@azure-devops/mcp 2.5.0-nightly.20260323 → 2.5.0-nightly.20260324

package/dist/tools/advanced-security.js

@@ -37,7 +37,7 @@ function configureAdvSecTools(server, _, connectionProvider) {
             .array(z.enum(getEnumKeys(AlertValidityStatus)))
             .optional()
             .describe("Filter alerts by validity status. Only applicable for secret alerts."),
-        top: z.number().optional().default(100).describe("Maximum number of alerts to return. Defaults to 100."),
+        top: z.coerce.number().optional().default(100).describe("Maximum number of alerts to return. Defaults to 100."),
         orderBy: z.enum(["id", "firstSeen", "lastSeen", "fixedOn", "severity"]).optional().default("severity").describe("Order results by specified field. Defaults to 'severity'."),
         continuationToken: z.string().optional().describe("Continuation token for pagination."),
     }, async ({ project, repository, alertType, states, severities, ruleId, ruleName, toolName, ref, onlyDefaultBranch, confidenceLevels, validity, top, orderBy, continuationToken }) => {
@@ -79,7 +79,7 @@ function configureAdvSecTools(server, _, connectionProvider) {
     server.tool(ADVSEC_TOOLS.get_alert_details, "Get detailed information about a specific Advanced Security alert.", {
         project: z.string().describe("The name or ID of the Azure DevOps project."),
         repository: z.string().describe("The name or ID of the repository containing the alert."),
-        alertId: z.number().describe("The ID of the alert to retrieve details for."),
+        alertId: z.coerce.number().min(1).describe("The ID of the alert to retrieve details for."),
         ref: z.string().optional().describe("Git reference (branch) to filter the alert."),
     }, async ({ project, repository, alertId, ref }) => {
         try {

package/dist/tools/core.js

@@ -16,8 +16,8 @@ function configureCoreTools(server, tokenProvider, connectionProvider, userAgent
     server.tool(CORE_TOOLS.list_project_teams, "Retrieve a list of teams for an Azure DevOps project. If a project is not specified, you will be prompted to select one.", {
         project: z.string().optional().describe("The name or ID of the Azure DevOps project. Reuse from prior context if already known. If not provided, a project selection prompt will be shown."),
         mine: z.boolean().optional().describe("If true, only return teams that the authenticated user is a member of."),
-        top: z.number().optional().describe("The maximum number of teams to return. Defaults to 100."),
-        skip: z.number().optional().describe("The number of teams to skip for pagination. Defaults to 0."),
+        top: z.coerce.number().optional().describe("The maximum number of teams to return. Defaults to 100."),
+        skip: z.coerce.number().optional().describe("The number of teams to skip for pagination. Defaults to 0."),
     }, async ({ project, mine, top, skip }) => {
         try {
             const connection = await connectionProvider();
@@ -47,9 +47,9 @@ function configureCoreTools(server, tokenProvider, connectionProvider, userAgent
     });
     server.tool(CORE_TOOLS.list_projects, "Retrieve a list of projects in your Azure DevOps organization.", {
         stateFilter: z.enum(["all", "wellFormed", "createPending", "deleted"]).default("wellFormed").describe("Filter projects by their state. Defaults to 'wellFormed'."),
-        top: z.number().optional().describe("The maximum number of projects to return. Defaults to 100."),
-        skip: z.number().optional().describe("The number of projects to skip for pagination. Defaults to 0."),
-        continuationToken: z.number().optional().describe("Continuation token for pagination. Used to fetch the next set of results if available."),
+        top: z.coerce.number().optional().describe("The maximum number of projects to return. Defaults to 100."),
+        skip: z.coerce.number().optional().describe("The number of projects to skip for pagination. Defaults to 0."),
+        continuationToken: z.coerce.number().optional().describe("Continuation token for pagination. Used to fetch the next set of results if available."),
         projectNameFilter: z.string().optional().describe("Filter projects by name. Supports partial matches."),
     }, async ({ stateFilter, top, skip, continuationToken, projectNameFilter }) => {
         try {

