@gitkraken/core-gitlens 0.9.4 → 0.9.6

package/dist/plus/integrations/reads/etag.js

@@ -0,0 +1,108 @@
+import "../constants.js";
+import { getIssueFieldPresence } from "../fieldPresence.js";
+import { issueEtagIncludes, pullRequestEtagIncludes, pullRequestRevision } from "../models/integration.js";
+//#region ../plus/integrations/src/reads/etag.ts
+/**
+* The etags the batch reads hand back (`getPullRequestsBatch`, `getIssuesBatch`): an opaque stamp of an item's
+* change state, which a caller sends back so a cheap check can answer "unchanged" without a full read.
+*
+* Computed by core, never the provider's HTTP ETag, and from the fields alone — not the item's id, since the
+* caller's key already identifies the target and ids cross vocabularies between reads. Not hashed: the stamp IS
+* the serialized fields, so two different change states can never collide into a false `unchanged` — except for an
+* Azure DevOps pull request's `revision`, a 64-bit hash of the fields Azure changes without a timestamp, where a
+* collision (about 2^-64) is the only way a change can hide. The prefix names the scheme (`pr1`, `is1`) and every
+* include it covers ({@link PullRequestEtagInclude}, {@link IssueEtagInclude}), in canonical order
+* (`pr1+mergeable+checks:`, `is1+reactions:`), so two different sets can never collide even when their values do (a
+* `null` mergeability and a `null` rollup). A stamp from another scheme or another set just compares unequal and
+* costs a full read.
+*/
+/** The hosts that keep no update time on a pull request, whose etag adds a {@link pullRequestRevision}. */
+const revisionProviderIds = /* @__PURE__ */ new Set(["azureDevOps", "azure-devops-server"]);
+function pullRequestEtagFieldsFromShape(pr) {
+	const fields = {
+		state: pr.state,
+		isDraft: pr.isDraft,
+		updatedDate: pr.updatedDate,
+		headSha: pr.refs?.head.sha,
+		mergeableState: pr.mergeableState,
+		reviewDecision: pr.reviewDecision,
+		statusCheckRollupState: "statusCheckRollupState" in pr ? pr.statusCheckRollupState : void 0
+	};
+	if (pr.provider != null && revisionProviderIds.has(pr.provider.id)) fields.revision = pullRequestRevision(pr);
+	return fields;
+}
+function issueEtagFieldsFromShape(issue) {
+	const fields = {
+		state: issue.state,
+		updatedDate: issue.updatedDate
+	};
+	if (issue.thumbsUpCount != null && issue.provider != null && getIssueFieldPresence(issue)?.reactions === "fetched") fields.thumbsUpCount = issue.thumbsUpCount;
+	return fields;
+}
+/**
+* The distinct `includes` in canonical order, whatever order and repetition the caller gave. Values it doesn't know
+* are dropped, so a caller validates them first (see {@link findInvalidPullRequestEtagInclude}).
+*/
+function normalizePullRequestEtagIncludes(includes) {
+	return pullRequestEtagIncludes.filter((include) => includes.includes(include));
+}
+/** The first of `includes` that isn't a {@link PullRequestEtagInclude}, if any. */
+function findInvalidPullRequestEtagInclude(includes) {
+	return includes.find((include) => !pullRequestEtagIncludes.includes(include));
+}
+/**
+* Each of `includes` adds one input — mergeability, review decision or check rollup — which a host may change
+* without moving `updatedDate`. An input that isn't listed is left out, so its churn never forces a full read.
+*/
+function pullRequestEtag(fields, includes) {
+	const covered = normalizePullRequestEtagIncludes(includes);
+	const state = [
+		fields.state,
+		fields.isDraft ?? null,
+		timeOf(fields.updatedDate),
+		fields.headSha ?? null
+	];
+	if (fields.revision != null) state.push(fields.revision);
+	if (covered.length === 0) return `pr1:${JSON.stringify(state)}`;
+	for (const include of covered) switch (include) {
+		case "mergeable":
+			state.push(fields.mergeableState ?? null);
+			break;
+		case "reviewDecision":
+			state.push(fields.reviewDecision ?? null);
+			break;
+		case "checks": state.push(fields.statusCheckRollupState ?? null);
+	}
+	return `pr1+${covered.join("+")}:${JSON.stringify(state)}`;
+}
+/** The issue twin of {@link normalizePullRequestEtagIncludes}; validate with {@link findInvalidIssueEtagInclude}. */
+function normalizeIssueEtagIncludes(includes) {
+	return issueEtagIncludes.filter((include) => includes.includes(include));
+}
+/** The first of `includes` that isn't an {@link IssueEtagInclude}, if any. */
+function findInvalidIssueEtagInclude(includes) {
+	return includes.find((include) => !issueEtagIncludes.includes(include));
+}
+/** `'reactions'` adds the thumbs-up count, which a host changes without moving `updatedDate`. */
+function issueEtag(fields, includes) {
+	const covered = normalizeIssueEtagIncludes(includes);
+	const state = [fields.state, timeOf(fields.updatedDate)];
+	if (covered.length === 0) return `is1:${JSON.stringify(state)}`;
+	for (const include of covered) switch (include) {
+		case "reactions": state.push(fields.thumbsUpCount ?? null);
+	}
+	return `is1+${covered.join("+")}:${JSON.stringify(state)}`;
+}
+/**
+* Never throws: an etag is computed for every fully read row, so a mapper that hands over a missing or unparseable
+* date must not fail the whole read. Such a row's etag just won't match a cheap check's, which always has a date,
+* so the cost is a full read, never a false `unchanged`.
+*/
+function timeOf(date) {
+	const time = new Date(date).getTime();
+	return Number.isNaN(time) ? null : time;
+}
+//#endregion
+export { findInvalidIssueEtagInclude, findInvalidPullRequestEtagInclude, issueEtag, issueEtagFieldsFromShape, normalizeIssueEtagIncludes, normalizePullRequestEtagIncludes, pullRequestEtag, pullRequestEtagFieldsFromShape };
+
+//# sourceMappingURL=etag.js.map

package/dist/plus/integrations/reads/etag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"etag.js","names":[],"sources":["../../../../../plus/integrations/src/reads/etag.ts"],"sourcesContent":["import type { IssueShape } from '@gitlens/git/models/issue.js';\nimport type { PullRequest, PullRequestShape } from '@gitlens/git/models/pullRequest.js';\nimport { GitCloudHostIntegrationId, GitSelfManagedHostIntegrationId } from '../constants.js';\nimport { getIssueFieldPresence } from '../fieldPresence.js';\nimport type {\n\tIssueEtagFields,\n\tIssueEtagInclude,\n\tPullRequestEtagFields,\n\tPullRequestEtagInclude,\n} from '../models/integration.js';\nimport { issueEtagIncludes, pullRequestEtagIncludes, pullRequestRevision } from '../models/integration.js';\n\n/**\n * The etags the batch reads hand back (`getPullRequestsBatch`, `getIssuesBatch`): an opaque stamp of an item's\n * change state, which a caller sends back so a cheap check can answer \"unchanged\" without a full read.\n *\n * Computed by core, never the provider's HTTP ETag, and from the fields alone — not the item's id, since the\n * caller's key already identifies the target and ids cross vocabularies between reads. Not hashed: the stamp IS\n * the serialized fields, so two different change states can never collide into a false `unchanged` — except for an\n * Azure DevOps pull request's `revision`, a 64-bit hash of the fields Azure changes without a timestamp, where a\n * collision (about 2^-64) is the only way a change can hide. The prefix names the scheme (`pr1`, `is1`) and every\n * include it covers ({@link PullRequestEtagInclude}, {@link IssueEtagInclude}), in canonical order\n * (`pr1+mergeable+checks:`, `is1+reactions:`), so two different sets can never collide even when their values do (a\n * `null` mergeability and a `null` rollup). A stamp from another scheme or another set just compares unequal and\n * costs a full read.\n */\n\n/** The hosts that keep no update time on a pull request, whose etag adds a {@link pullRequestRevision}. */\nconst revisionProviderIds: ReadonlySet<string> = new Set([\n\tGitCloudHostIntegrationId.AzureDevOps,\n\tGitSelfManagedHostIntegrationId.AzureDevOpsServer,\n]);\n\nexport function pullRequestEtagFieldsFromShape(pr: PullRequestShape): PullRequestEtagFields {\n\tconst fields: PullRequestEtagFields = {\n\t\tstate: pr.state,\n\t\tisDraft: pr.isDraft,\n\t\tupdatedDate: pr.updatedDate,\n\t\theadSha: pr.refs?.head.sha,\n\t\tmergeableState: pr.mergeableState,\n\t\treviewDecision: pr.reviewDecision,\n\t\t// On the class, not the shape: every provider's mapper builds a `PullRequest`. Read by name rather than by\n\t\t// `instanceof`, which a second copy of the model module fails, silently dropping the rollup from every full\n\t\t// row's etag so that no cheap check ever matches it again.\n\t\tstatusCheckRollupState: 'statusCheckRollupState' in pr ? (pr as PullRequest).statusCheckRollupState : undefined,\n\t};\n\t// Read defensively, as `timeOf` reads the date: a row without a provider must not fail the read.\n\tif (pr.provider != null && revisionProviderIds.has(pr.provider.id)) {\n\t\tfields.revision = pullRequestRevision(pr);\n\t}\n\treturn fields;\n}\n\nexport function issueEtagFieldsFromShape(issue: IssueShape): IssueEtagFields {\n\tconst fields: IssueEtagFields = { state: issue.state, updatedDate: issue.updatedDate };\n\t// Only where the row's read really fetched reactions: elsewhere a count is a placeholder or a tracker's votes,\n\t// which no cheap check reads, so taking it would fail every check of that row under `'reactions'`.\n\tif (\n\t\tissue.thumbsUpCount != null &&\n\t\tissue.provider != null &&\n\t\tgetIssueFieldPresence(issue)?.reactions === 'fetched'\n\t) {\n\t\tfields.thumbsUpCount = issue.thumbsUpCount;\n\t}\n\treturn fields;\n}\n\n/**\n * The distinct `includes` in canonical order, whatever order and repetition the caller gave. Values it doesn't know\n * are dropped, so a caller validates them first (see {@link findInvalidPullRequestEtagInclude}).\n */\nexport function normalizePullRequestEtagIncludes(\n\tincludes: readonly PullRequestEtagInclude[],\n): readonly PullRequestEtagInclude[] {\n\treturn pullRequestEtagIncludes.filter(include => includes.includes(include));\n}\n\n/** The first of `includes` that isn't a {@link PullRequestEtagInclude}, if any. */\nexport function findInvalidPullRequestEtagInclude(includes: readonly string[]): string | undefined {\n\treturn includes.find(include => !(pullRequestEtagIncludes as readonly string[]).includes(include));\n}\n\n/**\n * Each of `includes` adds one input — mergeability, review decision or check rollup — which a host may change\n * without moving `updatedDate`. An input that isn't listed is left out, so its churn never forces a full read.\n */\nexport function pullRequestEtag(fields: PullRequestEtagFields, includes: readonly PullRequestEtagInclude[]): string {\n\tconst covered = normalizePullRequestEtagIncludes(includes);\n\tconst state: unknown[] = [fields.state, fields.isDraft ?? null, timeOf(fields.updatedDate), fields.headSha ?? null];\n\t// Only where it is set, so every other host's etag stays exactly what it was.\n\tif (fields.revision != null) {\n\t\tstate.push(fields.revision);\n\t}\n\n\tif (covered.length === 0) return `pr1:${JSON.stringify(state)}`;\n\n\tfor (const include of covered) {\n\t\tswitch (include) {\n\t\t\tcase 'mergeable':\n\t\t\t\tstate.push(fields.mergeableState ?? null);\n\t\t\t\tbreak;\n\t\t\tcase 'reviewDecision':\n\t\t\t\tstate.push(fields.reviewDecision ?? null);\n\t\t\t\tbreak;\n\t\t\tcase 'checks':\n\t\t\t\tstate.push(fields.statusCheckRollupState ?? null);\n\t\t\t\tbreak;\n\t\t}\n\t}\n\n\treturn `pr1+${covered.join('+')}:${JSON.stringify(state)}`;\n}\n\n/** The issue twin of {@link normalizePullRequestEtagIncludes}; validate with {@link findInvalidIssueEtagInclude}. */\nexport function normalizeIssueEtagIncludes(includes: readonly IssueEtagInclude[]): readonly IssueEtagInclude[] {\n\treturn issueEtagIncludes.filter(include => includes.includes(include));\n}\n\n/** The first of `includes` that isn't an {@link IssueEtagInclude}, if any. */\nexport function findInvalidIssueEtagInclude(includes: readonly string[]): string | undefined {\n\treturn includes.find(include => !