@gitkraken/core-gitlens 0.20.2 → 0.22.0

package/dist/plus/integrations/authentication/observedAuthenticationProvider.js

@@ -0,0 +1,227 @@
+import { CancellationError } from "../../../utils/cancellation.js";
+import { getSessionIdentity } from "./models.js";
+import { areDomainsOnSameHost, hostFromDomain } from "../utils/domain.utils.js";
+//#region ../plus/integrations/src/authentication/observedAuthenticationProvider.ts
+function domainKey(domain) {
+	return hostFromDomain(domain) ?? domain;
+}
+function descriptorKey(domain, connectionId, cloud) {
+	return JSON.stringify([
+		domainKey(domain),
+		connectionId,
+		cloud
+	]);
+}
+function actualKey(domain, id, cloud) {
+	return JSON.stringify([
+		domainKey(domain),
+		id,
+		cloud
+	]);
+}
+var ObservedAuthenticationProvider = class {
+	host;
+	selfManaged;
+	publish;
+	observations = /* @__PURE__ */ new Map();
+	credentials = /* @__PURE__ */ new Map();
+	descriptorRetirements = /* @__PURE__ */ new Map();
+	actualRetirements = /* @__PURE__ */ new Map();
+	hostRetirements = /* @__PURE__ */ new Map();
+	activeRetirements = /* @__PURE__ */ new Set();
+	sequence = 0;
+	globalRetirement = 0;
+	disposed = false;
+	constructor(host, selfManaged, publish) {
+		this.host = host;
+		this.selfManaged = selfManaged;
+		this.publish = publish;
+	}
+	get onDidChange() {
+		return this.host.onDidChange;
+	}
+	async getSession(descriptor, options) {
+		if (this.disposed) return void 0;
+		const request = ++this.sequence;
+		const scope = JSON.stringify([
+			descriptor.connectionId,
+			domainKey(descriptor.domain),
+			descriptor.cloud,
+			descriptor.scopes
+		]);
+		const source = await this.host.getSession(descriptor, options);
+		if (source != null && this.selfManaged && !areDomainsOnSameHost(descriptor.domain, source.domain)) throw new CancellationError();
+		if (this.isRetired(request, descriptor, source)) throw new CancellationError();
+		const identity = getSessionIdentity(source);
+		const previous = this.observations.get(scope);
+		const sessionKey = source == null ? previous?.sessionKey ?? (descriptor.connectionId ? actualKey(descriptor.domain, descriptor.connectionId, descriptor.cloud ?? true) : void 0) : actualKey(source.domain || descriptor.domain, source.id, source.cloud);
+		const credential = sessionKey == null ? void 0 : this.credentials.get(sessionKey);
+		const latest = credential != null && (previous == null || credential.request > previous.request) ? credential : previous;
+		if (latest != null && latest.request > request && latest.identity !== identity) throw new CancellationError();
+		const session = source == null ? void 0 : {
+			id: source.id,
+			accessToken: source.accessToken,
+			account: source.account,
+			scopes: source.scopes,
+			cloud: source.cloud,
+			type: source.type,
+			expiresAt: source.expiresAt,
+			domain: source.domain,
+			baseUrl: source.baseUrl,
+			protocol: source.protocol,
+			appKey: source.appKey
+		};
+		if (latest == null || latest.request <= request) {
+			if (previous == null || previous.identity !== identity || credential?.identity !== identity) this.publish({
+				session,
+				previousSessionId: latest?.sessionId ?? descriptor.connectionId,
+				connectionId: descriptor.connectionId,
+				cloud: session != null ? session.cloud : latest?.cloud ?? descriptor.cloud,
+				replacePrimary: !descriptor.connectionId
+			}, [
+				descriptor.domain,
+				session?.domain,
+				previous?.actualDomain
+			]);
+			const observation = {
+				request,
+				identity,
+				descriptorDomain: descriptor.domain,
+				actualDomain: session?.domain || descriptor.domain,
+				cloud: session?.cloud ?? descriptor.cloud,
+				sessionKey,
+				sessionId: source?.id ?? latest?.sessionId ?? descriptor.connectionId,
+				connectionId: descriptor.connectionId
+			};
+			this.observations.set(scope, observation);
+			if (sessionKey != null) this.credentials.set(sessionKey, observation);
+		}
+		return session;
+	}
+	async deleteSession(descriptor, options) {
+		const retirement = this.retireConnection(descriptor);
+		this.activeRetirements.add(retirement);
+		try {
+			await this.host.deleteSession(descriptor, options);
+		} finally {
+			this.markRetirement(retirement);
+			this.activeRetirements.delete(retirement);
+		}
+	}
+	async deleteAllSessions(descriptor) {
+		const retirement = this.retireAll(this.selfManaged ? descriptor?.domain : void 0);
+		this.activeRetirements.add(retirement);
+		try {
+			await this.host.deleteAllSessions(descriptor);
+		} finally {
+			this.markRetirement(retirement);
+			this.activeRetirements.delete(retirement);
+		}
+	}
+	dispose() {
+		if (this.disposed) return;
+		this.disposed = true;
+		this.retireAll();
+		this.host.dispose();
+	}
+	isRetired(request, descriptor, session) {
+		if (this.disposed || request < this.globalRetirement) return true;
+		const host = domainKey(descriptor.domain);
+		const variants = /* @__PURE__ */ new Set([
+			void 0,
+			descriptor.cloud,
+			session?.cloud
+		]);
+		if (descriptor.cloud == null && session?.cloud == null) {
+			variants.add(true);
+			variants.add(false);
+		}
+		const descriptorIdentities = Array.from(variants, (cloud) => descriptorKey(descriptor.domain, descriptor.connectionId, cloud));
+		const actual = session == null ? void 0 : actualKey(session.domain || descriptor.domain, session.id, session.cloud);
+		const actualAnyVariant = session == null ? void 0 : actualKey(session.domain || descriptor.domain, session.id, void 0);
+		if (request < (this.hostRetirements.get(host) ?? 0) || descriptorIdentities.some((key) => request < (this.descriptorRetirements.get(key) ?? 0)) || actual != null && request < (this.actualRetirements.get(actual) ?? 0) || actualAnyVariant != null && request < (this.actualRetirements.get(actualAnyVariant) ?? 0)) return true;
+		for (const retirement of this.activeRetirements) if (retirement.all || retirement.host === host || descriptorIdentities.some((key) => retirement.descriptors.has(key)) || actual != null && retirement.actuals.has(actual) || actualAnyVariant != null && retirement.actuals.has(actualAnyVariant)) return true;
+		return false;
+	}
+	retireConnection(descriptor) {
+		const host = domainKey(descriptor.domain);
+		const matching = [...this.observations.values()].filter((o) => {
+			if (domainKey(o.descriptorDomain) !== host && domainKey(o.actualDomain) !== host) return false;
+			if (descriptor.cloud != null && o.cloud !== descriptor.cloud) return false;
+			return descriptor.connectionId == null ? o.connectionId == null : o.connectionId === descriptor.connectionId || o.sessionId === descriptor.connectionId;
+		});
+		const actuals = new Set(matching.filter((o) => o.sessionId != null).map((o) => actualKey(o.actualDomain, o.sessionId, o.cloud)));
+		if (descriptor.connectionId != null) actuals.add(actualKey(descriptor.domain, descriptor.connectionId, descriptor.cloud));
+		const targets = [...this.observations.values()].filter((o) => {
+			if (descriptor.cloud != null && o.cloud !== descriptor.cloud) return false;
+			return matching.includes(o) || o.sessionId != null && actuals.has(actualKey(o.actualDomain, o.sessionId, o.cloud));
+		});
+		const retirement = {
+			descriptors: /* @__PURE__ */ new Set(),
+			actuals: /* @__PURE__ */ new Set()
+		};
+		retirement.descriptors.add(descriptorKey(descriptor.domain, descriptor.connectionId, descriptor.cloud));
+		if (descriptor.connectionId != null) retirement.actuals.add(actualKey(descriptor.domain, descriptor.connectionId, descriptor.cloud));
+		for (const target of targets) {
+			this.addTarget(retirement, target);
+			this.publish({
+				previousSessionId: target.sessionId,
+				connectionId: target.connectionId,
+				cloud: target.cloud,
+				replacePrimary: target.connectionId == null
+			}, [target.descriptorDomain, target.actualDomain]);
+		}
+		if (targets.every((target) => target.connectionId !== descriptor.connectionId)) this.publish({
+			previousSessionId: descriptor.connectionId,
+			connectionId: descriptor.connectionId,
+			cloud: descriptor.cloud,
+			replacePrimary: descriptor.connectionId == null
+		}, [descriptor.domain]);
+		this.removeTargets(targets);
+		this.markRetirement(retirement);
+		return retirement;
+	}
+	retireAll(domain) {
+		const host = domain == null ? void 0 : domainKey(domain);
+		const retirement = {
+			descriptors: /* @__PURE__ */ new Set(),
+			actuals: /* @__PURE__ */ new Set(),
+			host,
+			all: host == null
+		};
+		const targets = [...this.observations.values()].filter((o) => host == null || domainKey(o.descriptorDomain) === host || domainKey(o.actualDomain) === host);
+		for (const target of targets) {
+			this.addTarget(retirement, target);
+			this.publish({
+				previousSessionId: target.sessionId,
+				connectionId: target.connectionId,
+				cloud: target.cloud,
+				replacePrimary: target.connectionId == null
+			}, [target.descriptorDomain, target.actualDomain]);
+		}