package/dist/tools/pipelines.js

@@ -37,7 +37,7 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
         top: z.number().optional().describe("Maximum number of build definitions to return"),
         continuationToken: z.string().optional().describe("Token for continuing paged results"),
         minMetricsTime: z.coerce.date().optional().describe("Minimum metrics time to filter build definitions"),
-        definitionIds: z.array(z.number()).optional().describe("Array of build definition IDs to filter"),
+        definitionIds: z.array(z.coerce.number().min(1)).optional().describe("Array of build definition IDs to filter"),
         builtAfter: z.coerce.date().optional().describe("Return definitions that have builds after this date"),
         notBuiltAfter: z.coerce.date().optional().describe("Return definitions that do not have builds after this date"),
         includeAllProperties: z.boolean().optional().describe("Whether to include all properties in the results"),
@@ -105,7 +105,7 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_get_build_definition_revisions, "Retrieves a list of revisions for a specific build definition.", {
         project: z.string().describe("Project ID or name to get the build definition revisions for"),
-        definitionId: z.number().describe("ID of the build definition to get revisions for"),
+        definitionId: z.coerce.number().min(1).describe("ID of the build definition to get revisions for"),
     }, async ({ project, definitionId }) => {
         const connection = await connectionProvider();
         const buildApi = await connection.getBuildApi();
@@ -116,8 +116,8 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_get_builds, "Retrieves a list of builds for a given project.", {
         project: z.string().describe("Project ID or name to get builds for"),
-        definitions: z.array(z.number()).optional().describe("Array of build definition IDs to filter builds"),
-        queues: z.array(z.number()).optional().describe("Array of queue IDs to filter builds"),
+        definitions: z.array(z.coerce.number().min(1)).optional().describe("Array of build definition IDs to filter builds"),
+        queues: z.array(z.coerce.number().min(1)).optional().describe("Array of queue IDs to filter builds"),
         buildNumber: z.string().optional().describe("Build number to filter builds"),
         minTime: z.coerce.date().optional().describe("Minimum finish time to filter builds"),
         maxTime: z.coerce.date().optional().describe("Maximum finish time to filter builds"),
@@ -137,7 +137,7 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
             .optional()
             .describe("Order in which builds are returned"),
         branchName: z.string().optional().describe("Branch name to filter builds"),
-        buildIds: z.array(z.number()).optional().describe("Array of build IDs to retrieve"),
+        buildIds: z.array(z.coerce.number().min(1)).optional().describe("Array of build IDs to retrieve"),
         repositoryId: z.string().optional().describe("Repository ID to filter builds"),
         repositoryType: z.enum(["TfsGit", "GitHub", "BitbucketCloud"]).optional().describe("Type of repository to filter builds"),
     }, async ({ project, definitions, queues, buildNumber, minTime, maxTime, requestedFor, reasonFilter, statusFilter, resultFilter, tagFilters, properties, top, continuationToken, maxBuildsPerDefinition, deletedFilter, queryOrder, branchName, buildIds, repositoryId, repositoryType, }) => {
@@ -150,7 +150,7 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_get_build_log, "Retrieves the logs for a specific build.", {
         project: z.string().describe("Project ID or name to get the build log for"),
-        buildId: z.number().describe("ID of the build to get the log for"),
+        buildId: z.coerce.number().min(1).describe("ID of the build to get the log for"),
     }, async ({ project, buildId }) => {
         const connection = await connectionProvider();
         const buildApi = await connection.getBuildApi();
@@ -161,10 +161,10 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_get_build_log_by_id, "Get a specific build log by log ID.", {
         project: z.string().describe("Project ID or name to get the build log for"),
-        buildId: z.number().describe("ID of the build to get the log for"),
-        logId: z.number().describe("ID of the log to retrieve"),
-        startLine: z.number().optional().describe("Starting line number for the log content, defaults to 0"),
-        endLine: z.number().optional().describe("Ending line number for the log content, defaults to the end of the log"),
+        buildId: z.coerce.number().min(1).describe("ID of the build to get the log for"),
+        logId: z.coerce.number().min(1).describe("ID of the log to retrieve"),
+        startLine: z.coerce.number().optional().describe("Starting line number for the log content, defaults to 0"),
+        endLine: z.coerce.number().optional().describe("Ending line number for the log content, defaults to the end of the log"),
     }, async ({ project, buildId, logId, startLine, endLine }) => {
         const connection = await connectionProvider();
         const buildApi = await connection.getBuildApi();
@@ -175,7 +175,7 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_get_build_changes, "Get the changes associated with a specific build.", {
         project: z.string().describe("Project ID or name to get the build changes for"),
-        buildId: z.number().describe("ID of the build to get changes for"),
+        buildId: z.coerce.number().min(1).describe("ID of the build to get changes for"),
         continuationToken: z.string().optional().describe("Continuation token for pagination"),
         top: z.number().default(100).describe("Number of changes to retrieve, defaults to 100"),
         includeSourceChange: z.boolean().optional().describe("Whether to include source changes in the results, defaults to false"),
@@ -189,8 +189,8 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_get_run, "Gets a run for a particular pipeline.", {
         project: z.string().describe("Project ID or name to run the build in"),
-        pipelineId: z.number().describe("ID of the pipeline to run"),
-        runId: z.number().describe("ID of the run to get"),
+        pipelineId: z.coerce.number().min(1).describe("ID of the pipeline to run"),
+        runId: z.coerce.number().min(1).describe("ID of the run to get"),
     }, async ({ project, pipelineId, runId }) => {
         const connection = await connectionProvider();
         const pipelinesApi = await connection.getPipelinesApi();
@@ -201,7 +201,7 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_list_runs, "Gets top 10000 runs for a particular pipeline.", {
         project: z.string().describe("Project ID or name to run the build in"),
-        pipelineId: z.number().describe("ID of the pipeline to run"),
+        pipelineId: z.coerce.number().min(1).describe("ID of the pipeline to run"),
     }, async ({ project, pipelineId }) => {
         const connection = await connectionProvider();
         const pipelinesApi = await connection.getPipelinesApi();
@@ -227,7 +227,7 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
         }))
             .optional(),
         pipelines: z.record(z.string().describe("Name of the pipeline resource."), z.object({
-            runId: z.number().describe("Id of the source pipeline run that triggered or is referenced by this pipeline run."),
+            runId: z.coerce.number().min(1).describe("Id of the source pipeline run that triggered or is referenced by this pipeline run."),
             version: z.string().optional().describe("Version of the source pipeline run."),
         })),
         repositories: z
@@ -241,8 +241,8 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_run_pipeline, "Starts a new run of a pipeline.", {
         project: z.string().describe("Project ID or name to run the build in"),
-        pipelineId: z.number().describe("ID of the pipeline to run"),
-        pipelineVersion: z.number().optional().describe("Version of the pipeline to run. If not provided, the latest version will be used."),
+        pipelineId: z.coerce.number().min(1).describe("ID of the pipeline to run"),
+        pipelineVersion: z.coerce.number().min(1).optional().describe("Version of the pipeline to run. If not provided, the latest version will be used."),
         previewRun: z.boolean().optional().describe("If true, returns the final YAML document after parsing templates without creating a new run."),
         resources: resourcesSchema.optional().describe("A dictionary of resources to pass to the pipeline."),
         stagesToSkip: z.array(z.string()).optional().describe("A list of stages to skip."),
@@ -277,7 +277,7 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_get_build_status, "Fetches the status of a specific build.", {
         project: z.string().describe("Project ID or name to get the build status for"),
-        buildId: z.number().describe("ID of the build to get the status for"),
+        buildId: z.coerce.number().min(1).describe("ID of the build to get the status for"),
     }, async ({ project, buildId }) => {
         const connection = await connectionProvider();
         const buildApi = await connection.getBuildApi();
@@ -288,14 +288,14 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_update_build_stage, "Updates the stage of a specific build.", {
         project: z.string().describe("Project ID or name to update the build stage for"),
-        buildId: z.number().describe("ID of the build to update"),
+        buildId: z.coerce.number().min(1).describe("ID of the build to update"),
         stageName: z.string().describe("Name of the stage to update"),
         status: z.enum(getEnumKeys(StageUpdateType)).describe("New status for the stage"),
         forceRetryAllJobs: z.boolean().default(false).describe("Whether to force retry all jobs in the stage."),
     }, async ({ project, buildId, stageName, status, forceRetryAllJobs }) => {
         const connection = await connectionProvider();
         const orgUrl = connection.serverUrl;
-        const endpoint = `${orgUrl}/${project}/_apis/build/builds/${buildId}/stages/${stageName}?api-version=${apiVersion}`;
+        const endpoint = `${orgUrl}/${encodeURIComponent(project)}/_apis/build/builds/${buildId}/stages/${encodeURIComponent(stageName)}?api-version=${apiVersion}`;
         const token = await tokenProvider();
         const body = {
             forceRetryAllJobs: forceRetryAllJobs,
@@ -321,7 +321,7 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_list_artifacts, "Lists artifacts for a given build.", {
         project: z.string().describe("The name or ID of the project."),
-        buildId: z.number().describe("The ID of the build."),
+        buildId: z.coerce.number().min(1).describe("The ID of the build."),
     }, async ({ project, buildId }) => {
         const connection = await connectionProvider();
         const buildApi = await connection.getBuildApi();
@@ -332,16 +332,17 @@ function configurePipelineTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(PIPELINE_TOOLS.pipelines_download_artifact, "Downloads a pipeline artifact.", {
         project: z.string().describe("The name or ID of the project."),
-        buildId: z.number().describe("The ID of the build."),
+        buildId: z.coerce.number().min(1).describe("The ID of the build."),
         artifactName: z.string().describe("The name of the artifact to download."),
         destinationPath: z.string().optional().describe("The local path to download the artifact to. If not provided, returns binary content as base64."),
     }, async ({ project, buildId, artifactName, destinationPath }) => {
         const isAbsolutePath = (value) => posix.isAbsolute(value) || win32.isAbsolute(value);
+        const hasDriveLetter = (value) => /^[a-zA-Z]:/.test(value);
         if (artifactName.includes("..")) {
             throw new Error("Invalid artifactName: path traversal is not allowed.");
         }
-        if (destinationPath && (destinationPath.includes("..") || isAbsolutePath(destinationPath))) {
-            throw new Error("Invalid destinationPath: absolute paths and paths traversals are not allowed.");
+        if (destinationPath && (destinationPath.includes("..") || isAbsolutePath(destinationPath) || hasDriveLetter(destinationPath))) {
+            throw new Error("Invalid destinationPath: absolute paths and path traversals are not allowed.");
         }
         const connection = await connectionProvider();
         const buildApi = await connection.getBuildApi();

