@gitlab/opencode-gitlab-plugin 1.5.1 → 1.5.3

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.5.3](https://gitlab.com/gitlab-org/editor-extensions/opencode-gitlab-plugin/compare/v1.5.2...v1.5.3) (2026-02-03)
+
+
+### 🐛 Bug Fixes
+
+* use null checks for stricter validation ([6c39c81](https://gitlab.com/gitlab-org/editor-extensions/opencode-gitlab-plugin/commit/6c39c81aa839a99a0c12b3aa57d9376e5e3788d4))
+
+
+### ♻️ Code Refactoring
+
+* consolidate discussion tools into unified interface ([aa0cefd](https://gitlab.com/gitlab-org/editor-extensions/opencode-gitlab-plugin/commit/aa0cefdcc36fbd00c375ca17b0d75dbda3ecbe18))
+* remove gitlab_create_commit tool ([4c4944d](https://gitlab.com/gitlab-org/editor-extensions/opencode-gitlab-plugin/commit/4c4944d8afcd710e7b0910d82197802eee75e6fd))
+
+## [1.5.2](https://gitlab.com/gitlab-org/editor-extensions/opencode-gitlab-plugin/compare/v1.5.1...v1.5.2) (2026-02-02)
+
+
+### 📚 Documentation
+
+* update documentation to reflect GraphQL API migrations ([1b5aff1](https://gitlab.com/gitlab-org/editor-extensions/opencode-gitlab-plugin/commit/1b5aff1d630577d9ec05966e249a89fdb8a86b3f))
+
 ## [1.5.1](https://gitlab.com/gitlab-org/editor-extensions/opencode-gitlab-plugin/compare/v1.5.0...v1.5.1) (2026-02-02)
 
 
@@ -203,65 +223,6 @@ All notable changes to this project will be documented in this file. See [Conven
 
 * create release ([e74f8a7](https://gitlab.com/vglafirov/opencode-gitlab-plugin/commit/e74f8a7550a6d2a58b3fb551fe4ad3a2db56e0c7))
 
-## [Unreleased]
-
-### Added
-- **GraphQL API Support** - Added `fetchGraphQL()` method to base `GitLabApiClient` class
-  - Enables GraphQL queries and mutations with proper error handling
-  - Supports variables and returns typed responses
-  - Foundation for advanced GitLab features
-  - Enhanced JSDoc documentation with `@template` parameter
-- **Vulnerability Management Tools** - 6 new GraphQL-based security tools:
-  - `gitlab_create_vulnerability_issue` - Create issue linked to vulnerabilities
-  - `gitlab_dismiss_vulnerability` - Dismiss vulnerability with reason (ACCEPTABLE_RISK, FALSE_POSITIVE, etc.)
-  - `gitlab_confirm_vulnerability` - Confirm a security vulnerability
-  - `gitlab_revert_vulnerability_to_detected` - Revert vulnerability state back to detected
-  - `gitlab_update_vulnerability_severity` - Update vulnerability severity level (CRITICAL, HIGH, MEDIUM, LOW, INFO, UNKNOWN)
-  - `gitlab_link_vulnerability_to_issue` - Link existing issue to vulnerabilities
-  - All tools require Developer role or higher
-  - Comprehensive test coverage with 29 new tests (22 security + 7 validation)
-- **GID Validation Utilities** - New validation module for GitLab Global IDs
-  - `isValidGid()` - Validates GID format with optional type checking
-  - `validateGid()` - Validates and throws descriptive errors for invalid GIDs
-  - Integrated into all security methods that accept GIDs
-  - Provides better error messages for incorrect GID formats
-
-### Changed
-- **Refactored Security Client** - Improved code maintainability
-  - Extracted all GraphQL mutation queries to constants
-  - Makes queries easier to update and maintain
-  - Improved code readability in security methods
-- **Enhanced Type Safety** - Added validation for all GID parameters
-  - Validates vulnerability IDs format: `gid://gitlab/Vulnerability/{id}`
-  - Validates issue IDs format: `gid://gitlab/Issue/{id}`
-  - Prevents invalid GID formats from reaching GitLab API
-- **Audit Events API** - 3 new tools for security and compliance monitoring:
-  - `gitlab_list_project_audit_events` - List audit events for a project (requires owner role)
-  - `gitlab_list_group_audit_events` - List audit events for a group (requires owner role)
-  - `gitlab_list_instance_audit_events` - List instance-level audit events (requires admin)
-  - Support for filtering by date range, entity type, entity ID, and author ID with pagination
-- **Paginated MR Diffs** - `gitlab_list_merge_request_diffs` tool for handling large changesets
-  - Fetch merge request diffs with pagination support
-  - Useful for processing diffs in chunks when MRs have many changed files
-- **Single Note Retrieval** - 3 new tools for granular comment access:
-  - `gitlab_get_epic_note` - Get a single note from an epic by ID
-  - `gitlab_get_issue_note` - Get a single note from an issue by ID
-  - `gitlab_get_commit_comments` - Get all comments on a specific commit
-  - Retrieve specific comments without fetching all notes
-- **`gitlab_create_issue`** tool - Create new issues in GitLab projects with full support for:
-  - Required parameters: `project_id`, `title`
-  - Optional parameters: `description`, `assignee_ids`, `milestone_id`, `labels`, `due_date`, `confidential`, `weight`, `epic_id`, `issue_type`
-  - Support for different issue types: `issue`, `incident`, `test_case`, `task`
-  - Comprehensive test coverage for client and tool
-  - Detailed documentation in `docs/CREATE_ISSUE_TOOL.md`
-
-### Changed
-- Updated README.md with `gitlab_create_issue` tool documentation
-- Added usage example for creating and managing issues
-- Updated tool count from 60+ to 68+ tools (7 new tools added)
-- Updated index.ts comment to reflect new audit, paginated diffs, and single note retrieval capabilities
-- Integrated `AuditClient` into `UnifiedGitLabClient` via mixins
-
 ## [1.6.3](https://gitlab.com/vglafirov/opencode-gitlab-plugin/compare/v1.6.2...v1.6.3) (2025-12-14)
 
