@wjarka/cezarion 0.16.0 → 0.17.0

package/dist/server/create-project.js

@@ -0,0 +1,448 @@
+import { spawn } from 'node:child_process';
+import { mkdir, writeFile } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { PROJECT_NAME_PATTERN } from '../contract/index.js';
+import { GH_CREDENTIAL_HELPER_CONFIG, cleanupCheckout, isValidCheckoutName, parseRepoRef } from './checkout.js';
+/**
+ * Create a local Git project, optionally with an explicitly requested private GitHub repository
+ * or template. Share checkout target and cleanup rules. After remote creation, preserve useful
+ * local work and return recovery warnings.
+ */
+const COMMAND_TIMEOUT_MS = 10 * 60_000;
+const ERROR_TAIL_LINES = 6;
+/** How long to wait for GitHub to generate a repo from a template before
+ *  cloning anyway. Generation is asynchronous and usually takes a few seconds. */
+const TEMPLATE_WAIT_ATTEMPTS = 15;
+const TEMPLATE_WAIT_MS = 2_000;
+/** The one initial branch name for a new local repo. */
+const INITIAL_BRANCH = 'main';
+const GH_MISSING = 'gh CLI not found — install it and run `gh auth login`';
+const CANCELLED = 'project creation cancelled';
+export const spawnCommandRunner = (cmd, args, opts) => new Promise((resolvePromise) => {
+    const child = spawn(cmd, args, {
+        cwd: opts.cwd,
+        stdio: ['ignore', 'pipe', 'pipe'],
+        timeout: COMMAND_TIMEOUT_MS,
+        // Non-interactive on purpose: a prompt nobody can see would pin the request. GH_HOST is
+        // pinned because every URL, remote and command this flow names is github.com — an ambient
+        // GH_HOST (GitHub Enterprise) would list owners on, and create the repository on, another server.
+        env: { ...process.env, GH_PROMPT_DISABLED: '1', GIT_TERMINAL_PROMPT: '0', ...(cmd === 'gh' ? { GH_HOST: 'github.com' } : {}) },
+    });
+    const tail = [];
+    let stdout = '';
+    let settled = false;
+    const finish = (result) => {
+        if (settled)
+            return;
+        settled = true;
+        resolvePromise(result);
+    };
+    const onAbort = () => {
+        child.kill('SIGTERM');
+        finish({ ok: false, error: CANCELLED });
+    };
+    if (opts.signal?.aborted)
+        onAbort();
+    opts.signal?.addEventListener('abort', onAbort, { once: true });
+    // git's progress is carriage-return-separated (see `ghCloneRunner`).
+    let pending = '';
+    child.stderr?.setEncoding('utf8');
+    child.stderr?.on('data', (chunk) => {
+        pending += chunk;
+        const parts = pending.split(/\r\n|\r|\n/);
+        pending = parts.pop() ?? '';
+        for (const part of parts) {
+            const line = part.trim();
+            if (line === '')
+                continue;
+            tail.push(line);
+            if (tail.length > ERROR_TAIL_LINES)
+                tail.shift();
+            opts.onLine?.(line);
+        }
+    });
+    child.stdout?.setEncoding('utf8');
+    child.stdout?.on('data', (chunk) => {
+        stdout += chunk;
+    });
+    child.on('error', (err) => {
+        opts.signal?.removeEventListener('abort', onAbort);
+        finish({ ok: false, error: err.message, notFound: err.code === 'ENOENT' });
+    });
+    child.on('close', (code) => {
+        opts.signal?.removeEventListener('abort', onAbort);
+        if (code === 0)
+            return finish({ ok: true, stdout });
+        const detail = [...tail, pending.trim(), stdout.trim()].filter((s) => s !== '').slice(-ERROR_TAIL_LINES).join('\n');
+        finish({ ok: false, error: detail === '' ? `${cmd} ${args[0] ?? ''} exited with code ${code}` : detail });
+    });
+});
+/** An identity (and no signing) lent to one `git commit`, so a dry run never
+ *  depends on the host's git config. */
+const LENT_IDENTITY = ['-c', 'user.name=cezar dry run', '-c', 'user.email=dry-run@cezar.invalid', '-c', 'commit.gpgsign=false'];
+/**
+ * `CEZ_DRY_RUN=1` — real `git` (it is local and required anyway), fake `gh`
+ * and a fake `git push`. Answers the pre-checks as a signed-in account whose
+ * name is free and whose template is valid. The fake template clone writes
+ * only inside the directory the caller created, as a real repo with one commit,
+ * so the registered project can host task worktrees like a real one.
