claudedesk 1.0.0

package/dist/core/github-oauth.js

@@ -0,0 +1,244 @@
+/**
+ * GitHub OAuth Device Flow Implementation
+ *
+ * The device flow allows CLI/desktop apps to authenticate without a callback URL:
+ * 1. Request a device code from GitHub
+ * 2. User goes to github.com/login/device and enters the code
+ * 3. App polls GitHub until user completes authorization
+ * 4. GitHub returns access token
+ *
+ * See: https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps#device-flow
+ */
+// Store active device flow sessions (device_code -> pending state)
+const activeSessions = new Map();
+export class GitHubDeviceAuth {
+    clientId;
+    constructor(clientId) {
+        this.clientId = clientId;
+    }
+    /**
+     * Step 1: Request a device code from GitHub
+     * User will need to visit the verification URI and enter the user code
+     */
+    async requestDeviceCode(scope = 'repo') {
+        const response = await fetch('https://github.com/login/device/code', {
+            method: 'POST',
+            headers: {
+                'Accept': 'application/json',
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({
+                client_id: this.clientId,
+                scope,
+            }),
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`Failed to request device code: ${error}`);
+        }
+        const data = await response.json();
+        const result = {
+            deviceCode: data.device_code,
+            userCode: data.user_code,
+            verificationUri: data.verification_uri,
+            expiresIn: data.expires_in,
+            interval: data.interval,
+        };
+        // Store session for polling
+        activeSessions.set(result.deviceCode, {
+            deviceCode: result.deviceCode,
+            interval: result.interval,
+            expiresAt: Date.now() + (result.expiresIn * 1000),
+            clientId: this.clientId,
+        });
+        return result;
+    }
+    /**
+     * Step 2: Poll for access token
+     * Call this periodically (respecting the interval) until authorization completes
+     */
+    async pollForToken(deviceCode) {
+        const session = activeSessions.get(deviceCode);
+        if (!session) {
+            return { status: 'error', error: 'Device code session not found' };
+        }
+        // Check if expired
+        if (Date.now() > session.expiresAt) {
+            activeSessions.delete(deviceCode);
+            return { status: 'expired', error: 'Device code has expired' };
+        }
+        try {
+            const response = await fetch('https://github.com/login/oauth/access_token', {
+                method: 'POST',
+                headers: {
+                    'Accept': 'application/json',
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({
+                    client_id: session.clientId,
+                    device_code: deviceCode,
+                    grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+                }),
+            });
+            const data = await response.json();
+            // Check for errors
+            if (data.error) {
+                switch (data.error) {
+                    case 'authorization_pending':
+                        // User hasn't completed authorization yet - keep polling
+                        return { status: 'pending' };
+                    case 'slow_down':
+                        // Too many requests - increase interval
+                        session.interval += 5;
+                        return { status: 'pending' };
+                    case 'expired_token':
+                        activeSessions.delete(deviceCode);
+                        return { status: 'expired', error: 'Device code has expired' };
+                    case 'access_denied':
+                        activeSessions.delete(deviceCode);
+                        return { status: 'error', error: 'User denied authorization' };
+                    default:
+                        return { status: 'error', error: data.error_description || data.error };
+                }
+            }
+            // Success! We got the token
+            if (data.access_token) {
+                activeSessions.delete(deviceCode);
+                return {
+                    status: 'success',
+                    token: {
+                        accessToken: data.access_token,
+                        tokenType: data.token_type,
+                        scope: data.scope,
+                    },
+                };
+            }
+            return { status: 'error', error: 'Unexpected response from GitHub' };
+        }
+        catch (error) {
+            const errorMsg = error instanceof Error ? error.message : String(error);
