gitlab-mcp-test 6.62.1

package/dist/src/config/instances-schema.js

@@ -0,0 +1,196 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectionStatusSchema = exports.InstancesConfigFileSchema = exports.InstanceDefaultsSchema = exports.GitLabInstanceConfigSchema = exports.InstanceRateLimitConfigSchema = exports.InstanceOAuthConfigSchema = void 0;
+exports.parseInstanceUrlString = parseInstanceUrlString;
+exports.validateInstancesConfig = validateInstancesConfig;
+exports.applyInstanceDefaults = applyInstanceDefaults;
+const zod_1 = require("zod");
+const GitLabUrlSchema = zod_1.z
+    .string()
+    .url()
+    .transform(url => {
+    const parsed = new URL(url);
+    let path = parsed.pathname;
+    if (path === "/") {
+        path = "";
+    }
+    else {
+        if (path.endsWith("/")) {
+            path = path.slice(0, -1);
+        }
+        for (const apiSuffix of ["/api/v4", "/api/graphql"]) {
+            if (path.endsWith(apiSuffix)) {
+                path = path.slice(0, -apiSuffix.length);
+                if (path === "/") {
+                    path = "";
+                }
+                break;
+            }
+        }
+    }
+    return `${parsed.origin}${path}`;
+})
+    .describe("GitLab instance URL (e.g., https://gitlab.com or https://example.com/gitlab)");
+exports.InstanceOAuthConfigSchema = zod_1.z
+    .object({
+    clientId: zod_1.z.string().min(1).describe("OAuth Application ID"),
+    clientSecret: zod_1.z.string().optional().describe("OAuth Secret (only for confidential apps)"),
+    scopes: zod_1.z
+        .string()
+        .default("api read_user")
+        .describe("OAuth scopes to request (space-separated)"),
+})
+    .describe("OAuth configuration for this GitLab instance");
+exports.InstanceRateLimitConfigSchema = zod_1.z
+    .object({
+    maxConcurrent: zod_1.z
+        .number()
+        .int()
+        .positive()
+        .default(100)
+        .describe("Maximum parallel requests to this instance"),
+    queueSize: zod_1.z
+        .number()
+        .int()
+        .positive()
+        .default(500)
+        .describe("Maximum requests to queue when at capacity"),
+    queueTimeout: zod_1.z
+        .number()
+        .int()
+        .positive()
+        .default(60000)
+        .describe("Queue wait timeout in milliseconds"),
+})
+    .describe("Rate limiting configuration for this instance");
+exports.GitLabInstanceConfigSchema = zod_1.z
+    .object({
+    url: GitLabUrlSchema,
+    label: zod_1.z.string().optional().describe("Human-readable name for UI display"),
+    oauth: exports.InstanceOAuthConfigSchema.optional(),
+    rateLimit: exports.InstanceRateLimitConfigSchema.optional(),
+    insecureSkipVerify: zod_1.z
+        .boolean()
+        .default(false)
+        .describe("Skip TLS certificate verification (development only!)"),
+})
+    .describe("Configuration for a single GitLab instance");
+exports.InstanceDefaultsSchema = zod_1.z
+    .object({
+    rateLimit: exports.InstanceRateLimitConfigSchema.optional(),
+    oauth: zod_1.z
+        .object({
+        scopes: zod_1.z.string().default("api read_user").describe("Default OAuth scopes"),
+    })
+        .optional(),
+})
+    .describe("Default configuration applied to all instances");
+exports.InstancesConfigFileSchema = zod_1.z
+    .object({
+    instances: zod_1.z
+        .array(exports.GitLabInstanceConfigSchema)
+        .min(1)
+        .describe("List of GitLab instances to connect to"),
+    defaults: exports.InstanceDefaultsSchema.optional(),
+})
+    .describe("GitLab MCP instances configuration file");
+exports.ConnectionStatusSchema = zod_1.z.enum(["healthy", "degraded", "offline"]);
+function parseInstanceUrlString(urlString) {
+    const protocolSeparatorIndex = urlString.indexOf("://");
+    if (protocolSeparatorIndex === -1) {
+        throw new Error(`Invalid GitLab instance URL format: ${urlString}`);
+    }
+    const protocolEnd = protocolSeparatorIndex + 3;
+    const isPortNumber = (str) => {
+        if (!/^\d+$/.test(str))
+            return false;
+        const num = parseInt(str, 10);
+        return num >= 1 && num <= 65535;
+    };
+    let baseUrlString;
+    let clientId;