+ */
+export const dryRunCommandRunner = async (cmd, args, opts) => {
+    if (cmd === 'git' && args[0] === 'push') {
+        opts.onLine?.(`(CEZ_DRY_RUN=1) git ${args.join(' ')}`);
+        return { ok: true, stdout: '' };
+    }
+    if (cmd === 'git')
+        return spawnCommandRunner(cmd, args[0] === 'commit' ? [...LENT_IDENTITY, ...args] : args, opts);
+    opts.onLine?.(`(CEZ_DRY_RUN=1) gh ${args.join(' ')}`);
+    if (args[0] === 'api') {
+        const path = args[1] ?? '';
+        if (path === 'user')
+            return { ok: true, stdout: 'dry-run-user\n' };
+        if (path.endsWith('/commits?per_page=1'))
+            return { ok: true, stdout: '1\n' };
+        if (args.includes(TEMPLATE_JQ))
+            return { ok: true, stdout: '[true,false]\n' };
+        return { ok: false, error: 'gh: Not Found (HTTP 404)' };
+    }
+    if (args[0] === 'repo' && args[1] === 'clone') {
+        const dir = args[3] ?? opts.cwd;
+        const local = { ...opts, cwd: dir };
+        const init = await spawnCommandRunner('git', ['init', '-b', INITIAL_BRANCH], local);
+        if (!init.ok)
+            return init;
+        await writeFile(join(dir, 'README.md'), `# ${args[2] ?? 'repo'}\n\n(CEZ_DRY_RUN=1 fake template clone)\n`, 'utf8');
+        const add = await spawnCommandRunner('git', ['add', 'README.md'], local);
+        if (!add.ok)
+            return add;
+        return spawnCommandRunner('git', [...LENT_IDENTITY, 'commit', '-m', 'Initial commit'], local);
+    }
+    return { ok: true, stdout: '' };
+};
+const OWNER_SEGMENT = /^[A-Za-z0-9][A-Za-z0-9-]*$/;
+const TEMPLATE_JQ = '[.is_template, .archived] | @json';
+export async function createProject(opts) {
+    const name = opts.name.trim();
+    // GitHub's repository-name rules, even for a local-only project: the name is
+    // the folder AND (now or later) the repo, and GitHub would silently rewrite
+    // anything else — `my project` becomes `my-project` there but not on disk.
+    if (!PROJECT_NAME_PATTERN.test(name) || !isValidCheckoutName(name)) {
+        return {
+            ok: false,
+            status: 400,
+            error: `not a valid project name: ${name.slice(0, 200)} — use letters, digits, ".", "-" and "_" only, no spaces`,
+        };
+    }
+    let slug;
+    let template;
+    if (opts.github) {
+        const owner = opts.github.owner.trim();
+        if (owner.length > 64 || !OWNER_SEGMENT.test(owner)) {
+            return { ok: false, status: 400, error: `not a valid GitHub owner: ${owner.slice(0, 200)}` };
+        }
+        slug = `${owner}/${name}`;
+        const rawTemplate = opts.github.template?.trim() ?? '';
+        if (rawTemplate !== '') {
+            const ref = parseRepoRef(rawTemplate);
+            if (!ref)
+                return { ok: false, status: 400, error: `not a GitHub template repository: ${rawTemplate.slice(0, 200)}` };
+            template = ref.slug;
+        }
+    }
+    if (!opts.projectsDir.startsWith('/')) {
+        return { ok: false, status: 500, error: `checkout root is not an absolute path: ${opts.projectsDir}` };
+    }
+    const root = resolve(opts.projectsDir);
+    const target = join(root, name);
+    const emit = (event) => opts.onProgress({ ...event, name, ...(opts.checkoutId ? { checkoutId: opts.checkoutId } : {}) });
+    const say = (line) => emit({ phase: 'cloning', line });
+    const refuse = (failure) => {
+        emit({ phase: 'error', error: failure.error });
+        return failure;
+    };
+    const run = opts.run ?? (process.env.CEZ_DRY_RUN === '1' ? dryRunCommandRunner : spawnCommandRunner);
+    /** `cancellable` is false from `gh repo create` on: those steps always run to the end. */
+    const exec = async (cmd, args, cancellable, cwd = target) => {
+        try {
+            return await run(cmd, args, { cwd, onLine: say, signal: cancellable ? opts.signal : undefined });
+        }
+        catch (err) {
+            return { ok: false, error: errText(err) };
+        }
+    };
+    if (slug) {
+        say('Checking GitHub…');
+        const blocked = await githubPreflight(slug, template, (cmd, args) => exec(cmd, args, true, process.cwd()));
+        if (blocked)
+            return refuse(blocked);
+    }
+    try {
+        await mkdir(root, { recursive: true });
+    }
+    catch (err) {
+        return refuse({ ok: false, status: 500, error: `checkout root is not writable: ${errText(err)}` });
+    }
+    // The ownership token, exactly as in checkout.ts: non-recursive, so it
+    // succeeds only when WE created the directory — which is what licenses the
+    // cleanup below.