+            return { status: 'error', error: errorMsg };
+        }
+    }
+    /**
+     * Get the polling interval for a device code session
+     */
+    getPollingInterval(deviceCode) {
+        const session = activeSessions.get(deviceCode);
+        return session?.interval || 5;
+    }
+    /**
+     * Cancel an active device code session
+     */
+    cancelSession(deviceCode) {
+        activeSessions.delete(deviceCode);
+    }
+    /**
+     * Get user info using an access token
+     */
+    async getUser(accessToken) {
+        const response = await fetch('https://api.github.com/user', {
+            headers: {
+                'Accept': 'application/json',
+                'Authorization': `Bearer ${accessToken}`,
+                'User-Agent': 'ClaudeDesk-App',
+            },
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`Failed to get user info: ${error}`);
+        }
+        const data = await response.json();
+        return {
+            login: data.login,
+            name: data.name,
+            avatarUrl: data.avatar_url,
+        };
+    }
+    /**
+     * Verify that an access token is still valid
+     */
+    async verifyToken(accessToken) {
+        try {
+            const response = await fetch('https://api.github.com/user', {
+                headers: {
+                    'Accept': 'application/json',
+                    'Authorization': `Bearer ${accessToken}`,
+                    'User-Agent': 'ClaudeDesk-App',
+                },
+            });
+            return response.ok;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+/**
+ * Create a new GitHub API client with an access token
+ * For making authenticated GitHub API calls
+ */
+export class GitHubAPI {
+    accessToken;
+    constructor(accessToken) {
+        this.accessToken = accessToken;
+    }
+    async request(endpoint, options = {}) {
+        const url = endpoint.startsWith('https://')
+            ? endpoint
+            : `https://api.github.com${endpoint}`;
+        const response = await fetch(url, {
+            ...options,
+            headers: {
+                'Accept': 'application/json',
+                'Authorization': `Bearer ${this.accessToken}`,
+                'User-Agent': 'ClaudeDesk-App',
+                ...options.headers,
+            },
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`GitHub API error: ${response.status} - ${error}`);
+        }
+        return response.json();
+    }
+    async getUser() {
+        const data = await this.request('/user');
+        return {
+            login: data.login,
+            name: data.name,
+            avatarUrl: data.avatar_url,
+        };
+    }
+    async createRepo(name, isPrivate = true, description) {
+        const data = await this.request('/user/repos', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({
+                name,
+                private: isPrivate,
+                description,
+                auto_init: false,
+            }),
+        });
+        return {
+            name: data.name,
+            fullName: data.full_name,
+            htmlUrl: data.html_url,
+            cloneUrl: data.clone_url,
+            sshUrl: data.ssh_url,
+        };
+    }
+    async listRepos(page = 1, perPage = 30) {
+        const data = await this.request(`/user/repos?page=${page}&per_page=${perPage}&sort=updated`);
+        return data.map((repo) => ({
+            name: repo.name,
+            fullName: repo.full_name,
+            htmlUrl: repo.html_url,
+            private: repo.private,
+        }));
+    }
+}
+//# sourceMappingURL=github-oauth.js.map

package/dist/core/github-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-oauth.js","sourceRoot":"","sources":["../../src/core/github-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA+BH,mEAAmE;AACnE,MAAM,cAAc,GAAG,IAAI,GAAG,EAK1B,CAAC;AAEL,MAAM,OAAO,gBAAgB;IACnB,QAAQ,CAAS;IAEzB,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAgB,MAAM;QAC5C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,sCAAsC,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,QAAQ,EAAE,kBAAkB;gBAC5B,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,KAAK;aACN,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,MAAM,MAAM,GAAuB;YACjC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,eAAe,EAAE,IAAI,CAAC,gBAAgB;YACtC,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;QAEF,4BAA4B;QAC5B,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE;YACpC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;YACjD,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;QACrE,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QACjE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