cyrus-gitlab-event-transport 0.2.38

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/GitLabCommentService.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Service for posting comments (notes) back to GitLab MR conversations.
+ *
+ * Uses the GitLab REST API v4 with a personal or project access token
+ * to post notes on merge requests and reply to discussion threads.
+ */
+export interface GitLabCommentServiceConfig {
+    /** GitLab API base URL (default: https://gitlab.com) */
+    apiBaseUrl?: string;
+}
+/**
+ * Parameters for posting a note on a GitLab MR
+ */
+export interface PostMRNoteParams {
+    /** GitLab access token */
+    token: string;
+    /** Project ID (numeric) */
+    projectId: number;
+    /** MR iid (project-scoped ID) */
+    mrIid: number;
+    /** Note body (markdown) */
+    body: string;
+}
+/**
+ * Parameters for posting a reply to a discussion thread
+ */
+export interface PostDiscussionReplyParams {
+    /** GitLab access token */
+    token: string;
+    /** Project ID (numeric) */
+    projectId: number;
+    /** MR iid (project-scoped ID) */
+    mrIid: number;
+    /** Discussion ID to reply to */
+    discussionId: string;
+    /** Reply body (markdown) */
+    body: string;
+}
+/**
+ * Parameters for adding an award emoji (reaction) to a note
+ */
+export interface AddAwardEmojiParams {
+    /** GitLab access token */
+    token: string;
+    /** Project ID (numeric) */
+    projectId: number;
+    /** MR iid (project-scoped ID) */
+    mrIid: number;
+    /** Note ID to react to */
+    noteId: number;
+    /** Emoji name (e.g., "eyes", "thumbsup", "heart") */
+    name: string;
+}
+/**
+ * Response from GitLab API after creating a note
+ */
+export interface GitLabNoteResponse {
+    id: number;
+    body: string;
+    created_at: string;
+    author: {
+        id: number;
+        username: string;
+        name: string;
+    };
+}
+export declare class GitLabCommentService {
+    private apiBaseUrl;
+    constructor(config?: GitLabCommentServiceConfig);
+    /**
+     * Post a note (comment) on a merge request.
+     *
+     * @see https://docs.gitlab.com/ee/api/notes.html#create-new-merge-request-note
+     */
+    postMRNote(params: PostMRNoteParams): Promise<GitLabNoteResponse>;
+    /**
+     * Post a reply to a discussion thread on a merge request.
+     *
+     * @see https://docs.gitlab.com/ee/api/discussions.html#add-note-to-existing-merge-request-thread
+     */
+    postDiscussionReply(params: PostDiscussionReplyParams): Promise<GitLabNoteResponse>;
+    /**
+     * Add an award emoji (reaction) to a note on a merge request.
+     *
+     * @see https://docs.gitlab.com/ee/api/award_emoji.html#award-a-new-emoji-on-a-note
+     */
+    addAwardEmoji(params: AddAwardEmojiParams): Promise<void>;
+}
+//# sourceMappingURL=GitLabCommentService.d.ts.map

package/dist/GitLabCommentService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitLabCommentService.d.ts","sourceRoot":"","sources":["../src/GitLabCommentService.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,0BAA0B;IAC1C,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACzC,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACb,CAAC;CACF;AAED,qBAAa,oBAAoB;IAChC,OAAO,CAAC,UAAU,CAAS;gBAEf,MAAM,CAAC,EAAE,0BAA0B;IAI/C;;;;OAIG;IACG,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAuBvE;;;;OAIG;IACG,mBAAmB,CACxB,MAAM,EAAE,yBAAyB,GAC/B,OAAO,CAAC,kBAAkB,CAAC;IAuB9B;;;;OAIG;IACG,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;CAoB/D"}

