@gitkraken/core-gitlens 0.6.0 → 0.7.1

package/dist/plus/integrations/results.js

@@ -1,137 +1,123 @@
-import { AuthenticationError, RequestNotFoundError, RequestRateLimitError } from '../../git/errors.js';
+import { AuthenticationError, RequestNotFoundError, RequestRateLimitError } from "../../git/errors.js";
+//#region ../plus/integrations/src/results.ts
 const maxProviderWarningMessageLength = 500;
 function providerWarningMessage(ex) {
-    const raw = (ex instanceof Error ? ex.message : String(ex)).trim();
-    const carrier = ex;
-    const status = typeof carrier?.status === 'number'
-        ? carrier.status
-        : typeof carrier?.response?.status === 'number'
-            ? carrier.response.status
-            : undefined;
-    // Gateways commonly answer API requests with a complete HTML error page. That payload is neither actionable
-    // nor suitable for a warning DTO consumed by UIs and logs; preserve the status without leaking the document.
-    if (/<(?:!doctype\s+html|html|head|body)\b/i.test(raw)) {
-        return status != null ? `Provider request failed with status ${status}.` : 'Provider request failed.';
-    }
-    if (!raw) {
-        return status != null ? `Provider request failed with status ${status}.` : 'Provider request failed.';
-    }
-    return raw.length > maxProviderWarningMessageLength
-        ? `${raw.slice(0, maxProviderWarningMessageLength - 3)}...`
-        : raw;
+	const raw = (ex instanceof Error ? ex.message : String(ex)).trim();
+	const carrier = ex;
+	const status = typeof carrier?.status === "number" ? carrier.status : typeof carrier?.response?.status === "number" ? carrier.response.status : void 0;
+	if (/<(?:!doctype\s+html|html|head|body)\b/i.test(raw)) return status != null ? `Provider request failed with status ${status}.` : "Provider request failed.";
+	if (!raw) return status != null ? `Provider request failed with status ${status}.` : "Provider request failed.";
+	return raw.length > maxProviderWarningMessageLength ? `${raw.slice(0, 497)}...` : raw;
 }
 /**
- * Classifies a caught provider exception into a neutral {@link ProviderWarning}. Ordering matters:
- * `instanceof` is checked most-specific-first so a rate-limit isn't mislabeled as a generic error and
- * a 404 isn't mislabeled as auth.
- */
-export function toProviderWarning(providerId, domain, connectionId, ex) {
-    let kind;
-    if (ex instanceof AuthenticationError) {
-        kind = 'auth';
-    }
-    else if (ex instanceof RequestRateLimitError) {
-        kind = 'rate-limit';
-    }
-    else if (ex instanceof RequestNotFoundError) {
-        kind = 'not-found';
-    }
-    else {
-        kind = 'other';
-    }
-    return {
-        providerId: providerId,
-        domain: domain,
-        connectionId: connectionId,
-        message: providerWarningMessage(ex),
-        kind: kind,
-        isAuth: kind === 'auth',
-    };
+* Classifies a caught provider exception into a neutral {@link ProviderWarning}. Ordering matters:
+* `instanceof` is checked most-specific-first so a rate-limit isn't mislabeled as a generic error and
+* a 404 isn't mislabeled as auth.
+*/
+function toProviderWarning(providerId, domain, connectionId, ex) {
+	let kind;
+	if (ex instanceof AuthenticationError) kind = "auth";
+	else if (ex instanceof RequestRateLimitError) kind = "rate-limit";
+	else if (ex instanceof RequestNotFoundError) kind = "not-found";
+	else kind = "other";
+	return {
+		providerId,
+		domain,
+		connectionId,
+		message: providerWarningMessage(ex),
+		kind,
+		isAuth: kind === "auth"
+	};
 }
 /**
- * A scope's identity, as the stable string that keys it.
- *
- * The single definition of what "the same scope" means, shared by the failure and omission dedup keys in
- * `providerPaging.ts` and by {@link providerWarningKey} below, so a scope gaining a field is one edit rather
- * than three. `providerId` is included: the same repository ID under two providers is two scopes.
- *
- * The parameter is structural rather than the SDK's `CollectionScope` so this module keeps naming no
- * `@gitkraken/provider-apis` types (see the export block in `index.ts`) while still serving its SDK-facing
- * callers, which pass that type in unchanged.
- */
-export function collectionScopeKey(scope) {
-    return [scope?.providerId ?? '', scope?.resourceId ?? '', scope?.projectId ?? '', scope?.repositoryId ?? ''].join(' ');
+* A scope's identity, as the stable string that keys it.
+*
+* The single definition of what "the same scope" means, shared by the failure and omission dedup keys in
+* `providerPaging.ts` and by {@link providerWarningKey} below, so a scope gaining a field is one edit rather
+* than three. `providerId` is included: the same repository ID under two providers is two scopes.
+*
+* The parameter is structural rather than the SDK's `CollectionScope` so this module keeps naming no
+* `@gitkraken/provider-apis` types (see the export block in `index.ts`) while still serving its SDK-facing
+* callers, which pass that type in unchanged.
+*/
+function collectionScopeKey(scope) {
+	return [
+		scope?.providerId ?? "",
+		scope?.resourceId ?? "",
+		scope?.projectId ?? "",
+		scope?.repositoryId ?? ""
+	].join(" ");
 }
 /**
- * The omission's contribution to a warning's identity — empty when there is none, so a warning without an
- * omission keeps deduping exactly as it did before the field existed.
- *
- * Two omissions of different kinds do produce different `message` values today, so message alone would still
- * separate them. That is incidental: the premise of `omission` is that consumers must not depend on prose
- * carrying the distinguishing fact, and this key must not either.
- */
+* The omission's contribution to a warning's identity — empty when there is none, so a warning without an
+* omission keeps deduping exactly as it did before the field existed.
+*
+* Two omissions of different kinds do produce different `message` values today, so message alone would still
+* separate them. That is incidental: the premise of `omission` is that consumers must not depend on prose
+* carrying the distinguishing fact, and this key must not either.
+*/
 function providerWarningOmissionKey(omission) {
-    if (omission == null)
-        return '';
-    return [
-        omission.kind,
-        omission.recovery,
-        omission.limit ?? '',
-        omission.totalCount ?? '',
-        collectionScopeKey(omission.scope),
-    ].join(' ');
+	if (omission == null) return "";
+	return [
+		omission.kind,
+		omission.recovery,
+		omission.limit ?? "",
+		omission.totalCount ?? "",
+		collectionScopeKey(omission.scope)
+	].join(" ");
 }
 /**
- * Strips the omission from every warning in `warnings` when the read as a whole failed.
- *
- * An omission asserts the request SUCCEEDED, and a drain only learns it failed AFTER it may have emitted one:
- * an early page can report its own truncation and then a later page can die. Deciding per warning, at the
- * moment each is built, cannot see that future — so the aggregate is reconciled once, here, where
- * `fetchFailed` is final. Call it at the point a read returns its `fetchFailed`.
- *
- * Re-dedupes as it goes: the omission is part of a warning's identity, so two warnings that differed only
- * there become identical once it is gone, and the array's contract is that no two entries are equal.
- *
- * Mutates in place: the warning array is the one being returned, and callers accumulate into it across pages.
- */
-export function reconcileOmissionsWithFailure(warnings, fetchFailed) {
-    if (!fetchFailed || !warnings.some(w => w.omission != null))
-        return;
-    const reconciled = [];
-    for (const warning of warnings) {
-        if (warning.omission == null) {
-            appendDedupedWarning(reconciled, warning);
-            continue;
-        }
-        const { omission: _omission, ...rest } = warning;
-        appendDedupedWarning(reconciled, rest);
-    }
-    warnings.splice(0, warnings.length, ...reconciled);
+* Strips the omission from every warning in `warnings` when the read as a whole failed.
+*
+* An omission asserts the request SUCCEEDED, and a drain only learns it failed AFTER it may have emitted one:
+* an early page can report its own truncation and then a later page can die. Deciding per warning, at the
+* moment each is built, cannot see that future — so the aggregate is reconciled once, here, where
+* `fetchFailed` is final. Call it at the point a read returns its `fetchFailed`.
+*
+* Re-dedupes as it goes: the omission is part of a warning's identity, so two warnings that differed only
+* there become identical once it is gone, and the array's contract is that no two entries are equal.
+*
+* Mutates in place: the warning array is the one being returned, and callers accumulate into it across pages.
+*/
+function reconcileOmissionsWithFailure(warnings, fetchFailed) {
+	if (!fetchFailed || !warnings.some((w) => w.omission != null)) return;
+	const reconciled = [];
+	for (const warning of warnings) {
+		if (warning.omission == null) {
+			appendDedupedWarning(reconciled, warning);
+			continue;
+		}
+		const { omission: _omission, ...rest } = warning;
+		appendDedupedWarning(reconciled, rest);
+	}
+	warnings.splice(0, warnings.length, ...reconciled);
 }
 /**
- * A stable key for deduplicating warnings accumulated across drained pages / fan-out scopes.
- *
- * `message` stays LAST. It is the only free-form segment — provider prose, spaces and all — so anything
- * appended after it could be impersonated by a message that happens to end in the same text.
- */
+* A stable key for deduplicating warnings accumulated across drained pages / fan-out scopes.
+*
+* `message` stays LAST. It is the only free-form segment — provider prose, spaces and all — so anything
+* appended after it could be impersonated by a message that happens to end in the same text.
+*/
 function providerWarningKey(warning) {
-    return [
-        warning.providerId,
-        warning.connectionId ?? '',
-        warning.domain ?? '',
-        warning.kind,
-        providerWarningOmissionKey(warning.omission),
-        warning.message,
-    ].join(' ');
+	return [
+		warning.providerId,
+		warning.connectionId ?? "",
+		warning.domain ?? "",
+		warning.kind,
+		providerWarningOmissionKey(warning.omission),
+		warning.message
+	].join(" ");
 }
 /**
- * Appends `warning` to `into` only when an equal warning (by provider/connection/domain/kind/message, plus the
- * structured omission when one is present) is absent.
- */
-export function appendDedupedWarning(into, warning) {
-    const key = providerWarningKey(warning);
-    if (into.some(existing => providerWarningKey(existing) === key))
-        return;
-    into.push(warning);
+* Appends `warning` to `into` only when an equal warning (by provider/connection/domain/kind/message, plus the
+* structured omission when one is present) is absent.
+*/
+function appendDedupedWarning(into, warning) {
+	const key = providerWarningKey(warning);
+	if (into.some((existing) => providerWarningKey(existing) === key)) return;
+	into.push(warning);
 }
+//#endregion
+export { appendDedupedWarning, collectionScopeKey, reconcileOmissionsWithFailure, toProviderWarning };
+
 //# sourceMappingURL=results.js.map