+    try {
+        await mkdir(target);
+    }
+    catch (err) {
+        if (err.code === 'EEXIST') {
+            return refuse({ ok: false, status: 409, error: `folder already exists: ${target}` });
+        }
+        return refuse({ ok: false, status: 500, error: `could not create ${target}: ${errText(err)}` });
+    }
+    /** Remove the local folder and answer with a failure. */
+    const fail = async (status, error) => {
+        await cleanupCheckout(root, target);
+        return refuse({ ok: false, status, error: opts.signal?.aborted ? CANCELLED : error });
+    };
+    /** Run the steps after `gh repo create`; the first failure stops them and becomes a warning
+     *  naming every command still to run. The local repo is kept either way. */
+    const finishAfterCreate = async (steps) => {
+        for (const [i, step] of steps.entries()) {
+            const result = await step.run();
+            if (result.ok)
+                continue;
+            const remaining = steps.slice(i).map((s) => s.command).join(' && ');
+            return `The private repository ${webUrl(slug)} was created, but ${step.label} failed: ${firstLine(result.error)}. Finish in ${target} with: ${remaining}`;
+        }
+        return undefined;
+    };
+    const credentialStep = {
+        label: 'configuring GitHub credentials',
+        // Both operations, as run: a helper inherited from the global config must be cleared too.
+        command: GH_CREDENTIAL_HELPER_CONFIG.map((args) => ['git', 'config', '--local', ...args].map(shellQuote).join(' ')).join(' && '),
+        run: async () => {
+            // PR #968: route this repo's github.com HTTPS credentials through `gh`, as `checkout.ts` does.
+            for (const args of GH_CREDENTIAL_HELPER_CONFIG) {
+                const result = await exec('git', ['config', '--local', ...args], false);
+                if (!result.ok)
+                    return result;
+            }
+            return { ok: true, stdout: '' };
+        },
+    };
+    /** `gh repo create` failed — which does not prove GitHub did nothing. Check the name again and
+     *  say what the user finds there; never adopt (or delete) a repository cezar cannot prove it made. */
+    const createFailed = async (error) => {
+        const recheck = await exec('gh', ['api', `repos/${slug}`, '--jq', '.full_name'], false, process.cwd());
+        if (recheck.ok) {
+            const recovery = template
+                ? `If this attempt created it, add it with Add project → Clone from GitHub (${slug}).`
+                : 'If this attempt created it, it is empty — delete it on GitHub and create the project again, or choose another name.';
+            return fail(500, `${error}\nThe private repository ${webUrl(slug)} exists on GitHub now. ${recovery}`);
+        }
+        if (isNotFound(recheck.error))
+            return fail(500, error);
+        return fail(500, `${error}\nCould not check whether ${webUrl(slug)} was created — look on GitHub before trying again.`);
+    };
+    const done = (kind, warning) => {
+        emit({ phase: 'done', ...(warning ? { warning } : {}) });
+        return { ok: true, target, name, ...(slug ? { slug } : {}), kind, ...(warning ? { warning } : {}) };
+    };
+    if (slug && template) {
+        if (opts.signal?.aborted)
+            return fail(500, CANCELLED);
+        say(`Creating private repository ${slug} from ${template}…`);
+        const created = await exec('gh', ['repo', 'create', slug, '--private', '--template', template], false);
+        if (!created.ok)
+            return createFailed(created.error);
+        // Template generation is asynchronous on GitHub: an immediate clone can
+        // land an empty repo. Wait until the first commit is visible — and since
+        // the wait gives up eventually, the clone is checked for a commit below.
+        const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+        for (let attempt = 0; attempt < TEMPLATE_WAIT_ATTEMPTS; attempt++) {
+            const probe = await exec('gh', ['api', `repos/${slug}/commits?per_page=1`, '--jq', 'length'], false);
+            if (probe.ok && Number.parseInt(probe.stdout.trim(), 10) > 0)
+                break;
+            if (attempt === 0)
+                say('Waiting for GitHub to generate the repository…');
+            await sleep(TEMPLATE_WAIT_MS);
+        }
+        const cloned = await exec('gh', ['repo', 'clone', cloneUrl(slug), target, '--', '--progress'], false);
+        if (!cloned.ok) {
+            // Nothing local is worth keeping (the folder holds at most a partial
+            // clone), so this is the one post-create failure that cleans up — and
+            // says how to finish from the repository that now exists.
+            await cleanupCheckout(root, target);
+            return refuse({
+                ok: false,
+                status: 500,
+                error: `${cloned.error}\nThe private repository ${webUrl(slug)} was created on GitHub — add it with Add project → Clone from GitHub (${slug}).`,
+            });
+        }
+        // git clones an empty remote without complaint, and a project with no
+        // commit cannot host a task: that is a failed clone, not a success.
