gitlab-ai-provider 6.9.0 → 6.9.1

package/CHANGELOG.md

@@ -2,6 +2,11 @@
 
 All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## <small>6.9.1 (2026-06-10)</small>
+
+- Merge branch 'fix-security-review-hardening' into 'main' ([81e627b](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/81e627b))
+- fix: harden security, auth reliability, and stream lifecycle across provider ([ba754bf](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/ba754bf))
+
 ## 6.9.0 (2026-06-10)
 
 - feat: add Claude Fable 5 model mapping ([0677b06](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/0677b06))

package/dist/index.d.mts

@@ -257,6 +257,8 @@ interface ModelCacheEntry {
     selectedModelRef: string | null;
     selectedModelName: string | null;
     updatedAt: string;
+    /** Timestamp of the last successful discovery write — drives the discovery TTL. */
+    discoveryUpdatedAt?: string;
 }
 declare class GitLabModelCache {
     private readonly filePath;
@@ -275,6 +277,7 @@ declare class GitLabModelCache {
     save(entry: ModelCacheEntry): void;
     /**
      * Returns true if the discovery data is missing or older than DISCOVERY_TTL_MS.
+     * Invalid or missing timestamps are treated as expired (fail closed).
      */
     isDiscoveryExpired(): boolean;
     /**
@@ -673,7 +676,7 @@ declare const AGENT_PRIVILEGES: {
     readonly RUN_MCP_TOOLS: 6;
 };
 /** Default agent privileges — matches gitlab-lsp defaults */
-declare const DEFAULT_AGENT_PRIVILEGES: (1 | 2 | 4 | 3 | 5 | 6)[];
+declare const DEFAULT_AGENT_PRIVILEGES: (1 | 2 | 3 | 4 | 5 | 6)[];
 /** Workflow execution environment */
 declare const WORKFLOW_ENVIRONMENT: "ide";
 
@@ -714,6 +717,12 @@ declare class GitLabWorkflowLanguageModel implements LanguageModelV3 {
     private readonly modelCache;
     private detectedProjectPath;
     private readonly sessionWorkflows;
+    private static readonly MAX_SESSION_WORKFLOWS;
+    /**
+     * Store a session workflow entry, refreshing its LRU position and
+     * evicting the oldest entries beyond MAX_SESSION_WORKFLOWS.
+     */
+    private setSessionWorkflow;
     private currentWorkflowId;
     private currentWorkflowDefinition;
     private persistedAgentEmitted;
@@ -1096,6 +1105,16 @@ declare class GitLabOpenAILanguageModel implements LanguageModelV3 {
      * These should NOT trigger token refresh and should be reported to the user.
      */
     private isContextOverflowError;
+    /**
+     * Build a descriptive error message from an OpenAI APIError.
+     *
+     * The AI Gateway proxy often returns errors with empty bodies, which the
+     * OpenAI SDK renders as "500 status code (no body)". This helper surfaces
+     * everything that is actually available: the parsed error body, the
+     * request ID for support, and — for 5xx responses with a large tool set —
+     * a hint that the gateway may be rejecting the request due to tool count.
+     */
+    private formatOpenAIError;
     private convertTools;
     private convertToolChoice;
     private convertPrompt;
@@ -1273,13 +1292,16 @@ interface RefreshTokenParams extends TokenExchangeParams {
 }
 declare class GitLabOAuthManager {
     private fetch;
+    private inFlightRefreshes;
     constructor(fetchImpl?: typeof fetch);
     /**
-     * Check if a token is expired
+     * Check if a token is expired.
+     * Invalid expiry values (NaN) are treated as expired (fail closed).
      */
     isTokenExpired(expiresAt: number): boolean;
     /**
-     * Check if a token needs refresh (within skew window)
+     * Check if a token needs refresh (within skew window).
+     * Invalid expiry values (NaN) are treated as needing refresh (fail closed).
      */
     needsRefresh(expiresAt: number): boolean;
     /**
@@ -1310,7 +1332,8 @@ declare class GitLabOAuthManager {
      */
     private exchangeToken;
     /**
-     * Create GitLabOAuthTokens from token response
+     * Create GitLabOAuthTokens from token response.
+     * Falls back to the previous refresh token when the server omits one.
      */
     private createTokensFromResponse;
     /**
@@ -1494,6 +1517,7 @@ declare class GitLabWorkflowClient {
     private heartbeatInterval;
     private eventCallback;
     private closed;
+    private closedEmitted;
     private lastSendTime;
     /**
      * Connect to the DWS WebSocket and start listening for events.
@@ -1513,6 +1537,9 @@ declare class GitLabWorkflowClient {
     sendActionResponse(requestID: string, response: string, error?: string | null): void;
     /**
      * Stop the workflow gracefully.
+     *
+     * Sends a stopWorkflow event, then closes the socket and clears all
+     * timers so no heartbeats keep firing if the server never closes.
      */
     stop(): void;
     /**
@@ -1531,6 +1558,20 @@ declare class GitLabWorkflowClient {
     private send;
     private sendHeartbeatIfNeeded;
     private emit;
+    /**
+     * Emit the 'closed' event exactly once.
+     */
+    private emitClosed;
+    /**
+     * Decode an incoming WebSocket frame to a UTF-8 string.
+     * Handles string, Buffer, ArrayBuffer and Buffer[] payloads.
+     */
+    private decodeMessageData;
+    /**
+     * Detach and close any existing socket before creating a new one.
+     * Prevents socket and interval leaks on repeated connect() calls.
+     */
+    private disposeSocket;
     /**
      * Start ws.ping() keepalive (45s interval).
      * Keeps TCP connection alive through proxies/load balancers.
@@ -1705,4 +1746,4 @@ interface WorkflowDiscoveryResult {
 }
 declare function discoverWorkflowModels(config: WorkflowDiscoveryConfig, options: WorkflowDiscoveryOptions): Promise<WorkflowDiscoveryResult>;
 