package/dist/plus/integrations/results.js.map

@@ -1 +1 @@
-{"version":3,"file":"results.js","sourceRoot":"","sources":["../../../src/plus/integrations/results.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAsQ1G,MAAM,+BAA+B,GAAG,GAAG,CAAC;AAE5C,SAAS,sBAAsB,CAAC,EAAW;IAC1C,MAAM,GAAG,GAAG,CAAC,EAAE,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG,EAA8E,CAAC;IAC/F,MAAM,MAAM,GACX,OAAO,OAAO,EAAE,MAAM,KAAK,QAAQ;QAClC,CAAC,CAAC,OAAO,CAAC,MAAM;QAChB,CAAC,CAAC,OAAO,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,QAAQ;YAC9C,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM;YACzB,CAAC,CAAC,SAAS,CAAC;IAEf,4GAA4G;IAC5G,6GAA6G;IAC7G,IAAI,wCAAwC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,uCAAuC,MAAM,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC;IACvG,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,uCAAuC,MAAM,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC;IACvG,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,GAAG,+BAA+B;QAClD,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,+BAA+B,GAAG,CAAC,CAAC,KAAK;QAC3D,CAAC,CAAC,GAAG,CAAC;AACR,CAAC;AA+BD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAChC,UAA0B,EAC1B,MAA0B,EAC1B,YAAgC,EAChC,EAAW;IAEX,IAAI,IAA6B,CAAC;IAClC,IAAI,EAAE,YAAY,mBAAmB,EAAE,CAAC;QACvC,IAAI,GAAG,MAAM,CAAC;IACf,CAAC;SAAM,IAAI,EAAE,YAAY,qBAAqB,EAAE,CAAC;QAChD,IAAI,GAAG,YAAY,CAAC;IACrB,CAAC;SAAM,IAAI,EAAE,YAAY,oBAAoB,EAAE,CAAC;QAC/C,IAAI,GAAG,WAAW,CAAC;IACpB,CAAC;SAAM,CAAC;QACP,IAAI,GAAG,OAAO,CAAC;IAChB,CAAC;IAED,OAAO;QACN,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,MAAM;QACd,YAAY,EAAE,YAAY;QAC1B,OAAO,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACnC,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,IAAI,KAAK,MAAM;KACvB,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA+C;IACjF,OAAO,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAChH,GAAG,CACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,0BAA0B,CAAC,QAA6C;IAChF,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAEhC,OAAO;QACN,QAAQ,CAAC,IAAI;QACb,QAAQ,CAAC,QAAQ;QACjB,QAAQ,CAAC,KAAK,IAAI,EAAE;QACpB,QAAQ,CAAC,UAAU,IAAI,EAAE;QACzB,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC;KAClC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAAC,QAA2B,EAAE,WAAoB;IAC9F,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC;QAAE,OAAO;IAEpE,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;YAC9B,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1C,SAAS;QACV,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QACjD,oBAAoB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,OAAwB;IACnD,OAAO;QACN,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,YAAY,IAAI,EAAE;QAC1B,OAAO,CAAC,MAAM,IAAI,EAAE;QACpB,OAAO,CAAC,IAAI;QACZ,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC5C,OAAO,CAAC,OAAO;KACf,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAuB,EAAE,OAAwB;IACrF,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO;IAExE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACpB,CAAC"}
+{"version":3,"file":"results.js","names":[],"sources":["../../../../plus/integrations/src/results.ts"],"sourcesContent":["import { AuthenticationError, RequestNotFoundError, RequestRateLimitError } from '@gitlens/git/errors.js';\nimport type { IssueSorting } from '@gitlens/git/models/issue.js';\nimport type { PullRequestSorting } from '@gitlens/git/models/pullRequest.js';\nimport type { IntegrationIds } from './constants.js';\n\nexport interface ConnectionStateChangeEvent {\n\tkey: string;\n\treason: 'connected' | 'disconnected';\n}\n\n/**\n * A per-provider, per-connection warning surfaced alongside (partial) read results. Consumers use\n * these to drive auth recovery, retry, or truncation messaging without the read itself throwing.\n *\n * `kind` is the programmatic discriminant (a rate-limit is retryable, a 404 is not, an auth failure\n * needs re-connection); `isAuth` is retained as a convenience mirror of `kind === 'auth'`.\n */\nexport type ProviderWarningKind = 'auth' | 'rate-limit' | 'not-found' | 'no-connection' | 'other';\n\n/**\n * Why a read that SUCCEEDED still withheld results:\n * - `provider-limit`: the provider refuses to serve past a cap it enforces (GitHub search's 1,000-result\n *   ceiling, Trello's `cards_limit`), so the excess is unreachable through that query.\n * - `recovery-budget`: the internal partitioned recovery stopped spending upstream requests before it ran\n *   out of partitions to visit.\n * - `pagination-incomplete`: pages were left unread — a sub-scope of a multi-scope read that was not drained,\n *   a drain that stopped at its own page backstop, or a provider that advertised another page and gave no way\n *   to reach it. These have DIFFERENT remedies, so the kind alone does not say whether more can be fetched;\n *   read {@link ProviderWarningOmission.recovery} for that.\n *\n * Mirrors the vocabulary the SDK reports. Declared here rather than imported so this module stays free of\n * `@gitkraken/provider-apis` types (see the export block in `index.ts`); `collectionMetadata.ts` holds the\n * compile-time link, so an SDK bump that adds a kind fails the build at that boundary.\n */\nexport type ProviderWarningOmissionKind = 'provider-limit' | 'recovery-budget' | 'pagination-incomplete';\n\n/**\n * How a consumer can recover omitted results. `page-budget` reruns with a larger budget; `narrow-scope`\n * requests a smaller server-side scope; `none` promises neither. Switch on the exact value because only\n * `page-budget` is a fetch-more action.\n */\nexport type ProviderWarningOmissionRecovery = 'none' | 'page-budget' | 'narrow-scope';\n\n/** Which repository / project / resource an omission is attributed to. All fields optional; a scope may name none. */\nexport interface ProviderWarningOmissionScope {\n\tproviderId?: string;\n\tresourceId?: string;\n\tprojectId?: string;\n\trepositoryId?: string;\n}\n\nexport interface ProviderWarningOmission {\n\tkind: ProviderWarningOmissionKind;\n\t/**\n\t * Whether anything would fetch the missing items, and what. Gate a \"load more\" affordance on this rather\n\t * than on `kind` — see {@link ProviderWarningOmissionRecovery}.\n\t */\n\trecovery: ProviderWarningOmissionRecovery;\n\t/**\n\t * The cap the provider enforces, when it reports one. NOT a result count for every kind: on\n\t * `recovery-budget` this is a REQUEST budget and must not be shown to a user as a number of results.\n\t */\n\tlimit?: number;\n\t/** Total matches the provider reported, when it reports one. Only GitHub's search cap does today. */\n\ttotalCount?: number;\n\t/**\n\t * The order the reachable window was selected under, as `field:direction`, when the omission is a result\n\t * ceiling.\n\t *\n\t * Present so a consumer can word its own \"N matched, showing the first M\" without assuming WHICH M: the\n\t * provider serves the top M under this key, so the sentence is only true if it names it. Absent for every\n\t * omission that isn't a ceiling, where no window was selected by an order.\n\t *\n\t * A union of both vocabularies rather than the issue one alone: `PullRequestSorting` happens to be a subset\n\t * today, so narrowing this to {@link IssueSorting} would still compile while describing only half the reads\n\t * that set it — and would break the day the PR search gains a key the issue search has no name for.\n\t */\n\tsort?: IssueSorting | PullRequestSorting;\n\t/** Which repository / project / resource was affected, when one is attributed. */\n\tscope?: ProviderWarningOmissionScope;\n}\n\nexport interface ProviderWarning {\n\tproviderId: IntegrationIds;\n\t/** Disambiguates connections on self-managed hosts (where one provider id spans multiple domains). */\n\tdomain?: string;\n\t/** The specific token/connection the read was pinned to, when a `connectionId` was supplied. */\n\tconnectionId?: string;\n\tmessage: string;\n\tkind: ProviderWarningKind;\n\t/** Convenience mirror of `kind === 'auth'`. */\n\tisAuth: boolean;\n\t/**\n\t * Present when this warning describes results the read could not return even though the request itself\n\t * SUCCEEDED — a provider-enforced cap, an exhausted recovery budget, a page budget, or a sub-scope the read\n\t * did not drain.\n\t *\n\t * Its presence is the signal: an omission is not a failure. Message it as incompleteness rather than as a\n\t * failed read, and do NOT derive that from `message`, which is English prose and subject to rewording.