gitlab-api 27.3.12__tar.gz → 27.3.14__tar.gz

{gitlab_api-27.3.12 → gitlab_api-27.3.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitlab-api
-Version: 27.3.12
+Version: 27.3.14
 Summary: GitLab API + MCP Server
 Author-email: Repository Maintainers <maintainers@knuckles.team>
 License: MIT
@@ -12,7 +12,7 @@ Classifier: Programming Language :: Python :: 3
 Requires-Python: >=3.12
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: agent-connector-sdk[graphql,mcp]<0.6.0,>=0.5.3
+Requires-Dist: agent-connector-sdk[graphql,mcp]<0.6.0,>=0.5.5
 Requires-Dist: python-dotenv>=1.2.4
 Provides-Extra: mcp
 Provides-Extra: all

{gitlab_api-27.3.12 → gitlab_api-27.3.14}/gitlab_api/connector_sources.py

@@ -24,6 +24,24 @@ SOURCES = (
         records_path="data",
         text_field="description",
         title_field="title",
+        edges=[
+            {
+                "relationship": "issueAuthoredBy",
+                "target_field": "author",
+                "target_type": "Person",
+                "target_id_key": "id",
+                "target_id_template": "user:{id}",
+                "target_fields": {"name": "name", "username": "username"},
+            },
+            {
+                "relationship": "issueAssignedTo",
+                "target_field": "assignees",
+                "target_type": "Person",
+                "target_id_key": "id",
+                "target_id_template": "user:{id}",
+                "target_fields": {"name": "name", "username": "username"},
+            },
+        ],
     ),
     source_meta(
         tool="gitlab_get_projects",
@@ -45,6 +63,24 @@ SOURCES = (
         server="gitlab-mcp",
         text_field="description",
         title_field="path_with_namespace",
+        edges=[
+            {
+                "relationship": "projectOwnedBy",
+                "target_field": "owner",
+                "target_type": "Person",
+                "target_id_key": "id",
+                "target_id_template": "user:{id}",
+                "target_fields": {"name": "name", "username": "username"},
+            },
+            {
+                "relationship": "partOfGroup",
+                "target_field": "namespace",
+                "target_type": "GitLabGroup",
+                "target_id_key": "id",
+                "target_id_template": "group:{id}",
+                "target_fields": {"name": "full_path"},
+            },
+        ],
     ),
 )
 
@@ -97,6 +133,10 @@ SCHEMA_MAPPINGS = {
         "field_sets": ["fields_1"],
         "ontology_class": "PipelineRun",
     },
+    "Person": {
+        "fields": {},
+        "ontology_class": "Person",
+    },
     "Project": {
         "field_sets": ["fields_1"],
         "ontology_class": "SoftwareProject",
@@ -134,6 +174,11 @@ RESOURCES = (
         "label": "Merge Request",
         "name": "MergeRequest",
     },
+    {
+        "id_prefix": "person",
+        "label": "Person",
+        "name": "Person",
+    },
     {
         "id_prefix": "pipeline",
         "label": "Pipeline",

