gitlab-mcp 1.1.0 → 1.2.0

package/dist/lib/gitlab-client.js

@@ -0,0 +1,1025 @@
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { getSessionAuth } from "./auth-context.js";
+export class GitLabApiError extends Error {
+    status;
+    details;
+    constructor(message, status, details) {
+        super(message);
+        this.status = status;
+        this.details = details;
+        this.name = "GitLabApiError";
+    }
+}
+export class GitLabClient {
+    static DEFAULT_MAX_ATTACHMENT_BYTES = 25 * 1024 * 1024;
+    static DEFAULT_MAX_RESPONSE_BODY_BYTES = 25 * 1024 * 1024;
+    baseApiUrl;
+    apiUrls;
+    nextApiUrlIndex = 0;
+    defaultToken;
+    timeoutMs;
+    maxAttachmentBytes;
+    maxResponseBodyBytes;
+    beforeRequest;
+    constructor(baseApiUrl, defaultToken, options = {}) {
+        this.baseApiUrl = normalizeApiUrl(baseApiUrl);
+        const configuredApiUrls = options.apiUrls
+            ?.map((item) => normalizeApiUrl(item))
+            .filter((item) => item.length > 0) ?? [this.baseApiUrl];
+        this.apiUrls = configuredApiUrls.length > 0 ? configuredApiUrls : [this.baseApiUrl];
+        this.defaultToken = defaultToken;
+        this.timeoutMs = options.timeoutMs ?? 20_000;
+        this.maxAttachmentBytes =
+            options.maxAttachmentBytes ?? GitLabClient.DEFAULT_MAX_ATTACHMENT_BYTES;
+        this.maxResponseBodyBytes =
+            options.maxResponseBodyBytes ?? GitLabClient.DEFAULT_MAX_RESPONSE_BODY_BYTES;
+        this.beforeRequest = options.beforeRequest;
+    }
+    // projects
+    getProject(projectId, options) {
+        return this.get(`/projects/${encode(projectId)}`, options);
+    }
+    listProjects(options = {}) {
+        return this.get("/projects", options);
+    }
+    createRepository(payload, options = {}) {
+        return this.post("/projects", {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    listProjectMembers(projectId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/members/all`, options);
+    }
+    listGroupProjects(groupId, options = {}) {
+        return this.get(`/groups/${encode(groupId)}/projects`, options);
+    }
+    forkRepository(projectId, payload = {}, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/fork`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    searchProjects(search, limit = 10, options = {}) {
+        return this.get("/projects", {
+            ...options,
+            query: {
+                search,
+                simple: true,
+                per_page: limit,
+                ...(options.query ?? {})
+            }
+        });
+    }
+    searchRepositories(search, options = {}) {
+        return this.get("/search", {
+            ...options,
+            query: {
+                scope: "projects",
+                search,
+                ...(options.query ?? {})
+            }
+        });
+    }
+    searchCodeBlobs(projectId, search, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/search`, {
+            ...options,
+            query: {
+                scope: "blobs",
+                search,
+                ...(options.query ?? {})
+            }
+        });
+    }
+    // repository/files
+    getRepositoryTree(projectId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/repository/tree`, options);
+    }
+    getFileContents(projectId, filePath, ref, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/repository/files/${encode(filePath)}`, {
+            ...options,
+            query: {
+                ref,
+                ...(options.query ?? {})
+            }
+        });
+    }
+    createOrUpdateFile(projectId, filePath, payload, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/repository/files/${encode(filePath)}`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    pushFiles(projectId, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/repository/commits`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    createBranch(projectId, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/repository/branches`, {
+            ...options,
+            query: payload
+        });
+    }
+    getBranchDiffs(projectId, payload, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/repository/compare`, {
+            ...options,
+            query: payload
+        });
+    }
+    listCommits(projectId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/repository/commits`, options);
+    }
+    getCommit(projectId, sha, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/repository/commits/${encode(sha)}`, options);
+    }
+    getCommitDiff(projectId, sha, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/repository/commits/${encode(sha)}/diff`, options);
+    }
+    // merge requests
+    listMergeRequests(projectId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests`, options);
