@goodfellow-cms/gitlab 0.6.0 → 0.8.0

package/dist/index.d.ts

@@ -3,9 +3,14 @@ import { ConnectDomainOptions, DeployStatus, DnsRecord, FileChange, FileVersion,
 interface ApiOptions {
   /** The API root, such as `https://gitlab.com/api/v4`. */
   apiUrl: string;
-  /** Returns a current access token, refreshing it if needed. */
+  /**
+   * Returns a current access token, refreshing it if needed. `refresh` asks
+   * for a new one after GitLab refused `stale`, which another request may
+   * already have replaced.
+   */
   token: (options?: {
     refresh?: boolean;
+    stale?: string;
   }) => Promise<string>;
   /** Whether the token can be refreshed after a 401. */
   canRefresh: boolean;
@@ -44,6 +49,13 @@ interface GitLabBackendOptions {
     project: string;
     webUrl: string;
   };
+  /** What's read at each commit, shared with the backends of the project's other branches (drafts), since commits never change. */
+  caches?: GitLabCaches;
+}
+/** Path → blob id for the editable files at each commit, and each blob's text, by id. */
+interface GitLabCaches {
+  trees: Map<string, Promise<Map<string, string>>>;
+  blobs: Map<string, Promise<string>>;
 }
 /**
  * The site's files on GitLab. Reads come from the commit `revision()` last
@@ -66,6 +78,7 @@ export declare class GitLabBackend implements GitBackend {
   private readonly branch;
   private readonly onSignOut;
   private pinned?;
+  private readonly caches;
   private readonly trees;
   private readonly blobs;
   constructor(options: GitLabBackendOptions);
@@ -76,6 +89,8 @@ export declare class GitLabBackend implements GitBackend {
   revision(): Promise<string>;
   /** The branch's latest commit, without moving the revision reads are pinned to. */
   private head;
+  /** Every item of one of GitLab's lists, page by page, up to `REVIEW_PAGES` pages. */
+  private everyPage;
   /** Every file in one folder at a commit, page by page. */
   private listFolder;
   /** Path → blob id for the editable files at a commit. Commits never change, so this is cached. */
@@ -98,6 +113,8 @@ export declare class GitLabBackend implements GitBackend {
   write(changes: FileChange[], { message, expectedRevision }: WriteOptions): Promise<{
     revision: string;
   }>;
+  /** Lists `revision`'s editable files as `before`'s with `changes` made, keeping the text written. */
+  private carryTree;
   history(path: string, { page, perPage }?: HistoryOptions): Promise<FileVersion[]>;
   readAt(path: string, revision: string): Promise<string | undefined>;
   changedPaths(from: string, to: string): Promise<string[]>;

package/dist/index.js

@@ -1,16 +1,23 @@
-import { ConflictError, DomainError, DraftError, EDITABLE_FOLDERS, EditorsError, GitApiError, LOCKFILE_JOB, NIGHTLY_VARIABLE, PluginTaskError, REBUILD_JOB, ScheduledBuildsError, SetupError, SignInError, TASK_JOB, TASK_POLL_MS, TASK_RESULT_FILE, TASK_TIMEOUT_MS, UpdatesError, assertContentChanges, branchDrafts, buildStepFor, credentialStorage, encodeBase64Bytes, findBuildCause, findUpdateResult, hostSource, taskRequestProblem } from "@goodfellow-cms/core";
+import { ConflictError, DomainError, DraftError, EDITABLE_FOLDERS, EditorsError, GitApiError, LOCKFILE_JOB, NIGHTLY_VARIABLE, PluginTaskError, REBUILD_JOB, ScheduledBuildsError, SetupError, SignInError, TASK_JOB, TASK_POLL_MS, TASK_RESULT_FILE, TASK_TIMEOUT_MS, UpdatesError, assertContentChanges, branchDrafts, buildStepFor, credentialStorage, encodeBase64Bytes, findBuildCause, findUpdateResult, hostSource, taskRequestProblem, withRateLimits } from "@goodfellow-cms/core";
 //#region src/api.ts
 /** Calls the GitLab API. A 401 refreshes the token once; after that it means the sign-in has expired. */
 async function gitlabRequest(api, path, init = {}) {
-	const send = async (refresh) => api.fetch(`${api.apiUrl}${path}`, {
