Directories
¶
| Path | Synopsis |
|---|---|
|
Command audit_1to1 is the consolidated 1:1 SDK↔API parity audit.
|
Command audit_1to1 is the consolidated 1:1 SDK↔API parity audit. |
|
internal/actions
Package actions reports client-go SDK endpoints that no MCP action invokes (R-ACTION).
|
Package actions reports client-go SDK endpoints that no MCP action invokes (R-ACTION). |
|
internal/enums
Package enums holds the 1:1 audit rule for enumerated values (R-ENUM).
|
Package enums holds the 1:1 audit rule for enumerated values (R-ENUM). |
|
internal/grants
Package grants is R-GRANT, the dimension of the 1:1 audit that says what a fine-grained personal access token needs for each action this server offers (issue 952).
|
Package grants is R-GRANT, the dimension of the 1:1 audit that says what a fine-grained personal access token needs for each action this server offers (issue 952). |
|
internal/merge
Package merge combines the four 1:1-audit gap reports — struct completeness (R-INPUT/R-OUTPUT), action coverage (R-ACTION), metadata completeness (R-META), and enum values (R-ENUM) — into a single per-package backlog.
|
Package merge combines the four 1:1-audit gap reports — struct completeness (R-INPUT/R-OUTPUT), action coverage (R-ACTION), metadata completeness (R-META), and enum values (R-ENUM) — into a single per-package backlog. |
|
internal/metadata
Package metadata reports discovery-metadata gaps (R-META) across the canonical ActionSpec catalog.
|
Package metadata reports discovery-metadata gaps (R-META) across the canonical ActionSpec catalog. |
|
internal/params
Package params is R-PARAM: every param a route this server reaches declares, held to whether anything here can send it.
|
Package params is R-PARAM: every param a route this server reaches declares, held to whether anything here can send it. |
|
internal/paths
Package paths holds the 1:1 audit rule about the request an action actually issues (R-PATH).
|
Package paths holds the 1:1 audit rule about the request an action actually issues (R-PATH). |
|
internal/required
Package required is the requiredness rule of R-INPUT: every parameter an action's input schema requires, held to what GitLab requires of the parameter it is sent as (issue 1100).
|
Package required is the requiredness rule of R-INPUT: every parameter an action's input schema requires, held to what GitLab requires of the parameter it is sent as (issue 1100). |
|
internal/routes
Package routes is R-ROUTE: every route the live GitLab record mounts, held to an action of the catalog that sends it or to a reason none does.
|
Package routes is R-ROUTE: every route the live GitLab record mounts, held to an action of the catalog that sends it or to a reason none does. |
|
internal/sdk
Package sdk holds the two 1:1 audit rules whose universe comes from the SDK rather than from this repository's own call sites (R-SERVICE, R-GRAPHQL).
|
Package sdk holds the two 1:1 audit rules whose universe comes from the SDK rather than from this repository's own call sites (R-SERVICE, R-GRAPHQL). |
|
internal/sdkoptions
Package sdkoptions is the one reader of what client-go's option structs put on a request: the key each field is written under and whether it is written whatever the field holds, walked through the option structs a field nests and named the way GitLab's record declares a nested param.
|
Package sdkoptions is the one reader of what client-go's option structs put on a request: the key each field is written under and whether it is written whatever the field holds, walked through the option structs a field nests and named the way GitLab's record declares a nested param. |
|
internal/shared
Package shared holds constants and helpers used across multiple audit_1to1 sub-packages so they cannot drift.
|
Package shared holds constants and helpers used across multiple audit_1to1 sub-packages so they cannot drift. |
|
internal/structs
Package structs verifies the 1:1 field mapping between the MCP tool input/output structs and the client-go SDK Options/result structs they wrap.
|
Package structs verifies the 1:1 field mapping between the MCP tool input/output structs and the client-go SDK Options/result structs they wrap. |
|
internal/waits
Package waits holds every workaround this repository carries because client-go does something wrong or does not do it at all, and the predicate on the pinned client-go that says the workaround is still needed.
