René's URL Explorer Experiment

Title: feat(gitlab): add access, membership, and user-admin operations by mzxchandra · Pull Request #5707 · simstudioai/sim · GitHub

Open Graph Title: feat(gitlab): add access, membership, and user-admin operations by mzxchandra · Pull Request #5707 · simstudioai/sim

X Title: feat(gitlab): add access, membership, and user-admin operations by mzxchandra · Pull Request #5707 · simstudioai/sim

Description: Summary Adds access / membership / user-administration operations to the existing GitLab block so teams can build native access-provisioning workflows (IT help-desk auto-provisioning) without dropping to a raw API block and hand-rolling auth. This extends the block rather than splitting it — the admin boundary is handled by the existing per-operation access-control feature, not a second block. New operations (27 tools): Members: list (/members/all by default, direct-only opt-in), add, update access level, remove Invitations: invite by email, list, update, revoke Access requests: list, approve (with access level), deny SAML group links: list (group-scoped), add, delete Users: search (resolve email → user id), and admin ops — create, update, delete, block/unblock, deactivate/activate, ban/unban, approve/reject signup, delete auth identity All resource-scoped ops work against projects or groups via a Resource Type selector. Every tool reuses the existing getGitLabApiBase() host resolution + SSRF guard, and a new shared getGitLabResourcePath() helper. Design details: access_level is a named dropdown (Guest…Owner, full official enum) that serializes to the GitLab integer — no free-text integer guessing on a permissions call. expires_at is a first-class field so time-boxed grants are the default. Read defaults to /members/all (includes inherited members) to avoid false "no access" answers, with a direct-only opt-in. A duplicate-member add (409) is treated as a soft success so provisioning workflows are re-runnable. Configurable self-managed base URL (reuses the existing host param + SSRF guard). member_role_id passthrough for Ultimate custom roles. list_saml_group_links ships in the first cut so a workflow can detect SAML-governed groups before choosing an IdP-side vs GitLab-native member add. Type of Change New feature Testing Unit tests (Vitest) cover the risk-bearing paths flagged in the design: access_level enum→integer coercion, /members/all default vs direct-only, the 409-duplicate-add soft success, invitation per-email error handling, user-status-action response parsing, and getGitLabResourcePath. Full GitLab tool/block suite plus the registry-consistency tests (tools/index.test.ts, blocks/blocks.test.ts) pass: 202 tests green. tsc --noEmit and Biome are clean. Reviewers should focus on: the config.params coercions in blocks/blocks/gitlab.ts (enum→int, id coercion happens at execution, never in config.tool), and the 409 handling in tools/gitlab/add_member.ts. Not covered by automated tests: live end-to-end against a real GitLab instance (needs a sandbox + PAT; admin ops need an admin_mode token) — recommended as a manual smoke test before relying on the admin operations. Checklist Code follows project style guidelines Self-reviewed my changes Tests added/updated and passing No new warnings introduced I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

Open Graph Description: Summary Adds access / membership / user-administration operations to the existing GitLab block so teams can build native access-provisioning workflows (IT help-desk auto-provisioning) without dropp...

X Description: Summary Adds access / membership / user-administration operations to the existing GitLab block so teams can build native access-provisioning workflows (IT help-desk auto-provisioning) without dropp...

Opengraph URL: https://github.com/simstudioai/sim/pull/5707

X: @github

direct link

Domain: github.com

Links:

Viewport: width=device-width