ghagga 3.0.0 → 3.2.0

package/dist/lib/forge-postback.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Shared forge-NEUTRAL composition helper for the CLI change-request post-back
+ * (`ghagga review --pr N` GitHub / `--mr N` GitLab) — resolves
+ * BL-CLI-FORGE-COMPOSITION.
+ *
+ * The P3 `--pr` path and the P4 `--mr` path are the SAME pipeline:
+ *   resolve-token → parse-remote → build-adapter → make-ref → postSummaryComment
+ * The ONLY differences are forge-specific: which token env vars to read, how to
+ * parse the remote into a `RepoRef`, and which adapter to construct. This module
+ * captures the SHARED pipeline ONCE — the forge-specific steps are injected via a
+ * {@link ForgeCompositionBuilder} so BOTH commands route through one path instead
+ * of each hand-rolling the glue. Adding a third forge (Gitea) is a new builder,
+ * not a new branch.
+ *
+ * The actual idempotent upsert (find stale → delete → repost) lives inside the
+ * adapter + the forge-neutral {@link postSummaryComment}; this helper only
+ * orchestrates token-resolution → composition-build → post.
+ */
+import type { ChangeRequestRef, CommentMarker, ForgeAdapterBase } from 'ghagga-forge';
+import { type PostBackResult } from './pr-postback.js';
+/** The forge-specific pieces a post-back composition resolves to. */
+export interface ForgeComposition {
+    /** The forge adapter (built over its CLI client port + the resolved token). */
+    adapter: ForgeAdapterBase;
+    /** The canonical change-request ref (PR/MR) with forge-native identity. */
+    ref: ChangeRequestRef;
+}
+/**
+ * Builds the forge-specific composition (adapter + ref) from a resolved token +
+ * the change-request number. ASYNC because some forges need a pre-flight REST
+ * call (GitLab resolves the numeric project id from the remote path).
+ */
+export type ForgeCompositionBuilder = (token: string, changeRequestNumber: number) => Promise<ForgeComposition>;
+/**
+ * Why a forge post-back could not run, distinct from a thrown post error.
+ *
+ * `missing-token` is surfaced separately so the caller can print the
+ * forge-appropriate "set X / run ghagga login" guidance and apply the
+ * blocking/soft-fail exit policy uniformly.
+ */
+export type ForgePostbackOutcome = {
+    kind: 'posted';
+    result: PostBackResult;
+} | {
+    kind: 'missing-token';
+};
+/** Inputs for {@link composeForgePostback}. */
+export interface ForgePostbackInput {
+    /** The change-request number (PR/MR). */
+    changeRequestNumber: number;
+    /** Resolve the forge token (env-first, stored fallback). null ⇒ missing. */
+    resolveToken: () => string | null;
+    /** Build the forge-specific adapter + ref from the resolved token. */
+    buildComposition: ForgeCompositionBuilder;
+    /** The pre-rendered comment body (parity with the server post-back). */
+    body: string;
+    /** The comment marker identifying GHAGGA-owned comments. */
+    marker: CommentMarker;
+}
+/**
+ * Run the SHARED post-back pipeline for one forge.
+ *
+ * 1. resolve the token (forge-specific resolver). Missing ⇒ `missing-token`.
+ * 2. build the forge composition (adapter + ref) — async (GitLab project-id).
+ * 3. upsert the summary comment via the forge-neutral {@link postSummaryComment}.
+ *
+ * Throws on a post/build failure (the caller owns the blocking vs soft-fail exit
+ * policy). A missing token is returned as data, NOT thrown, so the caller prints
+ * forge-appropriate guidance.
+ */
+export declare function composeForgePostback(input: ForgePostbackInput): Promise<ForgePostbackOutcome>;
+//# sourceMappingURL=forge-postback.d.ts.map

package/dist/lib/forge-postback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge-postback.d.ts","sourceRoot":"","sources":["../../src/lib/forge-postback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACtF,OAAO,EAAE,KAAK,cAAc,EAAsB,MAAM,kBAAkB,CAAC;AAE3E,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,OAAO,EAAE,gBAAgB,CAAC;IAC1B,2EAA2E;IAC3E,GAAG,EAAE,gBAAgB,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,CACpC,KAAK,EAAE,MAAM,EACb,mBAAmB,EAAE,MAAM,KACxB,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAE9B,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4EAA4E;IAC5E,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAClC,sEAAsE;IACtE,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,MAAM,EAAE,aAAa,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,oBAAoB,CAAC,CAY/B"}