package/dist/GitLabCommentService.js

@@ -0,0 +1,78 @@
+/**
+ * Service for posting comments (notes) back to GitLab MR conversations.
+ *
+ * Uses the GitLab REST API v4 with a personal or project access token
+ * to post notes on merge requests and reply to discussion threads.
+ */
+export class GitLabCommentService {
+    apiBaseUrl;
+    constructor(config) {
+        this.apiBaseUrl = config?.apiBaseUrl ?? "https://gitlab.com";
+    }
+    /**
+     * Post a note (comment) on a merge request.
+     *
+     * @see https://docs.gitlab.com/ee/api/notes.html#create-new-merge-request-note
+     */
+    async postMRNote(params) {
+        const { token, projectId, mrIid, body } = params;
+        const url = `${this.apiBaseUrl}/api/v4/projects/${projectId}/merge_requests/${mrIid}/notes`;
+        const response = await fetch(url, {
+            method: "POST",
+            headers: {
+                "PRIVATE-TOKEN": token,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({ body }),
+        });
+        if (!response.ok) {
+            const errorBody = await response.text();
+            throw new Error(`[GitLabCommentService] Failed to post MR note: ${response.status} ${response.statusText} - ${errorBody}`);
+        }
+        return (await response.json());
+    }
+    /**
+     * Post a reply to a discussion thread on a merge request.
+     *
+     * @see https://docs.gitlab.com/ee/api/discussions.html#add-note-to-existing-merge-request-thread
+     */
+    async postDiscussionReply(params) {
+        const { token, projectId, mrIid, discussionId, body } = params;
+        const url = `${this.apiBaseUrl}/api/v4/projects/${projectId}/merge_requests/${mrIid}/discussions/${discussionId}/notes`;
+        const response = await fetch(url, {
+            method: "POST",
+            headers: {
+                "PRIVATE-TOKEN": token,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({ body }),
+        });
+        if (!response.ok) {
+            const errorBody = await response.text();
+            throw new Error(`[GitLabCommentService] Failed to post discussion reply: ${response.status} ${response.statusText} - ${errorBody}`);
+        }
+        return (await response.json());
+    }
+    /**
+     * Add an award emoji (reaction) to a note on a merge request.
+     *
+     * @see https://docs.gitlab.com/ee/api/award_emoji.html#award-a-new-emoji-on-a-note
+     */
+    async addAwardEmoji(params) {
+        const { token, projectId, mrIid, noteId, name } = params;
+        const url = `${this.apiBaseUrl}/api/v4/projects/${projectId}/merge_requests/${mrIid}/notes/${noteId}/award_emoji`;
+        const response = await fetch(url, {
+            method: "POST",
+            headers: {
+                "PRIVATE-TOKEN": token,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({ name }),
+        });
+        if (!response.ok) {
+            const errorBody = await response.text();
+            throw new Error(`[GitLabCommentService] Failed to add award emoji: ${response.status} ${response.statusText} - ${errorBody}`);
+        }
+    }
+}
+//# sourceMappingURL=GitLabCommentService.js.map

package/dist/GitLabCommentService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitLabCommentService.js","sourceRoot":"","sources":["../src/GitLabCommentService.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmEH,MAAM,OAAO,oBAAoB;IACxB,UAAU,CAAS;IAE3B,YAAY,MAAmC;QAC9C,IAAI,CAAC,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,oBAAoB,CAAC;IAC9D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,MAAwB;QACxC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QACjD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,oBAAoB,SAAS,mBAAmB,KAAK,QAAQ,CAAC;QAE5F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,eAAe,EAAE,KAAK;gBACtB,cAAc,EAAE,kBAAkB;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACd,kDAAkD,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CACzG,CAAC;QACH,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CACxB,MAAiC;QAEjC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QAC/D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,oBAAoB,SAAS,mBAAmB,KAAK,gBAAgB,YAAY,QAAQ,CAAC;QAExH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,eAAe,EAAE,KAAK;gBACtB,cAAc,EAAE,kBAAkB;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACd,2DAA2D,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAClH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC9C,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QACzD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,oBAAoB,SAAS,mBAAmB,KAAK,UAAU,MAAM,cAAc,CAAC;QAElH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,eAAe,EAAE,KAAK;gBACtB,cAAc,EAAE,kBAAkB;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACd,qDAAqD,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAC5G,CAAC;QACH,CAAC;IACF,CAAC;CACD"}

