@structured-world/gitlab-mcp 6.62.1 → 6.62.2

package/dist/src/logging/request-tracker.d.ts

@@ -1,4 +1,4 @@
-import type { RequestStack } from "./types.js";
+import type { RequestStack } from './types.js';
 export interface RequestContext {
     requestId: string;
 }
@@ -14,7 +14,7 @@ export declare class RequestTracker {
     openStack(requestId: string, clientIp: string, method: string, path: string, sessionId?: string): void;
     getStack(requestId: string): RequestStack | undefined;
     setTool(requestId: string, tool: string, action?: string): void;
-    setGitLabResponse(requestId: string, status: number | "timeout" | "error", durationMs?: number): void;
+    setGitLabResponse(requestId: string, status: number | 'timeout' | 'error', durationMs?: number): void;
     addDetail(requestId: string, key: string, value: string | number | boolean): void;
     addDetails(requestId: string, details: Record<string, string | number | boolean>): void;
     setError(requestId: string, error: string): void;
@@ -27,7 +27,7 @@ export declare class RequestTracker {
     getOpenStackCount(): number;
     clear(): void;
     setToolForCurrentRequest(tool: string, action?: string): void;
-    setGitLabResponseForCurrentRequest(status: number | "timeout" | "error", durationMs?: number): void;
+    setGitLabResponseForCurrentRequest(status: number | 'timeout' | 'error', durationMs?: number): void;
     addDetailForCurrentRequest(key: string, value: string | number | boolean): void;
     addDetailsForCurrentRequest(details: Record<string, string | number | boolean>): void;
     setErrorForCurrentRequest(error: string): void;

package/dist/src/logging/request-tracker.js

@@ -43,7 +43,7 @@ class RequestTracker {
             details: {},
         };
         this.stacks.set(requestId, stack);
-        (0, logger_js_1.logDebug)("Request stack opened", { requestId, clientIp, method, path });
+        (0, logger_js_1.logDebug)('Request stack opened', { requestId, clientIp, method, path });
     }
     getStack(requestId) {
         return this.stacks.get(requestId);
@@ -56,7 +56,7 @@ class RequestTracker {
         if (action) {
             stack.action = action;
         }
-        (0, logger_js_1.logDebug)("Tool set on request stack", { requestId, tool, action });
+        (0, logger_js_1.logDebug)('Tool set on request stack', { requestId, tool, action });
     }
     setGitLabResponse(requestId, status, durationMs) {
         const stack = this.stacks.get(requestId);
@@ -66,7 +66,7 @@ class RequestTracker {
         if (durationMs !== undefined) {
             stack.gitlabDuration = durationMs;
         }
-        (0, logger_js_1.logDebug)("GitLab response set on request stack", {
+        (0, logger_js_1.logDebug)('GitLab response set on request stack', {
             requestId,
             gitlabStatus: status,
             gitlabDuration: durationMs,
@@ -112,7 +112,7 @@ class RequestTracker {
     closeStack(requestId, status) {
         const stack = this.stacks.get(requestId);
         if (!stack) {
-            (0, logger_js_1.logDebug)("Request stack not found on close", { requestId });
+            (0, logger_js_1.logDebug)('Request stack not found on close', { requestId });
             return undefined;
         }
         this.stacks.delete(requestId);

package/dist/src/logging/types.d.ts

@@ -8,13 +8,13 @@ export interface RequestStack {
     path: string;
     tool?: string;
     action?: string;
-    gitlabStatus?: number | "timeout" | "error";
+    gitlabStatus?: number | 'timeout' | 'error';
     gitlabDuration?: number;
     details: Record<string, string | number | boolean>;
     status?: number;
     error?: string;
 }
-export type ConnectionCloseReason = "client_disconnect" | "idle_timeout" | "server_shutdown" | "transport_error" | "auth_expired" | "session_closed" | "destroyed" | "normal_close" | "heartbeat_failed" | `peer_reset:${string}`;
+export type ConnectionCloseReason = 'client_disconnect' | 'idle_timeout' | 'server_shutdown' | 'transport_error' | 'auth_expired' | 'session_closed' | 'destroyed' | 'normal_close' | 'heartbeat_failed' | `peer_reset:${string}`;
 export interface ConnectionStats {
     connectedAt: number;
     clientIp: string;
@@ -51,5 +51,5 @@ export interface ConnectionCloseEntry {
     errors: number;
     lastError?: string;
 }
-export type LogFormat = "condensed" | "verbose";
+export type LogFormat = 'condensed' | 'verbose';
 export declare const DEFAULT_LOG_FORMAT: LogFormat;