+        const head = await exec('git', ['rev-parse', '--verify', '--quiet', 'HEAD'], false);
+        if (!head.ok) {
+            await cleanupCheckout(root, target);
+            return refuse({
+                ok: false,
+                status: 500,
+                error: `GitHub had not finished generating ${slug} from ${template}, so the clone has no commit. The private repository ${webUrl(slug)} was created on GitHub — once it shows the template's files, add it with Add project → Clone from GitHub (${slug}).`,
+            });
+        }
+        return done('template', await finishAfterCreate([credentialStep]));
+    }
+    say('Initializing a git repository…');
+    const init = await exec('git', ['init', '-b', INITIAL_BRANCH], true);
+    if (!init.ok)
+        return fail(500, init.error);
+    // An empty commit gives the project a base commit to branch task worktrees
+    // from, without writing any file the user did not ask for. Without one the
+    // project cannot host a task, so a failure here (most likely no git
+    // identity) is a refusal, not a footnote — and nothing remote exists yet.
+    const commit = await exec('git', ['commit', '--allow-empty', '-m', 'Initial commit'], true);
+    if (!commit.ok) {
+        return fail(400, `Could not make the initial commit — set your git identity: git config --global user.name "Your Name" && git config --global user.email you@example.com (${firstLine(commit.error)})`);
+    }
+    if (!slug)
+        return done('local', undefined);
+    if (opts.signal?.aborted)
+        return fail(500, CANCELLED);
+    say(`Creating private repository ${slug}…`);
+    const created = await exec('gh', ['repo', 'create', slug, '--private'], false);
+    if (!created.ok)
+        return createFailed(created.error);
+    // HTTPS remote + gh credential helper, exactly as a clone gets (#968); the
+    // push then goes through plain git, proving the setup a task push relies on.
+    const warning = await finishAfterCreate([
+        {
+            label: 'adding the origin remote',
+            command: `git remote add origin ${cloneUrl(slug)}`,
+            run: () => exec('git', ['remote', 'add', 'origin', cloneUrl(slug)], false),
+        },
+        credentialStep,
+        {
+            label: `pushing ${INITIAL_BRANCH}`,
+            command: `git push -u origin ${INITIAL_BRANCH}`,
+            run: () => {
+                say(`Pushing ${INITIAL_BRANCH} to ${slug}…`);
+                return exec('git', ['push', '-u', 'origin', INITIAL_BRANCH], false);
+            },
+        },
+    ]);
+    return done('github', warning);
+}
+/**
+ * The GitHub checks that run before anything exists: `gh` present and signed
+ * in, `<owner>/<name>` free, the template a live template repository. A
+ * failure answers with the refusal; `undefined` means go ahead.
+ */
+async function githubPreflight(slug, template, exec) {
+    const user = await exec('gh', ['api', 'user', '--jq', '.login']);
+    if (!user.ok) {
+        const reason = user.notFound ? GH_MISSING : unauthenticated(user.error);
+        return { ok: false, status: 503, error: reason, reason };
+    }
+    const existing = await exec('gh', ['api', `repos/${slug}`, '--jq', '.full_name']);
+    if (existing.ok)
+        return { ok: false, status: 409, error: `a repository named ${slug} already exists on GitHub` };
+    if (!isNotFound(existing.error)) {
+        return { ok: false, status: 500, error: `could not check whether ${slug} exists on GitHub: ${firstLine(existing.error)}` };
+    }
+    if (template) {
+        const probe = await exec('gh', ['api', `repos/${template}`, '--jq', TEMPLATE_JQ]);
+        if (!probe.ok) {
+            return isNotFound(probe.error)
+                ? { ok: false, status: 400, error: `${template} was not found on GitHub` }
+                : { ok: false, status: 500, error: `could not check the template ${template}: ${firstLine(probe.error)}` };
+        }
+        let flags;
+        try {
+            flags = JSON.parse(probe.stdout.trim());
+        }
+        catch {
+            flags = null;
+        }
+        const [isTemplate, archived] = Array.isArray(flags) ? flags : [];
+        if (isTemplate !== true)
+            return { ok: false, status: 400, error: `${template} is not a GitHub template repository` };
+        if (archived !== false)
+            return { ok: false, status: 400, error: `${template} is archived` };
+    }
+    return undefined;
+}
+/** `GET /api/v1/projects/github-owners` — who a new repository may belong to:
+ *  the signed-in user first, then their organisations, each with its avatar
+ *  (and an org's description) for the dialog's owner cards. */
+export async function listGithubOwners(run) {
+    if (!run && process.env.CEZ_DRY_RUN === '1') {
+        return {
+            available: true,
+            owners: [
+                { login: 'dry-run-user', personal: true },
+                { login: 'dry-run-org', personal: false, description: 'CEZ_DRY_RUN=1 fake organisation' },
+            ],
+        };
+    }
+    const exec = run ?? spawnCommandRunner;
+    const cwd = process.cwd();
+    const settle = (args) => exec('gh', args, { cwd }).catch((err) => ({ ok: false, error: errText(err) }));
+    const [user, orgs] = await Promise.all([
+        settle(['api', 'user', '--jq', '[.login, .avatar_url // ""] | @tsv']),
+        settle(['api', 'user/orgs', '--paginate', '--jq', '.[] | [.login, .avatar_url // "", .description // ""] | @tsv']),
+    ]);
+    if (!user.ok)
+        return { available: false, reason: user.notFound ? GH_MISSING : unauthenticated(user.error) };
+    const me = parseOwnerLine(user.stdout.split('\n')[0] ?? '', true);
+    if (!me)
+        return { available: false, reason: 'gh returned no GitHub login' };
+    // An org listing failure (e.g. a token without read:org) still leaves the
+    // personal account — degrade to that rather than hide GitHub entirely.
