gitlab-mcp 1.4.1 → 1.5.1

package/dist/http.js

@@ -2,6 +2,7 @@
 import { createServer } from "node:http";
 import { env } from "./config/env.js";
 import { GitLabClient } from "./lib/gitlab-client.js";
+import { assertSafeHttpAuthConfig } from "./lib/http-auth-guard.js";
 import { logger } from "./lib/logger.js";
 import { configureNetworkRuntime } from "./lib/network.js";
 import { OutputFormatter } from "./lib/output.js";
@@ -12,15 +13,23 @@ import { setupMcpHttpApp } from "./http-app.js";
 /* ------------------------------------------------------------------ */
 /*  Module entry point                                                 */
 /* ------------------------------------------------------------------ */
+assertSafeHttpAuthConfig(env);
 const requestRuntime = new GitLabRequestRuntime(env, logger);
 configureNetworkRuntime(env, logger);
+const defaultToken = env.GITLAB_PERSONAL_ACCESS_TOKEN ?? env.GITLAB_JOB_TOKEN;
+const defaultAuthHeader = env.GITLAB_PERSONAL_ACCESS_TOKEN
+    ? undefined
+    : env.GITLAB_JOB_TOKEN
+        ? "job-token"
+        : undefined;
 const context = {
     env,
     logger,
-    gitlab: new GitLabClient(env.GITLAB_API_URL, env.GITLAB_PERSONAL_ACCESS_TOKEN, {
+    gitlab: new GitLabClient(env.GITLAB_API_URL, defaultToken, {
         apiUrls: env.GITLAB_API_URLS,
         timeoutMs: env.GITLAB_HTTP_TIMEOUT_MS,
         maxLocalFileBytes: env.GITLAB_MAX_LOCAL_FILE_BYTES,
+        defaultAuthHeader,
         beforeRequest: (requestContext) => requestRuntime.beforeRequest(requestContext)
     }),
     policy: new ToolPolicyEngine({

package/dist/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7D,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAErC,MAAM,OAAO,GAAe;IAC1B,GAAG;IACH,MAAM;IACN,MAAM,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,4BAA4B,EAAE;QAC7E,OAAO,EAAE,GAAG,CAAC,eAAe;QAC5B,SAAS,EAAE,GAAG,CAAC,sBAAsB;QACrC,iBAAiB,EAAE,GAAG,CAAC,2BAA2B;QAClD,aAAa,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC;KAChF,CAAC;IACF,MAAM,EAAE,IAAI,gBAAgB,CAAC;QAC3B,YAAY,EAAE,GAAG,CAAC,qBAAqB;QACvC,oBAAoB,EAAE,GAAG,CAAC,4BAA4B;QACtD,YAAY,EAAE,GAAG,CAAC,oBAAoB;QACtC,gBAAgB,EAAE,uBAAuB,CAAC,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC;QAChF,eAAe,EAAE;YACf,IAAI,EAAE,GAAG,CAAC,eAAe;YACzB,SAAS,EAAE,GAAG,CAAC,aAAa;YAC5B,QAAQ,EAAE,GAAG,CAAC,YAAY;YAC1B,OAAO,EAAE,GAAG,CAAC,WAAW;SACzB;KACF,CAAC;IACF,SAAS,EAAE,IAAI,eAAe,CAAC;QAC7B,YAAY,EAAE,GAAG,CAAC,oBAAoB;QACtC,QAAQ,EAAE,GAAG,CAAC,yBAAyB;KACxC,CAAC;IACF,mBAAmB,EAAE,KAAK;CAC3B,CAAC;AAEF,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,sBAAsB,EAAE,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;AAE5F,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AAErC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE;IACnD,MAAM,CAAC,IAAI,CACT;QACE,IAAI,EAAE,GAAG,CAAC,SAAS;QACnB,IAAI,EAAE,GAAG,CAAC,SAAS;QACnB,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,iBAAiB;QAC9D,QAAQ,EAAE,GAAG,CAAC,cAAc;QAC5B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,qBAAqB,EAAE,GAAG,CAAC,uBAAuB;QAClD,iBAAiB,EAAE,GAAG,CAAC,oBAAoB;KAC5C,EACD,yBAAyB,CAC1B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;IAClC,KAAK,sBAAsB,EAAE,CAAC;AAChC,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,UAAU,CAAC,KAAK,EAAE,CAAC;AAEnB,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;IAC1B,KAAK,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;IAC3B,KAAK,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,wBAAwB,CAAC,GAAG,CAAC,CAAC;AAE9B,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7D,