+    let clientSecret;
+    try {
+        baseUrlString = GitLabUrlSchema.parse(urlString);
+        clientId = undefined;
+        clientSecret = undefined;
+    }
+    catch {
+        baseUrlString = undefined;
+    }
+    if (!baseUrlString) {
+        const lastColonIndex = urlString.lastIndexOf(":");
+        if (lastColonIndex > protocolEnd) {
+            const lastSegment = urlString.slice(lastColonIndex + 1);
+            if (!lastSegment.includes("/") && !isPortNumber(lastSegment)) {
+                const secondLastColonIndex = urlString.lastIndexOf(":", lastColonIndex - 1);
+                if (secondLastColonIndex > protocolEnd) {
+                    const potentialClientId = urlString.slice(secondLastColonIndex + 1, lastColonIndex);
+                    if (!potentialClientId.includes("/") && !isPortNumber(potentialClientId)) {
+                        const potentialBaseUrl = urlString.slice(0, secondLastColonIndex);
+                        try {
+                            baseUrlString = GitLabUrlSchema.parse(potentialBaseUrl);
+                            clientId = potentialClientId;
+                            clientSecret = lastSegment;
+                        }
+                        catch {
+                        }
+                    }
+                }
+            }
+        }
+    }
+    if (!baseUrlString) {
+        const singleLastColonIndex = urlString.lastIndexOf(":");
+        if (singleLastColonIndex > protocolEnd) {
+            const potentialClientId = urlString.slice(singleLastColonIndex + 1);
+            if (!potentialClientId.includes("/") && !isPortNumber(potentialClientId)) {
+                const potentialBaseUrl = urlString.slice(0, singleLastColonIndex);
+                try {
+                    baseUrlString = GitLabUrlSchema.parse(potentialBaseUrl);
+                    clientId = potentialClientId;
+                    clientSecret = undefined;
+                }
+                catch {
+                }
+            }
+        }
+    }
+    if (!baseUrlString) {
+        throw new Error(`Invalid GitLab instance URL format: ${urlString}`);
+    }
+    const config = {
+        url: baseUrlString,
+        insecureSkipVerify: false,
+    };
+    if (clientId) {
+        config.oauth = {
+            clientId,
+            scopes: "api read_user",
+        };
+        if (clientSecret) {
+            config.oauth.clientSecret = clientSecret;
+        }
+    }
+    return config;
+}
+function validateInstancesConfig(config) {
+    return exports.InstancesConfigFileSchema.parse(config);
+}
+function applyInstanceDefaults(instance, defaults) {
+    if (!defaults) {
+        return instance;
+    }
+    const result = { ...instance };
+    if (defaults.rateLimit && !result.rateLimit) {
+        result.rateLimit = { ...defaults.rateLimit };
+    }
+    if (defaults.oauth?.scopes && result.oauth && !result.oauth.scopes) {
+        result.oauth = {
+            ...result.oauth,
+            scopes: defaults.oauth.scopes,
+        };
+    }
+    return result;
+}
+//# sourceMappingURL=instances-schema.js.map

package/dist/src/config/instances-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instances-schema.js","sourceRoot":"","sources":["../../../src/config/instances-schema.ts"],"names":[],"mappings":";;;AA2LA,wDAqGC;AAKD,0DAEC;AAKD,sDAwBC;AA7TD,6BAAwB;AAQxB,MAAM,eAAe,GAAG,OAAC;KACtB,MAAM,EAAE;KACR,GAAG,EAAE;KACL,SAAS,CAAC,GAAG,CAAC,EAAE;IACf,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAG5B,IAAI,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAG3B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;SAAM,CAAC;QAEN,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAGD,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACjB,IAAI,GAAG,EAAE,CAAC;gBACZ,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;AACnC,CAAC,CAAC;KACD,QAAQ,CAAC,8EAA8E,CAAC,CAAC;AAK/E,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAC5D,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACzF,MAAM,EAAE,OAAC;SACN,MAAM,EAAE;SACR,OAAO,CAAC,eAAe,CAAC;SACxB,QAAQ,CAAC,2CAA2C,CAAC;CACzD,CAAC;KACD,QAAQ,CAAC,8CAA8C,CAAC,CAAC;AAK/C,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC;SACb,