(issueEtagIncludes as readonly string[]).includes(include));\n}\n\n/** `'reactions'` adds the thumbs-up count, which a host changes without moving `updatedDate`. */\nexport function issueEtag(fields: IssueEtagFields, includes: readonly IssueEtagInclude[]): string {\n\tconst covered = normalizeIssueEtagIncludes(includes);\n\tconst state: unknown[] = [fields.state, timeOf(fields.updatedDate)];\n\tif (covered.length === 0) return `is1:${JSON.stringify(state)}`;\n\n\tfor (const include of covered) {\n\t\tswitch (include) {\n\t\t\tcase 'reactions':\n\t\t\t\tstate.push(fields.thumbsUpCount ?? null);\n\t\t\t\tbreak;\n\t\t}\n\t}\n\n\treturn `is1+${covered.join('+')}:${JSON.stringify(state)}`;\n}\n\n/**\n * Never throws: an etag is computed for every fully read row, so a mapper that hands over a missing or unparseable\n * date must not fail the whole read. Such a row's etag just won't match a cheap check's, which always has a date,\n * so the cost is a full read, never a false `unchanged`.\n */\nfunction timeOf(date: Date): number | null {\n\tconst time = new Date(date).getTime();\n\treturn Number.isNaN(time) ? null : time;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA4BA,MAAM,sCAA2C,IAAI,IAAI,CAAA,eAAA,qBAGzD,CAAC;AAED,SAAgB,+BAA+B,IAA6C;CAC3F,MAAM,SAAgC;EACrC,OAAO,GAAG;EACV,SAAS,GAAG;EACZ,aAAa,GAAG;EAChB,SAAS,GAAG,MAAM,KAAK;EACvB,gBAAgB,GAAG;EACnB,gBAAgB,GAAG;EAInB,wBAAwB,4BAA4B,KAAM,GAAmB,yBAAyB,KAAA;CACvG;CAEA,IAAI,GAAG,YAAY,QAAQ,oBAAoB,IAAI,GAAG,SAAS,EAAE,GAChE,OAAO,WAAW,oBAAoB,EAAE;CAEzC,OAAO;AACR;AAEA,SAAgB,yBAAyB,OAAoC;CAC5E,MAAM,SAA0B;EAAE,OAAO,MAAM;EAAO,aAAa,MAAM;CAAY;CAGrF,IACC,MAAM,iBAAiB,QACvB,MAAM,YAAY,QAClB,sBAAsB,KAAK,CAAC,EAAE,cAAc,WAE5C,OAAO,gBAAgB,MAAM;CAE9B,OAAO;AACR;;;;;AAMA,SAAgB,iCACf,UACoC;CACpC,OAAO,wBAAwB,QAAO,YAAW,SAAS,SAAS,OAAO,CAAC;AAC5E;;AAGA,SAAgB,kCAAkC,UAAiD;CAClG,OAAO,SAAS,MAAK,YAAW,CAAE,wBAA8C,SAAS,OAAO,CAAC;AAClG;;;;;AAMA,SAAgB,gBAAgB,QAA+B,UAAqD;CACnH,MAAM,UAAU,iCAAiC,QAAQ;CACzD,MAAM,QAAmB;EAAC,OAAO;EAAO,OAAO,WAAW;EAAM,OAAO,OAAO,WAAW;EAAG,OAAO,WAAW;CAAI;CAElH,IAAI,OAAO,YAAY,MACtB,MAAM,KAAK,OAAO,QAAQ;CAG3B,IAAI,QAAQ,WAAW,GAAG,OAAO,OAAO,KAAK,UAAU,KAAK;CAE5D,KAAK,MAAM,WAAW,SACrB,QAAQ,SAAR;EACC,KAAK;GACJ,MAAM,KAAK,OAAO,kBAAkB,IAAI;GACxC;EACD,KAAK;GACJ,MAAM,KAAK,OAAO,kBAAkB,IAAI;GACxC;EACD,KAAK,UACJ,MAAM,KAAK,OAAO,0BAA0B,IAAI;CAElD;CAGD,OAAO,OAAO,QAAQ,KAAK,GAAG,EAAE,GAAG,KAAK,UAAU,KAAK;AACxD;;AAGA,SAAgB,2BAA2B,UAAoE;CAC9G,OAAO,kBAAkB,QAAO,YAAW,SAAS,SAAS,OAAO,CAAC;AACtE;;AAGA,SAAgB,4BAA4B,UAAiD;CAC5F,OAAO,SAAS,MAAK,YAAW,CAAE,kBAAwC,SAAS,OAAO,CAAC;AAC5F;;AAGA,SAAgB,UAAU,QAAyB,UAA+C;CACjG,MAAM,UAAU,2BAA2B,QAAQ;CACnD,MAAM,QAAmB,CAAC,OAAO,OAAO,OAAO,OAAO,WAAW,CAAC;CAClE,IAAI,QAAQ,WAAW,GAAG,OAAO,OAAO,KAAK,UAAU,KAAK;CAE5D,KAAK,MAAM,WAAW,SACrB,QAAQ,SAAR;EACC,KAAK,aACJ,MAAM,KAAK,OAAO,iBAAiB,IAAI;CAEzC;CAGD,OAAO,OAAO,QAAQ,KAAK,GAAG,EAAE,GAAG,KAAK,UAAU,KAAK;AACxD;;;;;;AAOA,SAAS,OAAO,MAA2B;CAC1C,MAAM,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ;CACpC,OAAO,OAAO,MAAM,IAAI,IAAI,OAAO;AACpC"}

package/dist/plus/integrations/reads/hierarchy.js

@@ -5,7 +5,7 @@ import { mergeAssessmentInto } from "../collectionMetadata.js";
 import { isGitHostIntegration, isIssuesHostIntegrationId, warnOnMissingSessionForDomain } from "../utils/integration.utils.js";
 import { toProviderRepositoryShape } from "../providers/models.js";
 import { pageToCursor, refusedPage, resolveContinuation, resolveCurrentPage, toProviderPageInfo } from "./paging.js";
-import { gitHostOnlySurfaceWarning, otherWarning, truncationWarning } from "./warnings.js";
+import { gitHostOnlySurfaceWarning, truncationWarning, unsupportedWarning } from "./warnings.js";
 import { runCaptured } from "./drains.js";
 import { isIssuesIntegration } from "../models/issuesIntegration.js";
 import { assertHierarchyReadTarget, mergeHierarchyResults, orgForProject, resourceMatchesOrg, resourceToOrg, withProviderContext } from "./hierarchy.utils.js";
@@ -66,7 +66,7 @@ async function listOrgs(ctx, options) {
 			}
 		} else if (!integration.supportsOrganizationDiscovery) {
 			fetchFailed = true;
-			warnings.push(otherWarning(id, domain, connectionId, `Organization discovery is not supported by '${id}'.`));
+			warnings.push(unsupportedWarning(id, domain, connectionId, `Organization discovery is not supported by '${id}'.`));
 		} else {
 			const { value, warning } = await runCaptured(id, domain, connectionId, () => integration.getOrganizationsForUserResult(connectionId), { warnOnMissingSession });
 			if (value != null) {
@@ -168,7 +168,7 @@ async function listRepos(ctx, options) {
 	if (!isGitHostIntegration(integration)) return refusedPage(page, [gitHostOnlySurfaceWarning(options.providerId, void 0, options.connectionId, "repository discovery")], true);
 	const domain = ctx.domainForRead(integration, options.providerId, options.connectionId, options.domain);
 	const accountWide = options.org == null;
-	if (!(accountWide ? integration.supportsUserRepositoryDiscovery : integration.supportsRepositoryDiscovery)) return refusedPage(page, [otherWarning(options.providerId, domain, options.connectionId, accountWide ? `Account-wide repository discovery is not supported by '${options.providerId}'; list repositories per org instead.` : `Repository discovery is not supported by '${options.providerId}'.`)], true);
+	if (!(accountWide ? integration.supportsUserRepositoryDiscovery : integration.supportsRepositoryDiscovery)) return refusedPage(page, [unsupportedWarning(options.providerId, domain, options.connectionId, accountWide ? `Account-wide repository discovery is not supported by '${options.providerId}'; list repositories per org instead.` : `Repository discovery is not supported by '${options.providerId}'.`)], true);
 	const org = options.org;
 	const warnOnMissingSession = warnOnMissingSessionForDomain(options.providerId, options.domain);
 	const readPage = (cursor) => runCaptured(options.providerId, domain, options.connectionId, () => org == null ? integration.getRepositoriesForUserResult({

package/dist/plus/integrations/reads/hierarchy.js.map

@@ -1 +1 @@
-{"version":3,"file":"hierarchy.js","names":[],"sources":["../../../../../plus/integrations/src/reads/hierarchy.ts"],"sourcesContent":["import { mapBounded } from '@gitlens/utils/promise.js';\nimport { mergeAssessmentInto } from '../collectionMetadata.js';\nimport type { IntegrationIds } from '../constants.js';\nimport {\n\tGitCloudHostIntegrationId,\n\tGitSelfManagedHostIntegrationId,\n\tproviderFanOutConcurrency,\n\tsupportedOrderedCloudIntegrationIds,\n\tsupportedOrderedCloudIssuesIntegrationIds,\n} from '../constants.js';\nimport type { ListOrgsOptions, ListProjectsOptions } from '../manager.js';\nimport { isIssuesIntegration } from '../models/issuesIntegration.js';\nimport type { ProviderHierarchyResult } from '../providers/models.js';\nimport { toProviderRepositoryShape } from '../providers/models.js';\nimport type {\n\tProviderOrganization,\n\tProviderPagedResult,\n\tProviderRepositoryShape,\n\tProviderResult,\n\tProviderWarning,\n} from '../results.js';\nimport { appendDedupedWarning } from '../results.js';\nimport {\n\tisGitHostIntegration,\n\tisIssuesHostIntegrationId,\n\twarnOnMissingSessionForDomain,\n} from '../utils/integration.utils.js';\nimport type { ProviderReadContext } from './context.js';\nimport { runCaptured } from './drains.js';\nimport {\n\tassertHierarchyReadTarget,\n\tmergeHierarchyResults,\n\torgForProject,\n\tresourceMatchesOrg,\n\tresourceToOrg,\n\twithProviderContext,\n} from './hierarchy.utils.js';\nimport { pageToCursor, refusedPage, resolveContinuation, resolveCurrentPage, toProviderPageInfo } from './paging.js';\nimport { gitHostOnlySurfaceWarning, otherWarning, truncationWarning } from './warnings.js';\n\n/**\n * Folds a flat hierarchy result's incompleteness into `warnings`, returning whether it leaves the read\n * non-authoritative. The single funnel for both hierarchy reads, so neither can drift from the other on any of\n * the four decisions it makes:\n *\n * - The metadata is assessed FIRST, so the truncation warning can tell whether it already explained this gap.\n *   Ordered deliberately: emitting first meant an expired credential produced BOTH a typed `auth` warning and\n *   an unclassifiable one for the same cause, and a consumer routing on classification showed the second as\n *   \"this provider failed to load\", with a remedy that doesn't exist, next to the reconnect prompt that was the\n *   actual fix.\n * - The read states the truncation itself only when the metadata reported nothing — the rule\n *   `assessCollectionMetadata` applies to its own generic fallback. Whatever the metadata reported already names\n *   this provider and says something stronger, so restating it costs a false verdict and adds no information.\n * - `'exhausted'`, never `'page-budget'`: `truncated` is one boolean here, so a drain that stopped at its page\n *   budget is indistinguishable from one whose cursor stalled, and `IncompleteReadCause` makes `'exhausted'`\n *   the default whenever a raisable budget is not demonstrably the cause.\n * - A truncation counts as non-authoritative even though the omission above asserts the read succeeded. Unlike\n *   paged repository reads, a flattened hierarchy result has no page object on which to carry incompleteness,\n *   so `fetchFailed` is the only signal a consumer has that the list is short.\n */\nfunction mergeHierarchyIncompleteness(\n\twarnings: ProviderWarning[],\n\tid: IntegrationIds,\n\tdomain: string | undefined,\n\tconnectionId: string | undefined,\n\tresult: Pick<ProviderHierarchyResult<unknown>, 'truncated' | 'metadata'>,\n\treadKind: 'Organization' | 'Project',\n): boolean {\n\tconst assessment = mergeAssessmentInto(warnings, id, domain, connectionId, result.metadata);\n\tif (!result.truncated) return assessment.fetchFailed || assessment.truncated;\n\n\tif (!assessment.reported) {\n\t\t// Deduped like every other `truncationWarning` emission (see `drains.ts`), not plain-pushed: no caller can\n\t\t// collide with it today, but nothing about this funnel guarantees a third read won't.\n\t\tappendDedupedWarning(warnings, truncationWarning(id, domain, connectionId, readKind, 'exhausted'));\n\t}\n\treturn true;\n}\n\nexport async function listOrgs(\n\tctx: ProviderReadContext,\n\toptions?: ListOrgsOptions,\n): Promise<ProviderResult<ProviderOrganization>> {\n\tassertHierarchyReadTarget('listOrgs', options);\n\tconst ids = options?.providerId != null ? [options.providerId] : supportedOrderedCloudIntegrationIds;\n\tconst singleProvider = ids.length === 1;\n\tconst connectionId = singleProvider ? options?.connectionId : undefined;\n\tconst requestedDomain = singleProvider ? options?.domain : undefined;\n\n\tconst results = await mapBounded(ids, providerFanOutConcurrency, async id => {\n\t\tconst integration = await ctx.getIntegrationForRead(id, connectionId, requestedDomain);\n\t\tif (integration == null) {\n\t\t\t// A specifically requested connection that can't be resolved is a broken connection, not a\n\t\t\t// provider with no orgs — surface it (warning + fetchFailed) instead of dropping the id\n\t\t\t// silently, so a caller can tell it apart from an account that genuinely has no orgs.