gitlab-mcp-test 6.62.1

package/dist/src/profiles/builtin/code-reviewer.yaml

@@ -0,0 +1,41 @@
+# Code Reviewer preset - code review focused workflow
+#
+# Optimized for reviewing merge requests:
+# - Full access to MR browsing, discussions, and approvals
+# - Read access to code, pipelines, and issues for context
+# - No access to admin features or infrastructure
+#
+# NOTE: This is a PRESET - host/auth come from environment variables.
+
+description: "Code Reviewer - MR discussions, approvals, code context"
+
+read_only: false
+
+features:
+  wiki: false      # Not needed for code review
+  milestones: false
+  pipelines: true  # Check CI status for MRs
+  labels: true     # Label MRs during review
+  mrs: true        # Core functionality
+  files: true      # Read source code
+  variables: false
+  workitems: true  # Reference issues in reviews
+  webhooks: false
+  snippets: false
+  integrations: false
+  # New entities
+  releases: false
+  refs: false      # No branch management
+  members: false
+  search: true     # Search code during review
+
+# Block infrastructure-changing actions
+denied_actions:
+  - "manage_project:create"
+  - "manage_project:fork"
+  - "manage_pipeline:create"
+  - "manage_pipeline:cancel"
+  - "manage_webhook:create"
+  - "manage_webhook:update"
+  - "manage_webhook:delete"
+  - "manage_integration:update"

package/dist/src/profiles/builtin/developer.yaml

@@ -0,0 +1,40 @@
+# Developer preset - standard development workflow
+#
+# Full access to development-related tools including:
+# - Code browsing and file management
+# - Work items and merge requests
+# - Labels and milestones
+#
+# Restricted access to admin-level features.
+#
+# NOTE: This is a PRESET - host/auth come from environment variables.
+
+description: "Standard developer access - no admin features"
+
+read_only: false
+
+features:
+  wiki: true
+  milestones: true
+  pipelines: true
+  labels: true
+  mrs: true
+  files: true
+  variables: false  # Requires elevated access
+  workitems: true
+  webhooks: false   # Admin only
+  snippets: true
+  integrations: false  # Admin only
+  # New entities
+  releases: true    # Can create releases
+  refs: false       # No branch protection management
+  members: false    # No team management
+  search: true      # Code search enabled
+
+# Block dangerous actions
+denied_actions:
+  - "manage_project:delete"
+  - "manage_webhook:create"
+  - "manage_webhook:update"
+  - "manage_webhook:delete"
+  - "manage_integration:update"

package/dist/src/profiles/builtin/devops.yaml

@@ -0,0 +1,33 @@
+# DevOps Engineer preset - CI/CD and infrastructure
+#
+# Focused on infrastructure and automation:
+# - Full pipeline management
+# - Variables and secrets
+# - Webhooks and integrations
+# - File operations for configs
+#
+# No access to development workflow tools (MRs, issues, wiki).
+#
+# NOTE: This is a PRESET - host/auth come from environment variables.
+
+description: "DevOps Engineer - CI/CD pipelines, variables, infrastructure"
+
+read_only: false
+
+features:
+  wiki: false
+  milestones: false
+  pipelines: true
+  labels: false
+  mrs: false
+  files: true
+  variables: true
+  workitems: false
+  webhooks: true
+  snippets: false
+  integrations: true
+  # New entities - infrastructure focused
+  releases: true    # Release management
+  refs: true        # Branch/tag management
+  members: false    # No team management
+  search: true      # Code search for debugging

package/dist/src/profiles/builtin/full-access.yaml

@@ -0,0 +1,29 @@
+# Full Access preset - all features enabled for tech leads
+#
+# Similar to admin but intended for tech leads who need
+# full access to development and team management features.
+# Enables all tools without restrictions.
+#
+# NOTE: This is a PRESET - host/auth come from environment variables.
+
+description: "Full access - all features enabled (tech lead)"
+
+read_only: false
+
+features:
+  wiki: true
+  milestones: true
+  pipelines: true
+  labels: true
+  mrs: true
+  files: true
+  variables: true
+  workitems: true
+  webhooks: true
+  snippets: true
+  integrations: true
+  # New entities
+  releases: true
+  refs: true
+  members: true
+  search: true