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,MAAM,YAAY,GAAG,GAAG,CAAC,4BAA4B,IAAI,GAAG,CAAC,gBAAgB,CAAC;AAC9E,MAAM,iBAAiB,GAAG,GAAG,CAAC,4BAA4B;IACxD,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,GAAG,CAAC,gBAAgB;QACpB,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,SAAS,CAAC;AAEhB,MAAM,OAAO,GAAe;IAC1B,GAAG;IACH,MAAM;IACN,MAAM,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,EAAE;QACzD,OAAO,EAAE,GAAG,CAAC,eAAe;QAC5B,SAAS,EAAE,GAAG,CAAC,sBAAsB;QACrC,iBAAiB,EAAE,GAAG,CAAC,2BAA2B;QAClD,iBAAiB;QACjB,aAAa,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC;KAChF,CAAC;IACF,MAAM,EAAE,IAAI,gBAAgB,CAAC;QAC3B,YAAY,EAAE,GAAG,CAAC,qBAAqB;QACvC,oBAAoB,EAAE,GAAG,CAAC,4BAA4B;QACtD,YAAY,EAAE,GAAG,CAAC,oBAAoB;QACtC,gBAAgB,EAAE,uBAAuB,CAAC,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC;QAChF,eAAe,EAAE;YACf,IAAI,EAAE,GAAG,CAAC,eAAe;YACzB,SAAS,EAAE,GAAG,CAAC,aAAa;YAC5B,QAAQ,EAAE,GAAG,CAAC,YAAY;YAC1B,OAAO,EAAE,GAAG,CAAC,WAAW;SACzB;KACF,CAAC;IACF,SAAS,EAAE,IAAI,eAAe,CAAC;QAC7B,YAAY,EAAE,GAAG,CAAC,oBAAoB;QACtC,QAAQ,EAAE,GAAG,CAAC,yBAAyB;KACxC,CAAC;IACF,mBAAmB,EAAE,KAAK;CAC3B,CAAC;AAEF,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,sBAAsB,EAAE,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;AAE5F,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AAErC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE;IACnD,MAAM,CAAC,IAAI,CACT;QACE,IAAI,EAAE,GAAG,CAAC,SAAS;QACnB,IAAI,EAAE,GAAG,CAAC,SAAS;QACnB,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,iBAAiB;QAC9D,QAAQ,EAAE,GAAG,CAAC,cAAc;QAC5B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,qBAAqB,EAAE,GAAG,CAAC,uBAAuB;QAClD,iBAAiB,EAAE,GAAG,CAAC,oBAAoB;KAC5C,EACD,yBAAyB,CAC1B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;IAClC,KAAK,sBAAsB,EAAE,CAAC;AAChC,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,UAAU,CAAC,KAAK,EAAE,CAAC;AAEnB,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;IAC1B,KAAK,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;IAC3B,KAAK,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC"}

package/dist/index.js

@@ -13,13 +13,20 @@ async function main() {
     const deniedToolsRegex = compileDeniedToolsRegex(env.GITLAB_DENIED_TOOLS_REGEX, logger);
     configureNetworkRuntime(env, logger);
     const requestRuntime = new GitLabRequestRuntime(env, logger);
+    const defaultToken = env.GITLAB_PERSONAL_ACCESS_TOKEN ?? env.GITLAB_JOB_TOKEN;
+    const defaultAuthHeader = env.GITLAB_PERSONAL_ACCESS_TOKEN
+        ? undefined
+        : env.GITLAB_JOB_TOKEN
+            ? "job-token"
+            : undefined;
     const context = {
         env,
         logger,
-        gitlab: new GitLabClient(env.GITLAB_API_URL, env.GITLAB_PERSONAL_ACCESS_TOKEN, {
+        gitlab: new GitLabClient(env.GITLAB_API_URL, defaultToken, {
             apiUrls: env.GITLAB_API_URLS,
             timeoutMs: env.GITLAB_HTTP_TIMEOUT_MS,
             maxLocalFileBytes: env.GITLAB_MAX_LOCAL_FILE_BYTES,
+            defaultAuthHeader,
             beforeRequest: (requestContext) => requestRuntime.beforeRequest(requestContext)
         }),
         policy: new ToolPolicyEngine({