+		if (targets.length === 0) this.publish({ replacePrimary: true }, [domain]);
+		this.removeTargets(targets);
+		this.markRetirement(retirement);
+		return retirement;
+	}
+	addTarget(retirement, observation) {
+		retirement.descriptors.add(descriptorKey(observation.descriptorDomain, observation.connectionId, observation.cloud));
+		if (observation.sessionId != null) retirement.actuals.add(actualKey(observation.actualDomain, observation.sessionId, observation.cloud));
+	}
+	removeTargets(targets) {
+		const removed = new Set(targets);
+		for (const [key, observation] of this.observations) if (removed.has(observation)) this.observations.delete(key);
+		for (const [key, observation] of this.credentials) if (removed.has(observation)) this.credentials.delete(key);
+	}
+	markRetirement(retirement) {
+		const mark = ++this.sequence;
+		if (retirement.all) this.globalRetirement = mark;
+		if (retirement.host != null) this.hostRetirements.set(retirement.host, mark);
+		for (const key of retirement.descriptors) this.descriptorRetirements.set(key, mark);
+		for (const key of retirement.actuals) this.actualRetirements.set(key, mark);
+	}
+};
+//#endregion
+export { ObservedAuthenticationProvider };
+
+//# sourceMappingURL=observedAuthenticationProvider.js.map

package/dist/plus/integrations/authentication/observedAuthenticationProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observedAuthenticationProvider.js","names":[],"sources":["../../../../../plus/integrations/src/authentication/observedAuthenticationProvider.ts"],"sourcesContent":["import { CancellationError } from '@gitlens/utils/cancellation.js';\nimport type { Event } from '@gitlens/utils/event.js';\nimport { areDomainsOnSameHost, hostFromDomain } from '../utils/domain.utils.js';\nimport type {\n\tGetSessionOptions,\n\tIntegrationAuthenticationProvider,\n\tIntegrationAuthenticationSessionDescriptor,\n} from './integrationAuthenticationProvider.js';\nimport type { ProviderAuthenticationSession, SessionPublication } from './models.js';\nimport { getSessionIdentity } from './models.js';\n\ntype Observation = {\n\trequest: number;\n\tidentity: string | undefined;\n\tdescriptorDomain: string;\n\tactualDomain: string;\n\tcloud: boolean | undefined;\n\tsessionKey?: string;\n\tsessionId?: string;\n\tconnectionId?: string;\n};\n\ntype Retirement = {\n\tdescriptors: Set<string>;\n\tactuals: Set<string>;\n\thost?: string;\n\tall?: boolean;\n};\n\nfunction domainKey(domain: string): string {\n\treturn hostFromDomain(domain) ?? domain;\n}\n\nfunction descriptorKey(domain: string, connectionId: string | undefined, cloud: boolean | undefined): string {\n\treturn JSON.stringify([domainKey(domain), connectionId, cloud]);\n}\n\nfunction actualKey(domain: string, id: string, cloud: boolean | undefined): string {\n\treturn JSON.stringify([domainKey(domain), id, cloud]);\n}\n\nexport class ObservedAuthenticationProvider implements IntegrationAuthenticationProvider {\n\tprivate readonly observations = new Map<string, Observation>();\n\tprivate readonly credentials = new Map<string, Observation>();\n\tprivate readonly descriptorRetirements = new Map<string, number>();\n\tprivate readonly actualRetirements = new Map<string, number>();\n\tprivate readonly hostRetirements = new Map<string, number>();\n\tprivate readonly activeRetirements = new Set<Retirement>();\n\tprivate sequence = 0;\n\tprivate globalRetirement = 0;\n\tprivate disposed = false;\n\n\tconstructor(\n\t\tprivate readonly host: IntegrationAuthenticationProvider,\n\t\tprivate readonly selfManaged: boolean,\n\t\tprivate readonly publish: (publication: SessionPublication, domains: (string | undefined)[]) => void,\n\t) {}\n\n\tget onDidChange(): Event<void> {\n\t\treturn this.host.onDidChange;\n\t}\n\n\tasync getSession(\n\t\tdescriptor: IntegrationAuthenticationSessionDescriptor,\n\t\toptions?: GetSessionOptions,\n\t): Promise<ProviderAuthenticationSession | undefined> {\n\t\tif (this.disposed) return undefined;\n\n\t\tconst request = ++this.sequence;\n\t\tconst scope = JSON.stringify([\n\t\t\tdescriptor.connectionId,\n\t\t\tdomainKey(descriptor.domain),\n\t\t\tdescriptor.cloud,\n\t\t\tdescriptor.scopes,\n\t\t]);\n\t\tconst source = await this.host.getSession(descriptor, options);\n\t\tif (source != null && this.selfManaged && !areDomainsOnSameHost(descriptor.domain, source.domain)) {\n\t\t\tthrow new CancellationError();\n\t\t}\n\t\tif (this.isRetired(request, descriptor, source)) throw new CancellationError();\n\n\t\tconst identity = getSessionIdentity(source);\n\t\tconst previous = this.observations.get(scope);\n\t\tconst sessionKey =\n\t\t\tsource == null\n\t\t\t\t? (previous?.sessionKey ??\n\t\t\t\t\t(descriptor.connectionId\n\t\t\t\t\t\t? actualKey(descriptor.domain, descriptor.connectionId, descriptor.cloud ?? true)\n\t\t\t\t\t\t: undefined))\n\t\t\t\t: actualKey(source.domain || descriptor.domain, source.id, source.cloud);\n\t\tconst credential = sessionKey == null ? undefined : this.credentials.get(sessionKey);\n\t\tconst latest =\n\t\t\tcredential != null && (previous == null || credential.request > previous.request) ? credential : previous;\n\t\tif (latest != null && latest.request > request && latest.identity !== identity) {\n\t\t\tthrow new CancellationError();\n\t\t}\n\n\t\tconst session: ProviderAuthenticationSession | undefined =\n\t\t\tsource == null\n\t\t\t\t? undefined\n\t\t\t\t: {\n\t\t\t\t\t\tid: source.id,\n\t\t\t\t\t\taccessToken: source.accessToken,\n\t\t\t\t\t\taccount: source.account,\n\t\t\t\t\t\tscopes: source.scopes,\n\t\t\t\t\t\tcloud: source.cloud,\n\t\t\t\t\t\ttype: source.type,\n\t\t\t\t\t\texpiresAt: source.expiresAt,\n\t\t\t\t\t\tdomain: source.domain,\n\t\t\t\t\t\tbaseUrl: source.baseUrl,\n\t\t\t\t\t\tprotocol: source.protocol,\n\t\t\t\t\t\tappKey: source.appKey,\n\t\t\t\t\t};\n\t\tif (latest == null || latest.request <= request) {\n\t\t\tif (previous == null || previous.identity !== identity || credential?.identity !== identity) {\n\t\t\t\tthis.publish(\n\t\t\t\t\t{\n\t\t\t\t\t\tsession: session,\n\t\t\t\t\t\tpreviousSessionId: latest?.sessionId ?? descriptor.connectionId,\n\t\t\t\t\t\tconnectionId: descriptor.connectionId,\n\t\t\t\t\t\tcloud: session != null ? session.cloud : (latest?.cloud ?? descriptor.cloud),\n\t\t\t\t\t\treplacePrimary: !descriptor.connectionId,\n\t\t\t\t\t},\n\t\t\t\t\t[descriptor.domain, session?.domain, previous?.actualDomain],\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst observation: Observation = {\n\t\t\t\trequest: request,\n\t\t\t\tidentity: identity,\n\t\t\t\tdescriptorDomain: descriptor.domain,\n\t\t\t\tactualDomain: session?.domain || descriptor.domain,\n\t\t\t\tcloud: session?.cloud ?? descriptor.cloud,\n\t\t\t\tsessionKey: sessionKey,\n\t\t\t\tsessionId: source?.id ?? latest?.sessionId ?? descriptor.connectionId,\n\t\t\t\tconnectionId: descriptor.connectionId,\n\t\t\t};\n\t\t\tthis.observations.set(scope, observation);\n\t\t\tif (sessionKey != null) {\n\t\t\t\tthis.credentials.set(sessionKey, observation);\n\t\t\t}\n\t\t}\n\n\t\treturn session;\n\t}\n\n\tasync deleteSession(\n\t\tdescriptor: IntegrationAuthenticationSessionDescriptor,\n\t\toptions?: { preserveConfigured?: boolean },\n\t): Promise<void> {\n\t\tconst retirement = this.retireConnection(descriptor);\n\t\tthis.activeRetirements.add(retirement);\n\t\ttry {\n\t\t\tawait this.host.deleteSession(descriptor, options);\n\t\t} finally {\n\t\t\tthis.markRetirement(retirement);\n\t\t\tthis.activeRetirements.delete(retirement);\n\t\t}\n\t}\n\n\tasync deleteAllSessions(descriptor?: IntegrationAuthenticationSessionDescriptor): Promise<void> {\n\t\tconst retirement = this.retireAll(this.selfManaged ? descriptor?.domain : undefined);\n\t\tthis.activeRetirements.add(retirement);\n\t\ttry {\n\t\t\tawait this.host.deleteAllSessions(descriptor);\n\t\t} finally {\n\t\t\tthis.markRetirement(retirement);\n\t\t\tthis.activeRetirements.delete(retirement);\n\t\t}\n\t}\n\n\tdispose(): void {\n\t\tif (this.disposed) return;\n\n\t\tthis.disposed = true;\n\t\tthis.retireAll();\n\t\tthis.host.dispose();\n\t}\n\n\tprivate isRetired(\n\t\trequest: number,\n\t\tdescriptor: IntegrationAuthenticationSessionDescriptor,\n\t\tsession: ProviderAuthenticationSession | undefined,\n\t): boolean {\n\t\tif (this.disposed || request < this.globalRetirement) return true;\n\n\t\tconst host = domainKey(descriptor.domain);\n\t\tconst variants = new Set([undefined, descriptor.cloud, session?.cloud]);\n\t\tif (descriptor.cloud == null && session?.cloud == null) {\n\t\t\tvariants.add(true);\n\t\t\tvariants.add(false);\n\t\t}\n\t\tconst descriptorIdentities = Array.from(variants, cloud =>\n\t\t\tdescriptorKey(descriptor.domain, descriptor.connectionId, cloud),\n\t\t);\n\t\tconst actual =\n\t\t\tsession == null ? undefined : actualKey(session.domain || descriptor.domain, session.id, session.cloud);\n\t\tconst actualAnyVariant =\n\t\t\tsession == null ? undefined : actualKey(session.domain || descriptor.domain, session.id, undefined);\n\t\tif (\n\t\t\trequest < (this.hostRetirements.get(host) ?? 