gitlab_api-27.3.14/gitlab_api/ontology/access_contracts.ttl

@@ -0,0 +1,287 @@
+@prefix ac: <https://knuckles-team.github.io/agent-connector-sdk/access#> .
+@prefix gl: <http://knuckles.team/kg#> .
+
+# Read contracts for the classes declared by gitlab.ttl.  The MCP tools expose
+# both read and write actions, but these mappings are read-only query routes:
+# callers select the listed get action through the operation's action envelope.
+# The source classes stay in GitLab's ontology namespace.  No heuristic
+# crosswalk to a hub class is asserted here.
+
+gl:gitlabGroupAccess a ac:AccessContract ;
+    ac:classIri gl:GitLabGroup ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "group" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_groups" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 300 ;
+    ac:costHint "medium" .
+
+gl:gitlabGroupWebUrlBinding a ac:PropertyBinding ;
+    ac:contract gl:gitlabGroupAccess ; ac:property gl:webUrl ; ac:field "web_url" .
+
+gl:projectAccess a ac:AccessContract ;
+    ac:classIri gl:Project ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "project" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_projects" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 300 ;
+    ac:costHint "low" .
+
+gl:projectWebUrlBinding a ac:PropertyBinding ;
+    ac:contract gl:projectAccess ; ac:property gl:webUrl ; ac:field "web_url" .
+
+gl:mergeRequestAccess a ac:AccessContract ;
+    ac:classIri gl:MergeRequest ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "merge_request" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_merge_requests" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 60 ;
+    ac:costHint "medium" .
+
+gl:mergeRequestIidBinding a ac:PropertyBinding ;
+    ac:contract gl:mergeRequestAccess ; ac:property gl:iid ; ac:field "iid" .
+
+gl:mergeRequestStateBinding a ac:PropertyBinding ;
+    ac:contract gl:mergeRequestAccess ; ac:property gl:state ; ac:field "state" .
+
+gl:mergeRequestWebUrlBinding a ac:PropertyBinding ;
+    ac:contract gl:mergeRequestAccess ; ac:property gl:webUrl ; ac:field "web_url" .
+
+gl:pipelineAccess a ac:AccessContract ;
+    ac:classIri gl:Pipeline ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "pipeline" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_pipelines" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 60 ;
+    ac:costHint "medium" .
+
+gl:pipelineStatusBinding a ac:PropertyBinding ;
+    ac:contract gl:pipelineAccess ; ac:property gl:pipelineStatus ; ac:field "status" .
+
+gl:pipelineRefBinding a ac:PropertyBinding ;
+    ac:contract gl:pipelineAccess ; ac:property gl:ref ; ac:field "ref" .
+
+gl:pipelineShaBinding a ac:PropertyBinding ;
+    ac:contract gl:pipelineAccess ; ac:property gl:sha ; ac:field "sha" .
+
+gl:pipelineWebUrlBinding a ac:PropertyBinding ;
+    ac:contract gl:pipelineAccess ; ac:property gl:webUrl ; ac:field "web_url" .
+
+gl:pipelineRunAccess a ac:AccessContract ;
+    ac:classIri gl:PipelineRun ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "pipeline" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_pipelines" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 60 ;
+    ac:costHint "medium" .
+
+gl:jobAccess a ac:AccessContract ;
+    ac:classIri gl:Job ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "job" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_jobs" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 60 ;
+    ac:costHint "medium" .
+
+gl:jobStatusBinding a ac:PropertyBinding ;
+    ac:contract gl:jobAccess ; ac:property gl:pipelineStatus ; ac:field "status" .
+
+gl:jobRefBinding a ac:PropertyBinding ;
+    ac:contract gl:jobAccess ; ac:property gl:ref ; ac:field "ref" .
+
+gl:jobWebUrlBinding a ac:PropertyBinding ;
+    ac:contract gl:jobAccess ; ac:property gl:webUrl ; ac:field "web_url" .
+
+gl:checkRunAccess a ac:AccessContract ;
+    ac:classIri gl:CheckRun ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "job" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_jobs" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 60 ;
+    ac:costHint "medium" .
+
+gl:issueAccess a ac:AccessContract ;
+    ac:classIri gl:Issue ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "issue" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_issues" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 60 ;
+    ac:costHint "medium" .
+
+gl:issueIidBinding a ac:PropertyBinding ;
+    ac:contract gl:issueAccess ; ac:property gl:iid ; ac:field "iid" .
+
+gl:issueStateBinding a ac:PropertyBinding ;
+    ac:contract gl:issueAccess ; ac:property gl:state ; ac:field "state" .
+
+gl:issueWebUrlBinding a ac:PropertyBinding ;
+    ac:contract gl:issueAccess ; ac:property gl:webUrl ; ac:field "web_url" .
+
+gl:epicAccess a ac:AccessContract ;
+    ac:classIri gl:Epic ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "epic" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_epics" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 300 ;
+    ac:costHint "medium" .
+
+gl:epicIidBinding a ac:PropertyBinding ;
+    ac:contract gl:epicAccess ; ac:property gl:iid ; ac:field "iid" .
+
+gl:epicWebUrlBinding a ac:PropertyBinding ;
+    ac:contract gl:epicAccess ; ac:property gl:webUrl ; ac:field "web_url" .
+
+gl:milestoneAccess a ac:AccessContract ;
+    ac:classIri gl:Milestone ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "milestone" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_milestones" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 300 ;
+    ac:costHint "medium" .
+
+gl:milestoneStateBinding a ac:PropertyBinding ;
+    ac:contract gl:milestoneAccess ; ac:property gl:state ; ac:field "state" .
+
+gl:milestoneWebUrlBinding a ac:PropertyBinding ;
+    ac:contract gl:milestoneAccess ; ac:property gl:webUrl ; ac:field "web_url" .
+
+gl:commitAccess a ac:AccessContract ;
+    ac:classIri gl:Commit ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "commit" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_commits" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 60 ;
+    ac:costHint "medium" .
+
+gl:commitShaBinding a ac:PropertyBinding ;
+    ac:contract gl:commitAccess ; ac:property gl:sha ; ac:field "sha" .
+
+gl:commitWebUrlBinding a ac:PropertyBinding ;
+    ac:contract gl:commitAccess ; ac:property gl:webUrl ; ac:field "web_url" .
+
+gl:branchAccess a ac:AccessContract ;
+    ac:classIri gl:Branch ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "branch" ;
+    ac:keyField "name" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_branches" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 300 ;
+    ac:costHint "low" .
+
+gl:branchWebUrlBinding a ac:PropertyBinding ;
+    ac:contract gl:branchAccess ; ac:property gl:webUrl ; ac:field "web_url" .
+
+gl:releaseAccess a ac:AccessContract ;
+    ac:classIri gl:Release ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "release" ;
+    ac:keyField "tag_name" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_releases" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 300 ;
+    ac:costHint "medium" .
+
+gl:runnerAccess a ac:AccessContract ;
+    ac:classIri gl:Runner ;
+    ac:sourceId "gitlab-api" ;
+    ac:entity "runner" ;
+    ac:keyField "id" ;
+    ac:accessKind "mcp_tool" ;
+    ac:operation "gitlab_runners" ;
+    ac:parameter "action", "params_json" ;
+    ac:pagination "page" ;
+    ac:pushdown "filter", "limit", "sort" ;
+    ac:authRef "env://GITLAB_TOKEN" ;
+    ac:rateLimitPerMinute 60 ;
+    ac:freshnessSeconds 300 ;
+    ac:costHint "medium" .
+
+gl:runnerStateBinding a ac:PropertyBinding ;
+    ac:contract gl:runnerAccess ; ac:property gl:state ; ac:field "status" .