-export { AGENT_PRIVILEGES, type ActionResponsePayload, type AdditionalContext, type AiChatAvailableModels, type AiModel, type ApprovalDecision, BUNDLED_CLIENT_ID, CLIENT_VERSION, type ClientEvent, DEFAULT_AGENT_PRIVILEGES, DEFAULT_AI_GATEWAY_URL, DEFAULT_CLIENT_CAPABILITIES, DEFAULT_WORKFLOW_DEFINITION, type DirectAccessToken, type DiscoveredModels, type DiscoveredWorkflowModel, GITLAB_COM_URL, type GenerateTokenResponse, type GitLabAgenticOptions, type GitLabAnthropicConfig, GitLabAnthropicLanguageModel, GitLabDirectAccessClient, type GitLabDirectAccessConfig, GitLabError, type GitLabErrorOptions, GitLabModelCache, GitLabModelConfigRegistry, GitLabModelDiscovery, GitLabOAuthManager, type GitLabOAuthTokenResponse, type GitLabOAuthTokens, type GitLabOpenAIConfig, GitLabOpenAILanguageModel, type GitLabProject, GitLabProjectCache, GitLabProjectDetector, type GitLabProjectDetectorConfig, type GitLabProvider, type GitLabProviderSettings, GitLabWorkflowClient, type GitLabWorkflowClientConfig, GitLabWorkflowLanguageModel, type GitLabWorkflowLanguageModelConfig, type GitLabWorkflowOptions, GitLabWorkflowTokenClient, MODEL_ID_TO_ANTHROPIC_MODEL, MODEL_MAPPINGS, type McpToolDefinition, type ModelCacheEntry, type ModelConfig, type ModelConfigRegistryOptions, type ModelDiscoveryConfig, type ModelMapping, type ModelProvider, type NewCheckpoint, OAUTH_SCOPES, OPENCODE_GITLAB_AUTH_CLIENT_ID, type OpenAIApiType, type OpenCodeAuth, type OpenCodeAuthApi, type OpenCodeAuthOAuth, type RunMcpTool, type StartRequest, TOKEN_EXPIRY_SKEW_MS, VERSION, WORKFLOW_ENVIRONMENT, WS_HEARTBEAT_INTERVAL_MS, WS_KEEPALIVE_PING_INTERVAL_MS, type WorkflowAction, type WorkflowClientEvent, type WorkflowDiscoveryConfig, type WorkflowDiscoveryOptions, type WorkflowDiscoveryResult, type WorkflowStatus, type WorkflowToolExecutor, WorkflowType, type WorkflowWebSocketOptions, createGitLab, discoverWorkflowModels, getAnthropicModelForModelId, getModelMapping, getOpenAIApiType, getOpenAIModelForModelId, getProviderForModelId, getValidModelsForProvider, getWorkflowModelRef, gitlab, isResponsesApiModel, isWorkflowModel, parseModelsYml };
+export { AGENT_PRIVILEGES, type ActionResponsePayload, type AdditionalContext, type AiChatAvailableModels, type AiModel, type ApprovalDecision, BUNDLED_CLIENT_ID, CLIENT_VERSION, type ClientEvent, DEFAULT_AGENT_PRIVILEGES, DEFAULT_AI_GATEWAY_URL, DEFAULT_CLIENT_CAPABILITIES, DEFAULT_WORKFLOW_DEFINITION, type DirectAccessToken, type DiscoveredModels, type DiscoveredWorkflowModel, GITLAB_COM_URL, type GenerateTokenResponse, type GitLabAgenticOptions, type GitLabAnthropicConfig, GitLabAnthropicLanguageModel, GitLabDirectAccessClient, type GitLabDirectAccessConfig, GitLabError, type GitLabErrorOptions, GitLabModelCache, GitLabModelConfigRegistry, GitLabModelDiscovery, GitLabOAuthManager, type GitLabOAuthTokenResponse, type GitLabOAuthTokens, type GitLabOpenAIConfig, GitLabOpenAILanguageModel, type GitLabProject, GitLabProjectCache, GitLabProjectDetector, type GitLabProjectDetectorConfig, type GitLabProvider, type GitLabProviderSettings, GitLabWorkflowClient, type GitLabWorkflowClientConfig, GitLabWorkflowLanguageModel, type GitLabWorkflowLanguageModelConfig, type GitLabWorkflowOptions, GitLabWorkflowTokenClient, MODEL_ID_TO_ANTHROPIC_MODEL, MODEL_MAPPINGS, type McpToolDefinition, type ModelCacheEntry, type ModelConfig, type ModelConfigRegistryOptions, type ModelDiscoveryConfig, type ModelMapping, type ModelProvider, type NewCheckpoint, OAUTH_SCOPES, OPENCODE_GITLAB_AUTH_CLIENT_ID, type OpenAIApiType, type OpenCodeAuth, type OpenCodeAuthApi, type OpenCodeAuthOAuth, type RunMcpTool, type StartRequest, TOKEN_EXPIRY_SKEW_MS, VERSION, WORKFLOW_ENVIRONMENT, WS_HEARTBEAT_INTERVAL_MS, WS_KEEPALIVE_PING_INTERVAL_MS, type WorkflowAction, type WorkflowClientEvent, type WorkflowDiscoveryConfig, type WorkflowDiscoveryOptions, type WorkflowDiscoveryResult, type WorkflowStatus, type WorkflowToolExecutor, WorkflowType, type WorkflowWebSocketOptions, createGitLab, discoverWorkflowModels, getAnthropicModelForModelId, getModelMapping, getOpenAIApiType, getOpenAIModelForModelId, getProviderForModelId, getValidModelsForProvider, getWorkflowModelRef, gitlab, gitlabOAuthTokenResponseSchema, isResponsesApiModel, isWorkflowModel, parseModelsYml };