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAG3D,KAAK,UAAU,IAAI;IACjB,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;IACxF,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAe;QAC1B,GAAG;QACH,MAAM;QACN,MAAM,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,4BAA4B,EAAE;YAC7E,OAAO,EAAE,GAAG,CAAC,eAAe;YAC5B,SAAS,EAAE,GAAG,CAAC,sBAAsB;YACrC,iBAAiB,EAAE,GAAG,CAAC,2BAA2B;YAClD,aAAa,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC;SAChF,CAAC;QACF,MAAM,EAAE,IAAI,gBAAgB,CAAC;YAC3B,YAAY,EAAE,GAAG,CAAC,qBAAqB;YACvC,oBAAoB,EAAE,GAAG,CAAC,4BAA4B;YACtD,YAAY,EAAE,GAAG,CAAC,oBAAoB;YACtC,gBAAgB;YAChB,eAAe,EAAE;gBACf,IAAI,EAAE,GAAG,CAAC,eAAe;gBACzB,SAAS,EAAE,GAAG,CAAC,aAAa;gBAC5B,QAAQ,EAAE,GAAG,CAAC,YAAY;gBAC1B,OAAO,EAAE,GAAG,CAAC,WAAW;aACzB;SACF,CAAC;QACF,SAAS,EAAE,IAAI,eAAe,CAAC;YAC7B,YAAY,EAAE,GAAG,CAAC,oBAAoB;YACtC,QAAQ,EAAE,GAAG,CAAC,yBAAyB;SACxC,CAAC;QACF,mBAAmB,EAAE,IAAI;KAC1B,CAAC;IAEF,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAE1D,MAAM,YAAY,GAAG,CAAC,MAAsB,EAAE,EAAE;QAC9C,KAAK,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAsB,EACtB,MAA0C;IAE1C,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC1B,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,4BAA4B,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAG3D,KAAK,UAAU,IAAI;IACjB,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;IACxF,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,GAAG,CAAC,4BAA4B,IAAI,GAAG,CAAC,gBAAgB,CAAC;IAC9E,MAAM,iBAAiB,GAAG,GAAG,CAAC,4BAA4B;QACxD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,GAAG,CAAC,gBAAgB;YACpB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,OAAO,GAAe;QAC1B,GAAG;QACH,MAAM;QACN,MAAM,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,EAAE;YACzD,OAAO,EAAE,GAAG,CAAC,eAAe;YAC5B,SAAS,EAAE,GAAG,CAAC,sBAAsB;YACrC,iBAAiB,EAAE,GAAG,CAAC,2BAA2B;YAClD,iBAAiB;YACjB,aAAa,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC;SAChF,CAAC;QACF,MAAM,EAAE,IAAI,gBAAgB,CAAC;YAC3B,YAAY,EAAE,GAAG,CAAC,qBAAqB;YACvC,oBAAoB,EAAE,GAAG,CAAC,4BAA4B;YACtD,YAAY,EAAE,GAAG,CAAC,oBAAoB;YACtC,gBAAgB;YAChB,eAAe,EAAE;gBACf,IAAI,EAAE,GAAG,CAAC,eAAe;gBACzB,SAAS,EAAE,GAAG,CAAC,aAAa;gBAC5B,QAAQ,EAAE,GAAG,CAAC,YAAY;gBAC1B,OAAO,EAAE,GAAG,CAAC,WAAW;aACzB;SACF,CAAC;QACF,SAAS,EAAE,IAAI,eAAe,CAAC;YAC7B,YAAY,EAAE,GAAG,CAAC,oBAAoB;YACtC,QAAQ,EAAE,GAAG,CAAC,yBAAyB;SACxC,CAAC;QACF,mBAAmB,EAAE,IAAI;KAC1B,CAAC;IAEF,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAE1D,MAAM,YAAY,GAAG,CAAC,MAAsB,EAAE,EAAE;QAC9C,KAAK,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAsB,EACtB,MAA0C;IAE1C,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC1B,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,4BAA4B,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/lib/download-token.d.ts

@@ -0,0 +1,24 @@
+import type { GitLabAuthHeader } from "../types/auth.js";
+export interface DownloadTokenAuth {
+    header: GitLabAuthHeader;
+    token: string;
+    apiUrl?: string;
+}
+export interface DownloadTokenResource {
+    type: string;
+    params: Record<string, string>;
+}
+export interface DownloadTokenPayload extends DownloadTokenAuth {
+    expiresAt: number;
+    resource: DownloadTokenResource;
+}
+export declare function createDownloadToken(auth: DownloadTokenAuth, resource: DownloadTokenResource, options: {
+    secret?: string;
+    ttlSeconds: number;
+    now?: number;
+}): string;
+export declare function decryptDownloadToken(token: string, options: {
+    secret?: string;
+    now?: number;
+}): DownloadTokenPayload | undefined;
+export declare function downloadTokenResourceMatches(payload: DownloadTokenPayload, resource: DownloadTokenResource): boolean;

package/dist/lib/download-token.js

@@ -0,0 +1,84 @@
+import { createCipheriv, createDecipheriv, createHash, randomBytes } from "node:crypto";
+export function createDownloadToken(auth, resource, options) {
+    const key = deriveDownloadTokenKey(options.secret);
+    const iv = randomBytes(12);
+    const cipher = createCipheriv("aes-256-gcm", key, iv);