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CAAC,4CAA4C,CAAC;IACzD,SAAS,EAAE,OAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CAAC,4CAA4C,CAAC;IACzD,YAAY,EAAE,OAAC;SACZ,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,oCAAoC,CAAC;CAClD,CAAC;KACD,QAAQ,CAAC,+CAA+C,CAAC,CAAC;AAKhD,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,GAAG,EAAE,eAAe;IACpB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAC3E,KAAK,EAAE,iCAAyB,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,qCAA6B,CAAC,QAAQ,EAAE;IACnD,kBAAkB,EAAE,OAAC;SAClB,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,uDAAuD,CAAC;CACrE,CAAC;KACD,QAAQ,CAAC,4CAA4C,CAAC,CAAC;AAK7C,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,SAAS,EAAE,qCAA6B,CAAC,QAAQ,EAAE;IACnD,KAAK,EAAE,OAAC;SACL,MAAM,CAAC;QACN,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KAC7E,CAAC;SACD,QAAQ,EAAE;CACd,CAAC;KACD,QAAQ,CAAC,gDAAgD,CAAC,CAAC;AAKjD,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC;SACT,KAAK,CAAC,kCAA0B,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,wCAAwC,CAAC;IACrD,QAAQ,EAAE,8BAAsB,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,QAAQ,CAAC,yCAAyC,CAAC,CAAC;AAK1C,QAAA,sBAAsB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAmDjF,SAAgB,sBAAsB,CAAC,SAAiB;IACtD,MAAM,sBAAsB,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,sBAAsB,KAAK,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,uCAAuC,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,WAAW,GAAG,sBAAsB,GAAG,CAAC,CAAC;IAG/C,MAAM,YAAY,GAAG,CAAC,GAAW,EAAW,EAAE;QAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9B,OAAO,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,KAAK,CAAC;IAClC,CAAC,CAAC;IAEF,IAAI,aAAiC,CAAC;IACtC,IAAI,QAA4B,CAAC;IACjC,IAAI,YAAgC,CAAC;IAGrC,IAAI,CAAC;QACH,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAEjD,QAAQ,GAAG,SAAS,CAAC;QACrB,YAAY,GAAG,SAAS,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QAEP,aAAa,GAAG,SAAS,CAAC;IAC5B,CAAC;IAGD,IAAI,CAAC,aAAa,EAAE,CAAC;QAEnB,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,cAAc,GAAG,WAAW,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;YAExD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7D,MAAM,oBAAoB,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC;gBAC5E,IAAI,oBAAoB,GAAG,WAAW,EAAE,CAAC;oBACvC,MAAM,iBAAiB,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;oBACpF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,CAAC;wBACzE,MAAM,gBAAgB,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;wBAClE,IAAI,CAAC;4BACH,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;4BACxD,QAAQ,GAAG,iBAAiB,CAAC;4BAC7B,YAAY,GAAG,WAAW,CAAC;wBAC7B,CAAC;wBAAC,MAAM,CAAC;wBAET,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAGD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,oBAAoB,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,oBAAoB,GAAG,WAAW,EAAE,CAAC;YACvC,MAAM,iBAAiB,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC;YAEpE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACzE,MAAM,gBAAgB,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;gBAClE,IAAI,CAAC;oBACH,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBACxD,QAAQ,GAAG,iBAAiB,CAAC;oBAC7B,YAAY,GAAG,SAAS,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;gBAET,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAKD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uCAAuC,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IAGD,MAAM,MAAM,GAAyB;QACnC,GAAG,EAAE,aAAa;QAClB,kBAAkB,EAAE,KAAK;KAC1B,CAAC;IAGF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,GAAG;YACb,QAAQ;YACR,MAAM,EAAE,eAAe;SACxB,CAAC;QAEF,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAKD,SAAgB,uBAAuB,CAAC,MAAe;IACrD,OAAO,iCAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAKD,SAAgB,qBAAqB,CACnC,QAA8B,EAC9B,QAA2B;IAE3B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAyB,EAAE,GAAG,QAAQ,EAAE,CAAC;IAGrD,IAAI,QAAQ,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC5C,MAAM,CAAC,SAAS,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAGD,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACnE,MAAM,CAAC,KAAK,GAAG;YACb,GAAG,MAAM,CAAC,KAAK;YACf,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;SAC9B,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/config.d.ts