package/dist/index.d.ts

@@ -257,6 +257,8 @@ interface ModelCacheEntry {
     selectedModelRef: string | null;
     selectedModelName: string | null;
     updatedAt: string;
+    /** Timestamp of the last successful discovery write — drives the discovery TTL. */
+    discoveryUpdatedAt?: string;
 }
 declare class GitLabModelCache {
     private readonly filePath;
@@ -275,6 +277,7 @@ declare class GitLabModelCache {
     save(entry: ModelCacheEntry): void;
     /**
      * Returns true if the discovery data is missing or older than DISCOVERY_TTL_MS.
+     * Invalid or missing timestamps are treated as expired (fail closed).
      */
     isDiscoveryExpired(): boolean;
     /**
@@ -673,7 +676,7 @@ declare const AGENT_PRIVILEGES: {
     readonly RUN_MCP_TOOLS: 6;
 };
 /** Default agent privileges — matches gitlab-lsp defaults */
-declare const DEFAULT_AGENT_PRIVILEGES: (1 | 2 | 4 | 3 | 5 | 6)[];
+declare const DEFAULT_AGENT_PRIVILEGES: (1 | 2 | 3 | 4 | 5 | 6)[];
 /** Workflow execution environment */
 declare const WORKFLOW_ENVIRONMENT: "ide";
 