|
Package waits holds every workaround this repository carries because client-go does something wrong or does not do it at all, and the predicate on the pinned client-go that says the workaround is still needed. |
|
Command audit_action_ids holds every canonical action ID this repository publishes to a model against the IDs the catalog really builds.
|
Command audit_action_ids holds every canonical action ID this repository publishes to a model against the IDs the catalog really builds. |
|
Command audit_binary_vulns builds every binary the release publishes and holds each one to the vulnerability database at module grain, which is how every scanner that reads a shipped binary or its SBOM judges it.
|
Command audit_binary_vulns builds every binary the release publishes and holds each one to the vulnerability database at module grain, which is how every scanner that reads a shipped binary or its SBOM judges it. |
|
Command audit_catalog_first generates a source-discovered inventory of internal/tools domain coverage for the ActionSpec migration.
|
Command audit_catalog_first generates a source-discovered inventory of internal/tools domain coverage for the ActionSpec migration. |
|
Command audit_dco holds the commits of a branch to the Developer Certificate of Origin (https://developercertificate.org/): every commit it judges has to carry a Signed-off-by trailer naming its author, which is how the author certifies the certificate for that commit.
|
Command audit_dco holds the commits of a branch to the Developer Certificate of Origin (https://developercertificate.org/): every commit it judges has to carry a Signed-off-by trailer naming its author, which is how the author certifies the certificate for that commit. |
|
Command audit_dead_consts reports every unexported constant in this repository that nothing reads.
|
Command audit_dead_consts reports every unexported constant in this repository that nothing reads. |
|
Command audit_discovery_completeness reports discovery-metadata gaps that affect how well models can find and choose the right action.
|
Command audit_discovery_completeness reports discovery-metadata gaps that affect how well models can find and choose the right action. |
|
Command audit_doc_tool_names checks every name the documentation teaches a reader to call against what the server really serves: the `gitlab_*` tool names against the names it registers, and the `domain.action` IDs against the catalog it builds.
|
Command audit_doc_tool_names checks every name the documentation teaches a reader to call against what the server really serves: the `gitlab_*` tool names against the names it registers, and the `domain.action` IDs against the catalog it builds. |
|
Command audit_dynamic_aliases checks the dynamic toolset compatibility alias catalog for governance issues.
|
Command audit_dynamic_aliases checks the dynamic toolset compatibility alias catalog for governance issues. |
|
Command audit_e2e_coverage is the one command that says what the end-to-end suite covers.
|
Command audit_e2e_coverage is the one command that says what the end-to-end suite covers. |
|
Command audit_edition_tier reports the doc-grounded licensing tier of every canonical MCP action and compares it to the action's current gating.
|
Command audit_edition_tier reports the doc-grounded licensing tier of every canonical MCP action and compares it to the action's current gating. |
|
Command audit_file_headers holds every source file of this repository to the two lines it opens with: the copyright statement and the SPDX identifier of the license, the ones cmd/internal/fileheader spells.
|
Command audit_file_headers holds every source file of this repository to the two lines it opens with: the copyright statement and the SPDX identifier of the license, the ones cmd/internal/fileheader spells. |
|
Command audit_gateway_chars scans everything a client receives from tools/list, prompts/list and resources/list, on every tool surface and at the widest tier, for characters that MCP gateway validators reject.
|
Command audit_gateway_chars scans everything a client receives from tools/list, prompts/list and resources/list, on every tool surface and at the widest tier, for characters that MCP gateway validators reject. |
|
Command audit_graphql_documents fails when a raw GraphQL document in this repository is one the pinned GitLab schema refuses, or when a document this server sends is one the GitLab release it is pinned to refuses.
|
Command audit_graphql_documents fails when a raw GraphQL document in this repository is one the pinned GitLab schema refuses, or when a document this server sends is one the GitLab release it is pinned to refuses. |
|
Command audit_graphql_shapes fails when a struct this repository decodes a GraphQL response into cannot hold what the document it is sent with asks for.
