@gitkraken/core-gitlens 0.4.0 → 0.4.101

package/src/plus/integrations/providers/models.ts

@@ -9,13 +9,22 @@ import type {
 	Bitbucket,
 	BitbucketServer,
 	BitbucketWorkspaceStub,
+	CollectionMetadata,
+	CursorPageInput,
 	EnterpriseOptions,
 	GetRepoInput,
+	GitBuildStatusState as GitBuildStatusStateType,
 	GitHub,
+	GitIssueState as GitIssueStateType,
 	GitLab,
+	GitLabGroup,
 	GitMergeStrategy,
 	GitPullRequest,
+	GitPullRequestMergeableState as GitPullRequestMergeableStateType,
+	GitPullRequestReviewState as GitPullRequestReviewStateType,
+	GitPullRequestState as GitPullRequestStateType,
 	GitRepository,
+	GitRepositoryRemoteInfo,
 	Jira,
 	JiraProject,
 	JiraResource,
@@ -23,6 +32,7 @@ import type {
 	LinearOrganization,
 	LinearTeam,
 	NumberedPageInput,
+	Organization,
 	Issue as ProviderApiIssue,
 	PullRequestWithUniqueID,
 	RequestFunction,
@@ -31,23 +41,19 @@ import type {
 	SetPullRequestInput,
 	Trello,
 } from '@gitkraken/provider-apis';
-import {
-	GitBuildStatusState,
-	GitPullRequestMergeableState,
-	GitPullRequestReviewState,
-	GitPullRequestState,
-} from '@gitkraken/provider-apis';
-import { EntityIdentifierUtils } from '@gitkraken/provider-apis/entity-identifiers';
-import { GitProviderUtils } from '@gitkraken/provider-apis/provider-utils';
+import entityIdentifiersModule from '@gitkraken/provider-apis/entity-identifiers';
+import providerUtilsModule from '@gitkraken/provider-apis/provider-utils';
 import type { Account as UserAccount } from '../../../git/models/author.js';
-import type { IssueMember, IssueProject, IssueShape } from '../../../git/models/issue.js';
+import type { IssueMember, IssueProject, IssueShape, IssueStateFilter } from '../../../git/models/issue.js';
 import { Issue, RepositoryAccessLevel } from '../../../git/models/issue.js';
 import type {
 	PullRequestMember,
+	PullRequestRef,
 	PullRequestRefs,
 	PullRequestRepositoryIdentityDescriptor,
 	PullRequestReviewer,
 	PullRequestState,
+	PullRequestStateFilter,
 } from '../../../git/models/pullRequest.js';
 import {
 	PullRequest,
@@ -57,7 +63,9 @@ import {
 	PullRequestStatusCheckRollupState,
 } from '../../../git/models/pullRequest.js';
 import type { Provider, ProviderReference } from '../../../git/models/remoteProvider.js';
+import type { ProviderScope } from '../../../git/models/resourceDescriptor.js';
 import { gitSuffixRegex } from '../../../git/utils/remote.utils.js';
+import type { PagedResult } from '../../../utils/paging.js';
 import { equalsIgnoreCase } from '../../../utils/string.js';
 import type { IntegrationIds } from '../constants.js';
 import {
@@ -66,8 +74,69 @@ import {
 	IssuesCloudHostIntegrationId,
 } from '../constants.js';
 import type { Integration, IntegrationType } from '../models/integration.js';
+import { IssueFilter, PullRequestFilter } from '../providerFilters.js';
+
+export { IssueFilter, PullRequestFilter } from '../providerFilters.js';
+import type { ProviderRepositoryShape } from '../results.js';
+
+export type { ProviderOrganization, ProviderRepositoryShape } from '../results.js';
 import { getEntityIdentifierInput } from './utils.js';
 