-		method: init.method ?? "GET",
-		headers: {
-			authorization: `Bearer ${await api.token({ refresh })}`,
-			...init.body !== void 0 && { "content-type": "application/json" }
-		},
-		body: init.body === void 0 ? void 0 : JSON.stringify(init.body),
-		cache: "no-store"
-	});
+	let sent;
+	const send = async (refresh) => {
+		sent = await api.token(refresh ? {
+			refresh,
+			...sent !== void 0 && { stale: sent }
+		} : {});
+		return api.fetch(`${api.apiUrl}${path}`, {
+			method: init.method ?? "GET",
+			headers: {
+				authorization: `Bearer ${sent}`,
+				...init.body !== void 0 && { "content-type": "application/json" }
+			},
+			body: init.body === void 0 ? void 0 : JSON.stringify(init.body),
+			cache: "no-store"
+		});
+	};
 	let response = await send(false);
 	if (response.status === 401 && api.canRefresh) response = await send(true);
 	if (response.status === 401) throw new SignInError("invalid", "GitLab didn't accept the sign-in. It may have expired.");
@@ -346,7 +353,11 @@ function notAllowed$1(error) {
 	if (error instanceof GitApiError && (error.status === 401 || error.status === 403)) throw new ScheduledBuildsError("not-allowed", "Adding pipeline schedules on GitLab needs the Developer role, with permission to merge to the main branch.");
 	throw error;
 }
-/** A cron line for one instant, in UTC: it comes once a year, and `sync()` removes it once it has passed. */
+/**
+* A cron line for one instant, in UTC. GitLab's crons have no year, so it
+* comes again a year later unless `sync()` has removed it since, which only
+* builds the site again, since the schedule's variable skips the update.
+*/
 function cronAt(at) {
 	return `${at.getUTCMinutes()} ${at.getUTCHours()} ${at.getUTCDate()} ${at.getUTCMonth() + 1} *`;
 }
@@ -373,7 +384,12 @@ function gitlabScheduledBuilds(api, project, branch, readCi, now = () => /* @__P
 				if (wanted.size >= 50) break;
 				wanted.set(minute(at), at);
 			}
-			const found = await gitlabJson(api, `${base}?per_page=100`).catch(notAllowed$1);
+			const found = [];
+			for (let page = 1; page <= 10; page++) {
+				const listed = await gitlabJson(api, `${base}?per_page=100&page=${page}`).catch(notAllowed$1);
+				found.push(...listed);
+				if (listed.length < 100) break;
+			}
 			const ours = /* @__PURE__ */ new Map();
 			for (const schedule of found) {
 				if (!schedule.description?.startsWith("Goodfellow: build the site for a scheduled change at ")) continue;
@@ -398,14 +414,22 @@ function gitlabScheduledBuilds(api, project, branch, readCi, now = () => /* @__P
 						active: true
 					}
 				}).catch(notAllowed$1);
-				await gitlabRequest(api, `${base}/${created.id}/variables`, {
-					method: "POST",
-					body: {
-						key: SCHEDULED_CHANGE_VARIABLE,
-						value: time,
-						variable_type: "env_var"
-					}
-				}).catch(notAllowed$1);
+				try {
+					await gitlabRequest(api, `${base}/${created.id}/variables`, {
+						method: "POST",
+						body: {
+							key: SCHEDULED_CHANGE_VARIABLE,
+							value: time,
+							variable_type: "env_var"
+						}
+					});
+				} catch (error) {
+					await gitlabRequest(api, `${base}/${created.id}`, {
+						method: "DELETE",
+						allow: [403, 404]
+					}).catch(() => {});
+					notAllowed$1(error);
+				}
 			}
 		}
 	};
@@ -695,10 +719,22 @@ function gitlabCodeUpdates(options) {
 //#endregion
 //#region src/backend.ts
 const PAGE_SIZE = 100;
+/** The most files GitLab's compare lists, by default. */
+const COMPARE_FILES_LIMIT = 1e3;
+/** How many pages of drafts' branches and merge requests are read: a thousand of each. */
+const REVIEW_PAGES = 10;
 /** How many files one GraphQL request reads. */
 const GRAPHQL_BATCH = 50;
 /** The color and section codes in GitLab's job logs. */
 const ANSI_CODES = new RegExp(`${String.fromCharCode(27)}\\[[\\d;]*[A-Za-z]`, "g");