package/dist/src/profiles/builtin/gitlab-com.yaml

@@ -0,0 +1,40 @@
+# gitlab.com preset - rate-limit friendly
+#
+# Optimized for gitlab.com public instance:
+# - Standard development features enabled
+# - Rate-limit friendly restrictions
+# - Safe defaults for public projects
+#
+# Features that typically require elevated access are disabled.
+#
+# NOTE: This is a PRESET - host/auth come from environment variables.
+
+description: "Optimized for gitlab.com - respects rate limits, safe defaults"
+
+read_only: false
+
+features:
+  wiki: true
+  milestones: true
+  pipelines: true
+  labels: true
+  mrs: true
+  files: true
+  variables: false     # Often restricted on public projects
+  workitems: true
+  webhooks: false      # Requires maintainer+ access
+  snippets: true
+  integrations: false  # Requires admin access
+  # New entities - standard access for gitlab.com
+  releases: true       # Release management
+  refs: true           # Branch/tag browsing
+  members: true        # Team info browsing
+  search: true         # Code search
+
+# Rate-limit friendly restrictions
+denied_actions:
+  # Pagination-heavy operations
+  - "browse_commits:list"
+  - "browse_pipelines:list"
+  # Operations that can trigger many API calls
+  - "manage_pipeline:retry"

package/dist/src/profiles/builtin/junior-dev.yaml

@@ -0,0 +1,35 @@
+# Junior Developer preset - day-to-day development
+#
+# Focused on core development tasks:
+# - Code browsing and file management
+# - Work items and merge requests
+# - Labels and snippets
+#
+# No access to pipelines, variables, or admin features.
+#
+# NOTE: This is a PRESET - host/auth come from environment variables.
+
+description: "Junior Developer - code, MRs, basic issue tracking"
+
+read_only: false
+
+features:
+  wiki: false
+  milestones: false
+  pipelines: false
+  labels: true
+  mrs: true
+  files: true
+  variables: false
+  workitems: true
+  webhooks: false
+  snippets: true
+  integrations: false
+  # New entities - minimal access
+  releases: false   # No release management
+  refs: false       # No branch management
+  members: false    # No team management
+  search: true      # Code search enabled
+
+# Block pipeline and admin operations
+denied_tools_regex: "^manage_(pipeline|variable|webhook)"

package/dist/src/profiles/builtin/pm.yaml

@@ -0,0 +1,36 @@
+# Project Manager preset - planning and tracking
+#
+# Focused on project management:
+# - Work items and milestones
+# - Merge request status tracking
+# - Wiki and documentation
+# - Labels for organization
+#
+# No access to code operations, pipelines, or technical features.
+#
+# NOTE: This is a PRESET - host/auth come from environment variables.
+
+description: "Project Manager - planning, tracking, documentation (no code ops)"
+
+read_only: false
+
+features:
+  wiki: true
+  milestones: true
+  pipelines: false
+  labels: true
+  mrs: true
+  files: false
+  variables: false
+  workitems: true
+  webhooks: false
+  snippets: false
+  integrations: false
+  # New entities - planning focused
+  releases: false   # No release management
+  refs: false       # No branch management
+  members: false    # No team management
+  search: true      # Can search issues/MRs
+
+# Block code and pipeline operations
+denied_tools_regex: "^manage_(files|pipeline|variable)"

