lfx-gitlab 0.1.0__py3-none-any.whl

lfx_gitlab/__init__.py

@@ -0,0 +1 @@
+"""GitLab personal-token actions and signed project triggers."""

lfx_gitlab/base.py

@@ -0,0 +1,102 @@
+"""Connection and telemetry boundary for GitLab action components."""
+
+from typing import ClassVar
+
+from lfx.custom.custom_component.component import Component
+from lfx.integrations.errors import AuthExpiredError, InvalidRequestError, ProviderUnavailableError
+from lfx.integrations.telemetry import integration_action
+from lfx.io import ConnectionRefInput, IntInput
+from lfx.schema.data import Data
+
+from lfx_gitlab.client import GitLabAuthExpiredError, GitLabClient, bounded_text, positive_id
+
+
+def connection_input(capability):
+    return ConnectionRefInput(
+        name="connection",
+        display_name="GitLab Connection",
+        provider="gitlab",
+        auth_profile_id="gitlab-personal-token",
+        identity_kind="user",
+        ownership_mode="user",
+        required_scopes=["api"],
+        capabilities=[capability],
+        required=True,
+        info="Use a verified personal access token for this deployment's configured GitLab instance.",
+    )
+
+
+def project_input(*, connectable=True):
+    return IntInput(
+        name="project_id",
+        display_name="Project ID",
+        required=True,
+        input_types=["Message"] if connectable else [],
+        info="Numeric GitLab project ID. Project paths and URLs are unavailable.",
+    )
+
+
+class GitLabActionComponent(Component):
+    icon = "Gitlab"
+    capability_id: ClassVar[str] = ""
+    operation: ClassVar[str] = ""
+    resource: ClassVar[str] = ""
+
+    def _pre_run_setup(self):
+        self.__dict__.pop("_gitlab_result", None)
+
+    async def build_result(self) -> Data:
+        if "_gitlab_result" in self.__dict__:
+            return Data(data=self.__dict__["_gitlab_result"])
+        path = f"/projects/{positive_id(self.project_id, field='Project ID')}"
+        operation = self.operation
+        if self.resource != "project":
+            path += "/" + {"issue": "issues", "merge_request": "merge_requests"}[self.resource]
+        if self.resource != "project" and operation in {"get", "update", "comment"}:
+            number_field = "Issue Number" if self.resource == "issue" else "Merge Request Number"
+            path += "/" + str(positive_id(self.number, field=number_field))
+        body = None
+        if operation == "comment":
+            path += "/notes"
+            body = {"body": bounded_text(self.body, required=True, field="Comment")}
+        elif operation == "create":
+            body = {
+                "title": bounded_text(self.title, required=True, maximum=255, field="Title"),
+                "description": bounded_text(self.body_content, field="Description"),
+            }
+            if self.resource == "merge_request":
+                body.update(
+                    source_branch=bounded_text(self.source_branch, required=True, maximum=255, field="Source Branch"),
+                    target_branch=bounded_text(self.target_branch, required=True, maximum=255, field="Target Branch"),
+                )
+        elif operation == "update":
+            body = {}
+            if self.title not in (None, ""):
+                body["title"] = bounded_text(self.title, required=True, maximum=255, field="Title")
+            if self.body_content not in (None, ""):
+                body["description"] = bounded_text(self.body_content, field="Description")
+            if self.state_event not in {"unchanged", "close", "reopen"}:
+                msg = "Choose a supported state change."
+                raise InvalidRequestError(msg, provider="gitlab")
+            if self.state_event != "unchanged":
+                body["state_event"] = self.state_event
+            if not body:
+                msg = "Provide a new title, description, or state change."
+                raise InvalidRequestError(msg, provider="gitlab")
+        lease = self.resolve_connection("connection")
+        try:
+            credential = await lease.get_credential()
+        except AuthExpiredError:
+            raise GitLabAuthExpiredError from None
+        method = "POST" if operation in {"create", "comment"} else "PUT" if operation == "update" else "GET"
+        async with (
+            integration_action(
+                self, provider="gitlab", capability=self.capability_id, owner_kind=credential.owner_kind
+            ),
+            GitLabClient(lease) as client,
+        ):
+            result = await client.request(method, path, body=body)
+        if not isinstance(result, dict):
+            raise ProviderUnavailableError(provider="gitlab")
+        self.__dict__["_gitlab_result"] = result
+        return Data(data=result)

