gitlab-api 25.23.0__tar.gz → 25.24.0__tar.gz

{gitlab_api-25.23.0/gitlab_api.egg-info → gitlab_api-25.24.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitlab-api
-Version: 25.23.0
+Version: 25.24.0
 Summary: GitLab API + MCP Server + A2A Server
 Author-email: Audel Rouhi <knucklessg1@gmail.com>
 License: MIT
@@ -12,11 +12,11 @@ Classifier: Programming Language :: Python :: 3
 Requires-Python: <3.14,>=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: agent-utilities>=0.9.0
+Requires-Dist: agent-utilities>=0.11.0
 Provides-Extra: mcp
-Requires-Dist: agent-utilities[mcp]>=0.9.0; extra == "mcp"
+Requires-Dist: agent-utilities[mcp]>=0.11.0; extra == "mcp"
 Provides-Extra: agent
-Requires-Dist: agent-utilities[agent,logfire]>=0.9.0; extra == "agent"
+Requires-Dist: agent-utilities[agent,logfire]>=0.11.0; extra == "agent"
 Provides-Extra: gql
 Requires-Dist: gql>=4.0.0; extra == "gql"
 Provides-Extra: all
@@ -24,6 +24,7 @@ Requires-Dist: gitlab-api[agent,gql,logfire,mcp]>=25.15.56; extra == "all"
 Provides-Extra: test
 Requires-Dist: pytest; extra == "test"
 Requires-Dist: pytest-asyncio; extra == "test"
+Requires-Dist: pytest-cov; extra == "test"
 Dynamic: license-file
 
 # GitLab API - A2A | AG-UI | MCP
@@ -49,7 +50,7 @@ Dynamic: license-file
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/gitlab-api)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/gitlab-api)
 
-*Version: 25.23.0*
+*Version: 25.24.0*
 
 ## Overview
 

{gitlab_api-25.23.0 → gitlab_api-25.24.0}/README.md

@@ -21,7 +21,7 @@
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/gitlab-api)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/gitlab-api)
 
-*Version: 25.23.0*
+*Version: 25.24.0*
 
 ## Overview
 

{gitlab_api-25.23.0 → gitlab_api-25.24.0}/gitlab_api/agent_server.py

@@ -12,7 +12,7 @@ from agent_utilities import (
     load_identity,
 )
 
-__version__ = "25.23.0"
+__version__ = "25.24.0"
 
 logging.basicConfig(
     level=logging.INFO,

{gitlab_api-25.23.0 → gitlab_api-25.24.0}/gitlab_api/api_client.py

@@ -3456,6 +3456,36 @@ class Api:
         except ValidationError as e:
             raise ParameterError(f"Invalid parameters: {e.errors()}") from e
 
+    @require_auth
+    def delete_shared_project_link(self, **kwargs) -> Response:
+        """
+        Unshare a specific project from a group.
+
+        Args:
+            **kwargs: Additional parameters for the request (e.g., project_id, group_id).
+
+        Returns:
+            Response: A wrapper containing the original response (no data for successful deletion).
+
+        Raises:
+            MissingParameterError: If the project_id or group_id is missing.
+            ParameterError: If invalid parameters are provided.
+        """
+        project = ProjectModel(**kwargs)
+        if project.project_id is None or project.group_id is None:
+            raise MissingParameterError
+        try:
+            response = self._session.delete(
+                url=f"{self.url}/projects/{project.project_id}/share/{project.group_id}",
+                headers=self.headers,
+                verify=self.verify,
+                proxies=self.proxies,
+            )
+            response.raise_for_status()
+            return Response(response=response)
+        except ValidationError as e:
+            raise ParameterError(f"Invalid parameters: {e.errors()}") from e
+
     @require_auth
     def get_protected_branches(self, **kwargs) -> Response:
         """

gitlab_api-25.24.0/gitlab_api/auth.py

@@ -0,0 +1,78 @@
+"""GitLab Authentication Module.
+
+Authentication priority:
+1. **OIDC Delegation** — If ``ENABLE_DELEGATION`` is active, exchanges
+   the IdP-issued user token for a downstream GitLab access token
+   via RFC 8693 Token Exchange using the shared ``delegated_auth`` helper.
+2. **Fixed Credentials** — Falls back to ``GITLAB_TOKEN`` env var.
+
+See ``docs/guides/oauth_sso.md`` in agent-utilities for full details.
+"""
+
+import os
+import threading
+
+from agent_utilities.base_utilities import get_logger, to_boolean
+from agent_utilities.core.exceptions import AuthError, UnauthorizedError
+
+from gitlab_api.api_client import Api
+
+local = threading.local()
+logger = get_logger(__name__)
+
+
+def get_client(
+    instance: str = os.getenv("GITLAB_URL", "https://gitlab.com"),
+    token: str | None = os.getenv("GITLAB_TOKEN", None),
+    verify: bool = to_boolean(string=os.getenv("GITLAB_SSL_VERIFY", "True")),
+    config: dict | None = None,
+) -> Api:
+    """Factory function to create the GitLab Api client.
+
+    Supports OIDC delegation and fixed credentials (token).
+    Uses the shared ``delegated_auth`` helper from agent-utilities.
+    """
+    from agent_utilities.mcp.delegated_auth import (
+        get_delegated_token,
+        get_user_identity,
+        is_delegation_enabled,
+    )
+
+    # Resolve delegation config — prefer shared mcp_auth_config
+    delegation_enabled = is_delegation_enabled(config)
+
+    # --- Path 1: OIDC Delegation (RFC 8693 Token Exchange) ---
+    if delegation_enabled:
+        try:
+            delegated_token = get_delegated_token(
+                config=config,
+                audience=(config or {}).get("audience", instance),
+                scopes=(config or {}).get("delegated_scopes", "api"),
+                verify=verify,
+            )
+            identity = get_user_identity()
+            logger.info(
+                "Using OIDC delegated token for GitLab API",
+                extra={
+                    "user_email": identity.get("email"),
+                    "instance": instance,
+                },
+            )
+            return Api(url=instance, token=delegated_token, verify=verify)
+        except Exception as e:
+            logger.error(
+                "OIDC delegation failed for GitLab",
+                extra={"error_type": type(e).__name__, "error_message": str(e)},
+            )
+            raise RuntimeError(f"Token exchange failed: {str(e)}") from e
+
+    # --- Path 2: Fixed Credentials (GITLAB_TOKEN) ---
+    logger.info("Using fixed credentials for GitLab API")
+    try:
+        return Api(url=instance, token=token, verify=verify)
+    except (AuthError, UnauthorizedError) as e:
+        raise RuntimeError(
+            f"AUTHENTICATION ERROR: The GitLab credentials provided are not valid for '{instance}'. "
+            f"Please check your GITLAB_TOKEN and GITLAB_URL environment variables. "
+            f"Error details: {str(e)}"
+        ) from e