package/dist/src/logging/types.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_LOG_FORMAT = void 0;
-exports.DEFAULT_LOG_FORMAT = "condensed";
+exports.DEFAULT_LOG_FORMAT = 'condensed';
 //# sourceMappingURL=types.js.map

package/dist/src/main.js

@@ -44,30 +44,30 @@ const namespace_1 = require("./utils/namespace");
 async function main() {
     const cliArgs = (0, cli_utils_1.parseCliArgs)();
     if (cliArgs.setup) {
-        const { runSetupWizard } = await Promise.resolve().then(() => __importStar(require("./cli/setup")));
+        const { runSetupWizard } = await Promise.resolve().then(() => __importStar(require('./cli/setup')));
         const result = await runSetupWizard({ mode: cliArgs.setupMode });
         process.exit(result.success ? 0 : 1);
     }
     if (cliArgs.init) {
-        const { runSetupWizard } = await Promise.resolve().then(() => __importStar(require("./cli/setup")));
-        const result = await runSetupWizard({ mode: "local" });
+        const { runSetupWizard } = await Promise.resolve().then(() => __importStar(require('./cli/setup')));
+        const result = await runSetupWizard({ mode: 'local' });
         process.exit(result.success ? 0 : 1);
     }
     if (cliArgs.install) {
-        const { runInstallCommand, parseInstallFlags, buildServerConfigFromEnv } = await Promise.resolve().then(() => __importStar(require("./cli/install")));
+        const { runInstallCommand, parseInstallFlags, buildServerConfigFromEnv } = await Promise.resolve().then(() => __importStar(require('./cli/install')));
         const flags = parseInstallFlags(cliArgs.installArgs);
         const serverConfig = buildServerConfigFromEnv();
         await runInstallCommand(serverConfig, flags);
         process.exit(0);
     }
     if (cliArgs.docker) {
-        if (cliArgs.dockerArgs[0] === "init") {
-            const { runSetupWizard } = await Promise.resolve().then(() => __importStar(require("./cli/setup")));
-            const result = await runSetupWizard({ mode: "server" });
+        if (cliArgs.dockerArgs[0] === 'init') {
+            const { runSetupWizard } = await Promise.resolve().then(() => __importStar(require('./cli/setup')));
+            const result = await runSetupWizard({ mode: 'server' });
             process.exit(result.success ? 0 : 1);
             return;
         }
-        const { runDockerCommand } = await Promise.resolve().then(() => __importStar(require("./cli/docker")));
+        const { runDockerCommand } = await Promise.resolve().then(() => __importStar(require('./cli/docker')));
         await runDockerCommand(cliArgs.dockerArgs);
         process.exit(0);
     }
@@ -79,7 +79,7 @@ async function main() {
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
-            (0, logger_1.logError)("Failed to load project config", { error: message });
+            (0, logger_1.logError)('Failed to load project config', { error: message });
             process.exit(1);
         }
     }
@@ -97,19 +97,19 @@ async function main() {
                     console.log((0, discovery_1.formatDiscoveryResult)(autoDiscoveryResult));
                     process.exit(0);
                 }
-                (0, logger_1.logInfo)("Auto-discovery detected GitLab configuration", {
+                (0, logger_1.logInfo)('Auto-discovery detected GitLab configuration', {
                     host: autoDiscoveryResult.host,
                     project: autoDiscoveryResult.projectPath,
                     profile: autoDiscoveryResult.matchedProfile?.profileName,
                 });
             }
             else {
-                (0, logger_1.logWarn)("Auto-discovery failed: not in a git repository or no remote found");
+                (0, logger_1.logWarn)('Auto-discovery failed: not in a git repository or no remote found');
             }
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
-            (0, logger_1.logError)("Auto-discovery failed", { error: message });
+            (0, logger_1.logError)('Auto-discovery failed', { error: message });
             process.exit(1);
         }
     }
@@ -117,18 +117,18 @@ async function main() {
         try {
             const result = await (0, profiles_1.tryApplyProfileFromEnv)(cliArgs.profileName);
             if (result) {
-                if ("profileName" in result) {
-                    (0, logger_1.logInfo)("Using CLI-specified profile", {
+                if ('profileName' in result) {
+                    (0, logger_1.logInfo)('Using CLI-specified profile', {
                         profile: result.profileName,
                         host: result.host,
                     });
                 }
                 else {