@@ -0,0 +1,82 @@
+import type { Request } from "express";
+export declare const GITLAB_TOKEN: string | undefined;
+export declare const GITLAB_AUTH_COOKIE_PATH: string | undefined;
+export declare const IS_OLD: boolean;
+export declare const GITLAB_READ_ONLY_MODE: boolean;
+export declare const GITLAB_CROSS_REFS: boolean;
+export declare const GITLAB_DENIED_TOOLS_REGEX: RegExp | undefined;
+export declare const GITLAB_DENIED_ACTIONS: Map<string, Set<string>>;
+import type { LogFormat } from "./logging/types.js";
+export declare const LOG_FORMAT: LogFormat;
+export type { LogFormat };
+export interface LogFilterRule {
+    method?: string;
+    path?: string;
+    pathIsPrefix?: boolean;
+    userAgent?: string;
+}
+export declare const LOG_FILTER: LogFilterRule[];
+export declare function shouldSkipAccessLog(method: string, path: string, userAgent?: string): boolean;
+export declare function shouldSkipAccessLogRequest(req: Request): boolean;
+export type SchemaMode = "flat" | "discriminated" | "auto";
+export declare const GITLAB_SCHEMA_MODE: SchemaMode;
+export declare function detectSchemaMode(clientName?: string): "flat" | "discriminated";
+export declare const USE_GITLAB_WIKI: boolean;
+export declare const USE_MILESTONE: boolean;
+export declare const USE_PIPELINE: boolean;
+export declare const USE_WORKITEMS: boolean;
+export declare const USE_LABELS: boolean;
+export declare const USE_MRS: boolean;
+export declare const USE_FILES: boolean;
+export declare const USE_VARIABLES: boolean;
+export declare const USE_SNIPPETS: boolean;
+export declare const USE_WEBHOOKS: boolean;
+export declare const USE_INTEGRATIONS: boolean;
+export declare const USE_RELEASES: boolean;
+export declare const USE_REFS: boolean;
+export declare const USE_MEMBERS: boolean;
+export declare const USE_SEARCH: boolean;
+export declare const USE_ITERATIONS: boolean;
+export declare const HOST: string;
+export declare const PORT: string | number;
+export declare const SSL_CERT_PATH: string | undefined;
+export declare const SSL_KEY_PATH: string | undefined;
+export declare const SSL_CA_PATH: string | undefined;
+export declare const SSL_PASSPHRASE: string | undefined;
+export declare const TRUST_PROXY: string | undefined;
+export declare const SSE_HEARTBEAT_MS: number;
+export declare const HTTP_KEEPALIVE_TIMEOUT_MS: number;
+export declare const CONNECT_TIMEOUT_MS: number;
+export declare const HEADERS_TIMEOUT_MS: number;
+export declare const BODY_TIMEOUT_MS: number;
+export declare const HANDLER_TIMEOUT_MS: number;
+export declare const POOL_MAX_CONNECTIONS: number;
+export declare const API_RETRY_ENABLED: boolean;
+export declare const API_RETRY_MAX_ATTEMPTS: number;
+export declare const API_RETRY_BASE_DELAY_MS: number;
+export declare const API_RETRY_MAX_DELAY_MS: number;
+export declare const RATE_LIMIT_IP_ENABLED: boolean;
+export declare const RATE_LIMIT_IP_WINDOW_MS: number;
+export declare const RATE_LIMIT_IP_MAX_REQUESTS: number;
+export declare const RATE_LIMIT_SESSION_ENABLED: boolean;
+export declare const RATE_LIMIT_SESSION_WINDOW_MS: number;
+export declare const RATE_LIMIT_SESSION_MAX_REQUESTS: number;
+export declare const SKIP_TLS_VERIFY: boolean;
+export declare const DASHBOARD_ENABLED: boolean;
+export declare const HTTP_PROXY: string | undefined;
+export declare const HTTPS_PROXY: string | undefined;
+export declare const NODE_TLS_REJECT_UNAUTHORIZED: string | undefined;
+export declare const GITLAB_CA_CERT_PATH: string | undefined;
+export declare const GITLAB_BASE_URL: string;
+export declare const GITLAB_API_URL: string;
+export declare const GITLAB_PROJECT_ID: string | undefined;
+export declare const GITLAB_ALLOWED_PROJECT_IDS: string[];
+export declare function getEffectiveProjectId(projectId: string): string;
+declare let packageName: string;
+declare let packageVersion: string;
+export { packageName, packageVersion };
+export declare function getToolDescriptionOverrides(): Map<string, string>;
+export declare function getActionDescriptionOverrides(): Map<string, string>;
+export declare function getParamDescriptionOverrides(): Map<string, string>;
+export declare function isActionDenied(toolName: string, actionName: string): boolean;