package/dist/tools/repositories.js

@@ -1,9 +1,9 @@
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT License.
-import { PullRequestStatus, GitVersionType, GitPullRequestQueryType, CommentThreadStatus, GitPullRequestMergeStrategy, VersionControlRecursionType, } from "azure-devops-node-api/interfaces/GitInterfaces.js";
+import { PullRequestStatus, GitVersionType, GitPullRequestQueryType, CommentThreadStatus, GitPullRequestMergeStrategy, VersionControlChangeType, VersionControlRecursionType, } from "azure-devops-node-api/interfaces/GitInterfaces.js";
 import { z } from "zod";
 import { getCurrentUserDetails, getUserIdFromEmail } from "./auth.js";
-import { getEnumKeys } from "../utils.js";
+import { getEnumKeys, streamToString } from "../utils.js";
 const REPO_TOOLS = {
     list_repos_by_project: "repo_list_repos_by_project",
     list_pull_requests_by_repo_or_project: "repo_list_pull_requests_by_repo_or_project",
@@ -14,6 +14,7 @@ const REPO_TOOLS = {
     get_repo_by_name_or_id: "repo_get_repo_by_name_or_id",
     get_branch_by_name: "repo_get_branch_by_name",
     get_pull_request_by_id: "repo_get_pull_request_by_id",
+    get_pull_request_changes: "repo_get_pull_request_changes",
     create_pull_request: "repo_create_pull_request",
     create_branch: "repo_create_branch",
     update_pull_request: "repo_update_pull_request",
@@ -25,6 +26,7 @@ const REPO_TOOLS = {
     list_pull_requests_by_commits: "repo_list_pull_requests_by_commits",
     vote_pull_request: "repo_vote_pull_request",
     list_directory: "repo_list_directory",
+    get_file_content: "repo_get_file_content",
 };
 function branchesFilterOutIrrelevantProperties(branches, top) {
     return branches
@@ -289,7 +291,7 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
     });
     server.tool(REPO_TOOLS.update_pull_request, "Update a Pull Request by ID with specified fields, including setting autocomplete with various completion options.", {
         repositoryId: z.string().describe("The ID or name of the repository where the pull request exists. When using a repository name instead of a GUID, the project parameter must also be provided."),
-        pullRequestId: z.number().describe("The ID of the pull request to update."),
+        pullRequestId: z.coerce.number().min(1).describe("The ID of the pull request to update."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID."),
         title: z.string().optional().describe("The new title for the pull request."),
         description: z.string().max(4000).optional().describe("The new description for the pull request. Must not be longer than 4000 characters."),
@@ -392,7 +394,7 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
     });
     server.tool(REPO_TOOLS.update_pull_request_reviewers, "Add or remove reviewers for an existing pull request.", {
         repositoryId: z.string().describe("The ID or name of the repository where the pull request exists. When using a repository name instead of a GUID, the project parameter must also be provided."),
-        pullRequestId: z.number().describe("The ID of the pull request to update."),
+        pullRequestId: z.coerce.number().min(1).describe("The ID of the pull request to update."),
         reviewerIds: z.array(z.string()).describe("List of reviewer ids to add or remove from the pull request."),
         action: z.enum(["add", "remove"]).describe("Action to perform on the reviewers. Can be 'add' or 'remove'."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID."),
@@ -434,8 +436,8 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
     });
     server.tool(REPO_TOOLS.list_repos_by_project, "Retrieve a list of repositories for a given project", {
         project: z.string().describe("The name or ID of the Azure DevOps project."),
-        top: z.number().default(100).describe("The maximum number of repositories to return."),
-        skip: z.number().default(0).describe("The number of repositories to skip. Defaults to 0."),
+        top: z.coerce.number().default(100).describe("The maximum number of repositories to return."),
+        skip: z.coerce.number().default(0).describe("The number of repositories to skip. Defaults to 0."),
         repoNameFilter: z.string().optional().describe("Optional filter to search for repositories by name. If provided, only repositories with names containing this string will be returned."),
     }, async ({ project, top, skip, repoNameFilter }) => {
         try {
@@ -472,8 +474,8 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
             .optional()
             .describe("The ID or name of the repository where the pull requests are located. When using a repository name instead of a GUID, the project parameter must also be provided."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID, or to scope the search to a specific project."),
-        top: z.number().default(100).describe("The maximum number of pull requests to return."),
-        skip: z.number().default(0).describe("The number of pull requests to skip."),
+        top: z.coerce.number().default(100).describe("The maximum number of pull requests to return."),
+        skip: z.coerce.number().default(0).describe("The number of pull requests to skip."),
         created_by_me: z.boolean().default(false).describe("Filter pull requests created by the current user."),
         created_by_user: z.string().optional().describe("Filter pull requests created by a specific user (provide email or unique name). Takes precedence over created_by_me if both are provided."),
         i_am_reviewer: z.boolean().default(false).describe("Filter pull requests where the current user is a reviewer."),
@@ -599,12 +601,12 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
         repositoryId: z
             .string()
             .describe("The ID or name of the repository where the pull request is located. When using a repository name instead of a GUID, the project parameter must also be provided."),
-        pullRequestId: z.number().describe("The ID of the pull request for which to retrieve threads."),
+        pullRequestId: z.coerce.number().min(1).describe("The ID of the pull request for which to retrieve threads."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID."),
-        iteration: z.number().optional().describe("The iteration ID for which to retrieve threads. Optional, defaults to the latest iteration."),
-        baseIteration: z.number().optional().describe("The base iteration ID for which to retrieve threads. Optional, defaults to the latest base iteration."),
-        top: z.number().default(100).describe("The maximum number of threads to return after filtering."),
-        skip: z.number().default(0).describe("The number of threads to skip after filtering."),
+        iteration: z.coerce.number().min(1).optional().describe("The iteration ID for which to retrieve threads. Optional, defaults to the latest iteration."),
+        baseIteration: z.coerce.number().min(1).optional().describe("The base iteration ID for which to retrieve threads. Optional, defaults to the latest base iteration."),
+        top: z.coerce.number().default(100).describe("The maximum number of threads to return after filtering."),
+        skip: z.coerce.number().default(0).describe("The number of threads to skip after filtering."),
         fullResponse: z.boolean().optional().default(false).describe("Return full thread JSON response instead of trimmed data."),
         status: z
             .enum(getEnumKeys(CommentThreadStatus))
@@ -659,11 +661,11 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
         repositoryId: z
             .string()
             .describe("The ID or name of the repository where the pull request is located. When using a repository name instead of a GUID, the project parameter must also be provided."),
-        pullRequestId: z.number().describe("The ID of the pull request for which to retrieve thread comments."),
-        threadId: z.number().describe("The ID of the thread for which to retrieve comments."),
+        pullRequestId: z.coerce.number().min(1).describe("The ID of the pull request for which to retrieve thread comments."),
+        threadId: z.coerce.number().min(1).describe("The ID of the thread for which to retrieve comments."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID."),
-        top: z.number().default(100).describe("The maximum number of comments to return."),
-        skip: z.number().default(0).describe("The number of comments to skip."),
+        top: z.coerce.number().default(100).describe("The maximum number of comments to return."),
+        skip: z.coerce.number().default(0).describe("The number of comments to skip."),
         fullResponse: z.boolean().optional().default(false).describe("Return full comment JSON response instead of trimmed data."),
     }, async ({ repositoryId, pullRequestId, threadId, project, top, skip, fullResponse }) => {
         try {
@@ -695,7 +697,7 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
         repositoryId: z
             .string()
             .describe("The ID or name of the repository where the branches are located. When using a repository name instead of a GUID, the project parameter must also be provided."),
-        top: z.number().default(100).describe("The maximum number of branches to return. Defaults to 100."),
+        top: z.coerce.number().default(100).describe("The maximum number of branches to return. Defaults to 100."),
         filterContains: z.string().optional().describe("Filter to find branches that contain this string in their name."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID."),
     }, async ({ repositoryId, top, filterContains, project }) => {
@@ -720,7 +722,7 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
         repositoryId: z
             .string()
             .describe("The ID or name of the repository where the branches are located. When using a repository name instead of a GUID, the project parameter must also be provided."),
-        top: z.number().default(100).describe("The maximum number of branches to return."),
+        top: z.coerce.number().default(100).describe("The maximum number of branches to return."),
         filterContains: z.string().optional().describe("Filter to find branches that contain this string in their name."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID."),
     }, async ({ repositoryId, top, filterContains, project }) => {
@@ -805,7 +807,7 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
         repositoryId: z
             .string()
             .describe("The ID or name of the repository where the pull request is located. When using a repository name instead of a GUID, the project parameter must also be provided."),
-        pullRequestId: z.number().describe("The ID of the pull request to retrieve."),
+        pullRequestId: z.coerce.number().min(1).describe("The ID of the pull request to retrieve."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID."),
         includeWorkItemRefs: z.boolean().optional().default(false).describe("Whether to reference work items associated with the pull request."),
         includeLabels: z.boolean().optional().default(false).describe("Whether to include a summary of labels in the response."),
@@ -855,12 +857,328 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
             };
         }
     });
+    server.tool(REPO_TOOLS.get_pull_request_changes, "Get the file changes (diff) for a pull request iteration with actual code diff content. Returns the code changes including line-by-line diffs made in the pull request.", {
+        repositoryId: z.string().describe("The ID of the repository where the pull request is located."),
+        pullRequestId: z.number().describe("The ID of the pull request to retrieve changes for."),
+        iterationId: z.number().optional().describe("The iteration ID to get changes for. If not specified, gets changes for the latest iteration."),
+        project: z.string().optional().describe("Project ID or project name (optional)"),
+        top: z.number().optional().describe("Maximum number of files to include diffs for. Default is 100."),
+        skip: z.number().optional().describe("Number of changes to skip for pagination."),
+        compareTo: z.number().optional().describe("Iteration ID to compare against. If specified, returns changes between two iterations."),
+        includeDiffs: z.boolean().optional().describe("Whether to include actual line-by-line diff content. Default is true. Set to false to get only file metadata."),
+        includeLineContent: z
+            .boolean()
+            .optional()
+            .describe("Whether to include the actual line content from the changed files. Default is true. When true, fetches file content and includes the actual code lines that were added/removed/modified."),
+    }, async ({ repositoryId, pullRequestId, iterationId, project, top, skip, compareTo, includeDiffs = true, includeLineContent = true }) => {
+        try {
+            const connection = await connectionProvider();
+            const gitApi = await connection.getGitApi();
+            // If repositoryId is a name (not a GUID), we need a project to resolve it.
+            // GUID pattern: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+            const isGuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(repositoryId);
+            if (!isGuid && !project) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: "Error: When using a repository name instead of a GUID for repositoryId, the 'project' parameter is required. Please either provide the project name/ID, or use repo_get_repo_by_name_or_id to resolve the repository GUID first.",
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+            // If no iteration ID provided, get the latest iteration
+            let targetIterationId = iterationId;
+            let targetIteration;
+            if (targetIterationId == null) {
+                const iterations = await gitApi.getPullRequestIterations(repositoryId, pullRequestId, project);
+                if (!iterations || iterations.length === 0) {
+                    return {
+                        content: [{ type: "text", text: "No iterations found for this pull request." }],
+                        isError: true,
+                    };
+                }
+                // Get the latest iteration
+                targetIteration = iterations[iterations.length - 1];
+                targetIterationId = targetIteration.id;
+            }
+            else {
