@dev-loops/core 1.0.2-pre.0 → 1.0.2

package/src/loop/steering.mjs

@@ -1,24 +1,10 @@
 /**
  * Deterministic mid-flight operator steering contract for active dev loops.
  *
- * This module provides:
- * - STEERING_KIND: stable steering kind constants
- * - STEERING_RESULT: acknowledgement/result constants
- * - SAFE_POINT_CATEGORY: safe-point classification constants
- * - normalizeSteeringEvent: validate and canonicalize a raw steering event
- * - normalizeSteeringState: load and validate persisted steering state
- * - createSteeringState: create a fresh steering state for a new run
- * - classifySafePoint: map a copilot loop state to a safe-point category
- * - submitSteering: process a steering event against current run state
- * - promoteQueuedSteering: apply queued steering when the loop reaches a safe point
- * - getEffectiveConstraints: get the current effective steering constraints
- * - resolveEffectiveLoopState: get loop interpretation augmented with active steering
- * - getSteeringStatus: get full inspection output for a run's steering state
- *
  * The proving target for this first implementation slice is the async Copilot
- * review/fix loop (copilot-loop-state.mjs). Safe-point rules are defined for
- * that loop's state set and the resolveEffectiveLoopState integration changes
- * loop behavior when stop_at_next_safe_gate steering is active.
+ * review/fix loop (copilot-loop-state.mjs): safe-point rules are defined for
+ * that loop's state set, and resolveEffectiveLoopState changes loop behavior
+ * when stop_at_next_safe_gate steering is active.
  */
 
 import { normalizeRepoSlug } from "../github/repo-slug.mjs";
@@ -74,46 +60,30 @@ const VALID_APPLY_MODES = new Set(["immediate", "next_safe_point"]);
 // ---------------------------------------------------------------------------
 
 /**
- * Map a copilot loop state to a safe-point category.
- *
- * Safe-point rules for the async Copilot review/fix loop:
- *
- * IMMEDIATE — between steps / idle / waiting on external state.
- *   Steering can be applied right now without risk of splitting a mutation.
- *   States: pr_ready_no_feedback, waiting_for_copilot_review,
- *           waiting_for_ci, ready_to_rerequest_review
- *
- * NEXT_POINT — actively computing or in a non-interruptible mutation.
- *   Applying steering now could produce a half-applied or inconsistent state.
- *   Queue the event and promote it when the loop next reaches an IMMEDIATE state.
- *   States: pr_draft, unresolved_feedback_present, already_fixed_needs_reply_resolve
- *
- * TERMINAL — run is done, irreversibly failed, or has no active run.
- *   Steering is rejected; it would have no effect or could mask a real error.
- *   States: no_pr, done, review_request_unavailable, blocked_needs_user_decision
+ * Map a copilot loop state to a safe-point category (async Copilot
+ * review/fix loop): IMMEDIATE states can apply steering right now; NEXT_POINT
+ * states are mid-mutation and queue the event for the next IMMEDIATE state;
+ * TERMINAL states reject steering (no active/recoverable run).
  *
  * @param {string} loopState - a copilot loop STATE value
  * @returns {"immediate"|"next_point"|"terminal"}
  */
 export function classifySafePoint(loopState) {
   switch (loopState) {
-    // Between steps / idle
+    // Idle / waiting on external state.
     case STATE.PR_READY_NO_FEEDBACK:
     case STATE.READY_TO_REREQUEST_REVIEW:
-    // Waiting on external state
     case STATE.WAITING_FOR_COPILOT_REVIEW:
     case STATE.WAITING_FOR_CI:
       return SAFE_POINT_CATEGORY.IMMEDIATE;
 
-    // In a pre-ready state (not yet at a mutation gate)
+    // Actively computing / non-interruptible mutation.
     case STATE.PR_DRAFT:
-    // Actively computing — about to apply fixes to resolve feedback
     case STATE.UNRESOLVED_FEEDBACK_PRESENT:
-    // In the middle of a non-interruptible mutation (reply/resolve review threads)
     case STATE.ALREADY_FIXED_NEEDS_REPLY_RESOLVE:
       return SAFE_POINT_CATEGORY.NEXT_POINT;
 