+export declare function getAllowedActions(toolName: string, allActions: string[]): string[];

package/dist/src/config.js

@@ -0,0 +1,379 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RATE_LIMIT_SESSION_MAX_REQUESTS = exports.RATE_LIMIT_SESSION_WINDOW_MS = exports.RATE_LIMIT_SESSION_ENABLED = exports.RATE_LIMIT_IP_MAX_REQUESTS = exports.RATE_LIMIT_IP_WINDOW_MS = exports.RATE_LIMIT_IP_ENABLED = exports.API_RETRY_MAX_DELAY_MS = exports.API_RETRY_BASE_DELAY_MS = exports.API_RETRY_MAX_ATTEMPTS = exports.API_RETRY_ENABLED = exports.POOL_MAX_CONNECTIONS = exports.HANDLER_TIMEOUT_MS = exports.BODY_TIMEOUT_MS = exports.HEADERS_TIMEOUT_MS = exports.CONNECT_TIMEOUT_MS = exports.HTTP_KEEPALIVE_TIMEOUT_MS = exports.SSE_HEARTBEAT_MS = exports.TRUST_PROXY = exports.SSL_PASSPHRASE = exports.SSL_CA_PATH = exports.SSL_KEY_PATH = exports.SSL_CERT_PATH = exports.PORT = exports.HOST = exports.USE_ITERATIONS = exports.USE_SEARCH = exports.USE_MEMBERS = exports.USE_REFS = exports.USE_RELEASES = exports.USE_INTEGRATIONS = exports.USE_WEBHOOKS = exports.USE_SNIPPETS = exports.USE_VARIABLES = exports.USE_FILES = exports.USE_MRS = exports.USE_LABELS = exports.USE_WORKITEMS = exports.USE_PIPELINE = exports.USE_MILESTONE = exports.USE_GITLAB_WIKI = exports.GITLAB_SCHEMA_MODE = exports.LOG_FILTER = exports.LOG_FORMAT = exports.GITLAB_DENIED_ACTIONS = exports.GITLAB_DENIED_TOOLS_REGEX = exports.GITLAB_CROSS_REFS = exports.GITLAB_READ_ONLY_MODE = exports.IS_OLD = exports.GITLAB_AUTH_COOKIE_PATH = exports.GITLAB_TOKEN = void 0;
+exports.packageVersion = exports.packageName = exports.GITLAB_ALLOWED_PROJECT_IDS = exports.GITLAB_PROJECT_ID = exports.GITLAB_API_URL = exports.GITLAB_BASE_URL = exports.GITLAB_CA_CERT_PATH = exports.NODE_TLS_REJECT_UNAUTHORIZED = exports.HTTPS_PROXY = exports.HTTP_PROXY = exports.DASHBOARD_ENABLED = exports.SKIP_TLS_VERIFY = void 0;
+exports.shouldSkipAccessLog = shouldSkipAccessLog;
+exports.shouldSkipAccessLogRequest = shouldSkipAccessLogRequest;
+exports.detectSchemaMode = detectSchemaMode;
+exports.getEffectiveProjectId = getEffectiveProjectId;
+exports.getToolDescriptionOverrides = getToolDescriptionOverrides;
+exports.getActionDescriptionOverrides = getActionDescriptionOverrides;
+exports.getParamDescriptionOverrides = getParamDescriptionOverrides;
+exports.isActionDenied = isActionDenied;
+exports.getAllowedActions = getAllowedActions;
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
+const zod_1 = require("zod");
+const packageJsonPath = path.resolve(process.cwd(), "package.json");
+exports.GITLAB_TOKEN = process.env.GITLAB_TOKEN;
+exports.GITLAB_AUTH_COOKIE_PATH = process.env.GITLAB_AUTH_COOKIE_PATH;
+exports.IS_OLD = process.env.GITLAB_IS_OLD === "true";
+exports.GITLAB_READ_ONLY_MODE = process.env.GITLAB_READ_ONLY_MODE === "true";
+exports.GITLAB_CROSS_REFS = process.env.GITLAB_CROSS_REFS !== "false";
+exports.GITLAB_DENIED_TOOLS_REGEX = process.env.GITLAB_DENIED_TOOLS_REGEX
+    ? new RegExp(process.env.GITLAB_DENIED_TOOLS_REGEX)
+    : undefined;
+function parseDeniedActions(envValue) {
+    const deniedActions = new Map();
+    if (!envValue) {
+        return deniedActions;
+    }
+    const pairs = envValue
+        .split(",")
+        .map(s => s.trim())
+        .filter(Boolean);
+    for (const pair of pairs) {
+        const colonIndex = pair.indexOf(":");
+        if (colonIndex === -1) {
+            continue;
+        }
+        const toolName = pair.substring(0, colonIndex).toLowerCase();
+        const actionName = pair.substring(colonIndex + 1).toLowerCase();
+        if (!toolName || !actionName) {
+            continue;
+        }
+        let actionSet = deniedActions.get(toolName);
+        if (!actionSet) {
+            actionSet = new Set();
+            deniedActions.set(toolName, actionSet);
+        }
+        actionSet.add(actionName);
+    }
+    return deniedActions;
+}
+exports.GITLAB_DENIED_ACTIONS = parseDeniedActions(process.env.GITLAB_DENIED_ACTIONS);
+function parseLogFormat(value) {
+    const format = value?.toLowerCase();
+    if (format === "verbose") {
+        return "verbose";
+    }
+    return "condensed";
+}