+    const orgOwners = new Map();
+    if (orgs.ok) {
+        for (const line of orgs.stdout.split('\n')) {
+            const org = parseOwnerLine(line, false);
+            if (org && org.login !== me.login)
+                orgOwners.set(org.login, org);
+        }
+    }
+    const sorted = [...orgOwners.values()].sort((a, b) => a.login.localeCompare(b.login));
+    return { available: true, owners: [me, ...sorted] };
+}
+/** One `login<TAB>avatar[<TAB>description]` line from `gh --jq … | @tsv`.
+ *  Only https avatars are passed on — the cockpit renders them as `<img src>`. */
+function parseOwnerLine(line, personal) {
+    const [login = '', avatar = '', ...rest] = line.split('\t');
+    const trimmed = login.trim();
+    if (!OWNER_SEGMENT.test(trimmed))
+        return null;
+    // `@tsv` escapes tabs/newlines inside a field as `\t`/`\n`; fold them to spaces.
+    const description = rest.join(' ').replace(/\\[tnr]/g, ' ').replace(/\s+/g, ' ').trim();
+    return {
+        login: trimmed,
+        personal,
+        ...(avatar.trim().startsWith('https://') ? { avatarUrl: avatar.trim() } : {}),
+        ...(description !== '' ? { description: description.slice(0, 200) } : {}),
+    };
+}
+function unauthenticated(error) {
+    return `gh is not authenticated — run \`gh auth login\` (${firstLine(error)})`;
+}
+/** `gh api` reports a missing repository as `HTTP 404`. */
+function isNotFound(error) {
+    return /\b404\b|Not Found/.test(error);
+}
+/** The HTTPS remote, never the bare slug: `gh` would pick SSH from its own config, and an SSH key
+ *  is what an organisation's SAML policy may reject (#968, `RepoRef.cloneUrl`). */
+function cloneUrl(slug) {
+    return `https://github.com/${slug}.git`;
+}
+function webUrl(slug) {
+    return `https://github.com/${slug}`;
+}
+/** POSIX single-quoting for a copyable command: bare when safe, `''` when empty. */
+function shellQuote(arg) {
+    return /^[A-Za-z0-9_./:@=-]+$/.test(arg) ? arg : `'${arg.replace(/'/g, `'\\''`)}'`;
+}
+function firstLine(text) {
+    return text.split('\n')[0]?.trim() || text;
+}
+function errText(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=create-project.js.map

package/dist/server/create-project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-project.js","sourceRoot":"","sources":["../../src/server/create-project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAEnF,OAAO,EAAE,2BAA2B,EAAE,eAAe,EAAE,mBAAmB,EAAE,YAAY,EAA8B,MAAM,eAAe,CAAC;AAE5I;;;;GAIG;AAEH,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AACvC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B;kFACkF;AAClF,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,wDAAwD;AACxD,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,MAAM,UAAU,GAAG,uDAAuD,CAAC;AAC3E,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAe/C,MAAM,CAAC,MAAM,kBAAkB,GAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CACnE,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,OAAO,EAAE,kBAAkB;QAC3B,wFAAwF;QACxF,0FAA0F;QAC1F,kGAAkG;QAClG,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAC/H,CAAC,CAAC;IACH,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAQ,EAAE;QAC7C,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,cAAc,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhE,qEAAqE;IACrE,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,OAAO,IAAI,KAAK,CAAC;QACjB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,EAAE;gBAAE,SAAS;YAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,MAAM,IAAI,KAAK,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACxB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAG,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpH,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL;wCACwC;AACxC,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,kCAAkC,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAEhI;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAkB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC1E,IAAI,GAAG,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC,uBAAuB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnH,IAAI,CAAC,MAAM,EAAE,CAAC,sBAAsB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACnE,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC7E,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC;QACpF,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,2CAA2C,EAAE,MAAM,CAAC,CAAC;QACnH,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;QACzE,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC;QACxB,OAAO,kBAAkB,CAAC,KAAK,EAAE,CAAC,GAAG,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,KAAK,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAClC,CAAC,CAAC;AA6BF,MAAM,aAAa,GAAG,4BAA4B,CAAC;AACnD,MAAM,WAAW,GAAG,mCAAmC,CAAC;AASxD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA0B;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9B,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,6BAA6B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,0DAA0D;SACjH,CAAC;IACJ,CAAC;IACD,IAAI,IAAwB,CAAC;IAC7B,IAAI,QAA4B,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QAC/F,CAAC;QACD,IAAI,GAAG,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,qCAAqC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YACrH,