+    const payload = JSON.stringify({
+        h: auth.header,
+        t: auth.token,
+        u: auth.apiUrl,
+        e: Math.floor((options.now ?? Date.now()) / 1000) + options.ttlSeconds,
+        r: resource.type,
+        p: resource.params
+    });
+    const encrypted = Buffer.concat([cipher.update(payload, "utf8"), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return Buffer.concat([iv, tag, encrypted]).toString("base64url");
+}
+export function decryptDownloadToken(token, options) {
+    try {
+        const bytes = Buffer.from(token, "base64url");
+        if (bytes.length < 29) {
+            return undefined;
+        }
+        const key = deriveDownloadTokenKey(options.secret);
+        const iv = bytes.subarray(0, 12);
+        const tag = bytes.subarray(12, 28);
+        const encrypted = bytes.subarray(28);
+        const decipher = createDecipheriv("aes-256-gcm", key, iv);
+        decipher.setAuthTag(tag);
+        const raw = Buffer.concat([decipher.update(encrypted), decipher.final()]).toString("utf8");
+        const parsed = JSON.parse(raw);
+        if (!isGitLabAuthHeader(parsed.h) || typeof parsed.t !== "string") {
+            return undefined;
+        }
+        if (typeof parsed.e !== "number") {
+            return undefined;
+        }
+        if (Math.floor((options.now ?? Date.now()) / 1000) > parsed.e) {
+            return undefined;
+        }
+        if (typeof parsed.r !== "string" || !isStringRecord(parsed.p)) {
+            return undefined;
+        }
+        return {
+            header: parsed.h,
+            token: parsed.t,
+            apiUrl: typeof parsed.u === "string" ? parsed.u : undefined,
+            expiresAt: parsed.e,
+            resource: {
+                type: parsed.r,
+                params: parsed.p
+            }
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
+export function downloadTokenResourceMatches(payload, resource) {
+    if (payload.resource.type !== resource.type) {
+        return false;
+    }
+    return stableStringify(payload.resource.params) === stableStringify(resource.params);
+}
+function deriveDownloadTokenKey(secret) {
+    if (secret && secret.trim().length > 0) {
+        return createHash("sha256").update(secret).digest();
+    }
+    return processKey;
+}
+function isGitLabAuthHeader(value) {
+    return value === "authorization" || value === "private-token" || value === "job-token";
+}
+function isStringRecord(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return false;
+    }
+    return Object.values(value).every((item) => typeof item === "string");
+}
+function stableStringify(value) {
+    return JSON.stringify(Object.fromEntries(Object.entries(value).sort(([left], [right]) => left.localeCompare(right))));
+}
+const processKey = randomBytes(32);
+//# sourceMappingURL=download-token.js.map

package/dist/lib/download-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download-token.js","sourceRoot":"","sources":["../../src/lib/download-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAoBxF,MAAM,UAAU,mBAAmB,CACjC,IAAuB,EACvB,QAA+B,EAC/B,OAIC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,CAAC,EAAE,IAAI,CAAC,MAAM;QACd,CAAC,EAAE,IAAI,CAAC,KAAK;QACb,CAAC,EAAE,IAAI,CAAC,MAAM;QACd,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,UAAU;QACtE,CAAC,EAAE,QAAQ,CAAC,IAAI;QAChB,CAAC,EAAE,QAAQ,CAAC,MAAM;KACnB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,OAGC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAO5B,CAAC;QAEF,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC,CAAC;YACf,MAAM,EAAE,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,SAAS,EAAE,MAAM,CAAC,CAAC;YACnB,QAAQ,EAAE;gBACR,IAAI,EAAE,MAAM,CAAC,CAAC;gBACd,MAAM,EAAE,MAAM,CAAC,CAAC;aACjB;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAA6B,EAC7B,QAA+B;IAE/B,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,sBAAsB,CAAC,MAA0B;IACxD,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IACtD,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,WAAW,CAAC;AACzF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,eAAe,CAAC,KAA6B;IACpD,OAAO,IAAI,CAAC,SAAS,CACnB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAC/F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC"}

package/dist/lib/gitlab-client.d.ts

@@ -6,6 +6,7 @@ export interface GitLabClientOptions {
     maxAttachmentBytes?: number;
     maxLocalFileBytes?: number;
     maxResponseBodyBytes?: number;
+    defaultAuthHeader?: GitLabAuthHeader;
     beforeRequest?: (context: GitLabBeforeRequestContext) => Promise<GitLabBeforeRequestResult | void>;
 }
 export interface GitLabRequestOptions {
@@ -89,6 +90,7 @@ export declare class GitLabClient {
     private readonly apiUrls;
     private nextApiUrlIndex;
     private readonly defaultToken?;
+    private readonly defaultAuthHeader?;
     private readonly timeoutMs;
     private readonly maxAttachmentBytes;
     private readonly maxLocalFileBytes;
@@ -106,6 +108,13 @@ export declare class GitLabClient {
         namespace_id?: string | number;
         default_branch?: string;
     }, options?: GitLabRequestOptions): Promise<unknown>;
+    createGroup(payload: {
+        name: string;
+        path: string;
+        description?: string;
+        visibility?: "private" | "internal" | "public";
+        parent_id?: number;
+    }, options?: GitLabRequestOptions): Promise<unknown>;
     listProjectMembers(projectId: string, options?: GitLabRequestOptions): Promise<unknown>;
     listGroupProjects(groupId: string, options?: GitLabRequestOptions): Promise<unknown>;
     forkRepository(projectId: string, payload?: {
@@ -119,9 +128,12 @@ export declare class GitLabClient {
     }, options?: GitLabRequestOptions): Promise<unknown>;
     searchProjects(search: string, limit?: number, options?: GitLabRequestOptions): Promise<unknown>;
     searchRepositories(search: string, options?: GitLabRequestOptions): Promise<unknown>;
+    searchCode(search: string, options?: GitLabRequestOptions): Promise<unknown>;
     searchCodeBlobs(projectId: string, search: string, options?: GitLabRequestOptions): Promise<unknown>;
+    searchGroupCodeBlobs(groupId: string, search: string, options?: GitLabRequestOptions): Promise<unknown>;
     getRepositoryTree(projectId: string, options?: GitLabRequestOptions): Promise<unknown>;
     getFileContents(projectId: string, filePath: string, ref: string, options?: GitLabRequestOptions): Promise<unknown>;
+    getFileBlame(projectId: string, filePath: string, ref: string, options?: GitLabRequestOptions): Promise<unknown>;
     createOrUpdateFile(projectId: string, filePath: string, payload: {
         branch: string;
         content: string;
@@ -146,6 +158,9 @@ export declare class GitLabClient {
         branch: string;
         ref: string;
     }, options?: GitLabRequestOptions): Promise<unknown>;
+    listBranches(projectId: string, options?: GitLabRequestOptions): Promise<unknown>;
+    getBranch(projectId: string, branch: string, options?: GitLabRequestOptions): Promise<unknown>;
+    deleteBranch(projectId: string, branch: string, options?: GitLabRequestOptions): Promise<unknown>;