6CAA6C,EAAE;gBAC1E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,QAAQ,EAAE,kBAAkB;oBAC5B,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,OAAO,CAAC,QAAQ;oBAC3B,WAAW,EAAE,UAAU;oBACvB,UAAU,EAAE,8CAA8C;iBAC3D,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,mBAAmB;YACnB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;oBACnB,KAAK,uBAAuB;wBAC1B,yDAAyD;wBACzD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBAE/B,KAAK,WAAW;wBACd,wCAAwC;wBACxC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;wBACtB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBAE/B,KAAK,eAAe;wBAClB,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;wBAClC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;oBAEjE,KAAK,eAAe;wBAClB,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;wBAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;oBAEjE;wBACE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC5E,CAAC;YACH,CAAC;YAED,4BAA4B;YAC5B,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAClC,OAAO;oBACL,MAAM,EAAE,SAAS;oBACjB,KAAK,EAAE;wBACL,WAAW,EAAE,IAAI,CAAC,YAAY;wBAC9B,SAAS,EAAE,IAAI,CAAC,UAAU;wBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;qBAClB;iBACF,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,UAAkB;QACnC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,OAAO,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,UAAkB;QAC9B,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,WAAmB;QAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6BAA6B,EAAE;YAC1D,OAAO,EAAE;gBACP,QAAQ,EAAE,kBAAkB;gBAC5B,eAAe,EAAE,UAAU,WAAW,EAAE;gBACxC,YAAY,EAAE,gBAAgB;aAC/B;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6BAA6B,EAAE;gBAC1D,OAAO,EAAE;oBACP,QAAQ,EAAE,kBAAkB;oBAC5B,eAAe,EAAE,UAAU,WAAW,EAAE;oBACxC,YAAY,EAAE,gBAAgB;iBAC/B;aACF,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,SAAS;IACZ,WAAW,CAAS;IAE5B,YAAY,WAAmB;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,UAAuB,EAAE;QAC/D,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;YACzC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,yBAAyB,QAAQ,EAAE,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,GAAG,OAAO;YACV,OAAO,EAAE;gBACP,QAAQ,EAAE,kBAAkB;gBAC5B,eAAe,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE;gBAC7C,YAAY,EAAE,gBAAgB;gBAC9B,GAAG,OAAO,CAAC,OAAO;aACnB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,MAAM,KAAK,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,YAAqB,IAAI,EAAE,WAAoB;QAO5E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI;gBACJ,OAAO,EAAE,SAAS;gBAClB,WAAW;gBACX,SAAS,EAAE,KAAK;aACjB,CAAC;SACH,CAAC,CAAC;QAEH,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,MAAM,EAAE,IAAI,CAAC,OAAO;SACrB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe,CAAC,EAAE,UAAkB,EAAE;QAMpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,aAAa,OAAO,eAAe,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC,CAAC;IACN,CAAC;CACF"}

package/dist/core/gitlab-integration.d.ts

@@ -0,0 +1,66 @@
+export interface MRResult {
+    success: boolean;
+    mrUrl?: string;
+    error?: string;
+}
+export declare class GitLabIntegration {
+    /**
+     * Check if GitLab CLI (glab) is installed and authenticated
+     */
+    isAvailable(): boolean;
+    /**
+     * Create a merge request using GitLab API with OAuth token.
+     * This method is preferred over CLI as it doesn't require `glab` to be installed.
+     *
+     * @param repoPath - Path to the repository (to get remote URL)
+     * @param branch - Branch to create MR from (source branch)
+     * @param title - MR title
+     * @param description - MR description
+     * @param token - OAuth access token
+     * @param targetBranch - Target branch for the MR (optional, defaults to main/master)
+     * @returns MRResult with success status and MR URL
+     */
+    createMRWithToken(repoPath: string, branch: string, title: string, description: string, token: string, targetBranch?: string): Promise<MRResult>;
+    /**
+     * Create a merge request.
+     * First tries OAuth API if workspace has a token, then falls back to glab CLI.
+     *
+     * @param repoPath - Path to the repository (working directory for git commands)
+     * @param branch - Branch to create MR from
+     * @param title - MR title
+     * @param body - MR body/description
+     * @param workspaceLookupPath - Optional path used for workspace token lookup (for worktree support)
+     * @returns MRResult with success status and MR URL
+     */
+    createMR(repoPath: string, branch: string, title: string, body: string, workspaceLookupPath?: string, targetBranch?: string): Promise<MRResult>;
+    /**
+     * Create a merge request using GitLab CLI (glab).
+     * Fallback method when OAuth is not available.
