@gaodes/pi-gitlab 0.3.0

package/.primecodex.json

@@ -0,0 +1,19 @@
+{
+	"version": 1,
+	"updatedAt": "2026-06-01T08:10:00+0300",
+	"kind": "package",
+	"name": "pi-gitlab",
+	"source": "ssh://git@gitlab-ssh.elches.dev:2222/agents/primecodex/packages/pi-gitlab.git",
+	"description": "Pi extension package for GitLab workflows via glab CLI.",
+	"topic": "gitlab",
+	"requires": [
+		"glab>=1.40.0"
+	],
+	"integrationStatus": "none",
+	"npm": {
+		"name": "@gaodes/pi-gitlab",
+		"scope": "@gaodes",
+		"published": false,
+		"publishedUnderGaodes": false
+	}
+}

package/.upstream.json

@@ -0,0 +1,49 @@
+{
+	"version": 1,
+	"updatedAt": "2026-06-01T02:49:33+0300",
+	"creationMethod": "inspiration",
+	"primary": {
+		"name": "gitlab-assistant-skills",
+		"type": "git",
+		"url": "https://github.com/grandcamel/gitlab-assistant-skills",
+		"repo": "https://github.com/grandcamel/gitlab-assistant-skills",
+		"license": "MIT",
+		"relationship": "inspiration",
+		"upstreamVersion": "main@2026-06-01"
+	},
+	"inspirations": [
+		{
+			"name": "claude-glab-skill",
+			"type": "git",
+			"url": "https://github.com/henricook/claude-glab-skill",
+			"repo": "https://github.com/henricook/claude-glab-skill",
+			"license": "MIT",
+			"relationship": "inspiration"
+		},
+		{
+			"name": "wenerme ai glab-cli",
+			"type": "git",
+			"url": "https://github.com/wenerme/ai/tree/main/skills/glab-cli",
+			"repo": "https://github.com/wenerme/ai",
+			"license": "MIT",
+			"relationship": "inspiration"
+		},
+		{
+			"name": "wenerme ai glab-docs",
+			"type": "git",
+			"url": "https://github.com/wenerme/ai/tree/main/skills/glab-docs",
+			"repo": "https://github.com/wenerme/ai",
+			"license": "MIT",
+			"relationship": "inspiration"
+		},
+		{
+			"name": "awesome-openclaw-skills glab",
+			"type": "git",
+			"url": "https://github.com/sundial-org/awesome-openclaw-skills/tree/main/skills/glab",
+			"repo": "https://github.com/sundial-org/awesome-openclaw-skills",
+			"license": "MIT",
+			"relationship": "inspiration"
+		}
+	],
+	"updates": []
+}