lfx_gitlab/client.py

@@ -0,0 +1,244 @@
+"""Bounded GitLab API requests using a trusted deployment origin."""
+
+from __future__ import annotations
+
+import asyncio
+import ipaddress
+import json
+import math
+import os
+import re
+from datetime import datetime, timezone
+from urllib.parse import urlsplit
+
+import httpx
+from lfx.integrations.errors import (
+    AuthExpiredError,
+    ConnectionNotAuthorizedError,
+    IntegrationNetworkError,
+    InvalidRequestError,
+    ProviderUnavailableError,
+    RateLimitedError,
+    ResourceNotFoundError,
+)
+from lfx.utils.ssrf_httpx import ssrf_protected_strict_httpx_client_kwargs_for_url
+from lfx.utils.ssrf_protection import SSRFProtectionError
+from lfx.utils.url_redaction import suppress_sensitive_http_logs
+
+_PATH = re.compile(
+    r"/(?:user|users/[1-9][0-9]*|version|personal_access_tokens/self|projects/[1-9][0-9]*(?:/(?:hooks|issues|merge_requests)(?:/[1-9][0-9]*(?:/notes)?)?)?)\Z"
+)
+MAX_RESPONSE_BYTES = 2 * 1024 * 1024
+MAX_REQUEST_BYTES = 64 * 1024
+
+
+class GitLabAuthExpiredError(AuthExpiredError):
+    """Keep reconnect guidance visible in canvas errors as well as structured hints."""
+
+    def __init__(self):
+        super().__init__(provider="gitlab")
+        self.message = (
+            "The GitLab credential is expired or was rejected. Reconnect the GitLab connection and try again."
+        )
+        self.safe_message = self.message
+        self.args = (self.safe_message,)
+
+
+def api_origin() -> str:
+    """Read operator configuration rather than any flow or provider URL."""
+    value = os.environ.get("LANGFLOW_GITLAB_ORIGIN", "https://gitlab.com")
+    parts = urlsplit(value)
+    host = parts.hostname or ""
+    if (
+        parts.scheme != "https"
+        or parts.username is not None
+        or parts.password is not None
+        or parts.query
+        or parts.fragment
+        or parts.path not in {"", "/"}
+        or parts.port not in {None, 443}
+        or not re.fullmatch(r"[a-zA-Z0-9](?:[a-zA-Z0-9.-]*[a-zA-Z0-9])?", host)
+        or "." not in host
+        or host.endswith((".localhost", ".local"))
+    ):
+        msg = "Configure one public HTTPS GitLab origin without a path or port."
+        raise InvalidRequestError(msg, provider="gitlab")
+    try:
+        ipaddress.ip_address(host)
+    except ValueError:
+        pass
+    else:
+        msg = "Configure a GitLab DNS hostname rather than an IP address."
+        raise InvalidRequestError(msg, provider="gitlab")
+    return "https://" + host.lower()
+
+
+def positive_id(value, *, field="ID") -> int:
+    msg = f"{field} must be an integer from 1 to 9223372036854775807 (the signed 64-bit range)."
+    if isinstance(value, bool):
+        raise InvalidRequestError(msg, provider="gitlab")
+    try:
+        number = int(value)
+    except (TypeError, ValueError, OverflowError):
+        raise InvalidRequestError(msg, provider="gitlab") from None
+    if str(number) != str(value) or not 1 <= number <= 2**63 - 1:
+        raise InvalidRequestError(msg, provider="gitlab")
+    return number
+
+
+def bounded_text(value, *, required: bool = False, maximum: int = 60000, field="Text") -> str:
+    if required and isinstance(value, str) and not value.strip():
+        msg = f"{field} must contain non-whitespace text."
+        raise InvalidRequestError(msg, provider="gitlab")
+    try:
+        valid = isinstance(value, str) and len(value.encode()) <= maximum and (not required or bool(value.strip()))
+    except UnicodeEncodeError:
+        valid = False
+    if not valid:
+        msg = f"{field} must be text containing at most {maximum} UTF-8 bytes."
+        raise InvalidRequestError(msg, provider="gitlab")
+    return value
+
+
+def _safe_output(value):
+    if isinstance(value, dict):
+        return {
+            key: _safe_output(item)
+            for key, item in value.items()
+            if not any(
+                term in key.lower()
+                for term in (
+                    "token",
+                    "secret",
+                    "password",
+                    "private_key",
+                    "clone_url",
+                    "http_url_to_repo",
+                    "ssh_url_to_repo",
+                )
+            )
+        }
+    if isinstance(value, list):
+        return [_safe_output(item) for item in value]
+    return value
+
+
+def response_error(response: httpx.Response):
+    status = response.status_code
+    if status == httpx.codes.UNAUTHORIZED:
+        return GitLabAuthExpiredError()
+    if status == httpx.codes.TOO_MANY_REQUESTS:
+        try:
+            delay = float(response.headers.get("retry-after", "60"))
+        except (ValueError, OverflowError):
+            delay = 60.0
+        return RateLimitedError(provider="gitlab", retry_after=max(0, delay) if math.isfinite(delay) else 60.0)
+    if status == httpx.codes.FORBIDDEN:
+        return ConnectionNotAuthorizedError(provider="gitlab", reason="provider")
+    if status == httpx.codes.NOT_FOUND:
+        return ResourceNotFoundError(provider="gitlab")
+    if httpx.codes.BAD_REQUEST <= status < httpx.codes.INTERNAL_SERVER_ERROR:
+        return InvalidRequestError(provider="gitlab", http_status=status)
+    return ProviderUnavailableError(provider="gitlab", http_status=status)
+
+
+class GitLabClient:
+    """Reject redirects and arbitrary paths before resolving credentials."""
+
+    def __init__(self, lease, *, transport: httpx.AsyncBaseTransport | None = None):
+        self.lease = lease
+        self.origin = api_origin()
+        try:
+            kwargs = (
+                ssrf_protected_strict_httpx_client_kwargs_for_url(self.origin)[1]
+                if transport is None
+                else {"transport": transport}
+            )
+        except SSRFProtectionError:
+            raise IntegrationNetworkError(
+                reason="connection", provider="gitlab", host=urlsplit(self.origin).hostname
+            ) from None
+        kwargs["follow_redirects"] = False
+        self._client = httpx.AsyncClient(timeout=20, trust_env=False, **kwargs)
+
+    async def __aenter__(self):
+        return self
+
+    async def __aexit__(self, *_args):
+        await self._client.aclose()
+
+    async def request(self, method, path, *, body=None, params=None):
+        if method not in {"GET", "POST", "PUT", "DELETE"} or not _PATH.fullmatch(path):
+            msg = "The GitLab REST request is invalid."
+            raise InvalidRequestError(msg, provider="gitlab")
+        content = json.dumps(body, ensure_ascii=False).encode() if body is not None else None
+        if content is not None and len(content) > MAX_REQUEST_BYTES:
+            msg = "The GitLab request exceeds 64 KiB."
+            raise InvalidRequestError(msg, provider="gitlab")
+        try:
+            credential = await self.lease.get_credential()
+        except AuthExpiredError:
+            raise GitLabAuthExpiredError from None
+        if (
+            credential.provider != "gitlab"
+            or credential.identity != "user_delegated"
+            or credential.account is None
+            or credential.account.tenant_id != self.origin
+            or not credential.scopes_verified
+            or "api" not in credential.granted_scopes
+        ):
+            raise ConnectionNotAuthorizedError(
+                provider="gitlab", hint="Choose a verified GitLab personal access token connection for this deployment."
+            )
+        expiry = credential.expires_at
+        if expiry is None or expiry.tzinfo is None or expiry <= datetime.now(timezone.utc):
+            raise GitLabAuthExpiredError
+        token = credential.access_token.get_secret_value()
+        try:
+            try:
+                return await asyncio.wait_for(self._request(method, path, content, params, token), timeout=25)
+            except AuthExpiredError as error:
+                try:
+                    replacement = await self.lease.get_token_after_auth_error(error, rejected_token=token)
+                except AuthExpiredError:
+                    raise GitLabAuthExpiredError from None
+                if replacement == token:
+                    raise
+                return await self.request(method, path, body=body, params=params)
+        except (asyncio.TimeoutError, httpx.TimeoutException):
+            raise IntegrationNetworkError(
+                reason="timeout", provider="gitlab", host=urlsplit(self.origin).hostname
+            ) from None
+        except httpx.TransportError:
+            raise IntegrationNetworkError(
+                reason="connection", provider="gitlab", host=urlsplit(self.origin).hostname
+            ) from None
+
+    async def _request(self, method, path, content, params, token):
+        async with (
+            suppress_sensitive_http_logs(),
+            self._client.stream(
+                method,
+                self.origin + "/api/v4" + path,
+                content=content,
+                params=params,
+                headers={"PRIVATE-TOKEN": token, "Content-Type": "application/json", "Accept": "application/json"},
+            ) as response,
+        ):
+            chunks = bytearray()
+            async for chunk in response.aiter_bytes():
+                chunks.extend(chunk)
+                if len(chunks) > MAX_RESPONSE_BYTES:
+                    msg = "The GitLab response exceeds 2 MiB."
+                    raise InvalidRequestError(msg, provider="gitlab")
+            if not httpx.codes.OK <= response.status_code < httpx.codes.MULTIPLE_CHOICES:
+                raise response_error(response)
+            if not chunks:
+                return {}
+            try:
+                payload = json.loads(chunks)
+            except (ValueError, UnicodeDecodeError):
+                raise ProviderUnavailableError(provider="gitlab") from None
+            if not isinstance(payload, (dict, list)):
+                raise ProviderUnavailableError(provider="gitlab")
+            return _safe_output(payload)