+    }
+    listGlobalMergeRequests(options = {}) {
+        return this.get("/merge_requests", options);
+    }
+    getMergeRequest(projectId, mergeRequestIid, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}`, options);
+    }
+    createMergeRequest(projectId, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/merge_requests`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    updateMergeRequest(projectId, mergeRequestIid, payload, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    mergeMergeRequest(projectId, mergeRequestIid, payload = {}, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/merge`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    getMergeRequestDiffs(projectId, mergeRequestIid, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/changes`, options);
+    }
+    listMergeRequestDiffs(projectId, mergeRequestIid, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/diffs`, options);
+    }
+    listMergeRequestVersions(projectId, mergeRequestIid, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/versions`, options);
+    }
+    getMergeRequestVersion(projectId, mergeRequestIid, versionId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/versions/${encode(versionId)}`, options);
+    }
+    approveMergeRequest(projectId, mergeRequestIid, payload = {}, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/approve`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    unapproveMergeRequest(projectId, mergeRequestIid, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/unapprove`, {
+            ...options,
+            body: JSON.stringify({}),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    getMergeRequestApprovalState(projectId, mergeRequestIid, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/approval_state`, options);
+    }
+    listMergeRequestDiscussions(projectId, mergeRequestIid, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/discussions`, options);
+    }
+    createMergeRequestDiscussionNote(projectId, mergeRequestIid, discussionId, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/discussions/${encode(discussionId)}/notes`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    createMergeRequestThread(projectId, mergeRequestIid, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/discussions`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    updateMergeRequestDiscussionNote(projectId, mergeRequestIid, discussionId, noteId, payload, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/discussions/${encode(discussionId)}/notes/${encode(noteId)}`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    deleteMergeRequestDiscussionNote(projectId, mergeRequestIid, discussionId, noteId, options = {}) {
+        return this.delete(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/discussions/${encode(discussionId)}/notes/${encode(noteId)}`, options);
+    }
+    resolveMergeRequestThread(projectId, mergeRequestIid, discussionId, noteId, resolved, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/discussions/${encode(discussionId)}/notes/${encode(noteId)}`, {
+            ...options,
+            body: JSON.stringify({ resolved }),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    listMergeRequestNotes(projectId, mergeRequestIid, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/notes`, options);
+    }
+    getMergeRequestNote(projectId, mergeRequestIid, noteId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/notes/${encode(noteId)}`, options);
+    }
+    createMergeRequestNote(projectId, mergeRequestIid, body, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/notes`, {
+            ...options,
+            body: JSON.stringify({ body }),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    getDraftNote(projectId, mergeRequestIid, draftNoteId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/draft_notes/${encode(draftNoteId)}`, options);
+    }
+    listDraftNotes(projectId, mergeRequestIid, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/draft_notes`, options);
+    }
+    createDraftNote(projectId, mergeRequestIid, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/draft_notes`, {
+            ...options,
+            body: JSON.stringify({
+                note: payload.body,
+                position: payload.position,
+                resolve_discussion: payload.resolve_discussion
+            }),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    updateDraftNote(projectId, mergeRequestIid, draftNoteId, payload, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/draft_notes/${encode(draftNoteId)}`, {
+            ...options,
+            body: JSON.stringify({
+                note: payload.body,
+                position: payload.position,
+                resolve_discussion: payload.resolve_discussion