 

package/README.md

@@ -4,7 +4,7 @@
 [![npm version](https://img.shields.io/npm/v/@gitlab/opencode-gitlab-plugin.svg)](https://www.npmjs.com/package/@gitlab/opencode-gitlab-plugin)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
-A comprehensive GitLab API plugin for OpenCode that provides AI-powered access to GitLab's REST API. This plugin enables seamless interaction with merge requests, issues, pipelines, repositories, epics, snippets, audit events, and more through natural language commands.
+A comprehensive GitLab API plugin for OpenCode that provides AI-powered access to GitLab's REST and GraphQL APIs. This plugin enables seamless interaction with merge requests, issues, pipelines, repositories, epics, snippets, audit events, and more through natural language commands.
 
 ## 📋 Table of Contents
 
@@ -45,14 +45,27 @@ A comprehensive GitLab API plugin for OpenCode that provides AI-powered access t
 - **TypeScript**: Full type safety with comprehensive type definitions
 - **ESM Support**: Modern ES modules for optimal tree-shaking
 - **Zod Validation**: Runtime schema validation for all API inputs
-- **GraphQL Support**: Native GraphQL API support with type-safe mutations and queries
+- **GraphQL Support**: Native GraphQL API support with type-safe mutations and queries for TODOs, Notes, Discussions, Auto-merge, and Security tools
+- **Cursor-Based Pagination**: GraphQL-powered pagination with `first`/`after` and `last`/`before` cursors for efficient data fetching
 - **GID Validation**: Automatic validation of GitLab Global IDs with descriptive error messages
 - **Error Handling**: Robust error handling with detailed error messages
 - **Authentication**: Multiple authentication methods (OAuth, API tokens)
 - **Rate Limiting**: Built-in handling for GitLab API rate limits
 - **Caching**: Efficient API response handling
 - **Modular Architecture**: Clean separation of concerns with client and tool modules
-- **Comprehensive Testing**: 142 tests with full coverage of all features
+- **Comprehensive Testing**: 181 tests with full coverage of all features
+
+### GraphQL-Powered Tools
+
+The following tools use GitLab's GraphQL API for enhanced functionality:
+
+| Category        | Tools                                                                                                                            | Benefits                                                 |
+| --------------- | -------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------- |
+| **TODOs**       | `gitlab_list_todos`, `gitlab_get_todo_count`                                                                                     | Cursor-based pagination, rich filtering                  |
+| **Notes**       | `gitlab_list_mr_notes`, `gitlab_list_issue_notes`, `gitlab_list_epic_notes`, `gitlab_list_snippet_notes`                         | Efficient pagination, consistent response format         |
+| **Discussions** | `gitlab_list_mr_discussions`, `gitlab_list_issue_discussions`, `gitlab_list_epic_discussions`, `gitlab_list_snippet_discussions` | Cursor-based pagination, nested note support             |
+| **Auto-merge**  | `gitlab_set_mr_auto_merge`                                                                                                       | MWPS (Merge When Pipeline Succeeds), merge train support |
+| **Security**    | All vulnerability management tools                                                                                               | Type-safe GID validation, mutation support               |
 