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,0CAA0C,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IACzG,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEhC,MAAM,IAAI,GAAG,CAAC,KAAyD,EAAQ,EAAE,CAC/E,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACnG,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,CAAiC,OAAU,EAAK,EAAE;QAC/D,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACrG,0FAA0F;IAC1F,MAAM,IAAI,GAAG,KAAK,EAAE,GAAiB,EAAE,IAAc,EAAE,WAAoB,EAAE,GAAG,GAAG,MAAM,EAA0B,EAAE;QACnH,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,IAAI,EAAE,CAAC;QACT,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3G,IAAI,OAAO;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,kCAAkC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,uEAAuE;IACvE,2EAA2E;IAC3E,iBAAiB;IACjB,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,0BAA0B,MAAM,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,oBAAoB,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,yDAAyD;IACzD,MAAM,IAAI,GAAG,KAAK,EAAE,MAAiB,EAAE,KAAa,EAAiC,EAAE;QACrF,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC;IACF;gFAC4E;IAC5E,MAAM,iBAAiB,GAAG,KAAK,EAAE,KAAsB,EAA+B,EAAE;QACtF,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,MAAM,CAAC,EAAE;gBAAE,SAAS;YACxB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpE,OAAO,0BAA0B,MAAM,CAAC,IAAK,CAAC,qBAAqB,IAAI,CAAC,KAAK,YAAY,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,MAAM,UAAU,SAAS,EAAE,CAAC;QAC7J,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,cAAc,GAAkB;QACpC,KAAK,EAAE,gCAAgC;QACvC,0FAA0F;QAC1F,OAAO,EAAE,2BAA2B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAChI,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,+FAA+F;YAC/F,KAAK,MAAM,IAAI,IAAI,2BAA2B,EAAE,CAAC;gBAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;gBACxE,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC;YAChC,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAClC,CAAC;KACF,CAAC;IACF;0GACsG;IACtG,MAAM,YAAY,GAAG,KAAK,EAAE,KAAa,EAAiC,EAAE;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACvG,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,QAAQ;gBACvB,CAAC,CAAC,4EAA4E,IAAI,IAAI;gBACtF,CAAC,CAAC,qHAAqH,CAAC;YAC1H,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,4BAA4B,MAAM,CAAC,IAAK,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,6BAA6B,MAAM,CAAC,IAAK,CAAC,oDAAoD,CAAC,CAAC;IAC3H,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAqC,EAAE,OAA2B,EAAuB,EAAE;QACvG,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACtG,CAAC,CAAC;IAEF,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACtD,GAAG,CAAC,+BAA+B,IAAI,SAAS,QAAQ,GAAG,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QACvG,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,sBAAsB,EAAE,OAAO,EAAE,EAAE,CAAC;YAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,IAAI,qBAAqB,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;YACrG,IAAI,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC;gBAAE,MAAM;YACpE,IAAI,OAAO,KAAK,CAAC;gBAAE,GAAG,CAAC,gDAAgD,CAAC,CAAC;YACzE,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;QACtG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,qEAAqE;YACrE,sEAAsE;YACtE,0DAA0D;YAC1D,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC;gBACZ,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,4BAA4B,MAAM,CAAC,IAAI,CAAC,yEAAyE,IAAI,IAAI;aAChJ,CAAC,CAAC;QACL,CAAC;QACD,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QACpF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC;gBACZ,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,sCAAsC,IAAI,SAAS,QAAQ,wDAAwD,MAAM,CAAC,IAAI,CAAC,6GAA6G,IAAI,IAAI;aAC5P,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,EAAE,MAAM,iBAAiB,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,2EAA2E;IAC3E,2EAA2E;IAC3E,oEAAoE;IACpE,0EAA0E;IAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5F,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,IAAI,CACT,GAAG,EACH,2JAA2J,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CACtL,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAE3C,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtD,GAAG,CAAC,+BAA+B,IAAI,GAAG,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpD,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC;QACtC;YACE,KAAK,EAAE,0BAA0B;YACjC,OAAO,EAAE,yBAAyB,QAAQ,CAAC,IAAI,CAAC,EAAE;YAClD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC;SAC3E;QACD,cAAc;QACd;YACE,KAAK,EAAE,WAAW,cAAc,EAAE;YAClC,OAAO,EAAE,sBAAsB,cAAc,EAAE;YAC/C,GAAG,EAAE,GAAG,EAAE;gBACR,GAAG,CAAC,WAAW,cAAc,OAAO,IAAI,GAAG,CAAC,CAAC;gBAC7C,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC;YACtE,CAAC;SACF;KACF,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAY,EACZ,QAA4B,EAC5B,IAA2D;IAE3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,sBAAsB,IAAI,2BAA2B,EAAE,CAAC;IACjH,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,2BAA2B,IAAI,sBAAsB,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC7H,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC5B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,QAAQ,0BAA0B,EAAE;gBAC1E,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,gCAAgC,QAAQ,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC/G,CAAC;QACD,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,QAAQ,sCAAsC,EAAE,CAAC;QACrH,