@knowttl/ado-axi 0.0.0-stage → 0.5.0

package/dist/lib/args.js

@@ -0,0 +1,94 @@
+import { AxiError } from "axi-sdk-js";
+export function argsToArgv(args) {
+    return [...args.positionals, ...Object.entries(args.flags).map(([key, value]) => value === true ? `--${key}` : `--${key}=${value}`)];
+}
+export function parseArgs(argv) {
+    const flags = {};
+    const positionals = [];
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (!arg)
+            continue;
+        if (!arg.startsWith("--")) {
+            positionals.push(arg);
+            continue;
+        }
+        const eq = arg.indexOf("=");
+        let key;
+        let value;
+        if (eq >= 0) {
+            key = arg.slice(2, eq);
+            value = arg.slice(eq + 1);
+        }
+        else {
+            key = arg.slice(2);
+            const next = argv[i + 1];
+            if (next !== undefined && !next.startsWith("--")) {
+                value = next;
+                i++;
+            }
+            else {
+                value = true;
+            }
+        }
+        flags[key] = value;
+    }
+    return { flags, positionals };
+}
+export function flagString(args, name) {
+    const v = args.flags[name];
+    if (typeof v === "boolean") {
+        throw new AxiError(`flag --${name} requires a value`, "VALIDATION_ERROR", [
+            `Usage: --${name} <value>`,
+        ]);
+    }
+    return v;
+}
+export function flagBool(args, name) {
+    return args.flags[name] === true || args.flags[name] === "true";
+}
+export function flagNumber(args, name) {
+    const v = flagString(args, name);
+    if (v === undefined)
+        return undefined;
+    const n = Number(v);
+    if (v.trim() === "" || !Number.isFinite(n)) {
+        throw new AxiError(`flag --${name} expects a number, got '${v}'`, "VALIDATION_ERROR", [
+            `Example: --${name} 20`,
+        ]);
+    }
+    return n;
+}
+export function flagList(args, name) {
+    const v = flagString(args, name);
+    if (v === undefined)
+        return undefined;
+    return v
+        .split(",")
+        .map((s) => s.trim())
+        .filter(Boolean);
+}
+/** Flags accepted by every command, never reported as unknown. */
+export const GLOBAL_FLAGS = ["profile", "org", "project", "help", "full", "fields"];
+const RENAMED = {
+    organization: "org",
+    team_project: "project",
+    count: "limit",
+    top: "limit",
+    max: "limit",
+};
+export function assertKnownFlags(args, known, commandName, helpText) {
+    const knownSet = new Set([...known, ...GLOBAL_FLAGS]);
+    for (const key of Object.keys(args.flags)) {
+        if (knownSet.has(key))
+            continue;
+        const replacement = RENAMED[key];
+        const suggestions = replacement
+            ? [`--${key} is not a flag here; use --${replacement} instead`]
+            : [`Valid flags for \`${commandName}\`: ${[...knownSet].map((k) => `--${k}`).join(", ")}`];
+        if (helpText)
+            suggestions.push(helpText);
+        throw new AxiError(`unknown flag --${key} for \`${commandName}\``, "UNKNOWN_FLAG", suggestions);
+    }
+}
+//# sourceMappingURL=args.js.map

package/dist/lib/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/lib/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAOtC,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAC9E,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,KAAK,GAAqC,EAAE,CAAC;IACnD,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,GAAW,CAAC;QAChB,IAAI,KAAuB,CAAC;QAC5B,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,KAAK,GAAG,IAAI,CAAC;gBACb,CAAC,EAAE,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAgB,EAAE,IAAY;IACvD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,mBAAmB,EAAE,kBAAkB,EAAE;YACxE,YAAY,IAAI,UAAU;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAgB,EAAE,IAAY;IACrD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAgB,EAAE,IAAY;IACvD,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,2BAA2B,CAAC,GAAG,EAAE,kBAAkB,EAAE;YACpF,cAAc,IAAI,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAgB,EAAE,IAAY;IACrD,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO,CAAC;SACL,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAE7F,MAAM,OAAO,GAA2B;IACtC,YAAY,EAAE,KAAK;IACnB,YAAY,EAAE,SAAS;IACvB,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,OAAO;CACb,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAC9B,IAAgB,EAChB,KAAwB,EACxB,WAAmB,EACnB,QAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,KAAK,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,WAAW,GAAG,WAAW;YAC7B,CAAC,CAAC,CAAC,KAAK,GAAG,8BAA8B,WAAW,UAAU,CAAC;YAC/D,CAAC,CAAC,CAAC,qBAAqB,WAAW,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7F,IAAI,QAAQ;YAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,IAAI,QAAQ,CAAC,kBAAkB,GAAG,UAAU,WAAW,IAAI,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}