package/dist/GitLabEventTransport.d.ts

@@ -0,0 +1,63 @@
+import { EventEmitter } from "node:events";
+import type { TranslationContext } from "cyrus-core";
+import { type ILogger } from "cyrus-core";
+import type { GitLabEventTransportConfig, GitLabEventTransportEvents } from "./types.js";
+export declare interface GitLabEventTransport {
+    on<K extends keyof GitLabEventTransportEvents>(event: K, listener: GitLabEventTransportEvents[K]): this;
+    emit<K extends keyof GitLabEventTransportEvents>(event: K, ...args: Parameters<GitLabEventTransportEvents[K]>): boolean;
+}
+/**
+ * GitLabEventTransport - Handles forwarded GitLab webhook event delivery
+ *
+ * This class provides a typed EventEmitter-based transport
+ * for handling GitLab webhooks forwarded from CYHOST.
+ *
+ * It registers a POST /gitlab-webhook endpoint with a Fastify server
+ * and verifies incoming webhooks using either:
+ * 1. "proxy" mode: Verifies Bearer token authentication (self-hosted)
+ * 2. "signature" mode: Verifies X-Gitlab-Token header (direct webhooks)
+ *
+ * Supported GitLab event types:
+ * - note: Comments/notes on merge requests
+ * - merge_request: MR state changes (approved, changes_requested, etc.)
+ */
+export declare class GitLabEventTransport extends EventEmitter {
+    private config;
+    private logger;
+    private messageTranslator;
+    private translationContext;
+    constructor(config: GitLabEventTransportConfig, logger?: ILogger, translationContext?: TranslationContext);
+    /**
+     * Set the translation context for message translation.
+     */
+    setTranslationContext(context: TranslationContext): void;
+    /**
+     * Resolve the effective verification mode and secret at request time.
+     * When started in proxy mode, checks if GITLAB_WEBHOOK_SECRET and
+     * CYRUS_HOST_EXTERNAL have been added to the environment since startup,
+     * enabling a runtime switch to signature verification.
+     */
+    private resolveVerification;
+    /**
+     * Register the /gitlab-webhook endpoint with the Fastify server
+     */
+    register(): void;
+    /**
+     * Handle webhook using GitLab's X-Gitlab-Token secret verification.
+     * GitLab uses a simple token comparison (not HMAC).
+     */
+    private handleSignatureWebhook;
+    /**
+     * Handle webhook using Bearer token authentication (forwarded from CYHOST)
+     */
+    private handleProxyWebhook;
+    /**
+     * Process the webhook request and emit the appropriate event
+     */
+    private processAndEmitEvent;
+    /**
+     * Translate and emit an internal message from a webhook event.
+     */
+    private emitMessage;
+}
+//# sourceMappingURL=GitLabEventTransport.d.ts.map

package/dist/GitLabEventTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitLabEventTransport.d.ts","sourceRoot":"","sources":["../src/GitLabEventTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAgB,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AAGxD,OAAO,KAAK,EACX,0BAA0B,EAC1B,0BAA0B,EAM1B,MAAM,YAAY,CAAC;AAEpB,MAAM,CAAC,OAAO,WAAW,oBAAoB;IAC5C,EAAE,CAAC,CAAC,SAAS,MAAM,0BAA0B,EAC5C,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,0BAA0B,CAAC,CAAC,CAAC,GACrC,IAAI,CAAC;IACR,IAAI,CAAC,CAAC,SAAS,MAAM,0BAA0B,EAC9C,KAAK,EAAE,CAAC,EACR,GAAG,IAAI,EAAE,UAAU,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,GAChD,OAAO,CAAC;CACX;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,oBAAqB,SAAQ,YAAY;IACrD,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,iBAAiB,CAA0B;IACnD,OAAO,CAAC,kBAAkB,CAAqB;gBAG9C,MAAM,EAAE,0BAA0B,EAClC,MAAM,CAAC,EAAE,OAAO,EAChB,kBAAkB,CAAC,EAAE,kBAAkB;IASxC;;OAEG;IACH,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI;IAIxD;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAuB3B;;OAEG;IACH,QAAQ,IAAI,IAAI;IA6BhB;;;OAGG;YACW,sBAAsB;IAmBpC;;OAEG;YACW,kBAAkB;IAoBhC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAmE3B;;OAEG;IACH,OAAO,CAAC,WAAW;CAYnB"}