\n\t\t\tconst early = ctx.earlyReturnConnectionWarnings(id, connectionId, requestedDomain);\n\t\t\treturn {\n\t\t\t\titems: [] as ProviderOrganization[],\n\t\t\t\twarnings: early.warnings,\n\t\t\t\tfetchFailed: early.fetchFailed,\n\t\t\t};\n\t\t}\n\n\t\tconst items: ProviderOrganization[] = [];\n\t\tconst warnings: ProviderWarning[] = [];\n\t\tlet fetchFailed = false;\n\t\tconst domain = ctx.domainForRead(integration, id, connectionId, requestedDomain);\n\t\tconst warnOnMissingSession = warnOnMissingSessionForDomain(id, requestedDomain);\n\t\tif (isIssuesIntegration(integration)) {\n\t\t\t// Issue trackers expose \"resources\" (Jira sites, Linear orgs, …) as their org analogue.\n\t\t\tconst { value: resources, warning } = await runCaptured(\n\t\t\t\tid,\n\t\t\t\tdomain,\n\t\t\t\tconnectionId,\n\t\t\t\t() => integration.getResourcesForUserResult(connectionId),\n\t\t\t\t{ warnOnMissingSession: warnOnMissingSession },\n\t\t\t);\n\t\t\tif (resources != null) {\n\t\t\t\titems.push(...resources.map(r => resourceToOrg(id, r)));\n\t\t\t}\n\t\t\tif (warning != null) {\n\t\t\t\twarnings.push(warning);\n\t\t\t\t// A warning with no value is a hard read failure, not an empty account.\n\t\t\t\tif (resources == null) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (!integration.supportsOrganizationDiscovery) {\n\t\t\t// The provider registers no org-discovery hook. Report it as\n\t\t\t// explicitly unsupported rather than contributing a silent empty list that a caller can't\n\t\t\t// tell apart from \"this account has no orgs\".\n\t\t\tfetchFailed = true;\n\t\t\twarnings.push(\n\t\t\t\totherWarning(id, domain, connectionId, `Organization discovery is not supported by '${id}'.`),\n\t\t\t);\n\t\t} else {\n\t\t\tconst { value, warning } = await runCaptured(\n\t\t\t\tid,\n\t\t\t\tdomain,\n\t\t\t\tconnectionId,\n\t\t\t\t() => integration.getOrganizationsForUserResult(connectionId),\n\t\t\t\t{ warnOnMissingSession: warnOnMissingSession },\n\t\t\t);\n\t\t\tif (value != null) {\n\t\t\t\titems.push(...value.values.map(org => withProviderContext(id, org)));\n\n\t\t\t\tif (mergeHierarchyIncompleteness(warnings, id, domain, connectionId, value, 'Organization')) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (warning != null) {\n\t\t\t\twarnings.push(warning);\n\t\t\t\tif (value == null) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn { items: items, warnings: warnings, fetchFailed: fetchFailed };\n\t});\n\n\treturn mergeHierarchyResults(results);\n}\n\nexport async function listProjects(\n\tctx: ProviderReadContext,\n\toptions?: ListProjectsOptions,\n): Promise<ProviderResult<ProviderOrganization>> {\n\tassertHierarchyReadTarget('listProjects', options);\n\tconst ids =\n\t\toptions?.providerId != null\n\t\t\t? [options.providerId]\n\t\t\t: [\n\t\t\t\t\t...supportedOrderedCloudIssuesIntegrationIds,\n\t\t\t\t\tGitCloudHostIntegrationId.AzureDevOps,\n\t\t\t\t\tGitSelfManagedHostIntegrationId.AzureDevOpsServer,\n\t\t\t\t];\n\tconst singleProvider = ids.length === 1;\n\tconst connectionId = singleProvider ? options?.connectionId : undefined;\n\tconst requestedDomain = singleProvider ? options?.domain : undefined;\n\n\tconst results = await mapBounded(ids, providerFanOutConcurrency, async id => {\n\t\tconst integration = await ctx.getIntegrationForRead(id, connectionId, requestedDomain);\n\t\tif (integration == null) {\n\t\t\t// A requested connection that can't be resolved is a broken connection, not a provider with\n\t\t\t// no projects — surface it (warning + fetchFailed) instead of dropping the id silently.\n\t\t\tconst early = ctx.earlyReturnConnectionWarnings(id, connectionId, requestedDomain);\n\t\t\treturn {\n\t\t\t\titems: [] as ProviderOrganization[],\n\t\t\t\twarnings: early.warnings,\n\t\t\t\tfetchFailed: early.fetchFailed,\n\t\t\t};\n\t\t}\n\n\t\tconst items: ProviderOrganization[] = [];\n\t\tconst warnings: ProviderWarning[] = [];\n\t\tlet fetchFailed = false;\n\t\tconst domain = ctx.domainForRead(integration, id, connectionId, requestedDomain);\n\t\tconst org = options?.org;\n\t\tconst warnOnMissingSession = warnOnMissingSessionForDomain(id, requestedDomain);\n\n\t\t// Git hosts with a project tier (Azure DevOps) read projects through their own hierarchy hook,\n\t\t// scoped to `org` when given. Non-Azure git hosts have no project tier and return undefined.\n\t\tif (!isIssuesIntegration(integration)) {\n\t\t\t// Check the capability first, like listOrgs/listRepos/listIssuesPage do. Without it, a host\n\t\t\t// with no project tier returns `undefined` from a successful read, which `runCaptured` can't\n\t\t\t// tell apart from an unresolvable session — turning a healthy provider into a `no-connection`\n\t\t\t// warning + `fetchFailed` (and, in Kepler, a spurious reconnect prompt).\n\t\t\tif (!integration.supportsProjectDiscovery) {\n\t\t\t\treturn { items: items, warnings: warnings, fetchFailed: false };\n\t\t\t}\n\n\t\t\tconst { value: projects, warning } = await runCaptured(\n\t\t\t\tid,\n\t\t\t\tdomain,\n\t\t\t\tconnectionId,\n\t\t\t\t() => integration.getProjectsForOrgResult(org, connectionId),\n\t\t\t\t{ warnOnMissingSession: warnOnMissingSession },\n\t\t\t);\n\t\t\tif (warning != null) {\n\t\t\t\twarnings.push(warning);\n\t\t\t\tif (projects == null) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (projects != null) {\n\t\t\t\titems.push(...projects.values.map(project => withProviderContext(id, project)));\n\n\t\t\t\tif (mergeHierarchyIncompleteness(warnings, id, domain, connectionId, projects, 'Project')) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn { items: items, warnings: warnings, fetchFailed: fetchFailed };\n\t\t}\n\n\t\tconst { value: resources, warning: resourcesWarning } = await runCaptured(\n\t\t\tid,\n\t\t\tdomain,\n\t\t\tconnectionId,\n\t\t\t() => integration.getResourcesForUserResult(connectionId),\n\t\t\t{ warnOnMissingSession: warnOnMissingSession },\n\t\t);\n\t\tif (resourcesWarning != null) {\n\t\t\twarnings.push(resourcesWarning);\n\t\t\tif (resources == null) {\n\t\t\t\tfetchFailed = true;\n\t\t\t}\n\t\t}\n\n\t\tconst scopedResources =\n\t\t\torg != null ? resources?.filter(resource => resourceMatchesOrg(resource, org)) : resources;\n\t\tif (scopedResources != null && scopedResources.length !== 0) {\n\t\t\tconst { value: projects, warning: projectsWarning } = await runCaptured(id, domain, connectionId, () =>\n\t\t\t\tintegration.getProjectsForResourcesWithMetadataResult(scopedResources, connectionId),\n\t\t\t);\n\t\t\tif (projectsWarning != null) {\n\t\t\t\twarnings.push(projectsWarning);\n\t\t\t\tif (projects == null) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (projects != null) {\n\t\t\t\titems.push(\n\t\t\t\t\t...projects.values.map(project =>\n\t\t\t\t\t\tresourceToOrg(id, project, orgForProject(id, project, scopedResources)),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst assessment = mergeAssessmentInto(warnings, id, domain, connectionId, projects?.metadata);\n\t\t\tif (assessment.fetchFailed || assessment.truncated) {\n\t\t\t\tfetchFailed = true;\n\t\t\t}\n\t\t}\n\n\t\treturn { items: items, warnings: warnings, fetchFailed: fetchFailed };\n\t});\n\n\treturn mergeHierarchyResults(results);\n}\n\nexport async function listRepos(\n\tctx: ProviderReadContext,\n\toptions: {\n\t\tproviderId: IntegrationIds;\n\t\torg?: string;\n\t\tproject?: string;\n\t\tpage?: number;\n\t\tcursor?: string;\n\t\titemsPerPage?: number;\n\t\tconnectionId?: string;\n\t\tdomain?: string;\n\t},\n): Promise<ProviderPagedResult<ProviderRepositoryShape>> {\n\t// Truncated as well as floored, like every other paged read here: `page` is reported back as\n\t// `page.currentPage` and bounds the cursor walk below, and neither can be fractional.\n\tconst page = Math.max(1, Math.trunc(options.page ?? 1));\n\tif (isIssuesHostIntegrationId(options.providerId)) {\n\t\treturn refusedPage(\n\t\t\tpage,\n\t\t\t[gitHostOnlySurfaceWarning(options.providerId, undefined, options.connectionId, 'repository discovery')],\n\t\t\ttrue,\n\t\t);\n\t}\n\n\tconst integration = await ctx.getIntegrationForRead(options.providerId, options.connectionId, options.domain);\n\tif (integration == null) {\n\t\t// A supplied connection or domain that no longer resolves is a broken target, not an empty account —\n\t\t// surface a no-connection warning + fetchFailed rather than a silent empty page.\n\t\tconst early = ctx.earlyReturnConnectionWarnings(options.providerId, options.connectionId, options.domain);\n\t\treturn refusedPage(page, early.warnings, early.fetchFailed);\n\t}\n\tif (!isGitHostIntegration(integration)) {\n\t\treturn refusedPage(\n\t\t\tpage,\n\t\t\t[gitHostOnlySurfaceWarning(options.providerId, undefined, options.connectionId, 'repository discovery')],\n\t\t\ttrue,\n\t\t);\n\t}\n\n\tconst domain = ctx.domainForRead(integration, options.providerId, options.connectionId, options.domain);\n\n\tconst accountWide = options.org == null;\n\tconst supported = accountWide\n\t\t? integration.supportsUserRepositoryDiscovery\n\t\t: integration.supportsRepositoryDiscovery;\n\tif (!supported) {\n\t\t// No matching repo-discovery hook — org-scoped (e.g. Bitbucket Data Center) or account-wide (e.g.\n\t\t// Bitbucket/Azure, whose repos can only be walked per workspace/org). Report unsupported rather than\n\t\t// a silent empty page indistinguishable from \"no repos\"; for the account-wide case the caller should\n\t\t// fan out per org from listOrgs instead.\n\t\treturn refusedPage(\n\t\t\tpage,\n\t\t\t[\n\t\t\t\totherWarning(\n\t\t\t\t\toptions.providerId,\n\t\t\t\t\tdomain,\n\t\t\t\t\toptions.connectionId,\n\t\t\t\t\taccountWide\n\t\t\t\t\t\t? `Account-wide repository discovery is not supported by '${options.providerId}'; list repositories per org instead.`\n\t\t\t\t\t\t: `Repository discovery is not supported by '${options.providerId}'.`,\n\t\t\t\t),\n\t\t\t],\n\t\t\ttrue,\n\t\t);\n\t}\n\n\tconst org = options.org;\n\tconst warnOnMissingSession = warnOnMissingSessionForDomain(options.providerId, options.domain);\n\tconst readPage = (cursor: string | undefined) =>\n\t\trunCaptured(\n\t\t\toptions.providerId,\n\t\t\tdomain,\n\t\t\toptions.connectionId,\n\t\t\t() =>\n\t\t\t\torg == null\n\t\t\t\t\t? integration.getRepositoriesForUserResult({ cursor: cursor, connectionId: options.connectionId })\n\t\t\t\t\t: integration.getRepositoriesForOrgResult(org, {\n\t\t\t\t\t\t\tproject: options.project,\n\t\t\t\t\t\t\tcursor: cursor,\n\t\t\t\t\t\t\tconnectionId: options.connectionId,\n\t\t\t\t\t\t}),\n\t\t\t{ warnOnMissingSession: warnOnMissingSession },\n\t\t);\n\n\t/**\n\t * Builds one page's result from what the provider returned. Shared by the initial read and by every round of\n\t * the cursor walk below, so a walked page N is described by exactly the same rules as a directly-requested one\n\t * (position, continuation, truncation) rather than by a second copy of them.\n\t */\n\tconst toResult = (\n\t\t{ value, warning }: Awaited<ReturnType<typeof readPage>>,\n\t\trequestedPage: number,\n\t\tsuppliedCursor: string | undefined,\n\t): ProviderPagedResult<ProviderRepositoryShape> => {\n\t\tconst items = value?.values ?? [];\n\t\tconst warnings = warning != null ? [warning] : [];\n\t\t// The repos read core is cursor-only and can't accept a page size, so don't echo the requested\n\t\t// `itemsPerPage` as if it were applied — report what the provider returned (its own pageSize when\n\t\t// available, else the actual item count).\n\t\tconst paged = toProviderPageInfo(items.length, value?.paging);\n\t\t// Convert the SDK collection metadata into scope-aware warnings + failure/truncation flags, appending\n\t\t// them to any captured thrown-error warning without discarding the partial result's items.