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,QAAQ,cAAc,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;+DAE+D;AAC/D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAmB;IACxD,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,EAAE,CAAC;QAC5C,OAAO;YACL,SAAS,EAAE,IAAI;YACf,MAAM,EAAE;gBACN,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACzC,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,iCAAiC,EAAE;aAC1F;SACF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,IAAI,kBAAkB,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,CAAC,IAAc,EAA0B,EAAE,CACxD,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,oCAAoC,CAAC,CAAC;QACrE,MAAM,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,8DAA8D,CAAC,CAAC;KACnH,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5G,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC5E,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxC,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK;gBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;kFACkF;AAClF,SAAS,cAAc,CAAC,IAAY,EAAE,QAAiB;IACrD,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,iFAAiF;IACjF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxF,OAAO;QACL,KAAK,EAAE,OAAO;QACd,QAAQ;QACR,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,oDAAoD,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC;AACjF,CAAC;AAED,2DAA2D;AAC3D,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;mFACmF;AACnF,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,sBAAsB,IAAI,MAAM,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,sBAAsB,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,oFAAoF;AACpF,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACrF,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/server/forge/github-filters.d.ts

@@ -8,9 +8,15 @@ type ProjectResult = {
 } | {
     projectsReason: string;
 };
+/** The boards linked to a repository. Throws on any failure; the caller classifies it. */
+export declare function fetchRepositoryProjects(run: GraphqlRunner, owner: string, name: string): Promise<GithubProject[]>;
+/** Which of `projects` each issue in `numbers` belongs to. Throws on any failure or on an
+ *  incomplete membership page. */
+export declare function fetchProjectMembership(run: GraphqlRunner, owner: string, name: string, projects: readonly GithubProject[], numbers: readonly number[]): Promise<Record<number, string[]>>;
 /** Discover only repository-linked boards, then memberships for exactly the loaded issues.
  * Pagination has both page and caller-owned time bounds. Incomplete metadata disables this
  * optional filter rather than falsely claiming that some issues do not belong to a board.
+ * `discover` lets a caller share one discovery across list pages (hearsay-tools/cezarion#1183).
  */
-export declare function fetchIssueProjects(run: GraphqlRunner, owner: string, name: string, numbers: readonly number[] | (() => Promise<readonly number[]>)): Promise<ProjectResult>;
+export declare function fetchIssueProjects(run: GraphqlRunner, owner: string, name: string, numbers: readonly number[] | (() => Promise<readonly number[]>), discover?: () => Promise<GithubProject[]>): Promise<ProjectResult>;
 export {};

package/dist/server/forge/github-filters.js

@@ -48,62 +48,77 @@ export async function fetchViewerLogin(run) {
         return undefined;
     }
 }
+/** The boards linked to a repository. Throws on any failure; the caller classifies it. */
+export async function fetchRepositoryProjects(run, owner, name) {
+    const projects = new Map();
+    let cursor;
+    for (let page = 0;; page++) {
+        if (page >= 10)
+            throw new Error('Project discovery exceeded its page limit');
+        const raw = JSON.parse(await run(`query($owner:String!,$name:String!,$cursor:String) {
+      repository(owner:$owner,name:$name) { projectsV2(first:100,after:$cursor) {
+        nodes { id title url } pageInfo { hasNextPage endCursor }
+      } }
+    }`, { owner, name, ...(cursor ? { cursor } : {}) }));
+        assertGraphqlSuccess(raw);
+        const connection = projectsSchema.parse(raw).data.repository.projectsV2;
+        for (const board of connection.nodes)
+            if (board)
+                projects.set(board.id, board);
+        if (!connection.pageInfo.hasNextPage)
+            break;
+        const next = connection.pageInfo.endCursor;
+        if (!next || next === cursor)
+            throw new Error('Project discovery cursor did not advance');
+        cursor = next;
+    }
+    return [...projects.values()];
+}
+/** Which of `projects` each issue in `numbers` belongs to. Throws on any failure or on an
+ *  incomplete membership page. */
+export async function fetchProjectMembership(run, owner, name, projects, numbers) {
+    const known = new Set(projects.map(project => project.id));
+    const membership = {};
+    if (known.size === 0)
+        return membership;
+    const ids = [...new Set(numbers)];
+    if (ids.length > 1000 || ids.some(n => !Number.isSafeInteger(n) || n <= 0)) {
+        throw new Error('Invalid issue window');
+    }
+    for (let offset = 0; offset < ids.length; offset += 100) {
+        // The aliases and literals contain validated integers only; all external strings are variables.