+                // Get the specific iteration
+                targetIteration = await gitApi.getPullRequestIteration(repositoryId, pullRequestId, targetIterationId, project);
+            }
+            // Get the file change metadata
+            const changes = await gitApi.getPullRequestIterationChanges(repositoryId, pullRequestId, targetIterationId ?? 1, project, top, skip, compareTo);
+            // If includeDiffs is false, just return the metadata
+            if (!includeDiffs) {
+                return {
+                    content: [{ type: "text", text: JSON.stringify(changes, null, 2) }],
+                };
+            }
+            // Get actual diff content using getFileDiffs
+            if (changes.changeEntries && changes.changeEntries.length > 0 && targetIteration) {
+                // Determine base and target commits
+                const baseCommitId = compareTo
+                    ? (await gitApi.getPullRequestIteration(repositoryId, pullRequestId, compareTo, project)).sourceRefCommit?.commitId
+                    : targetIteration.commonRefCommit?.commitId;
+                const targetCommitId = targetIteration.sourceRefCommit?.commitId;
+                if (baseCommitId && targetCommitId) {
+                    // Build FileDiffsCriteria with paths from changeEntries
+                    // Exclude added and deleted files as they don't have both versions to diff
+                    // changeType is a flags enum so use bitwise AND to check
+                    const fileDiffParams = changes.changeEntries
+                        .filter((entry) => {
+                        const ct = entry.changeType ?? 0;
+                        return entry.item?.path && !(ct & VersionControlChangeType.Add) && !(ct & VersionControlChangeType.Delete);
+                    })
+                        .map((entry) => {
+                        // Remove leading slash if present - Azure DevOps API expects relative paths
+                        const itemPath = entry.item?.path ?? "";
+                        const path = itemPath.startsWith("/") ? itemPath.substring(1) : itemPath;
+                        // For renamed/moved files, use the original path from the change entry
+                        const origPath = entry.originalPath ? (entry.originalPath.startsWith("/") ? entry.originalPath.substring(1) : entry.originalPath) : path;
+                        return {
+                            path: path,
+                            originalPath: origPath,
+                        };
+                    });
+                    if (fileDiffParams.length > 0) {
+                        try {
+                            // Azure DevOps getFileDiffs API accepts max 10 files per request
+                            const FILE_DIFF_BATCH_SIZE = 10;
+                            let fileDiffs = [];
+                            for (let i = 0; i < fileDiffParams.length; i += FILE_DIFF_BATCH_SIZE) {
+                                const batch = fileDiffParams.slice(i, i + FILE_DIFF_BATCH_SIZE);
+                                const batchDiffs = await gitApi.getFileDiffs({
+                                    baseVersionCommit: baseCommitId,
+                                    targetVersionCommit: targetCommitId,
+                                    fileDiffParams: batch,
+                                }, project || "", repositoryId);
+                                fileDiffs = fileDiffs.concat(batchDiffs);
+                            }
+                            // Merge diff content with change metadata
+                            const enrichedChanges = {
+                                ...changes,
+                                changeEntries: changes.changeEntries.map((entry) => {
+                                    // Normalize path for comparison (remove leading slash)
+                                    const entryPath = entry.item?.path?.startsWith("/") ? entry.item.path.substring(1) : entry.item?.path;
+                                    const matchingDiff = fileDiffs.find((diff) => diff.path === entryPath);
+                                    return {
+                                        ...entry,
+                                        diff: matchingDiff || null,
+                                    };
+                                }),
+                            };
+                            // If includeLineContent is true, fetch actual file content with concurrency limit
+                            if (includeLineContent && enrichedChanges.changeEntries) {
+                                const CONCURRENCY_LIMIT = 10;
+                                const entriesWithContent = [...enrichedChanges.changeEntries];
+                                for (let i = 0; i < entriesWithContent.length; i += CONCURRENCY_LIMIT) {
+                                    const batch = entriesWithContent.slice(i, i + CONCURRENCY_LIMIT);
+                                    const batchResults = await Promise.all(batch.map(async (entry) => {
+                                        const ct = entry.changeType ?? 0;
+                                        const isAdd = !!(ct & VersionControlChangeType.Add);
+                                        const isDelete = !!(ct & VersionControlChangeType.Delete);
+                                        const entryPath = entry.item?.path?.startsWith("/") ? entry.item.path.substring(1) : entry.item?.path;
+                                        if (!entryPath) {
+                                            return entry;
+                                        }
+                                        // Handle added files: fetch full content at target commit and create synthetic diff
+                                        if (isAdd && !entry.diff) {
+                                            try {
+                                                const targetStream = await gitApi
+                                                    .getItemText(repositoryId, entryPath, project, undefined, undefined, undefined, undefined, undefined, { version: targetCommitId, versionType: GitVersionType.Commit })
+                                                    .catch(() => null);
+                                                if (targetStream) {
+                                                    const targetText = await streamToString(targetStream);
+                                                    const targetLines = targetText.split(/\r?\n/);
+                                                    return {
+                                                        ...entry,
+                                                        diff: {
+                                                            path: entryPath,
+                                                            originalPath: entryPath,
+                                                            lineDiffBlocks: [
+                                                                {
+                                                                    changeType: 1, // Add
+                                                                    originalLineNumberStart: 0,
+                                                                    originalLinesCount: 0,
+                                                                    modifiedLineNumberStart: 1,
+                                                                    modifiedLinesCount: targetLines.length,
+                                                                    modifiedLines: targetLines,
+                                                                },
+                                                            ],
+                                                        },
+                                                    };
+                                                }
+                                            }
+                                            catch (addError) {
+                                                return {
+                                                    ...entry,
+                                                    _contentFetchError: `Failed to fetch added file content: ${addError instanceof Error ? addError.message : "Unknown error"}`,
+                                                };
+                                            }
+                                            return entry;
+                                        }
+                                        // Handle deleted files: fetch full content at base commit and create synthetic diff
+                                        if (isDelete && !entry.diff) {
+                                            try {
+                                                const basePath = entry.originalPath ? (entry.originalPath.startsWith("/") ? entry.originalPath.substring(1) : entry.originalPath) : entryPath;
+                                                const baseStream = await gitApi
+                                                    .getItemText(repositoryId, basePath, project, undefined, undefined, undefined, undefined, undefined, { version: baseCommitId, versionType: GitVersionType.Commit })
+                                                    .catch(() => null);
+                                                if (baseStream) {
+                                                    const baseText = await streamToString(baseStream);
+                                                    const baseLines = baseText.split(/\r?\n/);
+                                                    return {
+                                                        ...entry,
+                                                        diff: {
+                                                            path: entryPath,
+                                                            originalPath: basePath,
+                                                            lineDiffBlocks: [
+                                                                {
+                                                                    changeType: 2, // Delete
+                                                                    originalLineNumberStart: 1,
+                                                                    originalLinesCount: baseLines.length,
+                                                                    modifiedLineNumberStart: 0,
+                                                                    modifiedLinesCount: 0,
+                                                                    originalLines: baseLines,
+                                                                },
+                                                            ],
+                                                        },
+                                                    };
+                                                }
+                                            }
+                                            catch (delError) {
+                                                return {
+                                                    ...entry,
+                                                    _contentFetchError: `Failed to fetch deleted file content: ${delError instanceof Error ? delError.message : "Unknown error"}`,
+                                                };
+                                            }
+                                            return entry;
+                                        }
+                                        // For modified/renamed files, skip if no diff blocks
+                                        if (!entry.diff?.lineDiffBlocks || entry.diff.lineDiffBlocks.length === 0) {
+                                            return entry;
+                                        }
+                                        // For renamed/moved files, the base version is at the original path
+                                        const basePath = entry.originalPath ? (entry.originalPath.startsWith("/") ? entry.originalPath.substring(1) : entry.originalPath) : entryPath;
+                                        try {
+                                            // Fetch file content at both commits
+                                            const [baseContent, targetContent] = await Promise.all([
+                                                // Base version (original) - use basePath for renamed files
+                                                gitApi
+                                                    .getItemText(repositoryId, basePath, project, undefined, undefined, undefined, undefined, undefined, { version: baseCommitId, versionType: GitVersionType.Commit })
+                                                    .catch(() => null),
+                                                // Target version (modified)
+                                                gitApi
+                                                    .getItemText(repositoryId, entryPath, project, undefined, undefined, undefined, undefined, undefined, { version: targetCommitId, versionType: GitVersionType.Commit })
+                                                    .catch(() => null),
+                                            ]);
+                                            // Convert streams to text
+                                            const baseText = baseContent ? await streamToString(baseContent) : "";
+                                            const targetText = targetContent ? await streamToString(targetContent) : "";
+                                            // Check if response is an Azure DevOps error (returned as JSON in the stream)
+                                            const checkForApiError = (text, label) => {
+                                                if (text.startsWith("{")) {
+                                                    try {
+                                                        const parsed = JSON.parse(text);
+                                                        if (parsed.$id && parsed.innerException !== undefined) {
+                                                            throw new Error(`Failed to fetch ${label} file content: ${parsed.message || text}`);
+                                                        }
+                                                    }
+                                                    catch (e) {
+                                                        if (e instanceof Error && e.message.startsWith("Failed to fetch"))