\n\t\tconst assessment = mergeAssessmentInto(\n\t\t\twarnings,\n\t\t\toptions.providerId,\n\t\t\tdomain,\n\t\t\toptions.connectionId,\n\t\t\tvalue?.metadata,\n\t\t);\n\t\t// Whether this read honors a page NUMBER, decided from what the provider actually reported rather than\n\t\t// guessed from the absence of a cursor. A numbered-page repos host reports its position (`paging.page`)\n\t\t// and/or its successor (`paging.nextPage`) — Bitbucket's workspace walk consumes `page` as a real 1-based\n\t\t// page and reports `nextPage` without echoing `currentPage`, so both signals have to count. Every wired\n\t\t// cursor-based repos read (GitHub's org/user walks, GitLab's user walk, Bitbucket's cursor read) reports\n\t\t// neither. Keying off `paged.cursor == null` instead read the paging layer's \"reported another page,\n\t\t// handed back no continuation\" sentinel as evidence of a numbered host, which is exactly backwards.\n\t\tconst pageAdvanceable = value?.paging?.page != null || value?.paging?.nextPage != null;\n\t\t// Numbered-page hosts that don't echo `currentPage` may still be advanced by the requested `page` (initial\n\t\t// read) or by the cursor the caller threaded back. A cursor-only host ignores an UNTHREADED `page`\n\t\t// request, so its page-less first page is page 1.\n\t\tconst currentPage = resolveCurrentPage({\n\t\t\tproviderPage: paged.page.currentPage,\n\t\t\trequestedPage: requestedPage,\n\t\t\tsuppliedCursor: suppliedCursor,\n\t\t\tpageAdvanceable: pageAdvanceable,\n\t\t});\n\t\t// Never advertise `hasMore` without a continuation the caller can act on — the same contract\n\t\t// `listPullRequestsPage`, `listIssuesPage` and `broadenIssues` hold, via the same helper. A provider that\n\t\t// reports another page but hands back neither `endCursor` nor `nextPage` (surfaced as the `'{}'` sentinel,\n\t\t// which `toProviderPageInfo` drops) is terminal-but-incomplete: `hasMore: false` + `page.truncated`.\n\t\t// Synthesizing a page-number cursor for a cursor-only host instead — which is what this read used to do\n\t\t// unconditionally — handed back a continuation the provider ignores, so it answered with its FIRST page\n\t\t// again while still reporting `hasMore: true`. A consumer draining until `hasMore` clears (Kepler's repo\n\t\t// drain does exactly that) then looped to its own page cap, accumulating a duplicate copy of every repo\n\t\t// per round, and never saw a truncation signal.\n\t\tconst continuation = resolveContinuation(paged, pageAdvanceable ? currentPage + 1 : undefined);\n\t\t// The org-hierarchy read can also stop at a defensive backstop with more repos unlisted and no cursor to\n\t\t// resume (top-level `truncated`, or `paging.truncated` on a single-page read). Metadata incompleteness and\n\t\t// a demoted continuation are two further, independent sources of the same signal.\n\t\tconst truncated =\n\t\t\t(value?.truncated ?? false) ||\n\t\t\t(value?.paging?.truncated ?? false) ||\n\t\t\tassessment.truncated ||\n\t\t\tcontinuation.truncated;\n\t\treturn {\n\t\t\t// Normalize the raw provider-apis repos to the GitLens-owned shape at the surface boundary.\n\t\t\titems: items.map(toProviderRepositoryShape),\n\t\t\twarnings: warnings,\n\t\t\tpage: { ...paged.page, currentPage: currentPage, truncated: truncated || undefined },\n\t\t\thasMore: continuation.hasMore,\n\t\t\tcursor: continuation.cursor,\n\t\t\tfetchFailed: assessment.fetchFailed || (warning != null && value == null) || undefined,\n\t\t};\n\t};\n\n\tconst first = await readPage(\n\t\toptions.cursor ??\n\t\t\t(integration.id === GitSelfManagedHostIntegrationId.BitbucketServer ? undefined : pageToCursor(page)),\n\t);\n\tconst result = toResult(first, page, options.cursor);\n\t// A numbered-page host honored the synthesized cursor, so this IS page N; a cursor-only host ignored it and\n\t// answered with page 1, which the walk below advances. Decided from the provider's own paging metadata rather\n\t// than assumed, hence after the read.\n\tconst pageAdvanceable = first.value?.paging?.page != null || first.value?.paging?.nextPage != null;\n\tif (options.cursor != null || page === 1 || pageAdvanceable) return result;\n\n\t// Walk the provider's real continuations to the requested page. Only the last page's items are kept — pages\n\t// 1..N returned as \"page N\" would duplicate items for a normal paged consumer — while warnings, truncation,\n\t// and failure accumulate across the whole walked prefix, since an earlier round's problem still means this\n\t// result isn't authoritative. The provider read is re-issued per round, but the integration is resolved once:\n\t// re-entering this function per page would repeat its auth resolution N times for page N.\n\tconst walkedWarnings = [...result.warnings];\n\tlet walkedFetchFailed = result.fetchFailed === true;\n\tlet walkedTruncated = result.page.truncated === true;\n\tlet previous = result;\n\tfor (let currentPage = 2; currentPage <= page; currentPage++) {\n\t\tif (!previous.hasMore || previous.cursor == null) {\n\t\t\t// The requested page lies past the provider's terminal cursor: an EMPTY page N, never the last\n\t\t\t// available page relabeled (see ProviderPageInfo.currentPage).\n\t\t\treturn {\n\t\t\t\titems: [],\n\t\t\t\twarnings: walkedWarnings,\n\t\t\t\tpage: { currentPage: page, itemsPerPage: 0, truncated: walkedTruncated || undefined },\n\t\t\t\thasMore: false,\n\t\t\t\tfetchFailed: walkedFetchFailed || undefined,\n\t\t\t};\n\t\t}\n\n\t\tconst suppliedCursor = previous.cursor;\n\t\tconst requested = toResult(await readPage(suppliedCursor), currentPage, suppliedCursor);\n\t\tfor (const warning of requested.warnings) {\n\t\t\tappendDedupedWarning(walkedWarnings, warning);\n\t\t}\n\t\twalkedFetchFailed ||= requested.fetchFailed === true;\n\t\twalkedTruncated ||= requested.page.truncated === true;\n\t\tif (currentPage === page) {\n\t\t\treturn {\n\t\t\t\t...requested,\n\t\t\t\twarnings: walkedWarnings,\n\t\t\t\tpage: { ...requested.page, truncated: walkedTruncated || undefined },\n\t\t\t\tfetchFailed: walkedFetchFailed || undefined,\n\t\t\t};\n\t\t}\n\n\t\tprevious = requested;\n\t}\n\n\treturn result;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4DA,SAAS,6BACR,UACA,IACA,QACA,cACA,QACA,UACU;CACV,MAAM,aAAa,oBAAoB,UAAU,IAAI,QAAQ,cAAc,OAAO,QAAQ;CAC1F,IAAI,CAAC,OAAO,WAAW,OAAO,WAAW,eAAe,WAAW;CAEnE,IAAI,CAAC,WAAW,UAGf,qBAAqB,UAAU,kBAAkB,IAAI,QAAQ,cAAc,UAAU,WAAW,CAAC;CAElG,OAAO;AACR;AAEA,eAAsB,SACrB,KACA,SACgD;CAChD,0BAA0B,YAAY,OAAO;CAC7C,MAAM,MAAM,SAAS,cAAc,OAAO,CAAC,QAAQ,UAAU,IAAI;CACjE,MAAM,iBAAiB,IAAI,WAAW;CACtC,MAAM,eAAe,iBAAiB,SAAS,eAAe,KAAA;CAC9D,MAAM,kBAAkB,iBAAiB,SAAS,SAAS,KAAA;CAE3D,MAAM,UAAU,MAAM,WAAW,KAAA,GAAgC,OAAM,OAAM;EAC5E,MAAM,cAAc,MAAM,IAAI,sBAAsB,IAAI,cAAc,eAAe;EACrF,IAAI,eAAe,MAAM;GAIxB,MAAM,QAAQ,IAAI,8BAA8B,IAAI,cAAc,eAAe;GACjF,OAAO;IACN,OAAO,CAAC;IACR,UAAU,MAAM;IAChB,aAAa,MAAM;GACpB;EACD;EAEA,MAAM,QAAgC,CAAC;EACvC,MAAM,WAA8B,CAAC;EACrC,IAAI,cAAc;EAClB,MAAM,SAAS,IAAI,cAAc,aAAa,IAAI,cAAc,eAAe;EAC/E,MAAM,uBAAuB,8BAA8B,IAAI,eAAe;EAC9E,IAAI,oBAAoB,WAAW,GAAG;GAErC,MAAM,EAAE,OAAO,WAAW,YAAY,MAAM,YAC3C,IACA,QACA,oBACM,YAAY,0BAA0B,YAAY,GACxD,EAAwB,qBAAqB,CAC9C;GACA,IAAI,aAAa,MAChB,MAAM,KAAK,GAAG,UAAU,KAAI,MAAK,cAAc,IAAI,CAAC,CAAC,CAAC;GAEvD,IAAI,WAAW,MAAM;IACpB,SAAS,KAAK,OAAO;IAErB,IAAI,aAAa,MAChB,cAAc;GAEhB;EACD,OAAO,IAAI,CAAC,YAAY,+BAA+B;GAItD,cAAc;GACd,SAAS,KACR,aAAa,IAAI,QAAQ,cAAc,+CAA+C,GAAG,GAAG,CAC7F;EACD,OAAO;GACN,MAAM,EAAE,OAAO,YAAY,MAAM,YAChC,IACA,QACA,oBACM,YAAY,8BAA8B,YAAY,GAC5D,EAAwB,qBAAqB,CAC9C;GACA,IAAI,SAAS,MAAM;IAClB,MAAM,KAAK,GAAG,MAAM,OAAO,KAAI,QAAO,oBAAoB,IAAI,GAAG,CAAC,CAAC;IAEnE,IAAI,6BAA6B,UAAU,IAAI,QAAQ,cAAc,OAAO,cAAc,GACzF,cAAc;GAEhB;GACA,IAAI,WAAW,MAAM;IACpB,SAAS,KAAK,OAAO;IACrB,IAAI,SAAS,MACZ,cAAc;GAEhB;EACD;EAEA,OAAO;GAAS;GAAiB;GAAuB;EAAY;CACrE,CAAC;CAED,OAAO,sBAAsB,OAAO;AACrC;AAEA,eAAsB,aACrB,KACA,SACgD;CAChD,0BAA0B,gBAAgB,OAAO;CACjD,MAAM,MACL,SAAS,cAAc,OACpB,CAAC,QAAQ,UAAU,IACnB;EACA,GAAG;;;CAGJ;CACH,MAAM,iBAAiB,IAAI,WAAW;CACtC,MAAM,eAAe,iBAAiB,SAAS,eAAe,KAAA;CAC9D,MAAM,kBAAkB,iBAAiB,SAAS,SAAS,KAAA;CAE3D,MAAM,UAAU,MAAM,WAAW,KAAA,GAAgC,OAAM,OAAM;EAC5E,MAAM,cAAc,MAAM,IAAI,sBAAsB,IAAI,cAAc,eAAe;EACrF,IAAI,eAAe,MAAM;GAGxB,MAAM,QAAQ,IAAI,8BAA8B,IAAI,cAAc,eAAe;GACjF,OAAO;IACN,OAAO,CAAC;IACR,UAAU,MAAM;IAChB,aAAa,MAAM;GACpB;EACD;EAEA,MAAM,QAAgC,CAAC;EACvC,MAAM,WAA8B,CAAC;EACrC,IAAI,cAAc;EAClB,MAAM,SAAS,IAAI,cAAc,aAAa,IAAI,cAAc,eAAe;EAC/E,MAAM,MAAM,SAAS;EACrB,MAAM,uBAAuB,8BAA8B,IAAI,eAAe;EAI9E,IAAI,CAAC,oBAAoB,WAAW,GAAG;GAKtC,IAAI,CAAC,YAAY,0BAChB,OAAO;IAAS;IAAiB;IAAU,aAAa;GAAM;GAG/D,MAAM,EAAE,OAAO,UAAU,YAAY,MAAM,YAC1C,IACA,QACA,oBACM,YAAY,wBAAwB,KAAK,YAAY,GAC3D,EAAwB,qBAAqB,CAC9C;GACA,IAAI,WAAW,MAAM;IACpB,SAAS,KAAK,OAAO;IACrB,IAAI,YAAY,MACf,cAAc;GAEhB;GACA,IAAI,YAAY,MAAM;IACrB,MAAM,KAAK,GAAG,SAAS,OAAO,KAAI,YAAW,oBAAoB,IAAI,OAAO,CAAC,CAAC;IAE9E,IAAI,6BAA6B,UAAU,IAAI,QAAQ,cAAc,UAAU,SAAS,GACvF,cAAc;GAEhB;GACA,OAAO;IAAS;IAAiB;IAAuB;GAAY;EACrE;EAEA,MAAM,EAAE,OAAO,WAAW,SAAS,qBAAqB,MAAM,YAC7D,IACA,QACA,oBACM,YAAY,0BAA0B,YAAY,GACxD,EAAwB,qBAAqB,CAC9C;EACA,IAAI,oBAAoB,MAAM;GAC7B,SAAS,KAAK,gBAAgB;GAC9B,IAAI,aAAa,MAChB,cAAc;EAEhB;EAEA,MAAM,kBACL,OAAO,OAAO,WAAW,QAAO,aAAY,mBAAmB,UAAU,GAAG,CAAC,IAAI;EAClF,IAAI,mBAAmB,QAAQ,gBAAgB,WAAW,GAAG;GAC5D,MAAM,EAAE,OAAO,UAAU,SAAS,oBAAoB,MAAM,YAAY,IAAI,QAAQ,oBACnF,YAAY,0CAA0C,iBAAiB,YAAY,CACpF;GACA,IAAI,mBAAmB,MAAM;IAC5B,SAAS,KAAK,eAAe;IAC7B,IAAI,YAAY,MACf,cAAc;GAEhB;GACA,IAAI,YAAY,MACf,MAAM,KACL,GAAG,SAAS,OAAO,KAAI,YACtB,cAAc,IAAI,SAAS,cAAc,IAAI,SAAS,eAAe,CAAC,CACvE,CACD;GAED,MAAM,aAAa,oBAAoB,UAAU,IAAI,QAAQ,cAAc,UAAU,QAAQ;GAC7F,IAAI,WAAW,eAAe,WAAW,WACxC,cAAc;EAEhB;EAEA,OAAO;GAAS;GAAiB;GAAuB;EAAY;CACrE,CAAC;CAED,OAAO,sBAAsB,OAAO;AACrC;AAEA,eAAsB,UACrB,KACA,SAUwD;CAGxD,MAAM,OAAO,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC;CACtD,IAAI,0BAA0B,QAAQ,UAAU,GAC/C,OAAO,YACN,MACA,CAAC,0BAA0B,QAAQ,YAAY,KAAA,GAAW,QAAQ,cAAc,sBAAsB,CAAC,GACvG,IACD;CAGD,MAAM,cAAc,MAAM,IAAI,sBAAsB,QAAQ,YAAY,QAAQ,cAAc,QAAQ,MAAM;CAC5G,IAAI,eAAe,MAAM;EAGxB,MAAM,QAAQ,IAAI,8BAA8B,QAAQ,YAAY,QAAQ,cAAc,QAAQ,MAAM;EACxG,OAAO,YAAY,MAAM,MAAM,UAAU,MAAM,WAAW;CAC3D;CACA,IAAI,CAAC,qBAAqB,WAAW,GACpC,OAAO,YACN,MACA,CAAC,0BAA0B,QAAQ,YAAY,KAAA,GAAW,QAAQ,cAAc,sBAAsB,CAAC,GACvG,IACD;CAGD,MAAM,SAAS,IAAI,cAAc,aAAa,QAAQ,YAAY,QAAQ,cAAc,QAAQ,MAAM;CAEtG,MAAM,cAAc,QAAQ,OAAO;CAInC,IAAI,EAHc,cACf,YAAY,kCACZ,YAAY,8BAMd,OAAO,YACN,MACA,CACC,aACC,QAAQ,YACR,QACA,QAAQ,cACR,cACG,0DAA0D,QAAQ,WAAW,yCAC7E,6CAA6C,QAAQ,WAAW,GACpE,CACD,GACA,IACD;CAGD,MAAM,MAAM,QAAQ;CACpB,MAAM,uBAAuB,8BAA8B,QAAQ,YAAY,QAAQ,MAAM;CAC7F,MAAM,YAAY,WACjB,YACC,QAAQ,YACR,QACA,QAAQ,oBAEP,OAAO,OACJ,YAAY,6BAA6B;EAAU;EAAQ,cAAc,QAAQ;CAAa,CAAC,IAC/F,YAAY,4BAA4B,KAAK;EAC7C,SAAS,QAAQ;EACT;EACR,cAAc,QAAQ;CACvB,CAAC,GACJ,EAAwB,qBAAqB,CAC9C;;;;;;CAOD,MAAM,YACL,EAAE,OAAO,WACT,eACA,mBACkD;EAClD,MAAM,QAAQ,OAAO,UAAU,CAAC;EAChC,MAAM,WAAW,WAAW,OAAO,CAAC,OAAO,IAAI,CAAC;EAIhD,MAAM,QAAQ,mBAAmB,MAAM,QAAQ,OAAO,MAAM;EAG5D,MAAM,aAAa,oBAClB,UACA,QAAQ,YACR,QACA,QAAQ,cACR,OAAO,QACR;EAQA,MAAM,kBAAkB,OAAO,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,YAAY;EAIlF,MAAM,cAAc,mBAAmB;GACtC,cAAc,MAAM,KAAK;GACV;GACC;GACC;EAClB,CAAC;EAUD,MAAM,eAAe,oBAAoB,OAAO,kBAAkB,cAAc,IAAI,KAAA,CAAS;EAI7F,MAAM,aACJ,OAAO,aAAa,WACpB,OAAO,QAAQ,aAAa,UAC7B,WAAW,aACX,aAAa;EACd,OAAO;GAEN,OAAO,MAAM,IAAI,yBAAyB;GAChC;GACV,MAAM;IAAE,GAAG,MAAM;IAAmB;IAAa,WAAW,aAAa,KAAA;GAAU;GACnF,SAAS,aAAa;GACtB,QAAQ,aAAa;GACrB,aAAa,WAAW,eAAgB,WAAW,QAAQ,SAAS,QAAS,KAAA;EAC9E;CACD;CAEA,MAAM,QAAQ,MAAM,SACnB,QAAQ,WACN,YAAY,OAAA,qBAAyD,KAAA,IAAY,aAAa,IAAI,EACrG;CACA,MAAM,SAAS,SAAS,OAAO,MAAM,QAAQ,MAAM;CAInD,MAAM,kBAAkB,MAAM,OAAO,QAAQ,QAAQ,QAAQ,MAAM,OAAO,QAAQ,YAAY;CAC9F,IAAI,QAAQ,UAAU,QAAQ,SAAS,KAAK,iBAAiB,OAAO;CAOpE,MAAM,iBAAiB,CAAC,GAAG,OAAO,QAAQ;CAC1C,IAAI,oBAAoB,OAAO,gBAAgB;CAC/C,IAAI,kBAAkB,OAAO,KAAK,cAAc;CAChD,IAAI,WAAW;CACf,KAAK,IAAI,cAAc,GAAG,eAAe,MAAM,eAAe;EAC7D,IAAI,CAAC,SAAS,WAAW,SAAS,UAAU,MAG3C,OAAO;GACN,OAAO,CAAC;GACR,UAAU;GACV,MAAM;IAAE,aAAa;IAAM,cAAc;IAAG,WAAW,mBAAmB,KAAA;GAAU;GACpF,SAAS;GACT,aAAa,qBAAqB,KAAA;EACnC;EAGD,MAAM,iBAAiB,SAAS;EAChC,MAAM,YAAY,SAAS,MAAM,SAAS,cAAc,GAAG,aAAa,cAAc;EACtF,KAAK,MAAM,WAAW,UAAU,UAC/B,qBAAqB,gBAAgB,OAAO;EAE7C,sBAAsB,UAAU,gBAAgB;EAChD,oBAAoB,UAAU,KAAK,cAAc;EACjD,IAAI,gBAAgB,MACnB,OAAO;GACN,GAAG;GACH,UAAU;GACV,MAAM;IAAE,GAAG,UAAU;IAAM,WAAW,mBAAmB,KAAA;GAAU;GACnE,aAAa,qBAAqB,KAAA;EACnC;EAGD,WAAW;CACZ;CAEA,OAAO;AACR"}