 ## 🏗️ Architecture
 
@@ -74,6 +87,7 @@ graph TB
 
     subgraph "GitLab API"
         REST[REST API v4]
+        GraphQL[GraphQL API]
         MR[Merge Requests]
         Issues[Issues]
         Pipelines[Pipelines]
@@ -88,12 +102,14 @@ graph TB
     Validator --> Client
     Client --> Auth
     Auth --> REST
+    Auth --> GraphQL
     REST --> MR
     REST --> Issues
     REST --> Pipelines
     REST --> Repos
     REST --> Epics
-    REST --> Security
+    GraphQL --> Security
+    GraphQL --> MR
 ```
 
 ### Plugin Structure
@@ -271,9 +287,9 @@ Or for API tokens:
 
 ## 🛠️ Available Tools
 
-The plugin provides **104 tools** organized into the following categories:
+The plugin provides **102 tools** organized into the following categories:
 
-### Merge Request Tools (15 tools)
+### Merge Request Tools (16 tools)
 
 | Tool                              | Description                                                                                                                  |
 | --------------------------------- | ---------------------------------------------------------------------------------------------------------------------------- |
@@ -282,9 +298,9 @@ The plugin provides **104 tools** organized into the following categories:
 | `gitlab_create_merge_request`     | Create a new merge request                                                                                                   |
 | `gitlab_update_merge_request`     | Update merge request title, description, state, assignees, reviewers, and labels                                             |
 | `gitlab_get_mr_changes`           | Get file changes/diffs for a merge request                                                                                   |
-| `gitlab_list_mr_discussions`      | List discussion threads on a merge request with nested notes                                                                 |
+| `gitlab_list_mr_discussions`      | List discussion threads on a merge request (GraphQL with cursor-based pagination)                                            |
 | `gitlab_get_mr_discussion`        | Get a specific discussion thread with all replies                                                                            |
-| `gitlab_list_mr_notes`            | List all comments in flat structure (easier than nested discussions)                                                         |
+| `gitlab_list_mr_notes`            | List all comments with cursor-based pagination (GraphQL)                                                                     |
 | `gitlab_create_mr_note`           | Add a comment or reply to a merge request discussion                                                                         |
 | `gitlab_create_mr_discussion`     | Start a new discussion thread (optionally on specific code lines)                                                            |
 | `gitlab_resolve_mr_discussion`    | Mark a discussion as resolved after addressing feedback                                                                      |
@@ -292,6 +308,7 @@ The plugin provides **104 tools** organized into the following categories:
 | `gitlab_get_mr_commits`           | Get all commits in a merge request                                                                                           |
 | `gitlab_get_mr_pipelines`         | Get all pipelines for a merge request                                                                                        |
 | `gitlab_list_merge_request_diffs` | List file diffs with pagination support for large changesets                                                                 |
+| `gitlab_set_mr_auto_merge`        | Enable auto-merge (MWPS) using GraphQL API when pipeline succeeds                                                            |
 
 ### Issue Tools (10 tools)
 
@@ -300,8 +317,8 @@ The plugin provides **104 tools** organized into the following categories:
 | `gitlab_create_issue`               | Create a new issue with title, description, labels, assignees, and milestone |
 | `gitlab_get_issue`                  | Get issue details including state, author, assignees, labels, and comments   |
 | `gitlab_list_issues`                | List issues with filtering by state, labels, assignee, and milestone         |
-| `gitlab_list_issue_notes`           | List all comments including system notes                                     |
-| `gitlab_list_issue_discussions`     | List discussion threads with nested notes                                    |
+| `gitlab_list_issue_notes`           | List all comments with cursor-based pagination (GraphQL)                     |
+| `gitlab_list_issue_discussions`     | List discussion threads with cursor-based pagination (GraphQL)               |
 | `gitlab_get_issue_discussion`       | Get a specific discussion thread with context                                |
 | `gitlab_create_issue_note`          | Add a comment or reply to an issue discussion                                |
 | `gitlab_get_issue_note`             | Get a specific note by ID with full details                                  |
@@ -319,8 +336,8 @@ The plugin provides **104 tools** organized into the following categories:
 | `gitlab_list_epic_issues`       | Get all issues linked to an epic                                              |
 | `gitlab_add_issue_to_epic`      | Link an issue to an epic                                                      |
 | `gitlab_remove_issue_from_epic` | Unlink an issue from an epic                                                  |
-| `gitlab_list_epic_notes`        | List all comments on an epic                                                  |
-| `gitlab_list_epic_discussions`  | List discussion threads on an epic                                            |
+| `gitlab_list_epic_notes`        | List all comments with cursor-based pagination (GraphQL)                      |
+| `gitlab_list_epic_discussions`  | List discussion threads with cursor-based pagination (GraphQL)                |
 | `gitlab_create_epic_note`       | Add a comment or reply to an epic discussion                                  |
 | `gitlab_get_epic_discussion`    | Get a specific epic discussion thread                                         |
 | `gitlab_get_epic_note`          | Get a specific epic note by ID                                                |
@@ -338,7 +355,7 @@ The plugin provides **104 tools** organized into the following categories:
 | `gitlab_lint_ci_config`            | Validate CI/CD YAML configuration with project context     |
 | `gitlab_lint_existing_ci_config`   | Validate existing .gitlab-ci.yml from repository           |
 
-### Repository Tools (16 tools)
+### Repository Tools (12 tools)
 
 | Tool                              | Description                                                                  |
 | --------------------------------- | ---------------------------------------------------------------------------- |
@@ -399,12 +416,12 @@ The plugin provides **104 tools** organized into the following categories:
 
 ### TODO Tools (4 tools)
 
-| Tool                         | Description                                     |
-| ---------------------------- | ----------------------------------------------- |
-| `gitlab_list_todos`          | List TODO items for current user with filtering |
-| `gitlab_mark_todo_done`      | Mark a specific TODO as completed               |
-| `gitlab_mark_all_todos_done` | Mark all pending TODOs as completed             |
-| `gitlab_get_todo_count`      | Get count of pending TODOs                      |
+| Tool                         | Description                                            |
+| ---------------------------- | ------------------------------------------------------ |
+| `gitlab_list_todos`          | List TODO items with cursor-based pagination (GraphQL) |
+| `gitlab_mark_todo_done`      | Mark a specific TODO as completed                      |
+| `gitlab_mark_all_todos_done` | Mark all pending TODOs as completed                    |
+| `gitlab_get_todo_count`      | Get count of pending TODOs (GraphQL)                   |
 
 ### Project & User Tools (3 tools)
 
@@ -416,13 +433,13 @@ The plugin provides **104 tools** organized into the following categories:
 
 ### Snippet Tools (5 tools)
 
-| Tool                               | Description                                    |
-| ---------------------------------- | ---------------------------------------------- |
-| `gitlab_list_snippet_discussions`  | List discussion threads on a snippet           |
-| `gitlab_get_snippet_discussion`    | Get a specific snippet discussion thread       |
-| `gitlab_list_snippet_notes`        | List all comments on a snippet                 |
-| `gitlab_create_snippet_note`       | Add a comment or reply to a snippet discussion |
-| `gitlab_create_snippet_discussion` | Start a new discussion on a snippet            |
+| Tool                               | Description                                                    |
+| ---------------------------------- | -------------------------------------------------------------- |
+| `gitlab_list_snippet_discussions`  | List discussion threads with cursor-based pagination (GraphQL) |
+| `gitlab_get_snippet_discussion`    | Get a specific snippet discussion thread                       |
+| `gitlab_list_snippet_notes`        | List all comments with cursor-based pagination (GraphQL)       |
+| `gitlab_create_snippet_note`       | Add a comment or reply to a snippet discussion                 |
+| `gitlab_create_snippet_discussion` | Start a new discussion on a snippet                            |
 
 ### Discussion Tools (2 tools)
 
@@ -604,22 +621,32 @@ const fileContent = await plugin.tool.gitlab_get_file.execute({
 });
 ```
 