-    // Terminal states: run is done, error, or has no active run
+    // Terminal: run done, errored, or no active run.
     case STATE.NO_PR:
     case STATE.DONE:
     case STATE.REVIEW_REQUEST_UNAVAILABLE:
@@ -418,20 +388,9 @@ function hasStopAtNextSafeGate(events) {
 
 /**
  * Process a steering event against current run state and produce an
- * acknowledgement/result plus updated steering state.
- *
- * This is the main entry point for operators submitting mid-flight corrections.
- *
- * Result semantics:
- * - applied_now: event is immediately effective; effectiveStack is updated.
- * - queued_for_safe_point: loop is in a non-safe state; event is queued and
- *   will be promoted by promoteQueuedSteering when the loop reaches a safe point.
- * - rejected_unsafe_now: terminal loop state (done/unavailable/no_pr); steering
- *   would have no effect or could mask a real issue.
- * - rejected_invalid_or_conflicting: event is malformed, has an out-of-order seq,
- *   or exactly duplicates an existing hard_constraint.
- * - needs_human_decision: loop is in blocked_needs_user_decision; human must act
- *   before automated steering can be safely applied.
+ * acknowledgement/result plus updated steering state. Main entry point for
+ * operators submitting mid-flight corrections; see {@link STEERING_RESULT}
+ * for the possible outcomes.
  *
  * @param {object} event - normalized steering event (from normalizeSteeringEvent)
  * @param {object} steeringState - current steering state (from normalizeSteeringState)
@@ -719,7 +678,7 @@ export function getEffectiveConstraints(steeringState) {
  * @param {object} snapshot - raw or normalized loop snapshot
  * @param {object} steeringState - current steering state for this run
  * @param {object} [refinementConfig] - interpreter refinement config; pass a config-derived
- *   `resolveRefinement(config)` so the base interpretation honors gates.preApproval.requireCi:false (#1337).
+ *   `resolveRefinement(config)` so the base interpretation honors gates.preApproval.requireCi:false.
  * @returns {{ state: string, allowedTransitions: string[], nextAction: string, steeringApplied: boolean, pendingStopAtNextSafeGate: boolean, terminalStopAtNextSafeGate: boolean, effectiveConstraints: object }}
  */
 export function resolveEffectiveLoopState(snapshot, steeringState, refinementConfig) {
@@ -760,19 +719,8 @@ export function resolveEffectiveLoopState(snapshot, steeringState, refinementCon
 // ---------------------------------------------------------------------------
 
 /**
- * Get full inspection output for a run's steering state.
- *
- * Returns:
- * - runId: the target run
- * - schemaVersion: for migration awareness
- * - eventCount: total events submitted
- * - queuedCount: events waiting for the next safe point
- * - effectiveStackCount: events currently in effect
- * - effectiveConstraints: structured view over the effective stack
- * - latestResult: most recent acknowledgement/result
- * - resultHistory: all historical acknowledgements
- * - history: all submitted events
- * - nextSeq: next expected sequence number
+ * Get full inspection output for a run's steering state (event counts,
+ * effective constraints, result history, and next expected seq).
  *
  * @param {object} steeringState
  * @returns {object}

package/src/loop/worktree-guard.mjs

@@ -35,12 +35,13 @@ export function isUnderWorktreePath(cwd) {
  * @returns {string | null} The main worktree path, or null if it cannot be parsed.
  */
 export function parseMainWorktreePath(worktreeListOutput) {
-  const firstLine = worktreeListOutput.split("\n")[0].trim();
-  if (!firstLine) return null;
-  // Find the first hex SHA (7+ chars) preceded by whitespace; take everything before it as the path.
-  const shaIdx = firstLine.search(/\s[0-9a-f]{7,64}\b/iu);
-  if (shaIdx === -1) return null;
-  return firstLine.slice(0, shaIdx).trim();
+  // The main worktree is the FIRST parseable entry — derived from the same
+  // parser `parseAllWorktreePaths` uses, so the two can never disagree about
+  // which path is the main checkout. Parsing only the raw first line would
+  // return null on a leading blank/SHA-less line while `parseAllWorktreePaths`
+  // still parses the real main line, nulling the main-checkout guard while the
+  // path stays admittable (the leading-blank-line fail-open).
+  return parseAllWorktreePaths(worktreeListOutput)[0] ?? null;
 }
 
