
 		return to.ErrorResult(fmt.Errorf("get gitea client err: %v", err))
 	}
 	times, _, err := client.Issues.ListRepoTrackedTimes(ctx, owner, repo, gitea_sdk.ListTrackedTimesOptions{
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	})
 	if err != nil {
 		return to.ErrorResult(fmt.Errorf("list repo tracked times for %s/%s err: %v", owner, repo, err))

operation/user/user.go

@@ -59,8 +59,10 @@ func GetUserOrgsFn(ctx context.Context, args map[string]any) (*mcp.CallToolResul
 	page, pageSize := params.GetPagination(args, 30)
 
 	opt := gitea_sdk.ListOrgsOptions{
-		Page:     page,
+		ListOptions: gitea_sdk.ListOptions{
-		PageSize: pageSize,
+			Page:     page,
+			PageSize: pageSize,
+		},
 	}
 	client, err := gitea.ClientFromContext(ctx)
 	if err != nil {

pkg/flag/flag.go

@@ -1,5 +1,7 @@
 package flag
 
+import "net/http"
+
 var (
 	Host    string
 	Bind    string
@@ -15,4 +17,5 @@ var (
 	Debug         bool
 	AllowedTools  map[string]struct{}
 	AllowedScopes map[string]struct{}
+	ExtraHeaders  http.Header
 )

pkg/gitea/attachment_test.go

@@ -191,7 +191,8 @@ func TestDownloadAttachmentErrorsOnNon2xx(t *testing.T) {
 	if status != http.StatusForbidden {
 		t.Fatalf("status = %d, want %d", status, http.StatusForbidden)
 	}
-	if _, ok := errors.AsType[*HTTPError](err); !ok {
+	var httpErr *HTTPError
+	if !errors.As(err, &httpErr) {
 		t.Fatalf("expected HTTPError, got %T", err)
 	}
 }

pkg/gitea/gitea.go

@@ -30,6 +30,32 @@ func sharedTransport() *http.Transport {
 	return sharedTrans
 }
 
+// extraHeaderTransport injects flag.ExtraHeaders into every request, without
+// overriding headers the caller already set (e.g. Authorization, Content-Type,
+// Accept). It reads flag.ExtraHeaders on each round trip rather than caching
+// it, so tests can change it between requests.
+type extraHeaderTransport struct {
+	base http.RoundTripper
+}
+
+func (t *extraHeaderTransport) RoundTrip(req *http.Request) (*http.Response, error) {
+	headers := flag.ExtraHeaders
+	if len(headers) == 0 {
+		return t.base.RoundTrip(req)
+	}
+	cloned := req.Clone(req.Context())
+	for name, values := range headers {
+		if cloned.Header.Get(name) == "" {
+			cloned.Header[name] = values
+		}
+	}
+	return t.base.RoundTrip(cloned)
+}
+
+func giteaTransport() http.RoundTripper {
+	return &extraHeaderTransport{base: sharedTransport()}
+}
+
 // NewClient returns a cached *gitea.Client keyed by host+token. The SDK's per-client
 // version cache and the shared transport let us reuse keep-alive connections
 // and avoid the SDK's /api/v1/version preflight on every tool call.
@@ -40,7 +66,7 @@ func NewClient(token string) (*gitea.Client, error) {
 	}
 
 	httpClient := &http.Client{
-		Transport:     sharedTransport(),
+		Transport:     giteaTransport(),
 		CheckRedirect: checkRedirect,
 	}
 	opts := []gitea.ClientOption{