+        const batch = ids.slice(offset, offset + 100);
+        const fields = batch.map(n => `i${n}: issue(number:${n}) {
+      projectItems(first:100,includeArchived:true) {
+        nodes { project { id } } pageInfo { hasNextPage endCursor }
+      }
+    }`).join('\n');
+        const raw = JSON.parse(await run(`query($owner:String!,$name:String!) {
+      repository(owner:$owner,name:$name) { ${fields} }
+    }`, { owner, name }));
+        assertGraphqlSuccess(raw);
+        const rows = membershipSchema.parse(raw).data.repository;
+        for (const n of batch) {
+            const connection = rows[`i${n}`]?.projectItems;
+            if (!connection || connection.pageInfo.hasNextPage)
+                throw new Error('Incomplete project memberships');
+            membership[n] = [...new Set(connection.nodes.flatMap(row => row && known.has(row.project.id) ? [row.project.id] : []))];
+        }
+    }
+    return membership;
+}
 /** Discover only repository-linked boards, then memberships for exactly the loaded issues.
  * Pagination has both page and caller-owned time bounds. Incomplete metadata disables this
  * optional filter rather than falsely claiming that some issues do not belong to a board.
+ * `discover` lets a caller share one discovery across list pages (hearsay-tools/cezarion#1183).
  */
-export async function fetchIssueProjects(run, owner, name, numbers) {
+export async function fetchIssueProjects(run, owner, name, numbers, discover = () => fetchRepositoryProjects(run, owner, name)) {
     try {
-        const projects = new Map();
-        let cursor;
-        for (let page = 0;; page++) {
-            if (page >= 10)
-                throw new Error('Project discovery exceeded its page limit');
-            const raw = JSON.parse(await run(`query($owner:String!,$name:String!,$cursor:String) {
-        repository(owner:$owner,name:$name) { projectsV2(first:100,after:$cursor) {
-          nodes { id title url } pageInfo { hasNextPage endCursor }
-        } }
-      }`, { owner, name, ...(cursor ? { cursor } : {}) }));
-            assertGraphqlSuccess(raw);
-            const connection = projectsSchema.parse(raw).data.repository.projectsV2;
-            for (const board of connection.nodes)
-                if (board)
-                    projects.set(board.id, board);
-            if (!connection.pageInfo.hasNextPage)
-                break;
-            const next = connection.pageInfo.endCursor;
-            if (!next || next === cursor)
-                throw new Error('Project discovery cursor did not advance');
-            cursor = next;
-        }
-        const membership = {};
-        if (projects.size === 0)
-            return { projects: [], membership };
-        const ids = [...new Set(typeof numbers === 'function' ? await numbers() : numbers)];
-        if (ids.length > 1000 || ids.some(n => !Number.isSafeInteger(n) || n <= 0)) {
-            throw new Error('Invalid issue window');
-        }
-        for (let offset = 0; offset < ids.length; offset += 100) {
-            // The aliases and literals contain validated integers only; all external strings are variables.
-            const batch = ids.slice(offset, offset + 100);
-            const fields = batch.map(n => `i${n}: issue(number:${n}) {
-        projectItems(first:100,includeArchived:true) {
-          nodes { project { id } } pageInfo { hasNextPage endCursor }
-        }
-      }`).join('\n');
-            const raw = JSON.parse(await run(`query($owner:String!,$name:String!) {
-        repository(owner:$owner,name:$name) { ${fields} }
-      }`, { owner, name }));
-            assertGraphqlSuccess(raw);
-            const rows = membershipSchema.parse(raw).data.repository;
-            for (const n of batch) {
-                const connection = rows[`i${n}`]?.projectItems;
-                if (!connection || connection.pageInfo.hasNextPage)
-                    throw new Error('Incomplete project memberships');
-                membership[n] = [...new Set(connection.nodes.flatMap(row => row && projects.has(row.project.id) ? [row.project.id] : []))];
-            }
-        }
-        return { projects: [...projects.values()], membership };
+        const projects = await discover();
+        if (projects.length === 0)
+            return { projects: [], membership: {} };
+        const ids = typeof numbers === 'function' ? await numbers() : numbers;
+        return { projects, membership: await fetchProjectMembership(run, owner, name, projects, ids) };
     }
     catch (error) {
         return { projectsReason: projectFailureReason(error) };