+type GitBuildStatusState = GitBuildStatusStateType;
+type GitIssueState = GitIssueStateType;
+type GitPullRequestMergeableState = GitPullRequestMergeableStateType;
+type GitPullRequestReviewState = GitPullRequestReviewStateType;
+type GitPullRequestState = GitPullRequestStateType;
+
+const { EntityIdentifierUtils } = entityIdentifiersModule;
+const { GitProviderUtils } = providerUtilsModule;
+
+// Local runtime copies of the `@gitkraken/provider-apis` string enums. Duplicated (not imported as
+// values) because the SDK ships as CJS whose named enum exports can't be statically imported as ESM
+// values from the bundled `dist`. Exported so the enum-parity test can deep-equal them against the
+// real SDK enums and turn any upstream drift into a test failure instead of a silent mismatch.
+export const GitBuildStatusState = {
+	ActionRequired: 'ACTION_REQUIRED' as GitBuildStatusState,
+	Cancelled: 'CANCELLED' as GitBuildStatusState,
+	Error: 'ERROR' as GitBuildStatusState,
+	Failed: 'FAILED' as GitBuildStatusState,
+	Pending: 'PENDING' as GitBuildStatusState,
+	Running: 'RUNNING' as GitBuildStatusState,
+	Skipped: 'SKIPPED' as GitBuildStatusState,
+	Success: 'SUCCESS' as GitBuildStatusState,
+	Warning: 'WARNING' as GitBuildStatusState,
+	OptionalActionRequired: 'OPTIONAL_ACTION_REQUIRED' as GitBuildStatusState,
+} as const;
+
+export const GitIssueState = {
+	Open: 'OPEN' as GitIssueState,
+	Closed: 'CLOSED' as GitIssueState,
+} as const;
+
+export const GitPullRequestState = {
+	Open: 'OPEN' as GitPullRequestState,
+	Closed: 'CLOSED' as GitPullRequestState,
+	Merged: 'MERGED' as GitPullRequestState,
+} as const;
+
+export const GitPullRequestReviewState = {
+	Approved: 'APPROVED' as GitPullRequestReviewState,
+	ChangesRequested: 'CHANGES_REQUESTED' as GitPullRequestReviewState,
+	Commented: 'COMMENTED' as GitPullRequestReviewState,
+	ReviewRequested: 'REVIEW_REQUESTED' as GitPullRequestReviewState,
+} as const;
+
+export const GitPullRequestMergeableState = {
+	Behind: 'BEHIND' as GitPullRequestMergeableState,
+	Blocked: 'BLOCKED' as GitPullRequestMergeableState,
+	Conflicts: 'CONFLICTS' as GitPullRequestMergeableState,
+	FailingChecks: 'FAILING_CHECKS' as GitPullRequestMergeableState,
+	Mergeable: 'MERGEABLE' as GitPullRequestMergeableState,
+	Unknown: 'UNKNOWN' as GitPullRequestMergeableState,
+	UnknownAndBlocked: 'UNKNOWN_AND_BLOCKED' as GitPullRequestMergeableState,
+	Unstable: 'UNSTABLE' as GitPullRequestMergeableState,
+} as const;
+
 /**
  * Forward-only host type — the package only sets `EnrichablePullRequest.enrichable`
  * for the host to consume. Typed as `any` to avoid duplicating the host's
@@ -89,25 +158,79 @@ export type ProviderLinearOrganization = LinearOrganization;
 export type ProviderAzureProject = AzureProject;
 export type ProviderAzureResource = AzureOrganization;
 export type ProviderBitbucketResource = BitbucketWorkspaceStub;
+export type ProviderGitHubOrganization = Organization;
+export type ProviderGitLabGroup = GitLabGroup;
+
+/**
+ * Returns an account-wide PR identity. Provider PR ids are commonly scoped to a repository or organization,
+ * so an id alone is never safe for deduplication across a multi-repository fan-out. Repository identity wins
+ * when available so the same row still deduplicates when a later facet adds or removes its URL.
+ */
+export function getProviderPullRequestIdentity(
+	pr: Pick<ProviderPullRequest, 'id' | 'repository' | 'url'>,
+): string | undefined {
+	const repository = pr.repository as
+		| {
+				id?: string | number;
+				name?: string;
+				namespace?: string;
+				owner?: { login?: string } | string;
+				project?: string;
+		  }
+		| undefined;
+	const urlIdentity = pr.url != null && pr.url.trim() !== '' ? `url:${pr.url}` : undefined;
+	if (repository == null) return urlIdentity;
+
+	const owner = typeof repository.owner === 'string' ? repository.owner : repository.owner?.login;
+	const repositoryId = repository.id != null ? String(repository.id).trim() : '';
+	if (repositoryId !== '') return `repository:${repositoryId}:pull-request:${pr.id}`;
+
+	const name = repository.name?.trim() ?? '';
+	const namespace = (repository.namespace ?? owner)?.trim() ?? '';
+	const project = repository.project?.trim() ?? '';
+	if (name !== '' && (namespace !== '' || project !== '')) {
+		return `repository:${namespace}/${project}/${name}:pull-request:${pr.id}`;
+	}
+	return urlIdentity;
+}
+
+export type ProviderHierarchyResult<T> = PagedResult<T> & {
+	readonly truncated?: boolean;
+	/**
+	 * SDK collection metadata merged across the drained pages. Independent from the local `truncated` backstop:
+	 * a page-drain backstop stays visible even if every fetched page reported `complete`, and SDK
+	 * incompleteness is preserved even when the drain finished within its page budget.
+	 */
+	readonly metadata?: CollectionMetadata;
+};
+
+/**
+ * A normalized {@link PagedResult} that additionally carries the SDK's collection {@link CollectionMetadata}
+ * (completeness + per-scope failures). Named to avoid colliding with the public ProviderBackend
+ * `ProviderPagedResult` in `results.ts`: this is the integration-local carrier between the `ProvidersApi`
+ * boundary and the code that maps metadata into warnings/truncation. `metadata` is optional so providers and
+ * test doubles that predate the SDK metadata contract keep behaving exactly as before.
+ */
+export type ProviderApiPagedResult<T> = PagedResult<T> & {
+	readonly metadata?: CollectionMetadata;
+};
+
+/**
+ * A non-paged collection result carrying SDK {@link CollectionMetadata}. Used for fan-out reads that return a
+ * flat set of values with completeness/failure metadata but no provider-native pagination (e.g. Jira project
+ * discovery across resources, Trello board search).
+ */
+export type ProviderApiCollectionResult<T> = {
+	readonly values: NonNullable<T>[];
+	readonly metadata?: CollectionMetadata;
+};
+
 export const ProviderPullRequestReviewState = GitPullRequestReviewState;
 export const ProviderBuildStatusState = GitBuildStatusState;
 export type ProviderRequestFunction = RequestFunction;
 export type ProviderRequestResponse<T> = Response<T>;
 export type ProviderRequestOptions = RequestOptions;
 
-export enum PullRequestFilter {
-	Author = 'author',
-	Assignee = 'assignee',
-	ReviewRequested = 'review-requested',
-	Mention = 'mention',
-}
-
-export enum IssueFilter {
-	Author = 'author',
-	Assignee = 'assignee',
-	Mention = 'mention',
-}
-
 export enum PagingMode {
 	Project = 'project',
 	Repo = 'repo',
@@ -134,16 +257,37 @@ export interface GetPullRequestsOptions {
 	authorLogin?: string;
 	assigneeLogins?: string[];
 	reviewRequestedLogin?: string;
+	// Reviewer filters keyed differently per provider: GitHub/GitLab use reviewRequestedLogin (login),
+	// Bitbucket/Azure DevOps use reviewerId (account id), Bitbucket Server uses reviewerLogin (login).
+	reviewerId?: string;
+	reviewerLogin?: string;
 	mentionLogin?: string;
+	// PR states to include; when omitted the provider returns its default (open only).
+	states?: GitPullRequestState[];
 	query?: string;
 	cursor?: string; // stringified JSON object of type { type: 'cursor' | 'page'; value: string | number } | {}
 	baseUrl?: string;
+	// 1-based page to request from numbered-page providers; takes precedence over a page-typed cursor.
+	page?: number;
+	// Items to request per page (numbered-page providers, plus GitHub's maxPageSize).
+	pageSize?: number;
+	// Opt in to repository remote metadata (clone URLs) when the PR payload lacks it. Only Azure DevOps
+	// acts on this today (extra API call); it is a no-op for the other providers.
+	includeRemoteInfo?: boolean;
 }
 
 export interface GetPullRequestsForUserOptions {
 	includeFromArchivedRepos?: boolean;
 	cursor?: string; // stringified JSON object of type { type: 'cursor' | 'page'; value: string | number } | {}
 	baseUrl?: string;
+	// PR states to include; when omitted the provider returns its default (open only).
+	states?: GitPullRequestState[];
+	/**
+	 * Items to request per page. Worth setting explicitly on an account-wide read that gets DRAINED: each
+	 * provider falls back to its own historical page size when this is omitted, and GitHub's is 15
+	 * (`MAX_PR_PAGE_SIZE`), so a drain pays ~7x the round trips of the 100 its search actually allows.
+	 */
+	pageSize?: number;
 }
 
 export interface GetPullRequestsForUserInput extends GetPullRequestsForUserOptions {
@@ -170,8 +314,14 @@ export interface GetIssuesOptions {
 	authorLogin?: string;
 	assigneeLogins?: string[];
 	mentionLogin?: string;
+	// Issue states to include; when omitted the provider returns its default (open only).
+	states?: GitIssueState[];
 	cursor?: string; // stringified JSON object of type { type: 'cursor' | 'page'; value: string | number } | {}
 	baseUrl?: string;
+	// 1-based page to request from numbered-page providers; takes precedence over a page-typed cursor.
+	page?: number;
+	// Items to request per page (numbered-page providers, plus GitHub's maxPageSize).
+	pageSize?: number;
 }
 
 export interface GetIssuesForRepoInput extends GetIssuesOptions {
@@ -209,6 +359,10 @@ export interface PageInfo {
 	hasNextPage: boolean;
 	endCursor?: string | null;
 	nextPage?: number | null;
+	// Numbered-page providers (Bitbucket, Bitbucket Server, Azure DevOps) additionally report these.
+	currentPage?: number | null;
+	totalPages?: number | null;
+	totalCount?: number | null;
 }
 