+                                                            throw e;
+                                                        // Not valid JSON or not an error response — treat as legitimate content
+                                                    }
+                                                }
+                                            };
+                                            checkForApiError(baseText, "base");
+                                            checkForApiError(targetText, "target");
+                                            // Split into lines
+                                            const baseLines = baseText.split(/\r?\n/);
+                                            const targetLines = targetText.split(/\r?\n/);
+                                            // Enrich each lineDiffBlock with actual line content
+                                            const enrichedDiff = {
+                                                ...entry.diff,
+                                                lineDiffBlocks: entry.diff.lineDiffBlocks?.map((block) => {
+                                                    const enrichedBlock = { ...block };
+                                                    // Add original (base) lines if they exist
+                                                    if (block.originalLineNumberStart && block.originalLinesCount) {
+                                                        const startIdx = block.originalLineNumberStart - 1;
+                                                        const endIdx = startIdx + block.originalLinesCount;
+                                                        enrichedBlock.originalLines = baseLines.slice(startIdx, endIdx);
+                                                    }
+                                                    // Add modified (target) lines if they exist
+                                                    if (block.modifiedLineNumberStart && block.modifiedLinesCount) {
+                                                        const startIdx = block.modifiedLineNumberStart - 1;
+                                                        const endIdx = startIdx + block.modifiedLinesCount;
+                                                        enrichedBlock.modifiedLines = targetLines.slice(startIdx, endIdx);
+                                                    }
+                                                    return enrichedBlock;
+                                                }),
+                                            };
+                                            return {
+                                                ...entry,
+                                                diff: enrichedDiff,
+                                            };
+                                        }
+                                        catch (contentError) {
+                                            // If content fetch fails, return entry with error
+                                            return {
+                                                ...entry,
+                                                _contentFetchError: `Failed to fetch line content: ${contentError instanceof Error ? contentError.message : "Unknown error"}`,
+                                            };
+                                        }
+                                    }));
+                                    // Write batch results back into the array
+                                    for (let j = 0; j < batchResults.length; j++) {
+                                        entriesWithContent[i + j] = batchResults[j];
+                                    }
+                                }
+                                enrichedChanges.changeEntries = entriesWithContent;
+                            }
+                            return {
+                                content: [{ type: "text", text: JSON.stringify(enrichedChanges, null, 2) }],
+                            };
+                        }
+                        catch (diffError) {
+                            // If diff fetching fails, return metadata with error info
+                            return {
+                                content: [
+                                    {
+                                        type: "text",
+                                        text: JSON.stringify({
+                                            ...changes,
+                                            _diffError: `Failed to fetch diff content: ${diffError instanceof Error ? diffError.message : "Unknown error"}`,
+                                            _note: "Returned metadata only",
+                                        }, null, 2),
+                                    },
+                                ],
+                            };
+                        }
+                    }
+                }
+            }
+            // Fallback: return metadata if we couldn't get diffs
+            return {
+                content: [{ type: "text", text: JSON.stringify(changes, null, 2) }],
+            };
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : "Unknown error occurred";
+            return {
+                content: [{ type: "text", text: `Error getting pull request changes: ${errorMessage}` }],
+                isError: true,
+            };
+        }
+    });
     server.tool(REPO_TOOLS.reply_to_comment, "Replies to a specific comment on a pull request.", {
         repositoryId: z
             .string()
             .describe("The ID or name of the repository where the pull request is located. When using a repository name instead of a GUID, the project parameter must also be provided."),
-        pullRequestId: z.number().describe("The ID of the pull request where the comment thread exists."),
-        threadId: z.number().describe("The ID of the thread to which the comment will be added."),
+        pullRequestId: z.coerce.number().min(1).describe("The ID of the pull request where the comment thread exists."),
+        threadId: z.coerce.number().min(1).describe("The ID of the thread to which the comment will be added."),
         content: z.string().describe("The content of the comment to be added."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID."),
         fullResponse: z.boolean().optional().default(false).describe("Return full comment JSON response instead of a simple confirmation message."),
@@ -897,7 +1215,7 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
         repositoryId: z
             .string()
             .describe("The ID or name of the repository where the pull request is located. When using a repository name instead of a GUID, the project parameter must also be provided."),
-        pullRequestId: z.number().describe("The ID of the pull request where the comment thread exists."),
+        pullRequestId: z.coerce.number().min(1).describe("The ID of the pull request where the comment thread exists."),
         content: z.string().describe("The content of the comment to be added."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID."),
         filePath: z.string().optional().describe("The path of the file where the comment thread will be created. (optional)"),
@@ -906,7 +1224,11 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
             .optional()
             .default(CommentThreadStatus[CommentThreadStatus.Active])
             .describe("The status of the comment thread. Defaults to 'Active'."),
-        rightFileStartLine: z.number().optional().describe("Position of first character of the thread's span in right file. The line number of a thread's position. Starts at 1. (optional)"),
+        rightFileStartLine: z.coerce
+            .number()
+            .min(1)
+            .optional()
+            .describe("Position of first character of the thread's span in right file. The line number of a thread's position. Starts at 1. (optional)"),
         rightFileStartOffset: z
             .number()
             .optional()
@@ -1013,8 +1335,8 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
         repositoryId: z
             .string()
             .describe("The ID or name of the repository where the pull request is located. When using a repository name instead of a GUID, the project parameter must also be provided."),
-        pullRequestId: z.number().describe("The ID of the pull request where the comment thread exists."),
-        threadId: z.number().describe("The ID of the thread to update."),
+        pullRequestId: z.coerce.number().min(1).describe("The ID of the pull request where the comment thread exists."),
+        threadId: z.coerce.number().min(1).describe("The ID of the thread to update."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID."),
         status: z
             .enum(getEnumKeys(CommentThreadStatus))
@@ -1067,8 +1389,8 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
             .optional()
             .default(GitVersionType[GitVersionType.Branch])
             .describe("The meaning of the version parameter, e.g., branch, tag or commit"),
-        skip: z.number().optional().default(0).describe("Number of commits to skip"),
-        top: z.number().optional().default(10).describe("Maximum number of commits to return"),
+        skip: z.coerce.number().optional().default(0).describe("Number of commits to skip"),
+        top: z.coerce.number().optional().default(10).describe("Maximum number of commits to return"),
         includeLinks: z.boolean().optional().default(false).describe("Include commit links"),
         includeWorkItems: z.boolean().optional().default(false).describe("Include associated work items"),
         // Enhanced search parameters
@@ -1224,7 +1546,7 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
     });
     server.tool(REPO_TOOLS.vote_pull_request, "Cast a vote on a pull request. Automatically adds the current user as a reviewer if they are not already one.", {
         repositoryId: z.string().describe("The ID or name of the repository. When using a repository name instead of a GUID, the project parameter must also be provided."),
-        pullRequestId: z.number().describe("The ID of the pull request."),
+        pullRequestId: z.coerce.number().min(1).describe("The ID of the pull request."),
         vote: z.enum(["Approved", "ApprovedWithSuggestions", "NoVote", "WaitingForAuthor", "Rejected"]).describe("The vote to cast: Approved(10), Suggestions(5), None(0), Waiting(-5), Rejected(-10)."),
         project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a repository name instead of a GUID."),
     }, async ({ repositoryId, pullRequestId, vote, project }) => {
@@ -1259,7 +1581,7 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
         version: z.string().optional().describe("The version identifier - branch name (e.g., 'main'), tag name, or commit SHA. Defaults to the repository's default branch."),
         versionType: z.enum(["Branch", "Commit", "Tag"]).optional().default("Branch").describe("The type of version identifier: 'Branch', 'Commit', or 'Tag'. Defaults to 'Branch'."),
         recursive: z.boolean().optional().default(false).describe("Whether to list items recursively. Defaults to false."),
-        recursionDepth: z.number().optional().default(1).describe("Maximum depth for recursive listing (1-10). Only applies when recursive is true. Defaults to 1."),
+        recursionDepth: z.coerce.number().min(1).optional().default(1).describe("Maximum depth for recursive listing (1-10). Only applies when recursive is true. Defaults to 1."),
     }, async ({ repositoryId, path, project, version, versionType, recursive, recursionDepth }) => {
         try {
             const connection = await connectionProvider();
@@ -1318,5 +1640,58 @@ function configureRepoTools(server, tokenProvider, connectionProvider, userAgent
             };
         }
     });
+    // ── Get file content at a specific version (branch, tag, or commit) ──
+    const fileVersionTypeStrings = getEnumKeys(GitVersionType);
+    server.tool(REPO_TOOLS.get_file_content, "Get the content of a file from a Git repository at a specific version (branch, tag, or commit SHA). " +
+        "Useful for reading source files from PR branches, specific commits, or tags without having them checked out locally.", {
+        repositoryId: z.string().describe("The ID (GUID) or name of the repository."),
+        path: z.string().describe("The full path to the file in the repository, e.g., '/src/main.ts' or 'src/main.ts'."),
+        project: z.string().optional().describe("Project ID or project name. Required when repositoryId is a name."),
+        version: z
+            .string()
+            .optional()
+            .describe("Version string: branch name (e.g. 'main'), tag name, or commit SHA. " + "Defaults to the repository's default branch if not specified."),
+        versionType: z
+            .enum(fileVersionTypeStrings)
+            .optional()
+            .default("Commit")
+            .describe("How to interpret the 'version' parameter. Defaults to 'Commit'."),
+    }, async ({ repositoryId, path, project, version, versionType }) => {
+        try {
+            const connection = await connectionProvider();
+            const gitApi = await connection.getGitApi();
+            // Build the version descriptor if a version was specified
+            const versionDescriptor = version
+                ? {
+                    version: version,
+                    versionType: GitVersionType[versionType],
+                }
+                : undefined;
+            // getItemText returns a ReadableStream of the file content as text
+            const stream = await gitApi.getItemText(repositoryId, path, project, undefined, // scopePath
+            undefined, // recursionLevel
+            undefined, // includeContentMetadata
+            undefined, // latestProcessedChange
+            false, // download
+            versionDescriptor, true // includeContent
+            );
+            const content = await streamToString(stream);
+            return {
+                content: [{ type: "text", text: content }],
+            };
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : "Unknown error occurred";
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Error getting file content for '${path}': ${errorMessage}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
 }
 export { REPO_TOOLS, configureRepoTools };