package/dist/lib/forge-postback.js

@@ -0,0 +1,39 @@
+/**
+ * Shared forge-NEUTRAL composition helper for the CLI change-request post-back
+ * (`ghagga review --pr N` GitHub / `--mr N` GitLab) — resolves
+ * BL-CLI-FORGE-COMPOSITION.
+ *
+ * The P3 `--pr` path and the P4 `--mr` path are the SAME pipeline:
+ *   resolve-token → parse-remote → build-adapter → make-ref → postSummaryComment
+ * The ONLY differences are forge-specific: which token env vars to read, how to
+ * parse the remote into a `RepoRef`, and which adapter to construct. This module
+ * captures the SHARED pipeline ONCE — the forge-specific steps are injected via a
+ * {@link ForgeCompositionBuilder} so BOTH commands route through one path instead
+ * of each hand-rolling the glue. Adding a third forge (Gitea) is a new builder,
+ * not a new branch.
+ *
+ * The actual idempotent upsert (find stale → delete → repost) lives inside the
+ * adapter + the forge-neutral {@link postSummaryComment}; this helper only
+ * orchestrates token-resolution → composition-build → post.
+ */
+import { postSummaryComment } from './pr-postback.js';
+/**
+ * Run the SHARED post-back pipeline for one forge.
+ *
+ * 1. resolve the token (forge-specific resolver). Missing ⇒ `missing-token`.
+ * 2. build the forge composition (adapter + ref) — async (GitLab project-id).
+ * 3. upsert the summary comment via the forge-neutral {@link postSummaryComment}.
+ *
+ * Throws on a post/build failure (the caller owns the blocking vs soft-fail exit
+ * policy). A missing token is returned as data, NOT thrown, so the caller prints
+ * forge-appropriate guidance.
+ */
+export async function composeForgePostback(input) {
+    const token = input.resolveToken();
+    if (!token)
+        return { kind: 'missing-token' };
+    const composition = await input.buildComposition(token, input.changeRequestNumber);
+    const result = await postSummaryComment(composition.adapter, composition.ref, input.body, input.marker);
+    return { kind: 'posted', result };
+}
+//# sourceMappingURL=forge-postback.js.map

package/dist/lib/forge-postback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge-postback.js","sourceRoot":"","sources":["../../src/lib/forge-postback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAuB,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AA6C3E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAyB;IAEzB,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAE7C,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,WAAW,CAAC,OAAO,EACnB,WAAW,CAAC,GAAG,EACf,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,CACb,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}

package/dist/lib/gitlab-api.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Minimal GitLab REST helpers for the CLI MR summary post-back (`ghagga review
+ * --mr N`).
+ *
+ * Scope (P4): parse the GitLab remote → group/project path, and the GitLab API
+ * error type. The fetch-backed note client lives in `cli-gitlab-client-port.ts`;
+ * this module owns the remote-URL parsing + the shared error class, mirroring
+ * `github-api.ts`'s `parseGitHubRemote` / `GitHubApiError`.
+ */
+/** Thrown by the CLI GitLab fetch calls; carries the HTTP status + raw body. */
+export declare class GitLabApiError extends Error {
+    readonly status: number;
+    readonly body: string;
+    constructor(message: string, status: number, body: string);
+}
+/** A parsed GitLab remote: the host (for the API base) + the project path. */
+export interface ParsedGitLabRemote {
+    /**
+     * The GitLab HOST (e.g. `gitlab.com` or `gitlab.example.com`). Drives the API
+     * base (`https://<host>/api/v4`). For SSH remotes that carry a non-default port
+     * (`ssh://git@host:2222/...`) the port is STRIPPED — the API is HTTPS on the
+     * web host, not the SSH port.
+     */
+    host: string;
+    /**
+     * The MUTABLE group/project path (e.g. `acme/widgets` or
+     * `group/subgroup/project`). Used to RESOLVE the canonical numeric project id
+     * (via `GET /projects/:url-encoded-path`), never as the identity key itself
+     * (R-GITLAB).
+     */
+    projectPath: string;
+}
+/**
+ * Parse the host + group/project path from a GitLab git remote URL.
+ *
+ * Supports HTTPS, SSH (git@), and ssh:// protocol formats against ANY GitLab
+ * host (gitlab.com OR a self-managed instance like `gitlab.example.com`). GitLab
+ * supports NESTED groups (e.g. `group/subgroup/project`), so the path segment is
+ * captured greedily (everything after the host, minus a trailing `.git`).
+ *
+ * DISAMBIGUATION: a generic git host cannot be told apart from GitHub by URL
+ * shape alone. The `--mr` flag is the EXPLICIT signal that the remote is GitLab;
+ * this parser is only reached on that path, so it accepts any host. It still
+ * rejects the well-known `github.com` host to catch an obvious `--mr` misuse on a
+ * GitHub remote early with a clear error.
+ *
+ * @throws if the remote is not a recognizable git remote URL, or is github.com.
+ */
+export declare function parseGitLabRemote(remoteUrl: string): ParsedGitLabRemote;
+//# sourceMappingURL=gitlab-api.d.ts.map