package/CHANGELOG.md

@@ -0,0 +1,47 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Changed
+- Default token environment variable renamed from `GITLAB_TOKEN` to `PI_GITLAB_TOKEN` to avoid collisions with other tools. The `tokenEnv` setting still allows overriding to any custom env var.
+
+## [0.3.0] - 2026-06-01
+
+### Added (Phase 3 — Advanced tools + hardening + deprecation)
+- **Release tools**: `gitlab_release_list`, `gitlab_release_view`, `gitlab_release_create` for full release management
+- **Bulk operations**: `gitlab_mr_bulk_approve` — approve multiple MRs matching a label/milestone filter
+- **Force-push safety**: `gitlab_force_push_safe` — force-push with branch protection re-enable and confirmation gate
+- **Deprecation**: legacy `glab-gitlab` skill marked deprecated; `@gaodes/pi-gitlab` is now the canonical GitLab tool surface
+- **README**: expanded with Phase 3 advanced tools table and deprecation section
+
+### Changed
+- All Phase 3 tools are confirm-gated following the same `requireConfirm` pattern as Phase 2
+
+## [0.2.0] - 2026-06-01
+
+### Added (Phase 2 — Mutating tools + confirmation UX)
+- **Mutating tools**: `gitlab_mr_create`, `gitlab_mr_merge`, `gitlab_issue_create`, `gitlab_issue_close`, `gitlab_pipeline_run`
+- **Confirmation utility**: `src/lib/confirm.ts` — `requireConfirm()` gates all mutating operations with `confirm:true` execution and `dryRun:true` preview
+- **Setup guard**: all Phase 2 tools call `requireSetup(ctx.cwd)` at execute time, blocking when token or config is missing
+- **In-package skills**: `gitlab-release` (release list/view/create patterns) and `gitlab-workflow` (cross-domain orchestration)
+- **Guard behavior tests**: `test/tools/guard-behavior.test.ts` covers setup-required error shape and confirm gate
+
+## [0.1.0] - 2026-06-01
+
+### Added (Phase 1 — Read-only tools + diagnostics + wiring)
+- Tools: `gitlab_project_resolve`, `gitlab_mr_list`, `gitlab_mr_view`, `gitlab_issue_list`, `gitlab_pipeline_status`, `gitlab_job_logs`, `gitlab_api`
+- Lib helpers: glab runner, project cache, fallback resolution, pagination, redaction, shared schemas
+- Config integration under `pi-gitlab` in `prime-settings.json`
+- Setup guard to block tools until token + explicit config are valid
+- `/gitlab-doctor` diagnostics and interactive setup wizard
+- `resources_discover` wiring for in-package skills
+- Package bootstrap metadata and provenance files
+
+### Changed
+- `gitlab_api` now requires `confirm: true` for all mutating verbs (`POST`, `PUT`, `PATCH`, `DELETE`).
+- Phase-2/3 mutating and release tool files removed from Phase-1 artifact scope.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 El Che
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,132 @@
+# @gaodes/pi-gitlab
+
+Pi extension package for GitLab workflows on `gitlab.elches.dev` using `glab` + in-package skills.
+
+## Install
+
+```bash
+npm install @gaodes/pi-gitlab
+```
+
+Requires `glab >= 1.40.0` and a `PI_GITLAB_TOKEN` environment variable.
+
+## Quick Start
+
+1. Ensure `glab` is installed and authenticated:
+   ```bash
+   glab auth status
+   ```
+
+2. Set `PI_GITLAB_TOKEN` and add a `pi-gitlab` configuration key to `prime-settings.json` (global or project). The extension blocks tool usage until both exist.
+
+3. Run diagnostics:
+   ```
+   /gitlab-doctor
+   ```
+
+## Tools
+
+### Read-only (Phase 1)
+
+| Tool | Description |
+|------|-------------|
+| `gitlab_project_resolve` | Resolve project path → numeric ID (with cache) |
+| `gitlab_mr_list` | List MRs with filters and pagination |
+| `gitlab_mr_view` | View MR details, discussions, diff |
+| `gitlab_issue_list` | List issues with filters |
+| `gitlab_pipeline_status` | Check pipeline status for a ref |
+| `gitlab_job_logs` | Fetch CI job logs (redacted by default) |
+| `gitlab_api` | Raw glab API passthrough. Mutating methods require `confirm:true`; without confirmation, returns preview-only result and does not execute |
+
+### Mutating (Phase 2 — require `confirm:true`)
+
+| Tool | Description |
+|------|-------------|
+| `gitlab_mr_create` | Create a merge request (title, description, draft, source/target branch) |
+| `gitlab_mr_merge` | Merge an open merge request |
+| `gitlab_issue_create` | Create an issue (title, description, labels, assignee, milestone) |
+| `gitlab_issue_close` | Close an issue or mark it as resolved |
+| `gitlab_pipeline_run` | Trigger a pipeline for a branch or tag |
+
+All mutating tools require `confirm: true` to execute. Set `confirm: false, dryRun: true` to preview the operation without executing it.
+
+### Advanced (Phase 3)
+
+| Tool | Description |
+|------|-------------|
+| `gitlab_release_list` | List releases for a project |
+| `gitlab_release_view` | View details of a single release |
+| `gitlab_release_create` | Create a release (confirm-gated mutating operation) |
+| `gitlab_mr_bulk_approve` | Approve multiple MRs matching a label/milestone filter (confirm-gated) |
+| `gitlab_force_push_safe` | Force-push with branch protection re-enable and confirmation gate |
+
+## Setup guard
+
+On load, the extension checks for:
+
+1. `PI_GITLAB_TOKEN` environment variable (or the env var named by `tokenEnv` in settings).
+2. `pi-gitlab` configuration in `prime-settings.json` (global or project).
+
+If either is missing, all tool calls are blocked. Run `/gitlab-doctor` to launch the interactive setup wizard, save the `pi-gitlab` config key, and verify readiness.
+
+## Commands
+
+- `/gitlab-doctor` — Run diagnostics for glab, auth, API, and config
+
+## Skills
+
+The package ships six in-package skills under `skills/`:
+
+- `gitlab-assistant` — Hub router for GitLab operations
+- `gitlab-mr` — MR lifecycle patterns (view, list, create, merge)
+- `gitlab-issue` — Issue triage patterns (list, create, close)
+- `gitlab-pipeline` — Pipeline diagnostics patterns (status, logs, run)
+- `gitlab-release` — Release listing, viewing, and creation via `gitlab_api`
+- `gitlab-workflow` — Cross-domain orchestration: release cuts, hotfixes, issue-to-MR flows
+
+## Deprecation
+
+This package supersedes the legacy `glab-gitlab` skill. That skill is marked deprecated in Phase 3 and remains as a read-only fallback reference. New GitLab automation should use `@gaodes/pi-gitlab` exclusively.
+
+## Configuration
+
+Key: `pi-gitlab` in `~/.pi/agent/prime-settings.json`
+
+```json
+{
+  "pi-gitlab": {
+    "hostname": "gitlab.elches.dev",
+    "sshHostname": "gitlab-ssh.elches.dev",
+    "sshPort": 2222,
+    "tokenEnv": "PI_GITLAB_TOKEN",
+    "defaultProjectPath": null,
+    "render": {
+      "tableMaxRows": 25,
+      "diffMaxLines": 400,
+      "logTailLines": 200
+    },
+    "safety": {
+      "requireConfirmForDelete": true,
+      "previewMutatingApiCalls": true,
+      "redactJobLogsByDefault": true,
+      "minGlabVersion": "1.40.0"
+    }
+  }
+}
+```
+
+## Project Resolution
+
+The `project` parameter is optional on all tools. Resolution order:
+1. Explicit parameter
+2. Git remote `origin` in CWD
+3. `defaultProjectPath` from settings
+
+Resolved IDs are cached in `~/.pi/agent/cache/pi-gitlab/projects.json`.
+
+
+
+---
+[GitNexus] 1 related symbols found:
+
+README.md (README.md)