{gitlab_api-27.3.12 → gitlab_api-27.3.14}/gitlab_api/ontology/certification.json

@@ -2,7 +2,7 @@
   "api_version": "graphos.io/v1",
   "artifacts": {
     "gitlab_api/ontology/fixtures/records.json": "5f0417820053941933f15b3f459750753f4e8e34cf1e7853fd030c1143356b40",
-    "gitlab_api/ontology/gitlab.ttl": "c7f170c5ba51d657be7bad3f27595c8d91639f46e3259efffd486cfb60969240",
+    "gitlab_api/ontology/gitlab.ttl": "4a674b5efb7f6f0f6e1f46084940ffe550f0a95d9c6338366df9da01dd8c207c",
     "gitlab_api/ontology/mappings/source.yaml": "4d845dd7df9503ae3a5d133ff00a98191d11adf3af7f6868f45c22bcbf098bb5",
     "gitlab_api/ontology/migrations/manifest.json": "442c3c53df0b42c866eef7255b1889b8ada6f9f9c5125cad65d6b50dc6362a3e",
     "gitlab_api/ontology/shapes/connector.shacl.ttl": "20d2bfc3827fd6327a3b6f25828b41d9de3f855867c46264a7e0aa7f951c76fa"
@@ -29,5 +29,5 @@
   "signer": "UNSIGNED-PREVIEW",
   "signing_public_key": "",
   "status": "source-validated",
-  "validated_at": "2026-10-24T06:26:59Z"
+  "validated_at": "2026-10-25T22:08:01Z"
 }

{gitlab_api-27.3.12 → gitlab_api-27.3.14}/gitlab_api/ontology/gitlab.ttl

@@ -114,6 +114,26 @@
     rdfs:comment "Links a MergeRequest, Issue, or Commit to the Person who created it." ;
     rdfs:range :Person .
 
+:projectOwnedBy a owl:ObjectProperty ;
+    rdfs:label "project owned by" ;
+    rdfs:comment "Links a Project to the Person who owns it (projects.owner, user-namespace projects)." ;
+    rdfs:subPropertyOf :ownedBy ;
+    rdfs:domain :Project ;
+    rdfs:range :Person .
+
+:issueAuthoredBy a owl:ObjectProperty ;
+    rdfs:label "issue authored by" ;
+    rdfs:comment "Links an Issue to the Person who opened it (issues.author)." ;
+    rdfs:subPropertyOf :authoredBy ;
+    rdfs:domain :Issue ;
+    rdfs:range :Person .
+
+:issueAssignedTo a owl:ObjectProperty ;
+    rdfs:label "issue assigned to" ;
+    rdfs:comment "Links an Issue to a Person it is assigned to (issues.assignees)." ;
+    rdfs:domain :Issue ;
+    rdfs:range :Person .
+
 # --- fields (owl:DatatypeProperty) ---
 
 :iid a owl:DatatypeProperty ;