package/dist/lib/gitlab-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-api.d.ts","sourceRoot":"","sources":["../../src/lib/gitlab-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,gFAAgF;AAChF,qBAAa,cAAe,SAAQ,KAAK;aAGrB,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM;gBAF5B,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM;CAK/B;AAID,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAuBvE"}

package/dist/lib/gitlab-api.js

@@ -0,0 +1,75 @@
+/**
+ * Minimal GitLab REST helpers for the CLI MR summary post-back (`ghagga review
+ * --mr N`).
+ *
+ * Scope (P4): parse the GitLab remote → group/project path, and the GitLab API
+ * error type. The fetch-backed note client lives in `cli-gitlab-client-port.ts`;
+ * this module owns the remote-URL parsing + the shared error class, mirroring
+ * `github-api.ts`'s `parseGitHubRemote` / `GitHubApiError`.
+ */
+// ─── Error ──────────────────────────────────────────────────────
+/** Thrown by the CLI GitLab fetch calls; carries the HTTP status + raw body. */
+export class GitLabApiError extends Error {
+    status;
+    body;
+    constructor(message, status, body) {
+        super(message);
+        this.status = status;
+        this.body = body;
+        this.name = 'GitLabApiError';
+    }
+}
+/**
+ * Parse the host + group/project path from a GitLab git remote URL.
+ *
+ * Supports HTTPS, SSH (git@), and ssh:// protocol formats against ANY GitLab
+ * host (gitlab.com OR a self-managed instance like `gitlab.example.com`). GitLab
+ * supports NESTED groups (e.g. `group/subgroup/project`), so the path segment is
+ * captured greedily (everything after the host, minus a trailing `.git`).
+ *
+ * DISAMBIGUATION: a generic git host cannot be told apart from GitHub by URL
+ * shape alone. The `--mr` flag is the EXPLICIT signal that the remote is GitLab;
+ * this parser is only reached on that path, so it accepts any host. It still
+ * rejects the well-known `github.com` host to catch an obvious `--mr` misuse on a
+ * GitHub remote early with a clear error.
+ *
+ * @throws if the remote is not a recognizable git remote URL, or is github.com.
+ */
+export function parseGitLabRemote(remoteUrl) {
+    const trimmed = remoteUrl.trim();
+    // HTTPS: https://<host>/group/subgroup/repo.git
+    const httpsMatch = trimmed.match(/^https?:\/\/([^/]+)\/(.+?)(?:\.git)?$/);
+    if (httpsMatch?.[1] && httpsMatch[2]) {
+        return finalize(stripUserInfo(httpsMatch[1]), httpsMatch[2], trimmed);
+    }
+    // SSH protocol: ssh://git@<host>[:port]/group/subgroup/repo.git
+    // (checked BEFORE the scp form so the `:port` is not mis-parsed as the path).
+    const sshProtoMatch = trimmed.match(/^ssh:\/\/[^@\s]+@([^/]+)\/(.+?)(?:\.git)?$/);
+    if (sshProtoMatch?.[1] && sshProtoMatch[2]) {
+        return finalize(stripPort(sshProtoMatch[1]), sshProtoMatch[2], trimmed);
+    }
+    // SSH (scp-style): git@<host>:group/subgroup/repo.git — no `://` scheme.
+    const sshMatch = trimmed.match(/^[^@\s:]+@([^:/]+):(.+?)(?:\.git)?$/);
+    if (sshMatch?.[1] && sshMatch[2]) {
+        return finalize(sshMatch[1], sshMatch[2], trimmed);
+    }
+    throw new Error(`Not a GitLab remote URL: "${trimmed}"`);
+}
+/** Drop a `user:pass@` / `user@` prefix that may ride on an HTTPS host. */
+function stripUserInfo(host) {
+    const at = host.lastIndexOf('@');
+    return at === -1 ? host : host.slice(at + 1);
+}
+/** Drop a trailing `:port` from a host (the API rides on HTTPS, not the SSH port). */
+function stripPort(host) {
+    return host.replace(/:\d+$/, '');
+}
+/** Reject github.com (obvious --mr misuse) and assemble the parsed remote. */
+function finalize(host, projectPath, original) {
+    const cleanHost = stripPort(host);
+    if (cleanHost.toLowerCase() === 'github.com') {
+        throw new Error(`Not a GitLab remote URL (looks like GitHub): "${original}"`);
+    }
+    return { host: cleanHost, projectPath };
+}
+//# sourceMappingURL=gitlab-api.js.map

package/dist/lib/gitlab-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-api.js","sourceRoot":"","sources":["../../src/lib/gitlab-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,mEAAmE;AAEnE,gFAAgF;AAChF,MAAM,OAAO,cAAe,SAAQ,KAAK;IAGrB;IACA;IAHlB,YACE,OAAe,EACC,MAAc,EACd,IAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAsBD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAEjC,gDAAgD;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1E,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,gEAAgE;IAChE,8EAA8E;IAC9E,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAClF,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED,yEAAyE;IACzE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACtE,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,sFAAsF;AACtF,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,IAAY,EAAE,WAAmB,EAAE,QAAgB;IACnE,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,YAAY,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,GAAG,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AAC1C,CAAC"}