+            }),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    deleteDraftNote(projectId, mergeRequestIid, draftNoteId, options = {}) {
+        return this.delete(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/draft_notes/${encode(draftNoteId)}`, options);
+    }
+    publishDraftNote(projectId, mergeRequestIid, draftNoteId, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/draft_notes/${encode(draftNoteId)}/publish`, {
+            ...options,
+            body: JSON.stringify({}),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    bulkPublishDraftNotes(projectId, mergeRequestIid, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/draft_notes/bulk_publish`, {
+            ...options,
+            body: JSON.stringify({}),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    createNote(projectId, noteableType, noteableIid, body, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/${noteableType}s/${encode(noteableIid)}/notes`, {
+            ...options,
+            body: JSON.stringify({ body }),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    updateMergeRequestNote(projectId, mergeRequestIid, noteId, body, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/notes/${encode(noteId)}`, {
+            ...options,
+            body: JSON.stringify({ body }),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    deleteMergeRequestNote(projectId, mergeRequestIid, noteId, options = {}) {
+        return this.delete(`/projects/${encode(projectId)}/merge_requests/${encode(mergeRequestIid)}/notes/${encode(noteId)}`, options);
+    }
+    // issues
+    listIssues(projectId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/issues`, options);
+    }
+    listGlobalIssues(options = {}) {
+        return this.get("/issues", options);
+    }
+    getIssue(projectId, issueIid, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/issues/${encode(issueIid)}`, options);
+    }
+    createIssue(projectId, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/issues`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    updateIssue(projectId, issueIid, payload, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/issues/${encode(issueIid)}`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    deleteIssue(projectId, issueIid, options = {}) {
+        return this.delete(`/projects/${encode(projectId)}/issues/${encode(issueIid)}`, options);
+    }
+    myIssues(payload, options = {}) {
+        const { project_id: projectId, ...queryPayload } = payload;
+        const path = projectId ? `/projects/${encode(projectId)}/issues` : "/issues";
+        return this.get(path, {
+            ...options,
+            query: {
+                scope: queryPayload.scope ?? "assigned_to_me",
+                ...queryPayload,
+                ...(options.query ?? {})
+            }
+        });
+    }
+    listIssueDiscussions(projectId, issueIid, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/issues/${encode(issueIid)}/discussions`, options);
+    }
+    createIssueNote(projectId, issueIid, payload, options = {}) {
+        const discussionPath = payload.discussion_id
+            ? `/discussions/${encode(payload.discussion_id)}/notes`
+            : "/notes";
+        return this.post(`/projects/${encode(projectId)}/issues/${encode(issueIid)}${discussionPath}`, {
+            ...options,
+            body: JSON.stringify({
+                body: payload.body,
+                created_at: payload.created_at
+            }),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    updateIssueNote(projectId, issueIid, discussionId, noteId, payload, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/issues/${encode(issueIid)}/discussions/${encode(discussionId)}/notes/${encode(noteId)}`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    listIssueLinks(projectId, issueIid, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/issues/${encode(issueIid)}/links`, options);
+    }
+    getIssueLink(projectId, issueIid, issueLinkId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/issues/${encode(issueIid)}/links/${encode(issueLinkId)}`, options);
+    }
+    createIssueLink(projectId, issueIid, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/issues/${encode(issueIid)}/links`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    deleteIssueLink(projectId, issueIid, issueLinkId, options = {}) {
+        return this.delete(`/projects/${encode(projectId)}/issues/${encode(issueIid)}/links/${encode(issueLinkId)}`, options);
+    }
+    // wiki
+    listWikiPages(projectId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/wikis`, options);
+    }
+    getWikiPage(projectId, slug, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/wikis/${encode(slug)}`, options);
+    }