\n\t * `kind` stays `'other'` for these, so the failure discriminant keeps meaning exactly what it meant before\n\t * this field existed.\n\t *\n\t * Whether anything would fetch the rest is a SEPARATE question — read {@link ProviderWarningOmission.recovery},\n\t * not `kind`, and never assume a retry of the same request returns more.\n\t *\n\t * `limit` / `totalCount` / `scope` are forwarded only when they are reported; most omissions carry none of\n\t * the three, so render correctly without them — and see {@link ProviderWarningOmission.limit} before\n\t * showing that figure as a result count.\n\t *\n\t * Its ABSENCE proves nothing. It is never set on a warning derived from a caught exception (see\n\t * {@link toProviderWarning}) or from a structured scope failure — those are failures, and the field would\n\t * be a lie there. But it is also absent whenever incompleteness was reported without naming what was left\n\t * out, so treat a bare `kind: 'other'` warning as unclassified rather than as a proven failure.\n\t */\n\tomission?: ProviderWarningOmission;\n}\n\nexport interface ProviderPageInfo {\n\t/**\n\t * The 1-based POSITION of the returned page. One convention across every paged read, page-number and\n\t * cursor paging alike, so a `getNextPageParam`-style consumer can key off it uniformly:\n\t * - the page number the provider itself reported, when it reports one (authoritative);\n\t * - else the position the caller addressed: the page encoded in a threaded page cursor, or the `page`\n\t *   supplied alongside an opaque cursor (1 when the caller supplied no `page`);\n\t * - else, for a read that can be advanced by page number, the requested `page` — the provider either\n\t *   honored it or the internal drain reached it (see the paging contract on `IntegrationManager`);\n\t * - else 1: a cursor-only read with no cursor threaded back ignores a requested page number and answers\n\t *   with its first page, so echoing the request would mislabel page 1 as page N.\n\t *\n\t * A page past the provider's terminal cursor still reports the requested `page` with empty `items` — an\n\t * empty page N, never page N-1 relabeled.\n\t *\n\t * Continue a cursor-paged read from `cursor`, NOT from `currentPage + 1`: a cursor-only host can't be\n\t * addressed by number, so this is a position label and not always a resumable request parameter.\n\t */\n\tcurrentPage: number;\n\t/**\n\t * The page size IN EFFECT, which is not always the one requested — it is whichever of these the read can\n\t * actually vouch for:\n\t * - the size the provider reported for the page it served (numbered-page hosts), else\n\t * - the `itemsPerPage` that was applied to the request (repo-scoped reads, which forward it), else\n\t * - `items.length`, for a read that takes no page size at all: the account-wide PR/issue reads, `listRepos`\n\t *   (cursor-only), and `listIssueTrackerIssuesPage`, whose `itemsPerPage` counts PROJECTS rather than issues.\n\t *\n\t * So it is a description of the page, not an echo of the request: don't derive a total from\n\t * `currentPage * itemsPerPage`, and don't read `items.length < itemsPerPage` as \"last page\" — `hasMore` /\n\t * `cursor` are the only continuation signals.\n\t */\n\titemsPerPage: number;\n\t/**\n\t * A COMPLETENESS assertion, not a mode flag: `true` only when a sweep drained every page of every target\n\t * without truncating or failing (`!truncated && !fetchFailed`). Set exclusively by `sweepPullRequests` /\n\t * `sweepClosedPullRequests` and absent on every paged read, so `allPages !== true` does NOT by itself mean\n\t * \"this was a single page\".\n\t *\n\t * This is the signal to gate on before caching a sweep as authoritative: unlike `truncated` it is `false`\n\t * for BOTH kinds of incompleteness, so it can't be misread as a benign cap.\n\t */\n\tallPages?: boolean;\n\t/**\n\t * True when the read stopped before it could confirm it had everything. Deliberately does NOT distinguish\n\t * WHY, and a consumer must not assume it means a provider ceiling — a sweep sets it from three different\n\t * origins:\n\t * - a provider-side ceiling or per-scope backstop propagated from below (e.g. GitHub Search's 1000-result\n\t *   cap): the missing items are NOT reachable, so this really is \"complete to the provider's limit\";\n\t * - the sweep's OWN `maxPages` cap (default 100) with a usable cursor still in hand: the missing items ARE\n\t *   reachable and were simply not fetched — raise `maxPages` to get them;\n\t * - the provider reporting another page but handing back no usable cursor: not reachable.\n\t *\n\t * Only the second is recoverable, and a sweep exposes no continuation cursor, so treating a truncated sweep\n\t * as a complete set silently drops reachable data in that case. Prefer `allPages` for the cache decision.\n\t */\n\ttruncated?: boolean;\n}\n\nexport interface ProviderResult<T> {\n\titems: T[];\n\twarnings: ProviderWarning[];\n\t/**\n\t * True when `items` is incomplete — distinguishes a failed or truncated flat read from a genuinely empty\n\t * result. Paged results additionally use `page.truncated` when a completed page could not confirm it\n\t * drained everything.\n\t */\n\tfetchFailed?: boolean;\n}\n\nexport interface ProviderPagedResult<T> extends ProviderResult<T> {\n\tpage: ProviderPageInfo;\n\thasMore: boolean;\n\t/**\n\t * Opaque cursor for cursor-based paging (GraphQL, per-repo/per-project cursors, etc.). For hosts that\n\t * require the previous page's cursor, consumers should pass this value back to the next `cursor` option.\n\t * A retry-only cursor may remain when `hasMore` is false: `hasMore` means automatic forward progress,\n\t * while explicitly reusing such a cursor retries failed work without creating an infinite paging loop.\n\t */\n\tcursor?: string;\n}\n\nexport interface ProviderSweepResult<T> extends ProviderResult<T> {\n\tpage: ProviderPageInfo;\n\thasMore: boolean;\n\t/**\n\t * Providers whose top-level read failed before returning any usable page. Partial per-scope failures stay\n\t * represented by `warnings` + `fetchFailed` and are intentionally excluded.\n\t */\n\tfailedProviderIds: IntegrationIds[];\n\t/**\n\t * Providers whose read started successfully but could not produce an authoritative complete slice (for\n\t * example, a later page failed, collection metadata reported a partial scope, or a paging backstop was hit).\n\t * Kept separate from\n\t * `failedProviderIds` so consumers can accept healthy sibling providers while preserving an older snapshot\n\t * for a provider whose returned slice has a gap.\n\t */\n\tincompleteProviderIds: IntegrationIds[];\n}\n\nexport interface ProviderBroadenResult<T> extends ProviderPagedResult<T> {\n\tbroadenedProviderIds: IntegrationIds[];\n\t/** Providers for which no requested org produced a usable issue result. */\n\tfailedProviderIds: IntegrationIds[];\n\t/** Providers with both a usable org result and at least one failed or truncated org slice. */\n\tincompleteProviderIds: IntegrationIds[];\n\tfanOutCount: number;\n}\n\nexport type RepositoryResolutionStatus =\n\t| 'resolved'\n\t| 'not-found'\n\t| 'unauthorized'\n\t| 'unsupported-provider'\n\t| 'invalid-remote-url'\n\t| 'host-mismatch'\n\t| 'undetermined';\n\nexport interface RepositoryIdentity {\n\tproviderId: IntegrationIds;\n\tdomain: string;\n\t/** The provider's canonical owner/namespace (follows renames), falling back to the parsed remote when omitted. */\n\towner: string;\n\t/** The provider's canonical repo name (follows renames), falling back to the parsed remote when omitted. */\n\tname: string;\n\tproject?: string;\n\t/** The original input remote URL, so the caller can key the resolution back to the remote it asked about. */\n\tremoteUrl: string;\n\t/**\n\t * True when the provider's canonical owner/name differ from what the input remote URL carried — i.e. the\n\t * repo was renamed/moved host-side and the local remote is stale. Case-insensitive, mirroring gkcli's\n\t * `EqualFold` compare so hosts that echo the input casing (e.g. Bitbucket Server/Azure) aren't flagged.