0) ||\n\t\t\tdescriptorIdentities.some(key => request < (this.descriptorRetirements.get(key) ?? 0)) ||\n\t\t\t(actual != null && request < (this.actualRetirements.get(actual) ?? 0)) ||\n\t\t\t(actualAnyVariant != null && request < (this.actualRetirements.get(actualAnyVariant) ?? 0))\n\t\t) {\n\t\t\treturn true;\n\t\t}\n\n\t\tfor (const retirement of this.activeRetirements) {\n\t\t\tif (\n\t\t\t\tretirement.all ||\n\t\t\t\tretirement.host === host ||\n\t\t\t\tdescriptorIdentities.some(key => retirement.descriptors.has(key)) ||\n\t\t\t\t(actual != null && retirement.actuals.has(actual)) ||\n\t\t\t\t(actualAnyVariant != null && retirement.actuals.has(actualAnyVariant))\n\t\t\t) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t}\n\n\t\treturn false;\n\t}\n\n\tprivate retireConnection(descriptor: IntegrationAuthenticationSessionDescriptor): Retirement {\n\t\tconst host = domainKey(descriptor.domain);\n\t\tconst matching = [...this.observations.values()].filter(o => {\n\t\t\tif (domainKey(o.descriptorDomain) !== host && domainKey(o.actualDomain) !== host) return false;\n\t\t\tif (descriptor.cloud != null && o.cloud !== descriptor.cloud) return false;\n\t\t\treturn descriptor.connectionId == null\n\t\t\t\t? o.connectionId == null\n\t\t\t\t: o.connectionId === descriptor.connectionId || o.sessionId === descriptor.connectionId;\n\t\t});\n\t\tconst actuals = new Set(\n\t\t\tmatching\n\t\t\t\t.filter((o): o is Observation & { sessionId: string } => o.sessionId != null)\n\t\t\t\t.map(o => actualKey(o.actualDomain, o.sessionId, o.cloud)),\n\t\t);\n\t\tif (descriptor.connectionId != null) {\n\t\t\tactuals.add(actualKey(descriptor.domain, descriptor.connectionId, descriptor.cloud));\n\t\t}\n\n\t\tconst targets = [...this.observations.values()].filter(o => {\n\t\t\tif (descriptor.cloud != null && o.cloud !== descriptor.cloud) return false;\n\t\t\treturn (\n\t\t\t\tmatching.includes(o) ||\n\t\t\t\t(o.sessionId != null && actuals.has(actualKey(o.actualDomain, o.sessionId, o.cloud)))\n\t\t\t);\n\t\t});\n\t\tconst retirement: Retirement = { descriptors: new Set(), actuals: new Set() };\n\t\tretirement.descriptors.add(descriptorKey(descriptor.domain, descriptor.connectionId, descriptor.cloud));\n\t\tif (descriptor.connectionId != null) {\n\t\t\tretirement.actuals.add(actualKey(descriptor.domain, descriptor.connectionId, descriptor.cloud));\n\t\t}\n\n\t\tfor (const target of targets) {\n\t\t\tthis.addTarget(retirement, target);\n\t\t\tthis.publish(\n\t\t\t\t{\n\t\t\t\t\tpreviousSessionId: target.sessionId,\n\t\t\t\t\tconnectionId: target.connectionId,\n\t\t\t\t\tcloud: target.cloud,\n\t\t\t\t\treplacePrimary: target.connectionId == null,\n\t\t\t\t},\n\t\t\t\t[target.descriptorDomain, target.actualDomain],\n\t\t\t);\n\t\t}\n\n\t\tif (targets.every(target => target.connectionId !== descriptor.connectionId)) {\n\t\t\tthis.publish(\n\t\t\t\t{\n\t\t\t\t\tpreviousSessionId: descriptor.connectionId,\n\t\t\t\t\tconnectionId: descriptor.connectionId,\n\t\t\t\t\tcloud: descriptor.cloud,\n\t\t\t\t\treplacePrimary: descriptor.connectionId == null,\n\t\t\t\t},\n\t\t\t\t[descriptor.domain],\n\t\t\t);\n\t\t}\n\n\t\tthis.removeTargets(targets);\n\t\tthis.markRetirement(retirement);\n\t\treturn retirement;\n\t}\n\n\tprivate retireAll(domain?: string): Retirement {\n\t\tconst host = domain == null ? undefined : domainKey(domain);\n\t\tconst retirement: Retirement = { descriptors: new Set(), actuals: new Set(), host: host, all: host == null };\n\t\tconst targets = [...this.observations.values()].filter(\n\t\t\to => host == null || domainKey(o.descriptorDomain) === host || domainKey(o.actualDomain) === host,\n\t\t);\n\t\tfor (const target of targets) {\n\t\t\tthis.addTarget(retirement, target);\n\t\t\tthis.publish(\n\t\t\t\t{\n\t\t\t\t\tpreviousSessionId: target.sessionId,\n\t\t\t\t\tconnectionId: target.connectionId,\n\t\t\t\t\tcloud: target.cloud,\n\t\t\t\t\treplacePrimary: target.connectionId == null,\n\t\t\t\t},\n\t\t\t\t[target.descriptorDomain, target.actualDomain],\n\t\t\t);\n\t\t}\n\n\t\tif (targets.length === 0) {\n\t\t\tthis.publish({ replacePrimary: true }, [domain]);\n\t\t}\n\n\t\tthis.removeTargets(targets);\n\t\tthis.markRetirement(retirement);\n\t\treturn retirement;\n\t}\n\n\tprivate addTarget(retirement: Retirement, observation: Observation): void {\n\t\tretirement.descriptors.add(\n\t\t\tdescriptorKey(observation.descriptorDomain, observation.connectionId, observation.cloud),\n\t\t);\n\t\tif (observation.sessionId != null) {\n\t\t\tretirement.actuals.add(actualKey(observation.actualDomain, observation.sessionId, observation.cloud));\n\t\t}\n\t}\n\n\tprivate removeTargets(targets: Observation[]): void {\n\t\tconst removed = new Set(targets);\n\t\tfor (const [key, observation] of this.observations) {\n\t\t\tif (removed.has(observation)) {\n\t\t\t\tthis.observations.delete(key);\n\t\t\t}\n\t\t}\n\n\t\tfor (const [key, observation] of this.credentials) {\n\t\t\tif (removed.has(observation)) {\n\t\t\t\tthis.credentials.delete(key);\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate markRetirement(retirement: Retirement): void {\n\t\tconst mark = ++this.sequence;\n\t\tif (retirement.all) {\n\t\t\tthis.globalRetirement = mark;\n\t\t}\n\t\tif (retirement.host != null) {\n\t\t\tthis.hostRetirements.set(retirement.host, mark);\n\t\t}\n\t\tfor (const key of retirement.descriptors) {\n\t\t\tthis.descriptorRetirements.set(key, mark);\n\t\t}\n\n\t\tfor (const key of retirement.actuals) {\n\t\t\tthis.actualRetirements.set(key, mark);\n\t\t}\n\t}\n}\n"],"mappings":";;;;AA6BA,SAAS,UAAU,QAAwB;CAC1C,OAAO,eAAe,MAAM,KAAK;AAClC;AAEA,SAAS,cAAc,QAAgB,cAAkC,OAAoC;CAC5G,OAAO,KAAK,UAAU;EAAC,UAAU,MAAM;EAAG;EAAc;CAAK,CAAC;AAC/D;AAEA,SAAS,UAAU,QAAgB,IAAY,OAAoC;CAClF,OAAO,KAAK,UAAU;EAAC,UAAU,MAAM;EAAG;EAAI;CAAK,CAAC;AACrD;AAEA,IAAa,iCAAb,MAAyF;CAYtE;CACA;CACA;CAblB,+BAAgC,IAAI,IAAyB;CAC7D,8BAA+B,IAAI,IAAyB;CAC5D,wCAAyC,IAAI,IAAoB;CACjE,oCAAqC,IAAI,IAAoB;CAC7D,kCAAmC,IAAI,IAAoB;CAC3D,oCAAqC,IAAI,IAAgB;CACzD,WAAmB;CACnB,mBAA2B;CAC3B,WAAmB;CAEnB,YACC,MACA,aACA,SACC;EAHgB,KAAA,OAAA;EACA,KAAA,cAAA;EACA,KAAA,UAAA;CACf;CAEH,IAAI,cAA2B;EAC9B,OAAO,KAAK,KAAK;CAClB;CAEA,MAAM,WACL,YACA,SACqD;EACrD,IAAI,KAAK,UAAU,OAAO,KAAA;EAE1B,MAAM,UAAU,EAAE,KAAK;EACvB,MAAM,QAAQ,KAAK,UAAU;GAC5B,WAAW;GACX,UAAU,WAAW,MAAM;GAC3B,WAAW;GACX,WAAW;EACZ,CAAC;EACD,MAAM,SAAS,MAAM,KAAK,KAAK,WAAW,YAAY,OAAO;EAC7D,IAAI,UAAU,QAAQ,KAAK,eAAe,CAAC,qBAAqB,WAAW,QAAQ,OAAO,MAAM,GAC/F,MAAM,IAAI,kBAAkB;EAE7B,IAAI,KAAK,UAAU,SAAS,YAAY,MAAM,GAAG,MAAM,IAAI,kBAAkB;EAE7E,MAAM,WAAW,mBAAmB,MAAM;EAC1C,MAAM,WAAW,KAAK,aAAa,IAAI,KAAK;EAC5C,MAAM,aACL,UAAU,OACN,UAAU,eACX,WAAW,eACT,UAAU,WAAW,QAAQ,WAAW,cAAc,WAAW,SAAS,IAAI,IAC9E,KAAA,KACF,UAAU,OAAO,UAAU,WAAW,QAAQ,OAAO,IAAI,OAAO,KAAK;EACzE,MAAM,aAAa,cAAc,OAAO,KAAA,IAAY,KAAK,YAAY,IAAI,UAAU;EACnF,MAAM,SACL,cAAc,SAAS,YAAY,QAAQ,WAAW,UAAU,SAAS,WAAW,aAAa;EAClG,IAAI,UAAU,QAAQ,OAAO,UAAU,WAAW,OAAO,aAAa,UACrE,MAAM,IAAI,kBAAkB;EAG7B,MAAM,UACL,UAAU,OACP,KAAA,IACA;GACA,IAAI,OAAO;GACX,aAAa,OAAO;GACpB,SAAS,OAAO;GAChB,QAAQ,OAAO;GACf,OAAO,OAAO;GACd,MAAM,OAAO;GACb,WAAW,OAAO;GAClB,QAAQ,OAAO;GACf,SAAS,OAAO;GAChB,UAAU,OAAO;GACjB,QAAQ,OAAO;EAChB;EACH,IAAI,UAAU,QAAQ,OAAO,WAAW,SAAS;GAChD,IAAI,YAAY,QAAQ,SAAS,aAAa,YAAY,YAAY,aAAa,UAClF,KAAK,QACJ;IACU;IACT,mBAAmB,QAAQ,aAAa,WAAW;IACnD,cAAc,WAAW;IACzB,OAAO,WAAW,OAAO,QAAQ,QAAS,QAAQ,SAAS,WAAW;IACtE,gBAAgB,CAAC,WAAW;GAC7B,GACA;IAAC,WAAW;IAAQ,SAAS;IAAQ,UAAU;GAAY,CAC5D;GAGD,MAAM,cAA2B;IACvB;IACC;IACV,kBAAkB,WAAW;IAC7B,cAAc,SAAS,UAAU,WAAW;IAC5C,OAAO,SAAS,SAAS,WAAW;IACxB;IACZ,WAAW,QAAQ,MAAM,QAAQ,aAAa,WAAW;IACzD,cAAc,WAAW;GAC1B;GACA,KAAK,aAAa,IAAI,OAAO,WAAW;GACxC,IAAI,cAAc,MACjB,KAAK,YAAY,IAAI,YAAY,WAAW;EAE9C;EAEA,OAAO;CACR;CAEA,MAAM,cACL,YACA,SACgB;EAChB,MAAM,aAAa,KAAK,iBAAiB,UAAU;EACnD,KAAK,kBAAkB,IAAI,UAAU;EACrC,IAAI;GACH,MAAM,KAAK,KAAK,cAAc,YAAY,OAAO;EAClD,UAAU;GACT,KAAK,eAAe,UAAU;GAC9B,KAAK,kBAAkB,OAAO,UAAU;EACzC;CACD;CAEA,MAAM,kBAAkB,YAAwE;EAC/F,MAAM,aAAa,KAAK,UAAU,KAAK,cAAc,YAAY,SAAS,KAAA,CAAS;EACnF,KAAK,kBAAkB,IAAI,UAAU;EACrC,IAAI;GACH,MAAM,KAAK,KAAK,kBAAkB,UAAU;EAC7C,UAAU;GACT,KAAK,eAAe,UAAU;GAC9B,KAAK,kBAAkB,OAAO,UAAU;EACzC;CACD;CAEA,UAAgB;EACf,IAAI,KAAK,UAAU;EAEnB,KAAK,WAAW;EAChB,KAAK,UAAU;EACf,KAAK,KAAK,QAAQ;CACnB;CAEA,UACC,SACA,YACA,SACU;EACV,IAAI,KAAK,YAAY,UAAU,KAAK,kBAAkB,OAAO;EAE7D,MAAM,OAAO,UAAU,WAAW,MAAM;EACxC,MAAM,2BAAW,IAAI,IAAI;GAAC,KAAA;GAAW,WAAW;GAAO,SAAS;EAAK,CAAC;EACtE,IAAI,WAAW,SAAS,QAAQ,SAAS,SAAS,MAAM;GACvD,SAAS,IAAI,IAAI;GACjB,SAAS,IAAI,KAAK;EACnB;EACA,MAAM,uBAAuB,MAAM,KAAK,WAAU,UACjD,cAAc,WAAW,QAAQ,WAAW,cAAc,KAAK,CAChE;EACA,MAAM,SACL,WAAW,OAAO,KAAA,IAAY,UAAU,QAAQ,UAAU,WAAW,QAAQ,QAAQ,IAAI,QAAQ,KAAK;EACvG,MAAM,mBACL,WAAW,OAAO,KAAA,IAAY,UAAU,QAAQ,UAAU,WAAW,QAAQ,QAAQ,IAAI,KAAA,CAAS;EACnG,IACC,WAAW,KAAK,gBAAgB,IAAI,IAAI,KAAK,MAC7C,qBAAqB,MAAK,QAAO,WAAW,KAAK,sBAAsB,IAAI,GAAG,KAAK,EAAE,KACpF,UAAU,QAAQ,WAAW,KAAK,kBAAkB,IAAI,MAAM,KAAK,MACnE,oBAAoB,QAAQ,WAAW,KAAK,kBAAkB,IAAI,gBAAgB,KAAK,IAExF,OAAO;EAGR,KAAK,MAAM,cAAc,KAAK,mBAC7B,IACC,WAAW,OACX,WAAW,SAAS,QACpB,qBAAqB,MAAK,QAAO,WAAW,YAAY,IAAI,GAAG,CAAC,KAC/D,UAAU,QAAQ,WAAW,QAAQ,IAAI,MAAM,KAC/C,oBAAoB,QAAQ,WAAW,QAAQ,IAAI,gBAAgB,GAEpE,OAAO;EAIT,OAAO;CACR;CAEA,iBAAyB,YAAoE;EAC5F,MAAM,OAAO,UAAU,WAAW,MAAM;EACxC,MAAM,WAAW,CAAC,GAAG,KAAK,aAAa,OAAO,CAAC,CAAC,CAAC,QAAO,MAAK;GAC5D,IAAI,UAAU,EAAE,gBAAgB,MAAM,QAAQ,UAAU,EAAE,YAAY,MAAM,MAAM,OAAO;GACzF,IAAI,WAAW,SAAS,QAAQ,EAAE,UAAU,WAAW,OAAO,OAAO;GACrE,OAAO,WAAW,gBAAgB,OAC/B,EAAE,gBAAgB,OAClB,EAAE,iBAAiB,WAAW,gBAAgB,EAAE,cAAc,WAAW;EAC7E,CAAC;EACD,MAAM,UAAU,IAAI,IACnB,SACE,QAAQ,MAAgD,EAAE,aAAa,IAAI,CAAC,CAC5E,KAAI,MAAK,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,CAAC,CAC3D;EACA,IAAI,WAAW,gBAAgB,MAC9B,QAAQ,IAAI,UAAU,WAAW,QAAQ,WAAW,cAAc,WAAW,KAAK,CAAC;EAGpF,MAAM,UAAU,CAAC,GAAG,KAAK,aAAa,OAAO,CAAC,CAAC,CAAC,QAAO,MAAK;GAC3D,IAAI,WAAW,SAAS,QAAQ,EAAE,UAAU,WAAW,OAAO,OAAO;GACrE,OACC,SAAS,SAAS,CAAC,KAClB,EAAE,aAAa,QAAQ,QAAQ,IAAI,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,CAAC;EAErF,CAAC;EACD,MAAM,aAAyB;GAAE,6BAAa,IAAI,IAAI;GAAG,yBAAS,IAAI,IAAI;EAAE;EAC5E,WAAW,YAAY,IAAI,cAAc,WAAW,QAAQ,WAAW,cAAc,WAAW,KAAK,CAAC;EACtG,IAAI,WAAW,gBAAgB,MAC9B,WAAW,QAAQ,IAAI,UAAU,WAAW,QAAQ,WAAW,cAAc,WAAW,KAAK,CAAC;EAG/F,KAAK,MAAM,UAAU,SAAS;GAC7B,KAAK,UAAU,YAAY,MAAM;GACjC,KAAK,QACJ;IACC,mBAAmB,OAAO;IAC1B,cAAc,OAAO;IACrB,OAAO,OAAO;IACd,gBAAgB,OAAO,gBAAgB;GACxC,GACA,CAAC,OAAO,kBAAkB,OAAO,YAAY,CAC9C;EACD;EAEA,IAAI,QAAQ,OAAM,WAAU,OAAO,iBAAiB,WAAW,YAAY,GAC1E,KAAK,QACJ;GACC,mBAAmB,WAAW;GAC9B,cAAc,WAAW;GACzB,OAAO,WAAW;GAClB,gBAAgB,WAAW,gBAAgB;EAC5C,GACA,CAAC,WAAW,MAAM,CACnB;EAGD,KAAK,cAAc,OAAO;EAC1B,KAAK,eAAe,UAAU;EAC9B,OAAO;CACR;CAEA,UAAkB,QAA6B;EAC9C,MAAM,OAAO,UAAU,OAAO,KAAA,IAAY,UAAU,MAAM;EAC1D,MAAM,aAAyB;GAAE,6BAAa,IAAI,IAAI;GAAG,yBAAS,IAAI,IAAI;GAAS;GAAM,KAAK,QAAQ;EAAK;EAC3G,MAAM,UAAU,CAAC,GAAG,KAAK,aAAa,OAAO,CAAC,CAAC,CAAC,QAC/C,MAAK,QAAQ,QAAQ,UAAU,EAAE,gBAAgB,MAAM,QAAQ,UAAU,EAAE,YAAY,MAAM,IAC9F;EACA,KAAK,MAAM,UAAU,SAAS;GAC7B,KAAK,UAAU,YAAY,MAAM;GACjC,KAAK,QACJ;IACC,mBAAmB,OAAO;IAC1B,cAAc,OAAO;IACrB,OAAO,OAAO;IACd,gBAAgB,OAAO,gBAAgB;GACxC,GACA,CAAC,OAAO,kBAAkB,OAAO,YAAY,CAC9C;EACD;EAEA,IAAI,QAAQ,WAAW,GACtB,KAAK,QAAQ,EAAE,gBAAgB,KAAK,GAAG,CAAC,MAAM,CAAC;EAGhD,KAAK,cAAc,OAAO;EAC1B,KAAK,eAAe,UAAU;EAC9B,OAAO;CACR;CAEA,UAAkB,YAAwB,aAAgC;EACzE,WAAW,YAAY,IACtB,cAAc,YAAY,kBAAkB,YAAY,cAAc,YAAY,KAAK,CACxF;EACA,IAAI,YAAY,aAAa,MAC5B,WAAW,QAAQ,IAAI,UAAU,YAAY,cAAc,YAAY,WAAW,YAAY,KAAK,CAAC;CAEtG;CAEA,cAAsB,SAA8B;EACnD,MAAM,UAAU,IAAI,IAAI,OAAO;EAC/B,KAAK,MAAM,CAAC,KAAK,gBAAgB,KAAK,cACrC,IAAI,QAAQ,IAAI,WAAW,GAC1B,KAAK,aAAa,OAAO,GAAG;EAI9B,KAAK,MAAM,CAAC,KAAK,gBAAgB,KAAK,aACrC,IAAI,QAAQ,IAAI,WAAW,GAC1B,KAAK,YAAY,OAAO,GAAG;CAG9B;CAEA,eAAuB,YAA8B;EACpD,MAAM,OAAO,EAAE,KAAK;EACpB,IAAI,WAAW,KACd,KAAK,mBAAmB;EAEzB,IAAI,WAAW,QAAQ,MACtB,KAAK,gBAAgB,IAAI,WAAW,MAAM,IAAI;EAE/C,KAAK,MAAM,OAAO,WAAW,aAC5B,KAAK,sBAAsB,IAAI,KAAK,IAAI;EAGzC,KAAK,MAAM,OAAO,WAAW,SAC5B,KAAK,kBAAkB,IAAI,KAAK,IAAI;CAEtC;AACD"}

package/dist/plus/integrations/index.d.ts

@@ -1,4 +1,6 @@
 import { CacheController } from "../../utils/promiseCache.js";
+import { Autolink, AutolinkReference, DynamicAutolinkReference, RefSet } from "../../git/models/autolink.js";
+import { ProviderReference } from "../../git/models/remoteProvider.js";
 import { IssueProjection, IssueSearchCapabilities, IssueSearchCriteria, IssueSearchRelationship, IssueStateFilter } from "../../git/models/issue.js";
 import { PullRequestFilter, PullRequestProjection, PullRequestSearchCapabilities, PullRequestSearchCriteria, PullRequestStateFilter } from "../../git/models/pullRequest.js";
 import { Account } from "../../git/models/author.js";
@@ -14,7 +16,7 @@ import { CurrentAccountResult } from "./reads/currentAccount.js";
 import { IssueBatchResult, IssueBatchTarget } from "./reads/issueBatch.js";
 import { PullRequestBatchResult, PullRequestBatchTarget } from "./reads/pullRequestBatch.js";
 import { PullRequestBranchResult, PullRequestBranchTarget } from "./reads/pullRequestBranches.js";
-import { ClosedPullRequestSweepOptions, IntegrationManager, ListOrgsOptions, ListProjectsOptions, ProviderBroadenOrg, ProviderRepositoriesInput, ProviderRepositoryInput, ProviderSweepTarget, ProviderSweepTargetEvent, PullRequestSweepOptions } from "./manager.js";
+import { ClosedPullRequestSweepOptions, GetAutolinkReferencesOptions, IntegrationManager, ListOrgsOptions, ListProjectsOptions, ProviderBroadenOrg, ProviderRepositoriesInput, ProviderRepositoryInput, ProviderSweepTarget, ProviderSweepTargetEvent, PullRequestSweepOptions } from "./manager.js";
 import { IntegrationAuthenticationProvider, IntegrationAuthenticationProviderDescriptor, IntegrationAuthenticationSessionDescriptor } from "./authentication/integrationAuthenticationProvider.js";
 import { AccountProvider, AuthenticationSessionsChangeEvent, ConfigChangeEvent, ConfigProvider, HttpProvider, IntegrationServiceHooks, IntegrationStorageProvider, IntegrationsRemoteConfig, RepositoriesProvider } from "./context.js";
 import { ManualTokenAuthProviderOptions, createManualTokenAuthProvider } from "./authentication/manualTokenProvider.js";
@@ -78,5 +80,5 @@ export interface IntegrationManagerContext {
  */
 export declare function createIntegrationManager(ctx: IntegrationManagerContext): IntegrationManager;
 //#endregion
-export { type Account, type AccountProvider, type AuthenticationSessionLike, type AuthenticationSessionsChangeEvent, type ClosedPullRequestSweepOptions, type CloudIntegrationAuthType, type CloudIntegrationConnection, type CloudIntegrationType, type ConfigChangeEvent, type ConfigProvider, type ConfiguredIntegrationDescriptor, type ConfiguredIntegrationsChangeEvent, type ConnectionStateChangeEvent, type CurrentAccountResult, type FieldPresence, GitCloudHostIntegrationId, GitSelfManagedHostIntegrationId, type HttpProvider, type IntegrationAuthenticationProvider, type IntegrationAuthenticationProviderDescriptor, type IntegrationAuthenticationSessionDescriptor, type IntegrationIds, type IntegrationManager, type IntegrationServiceHooks, type IntegrationStorageProvider, type IntegrationsRemoteConfig, type IssueBatchResult, type IssueBatchTarget, type IssueCountResult, type IssueCountScope, type IssueEtagInclude, type IssueFieldGroup, IssueFilter, type IssueProjection, type IssueSearchCapabilities, type IssueSearchCriteria, type IssueSearchRelationship, type IssueStateFilter, IssuesCloudHostIntegrationId, IssuesSelfManagedHostIntegrationId, type ListOrgsOptions, type ListProjectsOptions, type ManualTokenAuthProviderOptions, type ProviderAuthenticationSession, type ProviderBroadenOrg, type ProviderBroadenResult, type ProviderOrganization, type ProviderPageInfo, type ProviderPagedResult, type ProviderRepositoriesInput, type ProviderRepositoryInput, type ProviderRepositoryShape, type ProviderResult, type ProviderSweepResult, type ProviderSweepTarget, type ProviderSweepTargetEvent, type ProviderWarning, type ProviderWarningCause, type ProviderWarningCauseReason, type ProviderWarningKind, type ProviderWarningOmission, type ProviderWarningOmissionKind, type ProviderWarningOmissionRecovery, type ProviderWarningOmissionScope, type ProviderWarningScope, type ProviderWarningSelector, type ProviderWarningUnreadableItems, type PullRequestBatchResult, type PullRequestBatchTarget, type PullRequestBranchResult, type PullRequestBranchTarget, type PullRequestCountResult, type PullRequestCountScope, type PullRequestEtagInclude, type PullRequestFieldGroup, PullRequestFilter, type PullRequestProjection, type PullRequestSearchCapabilities, type PullRequestSearchCriteria, type PullRequestStateFilter, type PullRequestSweepOptions, type RepositoriesProvider, type RepositoryIdentity, type RepositoryResolution, type RepositoryResolutionStatus, type ResolveRepositoryResult, type Source, type Sources, type SupportedCloudIntegrationIds, areDomainsOnSameHost, createManualTokenAuthProvider, getIssueFieldPresence, getPullRequestFieldPresence, hostFromDomain, isIntegrationId, isSupportedCloudIntegrationId, toCloudIntegrationType, toIntegrationId };
