@azure-devops/mcp 2.9.0-nightly.20260807 → 2.9.0-nightly.20260809

package/dist/tools/auth.js

@@ -45,10 +45,7 @@ async function searchIdentities(identity, tokenProvider, connectionProvider, use
     }
     return await response.json();
 }
-/**
- * Gets the user ID from email or unique name using Azure DevOps Identity API
- */
-async function getUserIdFromEmail(userEmail, tokenProvider, connectionProvider, userAgentProvider) {
+async function getUserIdentityFromEmail(userEmail, tokenProvider, connectionProvider, userAgentProvider) {
     const identities = await searchIdentities(userEmail, tokenProvider, connectionProvider, userAgentProvider);
     if (!identities || identities.value?.length === 0) {
         throw new Error(`No user found with email/unique name: ${userEmail}`);
@@ -57,6 +54,13 @@ async function getUserIdFromEmail(userEmail, tokenProvider, connectionProvider,
     if (!firstIdentity.id) {
         throw new Error(`No ID found for user with email/unique name: ${userEmail}`);
     }
-    return firstIdentity.id;
+    return { id: firstIdentity.id, displayName: firstIdentity.providerDisplayName ?? userEmail };
+}
+/**
+ * Gets the user ID from email or unique name using Azure DevOps Identity API
+ */
+async function getUserIdFromEmail(userEmail, tokenProvider, connectionProvider, userAgentProvider) {
+    const identity = await getUserIdentityFromEmail(userEmail, tokenProvider, connectionProvider, userAgentProvider);
+    return identity.id;
 }
-export { getCurrentUserDetails, getUserIdFromEmail, searchIdentities };
+export { getCurrentUserDetails, getUserIdFromEmail, getUserIdentityFromEmail, searchIdentities };

package/dist/tools/work-items.js

@@ -8,6 +8,7 @@ import { z } from "zod";
 import { batchApiVersion, markdownCommentsApiVersion, getEnumKeys, safeEnumConvert, encodeFormattedValue } from "../utils.js";
 import { elicitProject, elicitTeam } from "../shared/elicitations.js";
 import { createExternalContentResponse } from "../shared/content-safety.js";
+import { getUserIdentityFromEmail } from "./auth.js";
 const WORKITEM_TOOLS = {
     wit_work_item: "wit_work_item",
     wit_query: "wit_query",
@@ -57,6 +58,36 @@ function getArtifactLinkAttributeName(linkType) {
             return linkType;
     }
 }
+function escapeHtml(value) {
+    const entities = {
+        "&": "&",
+        "<": "&lt;",
+        ">": "&gt;",
+        '"': "&quot;",
+        "'": "&#39;",
+    };
+    return value.replace(/[&<>"']/g, (character) => entities[character]);
+}
+async function resolveCommentMentions(text, format, tokenProvider, connectionProvider, userAgentProvider) {
+    const emailMatches = [...text.matchAll(/@<([^<>\s]+@[^<>\s]+)>/g)];
+    if (emailMatches.length === 0)
+        return text;
+    const identities = new Map();
+    for (const email of new Set(emailMatches.map((match) => match[1]))) {
+        try {
+            identities.set(email, await getUserIdentityFromEmail(email, tokenProvider, connectionProvider, userAgentProvider));
+        }
+        catch {
+            // Leave mentions unchanged when their identities cannot be resolved.
+        }
+    }
+    return text.replace(/@<([^<>\s]+@[^<>\s]+)>/g, (mention, email) => {
+        const identity = identities.get(email);
+        if (!identity)
+            return escapeHtml(mention);
+        return format === "Markdown" || format === undefined ? `@<${identity.id}>` : `<a href="#" data-vss-mention="version:2.0,${identity.id}">@${escapeHtml(identity.displayName)}</a>`;
+    });
+}
 function configureWorkItemTools(server, tokenProvider, connectionProvider, userAgentProvider) {
     // --- wit_work_item ----------------------------------------------------------
     server.tool(WORKITEM_TOOLS.wit_work_item, "Retrieve work item data for a project. Use the action parameter to specify the operation.", {
@@ -678,6 +709,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
             const orgUrl = connection.serverUrl;
             const accessToken = await tokenProvider();
             const formatParameter = (format ?? "Markdown") === "Markdown" ? 0 : 1;
+            const resolvedText = await resolveCommentMentions(text, format, tokenProvider, connectionProvider, userAgentProvider);
             if (action === "add") {
                 const response = await fetch(`${orgUrl}/${encodeURIComponent(resolvedProject)}/_apis/wit/workItems/${workItemId}/comments?format=${formatParameter}&api-version=${markdownCommentsApiVersion}`, {
                     method: "POST",
@@ -686,7 +718,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
                         "Content-Type": "application/json",
                         "User-Agent": userAgentProvider(),
                     },
-                    body: JSON.stringify({ text }),
+                    body: JSON.stringify({ text: resolvedText }),
                 });
                 if (!response.ok) {
                     throw new Error(`Failed to add a work item comment: ${response.statusText}`);
@@ -703,7 +735,7 @@ function configureWorkItemTools(server, tokenProvider, connectionProvider, userA
                         "Content-Type": "application/json",
                         "User-Agent": userAgentProvider(),
                     },
-                    body: JSON.stringify({ text }),
+                    body: JSON.stringify({ text: resolvedText }),
                 });
                 if (!response.ok) {
                     throw new Error(`Failed to update work item comment: ${response.statusText}`);

package/dist/version.js

@@ -1 +1 @@
-export const packageVersion = "2.9.0-nightly.20260807";
+export const packageVersion = "2.9.0-nightly.20260809";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@azure-devops/mcp",
-  "version": "2.9.0-nightly.20260807",
+  "version": "2.9.0-nightly.20260809",
   "mcpName": "microsoft.com/azure-devops",
   "description": "MCP server for interacting with Azure DevOps",
   "license": "MIT",