 /**
@@ -115,10 +116,15 @@ export function isListedWorktree(cwd, worktreePaths) {
 /**
  * Resolve the root of the listed git worktree that contains `cwd`.
  *
- * Mirrors `isListedWorktree`'s matching (realpath-resolved, tmp/worktrees/-scoped,
- * exact-or-subdirectory) but returns the worktree ROOT instead of a boolean, so
- * callers can address files relative to the worktree's own subtree (`packages/`,
- * `node_modules/`) rather than the possibly-nested `cwd`.
+ * Returns the worktree ROOT (realpath-resolved, exact-or-subdirectory match)
+ * instead of a boolean, so callers can address files relative to the worktree's
+ * own subtree (`packages/`, `node_modules/`) rather than the possibly-nested
+ * `cwd`. Matches ANY listed worktree — not just `tmp/worktrees/`-scoped ones —
+ * so the core-isolation invariant is evaluable for a sibling/linked checkout
+ * that lives outside `tmp/worktrees/`; the caller decides admit/reject.
+ * When `cwd` sits under nested worktrees (a `tmp/worktrees/` child inside its
+ * parent checkout), the LONGEST matching root wins, so the innermost worktree's
+ * own subtree is addressed regardless of `git worktree list` order.
  *
  * @param {string} cwd - Absolute or relative path inside the worktree.
  * @param {string[]} worktreePaths - Array of paths from `parseAllWorktreePaths`.
@@ -128,16 +134,16 @@ export function resolveContainingWorktreeRoot(cwd, worktreePaths) {
   let resolvedCwd;
   try { resolvedCwd = realpathSync(cwd); } catch { resolvedCwd = cwd; }
   const normalizedCwd = resolvedCwd.replace(/\\/g, "/").replace(/\/+$/u, "");
+  let best = null;
   for (const p of worktreePaths) {
     let resolvedP;
     try { resolvedP = realpathSync(p); } catch { resolvedP = p; }
     const normalizedP = resolvedP.replace(/\\/g, "/").replace(/\/+$/u, "");
-    if (!isUnderWorktreePath(normalizedP)) continue;
     if (normalizedCwd === normalizedP || normalizedCwd.startsWith(normalizedP + "/")) {
-      return normalizedP;
+      if (best === null || normalizedP.length > best.length) best = normalizedP;
     }
   }
-  return null;
+  return best;
 }
 
 /**
@@ -191,6 +197,67 @@ export function isWorktreeCoreIsolated(cwd, worktreePaths) {
   return linkReal === coreReal;
 }
 
