@azure-devops/mcp 2.10.0-nightly.20260930 → 2.10.0-nightly.20261002

package/README.md

@@ -1,19 +1,14 @@
 # Azure DevOps MCP Server
 
-> [!WARNING]
-> We recently completed a full tool consolidation that includes renaming of existing tools. Please see the [Toolset documentation](docs/TOOLSET.md) for the complete list of new tool names.
+> [!IMPORTANT]
+> We recommend using the [Remote MCP Server](https://learn.microsoft.com/en-us/azure/devops/mcp-server/remote-mcp-server) instead of this local server. It requires no installation and gets new features first.
 >
-> If this is a breaking change for your agents or skills, you can temporarily pin the version to `@azure-devops/mcp@2.8.1`
+> [Learn more](#remote-mcp-server-recommended)
 
 This project gives AI agents access to Azure DevOps through the Model Context Protocol (MCP). Use the hosted remote server for the simplest setup, or run the local server when you need a `stdio` connection.
 
 ## Table of Contents
 
-> [!IMPORTANT]
-> We recommend using the [Remote MCP Server](https://learn.microsoft.com/en-us/azure/devops/mcp-server/remote-mcp-server) instead of this local server. It requires no installation and gets new features first.
->
-> [Learn more](#remote-mcp-server-recommended)
-
 1. [Overview](#overview)
 2. [Design](#design)
 3. [Remote MCP Server (Recommended)](#remote-mcp-server-recommended)

package/dist/tools/pipelines.js

@@ -3,6 +3,8 @@
 import { apiVersion, getEnumKeys, safeEnumConvert } from "../utils.js";
 import { BuildQueryOrder, DefinitionQueryOrder } from "azure-devops-node-api/interfaces/BuildInterfaces.js";
 import { z } from "zod";
+const buildQueryOrderKeys = getEnumKeys(BuildQueryOrder);
+const definitionQueryOrderKeys = getEnumKeys(DefinitionQueryOrder);
 import { StageUpdateType } from "azure-devops-node-api/interfaces/BuildInterfaces.js";
 import { ConfigurationType, RepositoryType } from "azure-devops-node-api/interfaces/PipelinesInterfaces.js";
 import { mkdirSync, createWriteStream } from "fs";
@@ -153,7 +155,7 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
         continuationToken: z.string().optional().describe("Token for continuing paged results. Used for: list, get_changes."),
         maxBuildsPerDefinition: z.number().optional().describe("Maximum number of builds per definition. Used for: list."),
         deletedFilter: z.number().optional().describe("Filter for deleted builds (see QueryDeletedOption enum). Used for: list."),
-        queryOrder: z.string().optional().describe("Order in which builds are returned (BuildQueryOrder values). Used for: list."),
+        queryOrder: z.enum(buildQueryOrderKeys).optional().describe("Order in which builds are returned. Used for: list."),
         branchName: z.string().optional().describe("Branch name to filter builds. Used for: list."),
         buildIds: z.array(z.coerce.number().min(1)).optional().describe("Array of specific build IDs to retrieve. Used for: list."),
         repositoryId: z.string().optional().describe("Repository ID to filter builds. Used for: list."),
@@ -237,7 +239,7 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
         repositoryType: z.enum(["TfsGit", "GitHub", "BitbucketCloud"]).optional().describe("Repository type to filter definitions. Used for: list."),
         name: z.string().optional().describe("Name filter for build definitions. Used for: list."),
         path: z.string().optional().describe("Path filter for build definitions. Used for: list."),
-        queryOrder: z.string().optional().describe("Order in which definitions are returned (DefinitionQueryOrder values). Used for: list."),
+        queryOrder: z.enum(definitionQueryOrderKeys).optional().describe("Order in which definitions are returned. Used for: list."),
         top: z.number().optional().describe("Maximum number of definitions to return. Used for: list."),
         continuationToken: z.string().optional().describe("Token for continuing paged results. Used for: list."),
         minMetricsTime: z.coerce.date().optional().describe("Minimum metrics time to filter definitions. Used for: list."),

package/dist/tools/repositories.js

@@ -899,8 +899,8 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
         fullResponse: z.boolean().optional().default(false).describe("Return full JSON response. Used for reply and update."),
         rightFileStartLine: z.coerce.number().min(1).optional().describe("Start line in the right file. Used for create."),
         rightFileStartOffset: z.number().optional().describe("Start character offset in the right file. Used for create."),
-        rightFileEndLine: z.number().optional().describe("End line in the right file. Used for create."),
-        rightFileEndOffset: z.number().optional().describe("End character offset in the right file. Used for create."),
+        rightFileEndLine: z.number().optional().describe("End line in the right file. Used for create. Must be supplied together with rightFileEndOffset."),
+        rightFileEndOffset: z.number().optional().describe("End character offset in the right file. Used for create. Must be supplied together with rightFileEndLine."),
         changeTrackingId: z.coerce.number().int().min(1).optional().describe("The file change tracking ID from the pull request iteration changes. Used for create."),
         firstComparingIteration: z.coerce.number().int().min(0).optional().describe("The iteration on the left side of the diff. Used for create."),
         secondComparingIteration: z.coerce.number().int().min(1).optional().describe("The iteration on the right side of the diff. Used for create."),