+/** Git's id for a file's contents (the SHA-1 of `blob <size>\0` and them), as GitLab's tree lists it. */
+async function gitBlobId(bytes) {
+	const header = new TextEncoder().encode(`blob ${bytes.length}\0`);
+	const data = new Uint8Array(header.length + bytes.length);
+	data.set(header);
+	data.set(bytes, header.length);
+	return [...new Uint8Array(await crypto.subtle.digest("SHA-1", data))].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
 /**
 * Whether a status says when the site is live. A job that only asks another
 * host to rebuild the site doesn't, and nor do the nightly update and the
@@ -733,8 +769,9 @@ var GitLabBackend = class GitLabBackend {
 	branch;
 	onSignOut;
 	pinned;
-	trees = /* @__PURE__ */ new Map();
-	blobs = /* @__PURE__ */ new Map();
+	caches;
+	trees;
+	blobs;
 	constructor(options) {
 		this.options = options;
 		this.api = options.api;
@@ -743,6 +780,12 @@ var GitLabBackend = class GitLabBackend {
 		this.user = options.user;
 		this.onSignOut = options.onSignOut;
 		this.pinned = options.revision;
+		this.caches = options.caches ?? {
+			trees: /* @__PURE__ */ new Map(),
+			blobs: /* @__PURE__ */ new Map()
+		};
+		this.trees = this.caches.trees;
+		this.blobs = this.caches.blobs;
 		this.pages = gitlabPages(this.api, options.project);
 		this.editors = gitlabEditors(this.api, options.project, this.branch, this.user.login);
 		this.contentOnly = options.contentOnly === true;
@@ -773,11 +816,40 @@ var GitLabBackend = class GitLabBackend {
 	/** Drafts on branches of the project, with merge requests for review. */
 	draftHost() {
 		const project = `/projects/${this.project}`;
+		const openRequests = (branch) => gitlabJson(this.api, `${project}/merge_requests?${new URLSearchParams({
+			source_branch: branch,
+			state: "opened"
+		})}`);
+		/**
+		* Asks people to review a merge request, by their usernames. GitLab's free
+		* plan takes one reviewer, so where it refuses them all, the first is asked.
+		*/
+		const askReviewers = async (iid, usernames) => {
+			const ids = [];
+			for (const username of usernames) {
+				const [found] = await gitlabJson(this.api, `/users?${new URLSearchParams({ username })}`).catch(() => []);
+				if (found) ids.push(found.id);
+			}
+			for (const reviewerIds of ids.length > 1 ? [ids, ids.slice(0, 1)] : [ids]) {
+				if (reviewerIds.length === 0) return;
+				if ((await gitlabRequest(this.api, `${project}/merge_requests/${iid}`, {
+					method: "PUT",
+					body: { reviewer_ids: reviewerIds },
+					allow: [
+						400,
+						403,
+						404,
+						422
+					]
+				})).ok) return;
+			}
+		};
 		return {
 			liveBranch: this.branch,
 			branchStore: (branch) => new GitLabBackend({
 				...this.options,
-				branch
+				branch,
+				caches: this.caches
 			}),
 			createBranch: async (branch, revision) => {
 				if ((await gitlabRequest(this.api, this.repo(`/branches?${new URLSearchParams({
@@ -803,13 +875,10 @@ var GitLabBackend = class GitLabBackend {
 				return (await response.json()).id;
 			},
 			listBranches: async (prefix) => {
-				const query = new URLSearchParams({
-					search: `^${prefix}`,
-					per_page: "100"
-				});
-				return (await gitlabJson(this.api, this.repo(`/branches?${query}`))).map((found) => found.name).filter((name) => name.startsWith(prefix));
+				const query = new URLSearchParams({ search: `^${prefix}` });
+				return (await this.everyPage(this.repo(`/branches?${query}`))).map((found) => found.name).filter((name) => name.startsWith(prefix));
 			},
-			openReview: async ({ branch, title, description }) => {
+			openReview: async ({ branch, title, description, reviewers = [] }) => {
 				const response = await gitlabRequest(this.api, `${project}/merge_requests`, {
 					method: "POST",
 					body: {
@@ -825,15 +894,29 @@ var GitLabBackend = class GitLabBackend {