-                    (0, logger_1.logInfo)("Using CLI-specified preset", { preset: result.presetName });
+                    (0, logger_1.logInfo)('Using CLI-specified preset', { preset: result.presetName });
                 }
                 if (autoDiscoveryResult?.matchedProfile &&
                     autoDiscoveryResult.matchedProfile.profileName !== cliArgs.profileName) {
-                    (0, logger_1.logWarn)("Auto-discovered profile ignored: --profile takes precedence", {
+                    (0, logger_1.logWarn)('Auto-discovered profile ignored: --profile takes precedence', {
                         cliProfile: cliArgs.profileName,
                         autoProfile: autoDiscoveryResult.matchedProfile.profileName,
                     });
@@ -137,15 +137,15 @@ async function main() {
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
-            (0, logger_1.logError)("Failed to load profile", { error: message });
+            (0, logger_1.logError)('Failed to load profile', { error: message });
             process.exit(1);
         }
     }
     else if (autoDiscoveryResult?.matchedProfile) {
         try {
             const result = await (0, profiles_1.tryApplyProfileFromEnv)(autoDiscoveryResult.matchedProfile.profileName);
-            if (result && "profileName" in result) {
-                (0, logger_1.logInfo)("Using auto-discovered profile", {
+            if (result && 'profileName' in result) {
+                (0, logger_1.logInfo)('Using auto-discovered profile', {
                     profile: result.profileName,
                     host: result.host,
                 });
@@ -153,27 +153,27 @@ async function main() {
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
-            (0, logger_1.logWarn)("Failed to apply auto-discovered profile", { error: message });
+            (0, logger_1.logWarn)('Failed to apply auto-discovered profile', { error: message });
         }
     }
     else {
         try {
             const result = await (0, profiles_1.tryApplyProfileFromEnv)();
             if (result) {
-                if ("profileName" in result) {
-                    (0, logger_1.logInfo)("Using configuration profile", {
+                if ('profileName' in result) {
+                    (0, logger_1.logInfo)('Using configuration profile', {
                         profile: result.profileName,
                         host: result.host,
                     });
                 }
                 else {
-                    (0, logger_1.logInfo)("Using configuration preset", { preset: result.presetName });
+                    (0, logger_1.logInfo)('Using configuration preset', { preset: result.presetName });
                 }
             }
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
-            (0, logger_1.logError)("Failed to load profile", { error: message });
+            (0, logger_1.logError)('Failed to load profile', { error: message });
             process.exit(1);
         }
     }
@@ -182,7 +182,7 @@ async function main() {
             const projectConfig = await (0, profiles_1.findProjectConfig)(process.cwd());
             if (projectConfig) {
                 const summary = (0, profiles_1.getProjectConfigSummary)(projectConfig);
-                (0, logger_1.logInfo)("Loaded project configuration (restrictions applied)", {
+                (0, logger_1.logInfo)('Loaded project configuration (restrictions applied)', {
                     path: projectConfig.configPath,
                     preset: summary.presetSummary,
                     profile: summary.profileSummary,
@@ -191,7 +191,7 @@ async function main() {
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
-            (0, logger_1.logWarn)("Failed to load project config, continuing without it", { error: message });
+            (0, logger_1.logWarn)('Failed to load project config, continuing without it', { error: message });
         }
     }
     if (autoDiscoveryResult) {
@@ -200,7 +200,7 @@ async function main() {
         if (namespace) {
             process.env.GITLAB_DEFAULT_NAMESPACE ??= namespace;
         }
-        (0, logger_1.logDebug)("Default context set from auto-discovery", {
+        (0, logger_1.logDebug)('Default context set from auto-discovery', {
             defaultProject: process.env.GITLAB_DEFAULT_PROJECT,
             defaultNamespace: process.env.GITLAB_DEFAULT_NAMESPACE,
         });
@@ -212,7 +212,7 @@ main().catch((error) => {
         console.error(error.guidance);
     }
     else {
-        (0, logger_1.logError)("Failed to start GitLab MCP Server", { error: String(error) });
+        (0, logger_1.logError)('Failed to start GitLab MCP Server', { error: String(error) });
     }
     process.exit(1);
 });