     getBranchDiffs(projectId: string, payload: {
         from: string;
         to: string;
@@ -154,9 +169,14 @@ export declare class GitLabClient {
     listCommits(projectId: string, options?: GitLabRequestOptions): Promise<unknown>;
     getCommit(projectId: string, sha: string, options?: GitLabRequestOptions): Promise<unknown>;
     getCommitDiff(projectId: string, sha: string, options?: GitLabRequestOptions): Promise<unknown>;
+    listCommitStatuses(projectId: string, sha: string, options?: GitLabRequestOptions): Promise<unknown>;
+    createCommitStatus(projectId: string, sha: string, payload: Record<string, string | number | boolean | null | undefined>, options?: GitLabRequestOptions): Promise<unknown>;
     listMergeRequests(projectId: string, options?: GitLabRequestOptions): Promise<unknown>;
     listGlobalMergeRequests(options?: GitLabRequestOptions): Promise<unknown>;
     getMergeRequest(projectId: string, mergeRequestIid: string, options?: GitLabRequestOptions): Promise<unknown>;
+    countMergeRequestCommits(projectId: string, mergeRequestIid: string, options?: GitLabRequestOptions): Promise<number>;
+    listMergeRequestCommits(projectId: string, mergeRequestIid: string, options?: GitLabRequestOptions): Promise<unknown>;
+    listMergeRequestPipelines(projectId: string, mergeRequestIid: string, options?: GitLabRequestOptions): Promise<unknown>;
     createMergeRequest(projectId: string, payload: {
         source_branch: string;
         target_branch: string;
@@ -200,6 +220,20 @@ export declare class GitLabClient {
     listMergeRequestNotes(projectId: string, mergeRequestIid: string, options?: GitLabRequestOptions): Promise<unknown>;
     getMergeRequestNote(projectId: string, mergeRequestIid: string, noteId: string, options?: GitLabRequestOptions): Promise<unknown>;
     createMergeRequestNote(projectId: string, mergeRequestIid: string, body: string, options?: GitLabRequestOptions): Promise<unknown>;
+    listMergeRequestEmojiReactions(projectId: string, mergeRequestIid: string, options?: GitLabRequestOptions): Promise<unknown>;
+    createMergeRequestEmojiReaction(projectId: string, mergeRequestIid: string, name: string, options?: GitLabRequestOptions): Promise<unknown>;
+    deleteMergeRequestEmojiReaction(projectId: string, mergeRequestIid: string, awardId: string, options?: GitLabRequestOptions): Promise<unknown>;
+    listMergeRequestNoteEmojiReactions(projectId: string, mergeRequestIid: string, noteId: string, payload?: {
+        discussion_id?: string;
+    }, options?: GitLabRequestOptions): Promise<unknown>;
+    createMergeRequestNoteEmojiReaction(projectId: string, mergeRequestIid: string, noteId: string, payload: {
+        name: string;
+        discussion_id?: string;
+    }, options?: GitLabRequestOptions): Promise<unknown>;
+    deleteMergeRequestNoteEmojiReaction(projectId: string, mergeRequestIid: string, noteId: string, payload: {
+        award_id: string;
+        discussion_id?: string;
+    }, options?: GitLabRequestOptions): Promise<unknown>;
     getDraftNote(projectId: string, mergeRequestIid: string, draftNoteId: string, options?: GitLabRequestOptions): Promise<unknown>;
     listDraftNotes(projectId: string, mergeRequestIid: string, options?: GitLabRequestOptions): Promise<unknown>;
     createDraftNote(projectId: string, mergeRequestIid: string, payload: {
@@ -247,12 +281,29 @@ export declare class GitLabClient {
         page?: number;
         scope?: string;
     }, options?: GitLabRequestOptions): Promise<unknown>;