lfx_gitlab/components/__init__.py

@@ -0,0 +1 @@
+"""GitLab component categories."""

lfx_gitlab/components/gitlab/__init__.py

@@ -0,0 +1,27 @@
+"""Stable GitLab component identities."""
+
+from .issue_comment_create import GitLabCreateIssueCommentComponent
+from .issue_create import GitLabCreateIssueComponent
+from .issue_get import GitLabGetIssueComponent
+from .issue_trigger import GitLabOnIssueTriggerComponent
+from .issue_update import GitLabUpdateIssueComponent
+from .merge_request_comment_create import GitLabCreateMergeRequestCommentComponent
+from .merge_request_create import GitLabCreateMergeRequestComponent
+from .merge_request_get import GitLabGetMergeRequestComponent
+from .merge_request_trigger import GitLabOnMergeRequestTriggerComponent
+from .merge_request_update import GitLabUpdateMergeRequestComponent
+from .project_get import GitLabGetProjectComponent
+
+__all__ = [
+    "GitLabCreateIssueCommentComponent",
+    "GitLabCreateIssueComponent",
+    "GitLabCreateMergeRequestCommentComponent",
+    "GitLabCreateMergeRequestComponent",
+    "GitLabGetIssueComponent",
+    "GitLabGetMergeRequestComponent",
+    "GitLabGetProjectComponent",
+    "GitLabOnIssueTriggerComponent",
+    "GitLabOnMergeRequestTriggerComponent",
+    "GitLabUpdateIssueComponent",
+    "GitLabUpdateMergeRequestComponent",
+]