package/dist/src/middleware/index.d.ts

@@ -1,2 +1,2 @@
-export { oauthAuthMiddleware, createOAuthMiddleware, optionalOAuthMiddleware } from "./oauth-auth";
-export { rateLimiterMiddleware, stopCleanup as stopRateLimitCleanup, getRateLimitStats, } from "./rate-limiter";
+export { oauthAuthMiddleware, createOAuthMiddleware, optionalOAuthMiddleware } from './oauth-auth';
+export { rateLimiterMiddleware, stopCleanup as stopRateLimitCleanup, getRateLimitStats, } from './rate-limiter';

package/dist/src/middleware/oauth-auth.d.ts

@@ -1,4 +1,4 @@
-import { Request, Response, NextFunction } from "express";
+import { Request, Response, NextFunction } from 'express';
 export declare function oauthAuthMiddleware(req: Request, res: Response, next: NextFunction): Promise<void>;
 export declare function createOAuthMiddleware(): typeof oauthAuthMiddleware;
 export declare function optionalOAuthMiddleware(req: Request, res: Response, next: NextFunction): Promise<void>;

package/dist/src/middleware/oauth-auth.js

@@ -14,36 +14,36 @@ const config_2 = require("../config");
 async function oauthAuthMiddleware(req, res, next) {
     const config = (0, config_1.loadOAuthConfig)();
     if (!config) {
-        sendUnauthorized(req, res, "server_error", "OAuth not configured");
+        sendUnauthorized(req, res, 'server_error', 'OAuth not configured');
         return;
     }
     const authHeader = req.headers.authorization;
     if (!authHeader) {
-        sendUnauthorized(req, res, "unauthorized", "Missing Authorization header");
+        sendUnauthorized(req, res, 'unauthorized', 'Missing Authorization header');
         return;
     }
-    if (!authHeader.startsWith("Bearer ")) {
-        sendUnauthorized(req, res, "unauthorized", "Invalid Authorization header format. Expected: Bearer <token>");
+    if (!authHeader.startsWith('Bearer ')) {
+        sendUnauthorized(req, res, 'unauthorized', 'Invalid Authorization header format. Expected: Bearer <token>');
         return;
     }
     const token = authHeader.slice(7);
     if (!token) {
-        sendUnauthorized(req, res, "unauthorized", "Empty Bearer token");
+        sendUnauthorized(req, res, 'unauthorized', 'Empty Bearer token');
         return;
     }
     const payload = (0, token_utils_1.verifyMCPToken)(token, config.sessionSecret);
     if (!payload) {
-        sendUnauthorized(req, res, "invalid_token", "Token is invalid or expired");
+        sendUnauthorized(req, res, 'invalid_token', 'Token is invalid or expired');
         return;
     }
     const sessionId = payload.sid;
     const session = session_store_1.sessionStore.getSession(sessionId);
     if (!session) {
-        sendUnauthorized(req, res, "invalid_token", "Session not found or expired");
+        sendUnauthorized(req, res, 'invalid_token', 'Session not found or expired');
         return;
     }
     if (session.mcpAccessToken !== token) {
-        sendUnauthorized(req, res, "invalid_token", "Token has been superseded");
+        sendUnauthorized(req, res, 'invalid_token', 'Token has been superseded');
         return;
     }
     if ((0, token_utils_1.isTokenExpiringSoon)(session.gitlabTokenExpiry)) {
@@ -54,19 +54,19 @@ async function oauthAuthMiddleware(req, res, next) {
                 gitlabRefreshToken: newTokens.refresh_token,