package/dist/tools/search.js

@@ -17,8 +17,8 @@ function configureSearchTools(server, tokenProvider, connectionProvider, userAge
         path: z.array(z.string()).optional().describe("Filter by paths"),
         branch: z.array(z.string()).optional().describe("Filter by branches"),
         includeFacets: z.boolean().default(false).describe("Include facets in the search results"),
-        skip: z.number().default(0).describe("Number of results to skip"),
-        top: z.number().default(5).describe("Maximum number of results to return"),
+        skip: z.coerce.number().default(0).describe("Number of results to skip"),
+        top: z.coerce.number().default(5).describe("Maximum number of results to return"),
     }, async ({ searchText, project, repository, path, branch, includeFacets, skip, top }) => {
         const accessToken = await tokenProvider();
         const connection = await connectionProvider();
@@ -66,8 +66,8 @@ function configureSearchTools(server, tokenProvider, connectionProvider, userAge
         project: z.array(z.string()).optional().describe("Filter by projects"),
         wiki: z.array(z.string()).optional().describe("Filter by wiki names"),
         includeFacets: z.boolean().default(false).describe("Include facets in the search results"),
-        skip: z.number().default(0).describe("Number of results to skip"),
-        top: z.number().default(10).describe("Maximum number of results to return"),
+        skip: z.coerce.number().default(0).describe("Number of results to skip"),
+        top: z.coerce.number().default(10).describe("Maximum number of results to return"),
     }, async ({ searchText, project, wiki, includeFacets, skip, top }) => {
         const accessToken = await tokenProvider();
         const url = `https://almsearch.dev.azure.com/${orgName}/_apis/search/wikisearchresults?api-version=${apiVersion}`;
@@ -110,8 +110,8 @@ function configureSearchTools(server, tokenProvider, connectionProvider, userAge
         state: z.array(z.string()).optional().describe("Filter by work item states"),
         assignedTo: z.array(z.string()).optional().describe("Filter by assigned to users"),
         includeFacets: z.boolean().default(false).describe("Include facets in the search results"),
-        skip: z.number().default(0).describe("Number of results to skip for pagination"),
-        top: z.number().default(10).describe("Number of results to return"),
+        skip: z.coerce.number().default(0).describe("Number of results to skip for pagination"),
+        top: z.coerce.number().default(10).describe("Number of results to return"),
     }, async ({ searchText, project, areaPath, workItemType, state, assignedTo, includeFacets, skip, top }) => {
         const accessToken = await tokenProvider();
         const url = `https://almsearch.dev.azure.com/${orgName}/_apis/search/workitemsearchresults?api-version=${apiVersion}`;

package/dist/tools/test-plans.js

@@ -72,8 +72,8 @@ function configureTestPlanTools(server, _, connectionProvider) {
     });
     server.tool(Test_Plan_Tools.create_test_suite, "Creates a new test suite in a test plan.", {
         project: z.string().describe("Project ID or project name"),
-        planId: z.number().describe("ID of the test plan that contains the suites"),
-        parentSuiteId: z.number().describe("ID of the parent suite under which the new suite will be created, if not given by user this can be id of a root suite of the test plan"),
+        planId: z.coerce.number().min(1).describe("ID of the test plan that contains the suites"),
+        parentSuiteId: z.coerce.number().min(1).describe("ID of the parent suite under which the new suite will be created, if not given by user this can be id of a root suite of the test plan"),
         name: z.string().describe("Name of the child test suite"),
     }, async ({ project, planId, parentSuiteId, name }) => {
         const maxRetries = 5;
@@ -120,8 +120,8 @@ function configureTestPlanTools(server, _, connectionProvider) {
     });
     server.tool(Test_Plan_Tools.add_test_cases_to_suite, "Adds existing test cases to a test suite.", {
         project: z.string().describe("The unique identifier (ID or name) of the Azure DevOps project."),
-        planId: z.number().describe("The ID of the test plan."),
-        suiteId: z.number().describe("The ID of the test suite."),
+        planId: z.coerce.number().min(1).describe("The ID of the test plan."),
+        suiteId: z.coerce.number().min(1).describe("The ID of the test suite."),
         testCaseIds: z.string().or(z.array(z.string())).describe("The ID(s) of the test case(s) to add. "),
     }, async ({ project, planId, suiteId, testCaseIds }) => {
         try {
@@ -149,10 +149,10 @@ function configureTestPlanTools(server, _, connectionProvider) {
             .string()
             .optional()
             .describe("The steps to reproduce the test case. Make sure to format each step as '1. Step one|Expected result one\n2. Step two|Expected result two. USE '|' as the delimiter between step and expected result. DO NOT use '|' in the description of the step or expected result."),
-        priority: z.number().optional().describe("The priority of the test case."),
+        priority: z.coerce.number().optional().describe("The priority of the test case."),
         areaPath: z.string().optional().describe("The area path for the test case."),
         iterationPath: z.string().optional().describe("The iteration path for the test case."),
-        testsWorkItemId: z.number().optional().describe("Optional work item id that will be set as a Microsoft.VSTS.Common.TestedBy-Reverse link to the test case."),
+        testsWorkItemId: z.coerce.number().min(1).optional().describe("Optional work item id that will be set as a Microsoft.VSTS.Common.TestedBy-Reverse link to the test case."),
     }, async ({ project, title, steps, priority, areaPath, iterationPath, testsWorkItemId }) => {
         try {
             const connection = await connectionProvider();
@@ -220,7 +220,7 @@ function configureTestPlanTools(server, _, connectionProvider) {
         }
     });
     server.tool(Test_Plan_Tools.update_test_case_steps, "Update an existing test case work item.", {
-        id: z.number().describe("The ID of the test case work item to update."),
+        id: z.coerce.number().min(1).describe("The ID of the test case work item to update."),
         steps: z
             .string()
             .describe("The steps to reproduce the test case. Make sure to format each step as '1. Step one|Expected result one\n2. Step two|Expected result two. USE '|' as the delimiter between step and expected result. DO NOT use '|' in the description of the step or expected result."),
@@ -256,8 +256,8 @@ function configureTestPlanTools(server, _, connectionProvider) {
     });
     server.tool(Test_Plan_Tools.list_test_cases, "Gets a list of test cases in the test plan.", {
         project: z.string().describe("The unique identifier (ID or name) of the Azure DevOps project."),
-        planid: z.number().describe("The ID of the test plan."),
-        suiteid: z.number().describe("The ID of the test suite."),
+        planid: z.coerce.number().min(1).describe("The ID of the test plan."),
+        suiteid: z.coerce.number().min(1).describe("The ID of the test suite."),
     }, async ({ project, planid, suiteid }) => {
         try {
             const connection = await connectionProvider();
@@ -277,7 +277,7 @@ function configureTestPlanTools(server, _, connectionProvider) {
     });
     server.tool(Test_Plan_Tools.test_results_from_build_id, "Gets a list of test results for a given project and build ID. Can filter by test outcome (e.g. Failed, Passed, Aborted). Returns test case titles, error messages, stack traces, and outcomes. Efficiently handles builds with large numbers of test runs.", {
         project: z.string().describe("The unique identifier (ID or name) of the Azure DevOps project."),
-        buildid: z.number().describe("The ID of the build."),
+        buildid: z.coerce.number().min(1).describe("The ID of the build."),
         outcomes: z.array(z.string()).optional().describe("Filter results by test outcome, e.g. ['Failed', 'Passed', 'Aborted']."),
     }, async ({ project, buildid, outcomes }) => {
         try {
@@ -329,7 +329,7 @@ function configureTestPlanTools(server, _, connectionProvider) {
     });
     server.tool(Test_Plan_Tools.list_test_suites, "Retrieve a paginated list of test suites from an Azure DevOps project and Test Plan Id.", {
         project: z.string().describe("The unique identifier (ID or name) of the Azure DevOps project."),
-        planId: z.number().describe("The ID of the test plan."),
+        planId: z.coerce.number().min(1).describe("The ID of the test plan."),
         continuationToken: z.string().optional().describe("Token to continue fetching test plans from a previous request."),
     }, async ({ project, planId, continuationToken }) => {
         try {