@@ -714,6 +717,12 @@ declare class GitLabWorkflowLanguageModel implements LanguageModelV3 {
     private readonly modelCache;
     private detectedProjectPath;
     private readonly sessionWorkflows;
+    private static readonly MAX_SESSION_WORKFLOWS;
+    /**
+     * Store a session workflow entry, refreshing its LRU position and
+     * evicting the oldest entries beyond MAX_SESSION_WORKFLOWS.
+     */
+    private setSessionWorkflow;
     private currentWorkflowId;
     private currentWorkflowDefinition;
     private persistedAgentEmitted;
@@ -1096,6 +1105,16 @@ declare class GitLabOpenAILanguageModel implements LanguageModelV3 {
      * These should NOT trigger token refresh and should be reported to the user.
      */
     private isContextOverflowError;
+    /**
+     * Build a descriptive error message from an OpenAI APIError.
+     *
+     * The AI Gateway proxy often returns errors with empty bodies, which the
+     * OpenAI SDK renders as "500 status code (no body)". This helper surfaces
+     * everything that is actually available: the parsed error body, the
+     * request ID for support, and — for 5xx responses with a large tool set —
+     * a hint that the gateway may be rejecting the request due to tool count.
+     */
+    private formatOpenAIError;
     private convertTools;
     private convertToolChoice;
     private convertPrompt;
@@ -1273,13 +1292,16 @@ interface RefreshTokenParams extends TokenExchangeParams {
 }
 declare class GitLabOAuthManager {
     private fetch;
+    private inFlightRefreshes;
     constructor(fetchImpl?: typeof fetch);
     /**
-     * Check if a token is expired
+     * Check if a token is expired.
+     * Invalid expiry values (NaN) are treated as expired (fail closed).
      */
     isTokenExpired(expiresAt: number): boolean;
     /**
-     * Check if a token needs refresh (within skew window)
+     * Check if a token needs refresh (within skew window).
+     * Invalid expiry values (NaN) are treated as needing refresh (fail closed).
      */
     needsRefresh(expiresAt: number): boolean;
     /**
@@ -1310,7 +1332,8 @@ declare class GitLabOAuthManager {
      */
     private exchangeToken;
     /**
-     * Create GitLabOAuthTokens from token response
+     * Create GitLabOAuthTokens from token response.
+     * Falls back to the previous refresh token when the server omits one.
      */
     private createTokensFromResponse;
     /**
@@ -1494,6 +1517,7 @@ declare class GitLabWorkflowClient {
     private heartbeatInterval;
     private eventCallback;
     private closed;
+    private closedEmitted;
     private lastSendTime;
     /**
      * Connect to the DWS WebSocket and start listening for events.
@@ -1513,6 +1537,9 @@ declare class GitLabWorkflowClient {
     sendActionResponse(requestID: string, response: string, error?: string | null): void;
     /**
      * Stop the workflow gracefully.
+     *
+     * Sends a stopWorkflow event, then closes the socket and clears all
+     * timers so no heartbeats keep firing if the server never closes.
      */
     stop(): void;
     /**
@@ -1531,6 +1558,20 @@ declare class GitLabWorkflowClient {
     private send;
     private sendHeartbeatIfNeeded;
     private emit;
+    /**
+     * Emit the 'closed' event exactly once.
+     */
+    private emitClosed;
+    /**
+     * Decode an incoming WebSocket frame to a UTF-8 string.
+     * Handles string, Buffer, ArrayBuffer and Buffer[] payloads.
+     */
+    private decodeMessageData;
+    /**
+     * Detach and close any existing socket before creating a new one.
+     * Prevents socket and interval leaks on repeated connect() calls.
+     */
+    private disposeSocket;
     /**
      * Start ws.ping() keepalive (45s interval).
      * Keeps TCP connection alive through proxies/load balancers.
@@ -1705,4 +1746,4 @@ interface WorkflowDiscoveryResult {
 }
 declare function discoverWorkflowModels(config: WorkflowDiscoveryConfig, options: WorkflowDiscoveryOptions): Promise<WorkflowDiscoveryResult>;
 