+     */
+    private createMRWithCLI;
+    /**
+     * Create a new project on GitLab and push local code
+     * First checks if workspace has a GitLab token, otherwise falls back to glab CLI
+     * @param repoPath - Path to the local repository
+     * @param projectName - Name for the GitLab project
+     * @param visibility - Project visibility (default: 'private')
+     * @returns Result with success status and remote URL
+     */
+    createProject(repoPath: string, projectName: string, visibility?: 'private' | 'public'): Promise<MRResult>;
+    /**
+     * Create project using GitLab API with OAuth token
+     */
+    private createProjectWithToken;
+    /**
+     * Create project using GitLab CLI (glab)
+     */
+    private createProjectWithCLI;
+    /**
+     * Get the URL to create an MR manually in the browser
+     * @param repoPath - Path to the repository
+     * @param branch - Branch to create MR from
+     */
+    getMRCreateUrl(repoPath: string, branch: string): string | null;
+}
+export declare const gitlabIntegration: GitLabIntegration;
+//# sourceMappingURL=gitlab-integration.d.ts.map

package/dist/core/gitlab-integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-integration.d.ts","sourceRoot":"","sources":["../../src/core/gitlab-integration.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAqBD,qBAAa,iBAAiB;IAC5B;;OAEG;IACH,WAAW,IAAI,OAAO;IAStB;;;;;;;;;;;OAWG;IACG,iBAAiB,CACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,QAAQ,CAAC;IAiFpB;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAwBrJ;;;OAGG;IACH,OAAO,CAAC,eAAe;IA0CvB;;;;;;;OAOG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,GAAE,SAAS,GAAG,QAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAc3H;;OAEG;YACW,sBAAsB;IAiFpC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAiC5B;;;;OAIG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAoBhE;AAGD,eAAO,MAAM,iBAAiB,mBAA0B,CAAC"}

package/dist/core/gitlab-integration.js

@@ -0,0 +1,353 @@
+import { execSync } from 'child_process';
+import https from 'https';
+import { workspaceManager } from '../config/workspaces.js';
+/**
+ * Helper to make HTTPS requests using native Node.js https module.
+ * Avoids embedding tokens in shell commands (SEC-01 fix).
+ */
+function httpsRequest(options, data) {
+    return new Promise((resolve, reject) => {
+        const req = https.request(options, (res) => {
+            let body = '';
+            res.on('data', (chunk) => (body += chunk));
+            res.on('end', () => resolve({ statusCode: res.statusCode || 0, body }));
+        });
+        req.on('error', reject);
+        if (data)
+            req.write(data);
+        req.end();
+    });
+}
+/**
+ * Parse project path from a GitLab remote URL.
+ * Supports both SSH and HTTPS formats.
+ * Returns URL-encoded project path for API calls.
+ */
+function parseGitLabRemote(remoteUrl) {
+    // SSH format: git@gitlab.com:owner/repo.git or git@gitlab.com:group/subgroup/repo.git
+    // HTTPS format: https://gitlab.com/owner/repo.git
+    const match = remoteUrl.match(/gitlab\.com[:/](.+?)(?:\.git)?$/);
+    if (match) {
+        const projectPath = match[1].replace(/\.git$/, '');
+        return {
+            projectPath,
+            projectPathEncoded: encodeURIComponent(projectPath),
+        };
+    }
+    return null;
+}
+export class GitLabIntegration {
+    /**
+     * Check if GitLab CLI (glab) is installed and authenticated
+     */
+    isAvailable() {
+        try {
+            execSync('glab auth status', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Create a merge request using GitLab API with OAuth token.
+     * This method is preferred over CLI as it doesn't require `glab` to be installed.