                 gitlabTokenExpiry: (0, token_utils_1.calculateTokenExpiry)(newTokens.expires_in),
             });
-            (0, logger_1.logDebug)("GitLab token refreshed during request", {
+            (0, logger_1.logDebug)('GitLab token refreshed during request', {
                 sessionId: (0, logger_1.truncateId)(sessionId),
             });
         }
         catch (error) {
-            (0, logger_1.logError)("Failed to refresh GitLab token during request", { err: error });
-            sendUnauthorized(req, res, "invalid_token", "GitLab token refresh failed. Please re-authenticate.");
+            (0, logger_1.logError)('Failed to refresh GitLab token during request', { err: error });
+            sendUnauthorized(req, res, 'invalid_token', 'GitLab token refresh failed. Please re-authenticate.');
             return;
         }
     }
     const updatedSession = session_store_1.sessionStore.getSession(sessionId);
     if (!updatedSession) {
-        sendUnauthorized(req, res, "invalid_token", "Session lost during token refresh");
+        sendUnauthorized(req, res, 'invalid_token', 'Session lost during token refresh');
         return;
     }
     res.locals.oauthSessionId = updatedSession.id;
@@ -75,7 +75,7 @@ async function oauthAuthMiddleware(req, res, next) {
     res.locals.gitlabUsername = updatedSession.gitlabUsername;
     res.locals.gitlabApiUrl = updatedSession.gitlabApiUrl ?? config_2.GITLAB_BASE_URL;
     res.locals.instanceLabel = updatedSession.instanceLabel;
-    (0, logger_1.logDebug)("OAuth session validated, passing to route handler", {
+    (0, logger_1.logDebug)('OAuth session validated, passing to route handler', {
         sessionId: (0, logger_1.truncateId)(updatedSession.id),
         method: req.method,
         path: req.path,
@@ -92,7 +92,7 @@ async function optionalOAuthMiddleware(req, res, next) {
         return;
     }
     const authHeader = req.headers.authorization;
-    if (!authHeader?.startsWith("Bearer ")) {
+    if (!authHeader?.startsWith('Bearer ')) {
         next();
         return;
     }
@@ -120,8 +120,8 @@ async function optionalOAuthMiddleware(req, res, next) {
     next();
 }
 function sendUnauthorized(req, res, error, description) {
-    (0, logger_1.logWarn)("Authentication rejected", {
-        event: "auth_rejected",
+    (0, logger_1.logWarn)('Authentication rejected', {
+        event: 'auth_rejected',
         ...(0, request_logger_1.getMinimalRequestContext)(req),
         reason: error,
         description,
@@ -131,7 +131,7 @@ function sendUnauthorized(req, res, error, description) {
         error_description: description,
     };
     const baseUrl = (0, metadata_1.getBaseUrl)(req);
-    res.setHeader("WWW-Authenticate", `Bearer realm="gitlab-mcp", resource_metadata="${baseUrl}/.well-known/oauth-protected-resource"`);
+    res.setHeader('WWW-Authenticate', `Bearer realm="gitlab-mcp", resource_metadata="${baseUrl}/.well-known/oauth-protected-resource"`);
     res.status(401).json(response);
 }
 //# sourceMappingURL=oauth-auth.js.map

package/dist/src/middleware/rate-limiter.d.ts

@@ -1,4 +1,4 @@
-import { RequestHandler } from "express";
+import { RequestHandler } from 'express';
 export declare function stopCleanup(): void;
 export declare function rateLimiterMiddleware(): RequestHandler;
 export declare function getRateLimitStats(): {

