feat(gitlab): access, membership, and user-admin operations by waleedlatif1 · Pull Request #5710 · simstudioai/sim

waleedlatif1 · 2026-07-16T17:32:57Z

Summary

Adds 27 GitLab tools for access & user administration: project/group members (list/add/update/remove), email invitations (invite/list/update/revoke), access requests (list/approve/deny), SAML group links (list/add/delete), user search, and instance user admin (create/update/delete, block/unblock, activate/deactivate, ban/unban, approve/reject signup, delete identity)
Includes @mzxchandra's work from feat(gitlab): add access, membership, and user-admin operations #5707 plus a full validation pass against GitLab's API docs
Validation fixes: documented provider param on SAML group links (required to disambiguate duplicate link names on delete), query filter wired through the block for member/invitation listings, moderation responses no longer surface {message: 'Success'} as a user object, registry entries alphabetized, type shapes aligned with documented response fields

Type of Change

New feature

Testing

34 gitlab tool/block tests pass; lint and typecheck clean; every endpoint cross-checked against GitLab's Members, Invitations, Access Requests, SAML, Users, and User Moderation API docs

Checklist

Code follows project style guidelines
Self-reviewed my changes
Tests added/updated and passing
No new warnings introduced
I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

Adds member, invitation, access-request, SAML group link, and user administration tools to the GitLab integration. Resource-scoped ops work against projects or groups; user-admin ops require an admin token. All tools reuse the existing host/SSRF guard via getGitLabApiBase and add a shared getGitLabResourcePath helper.

Adds the new operations to the block dropdown and tools access list, with a named access-level dropdown (enum in, integer out), first-class expires_at, a /members/all default (direct-only opt-in), resource-type selector, and member_role_id passthrough.

Covers the access_level enum-to-integer coercion, the /members/all default vs direct-only, the 409-duplicate-add soft success, invitation per-email error handling, user-status-action response parsing, and getGitLabResourcePath.

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

- update_user now sends admin:false so the Administrator switch can demote (an untouched switch stays undefined and leaves the flag unchanged) - expose the access-level dropdown for Update Invitation - normalize comma-separated invite emails so spaced multi-email input works

Update Invitation now uses a dedicated dropdown that defaults to 'Leave unchanged', so updating only the expiration no longer silently resets the invitation's access level to Developer. The level is sent only when explicitly chosen.

… query filter, moderation user guard, registry order

vercel · 2026-07-16T17:33:08Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview, Comment	Jul 16, 2026 6:47pm

cursor · 2026-07-16T17:33:10Z

PR Summary

High Risk
Adds admin-token operations that change membership, invitations, SAML links, and instance users—mistakes or over-scoped tokens can grant or revoke production access. Large surface area across block param mapping and many new endpoints increases the chance of subtle authorization or API mismatch bugs.

Overview
Extends the GitLab integration with project/group access governance and instance user administration, exposed as new workflow operations and matching API tools.

New capabilities cover listing and mutating members (including inherited vs direct members, expirations, and custom roles), email invitations and access-request approve/deny flows, SAML group link management, user search, and admin-only user lifecycle actions (create/update/delete, block/ban/moderation, identity removal). The GitLab block gains operation-specific UI (resource type/id, named access-level dropdowns with careful defaults so expiry-only edits do not reset roles), plus param coercion and validation in params mapping. Vitest coverage exercises URLs, bodies, and edge cases such as add-member 409 “already a member” as a soft success.

Existing DevOps actions are aligned with GitLab API behavior: internal notes on comments, pipeline inputs/variables and expanded status filters, MR draft via title prefix, tri-state MR updates, file/commit options, compare cross-fork/unidiff, truncation flags on large file content and job logs, and clearer projectId path docs. English integration docs (gitlab.mdx) document the new actions and updated parameters/outputs.