 export type GetRepoFn = (
@@ -223,7 +377,10 @@ export type GetRepoOfProjectFn = (
 export type GetPullRequestsForReposFn = (
 	input: (GetPullRequestsForReposInput | GetPullRequestsForRepoIdsInput) & PagingInput,
 	options?: EnterpriseOptions,
-) => Promise<{ data: ProviderPullRequest[]; pageInfo?: PageInfo }>;
+	// `metadata` carries SDK collection completeness/failures for multi-repo fan-outs (Bitbucket, Azure DevOps,
+	// Bitbucket Server); `pageInfo` is present for the cursor-based aggregate (GitHub). Both are optional so
+	// each provider only sets what it actually reports.
+) => Promise<{ data: ProviderPullRequest[]; pageInfo?: PageInfo; metadata?: CollectionMetadata }>;
 
 export type GetPullRequestsForRepoFn = (
 	input: GetPullRequestsForRepoInput & PagingInput,
@@ -236,9 +393,32 @@ export type GetPullRequestsForUserFn = (
 ) => Promise<{ data: ProviderPullRequest[]; pageInfo?: PageInfo }>;
 
 export type GetPullRequestsForAzureProjectsFn = (
-	input: { projects: { namespace: string; project: string }[]; authorLogin?: string; assigneeLogins?: string[] },
+	input: {
+		projects: { namespace: string; project: string }[];
+		authorLogin?: string;
+		assigneeLogins?: string[];
+		reviewerId?: string;
+		states?: GitPullRequestState[];
+		repo?: ProviderRepoInput;
+	},
 	options?: EnterpriseOptions,
-) => Promise<{ data: ProviderPullRequest[] }>;
+	// Aggregate multi-project fan-out: no `pageInfo` (call getPullRequestsForAzureProject for that), but SDK
+	// collection metadata reports per-project completeness/failures.
+) => Promise<{ data: ProviderPullRequest[]; metadata?: CollectionMetadata }>;
+
+/** Single Azure project PR read, paginated by number (unlike the aggregate {@link GetPullRequestsForAzureProjectsFn}). */
+export type GetPullRequestsForAzureProjectFn = (
+	input: {
+		namespace: string;
+		project: string;
+		authorLogin?: string;
+		assigneeLogins?: string[];
+		reviewerId?: string;
+		states?: GitPullRequestState[];
+		repo?: ProviderRepoInput;
+	} & PagingInput,
+	options?: EnterpriseOptions,
+) => Promise<{ data: ProviderPullRequest[]; pageInfo: { hasNextPage: boolean; nextPage: number | null } }>;
 
 export type MergePullRequestFn =
 	| ((
@@ -292,8 +472,18 @@ export type GetIssuesForReposFn = (
 	options?: EnterpriseOptions,
 ) => Promise<{ data: ProviderIssue[]; pageInfo?: PageInfo }>;
 
+export type GetIssuesForCurrentUserInput = PagingInput & {
+	// GitLab's account-wide REST read (`GET /issues`): `scope` controls breadth ('assigned_to_me' vs 'all') and
+	// the username fields independently narrow a broad read to a specific assignee or author. Other providers
+	// (Linear) ignore these and page purely off the cursor.
+	scope?: 'assigned_to_me' | 'all';
+	assigneeUsername?: string;
+	authorUsername?: string;
+	pageSize?: number;
+};
+
 export type GetIssuesForCurrentUserFn = (
-	input: PagingInput,
+	input: GetIssuesForCurrentUserInput,
 	options?: EnterpriseOptions,
 ) => Promise<{ data: ProviderIssue[]; pageInfo?: PageInfo }>;
 
@@ -312,6 +502,29 @@ export type GetReposForAzureProjectFn = (
 	options?: EnterpriseOptions,
 ) => Promise<{ data: ProviderRepository[]; pageInfo?: PageInfo }>;
 
+export type GetOrgsForCurrentUserFn = (
+	input?: CursorPageInput,
+	options?: EnterpriseOptions,
+) => Promise<{ data: ProviderGitHubOrganization[]; pageInfo?: PageInfo }>;
+export type GetReposForOrgFn = (
+	input: { orgName: string } & PagingInput,
+	options?: EnterpriseOptions,
+) => Promise<{ data: ProviderRepository[]; pageInfo?: PageInfo }>;
+export type GetReposForWorkspaceFn = (
+	input: { workspace: string } & PagingInput,
+	options?: EnterpriseOptions,
+) => Promise<{ data: ProviderRepository[]; pageInfo?: PageInfo }>;
+export type GetReposForCurrentUserFn = (
+	// `affiliations` narrows GitHub's `/user/repos` read (owner/collaborator/organization_member);
+	// GitLab's equivalent read ignores it.
+	input: PagingInput & { affiliations?: ('owner' | 'collaborator' | 'organization_member')[] },
+	options?: EnterpriseOptions,
+) => Promise<{ data: ProviderRepository[]; pageInfo?: PageInfo }>;
+export type GetGroupsForCurrentUserFn = (
+	input?: { topLevelOnly?: boolean } & PagingInput,
+	options?: EnterpriseOptions,
+) => Promise<{ data: ProviderGitLabGroup[]; pageInfo?: PageInfo }>;
+
 export type GetCurrentUserFn = (
 	input: Record<string, never>,
 	options?: EnterpriseOptions,
@@ -328,10 +541,40 @@ export type GetCurrentUserForResourceFn = (
 export type GetJiraResourcesForCurrentUserFn = (options?: EnterpriseOptions) => Promise<{ data: JiraResource[] }>;
 export type GetLinearOrganizationFn = (options?: EnterpriseOptions) => Promise<{ data: LinearOrganization }>;
 export type GetLinearTeamsForCurrentUserFn = (options?: EnterpriseOptions) => Promise<{ data: LinearTeam[] }>;
+export type GetLinearIssuesFn = (
+	input: { teams?: string[]; projects?: string[]; labels?: string[] } & PagingInput,
+	options?: EnterpriseOptions,
+) => Promise<{ data: ProviderIssue[]; pageInfo?: PageInfo }>;
+/**
+ * Linear's current-user (viewer) query. Its raw `@linear/sdk` User isn't a `ProviderAccount` (no
+ * username/avatar/url), so it's typed with the minimal fields the viewer query actually returns rather than
+ * importing `@linear/sdk` (which is bundled in the SDK dist and not a resolvable top-level dependency).
+ */
+export type GetLinearCurrentUserFn = (
+	options?: EnterpriseOptions,
+) => Promise<{ data: { id: string; name?: string | null; email?: string | null; displayName?: string | null } }>;
 export type GetJiraProjectsForResourcesFn = (
 	input: { resourceIds: string[] },
 	options?: EnterpriseOptions,
-) => Promise<{ data: JiraProject[] }>;
+	// Fan-out across resources: preserves successful resources' projects and reports per-resource failures in
+	// SDK collection metadata instead of throwing when a single resource fails.
+) => Promise<{ data: JiraProject[]; metadata?: CollectionMetadata }>;
+export type GetJiraProjectsForResourceFn = (
+	input: { resourceId: string } & CursorPageInput,
+	options?: EnterpriseOptions,
+) => Promise<{ data: JiraProject[]; pageInfo?: PageInfo; metadata?: CollectionMetadata }>;
+export type GetGitLabPullRequestsForUserAssociationFn = (
+	input: {
+		username: string;
+		association: 'assigned' | 'authored' | 'reviewRequested';
+		includeFromArchivedRepos?: boolean;
+		labelNames?: string[];
+		repo?: ProviderRepoInput;
+		states?: GitPullRequestState[];
+		pageSize?: number;
+	} & CursorPageInput,
+	options?: EnterpriseOptions,
+) => Promise<{ data: ProviderPullRequest[]; pageInfo?: PageInfo }>;
 export type GetAzureResourcesForUserFn = (
 	input: { userId: string },
 	options?: EnterpriseOptions,
@@ -341,13 +584,14 @@ export type GetAzureProjectsForResourceFn = (
 	options?: EnterpriseOptions,
 ) => Promise<{ data: AzureProject[]; pageInfo?: PageInfo }>;
 export type GetBitbucketResourcesForCurrentUserFn = (
-	input: Record<string, never>,
+	input: { page?: number },
 	options?: EnterpriseOptions,
-) => Promise<{ data: BitbucketWorkspaceStub[] }>;
+) => Promise<{ data: BitbucketWorkspaceStub[]; pageInfo?: PageInfo }>;
 export type GetBitbucketPullRequestsAuthoredByUserForWorkspaceFn = (
 	input: {
 		userId: string;
 		workspaceSlug: string;
+		states?: GitPullRequestState[];
 	} & NumberedPageInput,
 	options?: EnterpriseOptions,
 ) => Promise<{
@@ -358,7 +602,7 @@ export type GetBitbucketPullRequestsAuthoredByUserForWorkspaceFn = (
 	data: GitPullRequest[];
 }>;
 export type GetBitbucketServerPullRequestsForCurrentUserFn = (
-	input: NumberedPageInput,
+	input: { states?: GitPullRequestState[] } & NumberedPageInput,
 	options?: EnterpriseOptions,
 ) => Promise<{
 	pageInfo: {
@@ -373,6 +617,15 @@ export type GetIssuesForResourceForCurrentUserFn = (
 	options?: EnterpriseOptions,
 ) => Promise<{ data: ProviderIssue[] }>;
 