package/dist/src/middleware/rate-limiter.js

@@ -22,7 +22,7 @@ function startCleanup() {
             }
         }
         if (cleaned > 0) {
-            (0, logger_1.logDebug)("Rate limiter cleanup: removed expired entries", { cleaned });
+            (0, logger_1.logDebug)('Rate limiter cleanup: removed expired entries', { cleaned });
         }
     }, CLEANUP_INTERVAL_MS);
     cleanupInterval.unref();
@@ -34,14 +34,14 @@ function stopCleanup() {
     }
 }
 function getIpAddress(req) {
-    return req.ip ?? req.socket.remoteAddress ?? "unknown";
+    return req.ip ?? req.socket.remoteAddress ?? 'unknown';
 }
 function isAuthenticated(req, res) {
     const oauthSessionId = res.locals.oauthSessionId;
     if (oauthSessionId) {
         return true;
     }
-    const mcpSessionId = req.headers["mcp-session-id"];
+    const mcpSessionId = req.headers['mcp-session-id'];
     if (mcpSessionId) {
         return true;
     }
@@ -70,14 +70,14 @@ function checkRateLimit(key, windowMs, maxRequests) {
     };
 }
 function setRateLimitHeaders(res, info) {
-    res.set("X-RateLimit-Limit", info.total.toString());
-    res.set("X-RateLimit-Remaining", info.remaining.toString());
-    res.set("X-RateLimit-Reset", Math.ceil(info.resetAt / 1000).toString());
+    res.set('X-RateLimit-Limit', info.total.toString());
+    res.set('X-RateLimit-Remaining', info.remaining.toString());
+    res.set('X-RateLimit-Reset', Math.ceil(info.resetAt / 1000).toString());
 }
 function rateLimiterMiddleware() {
     startCleanup();
     return (req, res, next) => {
-        if (req.path === "/health") {
+        if (req.path === '/health') {
             next();
             return;
         }
@@ -87,33 +87,33 @@ function rateLimiterMiddleware() {
                 next();
                 return;
             }
-            const sessionId = res.locals.oauthSessionId || req.headers["mcp-session-id"];
+            const sessionId = res.locals.oauthSessionId || req.headers['mcp-session-id'];
             const key = `session:${sessionId}`;
             const info = checkRateLimit(key, config_1.RATE_LIMIT_SESSION_WINDOW_MS, config_1.RATE_LIMIT_SESSION_MAX_REQUESTS);
             setRateLimitHeaders(res, info);
             const usagePercent = (info.used / info.total) * 100;
             if (info.allowed && usagePercent >= 80) {
-                const rateLimitInfo = (0, request_logger_1.buildRateLimitInfo)("session", sessionId, info.used, info.total, info.resetAt);
-                (0, logger_1.logDebug)("Approaching session rate limit threshold", {
-                    event: "rate_limit_warning",
+                const rateLimitInfo = (0, request_logger_1.buildRateLimitInfo)('session', sessionId, info.used, info.total, info.resetAt);
+                (0, logger_1.logDebug)('Approaching session rate limit threshold', {
+                    event: 'rate_limit_warning',
                     ...(0, request_logger_1.getMinimalRequestContext)(req),
                     rateLimit: rateLimitInfo,
                 });
             }
             if (!info.allowed) {
                 const retryAfter = Math.ceil((info.resetAt - Date.now()) / 1000);
-                const rateLimitInfo = (0, request_logger_1.buildRateLimitInfo)("session", sessionId, info.used, info.total, info.resetAt);
-                (0, logger_1.logWarn)("Session rate limit exceeded", {
-                    event: "rate_limit_exceeded",
+                const rateLimitInfo = (0, request_logger_1.buildRateLimitInfo)('session', sessionId, info.used, info.total, info.resetAt);
+                (0, logger_1.logWarn)('Session rate limit exceeded', {
+                    event: 'rate_limit_exceeded',
                     ...(0, request_logger_1.getMinimalRequestContext)(req),