lfx_gitlab/components/gitlab/capabilities.v1.json

@@ -0,0 +1,284 @@
+{
+  "schema_version": 1,
+  "provider_id": "gitlab",
+  "display_name": "GitLab",
+  "icon": "Gitlab",
+  "docs_url": "https://docs.langflow.org/next/bundles-gitlab",
+  "auth_profiles": [
+    {
+      "id": "gitlab-personal-token",
+      "kind": "api_key",
+      "identity": "user_delegated",
+      "supports_pkce": false,
+      "supports_refresh": false,
+      "default_scopes": [
+        "api"
+      ],
+      "client_type_by_context": {
+        "hosted": "external",
+        "self_managed": "external",
+        "desktop": "external",
+        "headless": "external"
+      },
+      "owner_by_context": {
+        "hosted": "customer",
+        "self_managed": "customer",
+        "desktop": "customer",
+        "headless": "customer"
+      }
+    }
+  ],
+  "capabilities": [
+    {
+      "id": "gitlab.project_read",
+      "display_name": "GitLab: Get Project",
+      "auth_profile_id": "gitlab-personal-token",
+      "identity": "user_delegated",
+      "required_scopes": [
+        "api"
+      ],
+      "conditional_scopes": [],
+      "policy_keys": [
+        "integrations.gitlab.project_read"
+      ],
+      "substrate": "rest",
+      "maturity": "preview",
+      "deployment_contexts": [
+        "hosted",
+        "self_managed",
+        "desktop",
+        "headless"
+      ],
+      "risk": "read",
+      "component_ref": "GitLabGetProjectComponent"
+    },
+    {
+      "id": "gitlab.issue_read",
+      "display_name": "GitLab: Get Issue",
+      "auth_profile_id": "gitlab-personal-token",
+      "identity": "user_delegated",
+      "required_scopes": [
+        "api"
+      ],
+      "conditional_scopes": [],
+      "policy_keys": [
+        "integrations.gitlab.issue_read"
+      ],
+      "substrate": "rest",
+      "maturity": "preview",
+      "deployment_contexts": [
+        "hosted",
+        "self_managed",
+        "desktop",
+        "headless"
+      ],
+      "risk": "read",
+      "component_ref": "GitLabGetIssueComponent"
+    },
+    {
+      "id": "gitlab.issue_create",
+      "display_name": "GitLab: Create Issue",
+      "auth_profile_id": "gitlab-personal-token",
+      "identity": "user_delegated",
+      "required_scopes": [
+        "api"
+      ],
+      "conditional_scopes": [],
+      "policy_keys": [
+        "integrations.gitlab.issue_create"
+      ],
+      "substrate": "rest",
+      "maturity": "preview",
+      "deployment_contexts": [
+        "hosted",
+        "self_managed",
+        "desktop",
+        "headless"
+      ],
+      "risk": "write",
+      "component_ref": "GitLabCreateIssueComponent"
+    },
+    {
+      "id": "gitlab.issue_update",
+      "display_name": "GitLab: Update Issue",
+      "auth_profile_id": "gitlab-personal-token",
+      "identity": "user_delegated",
+      "required_scopes": [
+        "api"
+      ],
+      "conditional_scopes": [],
+      "policy_keys": [
+        "integrations.gitlab.issue_update"
+      ],
+      "substrate": "rest",
+      "maturity": "preview",
+      "deployment_contexts": [
+        "hosted",
+        "self_managed",
+        "desktop",
+        "headless"
+      ],
+      "risk": "write",
+      "component_ref": "GitLabUpdateIssueComponent"
+    },
+    {
+      "id": "gitlab.merge_request_read",
+      "display_name": "GitLab: Get Merge Request",
+      "auth_profile_id": "gitlab-personal-token",
+      "identity": "user_delegated",
+      "required_scopes": [
+        "api"
+      ],
+      "conditional_scopes": [],
+      "policy_keys": [
+        "integrations.gitlab.merge_request_read"
+      ],
+      "substrate": "rest",
+      "maturity": "preview",
+      "deployment_contexts": [
+        "hosted",
+        "self_managed",
+        "desktop",
+        "headless"
+      ],
+      "risk": "read",
+      "component_ref": "GitLabGetMergeRequestComponent"
+    },
+    {
+      "id": "gitlab.merge_request_create",
+      "display_name": "GitLab: Create Merge Request",
+      "auth_profile_id": "gitlab-personal-token",
+      "identity": "user_delegated",
+      "required_scopes": [
+        "api"
+      ],
+      "conditional_scopes": [],
+      "policy_keys": [
+        "integrations.gitlab.merge_request_create"
+      ],
+      "substrate": "rest",
+      "maturity": "preview",
+      "deployment_contexts": [
+        "hosted",
+        "self_managed",
+        "desktop",
+        "headless"
+      ],
+      "risk": "write",
+      "component_ref": "GitLabCreateMergeRequestComponent"
+    },
+    {
+      "id": "gitlab.merge_request_update",
+      "display_name": "GitLab: Update Merge Request",
+      "auth_profile_id": "gitlab-personal-token",
+      "identity": "user_delegated",
+      "required_scopes": [
+        "api"
+      ],
+      "conditional_scopes": [],
+      "policy_keys": [
+        "integrations.gitlab.merge_request_update"
+      ],
+      "substrate": "rest",
+      "maturity": "preview",
+      "deployment_contexts": [
+        "hosted",
+        "self_managed",
+        "desktop",
+        "headless"
+      ],
+      "risk": "write",
+      "component_ref": "GitLabUpdateMergeRequestComponent"
+    },
+    {
+      "id": "gitlab.issue_comment_create",
+      "display_name": "GitLab: Create Issue Comment",
+      "auth_profile_id": "gitlab-personal-token",
+      "identity": "user_delegated",
+      "required_scopes": [
+        "api"
+      ],
+      "conditional_scopes": [],
+      "policy_keys": [
+        "integrations.gitlab.issue_comment_create"
+      ],
+      "substrate": "rest",
+      "maturity": "preview",
+      "deployment_contexts": [
+        "hosted",
+        "self_managed",
+        "desktop",
+        "headless"
+      ],
+      "risk": "write",
+      "component_ref": "GitLabCreateIssueCommentComponent"
+    },
+    {
+      "id": "gitlab.merge_request_comment_create",
+      "display_name": "GitLab: Create Merge Request Comment",
+      "auth_profile_id": "gitlab-personal-token",
+      "identity": "user_delegated",
+      "required_scopes": [
+        "api"
+      ],
+      "conditional_scopes": [],
+      "policy_keys": [
+        "integrations.gitlab.merge_request_comment_create"
+      ],
+      "substrate": "rest",
+      "maturity": "preview",
+      "deployment_contexts": [
+        "hosted",
+        "self_managed",
+        "desktop",
+        "headless"
+      ],
+      "risk": "write",
+      "component_ref": "GitLabCreateMergeRequestCommentComponent"
+    },
+    {
+      "id": "gitlab.trigger.issue",
+      "display_name": "GitLab: On Issue",
+      "auth_profile_id": "gitlab-personal-token",
+      "identity": "user_delegated",
+      "required_scopes": [
+        "api"
+      ],
+      "conditional_scopes": [],
+      "policy_keys": [
+        "integrations.gitlab.trigger.issue"
+      ],
+      "substrate": "rest",
+      "maturity": "preview",
+      "deployment_contexts": [
+        "hosted",
+        "self_managed",
+        "headless"
+      ],
+      "risk": "read",
+      "component_ref": "GitLabOnIssueTriggerComponent"
+    },
+    {
+      "id": "gitlab.trigger.merge_request",
+      "display_name": "GitLab: On Merge Request",
+      "auth_profile_id": "gitlab-personal-token",
+      "identity": "user_delegated",
+      "required_scopes": [
+        "api"
+      ],
+      "conditional_scopes": [],
+      "policy_keys": [
+        "integrations.gitlab.trigger.merge_request"
+      ],
+      "substrate": "rest",
+      "maturity": "preview",
+      "deployment_contexts": [
+        "hosted",
+        "self_managed",
+        "headless"
+      ],
+      "risk": "read",
+      "component_ref": "GitLabOnMergeRequestTriggerComponent"
+    }
+  ]
+}