+{"version":3,"file":"hierarchy.js","names":[],"sources":["../../../../../plus/integrations/src/reads/hierarchy.ts"],"sourcesContent":["import { mapBounded } from '@gitlens/utils/promise.js';\nimport { mergeAssessmentInto } from '../collectionMetadata.js';\nimport type { IntegrationIds } from '../constants.js';\nimport {\n\tGitCloudHostIntegrationId,\n\tGitSelfManagedHostIntegrationId,\n\tproviderFanOutConcurrency,\n\tsupportedOrderedCloudIntegrationIds,\n\tsupportedOrderedCloudIssuesIntegrationIds,\n} from '../constants.js';\nimport type { ListOrgsOptions, ListProjectsOptions } from '../manager.js';\nimport { isIssuesIntegration } from '../models/issuesIntegration.js';\nimport type { ProviderHierarchyResult } from '../providers/models.js';\nimport { toProviderRepositoryShape } from '../providers/models.js';\nimport type {\n\tProviderOrganization,\n\tProviderPagedResult,\n\tProviderRepositoryShape,\n\tProviderResult,\n\tProviderWarning,\n} from '../results.js';\nimport { appendDedupedWarning } from '../results.js';\nimport {\n\tisGitHostIntegration,\n\tisIssuesHostIntegrationId,\n\twarnOnMissingSessionForDomain,\n} from '../utils/integration.utils.js';\nimport type { ProviderReadContext } from './context.js';\nimport { runCaptured } from './drains.js';\nimport {\n\tassertHierarchyReadTarget,\n\tmergeHierarchyResults,\n\torgForProject,\n\tresourceMatchesOrg,\n\tresourceToOrg,\n\twithProviderContext,\n} from './hierarchy.utils.js';\nimport { pageToCursor, refusedPage, resolveContinuation, resolveCurrentPage, toProviderPageInfo } from './paging.js';\nimport { gitHostOnlySurfaceWarning, truncationWarning, unsupportedWarning } from './warnings.js';\n\n/**\n * Folds a flat hierarchy result's incompleteness into `warnings`, returning whether it leaves the read\n * non-authoritative. The single funnel for both hierarchy reads, so neither can drift from the other on any of\n * the four decisions it makes:\n *\n * - The metadata is assessed FIRST, so the truncation warning can tell whether it already explained this gap.\n *   Ordered deliberately: emitting first meant an expired credential produced BOTH a typed `auth` warning and\n *   an unclassifiable one for the same cause, and a consumer routing on classification showed the second as\n *   \"this provider failed to load\", with a remedy that doesn't exist, next to the reconnect prompt that was the\n *   actual fix.\n * - The read states the truncation itself only when the metadata reported nothing — the rule\n *   `assessCollectionMetadata` applies to its own generic fallback. Whatever the metadata reported already names\n *   this provider and says something stronger, so restating it costs a false verdict and adds no information.\n * - `'exhausted'`, never `'page-budget'`: `truncated` is one boolean here, so a drain that stopped at its page\n *   budget is indistinguishable from one whose cursor stalled, and `IncompleteReadCause` makes `'exhausted'`\n *   the default whenever a raisable budget is not demonstrably the cause.\n * - A truncation counts as non-authoritative even though the omission above asserts the read succeeded. Unlike\n *   paged repository reads, a flattened hierarchy result has no page object on which to carry incompleteness,\n *   so `fetchFailed` is the only signal a consumer has that the list is short.\n */\nfunction mergeHierarchyIncompleteness(\n\twarnings: ProviderWarning[],\n\tid: IntegrationIds,\n\tdomain: string | undefined,\n\tconnectionId: string | undefined,\n\tresult: Pick<ProviderHierarchyResult<unknown>, 'truncated' | 'metadata'>,\n\treadKind: 'Organization' | 'Project',\n): boolean {\n\tconst assessment = mergeAssessmentInto(warnings, id, domain, connectionId, result.metadata);\n\tif (!result.truncated) return assessment.fetchFailed || assessment.truncated;\n\n\tif (!assessment.reported) {\n\t\t// Deduped like every other `truncationWarning` emission (see `drains.ts`), not plain-pushed: no caller can\n\t\t// collide with it today, but nothing about this funnel guarantees a third read won't.\n\t\tappendDedupedWarning(warnings, truncationWarning(id, domain, connectionId, readKind, 'exhausted'));\n\t}\n\treturn true;\n}\n\nexport async function listOrgs(\n\tctx: ProviderReadContext,\n\toptions?: ListOrgsOptions,\n): Promise<ProviderResult<ProviderOrganization>> {\n\tassertHierarchyReadTarget('listOrgs', options);\n\tconst ids = options?.providerId != null ? [options.providerId] : supportedOrderedCloudIntegrationIds;\n\tconst singleProvider = ids.length === 1;\n\tconst connectionId = singleProvider ? options?.connectionId : undefined;\n\tconst requestedDomain = singleProvider ? options?.domain : undefined;\n\n\tconst results = await mapBounded(ids, providerFanOutConcurrency, async id => {\n\t\tconst integration = await ctx.getIntegrationForRead(id, connectionId, requestedDomain);\n\t\tif (integration == null) {\n\t\t\t// A specifically requested connection that can't be resolved is a broken connection, not a\n\t\t\t// provider with no orgs — surface it (warning + fetchFailed) instead of dropping the id\n\t\t\t// silently, so a caller can tell it apart from an account that genuinely has no orgs.\n\t\t\tconst early = ctx.earlyReturnConnectionWarnings(id, connectionId, requestedDomain);\n\t\t\treturn {\n\t\t\t\titems: [] as ProviderOrganization[],\n\t\t\t\twarnings: early.warnings,\n\t\t\t\tfetchFailed: early.fetchFailed,\n\t\t\t};\n\t\t}\n\n\t\tconst items: ProviderOrganization[] = [];\n\t\tconst warnings: ProviderWarning[] = [];\n\t\tlet fetchFailed = false;\n\t\tconst domain = ctx.domainForRead(integration, id, connectionId, requestedDomain);\n\t\tconst warnOnMissingSession = warnOnMissingSessionForDomain(id, requestedDomain);\n\t\tif (isIssuesIntegration(integration)) {\n\t\t\t// Issue trackers expose \"resources\" (Jira sites, Linear orgs, …) as their org analogue.\n\t\t\tconst { value: resources, warning } = await runCaptured(\n\t\t\t\tid,\n\t\t\t\tdomain,\n\t\t\t\tconnectionId,\n\t\t\t\t() => integration.getResourcesForUserResult(connectionId),\n\t\t\t\t{ warnOnMissingSession: warnOnMissingSession },\n\t\t\t);\n\t\t\tif (resources != null) {\n\t\t\t\titems.push(...resources.map(r => resourceToOrg(id, r)));\n\t\t\t}\n\t\t\tif (warning != null) {\n\t\t\t\twarnings.push(warning);\n\t\t\t\t// A warning with no value is a hard read failure, not an empty account.\n\t\t\t\tif (resources == null) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (!integration.supportsOrganizationDiscovery) {\n\t\t\t// The provider registers no org-discovery hook. Report it as\n\t\t\t// explicitly unsupported rather than contributing a silent empty list that a caller can't\n\t\t\t// tell apart from \"this account has no orgs\".\n\t\t\tfetchFailed = true;\n\t\t\twarnings.push(\n\t\t\t\tunsupportedWarning(id, domain, connectionId, `Organization discovery is not supported by '${id}'.`),\n\t\t\t);\n\t\t} else {\n\t\t\tconst { value, warning } = await runCaptured(\n\t\t\t\tid,\n\t\t\t\tdomain,\n\t\t\t\tconnectionId,\n\t\t\t\t() => integration.getOrganizationsForUserResult(connectionId),\n\t\t\t\t{ warnOnMissingSession: warnOnMissingSession },\n\t\t\t);\n\t\t\tif (value != null) {\n\t\t\t\titems.push(...value.values.map(org => withProviderContext(id, org)));\n\n\t\t\t\tif (mergeHierarchyIncompleteness(warnings, id, domain, connectionId, value, 'Organization')) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (warning != null) {\n\t\t\t\twarnings.push(warning);\n\t\t\t\tif (value == null) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn { items: items, warnings: warnings, fetchFailed: fetchFailed };\n\t});\n\n\treturn mergeHierarchyResults(results);\n}\n\nexport async function listProjects(\n\tctx: ProviderReadContext,\n\toptions?: ListProjectsOptions,\n): Promise<ProviderResult<ProviderOrganization>> {\n\tassertHierarchyReadTarget('listProjects', options);\n\tconst ids =\n\t\toptions?.providerId != null\n\t\t\t? [options.providerId]\n\t\t\t: [\n\t\t\t\t\t...supportedOrderedCloudIssuesIntegrationIds,\n\t\t\t\t\tGitCloudHostIntegrationId.AzureDevOps,\n\t\t\t\t\tGitSelfManagedHostIntegrationId.AzureDevOpsServer,\n\t\t\t\t];\n\tconst singleProvider = ids.length === 1;\n\tconst connectionId = singleProvider ? options?.connectionId : undefined;\n\tconst requestedDomain = singleProvider ? options?.domain : undefined;\n\n\tconst results = await mapBounded(ids, providerFanOutConcurrency, async id => {\n\t\tconst integration = await ctx.getIntegrationForRead(id, connectionId, requestedDomain);\n\t\tif (integration == null) {\n\t\t\t// A requested connection that can't be resolved is a broken connection, not a provider with\n\t\t\t// no projects — surface it (warning + fetchFailed) instead of dropping the id silently.\n\t\t\tconst early = ctx.earlyReturnConnectionWarnings(id, connectionId, requestedDomain);\n\t\t\treturn {\n\t\t\t\titems: [] as ProviderOrganization[],\n\t\t\t\twarnings: early.warnings,\n\t\t\t\tfetchFailed: early.fetchFailed,\n\t\t\t};\n\t\t}\n\n\t\tconst items: ProviderOrganization[] = [];\n\t\tconst warnings: ProviderWarning[] = [];\n\t\tlet fetchFailed = false;\n\t\tconst domain = ctx.domainForRead(integration, id, connectionId, requestedDomain);\n\t\tconst org = options?.org;\n\t\tconst warnOnMissingSession = warnOnMissingSessionForDomain(id, requestedDomain);\n\n\t\t// Git hosts with a project tier (Azure DevOps) read projects through their own hierarchy hook,\n\t\t// scoped to `org` when given. Non-Azure git hosts have no project tier and return undefined.\n\t\tif (!isIssuesIntegration(integration)) {\n\t\t\t// Check the capability first, like listOrgs/listRepos/listIssuesPage do. Without it, a host\n\t\t\t// with no project tier returns `undefined` from a successful read, which `runCaptured` can't\n\t\t\t// tell apart from an unresolvable session — turning a healthy provider into a `no-connection`\n\t\t\t// warning + `fetchFailed` (and, in Kepler, a spurious reconnect prompt).\n\t\t\tif (!integration.supportsProjectDiscovery) {\n\t\t\t\treturn { items: items, warnings: warnings, fetchFailed: false };\n\t\t\t}\n\n\t\t\tconst { value: projects, warning } = await runCaptured(\n\t\t\t\tid,\n\t\t\t\tdomain,\n\t\t\t\tconnectionId,\n\t\t\t\t() => integration.getProjectsForOrgResult(org, connectionId),\n\t\t\t\t{ warnOnMissingSession: warnOnMissingSession },\n\t\t\t);\n\t\t\tif (warning != null) {\n\t\t\t\twarnings.push(warning);\n\t\t\t\tif (projects == null) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (projects != null) {\n\t\t\t\titems.push(...projects.values.map(project => withProviderContext(id, project)));\n\n\t\t\t\tif (mergeHierarchyIncompleteness(warnings, id, domain, connectionId, projects, 'Project')) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn { items: items, warnings: warnings, fetchFailed: fetchFailed };\n\t\t}\n\n\t\tconst { value: resources, warning: resourcesWarning } = await runCaptured(\n\t\t\tid,\n\t\t\tdomain,\n\t\t\tconnectionId,\n\t\t\t() => integration.getResourcesForUserResult(connectionId),\n\t\t\t{ warnOnMissingSession: warnOnMissingSession },\n\t\t);\n\t\tif (resourcesWarning != null) {\n\t\t\twarnings.push(resourcesWarning);\n\t\t\tif (resources == null) {\n\t\t\t\tfetchFailed = true;\n\t\t\t}\n\t\t}\n\n\t\tconst scopedResources =\n\t\t\torg != null ? resources?.filter(resource => resourceMatchesOrg(resource, org)) : resources;\n\t\tif (scopedResources != null && scopedResources.length !