package/dist/tools/wiki.js

@@ -59,9 +59,9 @@ function configureWikiTools(server, tokenProvider, connectionProvider, userAgent
     server.tool(WIKI_TOOLS.list_wiki_pages, "Retrieve a list of wiki pages for a specific wiki and project.", {
         wikiIdentifier: z.string().describe("The unique identifier of the wiki."),
         project: z.string().describe("The project name or ID where the wiki is located."),
-        top: z.number().default(20).describe("The maximum number of pages to return. Defaults to 20."),
+        top: z.coerce.number().default(20).describe("The maximum number of pages to return. Defaults to 20."),
         continuationToken: z.string().optional().describe("Token for pagination to retrieve the next set of pages."),
-        pageViewsForDays: z.number().optional().describe("Number of days to retrieve page views for. If not specified, page views are not included."),
+        pageViewsForDays: z.coerce.number().optional().describe("Number of days to retrieve page views for. If not specified, page views are not included."),
     }, async ({ wikiIdentifier, project, top = 20, continuationToken, pageViewsForDays }) => {
         try {
             const connection = await connectionProvider();
@@ -111,7 +111,7 @@ function configureWikiTools(server, tokenProvider, connectionProvider, userAgent
             if (recursionLevel) {
                 params.append("recursionLevel", recursionLevel);
             }
-            const url = `${baseUrl}/${project}/_apis/wiki/wikis/${wikiIdentifier}/pages?${params.toString()}`;
+            const url = `${baseUrl}/${encodeURIComponent(project)}/_apis/wiki/wikis/${encodeURIComponent(wikiIdentifier)}/pages?${params.toString()}`;
             const response = await fetch(url, {
                 headers: {
                     "Authorization": `Bearer ${accessToken}`,
@@ -173,7 +173,7 @@ function configureWikiTools(server, tokenProvider, connectionProvider, userAgent
                     try {
                         const accessToken = await tokenProvider();
                         const baseUrl = connection.serverUrl.replace(/\/$/, "");
-                        const restUrl = `${baseUrl}/${resolvedProject}/_apis/wiki/wikis/${resolvedWiki}/pages/${parsed.pageId}?includeContent=true&api-version=7.1`;
+                        const restUrl = `${baseUrl}/${encodeURIComponent(resolvedProject)}/_apis/wiki/wikis/${encodeURIComponent(resolvedWiki)}/pages/${parsed.pageId}?includeContent=true&api-version=7.1`;
                         const resp = await fetch(restUrl, {
                             headers: {
                                 "Authorization": `Bearer ${accessToken}`,
@@ -236,7 +236,7 @@ function configureWikiTools(server, tokenProvider, connectionProvider, userAgent
             // Build the URL for the wiki page API with version descriptor
             const baseUrl = connection.serverUrl;
             const projectParam = project || "";
-            const url = `${baseUrl}/${projectParam}/_apis/wiki/wikis/${wikiIdentifier}/pages?path=${encodedPath}&versionDescriptor.versionType=branch&versionDescriptor.version=${encodeURIComponent(branch)}&api-version=7.1`;
+            const url = `${baseUrl}/${encodeURIComponent(projectParam)}/_apis/wiki/wikis/${encodeURIComponent(wikiIdentifier)}/pages?path=${encodedPath}&versionDescriptor.versionType=branch&versionDescriptor.version=${encodeURIComponent(branch)}&api-version=7.1`;
             // First, try to create a new page (PUT without ETag)
             try {
                 const createResponse = await fetch(url, {