+    createWikiPage(projectId, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/wikis`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    updateWikiPage(projectId, slug, payload, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/wikis/${encode(slug)}`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    deleteWikiPage(projectId, slug, options = {}) {
+        return this.delete(`/projects/${encode(projectId)}/wikis/${encode(slug)}`, options);
+    }
+    // pipelines
+    listPipelines(projectId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/pipelines`, options);
+    }
+    getPipeline(projectId, pipelineId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/pipelines/${encode(pipelineId)}`, options);
+    }
+    listPipelineJobs(projectId, pipelineId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/pipelines/${encode(pipelineId)}/jobs`, options);
+    }
+    listPipelineTriggerJobs(projectId, pipelineId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/pipelines/${encode(pipelineId)}/bridges`, options);
+    }
+    getPipelineJob(projectId, jobId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/jobs/${encode(jobId)}`, options);
+    }
+    getPipelineJobOutput(projectId, jobId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/jobs/${encode(jobId)}/trace`, options);
+    }
+    createPipeline(projectId, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/pipeline`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    retryPipeline(projectId, pipelineId, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/pipelines/${encode(pipelineId)}/retry`, options);
+    }
+    cancelPipeline(projectId, pipelineId, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/pipelines/${encode(pipelineId)}/cancel`, options);
+    }
+    retryPipelineJob(projectId, jobId, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/jobs/${encode(jobId)}/retry`, options);
+    }
+    cancelPipelineJob(projectId, jobId, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/jobs/${encode(jobId)}/cancel`, options);
+    }
+    playPipelineJob(projectId, jobId, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/jobs/${encode(jobId)}/play`, options);
+    }
+    // milestones
+    listMilestones(projectId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/milestones`, options);
+    }
+    getMilestone(projectId, milestoneId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/milestones/${encode(milestoneId)}`, options);
+    }
+    createMilestone(projectId, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/milestones`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    updateMilestone(projectId, milestoneId, payload, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/milestones/${encode(milestoneId)}`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    deleteMilestone(projectId, milestoneId, options = {}) {
+        return this.delete(`/projects/${encode(projectId)}/milestones/${encode(milestoneId)}`, options);
+    }
+    getMilestoneIssues(projectId, milestoneId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/milestones/${encode(milestoneId)}/issues`, options);
+    }
+    getMilestoneMergeRequests(projectId, milestoneId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/milestones/${encode(milestoneId)}/merge_requests`, options);
+    }
+    promoteMilestone(projectId, milestoneId, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/milestones/${encode(milestoneId)}/promote`, options);
+    }
+    getMilestoneBurndownEvents(projectId, milestoneId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/milestones/${encode(milestoneId)}/burndown_events`, options);
+    }
+    // releases
+    listReleases(projectId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/releases`, options);
+    }
+    getRelease(projectId, tagName, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/releases/${encode(tagName)}`, options);
+    }
+    createRelease(projectId, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/releases`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    updateRelease(projectId, tagName, payload, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/releases/${encode(tagName)}`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    deleteRelease(projectId, tagName, options = {}) {
+        return this.delete(`/projects/${encode(projectId)}/releases/${encode(tagName)}`, options);
+    }
+    createReleaseEvidence(projectId, tagName, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/releases/${encode(tagName)}/evidence`, options);
+    }
+    downloadReleaseAsset(projectId, tagName, directAssetPath, options = {}) {
+        const safePath = encodeSlashPath(directAssetPath);
+        return this.get(`/projects/${encode(projectId)}/releases/${encode(tagName)}/downloads/${safePath}`, options);
+    }
+    // labels
+    listLabels(projectId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/labels`, options);