|
Command audit_graphql_shapes fails when a struct this repository decodes a GraphQL response into cannot hold what the document it is sent with asks for. |
|
Command audit_i18n holds every text this server shows a person directly to the message catalog, internal/i18n (issue 1547).
|
Command audit_i18n holds every text this server shows a person directly to the message catalog, internal/i18n (issue 1547). |
|
Command audit_image_vulns holds the operating-system packages of the container image to Trivy's vulnerability database, one Trivy report per platform, before the image is pushed.
|
Command audit_image_vulns holds the operating-system packages of the container image to Trivy's vulnerability database, one Trivy report per platform, before the image is pushed. |
|
Command audit_install_buttons checks the one-click install buttons against what the pages around them claim.
|
Command audit_install_buttons checks the one-click install buttons against what the pages around them claim. |
|
Command audit_md_escaping fails when a Markdown formatter interpolates a value this server did not write into a construct that value can change the shape of.
|
Command audit_md_escaping fails when a Markdown formatter interpolates a value this server did not write into a construct that value can change the shape of. |
|
Command audit_meta_descriptions checks the prose a meta-tool serves against the parameters its actions actually accept.
|
Command audit_meta_descriptions checks the prose a meta-tool serves against the parameters its actions actually accept. |
|
Command audit_metrics generates a comprehensive metrics summary for the gitlab-mcp-server MCP server.
|
Command audit_metrics generates a comprehensive metrics summary for the gitlab-mcp-server MCP server. |
|
Command audit_readonly_graphql fails when an action the canonical catalog classifies ReadOnly can reach a GraphQL mutation.
|
Command audit_readonly_graphql fails when an action the canonical catalog classifies ReadOnly can reach a GraphQL mutation. |
|
Command audit_sdk_context reports every call into client-go that does not hand the SDK the caller's context.
|
Command audit_sdk_context reports every call into client-go that does not hand the SDK the caller's context. |
|
Command audit_site_headers fetches the documentation site and judges the security headers its responses carry: the four the OpenSSF Best Practices criterion hardened_site names, Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options as nosniff, and X-Frame-Options, each of which must be sent with a value that is not permissive.
|
Command audit_site_headers fetches the documentation site and judges the security headers its responses carry: the four the OpenSSF Best Practices criterion hardened_site names, Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options as nosniff, and X-Frame-Options, each of which must be sent with a value that is not permissive. |
|
Command audit_supply_chain audits the release supply chain's configuration invariants.
|
Command audit_supply_chain audits the release supply chain's configuration invariants. |
|
Command audit_surface_quality is the consolidated MCP tool surface quality audit.
|
Command audit_surface_quality is the consolidated MCP tool surface quality audit. |
|
Command audit_tenancy holds the tenant policy register, internal/tenancy, to the code that enforces it.
|
Command audit_tenancy holds the tenant policy register, internal/tenancy, to the code that enforces it. |
|
Command audit_test_closed_servers reports every httptest server closed while its address is still used later in the same function.
|
Command audit_test_closed_servers reports every httptest server closed while its address is still used later in the same function. |
|
Command audit_test_goroutines detects testing.T abort calls made from goroutines other than the one running the test.
|
Command audit_test_goroutines detects testing.T abort calls made from goroutines other than the one running the test. |
|
Command audit_test_names scans all Go test files and classifies test function names by their naming pattern.
|
Command audit_test_names scans all Go test files and classifies test function names by their naming pattern. |
|
Command audit_test_subtests finds case loops in test functions that assert without opening a subtest, and can rewrite the mechanical ones.
|
Command audit_test_subtests finds case loops in test functions that assert without opening a subtest, and can rewrite the mechanical ones. |
|
Command audit_tokens measures the LLM context window overhead of all registered MCP tool definitions.
|
Command audit_tokens measures the LLM context window overhead of all registered MCP tool definitions. |
|
Command bench_resources measures what this server costs to run, and draws the charts the documentation publishes.