\n\t */\n\trenamed: boolean;\n}\n\nexport interface RepositoryResolution {\n\tstatus: RepositoryResolutionStatus;\n\tidentity?: RepositoryIdentity;\n\twarning?: ProviderWarning;\n}\n\nexport interface ResolveRepositoryResult {\n\tresolution: RepositoryResolution;\n}\n\nconst maxProviderWarningMessageLength = 500;\n\nfunction providerWarningMessage(ex: unknown): string {\n\tconst raw = (ex instanceof Error ? ex.message : String(ex)).trim();\n\tconst carrier = ex as { status?: unknown; response?: { status?: unknown } } | null | undefined;\n\tconst status =\n\t\ttypeof carrier?.status === 'number'\n\t\t\t? carrier.status\n\t\t\t: typeof carrier?.response?.status === 'number'\n\t\t\t\t? carrier.response.status\n\t\t\t\t: undefined;\n\n\t// Gateways commonly answer API requests with a complete HTML error page. That payload is neither actionable\n\t// nor suitable for a warning DTO consumed by UIs and logs; preserve the status without leaking the document.\n\tif (/<(?:!doctype\\s+html|html|head|body)\\b/i.test(raw)) {\n\t\treturn status != null ? `Provider request failed with status ${status}.` : 'Provider request failed.';\n\t}\n\n\tif (!raw) {\n\t\treturn status != null ? `Provider request failed with status ${status}.` : 'Provider request failed.';\n\t}\n\treturn raw.length > maxProviderWarningMessageLength\n\t\t? `${raw.slice(0, maxProviderWarningMessageLength - 3)}...`\n\t\t: raw;\n}\n\n/**\n * Normalized org/workspace/group shape returned by the provider facade.\n * `name` is the provider identifier to pass to follow-up reads, while `org` is an optional display label.\n */\nexport interface ProviderOrganization {\n\tid: string;\n\tproviderId: IntegrationIds;\n\tname: string;\n\torg?: string;\n\turl: string;\n}\n\n/** Normalized repository shape returned by the provider facade. */\nexport interface ProviderRepositoryShape {\n\tid: string;\n\tnamespace: string;\n\tname: string;\n\t/** Azure DevOps project; `undefined` for hosts without a project layer. */\n\tproject?: string;\n\t/** Web (browser) URL, when the provider exposes it. */\n\turl?: string;\n\t/** HTTPS clone URL, when available. */\n\tcloneUrlHttps?: string;\n\t/** SSH clone URL, when available. */\n\tcloneUrlSsh?: string;\n\t/** Default branch name, when the provider reports it. */\n\tdefaultBranch?: string;\n}\n\n/**\n * Classifies a caught provider exception into a neutral {@link ProviderWarning}. Ordering matters:\n * `instanceof` is checked most-specific-first so a rate-limit isn't mislabeled as a generic error and\n * a 404 isn't mislabeled as auth.\n */\nexport function toProviderWarning(\n\tproviderId: IntegrationIds,\n\tdomain: string | undefined,\n\tconnectionId: string | undefined,\n\tex: unknown,\n): ProviderWarning {\n\tlet kind: ProviderWarning['kind'];\n\tif (ex instanceof AuthenticationError) {\n\t\tkind = 'auth';\n\t} else if (ex instanceof RequestRateLimitError) {\n\t\tkind = 'rate-limit';\n\t} else if (ex instanceof RequestNotFoundError) {\n\t\tkind = 'not-found';\n\t} else {\n\t\tkind = 'other';\n\t}\n\n\treturn {\n\t\tproviderId: providerId,\n\t\tdomain: domain,\n\t\tconnectionId: connectionId,\n\t\tmessage: providerWarningMessage(ex),\n\t\tkind: kind,\n\t\tisAuth: kind === 'auth',\n\t};\n}\n\n/**\n * A scope's identity, as the stable string that keys it.\n *\n * The single definition of what \"the same scope\" means, shared by the failure and omission dedup keys in\n * `providerPaging.ts` and by {@link providerWarningKey} below, so a scope gaining a field is one edit rather\n * than three. `providerId` is included: the same repository ID under two providers is two scopes.\n *\n * The parameter is structural rather than the SDK's `CollectionScope` so this module keeps naming no\n * `@gitkraken/provider-apis` types (see the export block in `index.ts`) while still serving its SDK-facing\n * callers, which pass that type in unchanged.\n */\nexport function collectionScopeKey(scope: ProviderWarningOmissionScope | undefined): string {\n\treturn [scope?.providerId ?? '', scope?.resourceId ?? '', scope?.projectId ?? '', scope?.repositoryId ?? ''].join(\n\t\t' ',\n\t);\n}\n\n/**\n * The omission's contribution to a warning's identity — empty when there is none, so a warning without an\n * omission keeps deduping exactly as it did before the field existed.\n *\n * Two omissions of different kinds do produce different `message` values today, so message alone would still\n * separate them. That is incidental: the premise of `omission` is that consumers must not depend on prose\n * carrying the distinguishing fact, and this key must not either.\n */\nfunction providerWarningOmissionKey(omission: ProviderWarningOmission | undefined): string {\n\tif (omission == null) return '';\n\n\treturn [\n\t\tomission.kind,\n\t\tomission.recovery,\n\t\tomission.limit ?? '',\n\t\tomission.totalCount ?? '',\n\t\tcollectionScopeKey(omission.scope),\n\t].join(' ');\n}\n\n/**\n * Strips the omission from every warning in `warnings` when the read as a whole failed.\n *\n * An omission asserts the request SUCCEEDED, and a drain only learns it failed AFTER it may have emitted one:\n * an early page can report its own truncation and then a later page can die. Deciding per warning, at the\n * moment each is built, cannot see that future — so the aggregate is reconciled once, here, where\n * `fetchFailed` is final. Call it at the point a read returns its `fetchFailed`.\n *\n * Re-dedupes as it goes: the omission is part of a warning's identity, so two warnings that differed only\n * there become identical once it is gone, and the array's contract is that no two entries are equal.\n *\n * Mutates in place: the warning array is the one being returned, and callers accumulate into it across pages.\n */\nexport function reconcileOmissionsWithFailure(warnings: ProviderWarning[], fetchFailed: boolean): void {\n\tif (!fetchFailed || !warnings.some(w => w.omission != null)) return;\n\n\tconst reconciled: ProviderWarning[] = [];\n\tfor (const warning of warnings) {\n\t\tif (warning.omission == null) {\n\t\t\tappendDedupedWarning(reconciled, warning);\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst { omission: _omission, ...rest } = warning;\n\t\tappendDedupedWarning(reconciled, rest);\n\t}\n\n\twarnings.splice(0, warnings.length, ...reconciled);\n}\n\n/**\n * A stable key for deduplicating warnings accumulated across drained pages / fan-out scopes.\n *\n * `message` stays LAST. It is the only free-form segment — provider prose, spaces and all — so anything\n * appended after it could be impersonated by a message that happens to end in the same text.\n */\nfunction providerWarningKey(warning: ProviderWarning): string {\n\treturn [\n\t\twarning.providerId,\n\t\twarning.connectionId ?? '',\n\t\twarning.domain ?? '',\n\t\twarning.kind,\n\t\tproviderWarningOmissionKey(warning.omission),\n\t\twarning.message,\n\t].join(' ');\n}\n\n/**\n * Appends `warning` to `into` only when an equal warning (by provider/connection/domain/kind/message, plus the\n * structured omission when one is present) is absent.\n */\nexport function appendDedupedWarning(into: ProviderWarning[], warning: ProviderWarning): void {\n\tconst key = providerWarningKey(warning);\n\tif (into.some(existing => providerWarningKey(existing) === key)) return;\n\n\tinto.push(warning);\n}\n"],"mappings":";;AAsQA,MAAM,kCAAkC;AAExC,SAAS,uBAAuB,IAAqB;CACpD,MAAM,OAAO,cAAc,QAAQ,GAAG,UAAU,OAAO,EAAE,EAAA,CAAG,KAAK;CACjE,MAAM,UAAU;CAChB,MAAM,SACL,OAAO,SAAS,WAAW,WACxB,QAAQ,SACR,OAAO,SAAS,UAAU,WAAW,WACpC,QAAQ,SAAS,SACjB,KAAA;CAIL,IAAI,yCAAyC,KAAK,GAAG,GACpD,OAAO,UAAU,OAAO,uCAAuC,OAAO,KAAK;CAG5E,IAAI,CAAC,KACJ,OAAO,UAAU,OAAO,uCAAuC,OAAO,KAAK;CAE5E,OAAO,IAAI,SAAS,kCACjB,GAAG,IAAI,MAAM,GAAG,GAAmC,EAAE,OACrD;AACJ;;;;;;AAoCA,SAAgB,kBACf,YACA,QACA,cACA,IACkB;CAClB,IAAI;CACJ,IAAI,cAAc,qBACjB,OAAO;MACD,IAAI,cAAc,uBACxB,OAAO;MACD,IAAI,cAAc,sBACxB,OAAO;MAEP,OAAO;CAGR,OAAO;EACM;EACJ;EACM;EACd,SAAS,uBAAuB,EAAE;EAC5B;EACN,QAAQ,SAAS;CAClB;AACD;;;;;;;;;;;;AAaA,SAAgB,mBAAmB,OAAyD;CAC3F,OAAO;EAAC,OAAO,cAAc;EAAI,OAAO,cAAc;EAAI,OAAO,aAAa;EAAI,OAAO,gBAAgB;CAAE,CAAC,CAAC,KAC5G,GACD;AACD;;;;;;;;;AAUA,SAAS,2BAA2B,UAAuD;CAC1F,IAAI,YAAY,MAAM,OAAO;CAE7B,OAAO;EACN,SAAS;EACT,SAAS;EACT,SAAS,SAAS;EAClB,SAAS,cAAc;EACvB,mBAAmB,SAAS,KAAK;CAClC,CAAC,CAAC,KAAK,GAAG;AACX;;;;;;;;;;;;;;AAeA,SAAgB,8BAA8B,UAA6B,aAA4B;CACtG,IAAI,CAAC,eAAe,CAAC,SAAS,MAAK,MAAK,EAAE,YAAY,IAAI,GAAG;CAE7D,MAAM,aAAgC,CAAC;CACvC,KAAK,MAAM,WAAW,UAAU;EAC/B,IAAI,QAAQ,YAAY,MAAM;GAC7B,qBAAqB,YAAY,OAAO;GACxC;EACD;EAEA,MAAM,EAAE,UAAU,WAAW,GAAG,SAAS;EACzC,qBAAqB,YAAY,IAAI;CACtC;CAEA,SAAS,OAAO,GAAG,SAAS,QAAQ,GAAG,UAAU;AAClD;;;;;;;AAQA,SAAS,mBAAmB,SAAkC;CAC7D,OAAO;EACN,QAAQ;EACR,QAAQ,gBAAgB;EACxB,QAAQ,UAAU;EAClB,QAAQ;EACR,2BAA2B,QAAQ,QAAQ;EAC3C,QAAQ;CACT,CAAC,CAAC,KAAK,GAAG;AACX;;;;;AAMA,SAAgB,qBAAqB,MAAyB,SAAgC;CAC7F,MAAM,MAAM,mBAAmB,OAAO;CACtC,IAAI,KAAK,MAAK,aAAY,mBAAmB,QAAQ,MAAM,GAAG,GAAG;CAEjE,KAAK,KAAK,OAAO;AAClB"}