^{Reviewed by Cursor Bugbot for commit 6249394. Configure here.}

greptile-apps · 2026-07-16T17:36:17Z

Greptile Summary

This PR expands the GitLab integration with access and user administration tools. The main changes are:

Project and group membership, invitation, and access-request operations.
SAML group-link management with provider-aware deletion.
Instance user creation, updates, moderation, and deletion.
Updated block wiring, registry entries, documentation, types, and tests.

Confidence Score: 5/5

This looks safe to merge.

Explicit expiration clearing now reaches the GitLab request body.
User creation validates that a provisioning method is selected.
SAML deletion forwards the provider when supplied and fails safely when an ambiguous provider is omitted.
No blocking issues were found in the updated code.

Important Files Changed

Filename	Overview
apps/sim/blocks/blocks/gitlab.ts	Adds block fields, validation, and parameter mapping for the new GitLab operations.
apps/sim/tools/gitlab/update_member.ts	Preserves explicit empty expiration values so existing membership expiration dates can be cleared.
apps/sim/tools/gitlab/update_invitation.ts	Supports updating or explicitly clearing invitation expiration dates.
apps/sim/tools/gitlab/create_user.ts	Adds GitLab instance-user creation with password, reset-link, and random-password options.
apps/sim/tools/gitlab/delete_saml_group_link.ts	Adds provider-aware SAML group-link deletion through the documented query parameter.

_{Reviews (4): Last reviewed commit: "fix(gitlab): tri-state controls for upda..." | Re-trigger Greptile}

- MR draft flag now applied via Draft: title prefix (GitLab has no draft body param) - update_user only sends admin when a real boolean (untouched switch serialized null and could demote admins) - add_member 409 soft-success now verified against the conflict body - auto_merge sent alongside deprecated merge_when_pipeline_succeeds - job log capped at 200k chars, file content at 1M chars, with truncated outputs - MR diffs signal hasMore beyond 100 files - wire dropped params: update_issue milestoneId, MR milestone/squash/removeSourceBranch, pipelines ref, tree ref, branches search, commits since/until/path/author, update_file lastCommitId, jobs includeRetried, create_user forceRandomPassword - complete pipeline/job status enums, access-level enums, widen stale type unions - guards: update_invitation requires a change; create_user requires a password strategy - fix double-encoding trap in path descriptions; doc-accuracy touch-ups

…pdate member, expiration clearing via explicit empty string

waleedlatif1 · 2026-07-16T17:50:49Z

@greptile

waleedlatif1 · 2026-07-16T17:50:51Z

@cursor review

…ation

waleedlatif1 · 2026-07-16T17:57:37Z

@greptile

waleedlatif1 · 2026-07-16T17:57:38Z

@cursor review

cursor

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 8fb2dec. Configure here.}

- membership: add-by-username, remove-member cleanup flags, list-member filters (user_ids/state/seat info), invite_source - listings: search/visibility/owned/membership, assignee/milestone filters, source/target branch filters, per-domain order-by + sort direction - CI: pipeline variables + spec:inputs, manual-job variables - repo: commit authoring (start branch, author, execute flag), release tag message + asset links, cross-fork compare + unidiff, internal notes - catalog: access-governance template + member-provisioning and access-request-audit skills - hardening from 3-agent validation: declared release params, tolerate single-object asset links, NaN guard on assignee filter, null/scalar JSON rejection

waleedlatif1 · 2026-07-16T18:40:38Z

@greptile

waleedlatif1 · 2026-07-16T18:40:39Z

@cursor review

…ag, MR squash/remove-source-branch)

waleedlatif1 · 2026-07-16T18:47:23Z

@greptile

waleedlatif1 · 2026-07-16T18:47:24Z

@cursor review

cursor

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 6249394. Configure here.}

mzxchandra and others added 8 commits July 16, 2026 01:51

test(gitlab): cover access operations

933f4d2

Covers the access_level enum-to-integer coercion, the /members/all default vs direct-only, the 409-duplicate-add soft success, invitation per-email error handling, user-status-action response parsing, and getGitLabResourcePath.