package/dist/src/profiles/builtin/readonly.yaml

@@ -0,0 +1,33 @@
+# Read-only preset - safe browsing without write access
+#
+# Use this preset when you need to explore a GitLab instance
+# without any risk of modifying data.
+#
+# All write operations (create, update, delete) are blocked.
+#
+# NOTE: This is a PRESET, not a full profile.
+# It does NOT contain host or auth - those come from your
+# environment variables (GITLAB_API_URL, GITLAB_TOKEN).
+
+description: "Read-only access - blocks all write operations"
+
+read_only: true
+denied_tools_regex: "^manage_|^create_"
+
+features:
+  wiki: true
+  milestones: true
+  pipelines: true
+  labels: true
+  mrs: true
+  files: true
+  variables: false  # Variables often contain secrets
+  workitems: true
+  webhooks: false   # Webhooks are admin-level
+  snippets: true
+  integrations: false  # Integrations are admin-level
+  # New entities - all browsing enabled (read_only=true blocks writes)
+  releases: true
+  refs: true
+  members: true
+  search: true

package/dist/src/profiles/builtin/senior-dev.yaml

@@ -0,0 +1,41 @@
+# Senior Developer preset - code review and pipeline monitoring
+#
+# Extended access for senior developers:
+# - Full code browsing and file management
+# - Work items and merge requests
+# - Pipeline monitoring (read-only)
+# - Wiki and documentation
+#
+# No control over pipelines, variables, or webhooks.
+#
+# NOTE: This is a PRESET - host/auth come from environment variables.
+
+description: "Senior Developer - code review, discussions, pipeline monitoring"
+
+read_only: false
+
+features:
+  wiki: true
+  milestones: false
+  pipelines: true
+  labels: true
+  mrs: true
+  files: true
+  variables: false
+  workitems: true
+  webhooks: false
+  snippets: true
+  integrations: false
+  # New entities - extended dev access
+  releases: true    # Can create releases
+  refs: true        # Branch management
+  members: false    # No team management
+  search: true      # Code search
+
+# Block pipeline control and webhook management
+denied_actions:
+  - "manage_pipeline:cancel"
+  - "manage_pipeline:retry"
+  - "manage_webhook:create"
+  - "manage_webhook:update"
+  - "manage_webhook:delete"

package/dist/src/profiles/builtin/team-lead.yaml

@@ -0,0 +1,42 @@
+# Team Lead preset - planning and oversight
+#
+# Focused on team management:
+# - Planning with milestones and work items
+# - Code review via merge requests
+# - Pipeline monitoring
+# - Wiki and documentation
+#
+# No access to sensitive variables or webhooks.
+#
+# NOTE: This is a PRESET - host/auth come from environment variables.
+
+description: "Team Lead - planning, milestones, team oversight, code review"
+
+read_only: false
+
+features:
+  wiki: true
+  milestones: true
+  pipelines: true
+  labels: true
+  mrs: true
+  files: true
+  variables: false
+  workitems: true
+  webhooks: false
+  snippets: true
+  integrations: false
+  # New entities - full team management
+  releases: true    # Release planning
+  refs: true        # Branch management
+  members: true     # Team access management
+  search: true      # Code search
+
+# Block sensitive operations
+denied_actions:
+  - "manage_variable:create"
+  - "manage_variable:update"
+  - "manage_variable:delete"
+  - "manage_webhook:create"
+  - "manage_webhook:update"
+  - "manage_webhook:delete"

package/dist/src/profiles/index.d.ts

@@ -0,0 +1,5 @@
+export { Profile, Preset, ProfilesConfig, ProfileInfo, ProfileValidationResult, AuthConfig, PatAuth, OAuthAuth, CookieAuth, FeatureFlags, ProfileSchema, PresetSchema, ProfilesConfigSchema, ProjectPreset, ProjectProfile, ProjectConfig, ProjectPresetSchema, ProjectProfileSchema, } from "./types";
+export { ProfileLoader, loadProfile, getProfileNameFromEnv } from "./loader";
+export { applyProfile, applyPreset, loadAndApplyProfile, loadAndApplyPreset, tryApplyProfileFromEnv, ApplyProfileResult, ApplyPresetResult, } from "./applicator";
+export { loadProjectConfig, findProjectConfig, validateProjectPreset, validateProjectProfile, getProjectConfigSummary, PROJECT_CONFIG_DIR, PROJECT_PRESET_FILE, PROJECT_PROFILE_FILE, } from "./project-loader";
+export { ScopeEnforcer, ScopeViolationError, ScopeConfig, extractProjectsFromArgs, enforceArgsScope, } from "./scope-enforcer";