package/dist/plus/integrations/telemetry.d.ts

@@ -1,3 +1,4 @@
+//#region ../plus/integrations/src/telemetry.d.ts
 /**
  * Telemetry-source types used by the integrations package.
  *
@@ -8,9 +9,9 @@
  * subtyping accepts the narrower type here.
  */
 export type Source = {
-    source: string;
-    correlationId?: string;
-    detail?: unknown;
+  source: string;
+  correlationId?: string;
+  detail?: unknown;
 };
 export type Sources = string;
 /**
@@ -18,9 +19,10 @@ export type Sources = string;
  * cloud-connect URLs. Owned here in the package (the host no longer carries a duplicate copy).
  */
 export declare const sourceToContext: {
-    [source: string]: string | undefined;
+  [source: string]: string | undefined;
 };
 export declare const detailToContext: {
-    [detail: string]: string | undefined;
+  [detail: string]: string | undefined;
 };
+//#endregion
 //# sourceMappingURL=telemetry.d.ts.map

package/dist/plus/integrations/telemetry.js

@@ -1,11 +1,11 @@
+//#region ../plus/integrations/src/telemetry.ts
 /**
- * Maps a telemetry `source`/`detail` to the `&context=` value the package appends when building
- * cloud-connect URLs. Owned here in the package (the host no longer carries a duplicate copy).
- */
-export const sourceToContext = {
-    launchpad: 'launchpad',
-};
-export const detailToContext = {
-    mcp: 'mcp',
-};
+* Maps a telemetry `source`/`detail` to the `&context=` value the package appends when building
+* cloud-connect URLs. Owned here in the package (the host no longer carries a duplicate copy).
+*/
+const sourceToContext = { launchpad: "launchpad" };
+const detailToContext = { mcp: "mcp" };
+//#endregion
+export { detailToContext, sourceToContext };
+
 //# sourceMappingURL=telemetry.js.map