+// Trello reads (issues-capable provider). The Trello client is keyed by an `appKey` (the Trello app key from
+// the cloud token exchange) alongside the OAuth token, so these mirror the client method shapes directly.
+export type GetTrelloCurrentUserFn = Trello['getCurrentUser'];
+export type GetTrelloBoardsForCurrentUserFn = Trello['getBoardsForCurrentUser'];
+export type GetTrelloListsForBoardFn = Trello['getListsForTrelloBoard'];
+export type GetTrelloAccountForIdFn = Trello['getAccountForId'];
+export type GetTrelloIssuesForBoardFn = Trello['getIssuesForBoard'];
+export type GetTrelloLabelsForBoardFn = Trello['getLabelsForBoard'];
+
 export interface ProviderInfo extends ProviderMetadata {
 	provider: GitHub | GitLab | Bitbucket | BitbucketServer | Jira | Linear | Trello | AzureDevOps;
 	getRepoFn?: GetRepoFn;
@@ -380,7 +633,9 @@ export interface ProviderInfo extends ProviderMetadata {
 	getPullRequestsForReposFn?: GetPullRequestsForReposFn;
 	getPullRequestsForRepoFn?: GetPullRequestsForRepoFn;
 	getPullRequestsForUserFn?: GetPullRequestsForUserFn;
+	getGitLabPullRequestsForUserAssociationFn?: GetGitLabPullRequestsForUserAssociationFn;
 	getPullRequestsForAzureProjectsFn?: GetPullRequestsForAzureProjectsFn;
+	getPullRequestsForAzureProjectFn?: GetPullRequestsForAzureProjectFn;
 	getIssueFn?: GetIssueFn;
 	getIssuesForReposFn?: GetIssuesForReposFn;
 	getIssuesForCurrentUserFn?: GetIssuesForCurrentUserFn;
@@ -392,16 +647,30 @@ export interface ProviderInfo extends ProviderMetadata {
 	getJiraResourcesForCurrentUserFn?: GetJiraResourcesForCurrentUserFn;
 	getLinearOrganizationFn?: GetLinearOrganizationFn;
 	getLinearTeamsForCurrentUserFn?: GetLinearTeamsForCurrentUserFn;
+	getLinearIssuesFn?: GetLinearIssuesFn;
+	getLinearCurrentUserFn?: GetLinearCurrentUserFn;
 	getAzureResourcesForUserFn?: GetAzureResourcesForUserFn;
 	getBitbucketResourcesForCurrentUserFn?: GetBitbucketResourcesForCurrentUserFn;
 	getBitbucketPullRequestsAuthoredByUserForWorkspaceFn?: GetBitbucketPullRequestsAuthoredByUserForWorkspaceFn;
 	getBitbucketServerPullRequestsForCurrentUserFn?: GetBitbucketServerPullRequestsForCurrentUserFn;
 	getJiraProjectsForResourcesFn?: GetJiraProjectsForResourcesFn;
+	getJiraProjectsForResourceFn?: GetJiraProjectsForResourceFn;
 	getAzureProjectsForResourceFn?: GetAzureProjectsForResourceFn;
 	getIssuesForProjectFn?: GetIssuesForProjectFn;
 	getReposForAzureProjectFn?: GetReposForAzureProjectFn;
 	getIssuesForResourceForCurrentUserFn?: GetIssuesForResourceForCurrentUserFn;
 	mergePullRequestFn?: MergePullRequestFn;
+	getOrgsForCurrentUserFn?: GetOrgsForCurrentUserFn;
+	getReposForOrgFn?: GetReposForOrgFn;
+	getReposForWorkspaceFn?: GetReposForWorkspaceFn;
+	getReposForCurrentUserFn?: GetReposForCurrentUserFn;
+	getGroupsForCurrentUserFn?: GetGroupsForCurrentUserFn;
+	getTrelloCurrentUserFn?: GetTrelloCurrentUserFn;
+	getTrelloBoardsForCurrentUserFn?: GetTrelloBoardsForCurrentUserFn;
+	getTrelloListsForBoardFn?: GetTrelloListsForBoardFn;
+	getTrelloAccountForIdFn?: GetTrelloAccountForIdFn;
+	getTrelloIssuesForBoardFn?: GetTrelloIssuesForBoardFn;
+	getTrelloLabelsForBoardFn?: GetTrelloLabelsForBoardFn;
 }
 