lfx_gitlab/components/gitlab/issue_comment_create.py

@@ -0,0 +1,21 @@
+"""Create a GitLab comment using a connection."""
+
+from lfx.io import IntInput, MultilineInput, Output
+
+from lfx_gitlab.base import GitLabActionComponent, connection_input, project_input
+
+
+class GitLabCreateIssueCommentComponent(GitLabActionComponent):
+    display_name = "GitLab: Create Issue Comment"
+    name = "GitLabCreateIssueCommentComponent"
+    description = "Create a comment as the connection owner."
+    capability_id = "gitlab.issue_comment_create"
+    operation = "comment"
+    resource = "issue"
+    inputs = [
+        connection_input(capability_id),
+        project_input(),
+        IntInput(name="number", display_name="Issue Number", required=True, input_types=["Message"]),
+        MultilineInput(name="body", display_name="Comment", required=True),
+    ]
+    outputs = [Output(display_name="Result", name="result", method="build_result")]

lfx_gitlab/components/gitlab/issue_create.py

@@ -0,0 +1,21 @@
+"""Create one GitLab issue using a connection."""
+
+from lfx.io import MessageTextInput, MultilineInput, Output
+
+from lfx_gitlab.base import GitLabActionComponent, connection_input, project_input
+
+
+class GitLabCreateIssueComponent(GitLabActionComponent):
+    display_name = "GitLab: Create Issue"
+    name = "GitLabCreateIssueComponent"
+    description = "Create a GitLab issue as the connection owner."
+    capability_id = "gitlab.issue_create"
+    operation = "create"
+    resource = "issue"
+    inputs = [
+        connection_input(capability_id),
+        project_input(),
+        MessageTextInput(name="title", display_name="Title", required=True),
+        MultilineInput(name="body_content", display_name="Description", value=""),
+    ]
+    outputs = [Output(display_name="Result", name="result", method="build_result")]

lfx_gitlab/components/gitlab/issue_get.py

@@ -0,0 +1,20 @@
+"""Get one GitLab issue using a connection."""
+
+from lfx.io import IntInput, Output
+
+from lfx_gitlab.base import GitLabActionComponent, connection_input, project_input
+
+
+class GitLabGetIssueComponent(GitLabActionComponent):
+    display_name = "GitLab: Get Issue"
+    name = "GitLabGetIssueComponent"
+    description = "Get a GitLab issue as the connection owner."
+    capability_id = "gitlab.issue_read"
+    operation = "get"
+    resource = "issue"
+    inputs = [
+        connection_input(capability_id),
+        project_input(),
+        IntInput(name="number", display_name="Issue Number", required=True, input_types=["Message"]),
+    ]
+    outputs = [Output(display_name="Result", name="result", method="build_result")]