package/dist/plus/integrations/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../../src/plus/integrations/telemetry.ts"],"names":[],"mappings":"AAkBA;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA6C;IACxE,SAAS,EAAE,WAAW;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAA6C;IACxE,GAAG,EAAE,KAAK;CACV,CAAC"}
+{"version":3,"file":"telemetry.js","names":[],"sources":["../../../../plus/integrations/src/telemetry.ts"],"sourcesContent":["/**\n * Telemetry-source types used by the integrations package.\n *\n * Mirrors the shape of the host's `Source` / `Sources` types from\n * `src/constants.telemetry.ts` but intentionally widens `source` to a plain\n * `string` so the package doesn't depend on the host's enumerated union.\n * The host passes its typed `Source` directly — TypeScript's structural\n * subtyping accepts the narrower type here.\n */\nexport type Source = {\n\tsource: string;\n\tcorrelationId?: string;\n\n\tdetail?: unknown;\n};\n\nexport type Sources = string;\n\n/**\n * Maps a telemetry `source`/`detail` to the `&context=` value the package appends when building\n * cloud-connect URLs. Owned here in the package (the host no longer carries a duplicate copy).\n */\nexport const sourceToContext: { [source: string]: string | undefined } = {\n\tlaunchpad: 'launchpad',\n};\n\nexport const detailToContext: { [detail: string]: string | undefined } = {\n\tmcp: 'mcp',\n};\n"],"mappings":";;;;;AAsBA,MAAa,kBAA4D,EACxE,WAAW,YACZ;AAEA,MAAa,kBAA4D,EACxE,KAAK,MACN"}

package/dist/plus/integrations/utils/domain.utils.d.ts

@@ -1,5 +1,45 @@
+//#region ../plus/integrations/src/utils/domain.utils.d.ts
 /** Extracts the host from a domain expressed as either a URL or a bare host. */
 export declare function hostFromDomain(domain: string | undefined): string | undefined;
+/** Multiple accounts on the same host are unambiguous; an unknown configured host is not. */
+export declare function getSingleConfiguredDomain(configured: readonly {
+  domain?: string;
+}[]): string | undefined;
 /** Whether two URL-or-host domain values identify the same normalized host and port. */
 export declare function areDomainsOnSameHost(first: string | undefined, second: string | undefined): boolean;
+/**
+ * Whether two URL-or-host domain values name the same machine, ignoring the port. For comparing an SSH remote
+ * against a web address: an SSH port says nothing about the port the host serves its web UI and API on.
+ */
+export declare function areDomainsOnSameHostname(first: string | undefined, second: string | undefined): boolean;
+/** Whether a git remote was addressed over the host's web protocol (`https://`/`http://`) rather than SSH/git. */
+export declare function isWebRemoteScheme(scheme: string | undefined): boolean;
+/**
+ * The comparison to use when matching a git remote's host against a configured (web) host. A web remote names
+ * the very host and port the API is served on, so it must match exactly; an SSH or git remote's port — which
+ * `parseGitRemoteUrl` drops anyway — says nothing about the web port, so only the hostname can be compared.
+ */
+export declare function getRemoteHostMatcher(scheme: string | undefined): (first: string | undefined, second: string | undefined) => boolean;
+/**
+ * Builds the API base URL for a self-managed host from a domain expressed as either a URL or a bare host.
+ *
+ * Distinct from {@link hostFromDomain}, which exists to collapse a domain to the identity the connection is
+ * keyed by and therefore DROPS the path. An instance mounted below a context path — Jira Data Center's
+ * `/jira`, a reverse-proxied GitLab or Bitbucket — has to be addressed at that path, so the value a request
+ * is built from must keep it. Callers pass the session's own domain (the unnormalized one the backend
+ * stored) rather than the integration's host-keyed `domain`, and fall back to the latter.
+ */
+export declare function baseUrlFromDomain(domain: string | undefined, protocol: string | undefined): string | undefined;
+/**
+ * Whether two configured addresses point at the same place, comparing them the way a request would.
+ *
+ * Both sides are run through {@link baseUrlFromDomain} first, so the shapes a domain legitimately arrives in
+ * — a bare host, a full URL, a trailing slash — compare equal, while a genuinely different context path does
+ * not. Two absent values are the same address (neither names a path); one absent is not, since that is a
+ * connection gaining or losing one.
+ */
+export declare function sameConfiguredBaseUrl(first: string | undefined, second: string | undefined): boolean;
+/** Decodes one percent-encoded URL path segment, keeping a malformed one as written. */
+export declare function decodePathSegment(segment: string): string;
+//#endregion
 //# sourceMappingURL=domain.utils.d.ts.map

package/dist/plus/integrations/utils/domain.utils.js

@@ -1,27 +1,95 @@
+//#region ../plus/integrations/src/utils/domain.utils.ts
 /** Extracts the host from a domain expressed as either a URL or a bare host. */
-export function hostFromDomain(domain) {
-    const value = domain?.trim();
-    if (!value)
-        return undefined;
-    if (/^[a-z][a-z\d+\-.]*:\/\//i.test(value)) {
-        try {
-            return new URL(value).host || undefined;
-        }
-        catch {
-            return undefined;
-        }
-    }
-    try {
-        return new URL(`https://${value}`).host || undefined;
-    }
-    catch {
-        return undefined;
-    }
+function hostFromDomain(domain) {
+	const value = domain?.trim();
+	if (!value) return void 0;
+	if (/^[a-z][a-z\d+\-.]*:\/\//i.test(value)) try {
+		return new URL(value).host || void 0;
+	} catch {
+		return;
+	}
+	try {
+		return new URL(`https://${value}`).host || void 0;
+	} catch {
+		return;
+	}
+}
+/** Multiple accounts on the same host are unambiguous; an unknown configured host is not. */
+function getSingleConfiguredDomain(configured) {
+	const hosts = new Set(configured.map((connection) => hostFromDomain(connection.domain)));
+	return hosts.size === 1 ? hosts.values().next().value : void 0;
 }
 /** Whether two URL-or-host domain values identify the same normalized host and port. */
-export function areDomainsOnSameHost(first, second) {
-    const firstHost = hostFromDomain(first);
-    const secondHost = hostFromDomain(second);
-    return firstHost != null && secondHost != null && firstHost === secondHost;
+function areDomainsOnSameHost(first, second) {
+	const firstHost = hostFromDomain(first);
+	const secondHost = hostFromDomain(second);
+	return firstHost != null && secondHost != null && firstHost === secondHost;
+}
+/**
+* Whether two URL-or-host domain values name the same machine, ignoring the port. For comparing an SSH remote
+* against a web address: an SSH port says nothing about the port the host serves its web UI and API on.
+*/
+function areDomainsOnSameHostname(first, second) {
+	const firstHost = hostFromDomain(first);
+	const secondHost = hostFromDomain(second);
+	if (firstHost == null || secondHost == null) return false;
+	return new URL(`https://${firstHost}`).hostname === new URL(`https://${secondHost}`).hostname;
+}
+/** Whether a git remote was addressed over the host's web protocol (`https://`/`http://`) rather than SSH/git. */
+function isWebRemoteScheme(scheme) {
+	return scheme === "https://" || scheme === "http://";
+}
+/**
+* The comparison to use when matching a git remote's host against a configured (web) host. A web remote names
+* the very host and port the API is served on, so it must match exactly; an SSH or git remote's port — which
+* `parseGitRemoteUrl` drops anyway — says nothing about the web port, so only the hostname can be compared.
+*/
+function getRemoteHostMatcher(scheme) {
+	return isWebRemoteScheme(scheme) ? areDomainsOnSameHost : areDomainsOnSameHostname;
+}
+/**
+* Builds the API base URL for a self-managed host from a domain expressed as either a URL or a bare host.
+*
+* Distinct from {@link hostFromDomain}, which exists to collapse a domain to the identity the connection is
+* keyed by and therefore DROPS the path. An instance mounted below a context path — Jira Data Center's
+* `/jira`, a reverse-proxied GitLab or Bitbucket — has to be addressed at that path, so the value a request
+* is built from must keep it. Callers pass the session's own domain (the unnormalized one the backend
+* stored) rather than the integration's host-keyed `domain`, and fall back to the latter.
+*/
+function baseUrlFromDomain(domain, protocol) {
+	const value = domain?.trim();
+	if (!value) return void 0;
+	const scheme = /^[a-z][a-z\d+\-.]*:\/\//i.test(value) ? void 0 : protocol ?? "https:";
+	try {
+		const url = new URL(scheme == null ? value : `${scheme}//${value}`);
+		return `${url.protocol}//${url.host}${url.pathname.replace(/\/+$/, "")}`;
+	} catch {
+		return;
+	}
+}
+/**
+* Whether two configured addresses point at the same place, comparing them the way a request would.
+*
+* Both sides are run through {@link baseUrlFromDomain} first, so the shapes a domain legitimately arrives in
+* — a bare host, a full URL, a trailing slash — compare equal, while a genuinely different context path does
+* not. Two absent values are the same address (neither names a path); one absent is not, since that is a
+* connection gaining or losing one.
+*/
+function sameConfiguredBaseUrl(first, second) {
+	if (!first?.trim() && !second?.trim()) return true;
+	const firstUrl = baseUrlFromDomain(first, void 0);
+	const secondUrl = baseUrlFromDomain(second, void 0);
+	return firstUrl != null && secondUrl != null && firstUrl === secondUrl;
+}
+/** Decodes one percent-encoded URL path segment, keeping a malformed one as written. */
+function decodePathSegment(segment) {
+	try {
+		return decodeURIComponent(segment);
+	} catch {
+		return segment;
+	}
 }
+//#endregion
+export { areDomainsOnSameHost, areDomainsOnSameHostname, baseUrlFromDomain, decodePathSegment, getRemoteHostMatcher, getSingleConfiguredDomain, hostFromDomain, isWebRemoteScheme, sameConfiguredBaseUrl };
+
 //# sourceMappingURL=domain.utils.js.map

