gitlab-mcp 1.0.0 → 1.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gitlab-mcp",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "A MCP server for GitLab",
   "type": "module",
   "packageManager": "pnpm@10.28.1",
@@ -77,6 +77,14 @@
       "path": "cz-conventional-changelog"
     }
   },
+  "keywords": [
+    "gitlab",
+    "mcp",
+    "ai",
+    "agent",
+    "tool",
+    "automation"
+  ],
   "author": "unadlib",
   "license": "MIT"
 }

package/src/http.ts

@@ -15,6 +15,7 @@ import { configureNetworkRuntime } from "./lib/network.js";
 import { OutputFormatter } from "./lib/output.js";
 import { ToolPolicyEngine } from "./lib/policy.js";
 import { GitLabRequestRuntime } from "./lib/request-runtime.js";
+import { hasReachedSessionCapacity } from "./lib/session-capacity.js";
 import { createMcpServer } from "./server/build-server.js";
 import type { AppContext } from "./types/context.js";
 
@@ -99,7 +100,14 @@ if (env.SSE) {
       const parsedAuth = parseRequestAuth(req);
       const fallbackToken = env.REMOTE_AUTHORIZATION ? undefined : env.GITLAB_PERSONAL_ACCESS_TOKEN;
 
-      if (sessions.size + pendingSessions.size + sseSessions.size >= env.MAX_SESSIONS) {
+      if (
+        hasReachedSessionCapacity({
+          streamableSessions: sessions.size,
+          pendingSessions: pendingSessions.size,
+          sseSessions: sseSessions.size,
+          maxSessions: env.MAX_SESSIONS
+        })
+      ) {
         res.status(503).send(`Maximum ${env.MAX_SESSIONS} concurrent sessions reached`);
         return;
       }
@@ -243,7 +251,14 @@ app.all("/mcp", async (req, res) => {
         return;
       }
 
-      if (sessions.size + pendingSessions.size >= env.MAX_SESSIONS) {
+      if (
+        hasReachedSessionCapacity({
+          streamableSessions: sessions.size,
+          pendingSessions: pendingSessions.size,
+          sseSessions: sseSessions.size,
+          maxSessions: env.MAX_SESSIONS
+        })
+      ) {
         res.status(503).json({
           jsonrpc: "2.0",
           error: {

package/src/lib/session-capacity.ts

@@ -0,0 +1,14 @@
+export interface SessionCapacityInput {
+  streamableSessions: number;
+  pendingSessions: number;
+  sseSessions: number;
+  maxSessions: number;
+}
+
+export function getTotalSessions(input: SessionCapacityInput): number {
+  return input.streamableSessions + input.pendingSessions + input.sseSessions;
+}
+
+export function hasReachedSessionCapacity(input: SessionCapacityInput): boolean {
+  return getTotalSessions(input) >= input.maxSessions;
+}

package/src/tools/gitlab.ts

@@ -2801,7 +2801,14 @@ export function parseProjectUploadReference(
     return undefined;
   }
 
-  const filename = decodeURIComponent(filenameParts.join("/"));
+  let filename: string;
+
+  try {
+    filename = decodeURIComponent(filenameParts.join("/"));
+  } catch {
+    return undefined;
+  }
+
   if (!filename) {
     return undefined;
   }

package/tests/gitlab-client.test.ts

@@ -421,9 +421,7 @@ describe("GitLabClient", () => {
       await client.listProjects();
       await client.listProjects();
 
-      const urls = fetchMock.mock.calls.map(
-        (call: [URL | string, RequestInit]) => new URL(String(call[0])).origin
-      );
+      const urls = fetchMock.mock.calls.map((call) => new URL(String(call[0])).origin);
 
       expect(urls[0]).toBe("https://a.example.com");
       expect(urls[1]).toBe("https://b.example.com");

package/tests/integration/agent-loop.integration.test.ts

@@ -53,7 +53,13 @@ class ScriptedLLM implements LLM {
     if (this.callIndex >= this.script.length) {
       throw new Error(`ScriptedLLM: script exhausted after ${this.callIndex} calls`);
     }
-    return this.script[this.callIndex++];
+    const response = this.script[this.callIndex];
+    if (!response) {
+      throw new Error(`ScriptedLLM: missing response at index ${this.callIndex}`);
+    }
+
+    this.callIndex += 1;
+    return response;
   }
 }
 