package/dist/lib/gitlab-api.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=gitlab-api.test.d.ts.map

package/dist/lib/gitlab-api.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-api.test.d.ts","sourceRoot":"","sources":["../../src/lib/gitlab-api.test.ts"],"names":[],"mappings":""}

package/dist/lib/gitlab-api.test.js

@@ -0,0 +1,79 @@
+import { describe, expect, it } from 'vitest';
+import { GitLabApiError, parseGitLabRemote } from './gitlab-api.js';
+describe('parseGitLabRemote (host + projectPath, any GitLab host)', () => {
+    it('parses an HTTPS gitlab.com remote', () => {
+        expect(parseGitLabRemote('https://gitlab.com/acme/widgets.git')).toEqual({
+            host: 'gitlab.com',
+            projectPath: 'acme/widgets',
+        });
+    });
+    it('parses an HTTPS remote without .git suffix', () => {
+        expect(parseGitLabRemote('https://gitlab.com/acme/widgets')).toEqual({
+            host: 'gitlab.com',
+            projectPath: 'acme/widgets',
+        });
+    });
+    it('parses an SSH (git@) remote', () => {
+        expect(parseGitLabRemote('git@gitlab.com:acme/widgets.git')).toEqual({
+            host: 'gitlab.com',
+            projectPath: 'acme/widgets',
+        });
+    });
+    it('parses an ssh:// protocol remote', () => {
+        expect(parseGitLabRemote('ssh://git@gitlab.com/acme/widgets.git')).toEqual({
+            host: 'gitlab.com',
+            projectPath: 'acme/widgets',
+        });
+    });
+    it('supports NESTED groups (group/subgroup/project)', () => {
+        expect(parseGitLabRemote('https://gitlab.com/group/subgroup/project.git')).toEqual({
+            host: 'gitlab.com',
+            projectPath: 'group/subgroup/project',
+        });
+        expect(parseGitLabRemote('git@gitlab.com:group/subgroup/project.git')).toEqual({
+            host: 'gitlab.com',
+            projectPath: 'group/subgroup/project',
+        });
+    });
+    // ── Self-hosted GitLab (FIX A) ──────────────────────────────────
+    it('parses a self-hosted HTTPS remote and returns its host', () => {
+        expect(parseGitLabRemote('https://gitlab.example.com/team/repo.git')).toEqual({
+            host: 'gitlab.example.com',
+            projectPath: 'team/repo',
+        });
+    });
+    it('parses a self-hosted SSH (git@) remote', () => {
+        expect(parseGitLabRemote('git@gitlab.example.com:team/repo.git')).toEqual({
+            host: 'gitlab.example.com',
+            projectPath: 'team/repo',
+        });
+    });
+    it('strips a port from an ssh:// self-hosted remote (API rides HTTPS)', () => {
+        expect(parseGitLabRemote('ssh://git@gitlab.example.com:2222/team/repo.git')).toEqual({
+            host: 'gitlab.example.com',
+            projectPath: 'team/repo',
+        });
+    });
+    it('strips userinfo from an HTTPS remote', () => {
+        expect(parseGitLabRemote('https://user:tok@gitlab.example.com/team/repo.git')).toEqual({
+            host: 'gitlab.example.com',
+            projectPath: 'team/repo',
+        });
+    });
+    it('throws on a github.com remote (obvious --mr misuse)', () => {
+        expect(() => parseGitLabRemote('https://github.com/acme/widgets.git')).toThrow(/Not a GitLab remote URL/);
+        expect(() => parseGitLabRemote('git@github.com:acme/widgets.git')).toThrow(/Not a GitLab remote URL/);
+    });
+    it('throws on an unrecognizable remote', () => {
+        expect(() => parseGitLabRemote('not-a-url')).toThrow(/Not a GitLab remote URL/);
+    });
+});
+describe('GitLabApiError', () => {
+    it('carries status + body', () => {
+        const err = new GitLabApiError('boom', 404, 'not found');
+        expect(err.status).toBe(404);
+        expect(err.body).toBe('not found');
+        expect(err.name).toBe('GitLabApiError');
+    });
+});
+//# sourceMappingURL=gitlab-api.test.js.map