package/dist/plus/integrations/utils/domain.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"domain.utils.js","sourceRoot":"","sources":["../../../../src/plus/integrations/utils/domain.utils.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,MAA0B;IACxD,MAAM,KAAK,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE7B,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC;YACJ,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAED,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,oBAAoB,CAAC,KAAyB,EAAE,MAA0B;IACzF,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,SAAS,IAAI,IAAI,IAAI,UAAU,IAAI,IAAI,IAAI,SAAS,KAAK,UAAU,CAAC;AAC5E,CAAC"}
+{"version":3,"file":"domain.utils.js","names":[],"sources":["../../../../../plus/integrations/src/utils/domain.utils.ts"],"sourcesContent":["/** Extracts the host from a domain expressed as either a URL or a bare host. */\nexport function hostFromDomain(domain: string | undefined): string | undefined {\n\tconst value = domain?.trim();\n\tif (!value) return undefined;\n\n\tif (/^[a-z][a-z\\d+\\-.]*:\\/\\//i.test(value)) {\n\t\ttry {\n\t\t\treturn new URL(value).host || undefined;\n\t\t} catch {\n\t\t\treturn undefined;\n\t\t}\n\t}\n\n\ttry {\n\t\treturn new URL(`https://${value}`).host || undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/** Multiple accounts on the same host are unambiguous; an unknown configured host is not. */\nexport function getSingleConfiguredDomain(configured: readonly { domain?: string }[]): string | undefined {\n\tconst hosts = new Set(configured.map(connection => hostFromDomain(connection.domain)));\n\treturn hosts.size === 1 ? hosts.values().next().value : undefined;\n}\n\n/** Whether two URL-or-host domain values identify the same normalized host and port. */\nexport function areDomainsOnSameHost(first: string | undefined, second: string | undefined): boolean {\n\tconst firstHost = hostFromDomain(first);\n\tconst secondHost = hostFromDomain(second);\n\treturn firstHost != null && secondHost != null && firstHost === secondHost;\n}\n\n/**\n * Whether two URL-or-host domain values name the same machine, ignoring the port. For comparing an SSH remote\n * against a web address: an SSH port says nothing about the port the host serves its web UI and API on.\n */\nexport function areDomainsOnSameHostname(first: string | undefined, second: string | undefined): boolean {\n\tconst firstHost = hostFromDomain(first);\n\tconst secondHost = hostFromDomain(second);\n\tif (firstHost == null || secondHost == null) return false;\n\n\treturn new URL(`https://${firstHost}`).hostname === new URL(`https://${secondHost}`).hostname;\n}\n\n/** Whether a git remote was addressed over the host's web protocol (`https://`/`http://`) rather than SSH/git. */\nexport function isWebRemoteScheme(scheme: string | undefined): boolean {\n\treturn scheme === 'https://' || scheme === 'http://';\n}\n\n/**\n * The comparison to use when matching a git remote's host against a configured (web) host. A web remote names\n * the very host and port the API is served on, so it must match exactly; an SSH or git remote's port — which\n * `parseGitRemoteUrl` drops anyway — says nothing about the web port, so only the hostname can be compared.\n */\nexport function getRemoteHostMatcher(\n\tscheme: string | undefined,\n): (first: string | undefined, second: string | undefined) => boolean {\n\treturn isWebRemoteScheme(scheme) ? areDomainsOnSameHost : areDomainsOnSameHostname;\n}\n\n/**\n * Builds the API base URL for a self-managed host from a domain expressed as either a URL or a bare host.\n *\n * Distinct from {@link hostFromDomain}, which exists to collapse a domain to the identity the connection is\n * keyed by and therefore DROPS the path. An instance mounted below a context path — Jira Data Center's\n * `/jira`, a reverse-proxied GitLab or Bitbucket — has to be addressed at that path, so the value a request\n * is built from must keep it. Callers pass the session's own domain (the unnormalized one the backend\n * stored) rather than the integration's host-keyed `domain`, and fall back to the latter.\n */\nexport function baseUrlFromDomain(domain: string | undefined, protocol: string | undefined): string | undefined {\n\tconst value = domain?.trim();\n\tif (!value) return undefined;\n\n\tconst scheme = /^[a-z][a-z\\d+\\-.]*:\\/\\//i.test(value) ? undefined : (protocol ?? 'https:');\n\ttry {\n\t\tconst url = new URL(scheme == null ? value : `${scheme}//${value}`);\n\t\treturn `${url.protocol}//${url.host}${url.pathname.replace(/\\/+$/, '')}`;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * Whether two configured addresses point at the same place, comparing them the way a request would.\n *\n * Both sides are run through {@link baseUrlFromDomain} first, so the shapes a domain legitimately arrives in\n * — a bare host, a full URL, a trailing slash — compare equal, while a genuinely different context path does\n * not. Two absent values are the same address (neither names a path); one absent is not, since that is a\n * connection gaining or losing one.\n */\nexport function sameConfiguredBaseUrl(first: string | undefined, second: string | undefined): boolean {\n\tif (!first?.trim() && !second?.trim()) return true;\n\n\tconst firstUrl = baseUrlFromDomain(first, undefined);\n\tconst secondUrl = baseUrlFromDomain(second, undefined);\n\treturn firstUrl != null && secondUrl != null && firstUrl === secondUrl;\n}\n\n/** Decodes one percent-encoded URL path segment, keeping a malformed one as written. */\nexport function decodePathSegment(segment: string): string {\n\ttry {\n\t\treturn decodeURIComponent(segment);\n\t} catch {\n\t\treturn segment;\n\t}\n}\n"],"mappings":";;AACA,SAAgB,eAAe,QAAgD;CAC9E,MAAM,QAAQ,QAAQ,KAAK;CAC3B,IAAI,CAAC,OAAO,OAAO,KAAA;CAEnB,IAAI,2BAA2B,KAAK,KAAK,GACxC,IAAI;EACH,OAAO,IAAI,IAAI,KAAK,CAAC,CAAC,QAAQ,KAAA;CAC/B,QAAQ;EACP;CACD;CAGD,IAAI;EACH,OAAO,IAAI,IAAI,WAAW,OAAO,CAAC,CAAC,QAAQ,KAAA;CAC5C,QAAQ;EACP;CACD;AACD;;AAGA,SAAgB,0BAA0B,YAAgE;CACzG,MAAM,QAAQ,IAAI,IAAI,WAAW,KAAI,eAAc,eAAe,WAAW,MAAM,CAAC,CAAC;CACrF,OAAO,MAAM,SAAS,IAAI,MAAM,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAA;AACzD;;AAGA,SAAgB,qBAAqB,OAA2B,QAAqC;CACpG,MAAM,YAAY,eAAe,KAAK;CACtC,MAAM,aAAa,eAAe,MAAM;CACxC,OAAO,aAAa,QAAQ,cAAc,QAAQ,cAAc;AACjE;;;;;AAMA,SAAgB,yBAAyB,OAA2B,QAAqC;CACxG,MAAM,YAAY,eAAe,KAAK;CACtC,MAAM,aAAa,eAAe,MAAM;CACxC,IAAI,aAAa,QAAQ,cAAc,MAAM,OAAO;CAEpD,OAAO,IAAI,IAAI,WAAW,WAAW,CAAC,CAAC,aAAa,IAAI,IAAI,WAAW,YAAY,CAAC,CAAC;AACtF;;AAGA,SAAgB,kBAAkB,QAAqC;CACtE,OAAO,WAAW,cAAc,WAAW;AAC5C;;;;;;AAOA,SAAgB,qBACf,QACqE;CACrE,OAAO,kBAAkB,MAAM,IAAI,uBAAuB;AAC3D;;;;;;;;;;AAWA,SAAgB,kBAAkB,QAA4B,UAAkD;CAC/G,MAAM,QAAQ,QAAQ,KAAK;CAC3B,IAAI,CAAC,OAAO,OAAO,KAAA;CAEnB,MAAM,SAAS,2BAA2B,KAAK,KAAK,IAAI,KAAA,IAAa,YAAY;CACjF,IAAI;EACH,MAAM,MAAM,IAAI,IAAI,UAAU,OAAO,QAAQ,GAAG,OAAO,IAAI,OAAO;EAClE,OAAO,GAAG,IAAI,SAAS,IAAI,IAAI,OAAO,IAAI,SAAS,QAAQ,QAAQ,EAAE;CACtE,QAAQ;EACP;CACD;AACD;;;;;;;;;AAUA,SAAgB,sBAAsB,OAA2B,QAAqC;CACrG,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,KAAK,GAAG,OAAO;CAE9C,MAAM,WAAW,kBAAkB,OAAO,KAAA,CAAS;CACnD,MAAM,YAAY,kBAAkB,QAAQ,KAAA,CAAS;CACrD,OAAO,YAAY,QAAQ,aAAa,QAAQ,aAAa;AAC9D;;AAGA,SAAgB,kBAAkB,SAAyB;CAC1D,IAAI;EACH,OAAO,mBAAmB,OAAO;CAClC,QAAQ;EACP,OAAO;CACR;AACD"}