+    }
+    getLabel(projectId, labelId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/labels/${encode(labelId)}`, options);
+    }
+    createLabel(projectId, payload, options = {}) {
+        return this.post(`/projects/${encode(projectId)}/labels`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    updateLabel(projectId, payload, options = {}) {
+        return this.put(`/projects/${encode(projectId)}/labels`, {
+            ...options,
+            body: JSON.stringify(payload),
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    deleteLabel(projectId, labelName, options = {}) {
+        return this.delete(`/projects/${encode(projectId)}/labels`, {
+            ...options,
+            query: {
+                name: labelName,
+                ...(options.query ?? {})
+            }
+        });
+    }
+    // namespaces/users/events
+    listNamespaces(options = {}) {
+        return this.get("/namespaces", options);
+    }
+    listGroupIterations(groupId, options = {}) {
+        return this.get(`/groups/${encode(groupId)}/iterations`, options);
+    }
+    getNamespace(namespaceIdOrPath, options = {}) {
+        return this.get(`/namespaces/${encode(namespaceIdOrPath)}`, options);
+    }
+    verifyNamespace(pathName, options = {}) {
+        return this.get(`/namespaces/${encode(pathName)}/exists`, options);
+    }
+    getUsers(options = {}) {
+        return this.get("/users", options);
+    }
+    listEvents(options = {}) {
+        return this.get("/events", options);
+    }
+    getProjectEvents(projectId, options = {}) {
+        return this.get(`/projects/${encode(projectId)}/events`, options);
+    }
+    // attachments / markdown
+    uploadMarkdown(projectId, content, filename, options = {}) {
+        const form = new FormData();
+        form.append("file", new Blob([content], { type: "text/markdown" }), filename);
+        return this.post(`/projects/${encode(projectId)}/uploads`, {
+            ...options,
+            body: form,
+            headers: {
+                Accept: "*/*",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    async uploadMarkdownFile(projectId, filePath, options = {}) {
+        const content = await fs.readFile(filePath);
+        const filename = path.basename(filePath);
+        const form = new FormData();
+        form.append("file", new Blob([content], { type: "application/octet-stream" }), filename);
+        return this.post(`/projects/${encode(projectId)}/uploads`, {
+            ...options,
+            body: form,
+            headers: {
+                Accept: "*/*",
+                ...(options.headers ?? {})
+            }
+        });
+    }
+    async downloadAttachment(urlOrPath, options = {}) {
+        const requestConfig = this.resolveRequestConfig(options);
+        const url = this.resolveAttachmentUrl(urlOrPath, requestConfig.apiUrl);
+        let headers = new Headers(options.headers);
+        let token = requestConfig.token;
+        let authHeader = requestConfig.authHeader;
+        let fetchImpl = fetch;
+        if (this.beforeRequest) {
+            const override = await this.beforeRequest({
+                url,
+                method: "GET",
+                headers,
+                token,
+                authHeader: requestConfig.authHeader
+            });
+            if (override?.headers) {
+                headers = override.headers;
+            }
+            if (override?.token !== undefined) {
+                token = override.token;
+            }
+            if (override?.authHeader !== undefined) {
+                authHeader = override.authHeader;
+            }
+            if (override?.fetchImpl) {
+                fetchImpl = override.fetchImpl;
+            }
+        }
+        this.attachAuth(headers, token, authHeader);
+        const response = await fetchImpl(url, {
+            method: "GET",
+            headers,
+            signal: AbortSignal.timeout(this.timeoutMs)
+        });
+        if (!response.ok) {
+            let details;
+            try {
+                details = await this.parseResponseBody(response);
+            }
+            catch (error) {
+                details = {
+                    message: error instanceof Error ? error.message : "Failed to read GitLab error response"
+                };
+            }
+            throw new GitLabApiError(`GitLab attachment download failed: ${response.status} ${response.statusText}`, response.status, details);
+        }
+        assertContentLengthWithinLimit(response, this.maxAttachmentBytes, "Attachment");
+        const contentType = response.headers.get("content-type") ?? "application/octet-stream";
+        const disposition = response.headers.get("content-disposition") ?? "";
