@azure-devops/mcp 2.2.2 → 2.3.0-nightly.20251203

package/dist/tools/work.js

@@ -81,20 +81,39 @@ function configureWorkTools(server, _, connectionProvider) {
     server.tool(WORK_TOOLS.list_iterations, "List all iterations in a specified Azure DevOps project.", {
         project: z.string().describe("The name or ID of the Azure DevOps project."),
         depth: z.number().default(2).describe("Depth of children to fetch."),
-    }, async ({ project, depth }) => {
+        excludedIds: z.array(z.number()).optional().describe("An optional array of iteration IDs, and thier children, that should not be returned."),
+    }, async ({ project, depth, excludedIds: ids }) => {
         try {
             const connection = await connectionProvider();
             const workItemTrackingApi = await connection.getWorkItemTrackingApi();
+            let results = [];
             if (depth === undefined) {
                 depth = 1;
             }
-            const results = await workItemTrackingApi.getClassificationNodes(project, [], depth);
+            results = await workItemTrackingApi.getClassificationNodes(project, [], depth);
             // Handle null or undefined results
             if (!results) {
                 return { content: [{ type: "text", text: "No iterations were found" }], isError: true };
             }
             // Filter out items with structureType=0 (Area nodes), only keep structureType=1 (Iteration nodes)
-            const filteredResults = results.filter((node) => node.structureType === TreeNodeStructureType.Iteration);
+            let filteredResults = results.filter((node) => node.structureType === TreeNodeStructureType.Iteration);
+            // If specific IDs are provided, filter them out recursively (exclude matching nodes and their children)
+            if (ids && ids.length > 0) {
+                const filterOutIds = (nodes) => {
+                    return nodes
+                        .filter((node) => !node.id || !ids.includes(node.id))
+                        .map((node) => {
+                        if (node.children && node.children.length > 0) {
+                            return {
+                                ...node,
+                                children: filterOutIds(node.children),
+                            };
+                        }
+                        return node;
+                    });
+                };
+                filteredResults = filterOutIds(filteredResults);
+            }
             if (filteredResults.length === 0) {
                 return { content: [{ type: "text", text: "No iterations were found" }], isError: true };
             }

package/dist/version.js

@@ -1 +1 @@
-export const packageVersion = "2.2.2";
+export const packageVersion = "2.3.0-nightly.20251203";

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@azure-devops/mcp",
-  "version": "2.2.2",
+  "version": "2.3.0-nightly.20251203",
+  "mcpName": "microsoft.com/azure-devops",
   "description": "MCP server for interacting with Azure DevOps",
   "license": "MIT",
   "author": "Microsoft Corporation",
@@ -25,7 +26,7 @@
     "prebuild": "node -p \"'export const packageVersion = ' + JSON.stringify(require('./package.json').version) + ';\\n'\" > src/version.ts && prettier --write src/version.ts",
     "validate-tools": "tsc --noEmit && node scripts/build-validate-tools.js",
     "build": "tsc && shx chmod +x dist/*.js",
-    "prepare": "npm run build",
+    "prepare": "npm run build && husky",
     "watch": "tsc --watch",
     "inspect": "ALLOWED_ORIGINS=http://127.0.0.1:6274 npx @modelcontextprotocol/inspector node dist/index.js",
     "start": "node -r tsconfig-paths/register dist/index.js",
@@ -39,10 +40,11 @@
   "dependencies": {
     "@azure/identity": "^4.10.0",
     "@azure/msal-node": "^3.6.0",
-    "@modelcontextprotocol/sdk": "1.21.0",
+    "@modelcontextprotocol/sdk": "1.24.0",
     "azure-devops-extension-api": "^4.252.0",
     "azure-devops-extension-sdk": "^4.0.2",
     "azure-devops-node-api": "^15.1.0",
+    "winston": "^3.18.3",
     "yargs": "^18.0.0",
     "zod": "^3.25.63",
     "zod-to-json-schema": "^3.24.5"
@@ -50,17 +52,24 @@
   "devDependencies": {
     "@modelcontextprotocol/inspector": "^0.17.0",
     "@types/jest": "^30.0.0",
-    "@types/node": "^22",
+    "@types/node": "^22.19.1",
     "eslint-config-prettier": "10.1.8",
     "eslint-plugin-header": "^3.1.1",
-    "glob": "^11.0.3",
+    "glob": "^13.0.0",
+    "husky": "^9.1.7",
     "jest": "^30.0.2",
     "jest-extended": "^7.0.0",
-    "prettier": "3.6.2",
+    "lint-staged": "^16.2.7",
+    "prettier": "3.7.3",
     "shx": "^0.4.0",
     "ts-jest": "^29.4.0",
     "tsconfig-paths": "^4.2.0",
     "typescript": "^5.9.3",
-    "typescript-eslint": "^8.45.0"
+    "typescript-eslint": "^8.48.0"
+  },
+  "lint-staged": {
+    "**/*.(js|ts|jsx|tsx|json|css|md)": [
+      "npm run format"
+    ]
   }
 }