|
Command bench_resources measures what this server costs to run, and draws the charts the documentation publishes. |
|
Command format_md_tables normalizes Markdown pipe tables in README.md, docs/ and the Astro documentation site under site/src/content/docs/.
|
Command format_md_tables normalizes Markdown pipe tables in README.md, docs/ and the Astro documentation site under site/src/content/docs/. |
|
Command fuzz_targets lists this module's fuzz targets as the matrix that .github/workflows/fuzz.yml fans out over.
|
Command fuzz_targets lists this module's fuzz targets as the matrix that .github/workflows/fuzz.yml fans out over. |
|
Command gen_action_catalog_manifest generates the ActionSpec group builder manifest used by the catalog-first runtime.
|
Command gen_action_catalog_manifest generates the ActionSpec group builder manifest used by the catalog-first runtime. |
|
Command gen_action_grants derives what every catalog action sends GitLab from its handlers and joins each request to what the live GitLab record says a fine-grained personal access token needs for it.
|
Command gen_action_grants derives what every catalog action sends GitLab from its handlers and joins each request to what the live GitLab record says a fine-grained personal access token needs for it. |
|
internal/derive
Package derive answers, for every catalog action, which requests its handler can put on the wire and how they combine.
|
Package derive answers, for every catalog action, which requests its handler can put on the wire and how they combine. |
|
internal/join
Package join joins what each action requests to what GitLab demands of a fine-grained token for each request, into the table the server carries.
|
Package join joins what each action requests to what GitLab demands of a fine-grained token for each request, into the table the server carries. |
|
Command gen_api_live pins what a booted GitLab says its own REST API is.
|
Command gen_api_live pins what a booted GitLab says its own REST API is. |
|
Command gen_brand emits every vector brand asset from one parametric geometry, so the mark cannot drift between its surfaces.
|
Command gen_brand emits every vector brand asset from one parametric geometry, so the mark cannot drift between its surfaces. |
|
Command gen_graphql_schema pins a GitLab GraphQL schema into the repository.
|
Command gen_graphql_schema pins a GitLab GraphQL schema into the repository. |
|
Command gen_icon_webp rasterizes the SVG icon constants declared in internal/toolutil/icons.go into lossless WebP fallbacks for MCP clients that reject image/svg+xml (VS Code Copilot's mcpIcons.ts MIME allowlist, for example, admits image/webp but not SVG).
|
Command gen_icon_webp rasterizes the SVG icon constants declared in internal/toolutil/icons.go into lossless WebP fallbacks for MCP clients that reject image/svg+xml (VS Code Copilot's mcpIcons.ts MIME allowlist, for example, admits image/webp but not SVG). |
|
Command gen_lhm_manifest regenerates the tools, prompts, and resources arrays in lhm.plugin.json, the manifest published to the LobeHub Marketplace.
|
Command gen_lhm_manifest regenerates the tools, prompts, and resources arrays in lhm.plugin.json, the manifest published to the LobeHub Marketplace. |
|
Command gen_llms generates llms.txt and llms-full.txt files.
|
Command gen_llms generates llms.txt and llms-full.txt files. |
|
Command gen_model_corpus renders the model evaluation corpus breadth ledger: what the corpus asks about, counted against the action catalog.
|
Command gen_model_corpus renders the model evaluation corpus breadth ledger: what the corpus asks about, counted against the action catalog. |
|
Command gen_model_results turns what a model evaluation run observed into what this repository publishes: the committed record and the reference page.
|
Command gen_model_results turns what a model evaluation run observed into what this repository publishes: the committed record and the reference page. |
|
Command gen_orbit_record records what GitLab.com's Orbit routes answer and commits the key tree of each answer to docs/development/orbit-responses.json.
|
Command gen_orbit_record records what GitLab.com's Orbit routes answer and commits the key tree of each answer to docs/development/orbit-responses.json. |
|
Command gen_request_inventory merges the request shards the unit suite records into the committed inventory of what this server sends GitLab.