{gitlab_api-27.3.12 → gitlab_api-27.3.14}/gitlab_api.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitlab-api
-Version: 27.3.12
+Version: 27.3.14
 Summary: GitLab API + MCP Server
 Author-email: Repository Maintainers <maintainers@knuckles.team>
 License: MIT
@@ -12,7 +12,7 @@ Classifier: Programming Language :: Python :: 3
 Requires-Python: >=3.12
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: agent-connector-sdk[graphql,mcp]<0.6.0,>=0.5.3
+Requires-Dist: agent-connector-sdk[graphql,mcp]<0.6.0,>=0.5.5
 Requires-Dist: python-dotenv>=1.2.4
 Provides-Extra: mcp
 Provides-Extra: all

{gitlab_api-27.3.12 → gitlab_api-27.3.14}/gitlab_api.egg-info/SOURCES.txt

@@ -33,6 +33,7 @@ gitlab_api/api/api_client_system.py
 gitlab_api/api/api_client_users_groups.py
 gitlab_api/api/api_client_vulnerabilities.py
 gitlab_api/ontology/__init__.py
+gitlab_api/ontology/access_contracts.ttl
 gitlab_api/ontology/certification.json
 gitlab_api/ontology/gitlab.ttl
 gitlab_api/ontology/fixtures/records.json
@@ -57,8 +58,10 @@ scripts/check_import_safety.py
 scripts/security_contract.py
 tests/__init__.py
 tests/conftest.py
+tests/test_access_contracts.py
 tests/test_api_wrapper.py
 tests/test_auth.py
+tests/test_catalog_edges.py
 tests/test_connector_prep.py
 tests/test_cq_paths.py
 tests/test_fleet_name.py

{gitlab_api-27.3.12 → gitlab_api-27.3.14}/gitlab_api.egg-info/requires.txt

@@ -1,4 +1,4 @@
-agent-connector-sdk[graphql,mcp]<0.6.0,>=0.5.3
+agent-connector-sdk[graphql,mcp]<0.6.0,>=0.5.5
 python-dotenv>=1.2.4
 
 [all]

{gitlab_api-27.3.12 → gitlab_api-27.3.14}/pyproject.toml

@@ -4,12 +4,12 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "gitlab-api"
-version = "27.3.12"
+version = "27.3.14"
 description = "GitLab API + MCP Server"
 readme = "README.md"
 classifiers = [ "Development Status :: 5 - Production/Stable", "License :: OSI Approved :: MIT License", "Environment :: Console", "Operating System :: POSIX :: Linux", "Programming Language :: Python :: 3",]
 requires-python = ">=3.12"
-dependencies = [ "agent-connector-sdk[graphql,mcp]>=0.5.3,<0.6.0", "python-dotenv>=1.2.4",]
+dependencies = [ "agent-connector-sdk[graphql,mcp]>=0.5.5,<0.6.0", "python-dotenv>=1.2.4",]
 [[project.authors]]
 name = "Repository Maintainers"
 email = "maintainers@knuckles.team"

gitlab_api-27.3.14/tests/test_access_contracts.py

@@ -0,0 +1,75 @@
+"""GitLab's read-only source access contracts stay source-local."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+from agent_connector_sdk.access_contract import parse_access_contracts
+
+
+ROOT = Path(__file__).resolve().parents[1]
+CONTRACTS = ROOT / "gitlab_api" / "ontology" / "access_contracts.ttl"
+KG = "http://knuckles.team/kg#"
+
+EXPECTED = {
+    "GitLabGroup": ("gitlab_groups", "group", "id"),
+    "Project": ("gitlab_projects", "project", "id"),
+    "MergeRequest": ("gitlab_merge_requests", "merge_request", "id"),
+    "Pipeline": ("gitlab_pipelines", "pipeline", "id"),
+    "PipelineRun": ("gitlab_pipelines", "pipeline", "id"),
+    "Job": ("gitlab_jobs", "job", "id"),
+    "CheckRun": ("gitlab_jobs", "job", "id"),
+    "Issue": ("gitlab_issues", "issue", "id"),
+    "Epic": ("gitlab_epics", "epic", "id"),
+    "Milestone": ("gitlab_milestones", "milestone", "id"),
+    "Commit": ("gitlab_commits", "commit", "id"),
+    "Branch": ("gitlab_branches", "branch", "name"),
+    "Release": ("gitlab_releases", "release", "tag_name"),
+    "Runner": ("gitlab_runners", "runner", "id"),
+}
+
+
+def _contracts():
+    return parse_access_contracts(CONTRACTS.read_text(encoding="utf-8"))
+
+
+def test_every_declared_gitlab_class_has_a_typed_read_contract() -> None:
+    contracts = _contracts()
+    by_class = {contract.class_iri.rsplit("#", 1)[-1]: contract for contract in contracts}
+
+    assert set(by_class) == set(EXPECTED)
+    for class_name, (operation, entity, key_field) in EXPECTED.items():
+        contract = by_class[class_name]
+        assert contract.class_iri == KG + class_name
+        assert contract.source_id == "gitlab-api"
+        assert contract.access_kind == "mcp_tool"
+        assert contract.operation == operation
+        assert contract.entity == entity
+        assert contract.key_field == key_field
+        assert contract.parameters == ("action", "params_json")
+        assert contract.auth_ref == "env://GITLAB_TOKEN"
+        assert contract.pagination == "page"
+        assert contract.pushdown == frozenset({"filter", "limit", "sort"})
+
+
+def test_gitlab_contracts_do_not_promote_draft_crosswalks() -> None:
+    contracts = _contracts()
+
+    assert all(contract.class_iri.startswith(KG) for contract in contracts)
+    assert all(
+        contract.class_iri not in {KG + "Incident", KG + "SoftwareProject"}
+        for contract in contracts
+    )
+    assert all(contract.source_id == "gitlab-api" for contract in contracts)
+
+
+def test_gitlab_contract_artifact_is_packaged_under_ontology() -> None:
+    assert CONTRACTS.is_file()
+
+
+def test_gitlab_contract_bindings_use_declared_fields() -> None:
+    contracts = {contract.class_iri.rsplit("#", 1)[-1]: contract for contract in _contracts()}
+
+    assert (KG + "webUrl", "web_url") in contracts["Project"].predicates
+    assert (KG + "pipelineStatus", "status") in contracts["Pipeline"].predicates
+    assert (KG + "sha", "sha") in contracts["Commit"].predicates