+exports.LOG_FORMAT = parseLogFormat(process.env.LOG_FORMAT);
+const LogFilterRuleSchema = zod_1.z
+    .object({
+    method: zod_1.z
+        .string()
+        .optional()
+        .describe("HTTP method to match (exact, case-insensitive). If omitted, matches any method."),
+    path: zod_1.z
+        .string()
+        .optional()
+        .describe("Request path to match. Exact match, or prefix match if ends with '*'. If omitted, matches any path."),
+    userAgent: zod_1.z
+        .string()
+        .optional()
+        .describe("Substring to match in User-Agent header (case-insensitive). If omitted, matches any User-Agent."),
+})
+    .describe("Filter rule for skipping access log entries. All specified conditions must match.");
+const LogFilterSchema = zod_1.z.array(LogFilterRuleSchema).describe("Array of log filter rules");
+function parseLogFilter(envValue) {
+    if (!envValue || envValue.trim() === "") {
+        return [];
+    }
+    try {
+        const parsed = JSON.parse(envValue);
+        const validated = LogFilterSchema.parse(parsed);
+        return validated.map(rule => {
+            const result = {};
+            if (rule.method) {
+                result.method = rule.method.toLowerCase();
+            }
+            if (rule.path) {
+                if (rule.path.endsWith("*")) {
+                    result.path = rule.path.slice(0, -1);
+                    result.pathIsPrefix = true;
+                }
+                else {
+                    result.path = rule.path;
+                    result.pathIsPrefix = false;
+                }
+            }
+            if (rule.userAgent) {
+                result.userAgent = rule.userAgent.toLowerCase();
+            }
+            return result;
+        });
+    }
+    catch (error) {
+        console.warn(`[gitlab-mcp] Invalid LOG_FILTER format, logging all requests. Error: ${error instanceof Error ? error.message : String(error)}`);
+        return [];
+    }
+}
+const DEFAULT_LOG_FILTER = [
+    { method: "get", path: "/", pathIsPrefix: false, userAgent: "claude-code" },
+];
+exports.LOG_FILTER = process.env.LOG_FILTER?.trim()
+    ? parseLogFilter(process.env.LOG_FILTER)
+    : DEFAULT_LOG_FILTER;
+function shouldSkipAccessLog(method, path, userAgent) {
+    if (exports.LOG_FILTER.length === 0) {
+        return false;
+    }
+    const methodLower = method.toLowerCase();
+    const userAgentLower = userAgent?.toLowerCase() ?? "";
+    return exports.LOG_FILTER.some(rule => {
+        if (rule.method && rule.method !== methodLower) {
+            return false;
+        }
+        if (rule.path !== undefined) {
+            if (rule.pathIsPrefix) {
+                if (!path.startsWith(rule.path)) {
+                    return false;
+                }
+            }
+            else {
+                if (path !== rule.path) {
+                    return false;
+                }
+            }
+        }
+        if (rule.userAgent && !userAgentLower.includes(rule.userAgent)) {
+            return false;
+        }
+        return true;
+    });
+}
+function shouldSkipAccessLogRequest(req) {
+    return shouldSkipAccessLog(req.method, req.path, req.headers["user-agent"]);
+}
+function parseSchemaMode(value) {
+    const mode = value?.toLowerCase();
+    if (mode === "discriminated") {
+        return "discriminated";
+    }
+    if (mode === "auto") {
+        return "auto";
+    }
+    return "flat";
+}
+exports.GITLAB_SCHEMA_MODE = parseSchemaMode(process.env.GITLAB_SCHEMA_MODE);
+function detectSchemaMode(clientName) {
+    const name = clientName?.toLowerCase() ?? "";
+    if (name === "claude" ||
+        name.startsWith("claude-") ||
+        name === "cursor" ||
+        name.startsWith("cursor-")) {
+        return "flat";
+    }
+    if (name === "inspector" ||
+        name.startsWith("inspector-") ||
+        name === "mcp-inspector" ||
+        name.startsWith("mcp-inspector-")) {
+        return "discriminated";
+    }
+    return "flat";
+}
+exports.USE_GITLAB_WIKI = process.env.USE_GITLAB_WIKI !== "false";
+exports.USE_MILESTONE = process.env.USE_MILESTONE !== "false";
+exports.USE_PIPELINE = process.env.USE_PIPELINE !== "false";