lfx_gitlab/components/gitlab/issue_trigger.py

@@ -0,0 +1,11 @@
+"""Declare a signed GitLab project webhook trigger."""
+
+from lfx_gitlab.triggers import GitLabProjectTriggerComponent, trigger_inputs
+
+
+class GitLabOnIssueTriggerComponent(GitLabProjectTriggerComponent):
+    display_name = "GitLab: On Issue"
+    name = "GitLabOnIssueTriggerComponent"
+    description = "Start the flow for selected signed project events."
+    trigger_kind = "gitlab.issue"
+    inputs = trigger_inputs("issue")

lfx_gitlab/components/gitlab/issue_update.py

@@ -0,0 +1,30 @@
+"""Update one GitLab issue using a connection."""
+
+from lfx.io import DropdownInput, IntInput, MessageTextInput, MultilineInput, Output
+
+from lfx_gitlab.base import GitLabActionComponent, connection_input, project_input
+
+
+class GitLabUpdateIssueComponent(GitLabActionComponent):
+    display_name = "GitLab: Update Issue"
+    name = "GitLabUpdateIssueComponent"
+    description = "Update a GitLab issue as the connection owner."
+    capability_id = "gitlab.issue_update"
+    operation = "update"
+    resource = "issue"
+    inputs = [
+        connection_input(capability_id),
+        project_input(),
+        IntInput(name="number", display_name="Issue Number", required=True, input_types=["Message"]),
+        MessageTextInput(name="title", display_name="Title", value="", info="Leave blank to keep the existing title."),
+        MultilineInput(
+            name="body_content",
+            display_name="Description",
+            value="",
+            info="Leave blank to keep the existing description.",
+        ),
+        DropdownInput(
+            name="state_event", display_name="State Change", options=["unchanged", "close", "reopen"], value="unchanged"
+        ),
+    ]
+    outputs = [Output(display_name="Result", name="result", method="build_result")]

lfx_gitlab/components/gitlab/merge_request_comment_create.py

@@ -0,0 +1,21 @@
+"""Create a GitLab comment using a connection."""
+
+from lfx.io import IntInput, MultilineInput, Output
+
+from lfx_gitlab.base import GitLabActionComponent, connection_input, project_input
+
+
+class GitLabCreateMergeRequestCommentComponent(GitLabActionComponent):
+    display_name = "GitLab: Create Merge Request Comment"
+    name = "GitLabCreateMergeRequestCommentComponent"
+    description = "Create a comment as the connection owner."
+    capability_id = "gitlab.merge_request_comment_create"
+    operation = "comment"
+    resource = "merge_request"
+    inputs = [
+        connection_input(capability_id),
+        project_input(),
+        IntInput(name="number", display_name="Merge Request Number", required=True, input_types=["Message"]),
+        MultilineInput(name="body", display_name="Comment", required=True),
+    ]
+    outputs = [Output(display_name="Result", name="result", method="build_result")]

lfx_gitlab/components/gitlab/merge_request_create.py

@@ -0,0 +1,23 @@
+"""Create one GitLab merge request using a connection."""
+
+from lfx.io import MessageTextInput, MultilineInput, Output
+
+from lfx_gitlab.base import GitLabActionComponent, connection_input, project_input
+
+
+class GitLabCreateMergeRequestComponent(GitLabActionComponent):
+    display_name = "GitLab: Create Merge Request"
+    name = "GitLabCreateMergeRequestComponent"
+    description = "Create a GitLab merge request as the connection owner."
+    capability_id = "gitlab.merge_request_create"
+    operation = "create"
+    resource = "merge_request"
+    inputs = [
+        connection_input(capability_id),
+        project_input(),
+        MessageTextInput(name="title", display_name="Title", required=True),
+        MultilineInput(name="body_content", display_name="Description", value=""),
+        MessageTextInput(name="source_branch", display_name="Source Branch", required=True),
+        MessageTextInput(name="target_branch", display_name="Target Branch", required=True),
+    ]
+    outputs = [Output(display_name="Result", name="result", method="build_result")]

lfx_gitlab/components/gitlab/merge_request_get.py

@@ -0,0 +1,20 @@
+"""Get one GitLab merge request using a connection."""
+
+from lfx.io import IntInput, Output
+
+from lfx_gitlab.base import GitLabActionComponent, connection_input, project_input
+
+
+class GitLabGetMergeRequestComponent(GitLabActionComponent):
+    display_name = "GitLab: Get Merge Request"
+    name = "GitLabGetMergeRequestComponent"
+    description = "Get a GitLab merge request as the connection owner."
+    capability_id = "gitlab.merge_request_read"
+    operation = "get"
+    resource = "merge_request"
+    inputs = [
+        connection_input(capability_id),
+        project_input(),
+        IntInput(name="number", display_name="Merge Request Number", required=True, input_types=["Message"]),
+    ]
+    outputs = [Output(display_name="Result", name="result", method="build_result")]

lfx_gitlab/components/gitlab/merge_request_trigger.py

@@ -0,0 +1,11 @@
+"""Declare a signed GitLab project webhook trigger."""
+
+from lfx_gitlab.triggers import GitLabProjectTriggerComponent, trigger_inputs
+
+
+class GitLabOnMergeRequestTriggerComponent(GitLabProjectTriggerComponent):
+    display_name = "GitLab: On Merge Request"
+    name = "GitLabOnMergeRequestTriggerComponent"
+    description = "Start the flow for selected signed project events."
+    trigger_kind = "gitlab.merge_request"
+    inputs = trigger_inputs("merge_request")