+     *
+     * @param repoPath - Path to the repository (to get remote URL)
+     * @param branch - Branch to create MR from (source branch)
+     * @param title - MR title
+     * @param description - MR description
+     * @param token - OAuth access token
+     * @param targetBranch - Target branch for the MR (optional, defaults to main/master)
+     * @returns MRResult with success status and MR URL
+     */
+    async createMRWithToken(repoPath, branch, title, description, token, targetBranch) {
+        try {
+            // Get the remote URL to determine project path
+            const remoteUrl = execSync('git remote get-url origin', {
+                cwd: repoPath,
+                encoding: 'utf-8',
+                stdio: ['pipe', 'pipe', 'pipe'],
+            }).trim();
+            const parsed = parseGitLabRemote(remoteUrl);
+            if (!parsed) {
+                return { success: false, error: 'Could not parse GitLab remote URL' };
+            }
+            const { projectPathEncoded } = parsed;
+            // Determine target branch if not provided
+            if (!targetBranch) {
+                try {
+                    // Try to detect main branch
+                    const branches = execSync('git branch -a', {
+                        cwd: repoPath,
+                        encoding: 'utf-8',
+                        stdio: ['pipe', 'pipe', 'pipe'],
+                    });
+                    targetBranch = branches.includes('remotes/origin/main') ? 'main' : 'master';
+                }
+                catch {
+                    targetBranch = 'main';
+                }
+            }
+            // Create MR via GitLab API using native https module (SEC-01 fix: no token in shell/temp files)
+            const requestBody = JSON.stringify({
+                title,
+                description,
+                source_branch: branch,
+                target_branch: targetBranch,
+            });
+            console.log(`[GitLabIntegration] Calling GitLab API: POST /api/v4/projects/${projectPathEncoded}/merge_requests`);
+            const response = await httpsRequest({
+                hostname: 'gitlab.com',
+                path: `/api/v4/projects/${projectPathEncoded}/merge_requests`,
+                method: 'POST',
+                headers: {
+                    Accept: 'application/json',
+                    Authorization: `Bearer ${token}`,
+                    'Content-Type': 'application/json',
+                    'Content-Length': Buffer.byteLength(requestBody),
+                },
+            }, requestBody);
+            console.log(`[GitLabIntegration] API response status: ${response.statusCode}`);
+            if (response.statusCode >= 200 && response.statusCode < 300) {
+                const mr = JSON.parse(response.body);
+                console.log(`[GitLabIntegration] MR created via API: ${mr.web_url}`);
+                return { success: true, mrUrl: mr.web_url };
+            }
+            else {
+                let errorMsg = response.body;
+                try {
+                    const err = JSON.parse(response.body);
+                    errorMsg = err.message || err.error || JSON.stringify(err);
+                }
+                catch {
+                    errorMsg = `HTTP ${response.statusCode}: ${response.body.substring(0, 200)}`;
+                }
+                console.error(`[GitLabIntegration] API error creating MR: ${errorMsg}`);
+                return { success: false, error: errorMsg };
+            }
+        }
+        catch (error) {
+            const err = error;
+            const errorMsg = err.stderr?.toString() || err.message || 'Unknown error';
+            console.error(`[GitLabIntegration] Failed to create MR via API: ${errorMsg}`);
+            return { success: false, error: errorMsg };
+        }
+    }
+    /**
+     * Create a merge request.
+     * First tries OAuth API if workspace has a token, then falls back to glab CLI.
+     *
+     * @param repoPath - Path to the repository (working directory for git commands)
+     * @param branch - Branch to create MR from
+     * @param title - MR title
+     * @param body - MR body/description
+     * @param workspaceLookupPath - Optional path used for workspace token lookup (for worktree support)
+     * @returns MRResult with success status and MR URL
+     */
+    async createMR(repoPath, branch, title, body, workspaceLookupPath, targetBranch) {
+        // First, check if this repo belongs to a workspace with GitLab token
+        // Use workspaceLookupPath if provided (for worktree mode), otherwise use repoPath
+        const lookupPath = workspaceLookupPath || repoPath;
+        console.log(`[GitLabIntegration] Looking up workspace for path: ${lookupPath}`);
+        const workspace = workspaceManager.getWorkspaceForRepo(lookupPath);
+        console.log(`[GitLabIntegration] Found workspace: ${workspace ? workspace.name + ' (id: ' + workspace.id + ', scanPath: ' + workspace.scanPath + ')' : 'null'}`);
+        const tokenData = workspace ? workspaceManager.getGitLabToken(workspace.id) : null;
+        console.log(`[GitLabIntegration] Token data exists: ${!!tokenData}`);
+        if (tokenData) {
+            console.log(`[GitLabIntegration] Using OAuth token for MR creation`);
+            const result = await this.createMRWithToken(repoPath, branch, title, body, tokenData.accessToken, targetBranch);
+            if (result.success) {
+                return result;
+            }
+            // If API fails, fall through to CLI
+            console.log(`[GitLabIntegration] OAuth MR creation failed, trying CLI fallback: ${result.error}`);
+        }
+        // Fall back to glab CLI
+        return this.createMRWithCLI(repoPath, branch, title, body, targetBranch);
+    }
+    /**
+     * Create a merge request using GitLab CLI (glab).