@@ -293,7 +299,7 @@ describe("Agent Loop Integration (ScriptedLLM + MCP server)", () => {
 
         // Verify tool was called
         expect(result.toolCalls).toHaveLength(1);
-        expect(result.toolCalls[0].name).toBe("health_check");
+        expect(result.toolCalls[0]!.name).toBe("health_check");
 
         // Verify tool result was successful
         const toolResult = result.toolResults[0] as { isError?: boolean };
@@ -327,7 +333,7 @@ describe("Agent Loop Integration (ScriptedLLM + MCP server)", () => {
         });
 
         expect(result.toolCalls).toHaveLength(1);
-        expect(result.toolCalls[0].name).toBe("gitlab_list_projects");
+        expect(result.toolCalls[0]!.name).toBe("gitlab_list_projects");
 
         // Verify the mocked gitlab client was called
         expect(context.gitlab.listProjects).toHaveBeenCalled();
@@ -390,9 +396,9 @@ describe("Agent Loop Integration (ScriptedLLM + MCP server)", () => {
         });
 
         expect(result.toolCalls).toHaveLength(2);
-        expect(result.toolCalls[0].name).toBe("gitlab_list_projects");
-        expect(result.toolCalls[1].name).toBe("gitlab_get_project");
-        expect(result.toolCalls[1].arguments).toEqual({ project_id: "group/project-alpha" });
+        expect(result.toolCalls[0]!.name).toBe("gitlab_list_projects");
+        expect(result.toolCalls[1]!.name).toBe("gitlab_get_project");
+        expect(result.toolCalls[1]!.arguments).toEqual({ project_id: "group/project-alpha" });
 
         expect(context.gitlab.listProjects).toHaveBeenCalled();
         expect(context.gitlab.getProject).toHaveBeenCalledWith("group/project-alpha");

package/tests/request-runtime.test.ts

@@ -6,8 +6,8 @@
  * For deeper testing we extract testable logic patterns.
  */
 import { describe, expect, it } from "vitest";
-import os from "node:os";
-import path from "node:path";
+import * as os from "node:os";
+import * as path from "node:path";
 
 /**
  * Replicate the parseTokenOutput logic for testing.

package/tests/session-capacity.test.ts

@@ -0,0 +1,49 @@
+import { describe, expect, it } from "vitest";
+
+import { getTotalSessions, hasReachedSessionCapacity } from "../src/lib/session-capacity.js";
+
+describe("session capacity helpers", () => {
+  it("counts streamable, pending, and SSE sessions together", () => {
+    expect(
+      getTotalSessions({
+        streamableSessions: 2,
+        pendingSessions: 1,
+        sseSessions: 3,
+        maxSessions: 10
+      })
+    ).toBe(6);
+  });
+
+  it("treats capacity as reached when total equals max", () => {
+    expect(
+      hasReachedSessionCapacity({
+        streamableSessions: 1,
+        pendingSessions: 1,
+        sseSessions: 1,
+        maxSessions: 3
+      })
+    ).toBe(true);
+  });
+
+  it("treats capacity as reached when total exceeds max", () => {
+    expect(
+      hasReachedSessionCapacity({
+        streamableSessions: 2,
+        pendingSessions: 1,
+        sseSessions: 2,
+        maxSessions: 4
+      })
+    ).toBe(true);
+  });
+
+  it("does not reach capacity when total is below max", () => {
+    expect(
+      hasReachedSessionCapacity({
+        streamableSessions: 1,
+        pendingSessions: 0,
+        sseSessions: 1,
+        maxSessions: 3
+      })
+    ).toBe(false);
+  });
+});

package/tests/upload-reference.test.ts

@@ -72,6 +72,10 @@ describe("parseProjectUploadReference", () => {
     expect(parseProjectUploadReference("not a url at all")).toBeUndefined();
   });
 
+  it("returns undefined for malformed percent-encoding", () => {
+    expect(parseProjectUploadReference("/uploads/abc123/%E0%A4%A")).toBeUndefined();
+  });
+
   it("handles upload path without leading slash", () => {
     // This depends on implementation, but should handle gracefully
     const result = parseProjectUploadReference("uploads/abc123/file.txt");