lfx_gitlab/components/gitlab/merge_request_update.py

@@ -0,0 +1,30 @@
+"""Update one GitLab merge request using a connection."""
+
+from lfx.io import DropdownInput, IntInput, MessageTextInput, MultilineInput, Output
+
+from lfx_gitlab.base import GitLabActionComponent, connection_input, project_input
+
+
+class GitLabUpdateMergeRequestComponent(GitLabActionComponent):
+    display_name = "GitLab: Update Merge Request"
+    name = "GitLabUpdateMergeRequestComponent"
+    description = "Update a GitLab merge request as the connection owner."
+    capability_id = "gitlab.merge_request_update"
+    operation = "update"
+    resource = "merge_request"
+    inputs = [
+        connection_input(capability_id),
+        project_input(),
+        IntInput(name="number", display_name="Merge Request Number", required=True, input_types=["Message"]),
+        MessageTextInput(name="title", display_name="Title", value="", info="Leave blank to keep the existing title."),
+        MultilineInput(
+            name="body_content",
+            display_name="Description",
+            value="",
+            info="Leave blank to keep the existing description.",
+        ),
+        DropdownInput(
+            name="state_event", display_name="State Change", options=["unchanged", "close", "reopen"], value="unchanged"
+        ),
+    ]
+    outputs = [Output(display_name="Result", name="result", method="build_result")]

lfx_gitlab/components/gitlab/project_get.py

@@ -0,0 +1,16 @@
+"""Get one GitLab project using a connection."""
+
+from lfx.io import Output
+
+from lfx_gitlab.base import GitLabActionComponent, connection_input, project_input
+
+
+class GitLabGetProjectComponent(GitLabActionComponent):
+    display_name = "GitLab: Get Project"
+    name = "GitLabGetProjectComponent"
+    description = "Get a GitLab project as the connection owner."
+    capability_id = "gitlab.project_read"
+    operation = "get"
+    resource = "project"
+    inputs = [connection_input(capability_id), project_input()]
+    outputs = [Output(display_name="Result", name="result", method="build_result")]

lfx_gitlab/extension.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://schemas.langflow.org/extension/v1.json",
+  "id": "lfx-gitlab",
+  "version": "0.1.0",
+  "name": "GitLab",
+  "description": "GitLab project, issue, merge request and comment actions with signed project event triggers.",
+  "lfx": {
+    "compat": [
+      "1"
+    ]
+  },
+  "bundles": [
+    {
+      "name": "gitlab",
+      "path": "components/gitlab"
+    }
+  ],
+  "integrations": [
+    {
+      "provider_id": "gitlab",
+      "bundle": "gitlab",
+      "path": "capabilities.v1.json"
+    }
+  ]
+}

lfx_gitlab/triggers.py

@@ -0,0 +1,58 @@
+"""Declarative GitLab project triggers owned by the server runtime."""
+
+from lfx.base.triggers.base import BaseTriggerComponent
+from lfx.io import BoolInput, DropdownInput, MultiselectInput
+
+from lfx_gitlab.base import connection_input, project_input
+
+ISSUE_ACTIONS = ["open", "update", "close", "reopen"]
+MR_ACTIONS = ["open", "update", "close", "reopen", "merge", "approved", "unapproved", "approval", "unapproval"]
+
+
+def trigger_inputs(resource):
+    return [
+        connection_input(f"gitlab.trigger.{resource}"),
+        project_input(connectable=False),
+        MultiselectInput(
+            name="actions",
+            display_name="Events",
+            options=ISSUE_ACTIONS if resource == "issue" else MR_ACTIONS,
+            value=["open", "close", "reopen"],
+        ),
+        BoolInput(
+            name="include_self_events",
+            display_name="Include Own Events",
+            value=False,
+            advanced=True,
+            info="Enable only when the flow cannot write back into a trigger loop.",
+        ),
+        BoolInput(name="include_bot_events", display_name="Include Bot Events", value=False, advanced=True),
+        DropdownInput(
+            name="delivery_mode",
+            display_name="Delivery Mode",
+            options=["push"],
+            value="push",
+            advanced=True,
+            info="Requires public HTTPS ingress and GitLab 19.1 or newer signing tokens.",
+        ),
+    ]
+
+
+class GitLabProjectTriggerComponent(BaseTriggerComponent):
+    provider = "gitlab"
+    icon = "Gitlab"
+    needs_connection = True
+
+    def trigger_config(self):
+        return {
+            "connection": getattr(self, "connection", None),
+            "project_id": getattr(self, "project_id", None),
+            "actions": getattr(self, "actions", []),
+            "delivery_mode": "push",
+            "include_self_events": getattr(self, "include_self_events", False),
+            "include_bot_events": getattr(self, "include_bot_events", False),
+        }
+
+
+# Preserve imports of the original helper while component source uses the loader-compatible name.
+GitLabProjectTrigger = GitLabProjectTriggerComponent