+exports.USE_WORKITEMS = process.env.USE_WORKITEMS !== "false";
+exports.USE_LABELS = process.env.USE_LABELS !== "false";
+exports.USE_MRS = process.env.USE_MRS !== "false";
+exports.USE_FILES = process.env.USE_FILES !== "false";
+exports.USE_VARIABLES = process.env.USE_VARIABLES !== "false";
+exports.USE_SNIPPETS = process.env.USE_SNIPPETS !== "false";
+exports.USE_WEBHOOKS = process.env.USE_WEBHOOKS !== "false";
+exports.USE_INTEGRATIONS = process.env.USE_INTEGRATIONS !== "false";
+exports.USE_RELEASES = process.env.USE_RELEASES !== "false";
+exports.USE_REFS = process.env.USE_REFS !== "false";
+exports.USE_MEMBERS = process.env.USE_MEMBERS !== "false";
+exports.USE_SEARCH = process.env.USE_SEARCH !== "false";
+exports.USE_ITERATIONS = process.env.USE_ITERATIONS !== "false";
+exports.HOST = process.env.HOST ?? "127.0.0.1";
+exports.PORT = process.env.PORT ?? 3002;
+exports.SSL_CERT_PATH = process.env.SSL_CERT_PATH;
+exports.SSL_KEY_PATH = process.env.SSL_KEY_PATH;
+exports.SSL_CA_PATH = process.env.SSL_CA_PATH;
+exports.SSL_PASSPHRASE = process.env.SSL_PASSPHRASE;
+exports.TRUST_PROXY = process.env.TRUST_PROXY;
+const parsedHeartbeatMs = parseInt(process.env.GITLAB_SSE_HEARTBEAT_MS ?? "30000", 10);
+exports.SSE_HEARTBEAT_MS = Number.isFinite(parsedHeartbeatMs) && parsedHeartbeatMs > 0 ? parsedHeartbeatMs : 30000;
+const parsedKeepAliveTimeout = parseInt(process.env.GITLAB_HTTP_KEEPALIVE_TIMEOUT_MS ?? "620000", 10);
+exports.HTTP_KEEPALIVE_TIMEOUT_MS = Number.isFinite(parsedKeepAliveTimeout) && parsedKeepAliveTimeout > 0
+    ? parsedKeepAliveTimeout
+    : 620000;
+const parsedConnectTimeoutMs = parseInt(process.env.GITLAB_API_CONNECT_TIMEOUT_MS ?? "2000", 10);
+exports.CONNECT_TIMEOUT_MS = Number.isFinite(parsedConnectTimeoutMs) && parsedConnectTimeoutMs > 0
+    ? parsedConnectTimeoutMs
+    : 2000;
+const parsedHeadersTimeoutMs = parseInt(process.env.GITLAB_API_HEADERS_TIMEOUT_MS ?? "10000", 10);
+exports.HEADERS_TIMEOUT_MS = Number.isFinite(parsedHeadersTimeoutMs) && parsedHeadersTimeoutMs > 0
+    ? parsedHeadersTimeoutMs
+    : 10000;
+const parsedBodyTimeoutMs = parseInt(process.env.GITLAB_API_BODY_TIMEOUT_MS ?? "30000", 10);
+exports.BODY_TIMEOUT_MS = Number.isFinite(parsedBodyTimeoutMs) && parsedBodyTimeoutMs > 0 ? parsedBodyTimeoutMs : 30000;
+const parsedHandlerTimeoutMs = parseInt(process.env.GITLAB_TOOL_TIMEOUT_MS ?? "120000", 10);
+exports.HANDLER_TIMEOUT_MS = Number.isFinite(parsedHandlerTimeoutMs) && parsedHandlerTimeoutMs > 0
+    ? parsedHandlerTimeoutMs
+    : 120000;
+const parsedPoolMaxConnections = parseInt(process.env.GITLAB_POOL_MAX_CONNECTIONS ?? "25", 10);
+exports.POOL_MAX_CONNECTIONS = Number.isFinite(parsedPoolMaxConnections) && parsedPoolMaxConnections > 0
+    ? parsedPoolMaxConnections
+    : 25;
+exports.API_RETRY_ENABLED = process.env.GITLAB_API_RETRY_ENABLED !== "false";
+const parsedMaxAttempts = parseInt(process.env.GITLAB_API_RETRY_MAX_ATTEMPTS ?? "3", 10);
+exports.API_RETRY_MAX_ATTEMPTS = Number.isFinite(parsedMaxAttempts) && parsedMaxAttempts >= 0 ? parsedMaxAttempts : 3;
+const parsedBaseDelay = parseInt(process.env.GITLAB_API_RETRY_BASE_DELAY_MS ?? "1000", 10);
+exports.API_RETRY_BASE_DELAY_MS = Number.isFinite(parsedBaseDelay) && parsedBaseDelay > 0 ? parsedBaseDelay : 1000;
+const parsedMaxDelay = parseInt(process.env.GITLAB_API_RETRY_MAX_DELAY_MS ?? "4000", 10);
+exports.API_RETRY_MAX_DELAY_MS = Number.isFinite(parsedMaxDelay) && parsedMaxDelay > 0 ? parsedMaxDelay : 4000;
+exports.RATE_LIMIT_IP_ENABLED = process.env.RATE_LIMIT_IP_ENABLED !== "false";
+exports.RATE_LIMIT_IP_WINDOW_MS = parseInt(process.env.RATE_LIMIT_IP_WINDOW_MS ?? "60000", 10);
+exports.RATE_LIMIT_IP_MAX_REQUESTS = parseInt(process.env.RATE_LIMIT_IP_MAX_REQUESTS ?? "100", 10);
+exports.RATE_LIMIT_SESSION_ENABLED = process.env.RATE_LIMIT_SESSION_ENABLED === "true";
+exports.RATE_LIMIT_SESSION_WINDOW_MS = parseInt(process.env.RATE_LIMIT_SESSION_WINDOW_MS ?? "60000", 10);
+exports.RATE_LIMIT_SESSION_MAX_REQUESTS = parseInt(process.env.RATE_LIMIT_SESSION_MAX_REQUESTS ?? "300", 10);
+exports.SKIP_TLS_VERIFY = process.env.SKIP_TLS_VERIFY === "true";
+exports.DASHBOARD_ENABLED = process.env.DASHBOARD_ENABLED !== "false";
+exports.HTTP_PROXY = process.env.HTTP_PROXY;