package/dist/GitLabEventTransport.js

@@ -0,0 +1,175 @@
+import { EventEmitter } from "node:events";
+import { createLogger } from "cyrus-core";
+import { GitLabMessageTranslator } from "./GitLabMessageTranslator.js";
+/**
+ * GitLabEventTransport - Handles forwarded GitLab webhook event delivery
+ *
+ * This class provides a typed EventEmitter-based transport
+ * for handling GitLab webhooks forwarded from CYHOST.
+ *
+ * It registers a POST /gitlab-webhook endpoint with a Fastify server
+ * and verifies incoming webhooks using either:
+ * 1. "proxy" mode: Verifies Bearer token authentication (self-hosted)
+ * 2. "signature" mode: Verifies X-Gitlab-Token header (direct webhooks)
+ *
+ * Supported GitLab event types:
+ * - note: Comments/notes on merge requests
+ * - merge_request: MR state changes (approved, changes_requested, etc.)
+ */
+export class GitLabEventTransport extends EventEmitter {
+    config;
+    logger;
+    messageTranslator;
+    translationContext;
+    constructor(config, logger, translationContext) {
+        super();
+        this.config = config;
+        this.logger = logger ?? createLogger({ component: "GitLabEventTransport" });
+        this.messageTranslator = new GitLabMessageTranslator();
+        this.translationContext = translationContext ?? {};
+    }
+    /**
+     * Set the translation context for message translation.
+     */
+    setTranslationContext(context) {
+        this.translationContext = { ...this.translationContext, ...context };
+    }
+    /**
+     * Resolve the effective verification mode and secret at request time.
+     * When started in proxy mode, checks if GITLAB_WEBHOOK_SECRET and
+     * CYRUS_HOST_EXTERNAL have been added to the environment since startup,
+     * enabling a runtime switch to signature verification.
+     */
+    resolveVerification() {
+        if (this.config.verificationMode === "signature") {
+            return { mode: "signature", secret: this.config.secret };
+        }
+        const isExternalHost = process.env.CYRUS_HOST_EXTERNAL?.toLowerCase().trim() === "true";
+        const gitlabSecret = process.env.GITLAB_WEBHOOK_SECRET;
+        const hasGitlabSecret = gitlabSecret != null && gitlabSecret !== "";
+        if (isExternalHost && hasGitlabSecret) {
+            this.logger.info("Runtime switch: GITLAB_WEBHOOK_SECRET detected, using GitLab token verification");
+            return { mode: "signature", secret: gitlabSecret };
+        }
+        return { mode: "proxy", secret: this.config.secret };
+    }
+    /**
+     * Register the /gitlab-webhook endpoint with the Fastify server
+     */
+    register() {
+        this.config.fastifyServer.post("/gitlab-webhook", async (request, reply) => {
+            try {
+                const { mode, secret } = this.resolveVerification();
+                if (mode === "signature") {
+                    await this.handleSignatureWebhook(request, reply, secret);
+                }
+                else {
+                    await this.handleProxyWebhook(request, reply, secret);
+                }
+            }
+            catch (error) {
+                const err = new Error("Webhook error");
+                if (error instanceof Error) {
+                    err.cause = error;
+                }
+                this.logger.error("Webhook error", err);
+                this.emit("error", err);
+                reply.code(500).send({ error: "Internal server error" });
+            }
+        });
+        this.logger.info(`Registered POST /gitlab-webhook endpoint (${this.config.verificationMode} mode)`);
+    }
+    /**
+     * Handle webhook using GitLab's X-Gitlab-Token secret verification.
+     * GitLab uses a simple token comparison (not HMAC).
+     */
+    async handleSignatureWebhook(request, reply, secret) {
+        const token = request.headers["x-gitlab-token"];
+        if (!token) {
+            reply.code(401).send({ error: "Missing X-Gitlab-Token header" });
+            return;
+        }
+        if (token !== secret) {
+            reply.code(401).send({ error: "Invalid webhook token" });
+            return;
+        }
+        this.processAndEmitEvent(request, reply);
+    }
+    /**
+     * Handle webhook using Bearer token authentication (forwarded from CYHOST)
+     */
+    async handleProxyWebhook(request, reply, secret) {
+        const authHeader = request.headers.authorization;
+        if (!authHeader) {
+            reply.code(401).send({ error: "Missing Authorization header" });
+            return;
+        }
+        const expectedAuth = `Bearer ${secret}`;
+        if (authHeader !== expectedAuth) {
+            reply.code(401).send({ error: "Invalid authorization token" });
+            return;
+        }
+        this.processAndEmitEvent(request, reply);
+    }
+    /**
+     * Process the webhook request and emit the appropriate event
+     */
+    processAndEmitEvent(request, reply) {
+        const body = request.body;
+        const objectKind = body.object_kind;
+        const accessToken = request.headers["x-gitlab-access-token"];
+        if (!objectKind) {
+            reply.code(400).send({ error: "Missing object_kind in payload" });
+            return;
+        }
+        if (objectKind !== "note" && objectKind !== "merge_request") {
+            this.logger.debug(`Ignoring unsupported event type: ${objectKind}`);
+            reply.code(200).send({ success: true, ignored: true });
+            return;
+        }
+        const payload = body;
+        // For note events, only handle notes on merge requests
+        if (objectKind === "note") {
+            const notePayload = payload;
+            if (notePayload.object_attributes.noteable_type !== "MergeRequest") {
+                this.logger.debug(`Ignoring note on ${notePayload.object_attributes.noteable_type}`);
+                reply.code(200).send({ success: true, ignored: true });
+                return;
+            }
+        }
+        // For merge_request events, only handle specific actions
+        if (objectKind === "merge_request") {
+            const mrPayload = payload;
+            const action = mrPayload.object_attributes.action;
+            if (action !== "approved" && action !== "unapproved") {
+                this.logger.debug(`Ignoring merge_request with action: ${action}`);
+                reply.code(200).send({ success: true, ignored: true });
+                return;
+            }
+        }
+        const webhookEvent = {
+            eventType: objectKind,
+            payload,
+            accessToken,
+        };
+        this.logger.info(`Received ${objectKind} webhook from ${payload.project.path_with_namespace}`);
+        // Emit "event" for legacy compatibility
+        this.emit("event", webhookEvent);
+        // Emit "message" with translated internal message
+        this.emitMessage(webhookEvent);
+        reply.code(200).send({ success: true });
+    }
+    /**
+     * Translate and emit an internal message from a webhook event.
+     */
+    emitMessage(event) {
+        const result = this.messageTranslator.translate(event, this.translationContext);
+        if (result.success) {
+            this.emit("message", result.message);
+        }
+        else {
+            this.logger.debug(`Message translation skipped: ${result.reason}`);
+        }
+    }
+}
+//# sourceMappingURL=GitLabEventTransport.js.map