+    listTodos(options?: GitLabRequestOptions): Promise<unknown>;
+    markTodoDone(todoId: string, options?: GitLabRequestOptions): Promise<unknown>;
+    markAllTodosDone(options?: GitLabRequestOptions): Promise<unknown>;
     listIssueDiscussions(projectId: string, issueIid: string, options?: GitLabRequestOptions): Promise<unknown>;
     createIssueNote(projectId: string, issueIid: string, payload: {
         body: string;
         discussion_id?: string;
         created_at?: string;
     }, options?: GitLabRequestOptions): Promise<unknown>;
+    listIssueEmojiReactions(projectId: string, issueIid: string, options?: GitLabRequestOptions): Promise<unknown>;
+    createIssueEmojiReaction(projectId: string, issueIid: string, name: string, options?: GitLabRequestOptions): Promise<unknown>;
+    deleteIssueEmojiReaction(projectId: string, issueIid: string, awardId: string, options?: GitLabRequestOptions): Promise<unknown>;
+    listIssueNoteEmojiReactions(projectId: string, issueIid: string, noteId: string, payload?: {
+        discussion_id?: string;
+    }, options?: GitLabRequestOptions): Promise<unknown>;
+    createIssueNoteEmojiReaction(projectId: string, issueIid: string, noteId: string, payload: {
+        name: string;
+        discussion_id?: string;
+    }, options?: GitLabRequestOptions): Promise<unknown>;
+    deleteIssueNoteEmojiReaction(projectId: string, issueIid: string, noteId: string, payload: {
+        award_id: string;
+        discussion_id?: string;
+    }, options?: GitLabRequestOptions): Promise<unknown>;
     updateIssueNote(projectId: string, issueIid: string, discussionId: string, noteId: string, payload: {
         body?: string;
         resolved?: boolean;
@@ -278,6 +329,11 @@ export declare class GitLabClient {
         format?: "markdown" | "rdoc" | "asciidoc" | "org";
     }, options?: GitLabRequestOptions): Promise<unknown>;
     deleteWikiPage(projectId: string, slug: string, options?: GitLabRequestOptions): Promise<unknown>;
+    listGroupWikiPages(groupId: string, options?: GitLabRequestOptions): Promise<unknown>;
+    getGroupWikiPage(groupId: string, slug: string, options?: GitLabRequestOptions): Promise<unknown>;
+    createGroupWikiPage(groupId: string, payload: Record<string, unknown>, options?: GitLabRequestOptions): Promise<unknown>;
+    updateGroupWikiPage(groupId: string, slug: string, payload: Record<string, unknown>, options?: GitLabRequestOptions): Promise<unknown>;
+    deleteGroupWikiPage(groupId: string, slug: string, options?: GitLabRequestOptions): Promise<unknown>;
     listPipelines(projectId: string, options?: GitLabRequestOptions): Promise<unknown>;
     getPipeline(projectId: string, pipelineId: string, options?: GitLabRequestOptions): Promise<unknown>;
     listDeployments(projectId: string, options?: GitLabRequestOptions): Promise<unknown>;
@@ -288,6 +344,8 @@ export declare class GitLabClient {
     listPipelineTriggerJobs(projectId: string, pipelineId: string, options?: GitLabRequestOptions): Promise<unknown>;
     getPipelineJob(projectId: string, jobId: string, options?: GitLabRequestOptions): Promise<unknown>;
     getPipelineJobOutput(projectId: string, jobId: string, options?: GitLabRequestOptions): Promise<unknown>;
+    validateCiLint(projectId: string, payload: Record<string, unknown>, options?: GitLabRequestOptions): Promise<unknown>;
+    validateProjectCiLint(projectId: string, options?: GitLabRequestOptions): Promise<unknown>;
     listJobArtifacts(projectId: string, jobId: string, options?: GitLabRequestOptions): Promise<unknown>;