+exports.HTTPS_PROXY = process.env.HTTPS_PROXY;
+exports.NODE_TLS_REJECT_UNAUTHORIZED = process.env.NODE_TLS_REJECT_UNAUTHORIZED;
+exports.GITLAB_CA_CERT_PATH = process.env.GITLAB_CA_CERT_PATH;
+function normalizeGitLabBaseUrl(url) {
+    if (!url) {
+        return "https://gitlab.com";
+    }
+    if (url.endsWith("/")) {
+        url = url.slice(0, -1);
+    }
+    if (url.endsWith("/api/v4")) {
+        url = url.slice(0, -7);
+    }
+    return url;
+}
+exports.GITLAB_BASE_URL = normalizeGitLabBaseUrl(process.env.GITLAB_API_URL ?? "");
+exports.GITLAB_API_URL = `${exports.GITLAB_BASE_URL}/api/v4`;
+exports.GITLAB_PROJECT_ID = process.env.GITLAB_PROJECT_ID;
+exports.GITLAB_ALLOWED_PROJECT_IDS = process.env.GITLAB_ALLOWED_PROJECT_IDS?.split(",").map(id => id.trim()) ?? [];
+function getEffectiveProjectId(projectId) {
+    if (exports.GITLAB_PROJECT_ID) {
+        return exports.GITLAB_PROJECT_ID;
+    }
+    if (exports.GITLAB_ALLOWED_PROJECT_IDS.length > 0) {
+        if (!exports.GITLAB_ALLOWED_PROJECT_IDS.includes(projectId)) {
+            throw new Error(`Project ID ${projectId} is not allowed. Allowed project IDs: ${exports.GITLAB_ALLOWED_PROJECT_IDS.join(", ")}`);
+        }
+    }
+    return projectId;
+}
+let packageName = "gitlab-mcp";
+exports.packageName = packageName;
+let packageVersion = "unknown";
+exports.packageVersion = packageVersion;
+try {
+    const packageInfo = JSON.parse(fs.readFileSync(packageJsonPath, "utf8"));
+    exports.packageName = packageName = packageInfo.name ?? packageName;
+    exports.packageVersion = packageVersion = packageInfo.version ?? packageVersion;
+}
+catch {
+}
+function getToolDescriptionOverrides() {
+    const overrides = new Map();
+    const prefix = "GITLAB_TOOL_";
+    for (const [key, value] of Object.entries(process.env)) {
+        if (key.startsWith(prefix) && value) {
+            const toolName = key.substring(prefix.length).toLowerCase();
+            overrides.set(toolName, value);
+        }
+    }
+    return overrides;
+}
+function getActionDescriptionOverrides() {
+    const overrides = new Map();
+    const prefix = "GITLAB_ACTION_";
+    for (const [key, value] of Object.entries(process.env)) {
+        if (key.startsWith(prefix) && value) {
+            const rest = key.substring(prefix.length).toLowerCase();
+            const lastUnderscoreIndex = rest.lastIndexOf("_");
+            if (lastUnderscoreIndex === -1) {
+                continue;
+            }
+            const toolName = rest.substring(0, lastUnderscoreIndex);
+            const actionName = rest.substring(lastUnderscoreIndex + 1);
+            if (!toolName || !actionName) {
+                continue;
+            }
+            overrides.set(`${toolName}:${actionName}`, value);
+        }
+    }
+    return overrides;
+}
+function getParamDescriptionOverrides() {
+    const overrides = new Map();
+    const prefix = "GITLAB_PARAM_";
+    for (const [key, value] of Object.entries(process.env)) {
+        if (key.startsWith(prefix) && value) {
+            const rest = key.substring(prefix.length).toLowerCase();
+            const lastUnderscoreIndex = rest.lastIndexOf("_");
+            if (lastUnderscoreIndex === -1) {
+                continue;
+            }
+            const toolName = rest.substring(0, lastUnderscoreIndex);
+            const paramName = rest.substring(lastUnderscoreIndex + 1);
+            if (!toolName || !paramName) {
+                continue;
+            }
+            overrides.set(`${toolName}:${paramName}`, value);
+        }
+    }
+    return overrides;
+}
+function isActionDenied(toolName, actionName) {
+    const deniedActions = exports.GITLAB_DENIED_ACTIONS.get(toolName.toLowerCase());
+    if (!deniedActions) {
+        return false;
+    }
+    return deniedActions.has(actionName.toLowerCase());
+}
+function getAllowedActions(toolName, allActions) {
+    const deniedActions = exports.GITLAB_DENIED_ACTIONS.get(toolName.toLowerCase());
+    if (!deniedActions || deniedActions.size === 0) {
+        return allActions;
+    }
+    return allActions.filter(action => !deniedActions.has(action.toLowerCase()));
+}
+//# sourceMappingURL=config.js.map