+     * Fallback method when OAuth is not available.
+     */
+    createMRWithCLI(repoPath, branch, title, body, targetBranch) {
+        if (!this.isAvailable()) {
+            return {
+                success: false,
+                error: 'GitLab CLI (glab) is not installed or not authenticated. Install from https://gitlab.com/gitlab-org/cli, or connect GitLab OAuth in workspace settings.',
+            };
+        }
+        try {
+            // Escape special characters in title and body for shell
+            const escapedTitle = title.replace(/"/g, '\\"').replace(/`/g, '\\`');
+            const escapedBody = body.replace(/"/g, '\\"').replace(/`/g, '\\`');
+            // Build command with optional target branch
+            let cmd = `glab mr create --title "${escapedTitle}" --description "${escapedBody}" --source-branch "${branch}"`;
+            if (targetBranch) {
+                cmd += ` --target-branch "${targetBranch}"`;
+            }
+            const result = execSync(cmd, {
+                cwd: repoPath,
+                encoding: 'utf-8',
+                stdio: ['pipe', 'pipe', 'pipe'],
+                timeout: 60000, // 60s timeout
+            }).trim();
+            // glab mr create outputs the MR URL on success
+            const mrUrl = result.match(/https:\/\/gitlab\.com\/.+\/merge_requests\/\d+/)?.[0] || result;
+            console.log(`[GitLabIntegration] MR created via CLI: ${mrUrl}`);
+            return { success: true, mrUrl };
+        }
+        catch (error) {
+            const err = error;
+            const errorMsg = err.stderr?.toString() || err.message || 'Unknown error';
+            console.error(`[GitLabIntegration] Failed to create MR via CLI: ${errorMsg}`);
+            return { success: false, error: errorMsg };
+        }
+    }
+    /**
+     * Create a new project on GitLab and push local code
+     * First checks if workspace has a GitLab token, otherwise falls back to glab CLI
+     * @param repoPath - Path to the local repository
+     * @param projectName - Name for the GitLab project
+     * @param visibility - Project visibility (default: 'private')
+     * @returns Result with success status and remote URL
+     */
+    async createProject(repoPath, projectName, visibility = 'private') {
+        // First, check if this repo belongs to a workspace with GitLab token
+        const workspace = workspaceManager.getWorkspaceForRepo(repoPath);
+        const tokenData = workspace ? workspaceManager.getGitLabToken(workspace.id) : null;
+        if (tokenData) {
+            // Use GitLab API with workspace token
+            return this.createProjectWithToken(repoPath, projectName, visibility, tokenData.accessToken);
+        }
+        // Fall back to glab CLI
+        return this.createProjectWithCLI(repoPath, projectName, visibility);
+    }
+    /**
+     * Create project using GitLab API with OAuth token
+     */
+    async createProjectWithToken(repoPath, projectName, visibility, token) {
+        try {
+            // Create project via GitLab API using native https module (SEC-01 fix: no token in shell)
+            const projectData = JSON.stringify({
+                name: projectName,
+                visibility,
+                initialize_with_readme: false,
+            });
+            const response = await httpsRequest({
+                hostname: 'gitlab.com',
+                path: '/api/v4/projects',
+                method: 'POST',
+                headers: {
+                    Accept: 'application/json',
+                    Authorization: `Bearer ${token}`,
+                    'Content-Type': 'application/json',
+                    'Content-Length': Buffer.byteLength(projectData),
+                },
+            }, projectData);
+            if (response.statusCode < 200 || response.statusCode >= 300) {
+                console.error(`[GitLabIntegration] API error: ${response.body}`);
+                return { success: false, error: response.body };
+            }
+            const project = JSON.parse(response.body);
+            const webUrl = project.web_url;
+            const httpUrlToRepo = project.http_url_to_repo;
+            // Now add remote and push using git commands with credential helper
+            const { createCredentialHelperScript, removeCredentialHelperScript } = await import('./git-credential-helper.js');