package/dist/domains.js

@@ -1 +0,0 @@
-export {};

package/dist/http.js

@@ -1,52 +0,0 @@
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-import express from "express";
-import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
-import { serverBuildAndConnect } from "./server.js";
-import { packageVersion } from "./version.js";
-const app = express();
-app.use(express.json());
-app.post('/mcp/:orgName', async (req, res) => {
-    // In stateless mode, create a new instance of transport and server for each request
-    // to ensure complete isolation. A single instance would cause request ID collisions
-    // when multiple clients connect concurrently.
-    try {
-        const transport = new StreamableHTTPServerTransport({
-            sessionIdGenerator: undefined,
-        });
-        const server = await serverBuildAndConnect(req.params.orgName, transport);
-        res.on('close', () => {
-            transport.close();
-            server.close();
-        });
-        await transport.handleRequest(req, res, req.body);
-    }
-    catch (error) {
-        console.error('Error handling MCP request:', error);
-        if (!res.headersSent) {
-            res.status(500).json({
-                jsonrpc: '2.0',
-                error: {
-                    code: -32603,
-                    message: 'Internal server error',
-                },
-                id: null,
-            });
-        }
-    }
-});
-app.get('/mcp/:orgName', async (req, res) => {
-    console.log('Received GET MCP request');
-    res.writeHead(405).end(JSON.stringify({
-        jsonrpc: "2.0",
-        error: {
-            code: -32000,
-            message: "Method not allowed."
-        },
-        id: null
-    }));
-});
-const PORT = 3000;
-app.listen(PORT, () => {
-    console.log(`Azure DevOps MCP Server with http transport listening on port ${PORT}. Version: ${packageVersion}`);
-});

package/dist/orgtenants.js

@@ -1,73 +0,0 @@
-import * as fs from 'fs/promises';
-import * as os from 'os';
-import * as path from 'path';
-const CACHE_FILE = path.join(os.homedir(), '.ado_orgs.cache');
-const CACHE_TTL_MS = 7 * 24 * 60 * 60 * 1000; // 1 week in milliseconds
-async function loadCache() {
-    try {
-        const cacheData = await fs.readFile(CACHE_FILE, 'utf-8');
-        return JSON.parse(cacheData);
-    }
-    catch (error) {
-        // Cache file doesn't exist or is invalid, return empty cache
-        return {};
-    }
-}
-async function trySavingCache(cache) {
-    try {
-        await fs.writeFile(CACHE_FILE, JSON.stringify(cache, null, 2), 'utf-8');
-    }
-    catch (error) {
-        console.error('Failed to save org tenants cache:', error);
-    }
-}
-async function fetchTenantFromApi(orgName) {
-    const url = `https://vssps.dev.azure.com/${orgName}`;
-    try {
-        const response = await fetch(url, { method: 'HEAD' });
-        if (response.status !== 404) {
-            throw new Error(`Expected status 404, got ${response.status}`);
-        }
-        const tenantId = response.headers.get('x-vss-resourcetenant');
-        if (!tenantId) {
-            throw new Error('x-vss-resourcetenant header not found in response');
-        }
-        return tenantId;
-    }
-    catch (error) {
-        throw new Error(`Failed to fetch tenant for organization ${orgName}: ${error}`);
-    }
-}
-function isCacheEntryExpired(entry) {
-    return Date.now() - entry.refreshedOn > CACHE_TTL_MS;
-}
-export async function getOrgTenant(orgName) {
-    // Load cache
-    const cache = await loadCache();
-    // Check if tenant is cached and not expired
-    const cachedEntry = cache[orgName];
-    if (cachedEntry && !isCacheEntryExpired(cachedEntry)) {
-        return cachedEntry.tenantId;
-    }
-    // Try to fetch fresh tenant from API
-    try {
-        const tenantId = await fetchTenantFromApi(orgName);
-        // Cache the result
-        cache[orgName] = {
-            tenantId,
-            refreshedOn: Date.now()
-        };
-        await trySavingCache(cache);
-        return tenantId;
-    }
-    catch (error) {
-        // If we have an expired cache entry, return it as fallback
-        if (cachedEntry) {
-            console.error(`Failed to fetch fresh tenant for ADO org ${orgName}, using expired cache entry:`, error);
-            return cachedEntry.tenantId;
-        }
-        // No cache entry available, log and return empty result
-        console.error(`Failed to fetch tenant for ADO org ${orgName}:`, error);
-        return undefined;
-    }
-}