lfx_gitlab-0.1.0.dist-info/METADATA

@@ -0,0 +1,17 @@
+Metadata-Version: 2.4
+Name: lfx-gitlab
+Version: 0.1.0
+Summary: GitLab actions and signed project webhook triggers.
+License: MIT
+Requires-Python: <3.16,>=3.10
+Requires-Dist: httpx<1.0,>=0.27
+Requires-Dist: lfx<2.0.0,>=1.14.0.dev0
+Description-Content-Type: text/markdown
+
+# GitLab integrations
+
+This preview bundle provides nine actions and two signed project webhook triggers. Actions run as the verified personal access token owner.
+
+Follow the [GitLab setup guide](https://docs.langflow.org/next/bundles-gitlab) for personal access token setup, deployment configuration, connections, background runs, event identity, limits, and recovery. The maintained [guide source](../../../docs/docs/Components/bundles-gitlab.mdx) ships with the next-version documentation.
+
+The [provider contract](../../../design/provider-integrations/contracts/gitlab.v1.json) records capabilities and acceptance evidence. Live tenant authorization and production delivery acceptance remain unverified.

lfx_gitlab-0.1.0.dist-info/RECORD

@@ -0,0 +1,23 @@
+lfx_gitlab/__init__.py,sha256=7KFL1joUnl8LcUsAfB_Oi0JaoOeLgkLsUg-eR9yyeYs,65
+lfx_gitlab/base.py,sha256=G8DycRfLRxqzU2BR4qtG5yagndW6qLFxUBj4nqRmjeM,4524
+lfx_gitlab/client.py,sha256=xbWmQM9BlKMa_G7sEuWSMjvyUAHHoE_dePUrQG7Zo60,9799
+lfx_gitlab/extension.json,sha256=ofRKzuWrsTc2un8_3j1JxuYBIn0s4q30s_P7u-1fBWg,512
+lfx_gitlab/triggers.py,sha256=iVQdReJwgUNrFFzs1WJhc4JVT78iS9PzqtKo63Nz8DM,2149
+lfx_gitlab/components/__init__.py,sha256=emLso-Zy9TdiRC52KtESwi7Ao8MQAV-Z7KhBG6BkK0Q,35
+lfx_gitlab/components/gitlab/__init__.py,sha256=pzAPpinipS15G_tjHrGpqlkRJPoeq932p0wBXFb3lzo,1162
+lfx_gitlab/components/gitlab/capabilities.v1.json,sha256=ZlSp0pcwJoPXLmCJK7CqU2ySywd5RF_Cy_NBhjJnADE,7393
+lfx_gitlab/components/gitlab/issue_comment_create.py,sha256=KCLG4XeMHs3C_m70Q8XL3ZE0qrUnizcD0z-jNjioQyU,860
+lfx_gitlab/components/gitlab/issue_create.py,sha256=zPZCDib2va-ja-sn3zyi2cWL9w4uwHJT7AErOFnRDPE,824
+lfx_gitlab/components/gitlab/issue_get.py,sha256=iu9CJzKK2cOdVBWFPWYJMl_V_nNXlI3Pys8xJrONrHY,722
+lfx_gitlab/components/gitlab/issue_trigger.py,sha256=STfzgODfeIFVAvocLR5bw8kXKRa8XSdfRcv4Bebtr9Y,427
+lfx_gitlab/components/gitlab/issue_update.py,sha256=nq-XmsWvOl19Kipl9o6-UeNxl7LbgMA0bII0DYEi9YQ,1262
+lfx_gitlab/components/gitlab/merge_request_comment_create.py,sha256=2hlQppfDnhM_PBnDE8UbRQoJrl5y0HrEmi2nd-DzO6Q,906
+lfx_gitlab/components/gitlab/merge_request_create.py,sha256=mTF2-UAHUcKGZjZa246ssbkk9VHwCCpk2QSLB3sY-Ko,1064
+lfx_gitlab/components/gitlab/merge_request_get.py,sha256=1ZO9UZO8F8z1XgThI3cb4lY_DrLYVbgFTuA8q8k_fIg,784
+lfx_gitlab/components/gitlab/merge_request_trigger.py,sha256=HI_AsRmv2ilMIoTtUJl-GHtcYOl-1RmWinDweUYx39k,465
+lfx_gitlab/components/gitlab/merge_request_update.py,sha256=zlQcqbE41cbum4AGAfYajsTeX8V3grJWxoLwUJNUzKU,1324
+lfx_gitlab/components/gitlab/project_get.py,sha256=Ad_i7umjquGms7miZn8kgcTmegJMN0Vqmo9Y8gh4Kww,601
+lfx_gitlab-0.1.0.dist-info/METADATA,sha256=eTE67_T49Tba6BAsJZSxxRleFRV4dFHuHMv05aBO6w0,978
+lfx_gitlab-0.1.0.dist-info/WHEEL,sha256=lCkmxWfQsSc9CfIClYeavTdQeEX2toPqufh9gI35EQA,87
+lfx_gitlab-0.1.0.dist-info/entry_points.txt,sha256=N8vyQMhI8xJkcDJZzek6KuU4h44RB143_utxcMlxRcU,146
+lfx_gitlab-0.1.0.dist-info/RECORD,,

lfx_gitlab-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.31.0
+Root-Is-Purelib: true
+Tag: py3-none-any

lfx_gitlab-0.1.0.dist-info/entry_points.txt

@@ -0,0 +1,5 @@
+[langflow.extensions]
+lfx-gitlab = lfx_gitlab
+
+[langflow.trigger_providers]
+gitlab = langflow.services.triggers.providers.gitlab.runtime:PROVIDER