+export { type Account, type AccountProvider, type AuthenticationSessionLike, type AuthenticationSessionsChangeEvent, type Autolink, type AutolinkReference, type ClosedPullRequestSweepOptions, type CloudIntegrationAuthType, type CloudIntegrationConnection, type CloudIntegrationType, type ConfigChangeEvent, type ConfigProvider, type ConfiguredIntegrationDescriptor, type ConfiguredIntegrationsChangeEvent, type ConnectionStateChangeEvent, type CurrentAccountResult, type DynamicAutolinkReference, type FieldPresence, type GetAutolinkReferencesOptions, GitCloudHostIntegrationId, GitSelfManagedHostIntegrationId, type HttpProvider, type IntegrationAuthenticationProvider, type IntegrationAuthenticationProviderDescriptor, type IntegrationAuthenticationSessionDescriptor, type IntegrationIds, type IntegrationManager, type IntegrationServiceHooks, type IntegrationStorageProvider, type IntegrationsRemoteConfig, type IssueBatchResult, type IssueBatchTarget, type IssueCountResult, type IssueCountScope, type IssueEtagInclude, type IssueFieldGroup, IssueFilter, type IssueProjection, type IssueSearchCapabilities, type IssueSearchCriteria, type IssueSearchRelationship, type IssueStateFilter, IssuesCloudHostIntegrationId, IssuesSelfManagedHostIntegrationId, type ListOrgsOptions, type ListProjectsOptions, type ManualTokenAuthProviderOptions, type ProviderAuthenticationSession, type ProviderBroadenOrg, type ProviderBroadenResult, type ProviderOrganization, type ProviderPageInfo, type ProviderPagedResult, type ProviderReference, type ProviderRepositoriesInput, type ProviderRepositoryInput, type ProviderRepositoryShape, type ProviderResult, type ProviderSweepResult, type ProviderSweepTarget, type ProviderSweepTargetEvent, type ProviderWarning, type ProviderWarningCause, type ProviderWarningCauseReason, type ProviderWarningKind, type ProviderWarningOmission, type ProviderWarningOmissionKind, type ProviderWarningOmissionRecovery, type ProviderWarningOmissionScope, type ProviderWarningScope, type ProviderWarningSelector, type ProviderWarningUnreadableItems, type PullRequestBatchResult, type PullRequestBatchTarget, type PullRequestBranchResult, type PullRequestBranchTarget, type PullRequestCountResult, type PullRequestCountScope, type PullRequestEtagInclude, type PullRequestFieldGroup, PullRequestFilter, type PullRequestProjection, type PullRequestSearchCapabilities, type PullRequestSearchCriteria, type PullRequestStateFilter, type PullRequestSweepOptions, type RefSet, type RepositoriesProvider, type RepositoryIdentity, type RepositoryResolution, type RepositoryResolutionStatus, type ResolveRepositoryResult, type Source, type Sources, type SupportedCloudIntegrationIds, areDomainsOnSameHost, createManualTokenAuthProvider, getIssueFieldPresence, getPullRequestFieldPresence, hostFromDomain, isIntegrationId, isSupportedCloudIntegrationId, toCloudIntegrationType, toIntegrationId };
 //# sourceMappingURL=index.d.ts.map

package/dist/plus/integrations/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../../plus/integrations/src/index.ts"],"sourcesContent":["// Public facade for `@gitlens/integrations`.\n//\n// External consumers should import from this entry point only, not from the\n// package's internal subpaths, with one exception: the lightweight, token-scoped\n// read API is a supported public subpath (`./lite.js`). It's kept out of this\n// facade on purpose so importing the session-managed manager doesn't eagerly pull\n// in every provider API client. The internal classes (IntegrationService,\n// IntegrationAuthenticationService, etc.) are not part of the public API and\n// may be refactored without semver bumps.\n\nimport type { Account } from '@gitlens/git/models/author.js';\nimport { CacheController } from '@gitlens/utils/promiseCache.js';\nimport type { IntegrationIds } from './constants.js';\nimport type {\n\tAccountProvider,\n\tConfigProvider,\n\tHttpProvider,\n\tIntegrationCacheProvider,\n\tIntegrationServiceHooks,\n\tIntegrationStorageProvider,\n\tRepositoriesProvider,\n} from './context.js';\nimport { createIntegrationService } from './integrationService.js';\nimport type { IntegrationManager } from './manager.js';\n\n/** A cached provider value, which may still be resolving. */\nexport type IntegrationManagerCacheResult<T> = Promise<T | undefined> | T | undefined;\n\n/** Produces an account value on a cache miss. */\nexport type IntegrationManagerCacheLoader<T> = (cacheable: CacheController) => {\n\tvalue: IntegrationManagerCacheResult<T>;\n\texpiresAt?: number;\n};\n\n/** Stable integration identity supplied to the consumer-owned account cache. */\nexport interface IntegrationAccountCacheDescriptor {\n\treadonly id: IntegrationIds;\n\treadonly domain?: string;\n}\n\n/** Cache controls attached to a provider account lookup. */\nexport interface IntegrationManagerCacheOptions {\n\treadonly connectionId?: string;\n\treadonly etag?: string;\n\treadonly expiryOverride?: boolean | number;\n\treadonly expireOnError?: boolean;\n}\n\n/**\n * Optional consumer-owned cache for values reused by the public manager facade.\n *\n * The manager only needs cross-call caching for provider identity lookups. Other caches used by the GitLens\n * extension host are implementation details and deliberately stay out of this contract.\n */\nexport interface IntegrationManagerCacheProvider {\n\tgetCurrentAccount(\n\t\tintegration: IntegrationAccountCacheDescriptor,\n\t\tcacheable: IntegrationManagerCacheLoader<Account>,\n\t\toptions?: IntegrationManagerCacheOptions,\n\t): IntegrationManagerCacheResult<Account>;\n}\n\nfunction loadUncached<T>(loader: IntegrationManagerCacheLoader<T>): IntegrationManagerCacheResult<T> {\n\treturn loader(new CacheController()).value;\n}\n\nconst uncachedIntegrationCacheProvider: IntegrationCacheProvider = {\n\tgetRepositoryMetadata: (_repo, _integration, loader) => loadUncached(loader),\n\tgetRepositoryDefaultBranch: (_repo, _integration, loader) => loadUncached(loader),\n\tgetPullRequestForSha: (_sha, _repo, _integration, loader) => loadUncached(loader),\n\tgetPullRequestForBranch: (_branch, _repo, _integration, loader) => loadUncached(loader),\n\tgetPullRequest: (_id, _resource, _integration, loader) => loadUncached(loader),\n\tgetIssueOrPullRequest: (_id, _type, _resource, _integration, loader) => loadUncached(loader),\n\tgetIssue: (_id, _resource, _integration, loader) => loadUncached(loader),\n\tgetCurrentAccount: (_integration, loader) => loadUncached(loader),\n\t// Nothing is cached, so there is nothing to evict.\n\tdeletePullRequests: () => {},\n};\n\nfunction toIntegrationCacheProvider(cache: IntegrationManagerCacheProvider | undefined): IntegrationCacheProvider {\n\tif (cache == null) return uncachedIntegrationCacheProvider;\n\n\treturn {\n\t\t...uncachedIntegrationCacheProvider,\n\t\tgetCurrentAccount: (integration, loader, options) =>\n\t\t\tcache.getCurrentAccount({ id: integration.id, domain: integration.domain }, loader, options),\n\t};\n}\n\n/**\n * Consumer-facing runtime for {@link createIntegrationManager}.\n *\n * External consumers may omit `cache`; reads then execute their loaders directly without cross-call caching.\n * The extension host's broader integration context remains private to the implementation.\n */\nexport interface IntegrationManagerContext {\n\treadonly storage: IntegrationStorageProvider;\n\treadonly account: AccountProvider;\n\treadonly config: ConfigProvider;\n\treadonly http: HttpProvider;\n\treadonly cache?: IntegrationManagerCacheProvider;\n\treadonly repositories: RepositoriesProvider;\n\treadonly hooks?: IntegrationServiceHooks;\n}\n\nexport type {\n\tClosedPullRequestSweepOptions,\n\tIntegrationManager,\n\tListOrgsOptions,\n\tListProjectsOptions,\n\t// Every option shape a caller has to BUILD is exported, not just the ones the manager returns:\n\t// `manager.js` is not a public subpath, so a type omitted here can't be named by a consumer at all\n\t// (`broadenIssues`' `orgs` needed `ProviderBroadenOrg` and had to be re-declared downstream).\n\tProviderBroadenOrg,\n\tProviderRepositoriesInput,\n\tProviderRepositoryInput,\n\tProviderSweepTarget,\n\tProviderSweepTargetEvent,\n\tPullRequestSweepOptions,\n} from './manager.js';\n\n/**\n * Construct an `@gitlens/integrations` manager bound to the supplied runtime.\n *\n * The runtime is the **single** cross-boundary contract — anything the\n * package needs (HTTP, storage, cache, auth, subscription, telemetry, UI,\n * configuration, environment) flows through it. The package never imports\n * `vscode`, `Container`, or any consumer-internal types.\n *\n * The returned manager owns its internal services; dispose it (or its\n * containing scope) to release every cached integration plus the runtime's\n * own VS Code subscriptions.\n */\nexport function createIntegrationManager(ctx: IntegrationManagerContext): IntegrationManager {\n\treturn createIntegrationService({\n\t\t...ctx,\n\t\tcache: toIntegrationCacheProvider(ctx.cache),\n\t});\n}\n\n// Re-exports for the public API surface.\nexport type {\n\tAccountProvider,\n\tAuthenticationSessionsChangeEvent,\n\tConfigChangeEvent,\n\tConfigProvider,\n\tRepositoriesProvider,\n\tHttpProvider,\n\tIntegrationsRemoteConfig,\n\tIntegrationServiceHooks,\n\tIntegrationStorageProvider,\n} from './context.js';\nexport type { Source, Sources } from './telemetry.js';\nexport type { IntegrationIds, SupportedCloudIntegrationIds } from './constants.js';\nexport type { ConfiguredIntegrationsChangeEvent } from './authentication/configuredIntegrationService.js';\n\n// Authentication contract — what `IntegrationServiceHooks.createAuthenticationProvider`\n// implementers return. Consumers can plug in any auth strategy (manual token,\n// OAuth, host-managed) by returning an object implementing this interface from\n// the hook.