package/dist/lib/gitlab-api.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-api.test.js","sourceRoot":"","sources":["../../src/lib/gitlab-api.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpE,QAAQ,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACvE,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,iBAAiB,CAAC,qCAAqC,CAAC,CAAC,CAAC,OAAO,CAAC;YACvE,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,cAAc;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,CAAC,CAAC,OAAO,CAAC;YACnE,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,cAAc;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,CAAC,CAAC,OAAO,CAAC;YACnE,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,cAAc;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,iBAAiB,CAAC,uCAAuC,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,cAAc;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,iBAAiB,CAAC,+CAA+C,CAAC,CAAC,CAAC,OAAO,CAAC;YACjF,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,wBAAwB;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,2CAA2C,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7E,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,wBAAwB;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mEAAmE;IAEnE,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,iBAAiB,CAAC,0CAA0C,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5E,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,iBAAiB,CAAC,sCAAsC,CAAC,CAAC,CAAC,OAAO,CAAC;YACxE,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,iBAAiB,CAAC,iDAAiD,CAAC,CAAC,CAAC,OAAO,CAAC;YACnF,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,iBAAiB,CAAC,mDAAmD,CAAC,CAAC,CAAC,OAAO,CAAC;YACrF,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,qCAAqC,CAAC,CAAC,CAAC,OAAO,CAC5E,yBAAyB,CAC1B,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,CAAC,CAAC,OAAO,CACxE,yBAAyB,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,GAAG,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/gitlab-e2e.manual.test.d.ts

@@ -0,0 +1,57 @@
+/**
+ * P4 task 4.3 — MANUAL / E2E acceptance gate for the GitLab MR summary post-back
+ * (R-GITLAB). This is the ONLY test in the suite that talks to a LIVE GitLab
+ * instance. It is `skipIf(!process.env.GITLAB_PAT)` so CI ALWAYS skips it — CI
+ * coverage of the GitLab REST surface lives in `cli-gitlab-client-port.test.ts`
+ * (fetch-mocked). This file is the real-instance sign-off the spec mandates.
+ *
+ * ENVIRONMENT VARIABLES
+ * ---------------------
+ * REQUIRED:
+ *   GITLAB_PAT          a Personal Access Token with the `api` scope.
+ *   GITLAB_E2E_PROJECT  the `group/project` path (nested groups OK,
+ *                       e.g. `group/subgroup/project`).
+ *   GITLAB_E2E_MR       the iid of an OPEN, throwaway MR in that project. The
+ *                       test posts and sweeps notes on it, so it MUST be a
+ *                       disposable MR you control — never a real review.
+ * OPTIONAL (self-hosted GitLab — gitlab.com is the default):
+ *   GITLAB_HOST         a host-only override (e.g. `gitlab.example.com`) when the
+ *                       API host differs from gitlab.com.
+ *   GITLAB_API_BASE     a FULL `.../api/v4` base override, required for a
+ *                       self-managed GitLab served under a subpath
+ *                       (e.g. `https://example.com/gitlab/api/v4`). Wins over
+ *                       GITLAB_HOST. Both are resolved through the SAME
+ *                       production helper (`resolveGitLabApiBase`) the `--mr`
+ *                       command path uses, so this test exercises the real
+ *                       self-hosted resolution — not a test-only shortcut.
+ *
+ * HOW TO RUN IT MANUALLY
+ * ----------------------
+ * Against a throwaway GitLab project + OPEN, disposable MR you control:
+ *
+ *   export GITLAB_PAT=glpat-xxxxxxxxxxxxxxxxxxxx   # PAT with `api` scope
+ *   export GITLAB_E2E_PROJECT=group/your-project   # group/project path
+ *   export GITLAB_E2E_MR=1                          # an OPEN, throwaway MR iid
+ *   # optional self-hosted: export GITLAB_HOST=gitlab.example.com
+ *   pnpm --filter ghagga exec vitest run src/lib/gitlab-e2e.manual.test.ts
+ *
+ * It will: resolve the numeric project id from the path, post (idempotently
+ * upsert) a marker-tagged summary note to the MR, assert the returned id is a
+ * positive number AND that the SPECIFIC note production just created
+ * (first.createdNativeId) is live on the MR carrying MARKER.html, then run a
+ * SECOND upsert and assert (a) the first note's id is in deletedNativeIds and
+ * (b) against the real MR state exactly ONE marker note remains and it is the
+ * second note — proving the find→delete→repost idempotency FOLD against the
+ * live API. An `afterAll` ATTEMPTS to leave zero leftover notes (best-effort; a
+ * transient GitLab failure may leave one, which the next run's sweep removes).
+ *
+ * MARKER OWNERSHIP NOTE: the marker is OWNED BY THE CALLER, not the adapter —
+ * the test renders it into `body` (see where `body` is built below). Production
+ * never injects it; `upsertSummaryComment` only USES `marker.html` to FILTER
+ * which notes to sweep (gitlab-forge-adapter.ts:182). So the anchored assertion
+ * below simply verifies that the note production created persists with the
+ * marker on live GitLab; the "exactly one marker note after the repost" check
+ * is what actually proves the idempotency fold against real MR state.
+ */
+export {};
+//# sourceMappingURL=gitlab-e2e.manual.test.d.ts.map