     downloadJobArtifacts(projectId: string, jobId: string, options?: GitLabRequestOptions): Promise<GitLabDownloadedFile>;
     saveJobArtifacts(projectId: string, jobId: string, localPath?: string, options?: GitLabRequestOptions): Promise<GitLabSavedFile>;
@@ -327,7 +385,12 @@ export declare class GitLabClient {
     updateRelease(projectId: string, tagName: string, payload: Record<string, unknown>, options?: GitLabRequestOptions): Promise<unknown>;
     deleteRelease(projectId: string, tagName: string, options?: GitLabRequestOptions): Promise<unknown>;
     createReleaseEvidence(projectId: string, tagName: string, options?: GitLabRequestOptions): Promise<unknown>;
-    downloadReleaseAsset(projectId: string, tagName: string, directAssetPath: string, options?: GitLabRequestOptions): Promise<unknown>;
+    downloadReleaseAsset(projectId: string, tagName: string, directAssetPath: string, options?: GitLabRequestOptions): Promise<GitLabDownloadedFile>;
+    listTags(projectId: string, options?: GitLabRequestOptions): Promise<unknown>;
+    getTag(projectId: string, tagName: string, options?: GitLabRequestOptions): Promise<unknown>;
+    createTag(projectId: string, payload: Record<string, unknown>, options?: GitLabRequestOptions): Promise<unknown>;
+    deleteTag(projectId: string, tagName: string, options?: GitLabRequestOptions): Promise<unknown>;
+    getTagSignature(projectId: string, tagName: string, options?: GitLabRequestOptions): Promise<unknown>;
     listLabels(projectId: string, options?: GitLabRequestOptions): Promise<unknown>;
     getLabel(projectId: string, labelId: string, options?: GitLabRequestOptions): Promise<unknown>;
     createLabel(projectId: string, payload: Record<string, unknown>, options?: GitLabRequestOptions): Promise<unknown>;
@@ -338,8 +401,18 @@ export declare class GitLabClient {
     getNamespace(namespaceIdOrPath: string, options?: GitLabRequestOptions): Promise<unknown>;
     verifyNamespace(pathName: string, options?: GitLabRequestOptions): Promise<unknown>;
     getUsers(options?: GitLabRequestOptions): Promise<unknown>;
+    getUser(userId: string, options?: GitLabRequestOptions): Promise<unknown>;
+    whoami(options?: GitLabRequestOptions): Promise<unknown>;
     listEvents(options?: GitLabRequestOptions): Promise<unknown>;
     getProjectEvents(projectId: string, options?: GitLabRequestOptions): Promise<unknown>;
+    listWebhooks(scope: {
+        projectId?: string;
+        groupId?: string;
+    }, options?: GitLabRequestOptions): Promise<unknown>;
+    listWebhookEvents(scope: {
+        projectId?: string;
+        groupId?: string;
+    }, hookId: string, options?: GitLabRequestOptions): Promise<unknown>;
     uploadMarkdown(projectId: string, content: string, filename: string, options?: GitLabRequestOptions): Promise<unknown>;
     uploadMarkdownFile(projectId: string, filePath: string, options?: GitLabRequestOptions): Promise<unknown>;
     downloadAttachment(urlOrPath: string, options?: GitLabRequestOptions): Promise<GitLabDownloadedFile>;
@@ -355,9 +428,13 @@ export declare class GitLabClient {
     delete(path: string, options?: GitLabRequestOptions): Promise<unknown>;
     private request;
     private rawRequest;
+    private parseApiResponse;
     private parseResponseBody;
     private resolveRequestConfig;
     private pickApiUrl;
+    private webhookBasePath;
+    private awardEmojiPath;
+    private createAwardEmoji;
     private resolveAbsoluteUrl;
     private resolveAttachmentUrl;
     private attachAuth;