package/dist/src/profiles/index.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.enforceArgsScope = exports.extractProjectsFromArgs = exports.ScopeViolationError = exports.ScopeEnforcer = exports.PROJECT_PROFILE_FILE = exports.PROJECT_PRESET_FILE = exports.PROJECT_CONFIG_DIR = exports.getProjectConfigSummary = exports.validateProjectProfile = exports.validateProjectPreset = exports.findProjectConfig = exports.loadProjectConfig = exports.tryApplyProfileFromEnv = exports.loadAndApplyPreset = exports.loadAndApplyProfile = exports.applyPreset = exports.applyProfile = exports.getProfileNameFromEnv = exports.loadProfile = exports.ProfileLoader = exports.ProjectProfileSchema = exports.ProjectPresetSchema = exports.ProfilesConfigSchema = exports.PresetSchema = exports.ProfileSchema = void 0;
+var types_1 = require("./types");
+Object.defineProperty(exports, "ProfileSchema", { enumerable: true, get: function () { return types_1.ProfileSchema; } });
+Object.defineProperty(exports, "PresetSchema", { enumerable: true, get: function () { return types_1.PresetSchema; } });
+Object.defineProperty(exports, "ProfilesConfigSchema", { enumerable: true, get: function () { return types_1.ProfilesConfigSchema; } });
+Object.defineProperty(exports, "ProjectPresetSchema", { enumerable: true, get: function () { return types_1.ProjectPresetSchema; } });
+Object.defineProperty(exports, "ProjectProfileSchema", { enumerable: true, get: function () { return types_1.ProjectProfileSchema; } });
+var loader_1 = require("./loader");
+Object.defineProperty(exports, "ProfileLoader", { enumerable: true, get: function () { return loader_1.ProfileLoader; } });
+Object.defineProperty(exports, "loadProfile", { enumerable: true, get: function () { return loader_1.loadProfile; } });
+Object.defineProperty(exports, "getProfileNameFromEnv", { enumerable: true, get: function () { return loader_1.getProfileNameFromEnv; } });
+var applicator_1 = require("./applicator");
+Object.defineProperty(exports, "applyProfile", { enumerable: true, get: function () { return applicator_1.applyProfile; } });
+Object.defineProperty(exports, "applyPreset", { enumerable: true, get: function () { return applicator_1.applyPreset; } });
+Object.defineProperty(exports, "loadAndApplyProfile", { enumerable: true, get: function () { return applicator_1.loadAndApplyProfile; } });
+Object.defineProperty(exports, "loadAndApplyPreset", { enumerable: true, get: function () { return applicator_1.loadAndApplyPreset; } });
+Object.defineProperty(exports, "tryApplyProfileFromEnv", { enumerable: true, get: function () { return applicator_1.tryApplyProfileFromEnv; } });
+var project_loader_1 = require("./project-loader");
+Object.defineProperty(exports, "loadProjectConfig", { enumerable: true, get: function () { return project_loader_1.loadProjectConfig; } });
+Object.defineProperty(exports, "findProjectConfig", { enumerable: true, get: function () { return project_loader_1.findProjectConfig; } });
+Object.defineProperty(exports, "validateProjectPreset", { enumerable: true, get: function () { return project_loader_1.validateProjectPreset; } });
+Object.defineProperty(exports, "validateProjectProfile", { enumerable: true, get: function () { return project_loader_1.validateProjectProfile; } });
+Object.defineProperty(exports, "getProjectConfigSummary", { enumerable: true, get: function () { return project_loader_1.getProjectConfigSummary; } });
+Object.defineProperty(exports, "PROJECT_CONFIG_DIR", { enumerable: true, get: function () { return project_loader_1.PROJECT_CONFIG_DIR; } });
+Object.defineProperty(exports, "PROJECT_PRESET_FILE", { enumerable: true, get: function () { return project_loader_1.PROJECT_PRESET_FILE; } });
+Object.defineProperty(exports, "PROJECT_PROFILE_FILE", { enumerable: true, get: function () { return project_loader_1.PROJECT_PROFILE_FILE; } });
+var scope_enforcer_1 = require("./scope-enforcer");
+Object.defineProperty(exports, "ScopeEnforcer", { enumerable: true, get: function () { return scope_enforcer_1.ScopeEnforcer; } });
+Object.defineProperty(exports, "ScopeViolationError", { enumerable: true, get: function () { return scope_enforcer_1.ScopeViolationError; } });
+Object.defineProperty(exports, "extractProjectsFromArgs", { enumerable: true, get: function () { return scope_enforcer_1.extractProjectsFromArgs; } });
+Object.defineProperty(exports, "enforceArgsScope", { enumerable: true, get: function () { return scope_enforcer_1.enforceArgsScope; } });
+//# sourceMappingURL=index.js.map