package/dist/tools/work-items.js

@@ -104,7 +104,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
     server.tool(WORKITEM_TOOLS.my_work_items, "Retrieve a list of work items relevent to the authenticated user.", {
         project: z.string().describe("The name or ID of the Azure DevOps project."),
         type: z.enum(["assignedtome", "myactivity"]).default("assignedtome").describe("The type of work items to retrieve. Defaults to 'assignedtome'."),
-        top: z.number().default(50).describe("The maximum number of work items to return. Defaults to 50."),
+        top: z.coerce.number().default(50).describe("The maximum number of work items to return. Defaults to 50."),
         includeCompleted: z.boolean().default(false).describe("Whether to include completed work items. Defaults to false."),
     }, async ({ project, type, top, includeCompleted }) => {
         try {
@@ -125,7 +125,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(WORKITEM_TOOLS.get_work_items_batch_by_ids, "Retrieve list of work items by IDs in batch.", {
         project: z.string().describe("The name or ID of the Azure DevOps project."),
-        ids: z.array(z.number()).describe("The IDs of the work items to retrieve."),
+        ids: z.array(z.coerce.number().min(1)).describe("The IDs of the work items to retrieve."),
         fields: z.array(z.string()).optional().describe("Optional list of fields to include in the response. If not provided, a hardcoded default set of fields will be used."),
     }, async ({ project, ids, fields }) => {
         try {
@@ -174,7 +174,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
         }
     });
     server.tool(WORKITEM_TOOLS.get_work_item, "Get a single work item by ID.", {
-        id: z.number().describe("The ID of the work item to retrieve."),
+        id: z.coerce.number().min(1).describe("The ID of the work item to retrieve."),
         project: z.string().describe("The name or ID of the Azure DevOps project."),
         fields: z.array(z.string()).optional().describe("Optional list of fields to include in the response. If not provided, all fields will be returned."),
         asOf: z.coerce.date().optional().describe("Optional date string to retrieve the work item as of a specific time. If not provided, the current state will be returned."),
@@ -202,8 +202,8 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(WORKITEM_TOOLS.list_work_item_comments, "Retrieve list of comments for a work item by ID.", {
         project: z.string().describe("The name or ID of the Azure DevOps project."),
-        workItemId: z.number().describe("The ID of the work item to retrieve comments for."),
-        top: z.number().default(50).describe("Optional number of comments to retrieve. Defaults to all comments."),
+        workItemId: z.coerce.number().min(1).describe("The ID of the work item to retrieve comments for."),
+        top: z.coerce.number().default(50).describe("Optional number of comments to retrieve. Defaults to all comments."),
     }, async ({ project, workItemId, top }) => {
         try {
             const connection = await connectionProvider();
@@ -223,7 +223,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(WORKITEM_TOOLS.add_work_item_comment, "Add comment to a work item by ID.", {
         project: z.string().describe("The name or ID of the Azure DevOps project."),
-        workItemId: z.number().describe("The ID of the work item to add a comment to."),
+        workItemId: z.coerce.number().min(1).describe("The ID of the work item to add a comment to."),
         comment: z.string().describe("The text of the comment to add to the work item."),
         format: z.enum(["markdown", "html"]).optional().default("html"),
     }, async ({ project, workItemId, comment, format }) => {
@@ -235,7 +235,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
                 text: comment,
             };
             const formatParameter = format === "markdown" ? 0 : 1;
-            const response = await fetch(`${orgUrl}/${project}/_apis/wit/workItems/${workItemId}/comments?format=${formatParameter}&api-version=${markdownCommentsApiVersion}`, {
+            const response = await fetch(`${orgUrl}/${encodeURIComponent(project)}/_apis/wit/workItems/${workItemId}/comments?format=${formatParameter}&api-version=${markdownCommentsApiVersion}`, {
                 method: "POST",
                 headers: {
                     "Authorization": `Bearer ${accessToken}`,
@@ -262,8 +262,8 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(WORKITEM_TOOLS.update_work_item_comment, "Update an existing comment on a work item by ID.", {
         project: z.string().describe("The name or ID of the Azure DevOps project."),
-        workItemId: z.number().describe("The ID of the work item."),
-        commentId: z.number().describe("The ID of the comment to update."),
+        workItemId: z.coerce.number().min(1).describe("The ID of the work item."),
+        commentId: z.coerce.number().min(1).describe("The ID of the comment to update."),
         text: z.string().describe("The updated comment text."),
         format: z.enum(["markdown", "html"]).optional().default("html"),
     }, async ({ project, workItemId, commentId, text, format }) => {
@@ -273,7 +273,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
             const accessToken = await tokenProvider();
             const body = { text };
             const formatParameter = format === "markdown" ? 0 : 1;
-            const response = await fetch(`${orgUrl}/${project}/_apis/wit/workItems/${workItemId}/comments/${commentId}?format=${formatParameter}&api-version=${markdownCommentsApiVersion}`, {
+            const response = await fetch(`${orgUrl}/${encodeURIComponent(project)}/_apis/wit/workItems/${workItemId}/comments/${commentId}?format=${formatParameter}&api-version=${markdownCommentsApiVersion}`, {
                 method: "PATCH",
                 headers: {
                     "Authorization": `Bearer ${accessToken}`,
@@ -300,9 +300,9 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(WORKITEM_TOOLS.list_work_item_revisions, "Retrieve list of revisions for a work item by ID.", {
         project: z.string().describe("The name or ID of the Azure DevOps project."),
-        workItemId: z.number().describe("The ID of the work item to retrieve revisions for."),
-        top: z.number().default(50).describe("Optional number of revisions to retrieve. If not provided, all revisions will be returned."),
-        skip: z.number().optional().describe("Optional number of revisions to skip for pagination. Defaults to 0."),
+        workItemId: z.coerce.number().min(1).describe("The ID of the work item to retrieve revisions for."),
+        top: z.coerce.number().default(50).describe("Optional number of revisions to retrieve. If not provided, all revisions will be returned."),
+        skip: z.coerce.number().optional().describe("Optional number of revisions to skip for pagination. Defaults to 0."),
         expand: z
             .enum(getEnumKeys(WorkItemExpand))
             .default("None")
@@ -351,7 +351,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
         }
     });
     server.tool(WORKITEM_TOOLS.add_child_work_items, "Create one or many child work items from a parent by work item type and parent id.", {
-        parentId: z.number().describe("The ID of the parent work item to create a child work item under."),
+        parentId: z.coerce.number().min(1).describe("The ID of the parent work item to create a child work item under."),
         project: z.string().describe("The name or ID of the Azure DevOps project."),
         workItemType: z.string().describe("The type of the child work item to create."),
         items: z.array(z.object({
@@ -432,7 +432,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
                 }
                 return {
                     method: "PATCH",
-                    uri: `/${project}/_apis/wit/workitems/$${workItemType}?api-version=${batchApiVersion}`,
+                    uri: `/${encodeURIComponent(project)}/_apis/wit/workitems/$${encodeURIComponent(workItemType)}?api-version=${batchApiVersion}`,
                     headers: {
                         "Content-Type": "application/json-patch+json",
                     },
@@ -467,8 +467,8 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
     server.tool(WORKITEM_TOOLS.link_work_item_to_pull_request, "Link a single work item to an existing pull request.", {
         projectId: z.string().describe("The project ID of the Azure DevOps project (note: project name is not valid)."),
         repositoryId: z.string().describe("The ID of the repository containing the pull request. Do not use the repository name here, use the ID instead."),
-        pullRequestId: z.number().describe("The ID of the pull request to link to."),
-        workItemId: z.number().describe("The ID of the work item to link to the pull request."),
+        pullRequestId: z.coerce.number().min(1).describe("The ID of the pull request to link to."),
+        workItemId: z.coerce.number().min(1).describe("The ID of the work item to link to the pull request."),
         pullRequestProjectId: z.string().optional().describe("The project ID containing the pull request. If not provided, defaults to the work item's project ID (for same-project linking)."),
     }, async ({ projectId, repositoryId, pullRequestId, workItemId, pullRequestProjectId }) => {
         try {
@@ -542,7 +542,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
         }
     });
     server.tool(WORKITEM_TOOLS.update_work_item, "Update a work item by ID with specified fields.", {
-        id: z.number().describe("The ID of the work item to update."),
+        id: z.coerce.number().min(1).describe("The ID of the work item to update."),
         updates: z
             .array(z.object({
             op: z
@@ -651,7 +651,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
             .enum(getEnumKeys(QueryExpand))
             .optional()
             .describe("Optional expand parameter to include additional details in the response. Defaults to 'None'."),
-        depth: z.number().default(0).describe("Optional depth parameter to specify how deep to expand the query. Defaults to 0."),
+        depth: z.coerce.number().default(0).describe("Optional depth parameter to specify how deep to expand the query. Defaults to 0."),
         includeDeleted: z.boolean().default(false).describe("Whether to include deleted items in the query results. Defaults to false."),
         useIsoDateFormat: z.boolean().default(false).describe("Whether to use ISO date format in the response. Defaults to false."),
     }, async ({ project, query, expand, depth, includeDeleted, useIsoDateFormat }) => {
@@ -676,7 +676,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
         project: z.string().optional().describe("The name or ID of the Azure DevOps project. If not provided, the default project will be used."),
         team: z.string().optional().describe("The name or ID of the Azure DevOps team. If not provided, the default team will be used."),
         timePrecision: z.boolean().optional().describe("Whether to include time precision in the results. Defaults to false."),
-        top: z.number().default(50).describe("The maximum number of results to return. Defaults to 50."),
+        top: z.coerce.number().default(50).describe("The maximum number of results to return. Defaults to 50."),
         responseType: z.enum(["full", "ids"]).default("full").describe("Response type: 'full' returns complete query results (default), 'ids' returns only work item IDs for reduced payload size."),
     }, async ({ id, project, team, timePrecision, top, responseType }) => {
         try {
@@ -708,7 +708,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
         updates: z
             .array(z.object({
             op: z.enum(["Add", "Replace", "Remove"]).default("Add").describe("The operation to perform on the field."),
-            id: z.number().describe("The ID of the work item to update."),
+            id: z.coerce.number().min(1).describe("The ID of the work item to update."),
             path: z.string().describe("The path of the field to update, e.g., '/fields/System.Title'."),
             value: z.string().describe("The new value for the field. This is required for 'add' and 'replace' operations, and should be omitted for 'remove' operations."),
             format: z.enum(["Html", "Markdown"]).optional().describe("The format of the field value. Only to be used for large text fields. e.g., 'Html', 'Markdown'. Optional, defaults to 'Html'."),
@@ -776,8 +776,8 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
         project: z.string().describe("The name or ID of the Azure DevOps project."),
         updates: z
             .array(z.object({
-            id: z.number().describe("The ID of the work item to update."),
-            linkToId: z.number().describe("The ID of the work item to link to."),
+            id: z.coerce.number().min(1).describe("The ID of the work item to update."),
+            linkToId: z.coerce.number().min(1).describe("The ID of the work item to link to."),
             type: z
                 .enum(["parent", "child", "duplicate", "duplicate of", "related", "successor", "predecessor", "tested by", "tests", "affects", "affected by"])
                 .default("related")
@@ -839,7 +839,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
     });
     server.tool(WORKITEM_TOOLS.work_item_unlink, "Remove one or many links from a single work item", {
         project: z.string().describe("The name or ID of the Azure DevOps project."),
-        id: z.number().describe("The ID of the work item to remove the links from."),
+        id: z.coerce.number().min(1).describe("The ID of the work item to remove the links from."),
         type: z
             .enum(["parent", "child", "duplicate", "duplicate of", "related", "successor", "predecessor", "tested by", "tests", "affects", "affected by", "artifact"])
             .default("related")
@@ -902,7 +902,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
         }
     });
     server.tool(WORKITEM_TOOLS.add_artifact_link, "Add artifact links (repository, branch, commit, builds) to work items. You can either provide the full vstfs URI or the individual components to build it automatically.", {
-        workItemId: z.number().describe("The ID of the work item to add the artifact link to."),
+        workItemId: z.coerce.number().min(1).describe("The ID of the work item to add the artifact link to."),
         project: z.string().describe("The name or ID of the Azure DevOps project."),
         // Option 1: Provide full URI directly
         artifactUri: z.string().optional().describe("The complete VSTFS URI of the artifact to link. If provided, individual component parameters are ignored."),
@@ -911,8 +911,8 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
         repositoryId: z.string().optional().describe("The repository ID (GUID) containing the artifact. Required for Git artifacts when artifactUri is not provided."),
         branchName: z.string().optional().describe("The branch name (e.g., 'main'). Required when linkType is 'Branch'."),
         commitId: z.string().optional().describe("The commit SHA hash. Required when linkType is 'Fixed in Commit'."),
-        pullRequestId: z.number().optional().describe("The pull request ID. Required when linkType is 'Pull Request'."),
-        buildId: z.number().optional().describe("The build ID. Required when linkType is 'Build', 'Found in build', or 'Integrated in build'."),
+        pullRequestId: z.coerce.number().min(1).optional().describe("The pull request ID. Required when linkType is 'Pull Request'."),
+        buildId: z.coerce.number().min(1).optional().describe("The build ID. Required when linkType is 'Build', 'Found in build', or 'Integrated in build'."),
         linkType: z
             .enum([
             "Branch",

package/dist/tools/work.js

@@ -99,8 +99,8 @@ function configureWorkTools(server, _, connectionProvider) {
     });
     server.tool(WORK_TOOLS.list_iterations, "List all iterations in a specified Azure DevOps project. If a project is not specified, you will be prompted to select one.", {
         project: z.string().optional().describe("The name or ID of the Azure DevOps project. Reuse from prior context if already known. If not provided, a project selection prompt will be shown."),
-        depth: z.number().default(2).describe("Depth of children to fetch."),
-        excludedIds: z.array(z.number()).optional().describe("An optional array of iteration IDs, and thier children, that should not be returned."),
+        depth: z.coerce.number().default(2).describe("Depth of children to fetch."),
+        excludedIds: z.array(z.coerce.number().min(1)).optional().describe("An optional array of iteration IDs, and thier children, that should not be returned."),
     }, async ({ project, depth, excludedIds: ids }) => {
         try {
             const connection = await connectionProvider();

package/dist/utils.js

@@ -67,3 +67,18 @@ export function encodeFormattedValue(value, format) {
     const result = value.replace(/</g, "&lt;").replace(/>/g, "&gt;");
     return result;
 }
+/**
+ * Convert a Node.js ReadableStream to a string.
+ * Shared utility for consistent stream handling across tools.
+ */
+export function streamToString(stream) {
+    return new Promise((resolve, reject) => {
+        let data = "";
+        stream.setEncoding("utf8");
+        stream.on("data", (chunk) => {
+            data += chunk;
+        });
+        stream.on("error", reject);
+        stream.on("end", () => resolve(data));
+    });
+}

package/dist/version.js

@@ -1 +1 @@
-export const packageVersion = "2.5.0-nightly.20260323";
+export const packageVersion = "2.5.0-nightly.20260324";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@azure-devops/mcp",
-  "version": "2.5.0-nightly.20260323",
+  "version": "2.5.0-nightly.20260324",
   "mcpName": "microsoft.com/azure-devops",
   "description": "MCP server for interacting with Azure DevOps",
   "license": "MIT",