+/**
+ * Shared admit/reject decision for local-implementation worktree isolation.
+ *
+ * The single source of truth both enforcement sites route through
+ * (`pre-flight-gate.mjs` `checkWorktreeIsolation` and
+ * `resolve-dev-loop-startup.mjs`'s `local_implementation` block), so they
+ * cannot diverge. Each caller maps the returned `error`/`detail` to its own
+ * guidance/reason wording; this function owns only the decision.
+ *
+ * `tmp/worktrees/` stays the default and recommended location, but it is not
+ * the invariant. The real invariant is core isolation: a checkout's
+ * `node_modules/@dev-loops/core` resolves to its OWN `packages/core`.
+ * A checkout OUTSIDE `tmp/worktrees/` that is not the main checkout and
+ * satisfies that invariant is admitted rather than rejected on path prefix
+ * alone; one that does not satisfy it (its core link escapes its own
+ * `packages/core`) fails closed.
+ *
+ * Decision order:
+ *  - outside `tmp/worktrees/` + main checkout  -> reject `main_checkout_detected`
+ *  - outside `tmp/worktrees/` + unresolvable worktree root -> reject `not_in_worktree` (fail closed, no vacuous admit)
+ *  - outside `tmp/worktrees/` + core-isolated  -> ADMIT (verified-isolation)
+ *  - outside `tmp/worktrees/` + not isolated   -> reject `not_in_worktree`
+ *  - under `tmp/worktrees/` + not a real worktree -> reject `not_in_worktree`
+ *  - under `tmp/worktrees/` + core link escapes -> reject `core_link_escapes`
+ *  - otherwise -> ADMIT
+ *
+ * @param {object} params
+ * @param {string} params.cwd - Current working directory (absolute or relative).
+ * @param {string | null} params.mainWorktreePath - From `parseMainWorktreePath`.
+ * @param {string[]} params.allWorktreePaths - From `parseAllWorktreePaths`.
+ * @returns {{ ok: true } | { ok: false, error: string, detail: string }}
+ */
+export function classifyWorktreeIsolation({ cwd, mainWorktreePath, allWorktreePaths }) {
+  if (!isUnderWorktreePath(cwd)) {
+    if (mainWorktreePath !== null && isMainCheckout(cwd, mainWorktreePath)) {
+      return { ok: false, error: "main_checkout_detected", detail: "main_checkout" };
+    }
+    // Outside tmp/worktrees and not the main checkout: assert the REAL
+    // core-isolation invariant instead of rejecting on path prefix alone.
+    // The invariant is only meaningful for a checkout that resolves to a real
+    // listed git worktree root; when the root cannot be resolved (an unlisted
+    // checkout, or an empty/unparseable `git worktree list` — which also nulls
+    // mainWorktreePath and skips the main-checkout guard above) the core-isolation
+    // check would vacuously return true, so fail closed rather than admit.
+    if (resolveContainingWorktreeRoot(cwd, allWorktreePaths) === null) {
+      return { ok: false, error: "not_in_worktree", detail: "outside_not_isolated" };
+    }
+    if (isWorktreeCoreIsolated(cwd, allWorktreePaths)) {
+      return { ok: true };
+    }
+    return { ok: false, error: "not_in_worktree", detail: "outside_not_isolated" };
+  }
+  if (!isListedWorktree(cwd, allWorktreePaths)) {
+    return { ok: false, error: "not_in_worktree", detail: "fake_worktree" };
+  }
+  if (!isWorktreeCoreIsolated(cwd, allWorktreePaths)) {
+    return { ok: false, error: "core_link_escapes", detail: "core_escapes" };
+  }
+  return { ok: true };
+}
+
 
 /**
  * Realpath-normalize a path that MAY NOT EXIST yet.

package/src/projects/list-queue-items.mjs

@@ -1,77 +1,14 @@
 import { runChild as _runChild } from "../cli/primitives.mjs";
 import { resolveProjectSelector, findProject } from "./resolve-project.mjs";
-import { ghGraphql, resolveOwner } from "../github/gh.mjs";
+import { resolveOwner } from "../github/gh.mjs";
+import { validateProjectsRepo, discoverProjects, listProjectFields, paginateNodes, extractStatus } from "./projects-access.mjs";
 
 // ── Validation ───────────────────────────────────────────────────────────
 
-const OWNER_RE = /^[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?$/;
-const REPO_NAME_RE = /^[a-zA-Z0-9](?:[a-zA-Z0-9_.-]*[a-zA-Z0-9])?$/;
-
-function validateRepo(repo) {
-  if (!repo || typeof repo !== "string") {
-    throw Object.assign(new Error("--repo is required"), { code: "INVALID_REPO" });
-  }
-  const trimmed = repo.trim();
-  if (trimmed !== repo) {
-    throw Object.assign(
-      new Error(`--repo must not have leading/trailing whitespace, got "${repo}"`),
-      { code: "INVALID_REPO" },
-    );
-  }
-  const slashIdx = repo.indexOf("/");
-  if (slashIdx === -1) {
-    throw Object.assign(new Error(`--repo must be exactly owner/name, got "${repo}"`), { code: "INVALID_REPO" });
-  }
-  const owner = repo.slice(0, slashIdx);
-  const name = repo.slice(slashIdx + 1);
-  if (!owner || !name || !OWNER_RE.test(owner) || !REPO_NAME_RE.test(name)) {
-    throw Object.assign(new Error(`--repo must be exactly owner/name, got "${repo}"`), { code: "INVALID_REPO" });
-  }
-  return repo;
-}
+const validateRepo = validateProjectsRepo;
 