== 0) {\n\t\t\tconst { value: projects, warning: projectsWarning } = await runCaptured(id, domain, connectionId, () =>\n\t\t\t\tintegration.getProjectsForResourcesWithMetadataResult(scopedResources, connectionId),\n\t\t\t);\n\t\t\tif (projectsWarning != null) {\n\t\t\t\twarnings.push(projectsWarning);\n\t\t\t\tif (projects == null) {\n\t\t\t\t\tfetchFailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (projects != null) {\n\t\t\t\titems.push(\n\t\t\t\t\t...projects.values.map(project =>\n\t\t\t\t\t\tresourceToOrg(id, project, orgForProject(id, project, scopedResources)),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst assessment = mergeAssessmentInto(warnings, id, domain, connectionId, projects?.metadata);\n\t\t\tif (assessment.fetchFailed || assessment.truncated) {\n\t\t\t\tfetchFailed = true;\n\t\t\t}\n\t\t}\n\n\t\treturn { items: items, warnings: warnings, fetchFailed: fetchFailed };\n\t});\n\n\treturn mergeHierarchyResults(results);\n}\n\nexport async function listRepos(\n\tctx: ProviderReadContext,\n\toptions: {\n\t\tproviderId: IntegrationIds;\n\t\torg?: string;\n\t\tproject?: string;\n\t\tpage?: number;\n\t\tcursor?: string;\n\t\titemsPerPage?: number;\n\t\tconnectionId?: string;\n\t\tdomain?: string;\n\t},\n): Promise<ProviderPagedResult<ProviderRepositoryShape>> {\n\t// Truncated as well as floored, like every other paged read here: `page` is reported back as\n\t// `page.currentPage` and bounds the cursor walk below, and neither can be fractional.\n\tconst page = Math.max(1, Math.trunc(options.page ?? 1));\n\tif (isIssuesHostIntegrationId(options.providerId)) {\n\t\treturn refusedPage(\n\t\t\tpage,\n\t\t\t[gitHostOnlySurfaceWarning(options.providerId, undefined, options.connectionId, 'repository discovery')],\n\t\t\ttrue,\n\t\t);\n\t}\n\n\tconst integration = await ctx.getIntegrationForRead(options.providerId, options.connectionId, options.domain);\n\tif (integration == null) {\n\t\t// A supplied connection or domain that no longer resolves is a broken target, not an empty account —\n\t\t// surface a no-connection warning + fetchFailed rather than a silent empty page.\n\t\tconst early = ctx.earlyReturnConnectionWarnings(options.providerId, options.connectionId, options.domain);\n\t\treturn refusedPage(page, early.warnings, early.fetchFailed);\n\t}\n\tif (!isGitHostIntegration(integration)) {\n\t\treturn refusedPage(\n\t\t\tpage,\n\t\t\t[gitHostOnlySurfaceWarning(options.providerId, undefined, options.connectionId, 'repository discovery')],\n\t\t\ttrue,\n\t\t);\n\t}\n\n\tconst domain = ctx.domainForRead(integration, options.providerId, options.connectionId, options.domain);\n\n\tconst accountWide = options.org == null;\n\tconst supported = accountWide\n\t\t? integration.supportsUserRepositoryDiscovery\n\t\t: integration.supportsRepositoryDiscovery;\n\tif (!supported) {\n\t\t// No matching repo-discovery hook — org-scoped (e.g. Bitbucket Data Center) or account-wide (e.g.\n\t\t// Bitbucket/Azure, whose repos can only be walked per workspace/org). Report unsupported rather than\n\t\t// a silent empty page indistinguishable from \"no repos\"; for the account-wide case the caller should\n\t\t// fan out per org from listOrgs instead.\n\t\treturn refusedPage(\n\t\t\tpage,\n\t\t\t[\n\t\t\t\tunsupportedWarning(\n\t\t\t\t\toptions.providerId,\n\t\t\t\t\tdomain,\n\t\t\t\t\toptions.connectionId,\n\t\t\t\t\taccountWide\n\t\t\t\t\t\t? `Account-wide repository discovery is not supported by '${options.providerId}'; list repositories per org instead.`\n\t\t\t\t\t\t: `Repository discovery is not supported by '${options.providerId}'.`,\n\t\t\t\t),\n\t\t\t],\n\t\t\ttrue,\n\t\t);\n\t}\n\n\tconst org = options.org;\n\tconst warnOnMissingSession = warnOnMissingSessionForDomain(options.providerId, options.domain);\n\tconst readPage = (cursor: string | undefined) =>\n\t\trunCaptured(\n\t\t\toptions.providerId,\n\t\t\tdomain,\n\t\t\toptions.connectionId,\n\t\t\t() =>\n\t\t\t\torg == null\n\t\t\t\t\t? integration.getRepositoriesForUserResult({ cursor: cursor, connectionId: options.connectionId })\n\t\t\t\t\t: integration.getRepositoriesForOrgResult(org, {\n\t\t\t\t\t\t\tproject: options.project,\n\t\t\t\t\t\t\tcursor: cursor,\n\t\t\t\t\t\t\tconnectionId: options.connectionId,\n\t\t\t\t\t\t}),\n\t\t\t{ warnOnMissingSession: warnOnMissingSession },\n\t\t);\n\n\t/**\n\t * Builds one page's result from what the provider returned. Shared by the initial read and by every round of\n\t * the cursor walk below, so a walked page N is described by exactly the same rules as a directly-requested one\n\t * (position, continuation, truncation) rather than by a second copy of them.\n\t */\n\tconst toResult = (\n\t\t{ value, warning }: Awaited<ReturnType<typeof readPage>>,\n\t\trequestedPage: number,\n\t\tsuppliedCursor: string | undefined,\n\t): ProviderPagedResult<ProviderRepositoryShape> => {\n\t\tconst items = value?.values ?? [];\n\t\tconst warnings = warning != null ? [warning] : [];\n\t\t// The repos read core is cursor-only and can't accept a page size, so don't echo the requested\n\t\t// `itemsPerPage` as if it were applied — report what the provider returned (its own pageSize when\n\t\t// available, else the actual item count).\n\t\tconst paged = toProviderPageInfo(items.length, value?.paging);\n\t\t// Convert the SDK collection metadata into scope-aware warnings + failure/truncation flags, appending\n\t\t// them to any captured thrown-error warning without discarding the partial result's items.\n\t\tconst assessment = mergeAssessmentInto(\n\t\t\twarnings,\n\t\t\toptions.providerId,\n\t\t\tdomain,\n\t\t\toptions.connectionId,\n\t\t\tvalue?.metadata,\n\t\t);\n\t\t// Whether this read honors a page NUMBER, decided from what the provider actually reported rather than\n\t\t// guessed from the absence of a cursor. A numbered-page repos host reports its position (`paging.page`)\n\t\t// and/or its successor (`paging.nextPage`) — Bitbucket's workspace walk consumes `page` as a real 1-based\n\t\t// page and reports `nextPage` without echoing `currentPage`, so both signals have to count. Every wired\n\t\t// cursor-based repos read (GitHub's org/user walks, GitLab's user walk, Bitbucket's cursor read) reports\n\t\t// neither. Keying off `paged.cursor == null` instead read the paging layer's \"reported another page,\n\t\t// handed back no continuation\" sentinel as evidence of a numbered host, which is exactly backwards.\n\t\tconst pageAdvanceable = value?.paging?.page != null || value?.paging?.nextPage != null;\n\t\t// Numbered-page hosts that don't echo `currentPage` may still be advanced by the requested `page` (initial\n\t\t// read) or by the cursor the caller threaded back. A cursor-only host ignores an UNTHREADED `page`\n\t\t// request, so its page-less first page is page 1.\n\t\tconst currentPage = resolveCurrentPage({\n\t\t\tproviderPage: paged.page.currentPage,\n\t\t\trequestedPage: requestedPage,\n\t\t\tsuppliedCursor: suppliedCursor,\n\t\t\tpageAdvanceable: pageAdvanceable,\n\t\t});\n\t\t// Never advertise `hasMore` without a continuation the caller can act on — the same contract\n\t\t// `listPullRequestsPage`, `listIssuesPage` and `broadenIssues` hold, via the same helper. A provider that\n\t\t// reports another page but hands back neither `endCursor` nor `nextPage` (surfaced as the `'{}'` sentinel,\n\t\t// which `toProviderPageInfo` drops) is terminal-but-incomplete: `hasMore: false` + `page.truncated`.\n\t\t// Synthesizing a page-number cursor for a cursor-only host instead — which is what this read used to do\n\t\t// unconditionally — handed back a continuation the provider ignores, so it answered with its FIRST page\n\t\t// again while still reporting `hasMore: true`. A consumer draining until `hasMore` clears (Kepler's repo\n\t\t// drain does exactly that) then looped to its own page cap, accumulating a duplicate copy of every repo\n\t\t// per round, and never saw a truncation signal.\n\t\tconst continuation = resolveContinuation(paged, pageAdvanceable ? currentPage + 1 : undefined);\n\t\t// The org-hierarchy read can also stop at a defensive backstop with more repos unlisted and no cursor to\n\t\t// resume (top-level `truncated`, or `paging.truncated` on a single-page read). Metadata incompleteness and\n\t\t// a demoted continuation are two further, independent sources of the same signal.\n\t\tconst truncated =\n\t\t\t(value?.truncated ?? false) ||\n\t\t\t(value?.paging?.truncated ?? false) ||\n\t\t\tassessment.truncated ||\n\t\t\tcontinuation.truncated;\n\t\treturn {\n\t\t\t// Normalize the raw provider-apis repos to the GitLens-owned shape at the surface boundary.\n\t\t\titems: items.map(toProviderRepositoryShape),\n\t\t\twarnings: warnings,\n\t\t\tpage: { ...paged.page, currentPage: currentPage, truncated: truncated || undefined },\n\t\t\thasMore: continuation.hasMore,\n\t\t\tcursor: continuation.cursor,\n\t\t\tfetchFailed: assessment.fetchFailed || (warning != null && value == null) || undefined,\n\t\t};\n\t};\n\n\tconst first = await readPage(\n\t\toptions.cursor ??\n\t\t\t(integration.id === GitSelfManagedHostIntegrationId.BitbucketServer ? undefined : pageToCursor(page)),\n\t);\n\tconst result = toResult(first, page, options.cursor);\n\t// A numbered-page host honored the synthesized cursor, so this IS page N; a cursor-only host ignored it and\n\t// answered with page 1, which the walk below advances. Decided from the provider's own paging metadata rather\n\t// than assumed, hence after the read.\n\tconst pageAdvanceable = first.value?.paging?.page != null || first.value?.paging?.nextPage != null;\n\tif (options.cursor != null || page === 1 || pageAdvanceable) return result;\n\n\t// Walk the provider's real continuations to the requested page. Only the last page's items are kept — pages\n\t// 1..N returned as \"page N\" would duplicate items for a normal paged consumer — while warnings, truncation,\n\t// and failure accumulate across the whole walked prefix, since an earlier round's problem still means this\n\t// result isn't authoritative. The provider read is re-issued per round, but the integration is resolved once:\n\t// re-entering this function per page would repeat its auth resolution N times for page N.\n\tconst walkedWarnings = [...result.warnings];\n\tlet walkedFetchFailed = result.fetchFailed === true;\n\tlet walkedTruncated = result.page.truncated === true;\n\tlet previous = result;\n\tfor (let currentPage = 2; currentPage <= page; currentPage++) {\n\t\tif (!previous.hasMore || previous.cursor == null) {\n\t\t\t// The requested page lies past the provider's terminal cursor: an EMPTY page N, never the last\n\t\t\t// available page relabeled (see ProviderPageInfo.currentPage).