\nexport type {\n\tIntegrationAuthenticationProvider,\n\tIntegrationAuthenticationProviderDescriptor,\n\tIntegrationAuthenticationSessionDescriptor,\n} from './authentication/integrationAuthenticationProvider.js';\nexport type {\n\tAuthenticationSessionLike,\n\tCloudIntegrationAuthType,\n\tCloudIntegrationConnection,\n\tCloudIntegrationType,\n\tConfiguredIntegrationDescriptor,\n\tProviderAuthenticationSession,\n} from './authentication/models.js';\n// Provider-id mapping helpers for consumers bridging their own provider ids to `IntegrationIds`\n// (e.g. mapping multi-account connections from `getConfigured` back to a provider) and vice versa.\nexport { toCloudIntegrationType, toIntegrationId } from './authentication/models.js';\n// Domain normalization is part of connection selection and repository resolution; consumers should use the\n// same implementation rather than importing an internal utility subpath or maintaining a divergent copy.\nexport { areDomainsOnSameHost, hostFromDomain } from './utils/domain.utils.js';\n\n// Convenience: wrap a static access token (env var, CLI flag, secret manager)\n// as an `IntegrationAuthenticationProvider`. For OAuth/refresh flows, implement\n// the interface directly — this helper is for non-interactive consumers only.\nexport {\n\tcreateManualTokenAuthProvider,\n\ttype ManualTokenAuthProviderOptions,\n} from './authentication/manualTokenProvider.js';\n\nexport {\n\tGitCloudHostIntegrationId,\n\tGitSelfManagedHostIntegrationId,\n\tIssuesCloudHostIntegrationId,\n\tIssuesSelfManagedHostIntegrationId,\n\tisIntegrationId,\n\tisSupportedCloudIntegrationId,\n} from './constants.js';\n\n// Neutral pagination + warning result types the Kepler ProviderBackend adapter maps to its own DTOs.\n// These carry no `@gitkraken/provider-apis` types, so consumers depend only on `@gitkraken/core-gitlens`.\nexport type {\n\tConnectionStateChangeEvent,\n\tProviderBroadenResult,\n\tProviderPagedResult,\n\tProviderPageInfo,\n\tProviderResult,\n\tProviderSweepResult,\n\tProviderWarning,\n\tProviderWarningCause,\n\tProviderWarningCauseReason,\n\tProviderWarningKind,\n\tProviderWarningOmission,\n\tProviderWarningOmissionKind,\n\tProviderWarningOmissionRecovery,\n\tProviderWarningOmissionScope,\n\tProviderWarningScope,\n\tProviderWarningSelector,\n\tProviderWarningUnreadableItems,\n\tProviderOrganization,\n\tProviderRepositoryShape,\n\tRepositoryIdentity,\n\tRepositoryResolution,\n\tRepositoryResolutionStatus,\n\tResolveRepositoryResult,\n} from './results.js';\n// Runtime enums — re-exported as values (not `export type`) so consumers can read their members.\nexport { IssueFilter, PullRequestFilter } from './providerFilters.js';\n// The filtered issue search's criteria model and the capability table that says which of it a provider honors.\n// String unions and plain interfaces, so a consumer builds criteria without importing an internal subpath.\nexport type { IssueSearchCapabilities, IssueSearchCriteria, IssueSearchRelationship } from './providerFilters.js';\n// Account-wide pull-request search criteria and the per-provider capability table.\nexport type { PullRequestSearchCapabilities, PullRequestSearchCriteria } from './providerFilters.js';\n// The count-only issue and pull-request probes' input and result shapes.\nexport type {\n\tIssueCountResult,\n\tIssueCountScope,\n\tPullRequestCountResult,\n\tPullRequestCountScope,\n} from './reads/counts.js';\nexport type { IssueBatchResult, IssueBatchTarget } from './reads/issueBatch.js';\nexport type { PullRequestBatchResult, PullRequestBatchTarget } from './reads/pullRequestBatch.js';\nexport type { IssueEtagInclude, PullRequestEtagInclude } from './models/integration.js';\nexport type { PullRequestBranchResult, PullRequestBranchTarget } from './reads/pullRequestBranches.js';\n// The current-account read's result, and the account shape every identity-bearing read already returns.\nexport type { CurrentAccountResult } from './reads/currentAccount.js';\nexport type { Account } from '@gitlens/git/models/author.js';\n// Cross-provider PR/issue state filters (string unions in the git models).\nexport type { PullRequestStateFilter } from '@gitlens/git/models/pullRequest.js';\nexport type { IssueStateFilter } from '@gitlens/git/models/issue.js';\n// Which read produced a row, and which of its fields that read fetched.\nexport type { PullRequestProjection } from '@gitlens/git/models/pullRequest.js';\nexport type { IssueProjection } from '@gitlens/git/models/issue.js';\nexport type { FieldPresence, IssueFieldGroup, PullRequestFieldGroup } from './fieldPresence.js';\nexport { getIssueFieldPresence, getPullRequestFieldPresence } from './fieldPresence.js';\n"],"mappings":";;;;;;;;;;AA8DA,SAAS,aAAgB,QAA4E;CACpG,OAAO,OAAO,IAAI,gBAAgB,CAAC,CAAC,CAAC;AACtC;AAEA,MAAM,mCAA6D;CAClE,wBAAwB,OAAO,cAAc,WAAW,aAAa,MAAM;CAC3E,6BAA6B,OAAO,cAAc,WAAW,aAAa,MAAM;CAChF,uBAAuB,MAAM,OAAO,cAAc,WAAW,aAAa,MAAM;CAChF,0BAA0B,SAAS,OAAO,cAAc,WAAW,aAAa,MAAM;CACtF,iBAAiB,KAAK,WAAW,cAAc,WAAW,aAAa,MAAM;CAC7E,wBAAwB,KAAK,OAAO,WAAW,cAAc,WAAW,aAAa,MAAM;CAC3F,WAAW,KAAK,WAAW,cAAc,WAAW,aAAa,MAAM;CACvE,oBAAoB,cAAc,WAAW,aAAa,MAAM;CAEhE,0BAA0B,CAAC;AAC5B;AAEA,SAAS,2BAA2B,OAA8E;CACjH,IAAI,SAAS,MAAM,OAAO;CAE1B,OAAO;EACN,GAAG;EACH,oBAAoB,aAAa,QAAQ,YACxC,MAAM,kBAAkB;GAAE,IAAI,YAAY;GAAI,QAAQ,YAAY;EAAO,GAAG,QAAQ,OAAO;CAC7F;AACD;;;;;;;;;;;;;AA8CA,SAAgB,yBAAyB,KAAoD;CAC5F,OAAO,yBAAyB;EAC/B,GAAG;EACH,OAAO,2BAA2B,IAAI,KAAK;CAC5C,CAAC;AACF"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../../plus/integrations/src/index.ts"],"sourcesContent":["// Public facade for `@gitlens/integrations`.\n//\n// External consumers should import from this entry point only, not from the\n// package's internal subpaths, with one exception: the lightweight, token-scoped\n// read API is a supported public subpath (`./lite.js`). It's kept out of this\n// facade on purpose so importing the session-managed manager doesn't eagerly pull\n// in every provider API client. The internal classes (IntegrationService,\n// IntegrationAuthenticationService, etc.) are not part of the public API and\n// may be refactored without semver bumps.\n\nimport type { Account } from '@gitlens/git/models/author.js';\nimport { CacheController } from '@gitlens/utils/promiseCache.js';\nimport type { IntegrationIds } from './constants.js';\nimport type {\n\tAccountProvider,\n\tConfigProvider,\n\tHttpProvider,\n\tIntegrationCacheProvider,\n\tIntegrationServiceHooks,\n\tIntegrationStorageProvider,\n\tRepositoriesProvider,\n} from './context.js';\nimport { createIntegrationService } from './integrationService.js';\nimport type { IntegrationManager } from './manager.js';\n\nexport type { Autolink, AutolinkReference, DynamicAutolinkReference, RefSet } from '@gitlens/git/models/autolink.js';\nexport type { ProviderReference } from '@gitlens/git/models/remoteProvider.js';\n\n/** A cached provider value, which may still be resolving. */\nexport type IntegrationManagerCacheResult<T> = Promise<T | undefined> | T | undefined;\n\n/** Produces an account value on a cache miss. */\nexport type IntegrationManagerCacheLoader<T> = (cacheable: CacheController) => {\n\tvalue: IntegrationManagerCacheResult<T>;\n\texpiresAt?: number;\n};\n\n/** Stable integration identity supplied to the consumer-owned account cache. */\nexport interface IntegrationAccountCacheDescriptor {\n\treadonly id: IntegrationIds;\n\treadonly domain?: string;\n}\n\n/** Cache controls attached to a provider account lookup. */\nexport interface IntegrationManagerCacheOptions {\n\treadonly connectionId?: string;\n\treadonly etag?: string;\n\treadonly expiryOverride?: boolean | number;\n\treadonly expireOnError?: boolean;\n}\n\n/**\n * Optional consumer-owned cache for values reused by the public manager facade.\n *\n * The manager only needs cross-call caching for provider identity lookups. Other caches used by the GitLens\n * extension host are implementation details and deliberately stay out of this contract.\n */\nexport interface IntegrationManagerCacheProvider {\n\tgetCurrentAccount(\n\t\tintegration: IntegrationAccountCacheDescriptor,\n\t\tcacheable: IntegrationManagerCacheLoader<Account>,\n\t\toptions?: IntegrationManagerCacheOptions,\n\t): IntegrationManagerCacheResult<Account>;\n}\n\nfunction loadUncached<T>(loader: IntegrationManagerCacheLoader<T>): IntegrationManagerCacheResult<T> {\n\treturn loader(new CacheController()).value;\n}\n\nconst uncachedIntegrationCacheProvider: IntegrationCacheProvider = {\n\tgetRepositoryMetadata: (_repo, _integration, loader) => loadUncached(loader),\n\tgetRepositoryDefaultBranch: (_repo, _integration, loader) => loadUncached(loader),\n\tgetPullRequestForSha: (_sha, _repo, _integration, loader) => loadUncached(loader),\n\tgetPullRequestForBranch: (_branch, _repo, _integration, loader) => loadUncached(loader),\n\tgetPullRequest: (_id, _resource, _integration, loader) => loadUncached(loader),\n\tgetIssueOrPullRequest: (_id, _type, _resource, _integration, loader) => loadUncached(loader),\n\tgetIssue: (_id, _resource, _integration, loader) => loadUncached(loader),\n\tgetCurrentAccount: (_integration, loader) => loadUncached(loader),\n\t// Nothing is cached, so there is nothing to evict.