 // ── GraphQL fragments ────────────────────────────────────────────────────
 
-const LIST_USER_PROJECTS = [
-  "query($login:String!, $after:String) {",
-  "  user(login:$login) {",
-  "    projectsV2(first:50, after:$after) {",
-  "      pageInfo { hasNextPage endCursor }",
-  "      nodes { id number title url }",
-  "    }",
-  "  }",
-  "}"
-].join("\n");
-
-const LIST_ORG_PROJECTS = [
-  "query($login:String!, $after:String) {",
-  "  organization(login:$login) {",
-  "    projectsV2(first:50, after:$after) {",
-  "      pageInfo { hasNextPage endCursor }",
-  "      nodes { id number title url }",
-  "    }",
-  "  }",
-  "}"
-].join("\n");
-
-const GET_PROJECT_FIELDS = [
-  "query($projectId:ID!, $after:String) {",
-  "  node(id:$projectId) {",
-  "    ... on ProjectV2 {",
-  "      fields(first:50, after:$after) {",
-  "        pageInfo { hasNextPage endCursor }",
-  "        nodes {",
-  "          ... on ProjectV2SingleSelectField {",
-  "            id name",
-  "            options { id name }",
-  "          }",
-  "        }",
-  "      }",
-  "    }",
-  "  }",
-  "}"
-].join("\n");
-
 const GET_PROJECT_ITEMS = [
   "query($projectId:ID!, $after:String) {",
   "  node(id:$projectId) {",
@@ -99,82 +36,22 @@ const GET_PROJECT_ITEMS = [
   "}"
 ].join("\n");
 
-// ── Paginated project listing ────────────────────────────────────────────
-
-async function listAllProjects(login, kind, env, runChild) {
-  const query = kind === "org" ? LIST_ORG_PROJECTS : LIST_USER_PROJECTS;
-  const projects = [];
-  let after = null;
-  while (true) {
-    const vars = { login };
-    if (after) vars.after = after;
-    const payload = await ghGraphql(query, vars, env, runChild);
-    const connection = kind === "org"
-      ? payload?.data?.organization?.projectsV2
-      : payload?.data?.user?.projectsV2;
-    const nodes = connection?.nodes ?? [];
-    projects.push(...nodes);
-    const pageInfo = connection?.pageInfo ?? {};
-    if (!pageInfo.hasNextPage) break;
-    if (!pageInfo.endCursor) {
-      throw Object.assign(
-        new Error("Invalid projects list payload: hasNextPage is true but endCursor is missing"),
-        { code: "GH_API_ERROR" },
-      );
-    }
-    after = pageInfo.endCursor;
-  }
-  return projects;
-}
-
-// ── Paginated field listing ──────────────────────────────────────────────
+// ── Paginated project + field listing (shared via projects-access) ────────
 
-async function listAllFields(projectId, env, runChild) {
-  const fields = [];
-  let after = null;
-  while (true) {
-    const vars = { projectId };
-    if (after) vars.after = after;
-    const payload = await ghGraphql(GET_PROJECT_FIELDS, vars, env, runChild);
-    const connection = payload?.data?.node?.fields;
-    const nodes = connection?.nodes ?? [];
-    fields.push(...nodes);
-    const pageInfo = connection?.pageInfo ?? {};
-    if (!pageInfo.hasNextPage) break;
-    if (!pageInfo.endCursor) {
-      throw Object.assign(
-        new Error("Invalid fields payload: hasNextPage is true but endCursor is missing"),
-        { code: "GH_API_ERROR" },
-      );
-    }
-    after = pageInfo.endCursor;
-  }
-  return fields;
-}
+const listAllProjects = discoverProjects;
+const listAllFields = listProjectFields;
 
