kandev/docs/plans/entity-reference-composer/task-05-gitlab-provider.md

id, title, status, wave, depends_on, plan, spec

id	title	status	wave	depends_on	plan	spec
05-gitlab-provider	GitLab mention provider	completed	2	01-core-and-task-search	plan.md	../../specs/ui/requirements/entity-reference-composer.md

Task 05: GitLab Mention Provider

Acceptance

• Issue and MR adapters use immutable object ID plus host scope and keep human IID/project details for display.
• Safe service methods construct title-search parameters without accepting raw GitLab filters.
• Search validates workspace-owned config/scope and never leaks install-wide results across workspaces.
• Provider authorizers fail closed unless the result host/project is proven to belong to the active workspace.

Verification

cd apps/backend && go test ./internal/gitlab/... ./internal/mentions/...

Files likely touched

• apps/backend/internal/gitlab/service_mentions.go
• apps/backend/internal/gitlab/service_mentions_test.go
• apps/backend/internal/gitlab/store.go
• apps/backend/internal/mentions/provider_gitlab.go
• apps/backend/internal/mentions/provider_gitlab_test.go

Dependencies

Task 01.

Inputs

ADR 0030; GitLab SearchUserIssuesPaged/SearchUserMRsPaged; existing stable ID, IID, ProjectID, and host models.

Output contract

Report workspace enforcement/query safety, files changed, exact tests, blockers, risks, and mark task/plan done.