package/package.json

@@ -0,0 +1,79 @@
+{
+	"name": "@gaodes/pi-gitlab",
+	"version": "0.3.0",
+	"description": "Pi extension package for GitLab workflows via glab CLI with in-package skills.",
+	"keywords": [
+		"pi-package",
+		"pi-extension",
+		"gitlab",
+		"glab"
+	],
+	"type": "module",
+	"private": false,
+	"main": "./src/index.ts",
+	"files": [
+		"src/commands",
+		"src/config",
+		"src/events",
+		"src/index.ts",
+		"src/lib",
+		"src/tools",
+		"skills",
+		"README.md",
+		"CHANGELOG.md",
+		"LICENSE",
+		".upstream.json",
+		".primecodex.json"
+	],
+	"scripts": {
+		"typecheck": "tsc --noEmit",
+		"lint": "biome check .",
+		"format": "biome check --write .",
+		"test": "vitest run --passWithNoTests"
+	},
+	"pi": {
+		"extensions": [
+			"./src/index.ts"
+		],
+		"skills": [
+			"./skills"
+		]
+	},
+	"devDependencies": {
+		"@biomejs/biome": "^2.4.3",
+		"@earendil-works/pi-coding-agent": "^0.78.0",
+		"@types/node": "^22.0.0",
+		"typebox": "^1.1.39",
+		"typescript": "^5.6.2",
+		"vitest": "^4.1.5"
+	},
+	"peerDependencies": {
+		"@earendil-works/pi-ai": ">=0.74.0 <1",
+		"@earendil-works/pi-coding-agent": ">=0.74.0 <1",
+		"@earendil-works/pi-tui": ">=0.74.0 <1",
+		"typebox": ">=1.1.0 <2"
+	},
+	"peerDependenciesMeta": {
+		"@earendil-works/pi-ai": {
+			"optional": true
+		},
+		"@earendil-works/pi-coding-agent": {
+			"optional": true
+		},
+		"@earendil-works/pi-tui": {
+			"optional": true
+		},
+		"typebox": {
+			"optional": true
+		}
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/gaodes/pi-gitlab.git"
+	},
+	"license": "MIT",
+	"author": "El Che"
+}