\n\t\t\treturn {\n\t\t\t\titems: [],\n\t\t\t\twarnings: walkedWarnings,\n\t\t\t\tpage: { currentPage: page, itemsPerPage: 0, truncated: walkedTruncated || undefined },\n\t\t\t\thasMore: false,\n\t\t\t\tfetchFailed: walkedFetchFailed || undefined,\n\t\t\t};\n\t\t}\n\n\t\tconst suppliedCursor = previous.cursor;\n\t\tconst requested = toResult(await readPage(suppliedCursor), currentPage, suppliedCursor);\n\t\tfor (const warning of requested.warnings) {\n\t\t\tappendDedupedWarning(walkedWarnings, warning);\n\t\t}\n\t\twalkedFetchFailed ||= requested.fetchFailed === true;\n\t\twalkedTruncated ||= requested.page.truncated === true;\n\t\tif (currentPage === page) {\n\t\t\treturn {\n\t\t\t\t...requested,\n\t\t\t\twarnings: walkedWarnings,\n\t\t\t\tpage: { ...requested.page, truncated: walkedTruncated || undefined },\n\t\t\t\tfetchFailed: walkedFetchFailed || undefined,\n\t\t\t};\n\t\t}\n\n\t\tprevious = requested;\n\t}\n\n\treturn result;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4DA,SAAS,6BACR,UACA,IACA,QACA,cACA,QACA,UACU;CACV,MAAM,aAAa,oBAAoB,UAAU,IAAI,QAAQ,cAAc,OAAO,QAAQ;CAC1F,IAAI,CAAC,OAAO,WAAW,OAAO,WAAW,eAAe,WAAW;CAEnE,IAAI,CAAC,WAAW,UAGf,qBAAqB,UAAU,kBAAkB,IAAI,QAAQ,cAAc,UAAU,WAAW,CAAC;CAElG,OAAO;AACR;AAEA,eAAsB,SACrB,KACA,SACgD;CAChD,0BAA0B,YAAY,OAAO;CAC7C,MAAM,MAAM,SAAS,cAAc,OAAO,CAAC,QAAQ,UAAU,IAAI;CACjE,MAAM,iBAAiB,IAAI,WAAW;CACtC,MAAM,eAAe,iBAAiB,SAAS,eAAe,KAAA;CAC9D,MAAM,kBAAkB,iBAAiB,SAAS,SAAS,KAAA;CAE3D,MAAM,UAAU,MAAM,WAAW,KAAA,GAAgC,OAAM,OAAM;EAC5E,MAAM,cAAc,MAAM,IAAI,sBAAsB,IAAI,cAAc,eAAe;EACrF,IAAI,eAAe,MAAM;GAIxB,MAAM,QAAQ,IAAI,8BAA8B,IAAI,cAAc,eAAe;GACjF,OAAO;IACN,OAAO,CAAC;IACR,UAAU,MAAM;IAChB,aAAa,MAAM;GACpB;EACD;EAEA,MAAM,QAAgC,CAAC;EACvC,MAAM,WAA8B,CAAC;EACrC,IAAI,cAAc;EAClB,MAAM,SAAS,IAAI,cAAc,aAAa,IAAI,cAAc,eAAe;EAC/E,MAAM,uBAAuB,8BAA8B,IAAI,eAAe;EAC9E,IAAI,oBAAoB,WAAW,GAAG;GAErC,MAAM,EAAE,OAAO,WAAW,YAAY,MAAM,YAC3C,IACA,QACA,oBACM,YAAY,0BAA0B,YAAY,GACxD,EAAwB,qBAAqB,CAC9C;GACA,IAAI,aAAa,MAChB,MAAM,KAAK,GAAG,UAAU,KAAI,MAAK,cAAc,IAAI,CAAC,CAAC,CAAC;GAEvD,IAAI,WAAW,MAAM;IACpB,SAAS,KAAK,OAAO;IAErB,IAAI,aAAa,MAChB,cAAc;GAEhB;EACD,OAAO,IAAI,CAAC,YAAY,+BAA+B;GAItD,cAAc;GACd,SAAS,KACR,mBAAmB,IAAI,QAAQ,cAAc,+CAA+C,GAAG,GAAG,CACnG;EACD,OAAO;GACN,MAAM,EAAE,OAAO,YAAY,MAAM,YAChC,IACA,QACA,oBACM,YAAY,8BAA8B,YAAY,GAC5D,EAAwB,qBAAqB,CAC9C;GACA,IAAI,SAAS,MAAM;IAClB,MAAM,KAAK,GAAG,MAAM,OAAO,KAAI,QAAO,oBAAoB,IAAI,GAAG,CAAC,CAAC;IAEnE,IAAI,6BAA6B,UAAU,IAAI,QAAQ,cAAc,OAAO,cAAc,GACzF,cAAc;GAEhB;GACA,IAAI,WAAW,MAAM;IACpB,SAAS,KAAK,OAAO;IACrB,IAAI,SAAS,MACZ,cAAc;GAEhB;EACD;EAEA,OAAO;GAAS;GAAiB;GAAuB;EAAY;CACrE,CAAC;CAED,OAAO,sBAAsB,OAAO;AACrC;AAEA,eAAsB,aACrB,KACA,SACgD;CAChD,0BAA0B,gBAAgB,OAAO;CACjD,MAAM,MACL,SAAS,cAAc,OACpB,CAAC,QAAQ,UAAU,IACnB;EACA,GAAG;;;CAGJ;CACH,MAAM,iBAAiB,IAAI,WAAW;CACtC,MAAM,eAAe,iBAAiB,SAAS,eAAe,KAAA;CAC9D,MAAM,kBAAkB,iBAAiB,SAAS,SAAS,KAAA;CAE3D,MAAM,UAAU,MAAM,WAAW,KAAA,GAAgC,OAAM,OAAM;EAC5E,MAAM,cAAc,MAAM,IAAI,sBAAsB,IAAI,cAAc,eAAe;EACrF,IAAI,eAAe,MAAM;GAGxB,MAAM,QAAQ,IAAI,8BAA8B,IAAI,cAAc,eAAe;GACjF,OAAO;IACN,OAAO,CAAC;IACR,UAAU,MAAM;IAChB,aAAa,MAAM;GACpB;EACD;EAEA,MAAM,QAAgC,CAAC;EACvC,MAAM,WAA8B,CAAC;EACrC,IAAI,cAAc;EAClB,MAAM,SAAS,IAAI,cAAc,aAAa,IAAI,cAAc,eAAe;EAC/E,MAAM,MAAM,SAAS;EACrB,MAAM,uBAAuB,8BAA8B,IAAI,eAAe;EAI9E,IAAI,CAAC,oBAAoB,WAAW,GAAG;GAKtC,IAAI,CAAC,YAAY,0BAChB,OAAO;IAAS;IAAiB;IAAU,aAAa;GAAM;GAG/D,MAAM,EAAE,OAAO,UAAU,YAAY,MAAM,YAC1C,IACA,QACA,oBACM,YAAY,wBAAwB,KAAK,YAAY,GAC3D,EAAwB,qBAAqB,CAC9C;GACA,IAAI,WAAW,MAAM;IACpB,SAAS,KAAK,OAAO;IACrB,IAAI,YAAY,MACf,cAAc;GAEhB;GACA,IAAI,YAAY,MAAM;IACrB,MAAM,KAAK,GAAG,SAAS,OAAO,KAAI,YAAW,oBAAoB,IAAI,OAAO,CAAC,CAAC;IAE9E,IAAI,6BAA6B,UAAU,IAAI,QAAQ,cAAc,UAAU,SAAS,GACvF,cAAc;GAEhB;GACA,OAAO;IAAS;IAAiB;IAAuB;GAAY;EACrE;EAEA,MAAM,EAAE,OAAO,WAAW,SAAS,qBAAqB,MAAM,YAC7D,IACA,QACA,oBACM,YAAY,0BAA0B,YAAY,GACxD,EAAwB,qBAAqB,CAC9C;EACA,IAAI,oBAAoB,MAAM;GAC7B,SAAS,KAAK,gBAAgB;GAC9B,IAAI,aAAa,MAChB,cAAc;EAEhB;EAEA,MAAM,kBACL,OAAO,OAAO,WAAW,QAAO,aAAY,mBAAmB,UAAU,GAAG,CAAC,IAAI;EAClF,IAAI,mBAAmB,QAAQ,gBAAgB,WAAW,GAAG;GAC5D,MAAM,EAAE,OAAO,UAAU,SAAS,oBAAoB,MAAM,YAAY,IAAI,QAAQ,oBACnF,YAAY,0CAA0C,iBAAiB,YAAY,CACpF;GACA,IAAI,mBAAmB,MAAM;IAC5B,SAAS,KAAK,eAAe;IAC7B,IAAI,YAAY,MACf,cAAc;GAEhB;GACA,IAAI,YAAY,MACf,MAAM,KACL,GAAG,SAAS,OAAO,KAAI,YACtB,cAAc,IAAI,SAAS,cAAc,IAAI,SAAS,eAAe,CAAC,CACvE,CACD;GAED,MAAM,aAAa,oBAAoB,UAAU,IAAI,QAAQ,cAAc,UAAU,QAAQ;GAC7F,IAAI,WAAW,eAAe,WAAW,WACxC,cAAc;EAEhB;EAEA,OAAO;GAAS;GAAiB;GAAuB;EAAY;CACrE,CAAC;CAED,OAAO,sBAAsB,OAAO;AACrC;AAEA,eAAsB,UACrB,KACA,SAUwD;CAGxD,MAAM,OAAO,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC;CACtD,IAAI,0BAA0B,QAAQ,UAAU,GAC/C,OAAO,YACN,MACA,CAAC,0BAA0B,QAAQ,YAAY,KAAA,GAAW,QAAQ,cAAc,sBAAsB,CAAC,GACvG,IACD;CAGD,MAAM,cAAc,MAAM,IAAI,sBAAsB,QAAQ,YAAY,QAAQ,cAAc,QAAQ,MAAM;CAC5G,IAAI,eAAe,MAAM;EAGxB,MAAM,QAAQ,IAAI,8BAA8B,QAAQ,YAAY,QAAQ,cAAc,QAAQ,MAAM;EACxG,OAAO,YAAY,MAAM,MAAM,UAAU,MAAM,WAAW;CAC3D;CACA,IAAI,CAAC,qBAAqB,WAAW,GACpC,OAAO,YACN,MACA,CAAC,0BAA0B,QAAQ,YAAY,KAAA,GAAW,QAAQ,cAAc,sBAAsB,CAAC,GACvG,IACD;CAGD,MAAM,SAAS,IAAI,cAAc,aAAa,QAAQ,YAAY,QAAQ,cAAc,QAAQ,MAAM;CAEtG,MAAM,cAAc,QAAQ,OAAO;CAInC,IAAI,EAHc,cACf,YAAY,kCACZ,YAAY,8BAMd,OAAO,YACN,MACA,CACC,mBACC,QAAQ,YACR,QACA,QAAQ,cACR,cACG,0DAA0D,QAAQ,WAAW,yCAC7E,6CAA6C,QAAQ,WAAW,GACpE,CACD,GACA,IACD;CAGD,MAAM,MAAM,QAAQ;CACpB,MAAM,uBAAuB,8BAA8B,QAAQ,YAAY,QAAQ,MAAM;CAC7F,MAAM,YAAY,WACjB,YACC,QAAQ,YACR,QACA,QAAQ,oBAEP,OAAO,OACJ,YAAY,6BAA6B;EAAU;EAAQ,cAAc,QAAQ;CAAa,CAAC,IAC/F,YAAY,4BAA4B,KAAK;EAC7C,SAAS,QAAQ;EACT;EACR,cAAc,QAAQ;CACvB,CAAC,GACJ,EAAwB,qBAAqB,CAC9C;;;;;;CAOD,MAAM,YACL,EAAE,OAAO,WACT,eACA,mBACkD;EAClD,MAAM,QAAQ,OAAO,UAAU,CAAC;EAChC,MAAM,WAAW,WAAW,OAAO,CAAC,OAAO,IAAI,CAAC;EAIhD,MAAM,QAAQ,mBAAmB,MAAM,QAAQ,OAAO,MAAM;EAG5D,MAAM,aAAa,oBAClB,UACA,QAAQ,YACR,QACA,QAAQ,cACR,OAAO,QACR;EAQA,MAAM,kBAAkB,OAAO,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,YAAY;EAIlF,MAAM,cAAc,mBAAmB;GACtC,cAAc,MAAM,KAAK;GACV;GACC;GACC;EAClB,CAAC;EAUD,MAAM,eAAe,oBAAoB,OAAO,kBAAkB,cAAc,IAAI,KAAA,CAAS;EAI7F,MAAM,aACJ,OAAO,aAAa,WACpB,OAAO,QAAQ,aAAa,UAC7B,WAAW,aACX,aAAa;EACd,OAAO;GAEN,OAAO,MAAM,IAAI,yBAAyB;GAChC;GACV,MAAM;IAAE,GAAG,MAAM;IAAmB;IAAa,WAAW,aAAa,KAAA;GAAU;GACnF,SAAS,aAAa;GACtB,QAAQ,aAAa;GACrB,aAAa,WAAW,eAAgB,WAAW,QAAQ,SAAS,QAAS,KAAA;EAC9E;CACD;CAEA,MAAM,QAAQ,MAAM,SACnB,QAAQ,WACN,YAAY,OAAA,qBAAyD,KAAA,IAAY,aAAa,IAAI,EACrG;CACA,MAAM,SAAS,SAAS,OAAO,MAAM,QAAQ,MAAM;CAInD,MAAM,kBAAkB,MAAM,OAAO,QAAQ,QAAQ,QAAQ,MAAM,OAAO,QAAQ,YAAY;CAC9F,IAAI,QAAQ,UAAU,QAAQ,SAAS,KAAK,iBAAiB,OAAO;CAOpE,MAAM,iBAAiB,CAAC,GAAG,OAAO,QAAQ;CAC1C,IAAI,oBAAoB,OAAO,gBAAgB;CAC/C,IAAI,kBAAkB,OAAO,KAAK,cAAc;CAChD,IAAI,WAAW;CACf,KAAK,IAAI,cAAc,GAAG,eAAe,MAAM,eAAe;EAC7D,IAAI,CAAC,SAAS,WAAW,SAAS,UAAU,MAG3C,OAAO;GACN,OAAO,CAAC;GACR,UAAU;GACV,MAAM;IAAE,aAAa;IAAM,cAAc;IAAG,WAAW,mBAAmB,KAAA;GAAU;GACpF,SAAS;GACT,aAAa,qBAAqB,KAAA;EACnC;EAGD,MAAM,iBAAiB,SAAS;EAChC,MAAM,YAAY,SAAS,MAAM,SAAS,cAAc,GAAG,aAAa,cAAc;EACtF,KAAK,MAAM,WAAW,UAAU,UAC/B,qBAAqB,gBAAgB,OAAO;EAE7C,sBAAsB,UAAU,gBAAgB;EAChD,oBAAoB,UAAU,KAAK,cAAc;EACjD,IAAI,gBAAgB,MACnB,OAAO;GACN,GAAG;GACH,UAAU;GACV,MAAM;IAAE,GAAG,UAAU;IAAM,WAAW,mBAAmB,KAAA;GAAU;GACnE,aAAa,qBAAqB,KAAA;EACnC;EAGD,WAAW;CACZ;CAEA,OAAO;AACR"}

package/dist/plus/integrations/reads/issueBatch.d.ts

@@ -1,7 +1,7 @@
 import { IssueShape } from "../../../git/models/issue.js";
 import { IntegrationIds } from "../constants.js";
-import { ProviderResult, ProviderWarning } from "../results.js";
-import { BatchSlot } from "../models/integration.js";
+import { ProviderResult } from "../results.js";
+import { IssueEtagInclude } from "../models/integration.js";
 import { ProviderReadContext } from "./context.js";
 //#region ../plus/integrations/src/reads/issueBatch.d.ts
 /**
@@ -21,10 +21,15 @@ import { ProviderReadContext } from "./context.js";
  * Modeled on `countIssues` for its shape — caller-owned `key` echoed back, per-target isolation, as few requests
  * as the provider allows — because both take a set of independent questions and answer them together.
  *
- * ONE integration call per invocation, whatever the target count, as in `getPullRequestsBatch`: the integration
- * fans its targets out (chunked for GitHub/GHE, one request per target with bounded concurrency on GitLab and
- * Azure DevOps and on the trackers) and settles each independently, so failing targets spend at most one strike
- * of the integration's failure budget.
+ * ONE integration call per invocation when no target carries an `etag`, whatever the target count, as in
+ * `getPullRequestsBatch`: the integration fans its targets out (chunked for GitHub/GHE, one request per target with
+ * bounded concurrency on GitLab and Azure DevOps and on the trackers) and settles each independently, so failing
+ * targets spend at most one strike of the integration's failure budget.
+ *
+ * With etags, up to THREE on a host with a cheap check (GitHub/GHE, GitLab and Azure DevOps; Jira Cloud and Linear
+ * among the trackers): the cheap check of the targets that carry one, a full read of the rest started alongside it,
+ * and a full read of the targets whose etag no longer matches — see `readEtaggedBatch`. Every other tracker still makes
+ * one call and etags its rows.
  */
 /** One issue to resolve, echoed back under the caller's own `key`. Which form a call takes depends on its provider. */
 export type IssueBatchTarget =
@@ -45,6 +50,8 @@ export type IssueBatchTarget =
   number: number;
   /** Azure DevOps project. Required there, ignored elsewhere. */
   project?: string;
+  /** The {@link IssueBatchResult.etag} of the copy the caller holds; see {@link IssueBatchResult}. */
+  etag?: string;
 } |
 /**
  * An issue tracker's issue, by its own identifier (e.g. `ABC-123`) within a resource. Jira (Cloud and Data
@@ -57,12 +64,26 @@ export type IssueBatchTarget =
   resourceId: string;
   resourceUrl?: string;
   identifier: string;
+  /**
+   * The {@link IssueBatchResult.etag} of the copy the caller holds. Checked cheaply on Jira Cloud and Linear;
+   * every other tracker accepts it but reads the issue in full.
+   */
+  etag?: string;
 };
-/** The answer for one {@link IssueBatchTarget}. */
+/**
+ * The answer for one {@link IssueBatchTarget}, in one of four states:
+ * - `{ key, issue, etag }` — read in full. Every fully read row carries an `etag`, whether or not the caller sent
+ *   one, so a caller can seed its etags from the reads it already makes.
+ * - `{ key, unchanged: true, etag }` — the cheap check proved the caller's copy current, and nothing else was
+ *   fetched. Only for a target that sent an `etag`, on a host with a cheap check.
+ * - `{ key }` — PROVEN ABSENT.
+ * - no row, with `fetchFailed` and a warning — the read could not check. Never treat that as absent.
+ */
 export interface IssueBatchResult {
   key: string;
   /**
-   * The resolved issue, or `undefined` when it PROVABLY does not exist (or is not visible to this connection).
+   * The resolved issue, or `undefined` when it PROVABLY does not exist (or is not visible to this connection) —
+   * or when it is `unchanged`.
    *
    * Absent is an answer here, unlike every paged read on this facade: a target that FAILED — its own request
    * outright, or just its own alias within an otherwise-answering GitHub chunk (e.g. an org enforcing SAML SSO
@@ -70,6 +91,16 @@ export interface IssueBatchResult {
    * "proven absent" from "unknown" and cache the first without ever caching the second.
    */
   issue?: IssueShape;
+  /**
+   * Opaque: compare for equality only, never parse. Computed by core from the issue's change state — its state and
+   * update time, plus each input the call's `etagIncludes` listed — and NOT the provider's HTTP ETag. Send it back
+   * as the target's `etag`. An etag from another scheme or another `etagIncludes` set simply compares unequal and
+   * costs a full read, never a false `unchanged`. A host can add a reaction without moving the update time, so
+   * unless `'reactions'` is listed, an `unchanged` copy's `thumbsUpCount` may be stale.
+   */
+  etag?: string;
+  /** The caller's copy is current (its `etag` matched); `issue` is absent because nothing was read. */
+  unchanged?: true;
 }
 export declare function getIssuesBatch(ctx: ProviderReadContext, options: {
   providerId: IntegrationIds;
@@ -80,6 +111,14 @@ export declare function getIssuesBatch(ctx: ProviderReadContext, options: {
    * it must come from the trusted authentication configuration, not repository or remote data.