 						409
 					]
 				});
-				if (response.ok) return { url: (await response.json()).web_url };
-				if (response.status !== 409) throw new DraftError("no-reviews", "This sign-in can't open merge requests on the site's project.");
-				const query = new URLSearchParams({
-					source_branch: branch,
-					state: "opened"
+				let review;
+				if (response.ok) review = await response.json();
+				else if (response.status !== 409) throw new DraftError("no-reviews", "This sign-in can't open merge requests on the site's project.");
+				else {
+					[review] = await openRequests(branch);
+					if (!review) throw new GitApiError(409, "GitLab couldn't open the merge request.");
+				}
+				await askReviewers(review.iid, reviewers);
+				return { url: review.web_url };
+			},
+			listReviews: async (prefix) => {
+				return (await this.everyPage(`${project}/merge_requests?state=opened`)).filter((request) => request.source_branch.startsWith(prefix)).map((request) => ({
+					branch: request.source_branch,
+					url: request.web_url,
+					title: request.title
+				}));
+			},
+			closeReview: async (branch) => {
+				for (const request of await openRequests(branch)) await gitlabRequest(this.api, `${project}/merge_requests/${request.iid}`, {
+					method: "PUT",
+					body: { state_event: "close" },
+					allow: [403, 404]
 				});
-				const [open] = await gitlabJson(this.api, `${project}/merge_requests?${query}`);
-				if (!open) throw new GitApiError(409, "GitLab couldn't open the merge request.");
-				return { url: open.web_url };
 			}
 		};
 	}
@@ -848,6 +931,16 @@ var GitLabBackend = class GitLabBackend {
 	async head() {
 		return (await gitlabJson(this.api, this.repo(`/branches/${encodeURIComponent(this.branch)}`))).commit.id;
 	}
+	/** Every item of one of GitLab's lists, page by page, up to `REVIEW_PAGES` pages. */
+	async everyPage(path) {
+		const items = [];
+		for (let page = 1; page <= REVIEW_PAGES; page++) {
+			const found = await gitlabJson(this.api, `${path}&per_page=${PAGE_SIZE}&page=${page}`);
+			items.push(...found);
+			if (found.length < PAGE_SIZE) break;
+		}
+		return items;
+	}
 	/** Every file in one folder at a commit, page by page. */
 	async listFolder(sha, dir) {
 		const files = [];
@@ -1026,6 +1119,7 @@ var GitLabBackend = class GitLabBackend {
 				}
 			});
 			this.pinned = commit.id;
+			if (commit.parent_ids?.length === 1 && commit.parent_ids[0] === expectedRevision) await this.carryTree(existing, commit.id, changes).catch(() => {});
 			return { revision: commit.id };
 		} catch (error) {
 			if (!(error instanceof GitApiError)) throw error;
@@ -1034,6 +1128,22 @@ var GitLabBackend = class GitLabBackend {
 			throw error;
 		}
 	}
+	/** Lists `revision`'s editable files as `before`'s with `changes` made, keeping the text written. */
+	async carryTree(before, revision, changes) {
+		if (this.trees.has(revision) || !globalThis.crypto?.subtle) return;
+		const tree = new Map(before);
+		for (const change of changes) {
+			if (!EDITABLE_FOLDERS.some((folder) => change.path.startsWith(`${folder}/`))) continue;
+			if ("delete" in change) {
+				tree.delete(change.path);
+				continue;
+			}
+			const id = await gitBlobId("bytes" in change ? change.bytes : new TextEncoder().encode(change.content));
+			tree.set(change.path, id);
+			if ("content" in change && !this.blobs.has(id)) this.blobs.set(id, Promise.resolve(change.content));
+		}
+		this.trees.set(revision, Promise.resolve(tree));
+	}
 	async history(path, { page = 1, perPage = 20 } = {}) {
 		const query = new URLSearchParams({
 			ref_name: this.pinned ?? await this.revision(),
@@ -1053,12 +1163,13 @@ var GitLabBackend = class GitLabBackend {
 		return response.ok ? response.text() : void 0;
 	}
 	async changedPaths(from, to) {
-		const comparison = await gitlabJson(this.api, this.repo(`/compare?${new URLSearchParams({