pkg/gitea/gitea_test.go

@@ -0,0 +1,49 @@
+package gitea
+
+import (
+	"context"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"gitea.com/gitea/gitea-mcp/pkg/flag"
+)
+
+func TestNewClient_SendsExtraHeaders(t *testing.T) {
+	var gotClientID, gotAuthorization string
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		gotClientID = r.Header.Get("CF-Access-Client-Id")
+		gotAuthorization = r.Header.Get("Authorization")
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusOK)
+		_, _ = w.Write([]byte(`{"login":"octocat"}`))
+	}))
+	defer srv.Close()
+
+	origHost := flag.Host
+	origExtraHeaders := flag.ExtraHeaders
+	defer func() {
+		flag.Host = origHost
+		flag.ExtraHeaders = origExtraHeaders
+	}()
+	flag.Host = srv.URL
+	flag.ExtraHeaders = http.Header{
+		"Cf-Access-Client-Id": []string{"client-id"},
+		"Authorization":       []string{"should-not-override"},
+	}
+
+	client, err := NewClient("the-token")
+	if err != nil {
+		t.Fatalf("NewClient returned error: %v", err)
+	}
+	if _, _, err := client.Users.GetMyUserInfo(context.Background()); err != nil {
+		t.Fatalf("GetMyUserInfo returned error: %v", err)
+	}
+
+	if gotClientID != "client-id" {
+		t.Fatalf("CF-Access-Client-Id header = %q, want %q", gotClientID, "client-id")
+	}
+	if gotAuthorization != "token the-token" {
+		t.Fatalf("Authorization header = %q, want %q", gotAuthorization, "token the-token")
+	}
+}

pkg/gitea/rest.go

@@ -59,7 +59,7 @@ var (
 func restHTTPClient() *http.Client {
 	restClientOnce.Do(func() {
 		restClient = &http.Client{
-			Transport:     sharedTransport(),
+			Transport:     giteaTransport(),
 			Timeout:       httpClientTimeout,
 			CheckRedirect: checkRedirect,
 		}
@@ -180,7 +180,7 @@ func DoJSON(ctx context.Context, method, path string, query url.Values, body, re
 
 func attachmentHTTPClient(origin *url.URL) *http.Client {
 	return &http.Client{
-		Transport: sharedTransport(),
+		Transport: giteaTransport(),
 		CheckRedirect: func(req *http.Request, via []*http.Request) error {
 			if err := checkRedirect(req, via); err != nil {
 				return err
@@ -236,7 +236,8 @@ func OpenAttachment(ctx context.Context, attachmentPath, accept string) (*Attach
 func DownloadAttachment(ctx context.Context, attachmentPath, accept string) ([]byte, string, int, error) {
 	resp, err := OpenAttachment(ctx, attachmentPath, accept)
 	if err != nil {
-		if httpErr, ok := errors.AsType[*HTTPError](err); ok {
+		var httpErr *HTTPError
+		if errors.As(err, &httpErr) {
 			return nil, "", httpErr.StatusCode, err
 		}
 		return nil, "", 0, err

pkg/gitea/rest_test.go

@@ -62,3 +62,44 @@ func TestDoJSON_LimitsErrorResponseBody(t *testing.T) {
 		t.Fatalf("expected body length %d, got %d", errBodySnippetSize, len(httpErr.Body))
 	}
 }
+
+func TestDoJSON_SendsExtraHeaders(t *testing.T) {
+	var gotClientID, gotAuthorization string
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		gotClientID = r.Header.Get("CF-Access-Client-Id")
+		gotAuthorization = r.Header.Get("Authorization")
+		w.WriteHeader(http.StatusOK)
+		_, _ = io.WriteString(w, "{}")
+	}))
+	defer srv.Close()
+
+	origHost := flag.Host
+	origToken := flag.Token
+	origExtraHeaders := flag.ExtraHeaders
+	defer func() {
+		flag.Host = origHost
+		flag.Token = origToken
+		flag.ExtraHeaders = origExtraHeaders
+	}()
+	flag.Host = srv.URL
+	flag.Token = "the-token"
+	flag.ExtraHeaders = http.Header{
+		"Cf-Access-Client-Id": []string{"client-id"},
+		"Authorization":       []string{"should-not-override"},
+	}
+
+	var out map[string]any
+	status, err := DoJSON(context.Background(), http.MethodGet, "repos/owner/repo", nil, nil, &out)
+	if err != nil {
+		t.Fatalf("DoJSON returned error: %v", err)
+	}
+	if status != http.StatusOK {
+		t.Fatalf("expected status %d, got %d", http.StatusOK, status)
+	}
+	if gotClientID != "client-id" {
+		t.Fatalf("CF-Access-Client-Id header = %q, want %q", gotClientID, "client-id")
+	}
+	if gotAuthorization != "token the-token" {
+		t.Fatalf("Authorization header = %q, want %q", gotAuthorization, "token the-token")
+	}
+}