                     rateLimit: rateLimitInfo,
                     hasOAuthSession: !!res.locals.oauthSessionId,
-                    hasMcpSessionHeader: !!req.headers["mcp-session-id"],
+                    hasMcpSessionHeader: !!req.headers['mcp-session-id'],
                 });
-                res.set("Retry-After", retryAfter.toString());
+                res.set('Retry-After', retryAfter.toString());
                 res.status(429).json({
-                    error: "Too Many Requests",
-                    message: "Session rate limit exceeded. Please slow down your requests.",
+                    error: 'Too Many Requests',
+                    message: 'Session rate limit exceeded. Please slow down your requests.',
                     retryAfter,
                     limit: info.total,
                     remaining: info.remaining,
@@ -134,31 +134,31 @@ function rateLimiterMiddleware() {
         setRateLimitHeaders(res, info);
         const usagePercent = (info.used / info.total) * 100;
         if (info.allowed && usagePercent >= 80) {
-            const rateLimitInfo = (0, request_logger_1.buildRateLimitInfo)("ip", ip, info.used, info.total, info.resetAt);
-            (0, logger_1.logDebug)("Approaching IP rate limit threshold", {
-                event: "rate_limit_warning",
+            const rateLimitInfo = (0, request_logger_1.buildRateLimitInfo)('ip', ip, info.used, info.total, info.resetAt);
+            (0, logger_1.logDebug)('Approaching IP rate limit threshold', {
+                event: 'rate_limit_warning',
                 ...(0, request_logger_1.getMinimalRequestContext)(req),
                 rateLimit: rateLimitInfo,
-                authClassification: "anonymous",
-                authReason: "no OAuth session and no MCP-Session-Id header",
+                authClassification: 'anonymous',
+                authReason: 'no OAuth session and no MCP-Session-Id header',
             });
         }
         if (!info.allowed) {
             const retryAfter = Math.ceil((info.resetAt - Date.now()) / 1000);
-            const rateLimitInfo = (0, request_logger_1.buildRateLimitInfo)("ip", ip, info.used, info.total, info.resetAt);
-            const mcpSessionHeader = req.headers["mcp-session-id"];
-            (0, logger_1.logWarn)("IP rate limit exceeded", {
-                event: "rate_limit_exceeded",
+            const rateLimitInfo = (0, request_logger_1.buildRateLimitInfo)('ip', ip, info.used, info.total, info.resetAt);
+            const mcpSessionHeader = req.headers['mcp-session-id'];
+            (0, logger_1.logWarn)('IP rate limit exceeded', {
+                event: 'rate_limit_exceeded',
                 ...(0, request_logger_1.getMinimalRequestContext)(req),
                 rateLimit: rateLimitInfo,
-                authClassification: "anonymous",
-                authReason: "no OAuth session and no MCP-Session-Id header",
+                authClassification: 'anonymous',
+                authReason: 'no OAuth session and no MCP-Session-Id header',
                 mcpSessionId: (0, request_logger_1.truncateId)(mcpSessionHeader),
             });
-            res.set("Retry-After", retryAfter.toString());
+            res.set('Retry-After', retryAfter.toString());
             res.status(429).json({
-                error: "Too Many Requests",
-                message: "Rate limit exceeded. Please authenticate or slow down your requests.",
+                error: 'Too Many Requests',
+                message: 'Rate limit exceeded. Please authenticate or slow down your requests.',
                 retryAfter,
                 limit: info.total,
                 remaining: info.remaining,