package/skills/gitlab-assistant/SKILL.md

@@ -0,0 +1,28 @@
+---
+name: gitlab-assistant
+description: >
+  Hub router for all GitLab operations. Entry point when the user mentions
+  GitLab, merge requests, issues, pipelines, releases, glab, MRs, CI/CD,
+  or repositories. Routes to specialized skills based on intent.
+---
+
+# GitLab Assistant
+
+You are the entry point for GitLab workflows on `gitlab.elches.dev`.
+
+## Routing
+
+| Intent | Skill to use |
+|--------|-------------|
+| MR lifecycle (create, view, list, merge) | `gitlab-mr` |
+| Issue triage (create, list, close, comment) | `gitlab-issue` |
+| Pipeline / CI status, logs, retry | `gitlab-pipeline` |
+| Raw API calls, complex queries | `gitlab_api` tool directly |
+| Setup / diagnostics | `/gitlab-doctor` command |
+
+## Rules
+
+- Always prefer dedicated tools over raw `gitlab_api`.
+- If a project is not specified, tools fall back to the current git remote or settings default.
+- All mutating API calls require `confirm: true`. Without confirmation, returns a preview-only result and does not execute.
+- Never expose tokens or credentials in output.

package/skills/gitlab-issue/SKILL.md

@@ -0,0 +1,41 @@
+---
+name: gitlab-issue
+description: >
+  GitLab issue triage and workflow support. Use for creating, listing,
+  viewing, and closing issues.
+---
+
+# GitLab Issue Skill
+
+## Patterns
+
+### List open issues
+```
+gitlab_issue_list({ project: "namespace/project" })
+```
+
+### Create issue
+```
+gitlab_issue_create({
+  project: "namespace/project",
+  title: "Bug: ...",
+  description: "## Steps to reproduce\n...",
+  labels: ["bug", "urgent"],
+  confirm: true
+})
+```
+
+### Close issue
+```
+gitlab_issue_close({
+  project: "namespace/project",
+  issueId: 123,
+  confirm: true
+})
+```
+
+## Rules
+
+- Always preview with `dryRun: true` before creating or closing.
+- Require `confirm: true` for create and close.
+- Use labels consistently with project conventions.

package/skills/gitlab-mr/SKILL.md

@@ -0,0 +1,49 @@
+---
+name: gitlab-mr
+description: >
+  Merge request lifecycle support for GitLab. Use for creating, listing,
+  viewing, and merging MRs with confirmation UX.
+---
+
+# GitLab MR Skill
+
+## Patterns
+
+### List open MRs
+```
+gitlab_mr_list({ project: "namespace/project" })
+```
+
+### View MR details
+```
+gitlab_mr_view({ project: "namespace/project", mrId: 42 })
+```
+
+### Create MR
+```
+gitlab_mr_create({
+  project: "namespace/project",
+  sourceBranch: "feature/x",
+  targetBranch: "main",
+  title: "Add feature X",
+  description: "## Summary\n...",
+  confirm: true
+})
+```
+
+### Merge MR
+```
+gitlab_mr_merge({
+  project: "namespace/project",
+  mrId: 42,
+  squash: true,
+  confirm: true
+})
+```
+
+## Rules
+
+- Always preview with `dryRun: true` before mutating.
+- Require `confirm: true` for create and merge.
+- Check pipeline status before merging.
+- Never merge without user confirmation.