package/dist/GitLabEventTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitLabEventTransport.js","sourceRoot":"","sources":["../src/GitLabEventTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAgB,MAAM,YAAY,CAAC;AAExD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAsBvE;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,oBAAqB,SAAQ,YAAY;IAC7C,MAAM,CAA6B;IACnC,MAAM,CAAU;IAChB,iBAAiB,CAA0B;IAC3C,kBAAkB,CAAqB;IAE/C,YACC,MAAkC,EAClC,MAAgB,EAChB,kBAAuC;QAEvC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,YAAY,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,iBAAiB,GAAG,IAAI,uBAAuB,EAAE,CAAC;QACvD,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,IAAI,EAAE,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAA2B;QAChD,IAAI,CAAC,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC,kBAAkB,EAAE,GAAG,OAAO,EAAE,CAAC;IACtE,CAAC;IAED;;;;;OAKG;IACK,mBAAmB;QAI1B,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,KAAK,WAAW,EAAE,CAAC;YAClD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC;QAED,MAAM,cAAc,GACnB,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;QAClE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACvD,MAAM,eAAe,GAAG,YAAY,IAAI,IAAI,IAAI,YAAY,KAAK,EAAE,CAAC;QAEpE,IAAI,cAAc,IAAI,eAAe,EAAE,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,iFAAiF,CACjF,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACpD,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,QAAQ;QACP,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAC7B,iBAAiB,EACjB,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;YACtD,IAAI,CAAC;gBACJ,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAEpD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC1B,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC3D,CAAC;qBAAM,CAAC;oBACP,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBACvD,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;gBACvC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;oBAC5B,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC1D,CAAC;QACF,CAAC,CACD,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,6CAA6C,IAAI,CAAC,MAAM,CAAC,gBAAgB,QAAQ,CACjF,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,sBAAsB,CACnC,OAAuB,EACvB,KAAmB,EACnB,MAAc;QAEd,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAW,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACjE,OAAO;QACR,CAAC;QAED,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACR,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAC/B,OAAuB,EACvB,KAAmB,EACnB,MAAc;QAEd,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAChE,OAAO;QACR,CAAC;QAED,MAAM,YAAY,GAAG,UAAU,MAAM,EAAE,CAAC;QACxC,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,mBAAmB,CAC1B,OAAuB,EACvB,KAAmB;QAEnB,MAAM,IAAI,GAAG,OAAO,CAAC,IAA+B,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAiC,CAAC;QAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAE/C,CAAC;QAEb,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QAED,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,IAEY,CAAC;QAE7B,uDAAuD;QACvD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,OAA4B,CAAC;YACjD,IAAI,WAAW,CAAC,iBAAiB,CAAC,aAAa,KAAK,cAAc,EAAE,CAAC;gBACpE,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,oBAAoB,WAAW,CAAC,iBAAiB,CAAC,aAAa,EAAE,CACjE,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,OAAO;YACR,CAAC;QACF,CAAC;QAED,yDAAyD;QACzD,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,OAAoC,CAAC;YACvD,MAAM,MAAM,GAAG,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAClD,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,MAAM,EAAE,CAAC,CAAC;gBACnE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,OAAO;YACR,CAAC;QACF,CAAC;QAED,MAAM,YAAY,GAAuB;YACxC,SAAS,EAAE,UAA6B;YACxC,OAAO;YACP,WAAW;SACX,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,YAAY,UAAU,iBAAiB,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAC5E,CAAC;QAEF,wCAAwC;QACxC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEjC,kDAAkD;QAClD,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAE/B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,KAAyB;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAC9C,KAAK,EACL,IAAI,CAAC,kBAAkB,CACvB,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;IACF,CAAC;CACD"}