|
Command gen_request_inventory merges the request shards the unit suite records into the committed inventory of what this server sends GitLab. |
|
Command gen_testing_docs regenerates the managed test metrics section in docs/development/testing/testing.md.
|
Command gen_testing_docs regenerates the managed test metrics section in docs/development/testing/testing.md. |
|
Command gen_third_party_notices writes THIRD_PARTY_NOTICES: the license, notice and patent texts of every module built into the release binaries, read from the binaries' own build information and from the module cache.
|
Command gen_third_party_notices writes THIRD_PARTY_NOTICES: the license, notice and patent texts of every module built into the release binaries, read from the binaries' own build information and from the module cache. |
|
Command gen_tool_reference writes the per-domain tool reference of the documentation site: one page per catalog group, in English under site/src/content/docs/reference/tools/ and in Spanish under its es/ twin, plus an index page for each.
|
Command gen_tool_reference writes the per-domain tool reference of the documentation site: one page per catalog group, in English under site/src/content/docs/reference/tools/ and in Spanish under its es/ twin, plus an index page for each. |
|
Command godoc_tool is the consolidated Go documentation auditor and fixer.
|
Command godoc_tool is the consolidated Go documentation auditor and fixer. |
|
internal
|
|
|
actionids
Package actionids is the one reader of the canonical action IDs this repository publishes, and the one rule for spotting one inside prose.
|
Package actionids is the one reader of the canonical action IDs this repository publishes, and the one rule for spotting one inside prose. |
|
actionrequests
Package actionrequests answers, for a catalog action, which functions run when it is called and what those functions put on the wire.
|
Package actionrequests answers, for a catalog action, which functions run when it is called and what those functions put on the wire. |
|
actionrequests/actionfixture
Package actionfixture holds the fixture packages the suites of cmd/internal/actionrequests and cmd/audit_readonly_graphql both load: Go source written as strings, put into the loader's overlay under Dir, a directory that exists nowhere on disk, and type-checked against the real toolutil and client-go so a resolver is held to the shapes it meets in the tree rather than to a mock of them.
|
Package actionfixture holds the fixture packages the suites of cmd/internal/actionrequests and cmd/audit_readonly_graphql both load: Go source written as strings, put into the loader's overlay under Dir, a directory that exists nowhere on disk, and type-checked against the real toolutil and client-go so a resolver is held to the shapes it meets in the tree rather than to a mock of them. |
|
apidocs
Package apidocs is a shared fetcher for the GitLab API reference docs (the doc/api/<area>.md files in the gitlab-org/gitlab monorepo) used as a source of truth alongside the client-go SDK by the audit utilities.
|
Package apidocs is a shared fetcher for the GitLab API reference docs (the doc/api/<area>.md files in the gitlab-org/gitlab monorepo) used as a source of truth alongside the client-go SDK by the audit utilities. |
|
apilive
Package apilive is the committed record of what a booted GitLab says its own REST API is, and the one reader of it.
|
Package apilive is the committed record of what a booted GitLab says its own REST API is, and the one reader of it. |
|
auditshared
Package auditshared holds analysis helpers shared by the discovery-metadata auditors (cmd/audit_1to1 R-META and cmd/audit_discovery_completeness): the projected-description probe, owner-package resolution, and the shared usage/description quality checks.
|
Package auditshared holds analysis helpers shared by the discovery-metadata auditors (cmd/audit_1to1 R-META and cmd/audit_discovery_completeness): the projected-description probe, owner-package resolution, and the shared usage/description quality checks. |
|
docgen
Package docgen contains helpers for generated project documentation.
|
Package docgen contains helpers for generated project documentation. |
|
fileheader
Package fileheader holds the two lines every source file of this repository opens with: the copyright statement, naming the maintainer LICENSE names as the holder, and the SPDX identifier of the license LICENSE grants.
|
Package fileheader holds the two lines every source file of this repository opens with: the copyright statement, naming the maintainer LICENSE names as the holder, and the SPDX identifier of the license LICENSE grants. |
|
golist
Package golist holds the row shape two commands ask `go list` for, and the one answer to which `go` they ask it of.