package/dist/lib/gitlab-e2e.manual.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-e2e.manual.test.d.ts","sourceRoot":"","sources":["../../src/lib/gitlab-e2e.manual.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG"}

package/dist/lib/gitlab-e2e.manual.test.js

@@ -0,0 +1,135 @@
+/**
+ * P4 task 4.3 — MANUAL / E2E acceptance gate for the GitLab MR summary post-back
+ * (R-GITLAB). This is the ONLY test in the suite that talks to a LIVE GitLab
+ * instance. It is `skipIf(!process.env.GITLAB_PAT)` so CI ALWAYS skips it — CI
+ * coverage of the GitLab REST surface lives in `cli-gitlab-client-port.test.ts`
+ * (fetch-mocked). This file is the real-instance sign-off the spec mandates.
+ *
+ * ENVIRONMENT VARIABLES
+ * ---------------------
+ * REQUIRED:
+ *   GITLAB_PAT          a Personal Access Token with the `api` scope.
+ *   GITLAB_E2E_PROJECT  the `group/project` path (nested groups OK,
+ *                       e.g. `group/subgroup/project`).
+ *   GITLAB_E2E_MR       the iid of an OPEN, throwaway MR in that project. The
+ *                       test posts and sweeps notes on it, so it MUST be a
+ *                       disposable MR you control — never a real review.
+ * OPTIONAL (self-hosted GitLab — gitlab.com is the default):
+ *   GITLAB_HOST         a host-only override (e.g. `gitlab.example.com`) when the
+ *                       API host differs from gitlab.com.
+ *   GITLAB_API_BASE     a FULL `.../api/v4` base override, required for a
+ *                       self-managed GitLab served under a subpath
+ *                       (e.g. `https://example.com/gitlab/api/v4`). Wins over
+ *                       GITLAB_HOST. Both are resolved through the SAME
+ *                       production helper (`resolveGitLabApiBase`) the `--mr`
+ *                       command path uses, so this test exercises the real
+ *                       self-hosted resolution — not a test-only shortcut.
+ *
+ * HOW TO RUN IT MANUALLY
+ * ----------------------
+ * Against a throwaway GitLab project + OPEN, disposable MR you control:
+ *
+ *   export GITLAB_PAT=glpat-xxxxxxxxxxxxxxxxxxxx   # PAT with `api` scope
+ *   export GITLAB_E2E_PROJECT=group/your-project   # group/project path
+ *   export GITLAB_E2E_MR=1                          # an OPEN, throwaway MR iid
+ *   # optional self-hosted: export GITLAB_HOST=gitlab.example.com
+ *   pnpm --filter ghagga exec vitest run src/lib/gitlab-e2e.manual.test.ts
+ *
+ * It will: resolve the numeric project id from the path, post (idempotently
+ * upsert) a marker-tagged summary note to the MR, assert the returned id is a
+ * positive number AND that the SPECIFIC note production just created
+ * (first.createdNativeId) is live on the MR carrying MARKER.html, then run a
+ * SECOND upsert and assert (a) the first note's id is in deletedNativeIds and
+ * (b) against the real MR state exactly ONE marker note remains and it is the
+ * second note — proving the find→delete→repost idempotency FOLD against the
+ * live API. An `afterAll` ATTEMPTS to leave zero leftover notes (best-effort; a
+ * transient GitLab failure may leave one, which the next run's sweep removes).
+ *
+ * MARKER OWNERSHIP NOTE: the marker is OWNED BY THE CALLER, not the adapter —
+ * the test renders it into `body` (see where `body` is built below). Production
+ * never injects it; `upsertSummaryComment` only USES `marker.html` to FILTER
+ * which notes to sweep (gitlab-forge-adapter.ts:182). So the anchored assertion
+ * below simply verifies that the note production created persists with the
+ * marker on live GitLab; the "exactly one marker note after the repost" check
+ * is what actually proves the idempotency fold against real MR state.
+ */
+import { GitLabForgeAdapter } from 'ghagga-forge';
+import { afterAll, describe, expect, it } from 'vitest';
+import { createCliGitLabClientPort, resolveGitLabApiBase, resolveGitLabProjectId, } from './cli-gitlab-client-port.js';
+import { postSummaryComment } from './pr-postback.js';
+const PAT = process.env.GITLAB_PAT;
+const PROJECT_PATH = process.env.GITLAB_E2E_PROJECT ?? '';
+const MR_IID = Number.parseInt(process.env.GITLAB_E2E_MR ?? '', 10);
+const MARKER = { html: '<!-- ghagga-review -->' };
+/**
+ * Resolve the API base the SAME way the production `--mr` command path does:
+ * feed gitlab.com as the remote-derived host and let GITLAB_HOST / GITLAB_API_BASE
+ * override it (resolveGitLabApiBase precedence). With no override this is exactly
+ * the gitlab.com default the back-compat callers use.
+ */
+const API_BASE = resolveGitLabApiBase('gitlab.com');
+describe('GitLab MR summary post-back — LIVE E2E (manual gate, R-GITLAB)', () => {
+    // Note ids created during the test, swept best-effort in afterAll so the
+    // throwaway MR is left clean. Only populated when the test actually runs
+    // (it is empty when skipped without a PAT, so afterAll is a no-op).
+    const createdNoteIds = [];
+    let client;
+    let projectId;
+    const token = PAT;
+    afterAll(async () => {
+        // Best-effort cleanup: tolerate a per-note failure (404 / already gone /
+        // transient) so a delete error never fails the suite. Skipped entirely when
+        // the test did not run (no client / projectId resolved → nothing created).
+        if (!PAT || client == null || projectId == null)
+            return;
+        for (const noteId of createdNoteIds) {
+            try {
+                await client.deleteMrNote(projectId, MR_IID, noteId, token);
+            }
+            catch {
+                // Tolerate: leaving a stray note is better than failing the suite on
+                // cleanup. The next manual run's sweep removes it anyway.
+            }
+        }
+    });
+    it.skipIf(!PAT)('resolves numeric project id + posts a marker-tagged note + sweeps the stale one on re-run', async () => {
+        expect(PROJECT_PATH, 'set GITLAB_E2E_PROJECT=group/project').not.toBe('');
+        expect(Number.isInteger(MR_IID) && MR_IID > 0, 'set GITLAB_E2E_MR=<open MR iid>').toBe(true);
+        projectId = await resolveGitLabProjectId(PROJECT_PATH, token, API_BASE);
+        expect(projectId).toMatch(/^\d+$/); // numeric project id (R-GITLAB nativeId)
+        client = createCliGitLabClientPort(API_BASE);
+        const adapter = new GitLabForgeAdapter({ client, token, projectId });
+        const ref = {
+            repo: { kind: 'gitlab', nativeId: projectId, path: PROJECT_PATH },
+            iid: MR_IID,
+        };
+        const body = `${MARKER.html}\n## GHAGGA E2E\nposted at ${new Date().toISOString()}`;
+        // First upsert: posts a fresh note.
+        const first = await postSummaryComment(adapter, ref, body, MARKER);
+        expect(first.createdNativeId).toBeGreaterThan(0);
+        createdNoteIds.push(first.createdNativeId);
+        // Marker persistence: anchor the assertion to the note PRODUCTION created
+        // (first.createdNativeId === GitLabNote.id), not to "any note that happens
+        // to carry the marker". This proves the specific note the upsert posted is
+        // live on the MR AND still carries the marker the adapter's sweep filters
+        // on (gitlab-forge-adapter.ts:182).
+        const afterFirst = await client.listMrNotes(projectId, MR_IID, token);
+        const createdNote = afterFirst.find((n) => n.id === first.createdNativeId);
+        expect(createdNote, 'the note created by upsert must appear in the live listing').toBeDefined();
+        expect(createdNote?.body.includes(MARKER.html), 'the created note must carry the marker the sweep filters on').toBe(true);
+        // Second upsert: must SWEEP the first (idempotency) and repost.
+        const second = await postSummaryComment(adapter, ref, body, MARKER);
+        expect(second.createdNativeId).toBeGreaterThan(0);
+        createdNoteIds.push(second.createdNativeId);
+        expect(second.deletedNativeIds).toContain(first.createdNativeId);
+        // Idempotency FOLD against the REAL MR state (not just the return value):
+        // after the repost exactly ONE marker note must remain, and it must be the
+        // note the SECOND upsert created. This is the invariant the sweep exists to
+        // hold — complements the `deletedNativeIds toContain first` return-value check.
+        const afterSecond = await client.listMrNotes(projectId, MR_IID, token);
+        const markerNotes = afterSecond.filter((n) => n.body.includes(MARKER.html));
+        expect(markerNotes.length, 'the sweep must leave exactly one note carrying the marker').toBe(1);
+        expect(markerNotes[0]?.id).toBe(second.createdNativeId);
+    }, 30_000);
+});
+//# sourceMappingURL=gitlab-e2e.manual.test.js.map