+		const diffs = (await gitlabJson(this.api, this.repo(`/compare?${new URLSearchParams({
 			from,
 			to,
 			straight: "true"
-		})}`));
-		return [...new Set((comparison.diffs ?? []).flatMap((diff) => [diff.old_path, diff.new_path]))];
+		})}`))).diffs ?? [];
+		if (diffs.length >= COMPARE_FILES_LIMIT) throw new GitApiError(0, `More files changed between ${from} and ${to} than GitLab lists.`);
+		return [...new Set(diffs.flatMap((diff) => [diff.old_path, diff.new_path]))];
 	}
 	/**
 	* Reads the commit's pipeline and external statuses (GitLab Pages jobs, or
@@ -1435,7 +1546,7 @@ function browserLocation() {
 function gitlab(options) {
 	const webUrl = (options.url ?? "https://gitlab.com").replace(/\/$/, "");
 	const apiUrl = `${webUrl}/api/v4`;
-	const fetcher = options.fetch ?? ((input, init) => globalThis.fetch(input, init));
+	const fetcher = withRateLimits(options.fetch ?? ((input, init) => globalThis.fetch(input, init)), { host: "GitLab" });
 	const storage = credentialStorage(`goodfellow:gitlab:${webUrl}:${options.project}`, options.storage);
 	const pending = credentialStorage(`goodfellow:gitlab:pending:${options.project}`, options.storage);
 	const location = () => options.location ?? browserLocation();
@@ -1450,19 +1561,25 @@ function gitlab(options) {
 	}
 	async function connect(initial, remember) {
 		let credentials = initial;
-		const token = async ({ refresh } = {}) => {
+		let renewing;
+		const renew = (current) => renewing ??= (async () => {
+			credentials = toTokens(await requestTokens({
+				client_id: options.clientId ?? "",
+				refresh_token: current.refresh,
+				grant_type: "refresh_token",
+				redirect_uri: redirectUri(location().href()),
+				code_verifier: current.verifier
+			}), current.verifier);
+			storage.save(JSON.stringify(credentials), remember);
+			return credentials.access;
+		})().finally(() => {
+			renewing = void 0;
+		});
+		const token = async ({ refresh, stale } = {}) => {
 			if (credentials.type === "token") return credentials.token;
-			if (refresh || credentials.expiresAt - 6e4 < Date.now()) {
-				const { verifier } = credentials;
-				credentials = toTokens(await requestTokens({
-					client_id: options.clientId ?? "",
-					refresh_token: credentials.refresh,
-					grant_type: "refresh_token",
-					redirect_uri: redirectUri(location().href()),
-					code_verifier: verifier
-				}), verifier);
-				storage.save(JSON.stringify(credentials), remember);
-			}
+			if (renewing) return renewing;
+			if (refresh && stale !== void 0 && stale !== credentials.access) return credentials.access;
+			if (refresh || credentials.expiresAt - 6e4 < Date.now()) return renew(credentials);
 			return credentials.access;
 		};
 		const api = {
@@ -1505,18 +1622,18 @@ function gitlab(options) {
 		const returnedState = url.searchParams.get("state");
 		const error = url.searchParams.get("error");
 		if (!code && !error) return null;
-		const saved = pending.load();
-		if (!saved) return null;
-		pending.clear();
-		const redirect = JSON.parse(saved);
 		for (const key of [
 			"code",
 			"state",
 			"error",
 			"error_description"
 		]) url.searchParams.delete(key);
-		url.hash = redirect.hash;
+		const saved = pending.load();
+		if (saved) url.hash = JSON.parse(saved).hash;
 		location().replace(url.toString());
+		if (!saved) return null;
+		pending.clear();
+		const redirect = JSON.parse(saved);
 		if (error || !code || returnedState !== redirect.state) throw new SignInError("redirect-failed", "Signing in with GitLab was cancelled or didn't finish.");
 		return connect(toTokens(await requestTokens({
 			client_id: options.clientId ?? "",

package/dist/testing.d.ts

@@ -28,6 +28,8 @@ export interface FakeGitLabOptions {
    * Pages: a commit status with no pipeline the project lists.