+            const scriptPath = createCredentialHelperScript(token, 'gitlab');
+            try {
+                // Add remote (without token in URL)
+                execSync(`git remote add origin "${httpUrlToRepo}"`, {
+                    cwd: repoPath,
+                    encoding: 'utf-8',
+                    stdio: ['pipe', 'pipe', 'pipe'],
+                });
+                // Push with credential helper
+                const pushCmd = process.platform === 'win32'
+                    ? 'cmd /c "git push -u origin main || git push -u origin master"'
+                    : 'git push -u origin main || git push -u origin master';
+                execSync(pushCmd, {
+                    cwd: repoPath,
+                    encoding: 'utf-8',
+                    stdio: ['pipe', 'pipe', 'pipe'],
+                    timeout: 120000,
+                    env: {
+                        ...process.env,
+                        GIT_ASKPASS: scriptPath,
+                        GIT_TERMINAL_PROMPT: '0',
+                    },
+                });
+            }
+            finally {
+                // Always clean up credential helper script
+                removeCredentialHelperScript(scriptPath);
+            }
+            console.log(`[GitLabIntegration] Project created via API: ${webUrl}`);
+            return { success: true, mrUrl: webUrl };
+        }
+        catch (error) {
+            const err = error;
+            const errorMsg = err.stderr?.toString() || err.message || 'Unknown error';
+            console.error(`[GitLabIntegration] Failed to create project via API: ${errorMsg}`);
+            return { success: false, error: errorMsg };
+        }
+    }
+    /**
+     * Create project using GitLab CLI (glab)
+     */
+    createProjectWithCLI(repoPath, projectName, visibility) {
+        if (!this.isAvailable()) {
+            return {
+                success: false,
+                error: 'GitLab CLI (glab) is not installed or not authenticated. Install from https://gitlab.com/gitlab-org/cli',
+            };
+        }
+        try {
+            // glab repo create will create the project and set up remote origin
+            const result = execSync(`glab repo create ${projectName} --${visibility} --source=. --remote=origin --push`, {
+                cwd: repoPath,
+                encoding: 'utf-8',
+                stdio: ['pipe', 'pipe', 'pipe'],
+                timeout: 120000, // 2 min timeout for push
+            }).trim();
+            // Extract the project URL from output
+            const projectUrl = result.match(/https:\/\/gitlab\.com\/[^\s]+/)?.[0] || result;
+            console.log(`[GitLabIntegration] Project created via CLI: ${projectUrl}`);
+            return { success: true, mrUrl: projectUrl };
+        }
+        catch (error) {
+            const err = error;
+            const errorMsg = err.stderr?.toString() || err.message || 'Unknown error';
+            console.error(`[GitLabIntegration] Failed to create project via CLI: ${errorMsg}`);
+            return { success: false, error: errorMsg };
+        }
+    }
+    /**
+     * Get the URL to create an MR manually in the browser
+     * @param repoPath - Path to the repository
+     * @param branch - Branch to create MR from
+     */
+    getMRCreateUrl(repoPath, branch) {
+        try {
+            // Get the remote URL
+            const remoteUrl = execSync('git remote get-url origin', {
+                cwd: repoPath,
+                encoding: 'utf-8',
+                stdio: ['pipe', 'pipe', 'pipe'],
+            }).trim();
+            // Parse GitLab URL from remote
+            // Supports: git@gitlab.com:user/repo.git, https://gitlab.com/user/repo.git
+            let match = remoteUrl.match(/gitlab\.com[:/]([^/]+\/[^/.]+)/);
+            if (!match)
+                return null;
+            const pathWithNamespace = match[1].replace(/\.git$/, '');
+            return `https://gitlab.com/${pathWithNamespace}/-/merge_requests/new?merge_request%5Bsource_branch%5D=${branch}`;
+        }
+        catch {
+            return null;
+        }
+    }
+}
+// Singleton instance
+export const gitlabIntegration = new GitLabIntegration();
+//# sourceMappingURL=gitlab-integration.js.map