package/dist/lib/gitlab-e2e.manual.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-e2e.manual.test.js","sourceRoot":"","sources":["../../src/lib/gitlab-e2e.manual.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAEH,OAAO,EAAyB,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACxD,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AACnC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC;AAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AACpE,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;AAElD;;;;;GAKG;AACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;AAEpD,QAAQ,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC9E,yEAAyE;IACzE,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,MAAoC,CAAC;IACzC,IAAI,SAA6B,CAAC;IAClC,MAAM,KAAK,GAAG,GAAa,CAAC;IAE5B,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,yEAAyE;QACzE,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,CAAC,GAAG,IAAI,MAAM,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO;QACxD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,0DAA0D;YAC5D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CACb,2FAA2F,EAC3F,KAAK,IAAI,EAAE;QACT,MAAM,CAAC,YAAY,EAAE,sCAAsC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,iCAAiC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7F,SAAS,GAAG,MAAM,sBAAsB,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,yCAAyC;QAE7E,MAAM,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE;YAC1E,GAAG,EAAE,MAAM;SACZ,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,8BAA8B,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAEpF,oCAAoC;QACpC,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACjD,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAE3C,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,oCAAoC;QACpC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,eAAe,CAAC,CAAC;QAC3E,MAAM,CACJ,WAAW,EACX,4DAA4D,CAC7D,CAAC,WAAW,EAAE,CAAC;QAChB,MAAM,CACJ,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EACvC,6DAA6D,CAC9D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAClD,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAEjE,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,gFAAgF;QAChF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,2DAA2D,CAAC,CAAC,IAAI,CAC1F,CAAC,CACF,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1D,CAAC,EACD,MAAM,CACP,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/lib/gitlab-token.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Token resolution for the CLI GitLab MR post-back (`ghagga review --mr N`).
+ *
+ * Resolution order (CI-first, interactive fallback):
+ *   1. env GITLAB_TOKEN           — the GitLab CI / standard convention.
+ *   2. env GL_TOKEN               — the `glab` CLI / alternate convention.
+ *   3. a GitLab-SPECIFIC stored token (config `gitlabToken`), if one exists.
+ *
+ * CRITICAL: this does NOT fall back to the GitHub stored login token
+ * ({@link getStoredToken}). A GitHub token against the GitLab API yields a 401 /
+ * nonsense — a GitHub credential is NOT a GitLab credential. When no GitLab token
+ * resolves, return `null`; the caller turns that into an actionable error ONLY
+ * when `--mr` was actually requested (non-zero exit, P3/P4 exit semantics).
+ */
+/** Resolve a GitLab token: env GITLAB_TOKEN > GL_TOKEN > GitLab-specific stored. */
+export declare function resolveMrToken(env?: NodeJS.ProcessEnv, storedTokenFn?: () => string | null): string | null;
+//# sourceMappingURL=gitlab-token.d.ts.map