package/dist/src/oauth/config.d.ts

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from 'zod';
 declare const OAuthConfigSchema: z.ZodObject<{
     enabled: z.ZodLiteral<true>;
     sessionSecret: z.ZodString;

package/dist/src/oauth/config.js

@@ -12,10 +12,10 @@ const zod_1 = require("zod");
 const logger_1 = require("../logger");
 const OAuthConfigSchema = zod_1.z.object({
     enabled: zod_1.z.literal(true),
-    sessionSecret: zod_1.z.string().min(32, "OAUTH_SESSION_SECRET must be at least 32 characters"),
-    gitlabClientId: zod_1.z.string().min(1, "GITLAB_OAUTH_CLIENT_ID is required"),
+    sessionSecret: zod_1.z.string().min(32, 'OAUTH_SESSION_SECRET must be at least 32 characters'),
+    gitlabClientId: zod_1.z.string().min(1, 'GITLAB_OAUTH_CLIENT_ID is required'),
     gitlabClientSecret: zod_1.z.string().optional(),
-    gitlabScopes: zod_1.z.string().default("api,read_user"),
+    gitlabScopes: zod_1.z.string().default('api,read_user'),
     tokenTtl: zod_1.z.number().positive().default(3600),
     refreshTokenTtl: zod_1.z.number().positive().default(604800),
     devicePollInterval: zod_1.z.number().positive().default(5),
@@ -26,7 +26,7 @@ function loadOAuthConfig() {
     if (cachedOAuthConfig !== undefined) {
         return cachedOAuthConfig;
     }
-    if (process.env.OAUTH_ENABLED !== "true") {
+    if (process.env.OAUTH_ENABLED !== 'true') {
         cachedOAuthConfig = null;
         (0, logger_1.logDebug)("OAuth mode disabled (OAUTH_ENABLED !== 'true')");
         return null;
@@ -36,27 +36,27 @@ function loadOAuthConfig() {
         sessionSecret: process.env.OAUTH_SESSION_SECRET,
         gitlabClientId: process.env.GITLAB_OAUTH_CLIENT_ID,
         gitlabClientSecret: process.env.GITLAB_OAUTH_CLIENT_SECRET,
-        gitlabScopes: process.env.GITLAB_OAUTH_SCOPES ?? "api,read_user",
-        tokenTtl: parseInt(process.env.OAUTH_TOKEN_TTL ?? "3600", 10),
-        refreshTokenTtl: parseInt(process.env.OAUTH_REFRESH_TOKEN_TTL ?? "604800", 10),
-        devicePollInterval: parseInt(process.env.OAUTH_DEVICE_POLL_INTERVAL ?? "5", 10),
-        deviceTimeout: parseInt(process.env.OAUTH_DEVICE_TIMEOUT ?? "300", 10),
+        gitlabScopes: process.env.GITLAB_OAUTH_SCOPES ?? 'api,read_user',
+        tokenTtl: parseInt(process.env.OAUTH_TOKEN_TTL ?? '3600', 10),
+        refreshTokenTtl: parseInt(process.env.OAUTH_REFRESH_TOKEN_TTL ?? '604800', 10),
+        devicePollInterval: parseInt(process.env.OAUTH_DEVICE_POLL_INTERVAL ?? '5', 10),
+        deviceTimeout: parseInt(process.env.OAUTH_DEVICE_TIMEOUT ?? '300', 10),
     });
     if (!result.success) {
         const errorMessages = result.error.issues
-            .map(e => `${e.path.join(".")}: ${e.message}`)
-            .join(", ");
+            .map((e) => `${e.path.join('.')}: ${e.message}`)
+            .join(', ');
         throw new Error(`Invalid OAuth configuration: ${errorMessages}`);
     }
     cachedOAuthConfig = result.data;
-    (0, logger_1.logInfo)("OAuth mode enabled with valid configuration");
+    (0, logger_1.logInfo)('OAuth mode enabled with valid configuration');
     return result.data;
 }
 class ConfigurationError extends Error {
     guidance;
     constructor(guidance) {
-        super("Missing required configuration");
-        this.name = "ConfigurationError";
+        super('Missing required configuration');
+        this.name = 'ConfigurationError';
         this.guidance = guidance;
     }
 }
@@ -83,7 +83,7 @@ function validateStaticConfig() {
     if (!process.env.GITLAB_TOKEN) {
         throw new ConfigurationError(MISSING_TOKEN_GUIDANCE);
     }
-    (0, logger_1.logDebug)("Static token mode: GITLAB_TOKEN configured");
+    (0, logger_1.logDebug)('Static token mode: GITLAB_TOKEN configured');
 }
 function isOAuthEnabled() {
     return loadOAuthConfig() !== null;
@@ -93,12 +93,12 @@ function resetOAuthConfigCache() {
 }
 function getAuthModeDescription() {
     if (isOAuthEnabled()) {
-        return "OAuth mode (per-user authentication via GitLab Device Flow)";
+        return 'OAuth mode (per-user authentication via GitLab Device Flow)';
     }
     if (process.env.GITLAB_TOKEN) {
-        return "Static token mode (shared GITLAB_TOKEN)";
+        return 'Static token mode (shared GITLAB_TOKEN)';
     }
-    return "Unauthenticated mode (tools/list only, tool calls require GITLAB_TOKEN)";
+    return 'Unauthenticated mode (tools/list only, tool calls require GITLAB_TOKEN)';
 }
 function isStaticTokenConfigured() {
     return !!process.env.GITLAB_TOKEN;