package/dist/src/profiles/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/profiles/index.ts"],"names":[],"mappings":";;;AAiBA,iCAoBiB;AATf,sGAAA,aAAa,OAAA;AACb,qGAAA,YAAY,OAAA;AACZ,6GAAA,oBAAoB,OAAA;AAKpB,4GAAA,mBAAmB,OAAA;AACnB,6GAAA,oBAAoB,OAAA;AAItB,mCAA6E;AAApE,uGAAA,aAAa,OAAA;AAAE,qGAAA,WAAW,OAAA;AAAE,+GAAA,qBAAqB,OAAA;AAG1D,2CAQsB;AAPpB,0GAAA,YAAY,OAAA;AACZ,yGAAA,WAAW,OAAA;AACX,iHAAA,mBAAmB,OAAA;AACnB,gHAAA,kBAAkB,OAAA;AAClB,oHAAA,sBAAsB,OAAA;AAMxB,mDAS0B;AARxB,mHAAA,iBAAiB,OAAA;AACjB,mHAAA,iBAAiB,OAAA;AACjB,uHAAA,qBAAqB,OAAA;AACrB,wHAAA,sBAAsB,OAAA;AACtB,yHAAA,uBAAuB,OAAA;AACvB,oHAAA,kBAAkB,OAAA;AAClB,qHAAA,mBAAmB,OAAA;AACnB,sHAAA,oBAAoB,OAAA;AAItB,mDAM0B;AALxB,+GAAA,aAAa,OAAA;AACb,qHAAA,mBAAmB,OAAA;AAEnB,yHAAA,uBAAuB,OAAA;AACvB,kHAAA,gBAAgB,OAAA"}

package/dist/src/profiles/loader.d.ts

@@ -0,0 +1,32 @@
+import { Profile, Preset, ProfileInfo, ProfileValidationResult } from "./types";
+export declare class ProfileLoader {
+    private userConfigPath;
+    private builtinDir;
+    private profileCache;
+    private presetCache;
+    private configCache;
+    constructor(userConfigPath?: string, builtinDir?: string);
+    loadProfile(name: string): Promise<Profile>;
+    loadPreset(name: string): Promise<Preset>;
+    loadAny(name: string): Promise<{
+        type: "profile";
+        data: Profile;
+    } | {
+        type: "preset";
+        data: Preset;
+    }>;
+    getDefaultProfileName(): Promise<string | undefined>;
+    private loadUserConfig;
+    private loadUserProfile;
+    private loadBuiltinPreset;
+    listProfiles(): Promise<ProfileInfo[]>;
+    private validateDeniedActions;
+    validateProfile(profile: Profile): Promise<ProfileValidationResult>;
+    validatePreset(preset: Preset): Promise<ProfileValidationResult>;
+    static ensureConfigDir(): void;
+    static getUserConfigPath(): string;
+    clearCache(): void;
+}
+export declare function loadProfile(name: string): Promise<Profile>;
+export declare function loadPreset(name: string): Promise<Preset>;
+export declare function getProfileNameFromEnv(): string | undefined;