package/dist/plus/integrations/utils/integration.utils.d.ts

@@ -1,23 +1,46 @@
-import type { RemoteProvider, RemoteProviderId } from '../../../git/models/remoteProvider.js';
-import type { CloudGitSelfManagedHostIntegrationIds, IntegrationIds } from '../constants.js';
-import { GitCloudHostIntegrationId, GitSelfManagedHostIntegrationId, IssuesCloudHostIntegrationId } from '../constants.js';
-import type { GitHostIntegration } from '../models/gitHostIntegration.js';
-import type { Integration, IntegrationConnectedKey } from '../models/integration.js';
+import { RemoteProvider, RemoteProviderId } from "../../../git/models/remoteProvider.js";
+import { CloudGitSelfManagedHostIntegrationIds, CloudSelfManagedHostIntegrationIds, GitCloudHostIntegrationId, GitSelfManagedHostIntegrationId, IntegrationIds, IssuesHostIntegrationIds, IssuesSelfManagedHostIntegrationId, SelfManagedHostIntegrationIds } from "../constants.js";
+import { GitHostIntegration } from "../models/gitHostIntegration.js";
+import { Integration, IntegrationConnectedKey } from "../models/integration.js";
+//#region ../plus/integrations/src/utils/integration.utils.d.ts
 export declare const supportedIntegrationIds: IntegrationIds[];
 export declare function convertRemoteProviderIdToIntegrationId(remoteProviderId: RemoteProviderId): GitCloudHostIntegrationId | GitSelfManagedHostIntegrationId | undefined;
 export declare function getIntegrationConnectedKey<T extends IntegrationIds>(id: T, domain?: string): IntegrationConnectedKey<T>;
 export declare function getIntegrationIdForRemote(provider: RemoteProvider | undefined): GitCloudHostIntegrationId | GitSelfManagedHostIntegrationId | undefined;
 export declare function isCloudGitSelfManagedHostIntegrationId(id: IntegrationIds): id is CloudGitSelfManagedHostIntegrationIds;
+/**
+ * Whether this id is a self-managed host whose token comes from the GK cloud backend — the check behind
+ * "expand this provider to one instance per configured host". Distinct from
+ * {@link isCloudGitSelfManagedHostIntegrationId}, which stays git-only because its callers go on to ask the
+ * instance for repositories.
+ */
+export declare function isCloudSelfManagedHostIntegrationId(id: IntegrationIds): id is CloudSelfManagedHostIntegrationIds;
 /**
  * Whether a provider's cloud token uses `expiresIn: 0` to mean "never expires" (rather than "already
  * expired"). GitHub and the cloud self-managed hosts always return 0 for their non-expiring tokens; Trello
  * is issued with `expiration: never` (identity-service), so its cloud token comes back as 0 too. Callers
  * must map 0 → a far-future expiry for these, or the session is immediately treated as expired.
+ *
+ * Every backend-managed self-managed host qualifies, not just the git ones: a self-hosted tracker's token is
+ * a PAT the backend stores as-is and cannot refresh, so reading 0 as "already expired" would re-resolve the
+ * session on every single read.
  */
 export declare function isNonExpiringZeroTokenIntegrationId(id: IntegrationIds): boolean;
 export declare function isGitHostIntegration(integration: Integration): integration is GitHostIntegration;
 export declare function isGitCloudHostIntegrationId(id: IntegrationIds): id is GitCloudHostIntegrationId;
 export declare function isGitSelfManagedHostIntegrationId(id: IntegrationIds): id is GitSelfManagedHostIntegrationId;
+export declare function isIssuesSelfManagedHostIntegrationId(id: IntegrationIds): id is IssuesSelfManagedHostIntegrationId;
+/**
+ * Whether this id addresses ONE customer-run host, whatever it hosts — the predicate the domain-keyed
+ * machinery runs on: the integration cache key, the secret key, the `connected:${id}:${domain}` flag, domain
+ * normalization, per-host primary selection, and multi-account reconcile.
+ *
+ * Deliberately wider than {@link isGitSelfManagedHostIntegrationId}, which is reserved for reads that go on to
+ * ask for repositories, pull requests, or a git remote. Widening THOSE to a tracker would attribute a Jira
+ * host's remotes to Jira; narrowing THESE to git hosts would key a tracker's connections under an empty
+ * domain, collapsing every host of it into one bucket.
+ */
+export declare function isSelfManagedHostIntegrationId(id: IntegrationIds): id is SelfManagedHostIntegrationIds;
 /**
  * Whether this id belongs to a dedicated issue tracker (resource → project) rather than a git host.
  *
@@ -25,7 +48,7 @@ export declare function isGitSelfManagedHostIntegrationId(id: IntegrationIds): i
  * issue-tracker project read asked of GitHub — before resolving a connection. The instance-level
  * {@link isIssuesIntegration} answers the same question once an integration is in hand.
  */
-export declare function isIssuesHostIntegrationId(id: IntegrationIds): id is IssuesCloudHostIntegrationId;
+export declare function isIssuesHostIntegrationId(id: IntegrationIds): id is IssuesHostIntegrationIds;
 /**
  * Whether a read targeted only by an explicit self-managed `domain` (no `connectionId`) must treat a
  * session-less core result as a broken target instead of an empty account. Without this, a self-managed host
@@ -37,4 +60,6 @@ export declare function warnOnMissingSessionForDomain(id: IntegrationIds, domain
 export declare function remoteProviderTypeForIntegration(id: IntegrationIds): RemoteProviderId | undefined;
 /** Normalizes a host remote-config `type` string (e.g. `'GitHub'`) to a git-remote provider type. */
 export declare function remoteProviderTypeForConfig(type: string): RemoteProviderId | undefined;
+export declare function getSelfManagedBaseUrl(id: IntegrationIds, domain: string | undefined, protocol?: string): string | undefined;
+//#endregion
 //# sourceMappingURL=integration.utils.d.ts.map