package/dist/server.js

@@ -1,36 +0,0 @@
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import * as azdev from "azure-devops-node-api";
-import { DefaultAzureCredential } from "@azure/identity";
-import { configurePrompts } from "./prompts.js";
-import { configureAllTools } from "./tools.js";
-import { userAgent } from "./utils.js";
-import { packageVersion } from "./version.js";
-async function getAzureDevOpsToken() {
-    process.env.AZURE_TOKEN_CREDENTIALS = "dev";
-    const credential = new DefaultAzureCredential(); // CodeQL [SM05138] resolved by explicitly setting AZURE_TOKEN_CREDENTIALS
-    const token = await credential.getToken("499b84ac-1321-427f-aa17-267ca6975798/.default");
-    return token;
-}
-async function getAzureDevOpsClient(orgUrl) {
-    const token = await getAzureDevOpsToken();
-    const authHandler = azdev.getBearerHandler(token.token);
-    const connection = new azdev.WebApi(orgUrl, authHandler, undefined, {
-        productName: "AzureDevOps.MCP",
-        productVersion: packageVersion,
-        userAgent: userAgent
-    });
-    return connection;
-}
-export async function serverBuildAndConnect(orgName, transport) {
-    const server = new McpServer({
-        name: "Azure DevOps MCP Server",
-        version: packageVersion,
-    });
-    const orgUrl = "https://dev.azure.com/" + orgName;
-    configurePrompts(server);
-    configureAllTools(server, () => orgName, getAzureDevOpsToken, () => getAzureDevOpsClient(orgUrl));
-    await server.connect(transport);
-    return server;
-}

package/dist/tenant.js

@@ -1,73 +0,0 @@
-import * as fs from 'fs/promises';
-import * as os from 'os';
-import * as path from 'path';
-const CACHE_FILE = path.join(os.homedir(), '.ado_orgs.cache');
-const CACHE_TTL_MS = 7 * 24 * 60 * 60 * 1000; // 1 week in milliseconds
-async function loadCache() {
-    try {
-        const cacheData = await fs.readFile(CACHE_FILE, 'utf-8');
-        return JSON.parse(cacheData);
-    }
-    catch (error) {
-        // Cache file doesn't exist or is invalid, return empty cache
-        return {};
-    }
-}
-async function saveCache(cache) {
-    try {
-        await fs.writeFile(CACHE_FILE, JSON.stringify(cache, null, 2), 'utf-8');
-    }
-    catch (error) {
-        console.warn('Failed to save cache:', error);
-    }
-}
-async function fetchTenantFromApi(orgName) {
-    const url = `https://vssps.dev.azure.com/${orgName}`;
-    try {
-        const response = await fetch(url, { method: 'HEAD' });
-        if (response.status !== 404) {
-            throw new Error(`Expected status 404, got ${response.status}`);
-        }
-        const tenantId = response.headers.get('x-vss-resourcetenant');
-        if (!tenantId) {
-            throw new Error('x-vss-resourcetenant header not found in response');
-        }
-        return tenantId;
-    }
-    catch (error) {
-        throw new Error(`Failed to fetch tenant for organization ${orgName}: ${error}`);
-    }
-}
-function isCacheEntryExpired(entry) {
-    return Date.now() - entry.refreshedOn > CACHE_TTL_MS;
-}
-export async function getOrgTenant(orgName) {
-    // Load cache
-    const cache = await loadCache();
-    // Check if tenant is cached and not expired
-    const cachedEntry = cache[orgName];
-    if (cachedEntry && !isCacheEntryExpired(cachedEntry)) {
-        return cachedEntry.tenantId;
-    }
-    // Try to fetch fresh tenant from API
-    try {
-        const tenantId = await fetchTenantFromApi(orgName);
-        // Cache the fresh result
-        cache[orgName] = {
-            tenantId,
-            refreshedOn: Date.now()
-        };
-        await saveCache(cache);
-        return tenantId;
-    }
-    catch (error) {
-        // If we have an expired cache entry, return it as fallback
-        if (cachedEntry) {
-            console.error(`Failed to fetch fresh tenant for ADO org ${orgName}, using expired cache entry:`, error);
-            return cachedEntry.tenantId;
-        }
-        // No cache entry available, re-throw the error
-        console.error(`Failed to fetch tenant for ADO org ${orgName}:`, error);
-        return undefined;
-    }
-}