package/dist/tools/wiki.js

@@ -346,18 +346,18 @@ function parseWikiUrl(url) {
         if (idx < 1 || segments[idx + 1] !== "wikis") {
             return { error: "URL does not match expected wiki pattern (missing /_wiki/wikis/ segment)." };
         }
-        const project = segments[idx - 1];
-        const wikiIdentifier = segments[idx + 2];
-        if (!project || !wikiIdentifier) {
+        const encodedProject = segments[idx - 1];
+        const encodedWikiIdentifier = segments[idx + 2];
+        if (!encodedProject || !encodedWikiIdentifier) {
             return { error: "Could not extract project or wikiIdentifier from URL." };
         }
+        const project = decodeURIComponent(encodedProject);
+        const wikiIdentifier = decodeURIComponent(encodedWikiIdentifier);
         // Query form with pagePath
         const pagePathParam = u.searchParams.get("pagePath");
         if (pagePathParam) {
-            let decoded = decodeURIComponent(pagePathParam);
-            if (!decoded.startsWith("/"))
-                decoded = "/" + decoded;
-            return { project, wikiIdentifier, pagePath: decoded };
+            const pagePath = pagePathParam.startsWith("/") ? pagePathParam : `/${pagePathParam}`;
+            return { project, wikiIdentifier, pagePath };
         }
         // Path ID form: .../wikis/{wikiIdentifier}/{pageId}/...
         const afterWiki = segments.slice(idx + 3); // elements after wikiIdentifier

package/dist/tools/work-items.js

@@ -71,10 +71,8 @@ function escapeHtml(value) {
     };
     return value.replace(/[&<>"']/g, (character) => entities[character]);
 }
-async function resolveCommentMentions(text, format, tokenProvider, connectionProvider, userAgentProvider) {
+async function prepareCommentText(text, format, tokenProvider, connectionProvider, userAgentProvider) {
     const emailMatches = [...text.matchAll(/@<([^<>\s]+@[^<>\s]+)>/g)];
-    if (emailMatches.length === 0)
-        return text;
     const identities = new Map();
     for (const email of new Set(emailMatches.map((match) => match[1]))) {
         try {
@@ -84,11 +82,18 @@ async function resolveCommentMentions(text, format, tokenProvider, connectionPro
             // Leave mentions unchanged when their identities cannot be resolved.
         }
     }
-    return text.replace(/@<([^<>\s]+@[^<>\s]+)>/g, (mention, email) => {
+    // Encode Markdown transport text once, preserving mention tokens for Azure DevOps.
+    // Encoding ampersands also preserves intentional entity text after one decode.
+    const markdown = format === "Markdown" || format === undefined;
+    return text.replace(/@<([^<>\s]+@[^<>\s]+)>|@<([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})>|[&<>]/gi, (mention, email, id) => {
+        if (id)
+            return mention;
+        if (!email)
+            return markdown ? escapeHtml(mention) : mention;
         const identity = identities.get(email);
         if (!identity)
             return escapeHtml(mention);
-        return format === "Markdown" || format === undefined ? `@<${identity.id}>` : `<a href="#" data-vss-mention="version:2.0,${identity.id}">@${escapeHtml(identity.displayName)}</a>`;
+        return markdown ? `@<${identity.id}>` : `<a href="#" data-vss-mention="version:2.0,${identity.id}">@${escapeHtml(identity.displayName)}</a>`;
     });
 }
 function configureWorkItemTools(server, tokenProvider, connectionProvider, userAgentProvider) {
@@ -841,7 +846,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
             const orgUrl = connection.serverUrl;
             const accessToken = await tokenProvider();
             const formatParameter = (format ?? "Markdown") === "Markdown" ? 0 : 1;
-            const resolvedText = await resolveCommentMentions(text, format, tokenProvider, connectionProvider, userAgentProvider);
+            const resolvedText = await prepareCommentText(text, format, tokenProvider, connectionProvider, userAgentProvider);
             if (action === "add") {
                 const response = await fetch(`${orgUrl}/${encodeURIComponent(resolvedProject)}/_apis/wit/workItems/${workItemId}/comments?format=${formatParameter}&api-version=${markdownCommentsApiVersion}`, {
                     method: "POST",

package/dist/version.js

@@ -1 +1 @@
-export const packageVersion = "2.10.0-nightly.20260930";
+export const packageVersion = "2.10.0-nightly.20261002";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@azure-devops/mcp",
-  "version": "2.10.0-nightly.20260930",
+  "version": "2.10.0-nightly.20261002",
   "mcpName": "microsoft.com/azure-devops",
   "description": "MCP server for interacting with Azure DevOps",
   "license": "MIT",