package/dist/lib/gitlab-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-token.d.ts","sourceRoot":"","sources":["../../src/lib/gitlab-token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,oFAAoF;AACpF,wBAAgB,cAAc,CAC5B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,aAAa,GAAE,MAAM,MAAM,GAAG,IAA2B,GACxD,MAAM,GAAG,IAAI,CAKf"}

package/dist/lib/gitlab-token.js

@@ -0,0 +1,24 @@
+/**
+ * Token resolution for the CLI GitLab MR post-back (`ghagga review --mr N`).
+ *
+ * Resolution order (CI-first, interactive fallback):
+ *   1. env GITLAB_TOKEN           — the GitLab CI / standard convention.
+ *   2. env GL_TOKEN               — the `glab` CLI / alternate convention.
+ *   3. a GitLab-SPECIFIC stored token (config `gitlabToken`), if one exists.
+ *
+ * CRITICAL: this does NOT fall back to the GitHub stored login token
+ * ({@link getStoredToken}). A GitHub token against the GitLab API yields a 401 /
+ * nonsense — a GitHub credential is NOT a GitLab credential. When no GitLab token
+ * resolves, return `null`; the caller turns that into an actionable error ONLY
+ * when `--mr` was actually requested (non-zero exit, P3/P4 exit semantics).
+ */
+import { getStoredGitLabToken } from './config.js';
+/** Resolve a GitLab token: env GITLAB_TOKEN > GL_TOKEN > GitLab-specific stored. */
+export function resolveMrToken(env = process.env, storedTokenFn = getStoredGitLabToken) {
+    const fromEnv = env.GITLAB_TOKEN?.trim() || env.GL_TOKEN?.trim();
+    if (fromEnv)
+        return fromEnv;
+    const stored = storedTokenFn();
+    return stored?.trim() ? stored : null;
+}
+//# sourceMappingURL=gitlab-token.js.map

package/dist/lib/gitlab-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-token.js","sourceRoot":"","sources":["../../src/lib/gitlab-token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAC5B,MAAyB,OAAO,CAAC,GAAG,EACpC,gBAAqC,oBAAoB;IAEzD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,OAAO,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC"}

package/dist/lib/gitlab-token.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=gitlab-token.test.d.ts.map

package/dist/lib/gitlab-token.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-token.test.d.ts","sourceRoot":"","sources":["../../src/lib/gitlab-token.test.ts"],"names":[],"mappings":""}