 export interface ProviderMetadata {
@@ -416,7 +685,28 @@ export interface ProviderMetadata {
 	pullRequestsPagingMode?: PagingMode;
 	scopes: string[];
 	supportedPullRequestFilters?: PullRequestFilter[];
+	/**
+	 * Relationship filters the ACCOUNT-WIDE pull-request read can express as an exact OR union.
+	 * This is independent from `supportedPullRequestFilters`, which describes repo-scoped reads.
+	 */
+	supportedAccountWidePullRequestFilters?: PullRequestFilter[];
+	/** Filters the REPO-scoped issue read can express. */
 	supportedIssueFilters?: IssueFilter[];
+	/**
+	 * Filters the ACCOUNT-WIDE issue read can express, which is NOT the same set as
+	 * {@link ProviderMetadata.supportedIssueFilters}: the two reads are different provider queries.
+	 *
+	 * Unfiltered, each provider's account-wide read is that provider's own definition of "my issues" — GitHub/GHE
+	 * union authored + assigned + mentioned, Azure drains assigned + authored, and GitLab reads assigned-to-me.
+	 * A consumer replacing a narrower tool (`gk`'s `assignee:@me`) must select the `Assignee` filter wherever the
+	 * provider's default is wider.
+	 *
+	 * A filter listed here narrows that read server-side. Absent/empty means the read can't be narrowed at all,
+	 * so the facade refuses a filtered request rather than serving the unnarrowed union as if it had been
+	 * filtered. GitLab lists `Assignee` and `Author` because the SDK's account-wide input exposes both username
+	 * axes; it omits `Mention` because that REST read has no first-class mention filter.
+	 */
+	supportedAccountWideIssueFilters?: IssueFilter[];
 }
 
 export type Providers = Record<IntegrationIds, ProviderInfo>;
@@ -438,8 +728,17 @@ export const providersMetadata: ProvidersMetadata = {
 			PullRequestFilter.ReviewRequested,
 			PullRequestFilter.Mention,
 		],
+		supportedAccountWidePullRequestFilters: [
+			PullRequestFilter.Author,
+			PullRequestFilter.Assignee,
+			PullRequestFilter.ReviewRequested,
+			PullRequestFilter.Mention,
+		],
 		// Use 'username' property on account for issue filters
 		supportedIssueFilters: [IssueFilter.Author, IssueFilter.Assignee, IssueFilter.Mention],
+		// The account-wide read is three independent searches (`author:@me`, `assignee:@me`, `mentions:@me`) behind
+		// one composite cursor, so any subset of them is expressible.
+		supportedAccountWideIssueFilters: [IssueFilter.Author, IssueFilter.Assignee, IssueFilter.Mention],
 		scopes: ['repo', 'read:user', 'user:email'],
 	},
 	[GitSelfManagedHostIntegrationId.CloudGitHubEnterprise]: {
@@ -457,8 +756,17 @@ export const providersMetadata: ProvidersMetadata = {
 			PullRequestFilter.ReviewRequested,
 			PullRequestFilter.Mention,
 		],
+		supportedAccountWidePullRequestFilters: [
+			PullRequestFilter.Author,
+			PullRequestFilter.Assignee,
+			PullRequestFilter.ReviewRequested,
+			PullRequestFilter.Mention,
+		],
 		// Use 'username' property on account for issue filters
 		supportedIssueFilters: [IssueFilter.Author, IssueFilter.Assignee, IssueFilter.Mention],
+		// The account-wide read is three independent searches (`author:@me`, `assignee:@me`, `mentions:@me`) behind
+		// one composite cursor, so any subset of them is expressible.
+		supportedAccountWideIssueFilters: [IssueFilter.Author, IssueFilter.Assignee, IssueFilter.Mention],
 		scopes: ['repo', 'read:user', 'user:email'],
 	},
 	[GitCloudHostIntegrationId.GitLab]: {
@@ -475,8 +783,17 @@ export const providersMetadata: ProvidersMetadata = {
 			PullRequestFilter.Assignee,
 			PullRequestFilter.ReviewRequested,
 		],
+		supportedAccountWidePullRequestFilters: [
+			PullRequestFilter.Author,
+			PullRequestFilter.Assignee,
+			PullRequestFilter.ReviewRequested,
+		],
 		// Use 'username' property on account for issue filters
 		supportedIssueFilters: [IssueFilter.Author, IssueFilter.Assignee],
+		// The account-wide read drains one `scope=assigned_to_me` pass and one `scope=all` + `authorUsername` pass,
+		// unioned, so either axis is expressible on its own. Mention is absent because GitLab's REST issue read has
+		// no first-class mention filter to narrow with.
+		supportedAccountWideIssueFilters: [IssueFilter.Assignee, IssueFilter.Author],
 		scopes: ['api', 'read_user', 'read_repository'],
 	},
 	[GitSelfManagedHostIntegrationId.CloudGitLabSelfHosted]: {
@@ -493,8 +810,17 @@ export const providersMetadata: ProvidersMetadata = {
 			PullRequestFilter.Assignee,
 			PullRequestFilter.ReviewRequested,
 		],
+		supportedAccountWidePullRequestFilters: [
+			PullRequestFilter.Author,
+			PullRequestFilter.Assignee,
+			PullRequestFilter.ReviewRequested,
+		],
 		// Use 'username' property on account for issue filters
 		supportedIssueFilters: [IssueFilter.Author, IssueFilter.Assignee],
+		// The account-wide read drains one `scope=assigned_to_me` pass and one `scope=all` + `authorUsername` pass,
+		// unioned, so either axis is expressible on its own. Mention is absent because GitLab's REST issue read has
+		// no first-class mention filter to narrow with.
+		supportedAccountWideIssueFilters: [IssueFilter.Assignee, IssueFilter.Author],
 		scopes: ['api', 'read_user', 'read_repository'],
 	},
 	[GitCloudHostIntegrationId.Bitbucket]: {
@@ -504,8 +830,9 @@ export const providersMetadata: ProvidersMetadata = {
 		type: 'git',
 		iconKey: GitCloudHostIntegrationId.Bitbucket,
 		pullRequestsPagingMode: PagingMode.Repo,
-		// Use 'id' property on account for PR filters
-		supportedPullRequestFilters: [PullRequestFilter.Author],
+		// Use 'id' property on account for PR filters (reviewer filter keyed by account id / reviewerId)
+		supportedPullRequestFilters: [PullRequestFilter.Author, PullRequestFilter.ReviewRequested],
+		supportedAccountWidePullRequestFilters: [PullRequestFilter.Author, PullRequestFilter.ReviewRequested],
 		scopes: ['account:read', 'repository:read', 'pullrequest:read', 'issue:read'],
 	},
 	[GitSelfManagedHostIntegrationId.BitbucketServer]: {
@@ -515,6 +842,7 @@ export const providersMetadata: ProvidersMetadata = {
 		type: 'git',
 		iconKey: GitSelfManagedHostIntegrationId.BitbucketServer,
 		supportedPullRequestFilters: [PullRequestFilter.Author, PullRequestFilter.ReviewRequested],
+		supportedAccountWidePullRequestFilters: [PullRequestFilter.Author, PullRequestFilter.ReviewRequested],
 		scopes: ['Project (Read)', 'Repository (Write)'],
 	},
 	[GitCloudHostIntegrationId.AzureDevOps]: {
@@ -525,10 +853,22 @@ export const providersMetadata: ProvidersMetadata = {
 		iconKey: GitCloudHostIntegrationId.AzureDevOps,
 		issuesPagingMode: PagingMode.Project,
 		pullRequestsPagingMode: PagingMode.Repo,
-		// Use 'id' property on account for PR filters
-		supportedPullRequestFilters: [PullRequestFilter.Author, PullRequestFilter.Assignee],
+		// Use 'id' property on account for PR filters (reviewer filter keyed by account id / reviewerId)
+		supportedPullRequestFilters: [
+			PullRequestFilter.Author,
+			PullRequestFilter.Assignee,
+			PullRequestFilter.ReviewRequested,
+		],
+		supportedAccountWidePullRequestFilters: [
+			PullRequestFilter.Author,
+			PullRequestFilter.Assignee,
+			PullRequestFilter.ReviewRequested,
+		],
 		// Use 'name' property on account for issue filters
 		supportedIssueFilters: [IssueFilter.Author, IssueFilter.Assignee, IssueFilter.Mention],
+		// The account-wide read drains one (project × assignee) and one (project × author) query per project, so
+		// either axis is expressible on its own. There is no mention query to narrow to.
+		supportedAccountWideIssueFilters: [IssueFilter.Author, IssueFilter.Assignee],
 		scopes: ['vso.code', 'vso.identity', 'vso.project', 'vso.profile', 'vso.work'],
 	},
 	[GitSelfManagedHostIntegrationId.AzureDevOpsServer]: {
@@ -539,10 +879,22 @@ export const providersMetadata: ProvidersMetadata = {
 		iconKey: GitCloudHostIntegrationId.AzureDevOps,
 		issuesPagingMode: PagingMode.Project,
 		pullRequestsPagingMode: PagingMode.Repo,
-		// Use 'id' property on account for PR filters
-		supportedPullRequestFilters: [PullRequestFilter.Author, PullRequestFilter.Assignee],
+		// Use 'id' property on account for PR filters (reviewer filter keyed by account id / reviewerId)
+		supportedPullRequestFilters: [
+			PullRequestFilter.Author,
+			PullRequestFilter.Assignee,
+			PullRequestFilter.ReviewRequested,
+		],
+		supportedAccountWidePullRequestFilters: [
+			PullRequestFilter.Author,
+			PullRequestFilter.Assignee,
+			PullRequestFilter.ReviewRequested,
+		],
 		// Use 'name' property on account for issue filters
 		supportedIssueFilters: [IssueFilter.Author, IssueFilter.Assignee, IssueFilter.Mention],
+		// The account-wide read drains one (project × assignee) and one (project × author) query per project, so
+		// either axis is expressible on its own. There is no mention query to narrow to.
+		supportedAccountWideIssueFilters: [IssueFilter.Author, IssueFilter.Assignee],
 		scopes: ['vso.code', 'vso.identity', 'vso.project', 'vso.profile', 'vso.work'],
 	},
 	[IssuesCloudHostIntegrationId.Jira]: {
@@ -596,6 +948,8 @@ export const providersMetadata: ProvidersMetadata = {
 		type: 'issues',
 		iconKey: IssuesCloudHostIntegrationId.Linear,
 		scopes: [],
+		// Linear scopes "my issues" client-side by the viewer's assignee id; author/mention aren't supported.
+		supportedIssueFilters: [IssueFilter.Assignee],
 	},
 	[IssuesCloudHostIntegrationId.Trello]: {
 		domain: 'trello.com',
@@ -604,6 +958,8 @@ export const providersMetadata: ProvidersMetadata = {
 		type: 'issues',
 		iconKey: IssuesCloudHostIntegrationId.Trello,
 		scopes: [],
+		// Trello cards are filtered by the assignee (member) only; author/mention have no Trello equivalent.
+		supportedIssueFilters: [IssueFilter.Assignee],
 	},
 };
 