-### Example 6: Manage TODOs
+### Example 6: Manage TODOs (GraphQL with Pagination)
 
 ```javascript
-// Get TODO count
+// Get TODO count (uses GraphQL)
 const todoCount = await plugin.tool.gitlab_get_todo_count.execute({});
 
-// List pending TODOs
-const todos = await plugin.tool.gitlab_list_todos.execute({
+// List pending TODOs with cursor-based pagination
+const firstPage = await plugin.tool.gitlab_list_todos.execute({
   state: 'pending',
   type: 'MergeRequest',
-  limit: 20,
+  first: 20,
 });
 
+// Get next page using cursor
+if (firstPage.todos.pageInfo.hasNextPage) {
+  const nextPage = await plugin.tool.gitlab_list_todos.execute({
+    state: 'pending',
+    type: 'MergeRequest',
+    first: 20,
+    after: firstPage.todos.pageInfo.endCursor,
+  });
+}
+
 // Mark specific TODO as done
 await plugin.tool.gitlab_mark_todo_done.execute({
-  todo_id: todos[0].id,
+  todo_id: firstPage.todos.nodes[0].id,
 });
 
 // Mark all TODOs as done
@@ -655,7 +682,27 @@ const commit = await plugin.tool.gitlab_create_commit.execute({
 });
 ```
 