 // ── Paginated item listing ───────────────────────────────────────────────
 
-async function listAllItems(projectId, env, runChild) {
-  const items = [];
-  let after = null;
-  while (true) {
-    const vars = { projectId };
-    if (after) vars.after = after;
-    const payload = await ghGraphql(GET_PROJECT_ITEMS, vars, env, runChild);
-    const connection = payload?.data?.node?.items;
-    const nodes = connection?.nodes ?? [];
-    items.push(...nodes);
-    const pageInfo = connection?.pageInfo ?? {};
-    if (!pageInfo.hasNextPage) break;
-    if (!pageInfo.endCursor) {
-      throw Object.assign(
-        new Error("Invalid items payload: hasNextPage is true but endCursor is missing"),
-        { code: "GH_API_ERROR" },
-      );
-    }
-    after = pageInfo.endCursor;
-  }
-  return items;
+function listAllItems(projectId, env, runChild) {
+  return paginateNodes({
+    query: GET_PROJECT_ITEMS,
+    variables: { projectId },
+    selectConnection: (payload) => payload?.data?.node?.items,
+    env,
+    runChild,
+    entity: "items",
+  });
 }
 
 // ── Exit code classification ────────────────────────────────────────────
@@ -260,14 +137,7 @@ async function main(args, { env = process.env, runChild } = {}) {
     if (!content) continue;
 
     // Determine status from field values
-    let status = null;
-    const fieldValues = item.fieldValues?.nodes ?? [];
-    for (const fv of fieldValues) {
-      if (fv && fv.field && fv.field.name === "Status") {
-        status = fv.name;
-        break;
-      }
-    }
+    const status = extractStatus(item);
 
     // Filter by column
     if (args.column && status !== args.column) continue;

package/src/projects/move-queue-item.mjs

@@ -3,74 +3,14 @@ import { runPickupRefinementGate } from "../loop/issue-refinement-artifact.mjs";
 import { loadStateColumnMap, LOGICAL_COLUMN } from "../loop/queue-board-sync.mjs";
 import { resolveProjectSelector, findProject, parseItemRef } from "./resolve-project.mjs";
 import { ghGraphql, resolveOwner } from "../github/gh.mjs";
+import { validateProjectsRepo, discoverProjects, listProjectFields, paginateNodes, extractStatus } from "./projects-access.mjs";
 
 // ── Validation ───────────────────────────────────────────────────────────
 
-const OWNER_RE = /^[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?$/;
-const REPO_NAME_RE = /^[a-zA-Z0-9](?:[a-zA-Z0-9_.-]*[a-zA-Z0-9])?$/;
-
-function validateRepo(repo) {
-  if (!repo || typeof repo !== "string") {
-    throw Object.assign(new Error("--repo is required"), { code: "INVALID_REPO" });
-  }
-  const trimmed = repo.trim();
-  if (trimmed !== repo) {
-    throw Object.assign(new Error(`--repo must not have leading/trailing whitespace, got "${repo}"`), { code: "INVALID_REPO" });
-  }
-  const slashIdx = repo.indexOf("/");
-  if (slashIdx === -1) {
-    throw Object.assign(new Error(`--repo must be exactly owner/name, got "${repo}"`), { code: "INVALID_REPO" });
-  }
-  const owner = repo.slice(0, slashIdx);
-  const name = repo.slice(slashIdx + 1);
-  if (!owner || !name || !OWNER_RE.test(owner) || !REPO_NAME_RE.test(name)) {
-    throw Object.assign(new Error(`--repo must be exactly owner/name, got "${repo}"`), { code: "INVALID_REPO" });
-  }
-  return repo;
-}
+const validateRepo = validateProjectsRepo;
 
 // ── GraphQL fragments ────────────────────────────────────────────────────
 
-const LIST_USER_PROJECTS = [
-  "query($login:String!, $after:String) {",
-  "  user(login:$login) {",
-  "    projectsV2(first:50, after:$after) {",
-  "      pageInfo { hasNextPage endCursor }",
-  "      nodes { id number title url }",
-  "    }",
-  "  }",
-  "}"
-].join("\n");
-
-const LIST_ORG_PROJECTS = [
-  "query($login:String!, $after:String) {",
-  "  organization(login:$login) {",
-  "    projectsV2(first:50, after:$after) {",
-  "      pageInfo { hasNextPage endCursor }",
-  "      nodes { id number title url }",
-  "    }",
-  "  }",
-  "}"
-].join("\n");
-
-const GET_PROJECT_FIELDS = [
-  "query($projectId:ID!, $after:String) {",
-  "  node(id:$projectId) {",
-  "    ... on ProjectV2 {",
-  "      fields(first:50, after:$after) {",
-  "        pageInfo { hasNextPage endCursor }",
-  "        nodes {",
-  "          ... on ProjectV2SingleSelectField {",
-  "            id name",
-  "            options { id name }",
-  "          }",
-  "        }",
-  "      }",
-  "    }",
-  "  }",
-  "}"
-].join("\n");
-
 const GET_PROJECT_ITEMS_BY_CONTENT = [
   "query($projectId:ID!, $after:String) {",
   "  node(id:$projectId) {",
@@ -108,91 +48,25 @@ const UPDATE_ITEM_FIELD = [
   "}"
 ].join("\n");
 