@@ -629,14 +985,29 @@ export function getReasonsForUserIssue(issue: ProviderIssue, userLogin: string):
 	return reasons;
 }
 
+function toIssueIdentifier(value: string | number): string {
+	return String(value);
+}
+
 export function toIssueShape(issue: ProviderIssue, provider: ProviderReference): IssueShape | undefined {
 	// TODO: Add some protections/baselines rather than killing the transformation here
-	if (issue.updatedDate == null || issue.author == null || issue.url == null) return undefined;
+	// `author` is intentionally not required: some providers have no per-item creator (e.g. Trello cards,
+	// which the SDK maps with `author: null`), and dropping every such item would discard the whole board.
+	// Fall back to an empty author instead so these issues still surface.
+	if (issue.updatedDate == null || issue.url == null) return undefined;
 
 	return {
 		type: 'issue',
 		provider: provider,
-		id: issue.number,
+		// `id` is the provider's display number/key (GitHub number, Jira/Linear key, Trello idShort), NOT a
+		// globally-unique id: it's rendered to users as `#{id}`, used to build branch names, and passed back
+		// to the provider as the `getIssue`/cache lookup key, all of which expect the number. `nodeId` is the
+		// provider-native stable id, but its uniqueness scope is provider-specific (Azure work-item ids are
+		// organization-scoped), so cross-scope consumers must include provider/domain/container identity too.
+		// provider-apis declares this as a string, but some providers (notably
+		// Azure's broadened work-item path) return a number at runtime. Keep the
+		// public IssueShape contract truthful for consumers that use string APIs.
+		id: toIssueIdentifier(issue.number),
 		nodeId: issue.graphQLId ?? issue.id,
 		title: issue.title,
 		url: issue.url,
@@ -646,35 +1017,60 @@ export function toIssueShape(issue: ProviderIssue, provider: ProviderReference):
 		closed: issue.closedDate != null,
 		state: issue.closedDate != null ? 'closed' : 'opened',
 		author: {
-			id: issue.author.id ?? '',
-			name: issue.author.name ?? '',
-			avatarUrl: issue.author.avatarUrl ?? undefined,
-			url: issue.author.url ?? undefined,
+			id: issue.author?.id ?? '',
+			// An absent name stays absent, matching {@link fromProviderAccount}; see `IssueMember.name`.
+			name: issue.author?.name ?? undefined,
+			avatarUrl: issue.author?.avatarUrl ?? undefined,
+			url: issue.author?.url ?? undefined,
 		},
 		assignees:
 			issue.assignees?.map(assignee => ({
 				id: assignee.id ?? '',
-				name: assignee.name ?? '',
+				name: assignee.name ?? undefined,
 				avatarUrl: assignee.avatarUrl ?? undefined,
 				url: assignee.url ?? undefined,
 			})) ?? [],
-		project: {
-			id: issue.project?.id ?? '',
-			name: issue.project?.name ?? '',
-			resourceId: issue.project?.resourceId ?? '',
-			resourceName: issue.project?.namespace ?? '',
-		},
+		project:
+			issue.project?.id && issue.project.resourceId && issue.project.namespace
+				? {
+						id: issue.project.id,
+						name: issue.project.name,
+						resourceId: issue.project.resourceId,
+						resourceName: issue.project.namespace,
+					}
+				: undefined,
 		repository:
 			issue.repository?.owner?.login != null
 				? {
 						owner: issue.repository.owner.login,
 						repo: issue.repository.name,
+						id: issue.repository.id,
 					}
 				: undefined,
 		labels: issue.labels.map(label => ({ color: label.color ?? undefined, name: label.name })),
 		commentsCount: issue.commentCount ?? undefined,
 		thumbsUpCount: issue.upvoteCount ?? undefined,
 		body: issue.description ?? undefined,
+		issueType: issue.type ?? undefined,
+	};
+}
+
+/**
+ * Maps a raw provider-apis {@link ProviderRepository} to the GitLens-owned {@link ProviderRepositoryShape}
+ * the ProviderBackend `listRepos` facade surfaces, so consumers don't depend on the SDK repo type. The SDK's
+ * nullable fields (`webUrl`/`httpsUrl`/`sshUrl`/`defaultBranch`) collapse to `undefined`, matching the
+ * `?? undefined` convention in {@link toIssueShape}/{@link toAccount}.
+ */
+export function toProviderRepositoryShape(repo: ProviderRepository): ProviderRepositoryShape {
+	return {
+		id: repo.id,
+		namespace: repo.namespace,
+		name: repo.name,
+		project: repo.project ?? undefined,
+		url: repo.webUrl ?? undefined,
+		cloneUrlHttps: repo.httpsUrl ?? undefined,
+		cloneUrlSsh: repo.sshUrl ?? undefined,
+		defaultBranch: repo.defaultBranch?.name ?? undefined,
 	};
 }
 