gitlab_api-27.3.14/tests/test_catalog_edges.py

@@ -0,0 +1,53 @@
+"""Owner and assignee edges declared on the ingest sources (CONN-GITLAB-API-CONNECTOR-CONTENT-R005)."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+import pytest
+from agent_connector_sdk.ingest.live_declaration import load_declaration
+from agent_connector_sdk.ingest.source_sync import _edges  # noqa: PLC2701
+
+import gitlab_api
+
+ONTOLOGY = Path(gitlab_api.__file__).parent / "ontology" / "gitlab.ttl"
+
+
+def _declaration():
+    return load_declaration("gitlab_api")
+
+
+def _domain_and_range(name: str) -> tuple[str, str]:
+    block = ONTOLOGY.read_text(encoding="utf-8").split(f"\n:{name} a owl:ObjectProperty")[1]
+    block = block.split(" .\n")[0]
+    return block.split("rdfs:domain :")[1].split()[0], block.split("rdfs:range :")[1].split()[0]
+
+
+@pytest.mark.spec("CONN-GITLAB-API-CONNECTOR-CONTENT-R005")
+def test_every_declared_edge_is_an_ontology_property_of_its_record_type() -> None:
+    declaration = _declaration()
+    seen = set()
+    for source in declaration.sources:
+        for edge in source.edges:
+            assert _domain_and_range(edge.relationship) == (source.record_type, edge.target_type)
+            assert edge.target_type in declaration.schema_mappings
+            seen.add((source.source_id, edge.relationship))
+    assert seen == {
+        ("issues", "issueAuthoredBy"),
+        ("issues", "issueAssignedTo"),
+        ("projects", "projectOwnedBy"),
+        ("projects", "partOfGroup"),
+    }
+
+
+@pytest.mark.spec("CONN-GITLAB-API-CONNECTOR-CONTENT-R005")
+def test_project_and_issue_references_become_owner_and_assignee_edges() -> None:
+    declaration = _declaration()
+    project = {"id": 213, "owner": {"id": 5, "username": "ann", "name": "Ann"}, "namespace": {"id": 9, "full_path": "homelab"}}
+    issue = {"id": 2, "author": {"id": 5, "username": "ann"}, "assignees": [{"id": 6, "username": "bob"}, {"id": 5}]}
+    projects = {(r.relationship, r.target) for _, r in _edges("213", project, declaration.source("projects"))}
+    issues = {(r.relationship, r.target) for _, r in _edges("2", issue, declaration.source("issues"))}
+    assert projects == {("projectOwnedBy", "user:5"), ("partOfGroup", "group:9")}
+    assert issues == {("issueAuthoredBy", "user:5"), ("issueAssignedTo", "user:6"), ("issueAssignedTo", "user:5")}
+    owner = next(t for t, r in _edges("213", project, declaration.source("projects")) if r.relationship == "projectOwnedBy")
+    assert owner.node_type == "Person" and owner.properties == {"name": "Ann", "username": "ann"}