+        const fileName = extractFileName(disposition) ?? `attachment-${Date.now()}`;
+        const bytes = await readResponseBytesWithLimit(response, this.maxAttachmentBytes, "Attachment");
+        return {
+            fileName,
+            contentType,
+            base64: bytes.toString("base64")
+        };
+    }
+    // graphql
+    executeGraphql(query, variables, options = {}) {
+        const requestConfig = this.resolveRequestConfig(options);
+        const endpoint = buildGraphqlEndpoint(requestConfig.apiUrl);
+        return this.rawRequest(endpoint, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                ...(options.headers ?? {})
+            },
+            body: JSON.stringify({ query, variables }),
+            token: requestConfig.token,
+            authHeader: requestConfig.authHeader
+        });
+    }
+    // generic methods
+    get(path, options = {}) {
+        return this.request("GET", path, options);
+    }
+    post(path, options = {}) {
+        return this.request("POST", path, options);
+    }
+    put(path, options = {}) {
+        return this.request("PUT", path, options);
+    }
+    delete(path, options = {}) {
+        return this.request("DELETE", path, options);
+    }
+    async request(method, path, options = {}) {
+        const config = this.resolveRequestConfig(options);
+        const url = new URL(path.replace(/^\//, ""), `${config.apiUrl}/`);
+        for (const [key, value] of Object.entries(options.query ?? {})) {
+            if (value !== undefined && value !== null) {
+                url.searchParams.set(key, String(value));
+            }
+        }
+        return this.rawRequest(url, {
+            method,
+            body: options.body,
+            headers: options.headers,
+            token: config.token,
+            authHeader: config.authHeader
+        });
+    }
+    async rawRequest(url, options) {
+        let headers = new Headers(options.headers);
+        if (!headers.has("Accept")) {
+            headers.set("Accept", "application/json");
+        }
+        let requestBody = options.body;
+        let token = options.token;
+        let authHeader = options.authHeader;
+        let fetchImpl = fetch;
+        if (this.beforeRequest) {
+            const override = await this.beforeRequest({
+                url,
+                method: options.method,
+                headers,
+                body: requestBody,
+                token,
+                authHeader: options.authHeader
+            });
+            if (override?.headers) {
+                headers = override.headers;
+            }
+            if (override?.body !== undefined) {
+                requestBody = override.body;
+            }
+            if (override?.token !== undefined) {
+                token = override.token;
+            }
+            if (override?.authHeader !== undefined) {
+                authHeader = override.authHeader;
+            }
+            if (override?.fetchImpl) {
+                fetchImpl = override.fetchImpl;
+            }
+        }
+        this.attachAuth(headers, token, authHeader);
+        const response = await fetchImpl(url, {
+            method: options.method,
+            body: requestBody,
+            headers,
+            signal: AbortSignal.timeout(this.timeoutMs)
+        });
+        let body;
+        try {
+            body = await this.parseResponseBody(response);
+        }
+        catch (error) {
+            if (response.ok) {
+                throw error;
+            }
+            throw new GitLabApiError(`GitLab API request failed: ${response.status} ${response.statusText}`, response.status, {
+                message: error instanceof Error ? error.message : "Failed to read GitLab error response"
+            });
+        }
+        if (!response.ok) {
+            throw new GitLabApiError(`GitLab API request failed: ${response.status} ${response.statusText}`, response.status, body);
+        }
+        return body;
+    }
+    async parseResponseBody(response) {
+        assertContentLengthWithinLimit(response, this.maxResponseBodyBytes, "Response body");
+        const text = await readResponseTextWithLimit(response, this.maxResponseBodyBytes, "Response body");
+        const contentType = response.headers.get("content-type") ?? "";
+        if (contentType.includes("application/json")) {
+            try {
+                return JSON.parse(text);
+            }
+            catch {
+                return text;
+            }
+        }
+        return text;
+    }
+    resolveRequestConfig(options) {
+        const sessionAuth = getSessionAuth();
+        const apiUrl = options.apiUrl ?? sessionAuth?.apiUrl ?? this.pickApiUrl();
+        const token = options.token ?? sessionAuth?.token ?? this.defaultToken;