@@ -829,16 +1225,91 @@ export function fromProviderPullRequestState(state: GitPullRequestState): PullRe
 	return state === GitPullRequestState.Open ? 'opened' : state === GitPullRequestState.Closed ? 'closed' : 'merged';
 }
 
+type PullRequestStateInput = PullRequestState | PullRequestStateFilter;
+
+function toProviderPullRequestStatesCore(state: PullRequestStateInput): GitPullRequestState[] {
+	switch (state) {
+		case 'open':
+		case 'opened':
+			return [GitPullRequestState.Open];
+		case 'closed':
+			return [GitPullRequestState.Closed];
+		case 'merged':
+			return [GitPullRequestState.Merged];
+		case 'all':
+			return [GitPullRequestState.Open, GitPullRequestState.Closed, GitPullRequestState.Merged];
+	}
+}
+
+/** Maps PR include/state filters to the SDK's `states` input. `undefined`/omitted preserves the open-only default. */
+export function toProviderPullRequestStates(
+	state: PullRequestStateInput | PullRequestStateInput[] | undefined,
+): GitPullRequestState[] | undefined {
+	if (state == null) return undefined;
+
+	const states = (Array.isArray(state) ? state : [state]).flatMap(s => toProviderPullRequestStatesCore(s));
+	return states.length > 0 ? [...new Set(states)] : undefined;
+}
+
+/** Maps an issue state filter to the SDK's `states` input. `undefined`/omitted preserves the open-only default. */
+export function toProviderIssueStates(state: IssueStateFilter | undefined): GitIssueState[] | undefined {
+	switch (state) {
+		case 'open':
+			return [GitIssueState.Open];
+		case 'closed':
+			return [GitIssueState.Closed];
+		case 'all':
+			return [GitIssueState.Open, GitIssueState.Closed];
+		default:
+			return undefined;
+	}
+}
+
+/**
+ * Resolves a normalized {@link ProviderScope} to the provider-appropriate read inputs, dispatching on the
+ * provider's {@link PagingMode} (the authoritative per-provider scoping selector). Project-mode providers
+ * (Azure issues, Jira) produce `projectInputs` from `org` + `project`; repo/repos-mode providers produce a
+ * repo `GetRepoInput[]` from `scope.repos` (carrying `project` where relevant, e.g. Azure). This is the
+ * single public entry point consumers can use instead of hand-building the three underlying representations.
+ */
+export function resolveProviderScope(
+	scope: ProviderScope,
+	pagingMode: PagingMode | undefined,
+): { reposInput?: GetRepoInput[]; projectInputs?: { namespace: string; project: string }[] } {
+	if (pagingMode === PagingMode.Project) {
+		if (scope.org != null && scope.project != null) {
+			return { projectInputs: [{ namespace: scope.org, project: scope.project }] };
+		}
+		return {};
+	}
+
+	const reposInput = scope.repos?.map(r => ({ namespace: r.owner, name: r.name, project: scope.project }));
+	return { reposInput: reposInput };
+}
+
+export function providerPullRequestMatchesSearch(pr: ProviderPullRequest, search: string): boolean {
+	const term = search.trim().toLowerCase();
+	if (term.length === 0) return true;
+
+	return pr.title.toLowerCase().includes(term) || (pr.description?.toLowerCase().includes(term) ?? false);
+}
+
+function toProviderRemoteInfo(ref: PullRequestRef | undefined): GitRepositoryRemoteInfo | null {
+	// Match the SDK convention: only populate remoteInfo when both clone URLs are known.
+	return ref?.cloneHttps && ref?.cloneSsh ? { cloneUrlHTTPS: ref.cloneHttps, cloneUrlSSH: ref.cloneSsh } : null;
+}
+
 export function toProviderPullRequest(pr: PullRequest): ProviderPullRequest {
 	const prReviews = [...(pr.reviewRequests ?? []), ...(pr.latestReviews ?? [])];
 	return {
 		id: pr.id,
 		graphQLId: pr.nodeId,
-		number: Number.parseInt(pr.id, 10),
+		number: pr.number ?? Number.parseInt(pr.id, 10),
 		title: pr.title,
-		description: null,
+		description: pr.body ?? null,
 		url: pr.url,
 		state: toProviderPullRequestState(pr.state),
+		isCrossRepository: pr.refs?.isCrossRepository ?? false,
 		isDraft: pr.isDraft ?? false,
 		createdDate: pr.createdDate,
 		updatedDate: pr.updatedDate,
@@ -871,12 +1342,12 @@ export function toProviderPullRequest(pr: PullRequest): ProviderPullRequest {
 		repository:
 			pr.repository != null
 				? {
-						id: pr.repository.repo,
+						id: pr.repository.id ?? '',
 						name: pr.repository.repo,
 						owner: {
 							login: pr.repository.owner,
 						},
-						remoteInfo: null, // TODO: Add the urls to our model
+						remoteInfo: toProviderRemoteInfo(pr.refs?.base),
 					}
 				: {
 						id: '',
@@ -894,7 +1365,8 @@ export function toProviderPullRequest(pr: PullRequest): ProviderPullRequest {
 						owner: {
 							login: pr.refs.head.owner,
 						},
-						remoteInfo: null,
+						remoteInfo: toProviderRemoteInfo(pr.refs.head),
+						isFork: pr.refs.head.isFork,
 					}
 				: null,
 		headCommit:
@@ -935,8 +1407,15 @@ export function toProviderPullRequest(pr: PullRequest): ProviderPullRequest {
 export function fromProviderPullRequest(
 	pr: ProviderPullRequest,
 	provider: Provider,
-	options?: { project?: IssueProject },
+	options?: { project?: IssueProject; currentAccountId?: string },
 ): PullRequest {
+	const repository = pr.repository;
+	const repositoryName = repository?.name ?? '';
+	const repositoryOwner = repository?.owner?.login ?? '';
+	const repositoryRemoteInfo = repository?.remoteInfo;
+	const headRepository = pr.headRepository;
+	const headRepositoryRemoteInfo = headRepository?.remoteInfo;
+
 	return new PullRequest(
 		provider,
 		fromProviderAccount(pr.author),
@@ -945,11 +1424,11 @@ export function fromProviderPullRequest(
 		pr.title,
 		pr.url ?? '',
 		{
-			owner: pr.repository.owner.login,
-			repo: pr.repository.name,
+			owner: repositoryOwner,
+			repo: repositoryName,
 			// This has to be here until we can take this information from ProviderPullRequest:
 			accessLevel: RepositoryAccessLevel.Write,
-			id: pr.repository.id,
+			id: repository?.id ?? '',
 		},
 		fromProviderPullRequestState(pr.state),
 		pr.createdDate,
@@ -962,24 +1441,29 @@ export function fromProviderPullRequest(
 			base: {
 				branch: pr.baseRef?.name ?? '',
 				sha: pr.baseRef?.oid ?? '',
-				repo: pr.repository.name,
-				owner: pr.repository.owner.login,
+				repo: repositoryName,
+				owner: repositoryOwner,
 				exists: pr.baseRef != null,
-				url: pr.repository.remoteInfo?.cloneUrlHTTPS
-					? pr.repository.remoteInfo.cloneUrlHTTPS.replace(gitSuffixRegex, '')
+				url: repositoryRemoteInfo?.cloneUrlHTTPS
+					? repositoryRemoteInfo.cloneUrlHTTPS.replace(gitSuffixRegex, '')
 					: '',
+				cloneHttps: repositoryRemoteInfo?.cloneUrlHTTPS || undefined,
+				cloneSsh: repositoryRemoteInfo?.cloneUrlSSH || undefined,
 			},
 			head: {
 				branch: pr.headRef?.name ?? '',
 				sha: pr.headRef?.oid ?? '',
-				repo: pr.headRepository?.name ?? '',
-				owner: pr.headRepository?.owner.login ?? '',
+				repo: headRepository?.name ?? '',
+				owner: headRepository?.owner?.login ?? '',
 				exists: pr.headRef != null,
-				url: pr.headRepository?.remoteInfo?.cloneUrlHTTPS
-					? pr.headRepository.remoteInfo.cloneUrlHTTPS.replace(gitSuffixRegex, '')
+				url: headRepositoryRemoteInfo?.cloneUrlHTTPS
+					? headRepositoryRemoteInfo.cloneUrlHTTPS.replace(gitSuffixRegex, '')
 					: '',
+				cloneHttps: headRepositoryRemoteInfo?.cloneUrlHTTPS || undefined,
+				cloneSsh: headRepositoryRemoteInfo?.cloneUrlSSH || undefined,
+				isFork: headRepository?.isFork,
 			},
-			isCrossRepository: pr.headRepository?.id !== pr.repository.id,
+			isCrossRepository: pr.isCrossRepository,
 		},
 		pr.isDraft,
 		pr.additions ?? undefined,
@@ -995,6 +1479,9 @@ export function fromProviderPullRequest(
 			: undefined,
 		options?.project,
 		pr.version,
+		pr.description ?? undefined,
+		pr.number,
+		options?.currentAccountId != null ? pr.author?.id === options.currentAccountId : undefined,
 	);
 }
 