\n\tdeletePullRequests: () => {},\n};\n\nfunction toIntegrationCacheProvider(cache: IntegrationManagerCacheProvider | undefined): IntegrationCacheProvider {\n\tif (cache == null) return uncachedIntegrationCacheProvider;\n\n\treturn {\n\t\t...uncachedIntegrationCacheProvider,\n\t\tgetCurrentAccount: (integration, loader, options) =>\n\t\t\tcache.getCurrentAccount({ id: integration.id, domain: integration.domain }, loader, options),\n\t};\n}\n\n/**\n * Consumer-facing runtime for {@link createIntegrationManager}.\n *\n * External consumers may omit `cache`; reads then execute their loaders directly without cross-call caching.\n * The extension host's broader integration context remains private to the implementation.\n */\nexport interface IntegrationManagerContext {\n\treadonly storage: IntegrationStorageProvider;\n\treadonly account: AccountProvider;\n\treadonly config: ConfigProvider;\n\treadonly http: HttpProvider;\n\treadonly cache?: IntegrationManagerCacheProvider;\n\treadonly repositories: RepositoriesProvider;\n\treadonly hooks?: IntegrationServiceHooks;\n}\n\nexport type {\n\tClosedPullRequestSweepOptions,\n\tGetAutolinkReferencesOptions,\n\tIntegrationManager,\n\tListOrgsOptions,\n\tListProjectsOptions,\n\t// Every option shape a caller has to BUILD is exported, not just the ones the manager returns:\n\t// `manager.js` is not a public subpath, so a type omitted here can't be named by a consumer at all\n\t// (`broadenIssues`' `orgs` needed `ProviderBroadenOrg` and had to be re-declared downstream).\n\tProviderBroadenOrg,\n\tProviderRepositoriesInput,\n\tProviderRepositoryInput,\n\tProviderSweepTarget,\n\tProviderSweepTargetEvent,\n\tPullRequestSweepOptions,\n} from './manager.js';\n\n/**\n * Construct an `@gitlens/integrations` manager bound to the supplied runtime.\n *\n * The runtime is the **single** cross-boundary contract — anything the\n * package needs (HTTP, storage, cache, auth, subscription, telemetry, UI,\n * configuration, environment) flows through it. The package never imports\n * `vscode`, `Container`, or any consumer-internal types.\n *\n * The returned manager owns its internal services; dispose it (or its\n * containing scope) to release every cached integration plus the runtime's\n * own VS Code subscriptions.\n */\nexport function createIntegrationManager(ctx: IntegrationManagerContext): IntegrationManager {\n\treturn createIntegrationService({\n\t\t...ctx,\n\t\tcache: toIntegrationCacheProvider(ctx.cache),\n\t});\n}\n\n// Re-exports for the public API surface.\nexport type {\n\tAccountProvider,\n\tAuthenticationSessionsChangeEvent,\n\tConfigChangeEvent,\n\tConfigProvider,\n\tRepositoriesProvider,\n\tHttpProvider,\n\tIntegrationsRemoteConfig,\n\tIntegrationServiceHooks,\n\tIntegrationStorageProvider,\n} from './context.js';\nexport type { Source, Sources } from './telemetry.js';\nexport type { IntegrationIds, SupportedCloudIntegrationIds } from './constants.js';\nexport type { ConfiguredIntegrationsChangeEvent } from './authentication/configuredIntegrationService.js';\n\n// Authentication contract — what `IntegrationServiceHooks.createAuthenticationProvider`\n// implementers return. Consumers can plug in any auth strategy (manual token,\n// OAuth, host-managed) by returning an object implementing this interface from\n// the hook.\nexport type {\n\tIntegrationAuthenticationProvider,\n\tIntegrationAuthenticationProviderDescriptor,\n\tIntegrationAuthenticationSessionDescriptor,\n} from './authentication/integrationAuthenticationProvider.js';\nexport type {\n\tAuthenticationSessionLike,\n\tCloudIntegrationAuthType,\n\tCloudIntegrationConnection,\n\tCloudIntegrationType,\n\tConfiguredIntegrationDescriptor,\n\tProviderAuthenticationSession,\n} from './authentication/models.js';\n// Provider-id mapping helpers for consumers bridging their own provider ids to `IntegrationIds`\n// (e.g. mapping multi-account connections from `getConfigured` back to a provider) and vice versa.\nexport { toCloudIntegrationType, toIntegrationId } from './authentication/models.js';\n// Domain normalization is part of connection selection and repository resolution; consumers should use the\n// same implementation rather than importing an internal utility subpath or maintaining a divergent copy.\nexport { areDomainsOnSameHost, hostFromDomain } from './utils/domain.utils.js';\n\n// Convenience: wrap a static access token (env var, CLI flag, secret manager)\n// as an `IntegrationAuthenticationProvider`. For OAuth/refresh flows, implement\n// the interface directly — this helper is for non-interactive consumers only.\nexport {\n\tcreateManualTokenAuthProvider,\n\ttype ManualTokenAuthProviderOptions,\n} from './authentication/manualTokenProvider.js';\n\nexport {\n\tGitCloudHostIntegrationId,\n\tGitSelfManagedHostIntegrationId,\n\tIssuesCloudHostIntegrationId,\n\tIssuesSelfManagedHostIntegrationId,\n\tisIntegrationId,\n\tisSupportedCloudIntegrationId,\n} from './constants.js';\n\n// Neutral pagination + warning result types the Kepler ProviderBackend adapter maps to its own DTOs.\n// These carry no `@gitkraken/provider-apis` types, so consumers depend only on `@gitkraken/core-gitlens`.\nexport type {\n\tConnectionStateChangeEvent,\n\tProviderBroadenResult,\n\tProviderPagedResult,\n\tProviderPageInfo,\n\tProviderResult,\n\tProviderSweepResult,\n\tProviderWarning,\n\tProviderWarningCause,\n\tProviderWarningCauseReason,\n\tProviderWarningKind,\n\tProviderWarningOmission,\n\tProviderWarningOmissionKind,\n\tProviderWarningOmissionRecovery,\n\tProviderWarningOmissionScope,\n\tProviderWarningScope,\n\tProviderWarningSelector,\n\tProviderWarningUnreadableItems,\n\tProviderOrganization,\n\tProviderRepositoryShape,\n\tRepositoryIdentity,\n\tRepositoryResolution,\n\tRepositoryResolutionStatus,\n\tResolveRepositoryResult,\n} from './results.js';\n// Runtime enums — re-exported as values (not `export type`) so consumers can read their members.\nexport { IssueFilter, PullRequestFilter } from './providerFilters.js';\n// The filtered issue search's criteria model and the capability table that says which of it a provider honors.\n// String unions and plain interfaces, so a consumer builds criteria without importing an internal subpath.\nexport type { IssueSearchCapabilities, IssueSearchCriteria, IssueSearchRelationship } from './providerFilters.js';\n// Account-wide pull-request search criteria and the per-provider capability table.\nexport type { PullRequestSearchCapabilities, PullRequestSearchCriteria } from './providerFilters.js';\n// The count-only issue and pull-request probes' input and result shapes.\nexport type {\n\tIssueCountResult,\n\tIssueCountScope,\n\tPullRequestCountResult,\n\tPullRequestCountScope,\n} from './reads/counts.js';\nexport type { IssueBatchResult, IssueBatchTarget } from './reads/issueBatch.js';\nexport type { PullRequestBatchResult, PullRequestBatchTarget } from './reads/pullRequestBatch.js';\nexport type { IssueEtagInclude, PullRequestEtagInclude } from './models/integration.js';\nexport type { PullRequestBranchResult, PullRequestBranchTarget } from './reads/pullRequestBranches.js';\n// The current-account read's result, and the account shape every identity-bearing read already returns.\nexport type { CurrentAccountResult } from './reads/currentAccount.js';\nexport type { Account } from '@gitlens/git/models/author.js';\n// Cross-provider PR/issue state filters (string unions in the git models).\nexport type { PullRequestStateFilter } from '@gitlens/git/models/pullRequest.js';\nexport type { IssueStateFilter } from '@gitlens/git/models/issue.js';\n// Which read produced a row, and which of its fields that read fetched.\nexport type { PullRequestProjection } from '@gitlens/git/models/pullRequest.js';\nexport type { IssueProjection } from '@gitlens/git/models/issue.js';\nexport type { FieldPresence, IssueFieldGroup, PullRequestFieldGroup } from './fieldPresence.js';\nexport { getIssueFieldPresence, getPullRequestFieldPresence } from './fieldPresence.js';\n"],"mappings":";;;;;;;;;;AAiEA,SAAS,aAAgB,QAA4E;CACpG,OAAO,OAAO,IAAI,gBAAgB,CAAC,CAAC,CAAC;AACtC;AAEA,MAAM,mCAA6D;CAClE,wBAAwB,OAAO,cAAc,WAAW,aAAa,MAAM;CAC3E,6BAA6B,OAAO,cAAc,WAAW,aAAa,MAAM;CAChF,uBAAuB,MAAM,OAAO,cAAc,WAAW,aAAa,MAAM;CAChF,0BAA0B,SAAS,OAAO,cAAc,WAAW,aAAa,MAAM;CACtF,iBAAiB,KAAK,WAAW,cAAc,WAAW,aAAa,MAAM;CAC7E,wBAAwB,KAAK,OAAO,WAAW,cAAc,WAAW,aAAa,MAAM;CAC3F,WAAW,KAAK,WAAW,cAAc,WAAW,aAAa,MAAM;CACvE,oBAAoB,cAAc,WAAW,aAAa,MAAM;CAEhE,0BAA0B,CAAC;AAC5B;AAEA,SAAS,2BAA2B,OAA8E;CACjH,IAAI,SAAS,MAAM,OAAO;CAE1B,OAAO;EACN,GAAG;EACH,oBAAoB,aAAa,QAAQ,YACxC,MAAM,kBAAkB;GAAE,IAAI,YAAY;GAAI,QAAQ,YAAY;EAAO,GAAG,QAAQ,OAAO;CAC7F;AACD;;;;;;;;;;;;;AA+CA,SAAgB,yBAAyB,KAAoD;CAC5F,OAAO,yBAAyB;EAC/B,GAAG;EACH,OAAO,2BAA2B,IAAI,KAAK;CAC5C,CAAC;AACF"}

package/dist/plus/integrations/integrationService.d.ts