-// ── Paginated project listing ────────────────────────────────────────────
-
-async function listAllProjects(login, kind, env, runChild) {
-  const query = kind === "org" ? LIST_ORG_PROJECTS : LIST_USER_PROJECTS;
-  const projects = [];
-  let after = null;
-  while (true) {
-    const vars = { login };
-    if (after) vars.after = after;
-    const payload = await ghGraphql(query, vars, env, runChild);
-    const connection = kind === "org"
-      ? payload?.data?.organization?.projectsV2
-      : payload?.data?.user?.projectsV2;
-    const nodes = connection?.nodes ?? [];
-    projects.push(...nodes);
-    const pageInfo = connection?.pageInfo ?? {};
-    if (!pageInfo.hasNextPage) break;
-    if (!pageInfo.endCursor) {
-      throw Object.assign(
-        new Error("Invalid projects list payload: hasNextPage is true but endCursor is missing"),
-        { code: "GH_API_ERROR" },
-      );
-    }
-    after = pageInfo.endCursor;
-  }
-  return projects;
-}
+// ── Paginated project + field listing (shared via projects-access) ────────
 
-// ── Paginated field listing ──────────────────────────────────────────────
-
-async function listAllFields(projectId, env, runChild) {
-  const fields = [];
-  let after = null;
-  while (true) {
-    const vars = { projectId };
-    if (after) vars.after = after;
-    const payload = await ghGraphql(GET_PROJECT_FIELDS, vars, env, runChild);
-    const connection = payload?.data?.node?.fields;
-    const nodes = connection?.nodes ?? [];
-    fields.push(...nodes);
-    const pageInfo = connection?.pageInfo ?? {};
-    if (!pageInfo.hasNextPage) break;
-    if (!pageInfo.endCursor) {
-      throw Object.assign(
-        new Error("Invalid fields payload: hasNextPage is true but endCursor is missing"),
-        { code: "GH_API_ERROR" },
-      );
-    }
-    after = pageInfo.endCursor;
-  }
-  return fields;
-}
+const listAllProjects = discoverProjects;
+const listAllFields = listProjectFields;
 
 // ── Paginated item listing (position order) ──────────────────────────────
 
-async function fetchAllItems(projectId, env, runChild) {
-  const items = [];
-  let after = null;
-  while (true) {
-    const vars = { projectId };
-    if (after) vars.after = after;
-    const payload = await ghGraphql(GET_PROJECT_ITEMS_BY_CONTENT, vars, env, runChild);
-    const connection = payload?.data?.node?.items;
-    const nodes = connection?.nodes ?? [];
-    items.push(...nodes);
-    const pageInfo = connection?.pageInfo ?? {};
-    if (!pageInfo.hasNextPage) break;
-    if (!pageInfo.endCursor) {
-      throw Object.assign(
-        new Error("Invalid items payload: hasNextPage is true but endCursor is missing"),
-        { code: "GH_API_ERROR" },
-      );
-    }
-    after = pageInfo.endCursor;
-  }
-  return items;
+function fetchAllItems(projectId, env, runChild) {
+  return paginateNodes({
+    query: GET_PROJECT_ITEMS_BY_CONTENT,
+    variables: { projectId },
+    selectConnection: (payload) => payload?.data?.node?.items,
+    env,
+    runChild,
+    entity: "items",
+  });
 }
 
-function statusOf(node) {
-  const fvs = node?.fieldValues?.nodes ?? [];
-  for (const fv of fvs) {
-    if (fv && fv.field && fv.field.name === "Status") return fv.name;
-  }
-  return null;
-}
+const statusOf = extractStatus;
 
 // ── Exit code classification ────────────────────────────────────────────