package/dist/tools/advsec.js

@@ -1,108 +0,0 @@
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-import { AlertType, AlertValidityStatus, Confidence, Severity, State } from "azure-devops-node-api/interfaces/AlertInterfaces.js";
-import { z } from "zod";
-import { getEnumKeys, mapStringArrayToEnum, mapStringToEnum } from "../utils.js";
-const ADVSEC_TOOLS = {
-    get_alerts: "advsec_get_alerts",
-    get_alert_details: "advsec_get_alert_details",
-};
-function configureAdvSecTools(server, tokenProvider, connectionProvider) {
-    server.tool(ADVSEC_TOOLS.get_alerts, "Retrieve Advanced Security alerts for a repository.", {
-        project: z.string().describe("The name or ID of the Azure DevOps project."),
-        repository: z.string().describe("The name or ID of the repository to get alerts for."),
-        alertType: z
-            .enum(getEnumKeys(AlertType))
-            .optional()
-            .describe("Filter alerts by type. If not specified, returns all alert types."),
-        states: z
-            .array(z.enum(getEnumKeys(State)))
-            .optional()
-            .describe("Filter alerts by state. If not specified, returns alerts in any state."),
-        severities: z
-            .array(z.enum(getEnumKeys(Severity)))
-            .optional()
-            .describe("Filter alerts by severity level. If not specified, returns alerts at any severity."),
-        ruleId: z.string().optional().describe("Filter alerts by rule ID."),
-        ruleName: z.string().optional().describe("Filter alerts by rule name."),
-        toolName: z.string().optional().describe("Filter alerts by tool name."),
-        ref: z.string().optional().describe("Filter alerts by git reference (branch). If not provided and onlyDefaultBranch is true, only includes alerts from default branch."),
-        onlyDefaultBranch: z.boolean().optional().default(true).describe("If true, only return alerts found on the default branch. Defaults to true."),
-        confidenceLevels: z
-            .array(z.enum(getEnumKeys(Confidence)))
-            .optional()
-            .default(["high", "other"])
-            .describe("Filter alerts by confidence levels. Only applicable for secret alerts. Defaults to both 'high' and 'other'."),
-        validity: z
-            .array(z.enum(getEnumKeys(AlertValidityStatus)))
-            .optional()
-            .describe("Filter alerts by validity status. Only applicable for secret alerts."),
-        top: z.number().optional().default(100).describe("Maximum number of alerts to return. Defaults to 100."),
-        orderBy: z.enum(["id", "firstSeen", "lastSeen", "fixedOn", "severity"]).optional().default("severity").describe("Order results by specified field. Defaults to 'severity'."),
-        continuationToken: z.string().optional().describe("Continuation token for pagination."),
-    }, async ({ project, repository, alertType, states, severities, ruleId, ruleName, toolName, ref, onlyDefaultBranch, confidenceLevels, validity, top, orderBy, continuationToken }) => {
-        try {
-            const connection = await connectionProvider();
-            const alertApi = await connection.getAlertApi();
-            const isSecretAlert = !alertType || alertType.toLowerCase() === "secret";
-            const criteria = {
-                ...(alertType && { alertType: mapStringToEnum(alertType, AlertType) }),
-                ...(states && { states: mapStringArrayToEnum(states, State) }),
-                ...(severities && { severities: mapStringArrayToEnum(severities, Severity) }),
-                ...(ruleId && { ruleId }),
-                ...(ruleName && { ruleName }),
-                ...(toolName && { toolName }),
-                ...(ref && { ref }),
-                ...(onlyDefaultBranch !== undefined && { onlyDefaultBranch }),
-                ...(isSecretAlert && confidenceLevels && { confidenceLevels: mapStringArrayToEnum(confidenceLevels, Confidence) }),
-                ...(isSecretAlert && validity && { validity: mapStringArrayToEnum(validity, AlertValidityStatus) }),
-            };
-            const result = await alertApi.getAlerts(project, repository, top, orderBy, criteria, undefined, // expand parameter
-            continuationToken);
-            return {
-                content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
-            };
-        }
-        catch (error) {
-            const errorMessage = error instanceof Error ? error.message : "Unknown error occurred";
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: `Error fetching Advanced Security alerts: ${errorMessage}`,
-                    },
-                ],
-                isError: true,
-            };
-        }
-    });
-    server.tool(ADVSEC_TOOLS.get_alert_details, "Get detailed information about a specific Advanced Security alert.", {
-        project: z.string().describe("The name or ID of the Azure DevOps project."),
-        repository: z.string().describe("The name or ID of the repository containing the alert."),
-        alertId: z.number().describe("The ID of the alert to retrieve details for."),
-        ref: z.string().optional().describe("Git reference (branch) to filter the alert."),
-    }, async ({ project, repository, alertId, ref }) => {
-        try {
-            const connection = await connectionProvider();
-            const alertApi = await connection.getAlertApi();
-            const result = await alertApi.getAlert(project, alertId, repository, ref, undefined // expand parameter
-            );
-            return {
-                content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
-            };
-        }
-        catch (error) {
-            const errorMessage = error instanceof Error ? error.message : "Unknown error occurred";
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: `Error fetching alert details: ${errorMessage}`,
-                    },
-                ],
-                isError: true,
-            };
-        }
-    });
-}
-export { ADVSEC_TOOLS, configureAdvSecTools };