pkg/tool/tool.go

@@ -102,7 +102,8 @@ func (s ServerTool) MCPHandler() mcp.ToolHandler {
 
 		result, err = s.Handler(ctx, arguments)
 		if err != nil {
-			if _, ok := errors.AsType[*jsonrpc.Error](err); ok {
+			var protocolErr *jsonrpc.Error
+			if errors.As(err, &protocolErr) {
 				return nil, err
 			}
 			return to.ErrorResult(err)

scripts/upload-r2.sh

@@ -0,0 +1,96 @@
+#!/bin/sh
+# Copyright 2026 The Gitea Authors. All rights reserved.
+# SPDX-License-Identifier: MIT
+#
+# upload-r2.sh uploads a single local file to a single object key in a
+# Cloudflare R2 bucket, using curl's built-in AWS SigV4 signer (R2 is
+# S3-API compatible).
+#
+# Usage:
+#   upload-r2.sh <local-file> <remote-key>
+#   upload-r2.sh --check-config
+#
+# The second form only validates that the required environment
+# variables below are set (it does not touch the network), and is
+# meant to be run as an early preflight step in CI so that a missing
+# R2_* secret is reported before anything is built or published.
+#
+# Required environment variables:
+#   R2_ENDPOINT          Base URL of the R2 endpoint, e.g.
+#                        https://<account>.r2.cloudflarestorage.com
+#   R2_BUCKET            Destination bucket name.
+#   R2_ACCESS_KEY_ID     R2 access key id.
+#   R2_SECRET_ACCESS_KEY R2 secret access key.
+
+set -eu
+
+# check_env validates that all required R2_* environment variables are
+# set and non-empty, so the validation logic only exists in one place
+# for both the normal upload mode and --check-config.
+check_env() {
+  missing=""
+
+  if [ -z "${R2_ENDPOINT:-}" ]; then
+    missing="$missing R2_ENDPOINT"
+  fi
+  if [ -z "${R2_BUCKET:-}" ]; then
+    missing="$missing R2_BUCKET"
+  fi
+  if [ -z "${R2_ACCESS_KEY_ID:-}" ]; then
+    missing="$missing R2_ACCESS_KEY_ID"
+  fi
+  if [ -z "${R2_SECRET_ACCESS_KEY:-}" ]; then
+    missing="$missing R2_SECRET_ACCESS_KEY"
+  fi
+
+  if [ -n "$missing" ]; then
+    echo "upload-r2.sh: missing required environment variable(s):$missing" >&2
+    exit 1
+  fi
+}
+
+if [ "$#" -eq 1 ] && [ "$1" = "--check-config" ]; then
+  check_env
+  echo "upload-r2.sh: R2 configuration OK"
+  exit 0
+fi
+
+if [ "$#" -ne 2 ]; then
+  echo "usage: upload-r2.sh <local-file> <remote-key>" >&2
+  echo "       upload-r2.sh --check-config" >&2
+  exit 1
+fi
+
+local_file="$1"
+remote_key="$2"
+
+if [ ! -f "$local_file" ]; then
+  echo "upload-r2.sh: local file not found: $local_file" >&2
+  exit 1
+fi
+
+check_env
+
+# Strip a single trailing slash from the endpoint, if present, so that
+# building the path-style URL below never produces a double slash.
+endpoint="${R2_ENDPOINT%/}"
+url="$endpoint/$R2_BUCKET/$remote_key"
+
+# Credentials are passed to curl through a config file read from
+# stdin rather than as a command-line argument, so they never show up
+# in `ps` output.
+#
+# --fail-with-body (instead of plain --fail) still exits non-zero on
+# HTTP errors, but also prints R2's XML error body, which is where the
+# actual error code lives (SignatureDoesNotMatch, NoSuchBucket,
+# AccessDenied, ...). --retry 3 (without --retry-all-errors) only
+# retries the transient cases (5xx, 408, 429, connection failures).
+printf 'user = "%s:%s"\n' "$R2_ACCESS_KEY_ID" "$R2_SECRET_ACCESS_KEY" | curl \
+  --config - \
+  --fail-with-body \
+  --silent \
+  --show-error \
+  --retry 3 \
+  --aws-sigv4 "aws:amz:auto:s3" \
+  --upload-file "$local_file" \
+  "$url"