    */
   domain?: string;
+  /**
+   * Widens every etag to the listed inputs, each of which a host changes without moving the issue's update
+   * time, and each of which costs its own fields in the cheap check. `'reactions'` is the thumbs-up count; it
+   * widens nothing on a host whose rows carry no real count (Azure DevOps work items and the trackers). Order
+   * and repeats don't matter. An unknown value refuses the whole call. Changes only which etag is computed; the
+   * full read is the same. Calls that differ in this set never match each other's etags.
+   */
+  etagIncludes?: readonly IssueEtagInclude[];
 }): Promise<ProviderResult<IssueBatchResult>>;
 /**
  * Trims `owner`, `repo` and `project` once, shared by every coordinate-form batch read (this one, the pull request
@@ -98,14 +137,6 @@ export declare function trimCoordinateFields<T extends {
  * gives — either way `fetchFailed`, so no caller mistakes the dropped targets for an answer.
  */
 export declare function unresolvedIntegration<T>(ctx: ProviderReadContext, providerId: IntegrationIds, connectionId: string | undefined, domain: string | undefined): ProviderResult<T>;
-/**
- * Appends the warning for a batch target that could not be checked, shared by every batch read: for a refusal, the
- * scope failure it was recorded as (see `IntegrationBase.settleBatchRefusals`), published as an account-wide read
- * publishes one, scoped and with its cause; otherwise, the reason itself.
- */
-export declare function appendBatchSlotWarning(warnings: ProviderWarning[], providerId: IntegrationIds, domain: string | undefined, connectionId: string | undefined, slot: Extract<BatchSlot<unknown>, {
-  status: 'rejected';
-}>): void;
 export declare function findDuplicateKey(targets: readonly {
   key: string;
 }[]): string | undefined;

package/dist/plus/integrations/reads/issueBatch.js

@@ -1,12 +1,13 @@
 import "../constants.js";
 import { githubGraphQLInt32Max, isAzureProviderId, isGitHubProviderId } from "../providers/providerErrors.js";
-import { appendDedupedWarning, toProviderWarning } from "../results.js";
-import { mergeAssessmentInto } from "../collectionMetadata.js";
 import { areDomainsOnSameHost, hostFromDomain } from "../utils/domain.utils.js";
 import { isGitHostIntegration, isIssuesHostIntegrationId, isIssuesSelfManagedHostIntegrationId } from "../utils/integration.utils.js";
-import { gitHostOnlySurfaceWarning, issueTrackerOnlySurfaceWarning, issuesUnsupportedWarning, noConnectionWarning, otherWarning } from "./warnings.js";
+import { gitHostOnlySurfaceWarning, issueTrackerOnlySurfaceWarning, issuesUnsupportedWarning, noConnectionWarning, otherWarning, unsupportedWarning } from "./warnings.js";
 import { runCaptured } from "./drains.js";
+import { issueEtagIncludes } from "../models/integration.js";
 import { isIssuesIntegration } from "../models/issuesIntegration.js";
+import { readEtaggedBatch } from "./batchEtags.js";
+import { findInvalidIssueEtagInclude, issueEtag, issueEtagFieldsFromShape, normalizeIssueEtagIncludes } from "./etag.js";
 //#region ../plus/integrations/src/reads/issueBatch.ts
 const surface = "Batch issue resolution";
 function refused(warning) {
@@ -23,7 +24,10 @@ async function getIssuesBatch(ctx, options) {
 	};
 	const duplicateKey = findDuplicateKey(options.targets);
 	if (duplicateKey != null) return refused(otherWarning(options.providerId, void 0, options.connectionId, `Duplicate issue batch target key '${duplicateKey}'; keys identify results, so each must be unique.`));
-	if (isIssuesHostIntegrationId(options.providerId)) return getIssuesBatchForTracker(ctx, options.providerId, options.targets, options.connectionId, options.domain);
+	const invalidInclude = findInvalidIssueEtagInclude(options.etagIncludes ?? []);
+	if (invalidInclude != null) return refused(otherWarning(options.providerId, void 0, options.connectionId, `Unknown issue etag include '${invalidInclude}'; expected one of ${issueEtagIncludes.map((i) => `'${i}'`).join(", ")}.`));
+	const etagIncludes = normalizeIssueEtagIncludes(options.etagIncludes ?? []);
+	if (isIssuesHostIntegrationId(options.providerId)) return getIssuesBatchForTracker(ctx, options.providerId, options.targets, options.connectionId, options.domain, etagIncludes);
 	const targets = options.targets;
 	if (!targets.every(isCoordinateTarget)) return refused(otherWarning(options.providerId, void 0, options.connectionId, `${surface} for '${options.providerId}' takes repository coordinates { key, owner, repo, number, project? }, not tracker identifiers.`));
 	const trimmedTargets = targets.map(trimCoordinateFields);
@@ -34,47 +38,31 @@ async function getIssuesBatch(ctx, options) {
 	if (!isGitHostIntegration(integration)) return refused(gitHostOnlySurfaceWarning(options.providerId, void 0, options.connectionId, surface));
 	const domain = ctx.domainForRead(integration, options.providerId, options.connectionId, options.domain);
 	if (!integration.supportsIssues) return refused(issuesUnsupportedWarning(options.providerId, domain, options.connectionId));
-	const warnings = [];
-	let fetchFailed = false;
-	const { value: slots, warning } = await runCaptured(options.providerId, domain, options.connectionId, () => integration.getIssuesBatchResult(trimmedTargets.map((t) => ({
+	const toCoordinate = (t) => ({
 		owner: t.owner,
 		repo: t.repo,
 		number: t.number,
 		project: t.project
-	})), void 0, options.connectionId), { warnOnMissingSession: true });
-	if (warning != null) appendDedupedWarning(warnings, warning);
-	if (slots == null) {
-		if (warning == null) appendDedupedWarning(warnings, otherWarning(options.providerId, domain, options.connectionId, `${surface} is not supported by '${options.providerId}'; resolve issues individually instead.`));
-		return {
-			items: [],
-			warnings,
-			fetchFailed: true
-		};
-	}
-	const items = [];
-	for (let i = 0; i < trimmedTargets.length; i++) {
-		const slot = slots[i];
-		if (slot.status === "rejected") {
-			appendBatchSlotWarning(warnings, options.providerId, domain, options.connectionId, slot);
-			fetchFailed = true;
-			continue;
-		}
-		const issue = slot.value;
-		items.push({
-			key: trimmedTargets[i].key,
-			...issue != null ? { issue } : {}
-		});
-	}
-	return {
-		items,
-		warnings,
-		fetchFailed: fetchFailed || void 0
-	};
+	});
+	return toIssueBatchResult(await readEtaggedBatch({
+		providerId: options.providerId,
+		domain,
+		connectionId: options.connectionId,
+		targets: trimmedTargets,
+		supportsEtags: integration.supportsIssueEtags,
+		readFull: (batch) => runCaptured(options.providerId, domain, options.connectionId, () => integration.getIssuesBatchResult(batch.map(toCoordinate), void 0, options.connectionId), { warnOnMissingSession: true }),
+		readEtagFields: (batch) => runCaptured(options.providerId, domain, options.connectionId, () => integration.getIssuesEtagFieldsResult(batch.map(toCoordinate), { etagIncludes }, void 0, options.connectionId), { warnOnMissingSession: true }),
+		itemEtag: (issue) => issueEtag(issueEtagFieldsFromShape(issue), etagIncludes),
+		fieldsEtag: (fields) => issueEtag(fields, etagIncludes),
+		unsupportedWarning: () => unsupportedWarning(options.providerId, domain, options.connectionId, `${surface} is not supported by '${options.providerId}'; resolve issues individually instead.`)
+	}));
 }
 /**
-* The tracker form. ONE integration call per invocation, whatever the target count: the integration makes one
-* single-issue request per target, with bounded concurrency, and settles each independently — see
-* `IssuesIntegration.getIssuesByResourceIdBatchResult`.
+* The tracker form. ONE integration call per invocation when no target carries an `etag`, whatever the target count:
+* the integration makes one single-issue request per target, with bounded concurrency, and settles each independently
+* — see `IssuesIntegration.getIssuesByResourceIdBatchResult`. With etags, a tracker with a cheap check (Jira Cloud's
+* bulk fetch, Linear's per-team query) takes the coordinate form's `readEtaggedBatch` flow; every other tracker
+* ignores a target's `etag` and reads and etags every found row in full.
 *
 * `resourceId` is trusted and the read does no resource discovery. It is handed to the provider's by-resource-id
 * read as-is, never wrapped into a synthesized descriptor: Linear and Trello answer `undefined` for a descriptor
@@ -87,7 +75,7 @@ async function getIssuesBatch(ctx, options) {
 * issue the same project and issue keys, and `issue: undefined` is a proven absence a caller may cache — an answer
 * from whichever host happens to be primary would be cached under a key that names a different instance (#5872).
 */
-async function getIssuesBatchForTracker(ctx, providerId, targets, connectionId, domain) {
+async function getIssuesBatchForTracker(ctx, providerId, targets, connectionId, domain, etagIncludes) {
 	if (!targets.every(isTrackerTarget)) return refused(otherWarning(providerId, void 0, connectionId, `${surface} for '${providerId}' takes tracker identifiers { key, resourceId, resourceUrl?, identifier }, not repository coordinates.`));
 	const trimmedTargets = targets.map(trimTrackerTarget);
 	const invalid = findInvalidTrackerTarget(providerId, trimmedTargets);
@@ -96,47 +84,42 @@ async function getIssuesBatchForTracker(ctx, providerId, targets, connectionId,
 	const integration = await ctx.getIntegrationForRead(providerId, connectionId, domain);
 	if (integration == null) return unresolvedIntegration(ctx, providerId, connectionId, domain);
 	if (!isIssuesIntegration(integration)) return refused(issueTrackerOnlySurfaceWarning(providerId, connectionId, surface));
-	const unsupported = () => otherWarning(providerId, void 0, connectionId, `${surface} is not supported by '${providerId}'; its single-issue read cannot prove an absence, so a miss would not be safe to cache.`);
+	const unsupported = () => unsupportedWarning(providerId, void 0, connectionId, `${surface} is not supported by '${providerId}'; its single-issue read cannot prove an absence, so a miss would not be safe to cache.`);
 	if (!integration.supportsIssueLookupByResourceId) return refused(unsupported());
 	if (isIssuesSelfManagedHostIntegrationId(providerId)) {
 		const mismatched = trimmedTargets.find((t) => !areDomainsOnSameHost(t.resourceId, integration.domain));
 		if (mismatched != null) return refused(otherWarning(providerId, void 0, connectionId, `Issue batch target '${mismatched.key}' requires the resource id of '${providerId}' to name the host the read resolved to.`));
 	}
 	const resolvedDomain = ctx.domainForRead(integration, providerId, connectionId, domain);
-	const warnings = [];
-	let fetchFailed = false;
-	const { value: slots, warning } = await runCaptured(providerId, resolvedDomain, connectionId, () => integration.getIssuesByResourceIdBatchResult(trimmedTargets.map((t) => ({
+	const toResourceTarget = (t) => ({
 		resourceId: t.resourceId,
 		identifier: t.identifier,
 		resourceUrl: t.resourceUrl
-	})), connectionId), { warnOnMissingSession: true });
-	if (warning != null) appendDedupedWarning(warnings, warning);
-	if (slots == null) {
-		if (warning == null) appendDedupedWarning(warnings, unsupported());
-		return {
-			items: [],
-			warnings,
-			fetchFailed: true
-		};
-	}
-	const items = [];
-	for (let i = 0; i < trimmedTargets.length; i++) {
-		const slot = slots[i];
-		if (slot.status === "rejected") {
-			appendBatchSlotWarning(warnings, providerId, resolvedDomain, connectionId, slot);
-			fetchFailed = true;
-			continue;
-		}
-		const issue = slot.value;
-		items.push({
-			key: trimmedTargets[i].key,
-			...issue != null ? { issue } : {}
-		});
-	}
+	});
+	return toIssueBatchResult(await readEtaggedBatch({
+		providerId,
+		domain: resolvedDomain,
+		connectionId,
+		targets: trimmedTargets,
+		supportsEtags: integration.supportsIssueEtagsByResourceId,
+		readFull: (batch) => runCaptured(providerId, resolvedDomain, connectionId, () => integration.getIssuesByResourceIdBatchResult(batch.map(toResourceTarget), connectionId), { warnOnMissingSession: true }),
+		readEtagFields: (batch) => runCaptured(providerId, resolvedDomain, connectionId, () => integration.getIssuesEtagFieldsByResourceIdBatchResult(batch.map(toResourceTarget), { etagIncludes }, connectionId), { warnOnMissingSession: true }),
+		itemEtag: (issue) => issueEtag(issueEtagFieldsFromShape(issue), etagIncludes),
+		fieldsEtag: (fields) => issueEtag(fields, etagIncludes),
+		unsupportedWarning: unsupported
+	}));
+}
+/** The etag flow's rows as this read's results, under the `issue` name the result type gives the item. */
+function toIssueBatchResult(result) {
 	return {
-		items,
-		warnings,
-		fetchFailed: fetchFailed || void 0
+		items: result.items.map((row) => ({
+			key: row.key,
+			...row.value != null ? { issue: row.value } : {},
+			...row.unchanged ? { unchanged: true } : {},
+			...row.etag != null ? { etag: row.etag } : {}
+		})),
+		warnings: result.warnings,
+		fetchFailed: result.fetchFailed
 	};
 }
 function isCoordinateTarget(target) {
@@ -206,21 +189,6 @@ function unresolvedIntegration(ctx, providerId, connectionId, domain) {
 		fetchFailed: true
 	};
 }
-/**
-* Appends the warning for a batch target that could not be checked, shared by every batch read: for a refusal, the
-* scope failure it was recorded as (see `IntegrationBase.settleBatchRefusals`), published as an account-wide read
-* publishes one, scoped and with its cause; otherwise, the reason itself.
-*/
-function appendBatchSlotWarning(warnings, providerId, domain, connectionId, slot) {
-	if (slot.failure != null) {
-		mergeAssessmentInto(warnings, providerId, domain, connectionId, {
-			completeness: "partial",
-			failures: [slot.failure]
-		});
-		return;
-	}
-	appendDedupedWarning(warnings, toProviderWarning(providerId, domain, connectionId, slot.reason));
-}
 function findDuplicateKey(targets) {
 	const seen = /* @__PURE__ */ new Set();
 	for (const target of targets) {
@@ -229,6 +197,6 @@ function findDuplicateKey(targets) {
 	}
 }
 //#endregion
-export { appendBatchSlotWarning, findDuplicateKey, getIssuesBatch, trimCoordinateFields, unresolvedIntegration };
+export { findDuplicateKey, getIssuesBatch, trimCoordinateFields, unresolvedIntegration };
 
 //# sourceMappingURL=issueBatch.js.map