    */
   external?: boolean;
+  /** A paid plan, whose merge requests take several reviewers; the free plan takes one. */
+  premium?: boolean;
   /** The job the update runs in, which `addUpdateRun()` logs: `pages` by default, as in the starters, or a code project's `update`. */
   updateJob?: string;
   /** Groups the users belong to, which new projects can be created in. */
@@ -170,6 +172,8 @@ export declare function fakeGitLab(options: FakeGitLabOptions): {
   requests: Request[];
   commit: (changes: FileChange[], message: string, author?: string, branch?: string) => string;
   authorize: (authorizeUrl: string) => string;
+  /** Ends every OAuth access token GitLab has given, as their two hours running out does; refresh tokens still work. */
+  expireAccessTokens: () => void;
   handle: (request: Request) => Promise<Response>;
   fetch: typeof fetch;
 };

package/dist/testing.js

@@ -17,6 +17,12 @@ async function sha256Base64Url(text) {
 	for (const byte of digest) binary += String.fromCharCode(byte);
 	return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
+/** One page of a list, as GitLab answers with `per_page` and `page`. */
+function onePage(url, items) {
+	const perPage = Number(url.searchParams.get("per_page") ?? 20);
+	const page = Number(url.searchParams.get("page") ?? 1);
+	return items.slice((page - 1) * perPage, page * perPage);
+}
 function fakeGitLab(options) {
 	const webUrl = options.url ?? "https://gitlab.com";
 	const repo = new FakeRepo(options.files);
@@ -515,7 +521,7 @@ function fakeGitLab(options) {
 		if (rest === "/repository/branches" && request.method === "GET") {
 			const search = url.searchParams.get("search") ?? "";
 			const matches = (name) => search.startsWith("^") ? name.startsWith(search.slice(1)) : name.includes(search);
-			return json([...repo.branches].filter(([name]) => matches(name)).map(([name, sha]) => ({
+			return json(onePage(url, [...repo.branches].filter(([name]) => matches(name))).map(([name, sha]) => ({
 				name,
 				commit: { id: sha }
 			})));
@@ -564,11 +570,30 @@ function fakeGitLab(options) {
 		}
 		if (rest === "/merge_requests" && request.method === "GET") {
 			const source = url.searchParams.get("source_branch");
-			return json(repo.reviews.filter((review) => review.state === "open" && (!source || review.branch === source)).map((review) => ({
+			return json(onePage(url, repo.reviews.filter((review) => review.state === "open" && (!source || review.branch === source))).map((review) => ({
 				iid: review.number,
+				title: review.title,
+				source_branch: review.branch,
 				web_url: `${webUrl}/${options.project}/-/merge_requests/${review.number}`
 			})));
 		}
+		const mergeRequest = rest.match(/^\/merge_requests\/(\d+)$/);
+		if (mergeRequest && request.method === "PUT") {
+			if (accessLevel < 30) return json({ message: "403 Forbidden" }, 403);
+			const review = repo.reviews.find((found) => found.number === Number(mergeRequest[1]));
+			if (!review) return json({ message: "404 Not found" }, 404);
+			const body = await request.json();
+			if (body.reviewer_ids) {
+				if (body.reviewer_ids.length > 1 && !options.premium) return json({ message: "Too many reviewers" }, 400);
+				const names = new Map([...accounts].map(([username, id]) => [id, username]));
+				review.reviewers = body.reviewer_ids.flatMap((id) => names.get(id) ?? []);
+			}
+			if (body.state_event === "close") review.state = "closed";
+			return json({
+				iid: review.number,
+				state: review.state === "open" ? "opened" : review.state
+			});
+		}
 		if (rest === "/repository/tree") {
 			const ref = url.searchParams.get("ref") ?? repo.defaultBranch;
 			const dir = url.searchParams.get("path") ?? "";
@@ -630,9 +655,11 @@ function fakeGitLab(options) {
 				name: body.author_name,
 				email: body.author_email
 			});
+			const parent = repo.commitAt(sha)?.parent;
 			return json({
 				id: sha,
-				message: body.commit_message
+				message: body.commit_message,
+				parent_ids: parent ? [parent] : []
 			}, 201);
 		}
 		if (rest === "/repository/commits" && request.method === "GET") {
@@ -887,6 +914,10 @@ function fakeGitLab(options) {
 		requests,
 		commit,
 		authorize,
+		/** Ends every OAuth access token GitLab has given, as their two hours running out does; refresh tokens still work. */
+		expireAccessTokens: () => {
+			for (const [token] of tokens) if (token.startsWith("oauth-access-")) tokens.delete(token);
+		},
 		handle,
 		fetch: ((input, init) => handle(new Request(input, init)))
 	};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodfellow-cms/gitlab",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "Edit a Goodfellow site stored on GitLab, straight from the browser.",
   "keywords": [
     "goodfellow",
@@ -35,7 +35,7 @@
     "dist"
   ],
   "dependencies": {
-    "@goodfellow-cms/core": "0.6.0"
+    "@goodfellow-cms/core": "0.8.0"
   },
   "devDependencies": {
     "@puckeditor/core": "0.23.0"