-export { AGENT_PRIVILEGES, type ActionResponsePayload, type AdditionalContext, type AiChatAvailableModels, type AiModel, type ApprovalDecision, BUNDLED_CLIENT_ID, CLIENT_VERSION, type ClientEvent, DEFAULT_AGENT_PRIVILEGES, DEFAULT_AI_GATEWAY_URL, DEFAULT_CLIENT_CAPABILITIES, DEFAULT_WORKFLOW_DEFINITION, type DirectAccessToken, type DiscoveredModels, type DiscoveredWorkflowModel, GITLAB_COM_URL, type GenerateTokenResponse, type GitLabAgenticOptions, type GitLabAnthropicConfig, GitLabAnthropicLanguageModel, GitLabDirectAccessClient, type GitLabDirectAccessConfig, GitLabError, type GitLabErrorOptions, GitLabModelCache, GitLabModelConfigRegistry, GitLabModelDiscovery, GitLabOAuthManager, type GitLabOAuthTokenResponse, type GitLabOAuthTokens, type GitLabOpenAIConfig, GitLabOpenAILanguageModel, type GitLabProject, GitLabProjectCache, GitLabProjectDetector, type GitLabProjectDetectorConfig, type GitLabProvider, type GitLabProviderSettings, GitLabWorkflowClient, type GitLabWorkflowClientConfig, GitLabWorkflowLanguageModel, type GitLabWorkflowLanguageModelConfig, type GitLabWorkflowOptions, GitLabWorkflowTokenClient, MODEL_ID_TO_ANTHROPIC_MODEL, MODEL_MAPPINGS, type McpToolDefinition, type ModelCacheEntry, type ModelConfig, type ModelConfigRegistryOptions, type ModelDiscoveryConfig, type ModelMapping, type ModelProvider, type NewCheckpoint, OAUTH_SCOPES, OPENCODE_GITLAB_AUTH_CLIENT_ID, type OpenAIApiType, type OpenCodeAuth, type OpenCodeAuthApi, type OpenCodeAuthOAuth, type RunMcpTool, type StartRequest, TOKEN_EXPIRY_SKEW_MS, VERSION, WORKFLOW_ENVIRONMENT, WS_HEARTBEAT_INTERVAL_MS, WS_KEEPALIVE_PING_INTERVAL_MS, type WorkflowAction, type WorkflowClientEvent, type WorkflowDiscoveryConfig, type WorkflowDiscoveryOptions, type WorkflowDiscoveryResult, type WorkflowStatus, type WorkflowToolExecutor, WorkflowType, type WorkflowWebSocketOptions, createGitLab, discoverWorkflowModels, getAnthropicModelForModelId, getModelMapping, getOpenAIApiType, getOpenAIModelForModelId, getProviderForModelId, getValidModelsForProvider, getWorkflowModelRef, gitlab, isResponsesApiModel, isWorkflowModel, parseModelsYml };
+export { AGENT_PRIVILEGES, type ActionResponsePayload, type AdditionalContext, type AiChatAvailableModels, type AiModel, type ApprovalDecision, BUNDLED_CLIENT_ID, CLIENT_VERSION, type ClientEvent, DEFAULT_AGENT_PRIVILEGES, DEFAULT_AI_GATEWAY_URL, DEFAULT_CLIENT_CAPABILITIES, DEFAULT_WORKFLOW_DEFINITION, type DirectAccessToken, type DiscoveredModels, type DiscoveredWorkflowModel, GITLAB_COM_URL, type GenerateTokenResponse, type GitLabAgenticOptions, type GitLabAnthropicConfig, GitLabAnthropicLanguageModel, GitLabDirectAccessClient, type GitLabDirectAccessConfig, GitLabError, type GitLabErrorOptions, GitLabModelCache, GitLabModelConfigRegistry, GitLabModelDiscovery, GitLabOAuthManager, type GitLabOAuthTokenResponse, type GitLabOAuthTokens, type GitLabOpenAIConfig, GitLabOpenAILanguageModel, type GitLabProject, GitLabProjectCache, GitLabProjectDetector, type GitLabProjectDetectorConfig, type GitLabProvider, type GitLabProviderSettings, GitLabWorkflowClient, type GitLabWorkflowClientConfig, GitLabWorkflowLanguageModel, type GitLabWorkflowLanguageModelConfig, type GitLabWorkflowOptions, GitLabWorkflowTokenClient, MODEL_ID_TO_ANTHROPIC_MODEL, MODEL_MAPPINGS, type McpToolDefinition, type ModelCacheEntry, type ModelConfig, type ModelConfigRegistryOptions, type ModelDiscoveryConfig, type ModelMapping, type ModelProvider, type NewCheckpoint, OAUTH_SCOPES, OPENCODE_GITLAB_AUTH_CLIENT_ID, type OpenAIApiType, type OpenCodeAuth, type OpenCodeAuthApi, type OpenCodeAuthOAuth, type RunMcpTool, type StartRequest, TOKEN_EXPIRY_SKEW_MS, VERSION, WORKFLOW_ENVIRONMENT, WS_HEARTBEAT_INTERVAL_MS, WS_KEEPALIVE_PING_INTERVAL_MS, type WorkflowAction, type WorkflowClientEvent, type WorkflowDiscoveryConfig, type WorkflowDiscoveryOptions, type WorkflowDiscoveryResult, type WorkflowStatus, type WorkflowToolExecutor, WorkflowType, type WorkflowWebSocketOptions, createGitLab, discoverWorkflowModels, getAnthropicModelForModelId, getModelMapping, getOpenAIApiType, getOpenAIModelForModelId, getProviderForModelId, getValidModelsForProvider, getWorkflowModelRef, gitlab, gitlabOAuthTokenResponseSchema, isResponsesApiModel, isWorkflowModel, parseModelsYml };