-### Example 8: Manage Security Vulnerabilities
+### Example 8: Enable Auto-Merge (MWPS)
+
+```javascript
+// Get merge request to retrieve current HEAD SHA
+const mr = await plugin.tool.gitlab_get_merge_request.execute({
+  project_id: 'my-group/my-project',
+  mr_iid: 123,
+});
+
+// Enable auto-merge when pipeline succeeds (GraphQL)
+const result = await plugin.tool.gitlab_set_mr_auto_merge.execute({
+  project_id: 'my-group/my-project',
+  mr_iid: 123,
+  sha: mr.sha, // Required to prevent race conditions
+  strategy: 'MERGE_WHEN_CHECKS_PASS', // or 'ADD_TO_MERGE_TRAIN_WHEN_CHECKS_PASS'
+});
+
+console.log(`Auto-merge enabled: ${result.mergeRequest.autoMergeEnabled}`);
+```
+
+### Example 9: Manage Security Vulnerabilities
 
 ```javascript
 // List vulnerabilities in a project
@@ -853,11 +900,11 @@ npm run test:coverage
 
 **Test Coverage:**
 
-- **142 tests** across 18 test files
-- Client tests for all API methods
+- **181 tests** across 21 test files
+- Client tests for all API methods (REST and GraphQL)
 - Tool tests for all tool definitions
 - Validation tests for GID utilities
-- GraphQL method tests
+- GraphQL method tests for Notes, Discussions, TODOs
 - All tests passing ✅
 
 ## 🚀 CI/CD Pipeline
@@ -993,7 +1040,8 @@ async fetchGraphQL<T>(query: string, variables?: Record<string, unknown>): Promi
 - Full TypeScript type safety with generic return types
 - Automatic error handling for both HTTP and GraphQL errors
 - Support for query variables
-- Used by all GraphQL-based security tools
+- Cursor-based pagination support for large result sets
+- Used by TODOs, Notes, Discussions, Auto-merge, and Security tools
 
 **Example:**
 
@@ -1009,6 +1057,18 @@ const result = await client.fetchGraphQL<{ vulnerability: { id: string } }>(
 );
 ```
 
+**Pagination Example:**
+
+```typescript
+// First page
+const page1 = await plugin.tool.gitlab_list_todos.execute({ first: 20 });
+// Navigate with cursor
+const page2 = await plugin.tool.gitlab_list_todos.execute({
+  first: 20,
+  after: page1.todos.pageInfo.endCursor,
+});
+```
+
 #### Project ID Encoding
 
 ```typescript

package/dist/index.d.ts

@@ -4,9 +4,9 @@ import { Plugin } from '@opencode-ai/plugin';
  * GitLab Tools Plugin for OpenCode
  *
  * Provides tools for interacting with GitLab:
- * - Merge requests: get, list, changes, discussions, notes (list/create), diffs (paginated)
- * - Issues: create, get, list, notes (list/create/get), discussions
- * - Epics: get, list, create, update, manage issues, notes (list/create/get), discussions
+ * - Merge requests: get, list, changes, create, update, commits, pipelines, diffs (paginated), auto-merge
+ * - Issues: create, get, list
+ * - Epics: get, list, create, update, manage issues
  * - Pipelines: list, get, jobs, logs, retry, failing jobs, CI linter
  * - Repository: get file, commits, diff, branches, tree, create commit, commit comments
  * - Search: projects, issues, MRs, blobs, commits, etc.
@@ -17,8 +17,8 @@ import { Plugin } from '@opencode-ai/plugin';
  * - Audit: list project/group/instance audit events
  * - Wikis: get wiki page
  * - Work Items: get, list, create, update, notes
- * - Snippets: discussions, notes
- * - Discussions: universal discussion tools for all resource types
+ * - Discussions: unified tools for all resource types (list, get, create/reply, resolve)
+ * - Notes: list/get notes (flat view) for MR, issue, epic, snippet
  * - Git: execute safe, read-only git commands in repository
  */
 declare const gitlabPlugin: Plugin;