|
Package golist holds the row shape two commands ask `go list` for, and the one answer to which `go` they ask it of. |
|
goprogram
Package goprogram is the one go/packages front end for the gates that type-check this repository's own source.
|
Package goprogram is the one go/packages front end for the gates that type-check this repository's own source. |
|
grantwords
Package grantwords is the one wording of what a fine-grained personal access token needs for an action, in English and Spanish, for the two generators that print it.
|
Package grantwords is the one wording of what a fine-grained personal access token needs for an action, in English and Spanish, for the two generators that print it. |
|
graphqldocs
Package graphqldocs reads every raw GraphQL document this repository writes out of the source and judges each one against a GitLab schema.
|
Package graphqldocs reads every raw GraphQL document this repository writes out of the source and judges each one against a GitLab schema. |
|
graphqlintrospect
Package graphqlintrospect asks a GitLab instance for its GraphQL schema and converts the answer to SDL.
|
Package graphqlintrospect asks a GitLab instance for its GraphQL schema and converts the answer to SDL. |
|
mcpsurface
Package mcpsurface is the one reader of the MCP surface this server serves.
|
Package mcpsurface is the one reader of the MCP surface this server serves. |
|
orbitrecord
Package orbitrecord is the committed record of what GitLab.com's Orbit routes answer, and the one reader of it.
|
Package orbitrecord is the committed record of what GitLab.com's Orbit routes answer, and the one reader of it. |
|
provenance
Package provenance holds the one age verdict the commands that pin an external truth pass on their committed record.
|
Package provenance holds the one age verdict the commands that pin an external truth pass on their committed record. |
|
requestinventory
Package requestinventory holds the committed record of what this server sends GitLab, and the one definition of which catalog actions it covers.
|
Package requestinventory holds the committed record of what this server sends GitLab, and the one definition of which catalog actions it covers. |
|
sdkroutes
Package sdkroutes is the one reader of which request each client-go service method sends: the HTTP verb and the path for a REST method, and the GraphQL documents for one that posts to the GraphQL endpoint.
|
Package sdkroutes is the one reader of which request each client-go service method sends: the HTTP verb and the path for a REST method, and the GraphQL documents for one that posts to the GraphQL endpoint. |
|
sourcegate
Package sourcegate is the scaffolding the gates that judge this repository's own source share above the load: the command line they read, the exit code they end on, the declaration table they are held to, and the name a finding gives the function it sits in.
|
Package sourcegate is the scaffolding the gates that judge this repository's own source share above the load: the command line they read, the exit code they end on, the declaration table they are held to, and the name a finding gives the function it sits in. |
|
testsource
Package testsource answers the three questions every command that reads _test.go files in this repository used to answer for itself: whether a function name is a Go test entry point, which naming bucket that name falls in, and which files a scan of the tree may look at.
|
Package testsource answers the three questions every command that reads _test.go files in this repository used to answer for itself: whether a function name is a Go test entry point, which naming bucket that name falls in, and which files a scan of the tree may look at. |
|
Command measure_conditions plans, runs and reports the condition coverage measurement that .github/workflows/conditions.yml runs on demand (issue 1210), and takes the same measurement of the whole tree on the machine at hand.
|
Command measure_conditions plans, runs and reports the condition coverage measurement that .github/workflows/conditions.yml runs on demand (issue 1210), and takes the same measurement of the whole tree on the machine at hand. |
|
Command reproduce_release rebuilds the binaries a release publishes and compares them with the published ones byte for byte, or builds every release target of a tree twice and compares the two builds.
|
Command reproduce_release rebuilds the binaries a release publishes and compares them with the published ones byte for byte, or builds every release target of a tree twice and compares the two builds. |
|
Command server is the MCP server entry point for gitlab-mcp-server.
|
Command server is the MCP server entry point for gitlab-mcp-server. |
Click to show internal directories.
Click to hide internal directories.