docs(gitlab): document access and membership operations

5907a44

Update apps/sim/blocks/blocks/gitlab.ts

a19b09f

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

fix(gitlab): validation pass — SAML provider param, member/invitation…

c70a497

… query filter, moderation user guard, registry order

cursor Bot reviewed Jul 16, 2026

View reviewed changes

Comment thread apps/sim/blocks/blocks/gitlab.ts

greptile-apps Bot reviewed Jul 16, 2026

View reviewed changes

Comment thread apps/sim/tools/gitlab/update_member.ts Outdated

Comment thread apps/sim/blocks/blocks/gitlab.ts

Comment thread apps/sim/blocks/blocks/gitlab.ts

vercel Bot deployed to Preview July 16, 2026 17:37 View deployment

waleedlatif1 mentioned this pull request Jul 16, 2026

feat(gitlab): add access, membership, and user-admin operations #5707

Closed

6 tasks

waleedlatif1 added 2 commits July 16, 2026 10:47

fix(gitlab): review round 1 — dedicated no-default access level for u…

3a764a7

…pdate member, expiration clearing via explicit empty string

cursor Bot reviewed Jul 16, 2026

View reviewed changes

Comment thread apps/sim/blocks/blocks/gitlab.ts Outdated

Comment thread apps/sim/blocks/blocks/gitlab.ts Outdated

vercel Bot deployed to Preview July 16, 2026 17:56 View deployment

fix(gitlab): explicit Clear Expiration toggle for update member/invit…

8fb2dec

…ation

vercel Bot temporarily deployed to Preview July 16, 2026 17:57 Inactive

cursor Bot reviewed Jul 16, 2026

View reviewed changes

Comment thread apps/sim/blocks/blocks/gitlab.ts Outdated

Comment thread apps/sim/blocks/blocks/gitlab.ts Outdated

fix(gitlab): tri-state controls for update-op booleans (executable fl…

6249394

…ag, MR squash/remove-source-branch)

vercel Bot temporarily deployed to Preview July 16, 2026 18:47 Inactive

cursor Bot reviewed Jul 16, 2026

View reviewed changes

waleedlatif1 merged commit 8adeaab into staging Jul 16, 2026
20 checks passed

waleedlatif1 deleted the gitlab-access-user-admin branch July 16, 2026 19:00

waleedlatif1 mentioned this pull request Jul 16, 2026

v0.7.38: mothership improvements, clickup, rocketlane integrations, gitlab tools, deployment state machine #5712

Open

mzxchandra mentioned this pull request Jul 17, 2026

feat(gitlab): dynamic access levels + group and membership operations #5726

Open

Uh oh!

Conversation

waleedlatif1 commented Jul 16, 2026

Summary

Type of Change

Testing

Checklist

Uh oh!

vercel Bot commented Jul 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cursor Bot commented Jul 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Summary

Uh oh!

Uh oh!

greptile-apps Bot commented Jul 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 5/5

Important Files Changed

Uh oh!

Uh oh!

Uh oh!

Uh oh!

waleedlatif1 commented Jul 16, 2026

Uh oh!

waleedlatif1 commented Jul 16, 2026

Uh oh!

Uh oh!

Uh oh!

waleedlatif1 commented Jul 16, 2026

Uh oh!

waleedlatif1 commented Jul 16, 2026

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

waleedlatif1 commented Jul 16, 2026

Uh oh!

waleedlatif1 commented Jul 16, 2026

Uh oh!

Uh oh!

Uh oh!

waleedlatif1 commented Jul 16, 2026

Uh oh!

waleedlatif1 commented Jul 16, 2026

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vercel Bot commented Jul 16, 2026 •

edited

Loading

cursor Bot commented Jul 16, 2026 •

edited

Loading

greptile-apps Bot commented Jul 16, 2026 •

edited

Loading