+        const authHeader = options.authHeader ?? sessionAuth?.header;
+        return {
+            apiUrl: normalizeApiUrl(apiUrl),
+            token,
+            authHeader
+        };
+    }
+    pickApiUrl() {
+        if (this.apiUrls.length <= 1) {
+            return this.baseApiUrl;
+        }
+        const index = this.nextApiUrlIndex % this.apiUrls.length;
+        this.nextApiUrlIndex = (this.nextApiUrlIndex + 1) % this.apiUrls.length;
+        return this.apiUrls[index] ?? this.baseApiUrl;
+    }
+    resolveAbsoluteUrl(raw, apiUrl) {
+        if (/^https?:\/\//i.test(raw)) {
+            return new URL(raw);
+        }
+        const base = new URL(apiUrl);
+        return new URL(raw.replace(/^\//, ""), `${base.origin}/`);
+    }
+    resolveAttachmentUrl(raw, apiUrl) {
+        const base = new URL(apiUrl);
+        const resolved = this.resolveAbsoluteUrl(raw, apiUrl);
+        if (resolved.origin !== base.origin) {
+            throw new Error(`Refusing to download cross-origin attachment URL '${resolved.origin}'. Only '${base.origin}' is allowed.`);
+        }
+        if (!resolved.pathname.includes("/uploads/")) {
+            throw new Error(`Refusing to download non-upload path '${resolved.pathname}'. Only GitLab upload URLs containing '/uploads/' are allowed.`);
+        }
+        return resolved;
+    }
+    attachAuth(headers, token, authHeader) {
+        if (!token) {
+            return;
+        }
+        if (authHeader === "authorization") {
+            headers.set("Authorization", `Bearer ${token}`);
+            return;
+        }
+        headers.set("PRIVATE-TOKEN", token);
+    }
+}
+export function getEffectiveSessionAuth(defaultToken, defaultApiUrl) {
+    const auth = getSessionAuth();
+    return {
+        token: auth?.token ?? defaultToken,
+        apiUrl: auth?.apiUrl ?? defaultApiUrl,
+        header: auth?.header,
+        sessionId: auth?.sessionId,
+        updatedAt: auth?.updatedAt ?? Date.now()
+    };
+}
+function encode(value) {
+    return encodeURIComponent(value);
+}
+function encodeSlashPath(pathValue) {
+    const trimmed = pathValue.replace(/^\/+/, "").trim();
+    if (!trimmed) {
+        return "";
+    }
+    return trimmed
+        .split("/")
+        .filter((segment) => segment.length > 0)
+        .map((segment) => encode(segment))
+        .join("/");
+}
+function normalizeApiUrl(rawUrl) {
+    const url = new URL(rawUrl);
+    const pathname = url.pathname.replace(/\/+$/, "");
+    if (pathname.endsWith("/api/v4")) {
+        url.pathname = pathname;
+        return url.toString();
+    }
+    url.pathname = `${pathname}/api/v4`.replace(/\/\//g, "/");
+    return url.toString();
+}
+function buildGraphqlEndpoint(apiUrl) {
+    const url = new URL(apiUrl);
+    const prefix = url.pathname.replace(/\/api\/v4\/?$/, "");
+    return new URL(`${prefix || "/"}/api/graphql`, url.origin);
+}
+function extractFileName(contentDisposition) {
+    const quoted = /filename\*?=(?:UTF-8''|")?([^";]+)/i.exec(contentDisposition);
+    if (!quoted) {
+        return undefined;
+    }
+    return decodeURIComponent(quoted[1] ?? "");
+}
+function parseContentLength(value) {
+    if (!value) {
+        return undefined;
+    }
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isFinite(parsed) || parsed < 0) {
+        return undefined;
+    }
+    return parsed;
+}
+function assertContentLengthWithinLimit(response, maxBytes, label) {
+    const declaredContentLength = parseContentLength(response.headers.get("content-length"));
+    if (declaredContentLength !== undefined && declaredContentLength > maxBytes) {
+        throw new Error(`${label} size ${declaredContentLength} bytes exceeds limit ${maxBytes} bytes`);
+    }
+}
+async function readResponseTextWithLimit(response, maxBytes, label) {
+    const bytes = await readResponseBytesWithLimit(response, maxBytes, label);
+    return bytes.toString("utf8");
+}
+async function readResponseBytesWithLimit(response, maxBytes, label) {
+    if (!response.body) {
+        const bytes = Buffer.from(await response.arrayBuffer());
+        if (bytes.length > maxBytes) {
+            throw new Error(`${label} size ${bytes.length} bytes exceeds limit ${maxBytes} bytes`);
+        }
+        return bytes;
+    }
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done) {
+                break;
+            }
+            if (!value) {
+                continue;
+            }
+            total += value.byteLength;
+            if (total > maxBytes) {
+                await reader.cancel();
+                throw new Error(`${label} size ${total} bytes exceeds limit ${maxBytes} bytes`);
+            }
+            chunks.push(Buffer.from(value));
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    return Buffer.concat(chunks, total);
+}
+//# sourceMappingURL=gitlab-client.js.map