package/skills/gitlab-pipeline/SKILL.md

@@ -0,0 +1,36 @@
+---
+name: gitlab-pipeline
+description: >
+  Pipeline diagnostics, status checks, and CI troubleshooting for GitLab.
+  Use for checking pipeline status, fetching job logs, and triggering runs.
+---
+
+# GitLab Pipeline Skill
+
+## Patterns
+
+### Check latest pipeline status
+```
+gitlab_pipeline_status({ project: "namespace/project", ref: "main" })
+```
+
+### Fetch job logs
+```
+gitlab_job_logs({ project: "namespace/project", jobId: 456, tail: 100 })
+```
+
+### Trigger pipeline
+```
+gitlab_pipeline_run({
+  project: "namespace/project",
+  ref: "main",
+  confirm: true
+})
+```
+
+## Rules
+
+- Check pipeline status before merging MRs.
+- Use `tail` to limit log output; default is 200 lines.
+- Logs are redacted by default for secrets.
+- Triggering pipelines requires `confirm: true`.

package/skills/gitlab-release/SKILL.md

@@ -0,0 +1,45 @@
+---
+name: gitlab-release
+description: >
+  GitLab release management. Use for listing, viewing, and creating
+  releases tied to Git tags on gitlab.elches.dev. Requires glab and
+  confirm for mutating operations.
+---
+
+# GitLab Release Skill
+
+## Patterns
+
+### List releases
+```
+gitlab_api({ endpoint: "projects/:project/releases" })
+```
+
+### View a single release
+```
+gitlab_api({ endpoint: "projects/:project/releases/:tag", project: "namespace/project" })
+```
+
+### Create a release from a tag
+```
+gitlab_api({
+  method: "POST",
+  endpoint: "projects/:project/releases",
+  project: "namespace/project",
+  body: {
+    tag_name: "v1.2.0",
+    name: "v1.2.0",
+    description: "## What changed\n...",
+    ref: "main"
+  },
+  confirm: true
+})
+```
+
+## Rules
+
+- Always resolve project path with `gitlab_project_resolve` before calling `gitlab_api` with `:project`.
+- Creating releases requires `confirm: true`; list and view are read-only.
+- Use `glab api` with numeric project IDs — path-encoded URLs break behind the local reverse proxy.
+- Tag must exist before creating a release; create the tag first if needed.
+- Keep release notes in Keep a Changelog format when possible.

package/skills/gitlab-workflow/SKILL.md

@@ -0,0 +1,39 @@
+---
+name: gitlab-workflow
+description: >
+  Cross-domain GitLab workflow orchestration on gitlab.elches.dev.
+  Combines tools into multi-step flows like release cut, hotfix, and
+  issue-to-MR pipelines. Routes to focused skills for individual steps.
+---
+
+# GitLab Workflow Skill
+
+## Patterns
+
+### Release cut flow
+1. Check pipeline status with `gitlab_pipeline_status` on the target branch.
+2. Verify all MRs are merged with `gitlab_mr_list` (state: merged).
+3. Create a Git tag via `git_tag` (pi-git).
+4. Create the release with `gitlab-release` skill.
+5. Push and verify with `gitlab_api` (GET release).
+
+### Hotfix flow
+1. Create a branch from the tagged release with `git_branch_create` (pi-git).
+2. Create an MR targeting the release branch with `gitlab-mr` skill.
+3. Monitor pipeline with `gitlab_pipeline_status`.
+4. Merge with `gitlab_mr_merge` (confirm required).
+5. Tag and release via `gitlab-release` skill.
+
+### Issue-to-MR flow
+1. List issues with `gitlab_issue_list` (labels, state).
+2. Create a branch referencing the issue number.
+3. Create an MR with `Closes #N` in the description via `gitlab-mr` skill.
+4. Track pipeline and merge when green.
+
+## Rules
+
+- Every mutating step requires explicit `confirm: true`.
+- Prefer dedicated tools over raw `gitlab_api` for each step.
+- Use numeric project IDs for all `glab api` calls — path-encoded URLs break behind the reverse proxy.
+- Resolve the project once with `gitlab_project_resolve` and reuse the ID across steps.
+- After merge, wait for pipeline to pass before tagging or releasing.