@@ -1003,10 +1490,11 @@ export function fromProviderIssue(
 	integration: Integration,
 	options?: { project?: IssueProject },
 ): Issue {
+	const identifier = toIssueIdentifier(issue.number);
 	return new Issue(
 		integration,
-		issue.id,
-		issue.graphQLId,
+		identifier,
+		issue.graphQLId ?? issue.id,
 		issue.title,
 		issue.url ?? '',
 		issue.createdDate,
@@ -1015,9 +1503,15 @@ export function fromProviderIssue(
 		issue.closedDate != null ? 'closed' : 'opened',
 		fromProviderAccount(issue.author),
 		issue.assignees?.map(fromProviderAccount) ?? undefined,
-		undefined, // TODO: issue repo
+		issue.repository != null
+			? {
+					owner: issue.repository.owner.login ?? '',
+					repo: issue.repository.name,
+					id: issue.repository.id,
+				}
+			: undefined,
 		issue.closedDate ?? undefined,
-		undefined,
+		issue.labels?.map(label => ({ name: label.name, color: label.color ?? undefined })),
 		issue.commentCount ?? undefined,
 		issue.upvoteCount ?? undefined,
 		issue.description ?? undefined,
@@ -1036,7 +1530,8 @@ export function fromProviderIssue(
 						resourceName: issue.project.namespace,
 					}
 				: undefined,
-		issue.number,
+		identifier,
+		issue.type ?? undefined,
 	);
 }
 
@@ -1062,9 +1557,19 @@ export function toProviderAccount(account: PullRequestMember | IssueMember): Pro
 export function fromProviderAccount(account: ProviderAccount | null): PullRequestMember | IssueMember {
 	return {
 		id: account?.id ?? '',
-		name: account?.name ?? 'unknown',
+		// An absent name stays absent. `'unknown'` was a display fallback invented in the provider layer, and a
+		// consumer couldn't tell it apart from a member genuinely named that — so it couldn't be undone where a
+		// name-shaped placeholder is wrong (rendering an avatar-only chip, or building an AI prompt, where
+		// `Assignees: unknown` reads as a real assignee). It also disagreed with {@link toIssueShape}, which
+		// collapsed the same absent name to `''` — same facade method, two fallbacks. Both now emit `undefined`.
+		name: account?.name ?? undefined,
 		avatarUrl: account?.avatarUrl ?? undefined,
-		url: account?.url ?? '',
+		// `url` is optional, so an absent one must be `undefined`, not `''`. `''` passes a `!= null` presence
+		// check and renders as a link to nowhere, and it disagreed with {@link toIssueShape} — which already
+		// collapses to `undefined` — even though BOTH mappers feed `listIssuesPage` (the repo-scoped path goes
+		// through `toIssueShape`, Azure's account-wide path through {@link fromProviderIssue}). Same facade
+		// method, two shapes. Matches {@link toProviderRepositoryShape}, which collapses every absent optional.
+		url: account?.url ?? undefined,
 	};
 }
 
@@ -1099,7 +1604,10 @@ export function isGitLabDotCom(domain: string | null | undefined): boolean {
 	return equalsIgnoreCase(domain, 'gitlab.com');
 }
 
-const azureCloudDomainRegex = /^dev\.azure\.com$|\bvisualstudio\.com$/i;
+// Anchor the `visualstudio.com` alternative on a label boundary (`^` or `.`) rather than `\b`: `\b` treats a
+// hyphen as a word boundary, so `\bvisualstudio\.com$` matched attacker-controlled hosts like
+// `evil-visualstudio.com` and classified them as Azure cloud, changing their auth/URL handling.
+const azureCloudDomainRegex = /^dev\.azure\.com$|(?:^|\.)visualstudio\.com$/i;
 export function isAzureCloudDomain(domain: string | undefined): boolean {
 	return domain != null && azureCloudDomainRegex.test(domain);
 }