@@ -1,12 +1,13 @@
 import { Disposable } from "../../utils/disposable.js";
 import { Event } from "../../utils/event.js";
+import { RefSet } from "../../git/models/autolink.js";
 import { RemoteProviderId } from "../../git/models/remoteProvider.js";
 import { GitRemote } from "../../git/models/remote.js";
 import { IssueSearchCriteria, IssueShape, IssueSorting, IssueStateFilter } from "../../git/models/issue.js";
 import { PullRequest, PullRequestFilter, PullRequestSearchCriteria, PullRequestShape, PullRequestStateFilter } from "../../git/models/pullRequest.js";
 import { Account } from "../../git/models/author.js";
 import { GitHubApi } from "../git-github/api/github.js";
-import { ConfiguredIntegrationDescriptor } from "./authentication/models.js";
+import { ConfiguredIntegrationDescriptor, SessionPublication } from "./authentication/models.js";
 import { CloudGitSelfManagedHostIntegrationIds, GitCloudHostIntegrationId, GitSelfManagedHostIntegrationId, IntegrationIds, IssuesCloudHostIntegrationId, SupportedCloudIntegrationIds } from "./constants.js";
 import { Source } from "./telemetry.js";
 import { ConfiguredIntegrationService, ConfiguredIntegrationsChangeEvent } from "./authentication/configuredIntegrationService.js";
@@ -23,7 +24,7 @@ import { SupportedFilters } from "./reads/filters.js";
 import { IssueBatchResult, IssueBatchTarget } from "./reads/issueBatch.js";
 import { PullRequestBatchResult, PullRequestBatchTarget } from "./reads/pullRequestBatch.js";
 import { PullRequestBranchResult, PullRequestBranchTarget } from "./reads/pullRequestBranches.js";
-import { ClosedPullRequestSweepOptions, ListOrgsOptions, ListProjectsOptions, ProviderBroadenOrg, PullRequestSweepOptions } from "./manager.js";
+import { ClosedPullRequestSweepOptions, GetAutolinkReferencesOptions, ListOrgsOptions, ListProjectsOptions, ProviderBroadenOrg, PullRequestSweepOptions } from "./manager.js";
 import "./providers/github/github.js";
 import { ApiClients } from "./providers/apiClients.js";
 import { IntegrationAuthenticationService } from "./authentication/integrationAuthenticationService.js";
@@ -156,9 +157,11 @@ export declare class IntegrationService implements Disposable, RepositoryResolut
    * provider (the integration's primary-only sync path would never reach a secondary account), while a
    * primary read syncs via the integration's own cloud-connection machinery. Either way the integration's cached
    * discovery (a tracker's project list) is dropped, so the read sees projects created or deleted since.
-   * Best-effort — a failed sync is swallowed so the read still proceeds (and surfaces its own warning).
+   * Best-effort by default; strict discovery can require refresh success before trusting the resolved identity.
    */
-  forceRefreshIfRequested(integration: Integration, forceSync: boolean | undefined, connectionId: string | undefined): Promise<void>;
+  forceRefreshIfRequested(integration: Integration, forceSync: boolean | undefined, connectionId: string | undefined, options?: {
+    throwOnFailure?: boolean;
+  }): Promise<void>;
   /**
    * Lists the orgs/workspaces/groups (and issue-tracker resources) visible to the user, unified into
    * {@link ProviderOrganization}. Scoped to `providerId` when given, otherwise fanned out over every
@@ -173,6 +176,7 @@ export declare class IntegrationService implements Disposable, RepositoryResolut
    * trackers and Azure DevOps. Providers with no project tier (GitHub, GitLab, Bitbucket) contribute nothing.
    */
   listProjects(options?: ListProjectsOptions): Promise<ProviderResult<ProviderOrganization>>;
+  getAutolinkReferences(options: GetAutolinkReferencesOptions): Promise<RefSet | undefined>;
   /**
    * Lists repositories under an org for a git-host provider, one page at a time. Pass `page` (1-based)
    * to advance; the returned `cursor` is only meaningful for cursor-only hosts.
@@ -501,6 +505,7 @@ export declare class IntegrationService implements Disposable, RepositoryResolut
   private getCloudConnectionState;
   private findCachedById;
   private getCachedForDomain;
+  onSessionPublishing(id: IntegrationIds, publication: SessionPublication, domains: readonly (string | undefined)[]): void;
   private getConfiguredCloudConnection;
   private getConfiguredConnectionDomain;
   private getCloudPrimaryConnectionIdsByDomain;

package/dist/plus/integrations/integrationService.js

@@ -17,6 +17,7 @@ import { providersMetadata } from "./providers/models.js";
 import { ConfiguredIntegrationService } from "./authentication/configuredIntegrationService.js";
 import { IntegrationAuthenticationService } from "./authentication/integrationAuthenticationService.js";
 import { createApiClients } from "./providers/apiClients.js";
+import { getAutolinkReferences } from "./reads/autolinks.js";
 import { noConnectionWarning } from "./reads/warnings.js";
 import { getSupportedFilters } from "./reads/filters.js";
 import { broadenIssues } from "./reads/broaden.js";
@@ -66,7 +67,9 @@ var IntegrationService = class {
 		this.authenticationService = authenticationService;
 		this.configuredIntegrationService = configuredIntegrationService;
 		this.ctx = ctx;
-		this._disposable = fromDisposables(ctx.config.onDidChange((e) => {
+		this._disposable = fromDisposables(configuredIntegrationService.onWillChangeSession(({ integrationId, session, previousDomain }) => {
+			this.onSessionPublishing(integrationId, { session }, [session.domain, previousDomain]);
+		}), ctx.config.onDidChange((e) => {
 			if (e.remotes) this._ignoreSSLErrors.clear();
 		}), ctx.account.onDidChangeSessions(this.onAuthenticationSessionsChanged, this), ctx.account.onDidCheckIn(this.onUserCheckedIn, this), ctx.account.onDidChange(this.onSubscriptionChanged, this), this._onDidChangeIntegrationConnection.event(this.onIntegrationConnectionChanged, this));
 	}
@@ -551,11 +554,11 @@ var IntegrationService = class {
 	* provider (the integration's primary-only sync path would never reach a secondary account), while a
 	* primary read syncs via the integration's own cloud-connection machinery. Either way the integration's cached
 	* discovery (a tracker's project list) is dropped, so the read sees projects created or deleted since.
-	* Best-effort — a failed sync is swallowed so the read still proceeds (and surfaces its own warning).
+	* Best-effort by default; strict discovery can require refresh success before trusting the resolved identity.
 	*/
-	async forceRefreshIfRequested(integration, forceSync, connectionId) {
+	async forceRefreshIfRequested(integration, forceSync, connectionId, options) {
 		if (forceSync !== true) return;
-		integration.invalidateDiscoveryCaches();
+		integration.invalidateDiscoveryForConnection(connectionId);
 		try {
 			if (connectionId != null) {
 				const authProvider = await this.authenticationService.get(integration.authProvider.id);
@@ -567,9 +570,17 @@ var IntegrationService = class {
 				if (await authProvider?.getSession(descriptor, {
 					sync: true,
 					refetch: true
-				}) == null) await authProvider?.deleteSession(descriptor);
-			} else await integration.syncCloudConnection("connected", true);
-		} catch {}
+				}) == null) {
+					if (options?.throwOnFailure) throw new Error("No refreshed provider session");
+					await authProvider?.deleteSession(descriptor);
+				}
+			} else {
+				const failure = await integration.syncCloudConnection("connected", true);
+				if (failure != null) throw failure;
+			}
+		} catch (ex) {
+			if (options?.throwOnFailure) throw ex;
+		}
 	}
 	/**
 	* Lists the orgs/workspaces/groups (and issue-tracker resources) visible to the user, unified into
@@ -589,6 +600,9 @@ var IntegrationService = class {
 	async listProjects(options) {
 		return listProjects(this, options);
 	}
+	async getAutolinkReferences(options) {
+		return getAutolinkReferences(this, options);
+	}
 	/**
 	* Lists repositories under an org for a git-host provider, one page at a time. Pass `page` (1-based)
 	* to advance; the returned `cursor` is only meaningful for cursor-only hosts.
@@ -869,6 +883,15 @@ var IntegrationService = class {
 	getCachedForDomain(id, domain) {
 		return isSelfManagedHostIntegrationId(id) ? this.getCached(id, domain) : this.findCachedById(id);
 	}
+	onSessionPublishing(id, publication, domains) {
+		const notified = /* @__PURE__ */ new Set();
+		for (const domain of domains) {
+			const integration = this.getCachedForDomain(id, domain == null ? domain : hostFromDomain(domain) ?? domain);
+			if (integration == null || notified.has(integration)) continue;
+			notified.add(integration);
+			integration.onSessionPublishing(publication);
+		}
+	}
 	getConfiguredCloudConnection(id, connectionId) {
 		const connection = this.configuredIntegrationService.getConfigured(id, { cloud: true }).find((c) => c.id === connectionId);
 		if (connection == null) throw new Error(`Connection '${connectionId}' is not configured for '${id}'`);