package/dist/lib/argv.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The SDK requires `<bin> <command> ...flags`. Agents naturally write
+ * `ado-axi --profile acme pr list`, so leading selector flags are moved behind
+ * the command instead of being rejected. With no command they stay put and the
+ * home view receives them.
+ */
+export declare function normalizeArgv(argv: readonly string[]): string[];
+//# sourceMappingURL=argv.d.ts.map

package/dist/lib/argv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"argv.d.ts","sourceRoot":"","sources":["../../src/lib/argv.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAsB/D"}

package/dist/lib/argv.js

@@ -0,0 +1,35 @@
+const VALUE_FLAGS = new Set(["profile", "org", "project", "config"]);
+/**
+ * The SDK requires `<bin> <command> ...flags`. Agents naturally write
+ * `ado-axi --profile acme pr list`, so leading selector flags are moved behind
+ * the command instead of being rejected. With no command they stay put and the
+ * home view receives them.
+ */
+export function normalizeArgv(argv) {
+    const leading = [];
+    let index = 0;
+    while (index < argv.length) {
+        const arg = argv[index];
+        if (arg === undefined || !arg.startsWith("--"))
+            break;
+        const name = arg.slice(2).split("=")[0] ?? "";
+        if (!VALUE_FLAGS.has(name))
+            break;
+        leading.push(arg);
+        index++;
+        if (!arg.includes("=")) {
+            const value = argv[index];
+            if (value !== undefined && !value.startsWith("--")) {
+                leading.push(value);
+                index++;
+            }
+        }
+    }
+    const rest = argv.slice(index);
+    if (leading.length === 0)
+        return [...argv];
+    if (rest.length === 0)
+        return ["home", ...leading];
+    return [rest[0], ...rest.slice(1), ...leading];
+}
+//# sourceMappingURL=argv.js.map

package/dist/lib/argv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"argv.js","sourceRoot":"","sources":["../../src/lib/argv.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAErE;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM;QACtD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM;QAClC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC;AAC3D,CAAC"}

package/dist/lib/audit.d.ts

@@ -0,0 +1,21 @@
+import { type ParsedArgs } from "./args.js";
+import { type RequestOptions } from "./client.js";
+import type { ResolvedProfile } from "./config.js";
+export type AuditRecord = Record<string, unknown>;
+export declare function assertAuditPositionals(args: ParsedArgs, maximum: number): void;
+export declare function auditLimit(args: ParsedArgs): number;
+export declare function auditId(args: ParsedArgs, flag?: string, index?: number): string;
+/** Untrusted API errors can echo credentials. Audit reads expose only the error category. */
+export declare function auditRequest<T>(profile: ResolvedProfile, options: RequestOptions): Promise<T>;
+/** Count every page while retaining at most the requested number of records. */
+export declare function auditList(profile: ResolvedProfile, options: RequestOptions, limit: number, collection?: string): Promise<{
+    rows: AuditRecord[];
+    total: number;
+}>;
+/** Mask before selecting fields or expanding details, including nested secret variables. */
+export declare function safeAudit(value: unknown, args: ParsedArgs): unknown;
+export declare function auditOutput(name: string, result: {
+    rows: AuditRecord[];
+    total: number;
+}, args: ParsedArgs, columns: readonly string[]): AuditRecord;
+//# sourceMappingURL=audit.d.ts.map

package/dist/lib/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/lib/audit.ts"],"names":[],"mappings":"AACA,OAAO,EAA8C,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAW,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAI9E;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAMnD;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,SAAO,EAAE,KAAK,SAAI,GAAG,MAAM,CAKxE;AAED,6FAA6F;AAC7F,wBAAsB,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CASnG;AAED,gFAAgF;AAChF,wBAAsB,SAAS,CAC7B,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,MAAM,EACb,UAAU,SAAU,GACnB,OAAO,CAAC;IAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBjD;AAED,4FAA4F;AAC5F,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAkCnE;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE;IAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAC9C,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,WAAW,CAsBb"}

package/dist/lib/audit.js

@@ -0,0 +1,128 @@
+import { AxiError } from "axi-sdk-js";
+import { flagBool, flagList, flagNumber, flagString } from "./args.js";
+import { request } from "./client.js";
+import { pickFields, truncate } from "./format.js";
+export function assertAuditPositionals(args, maximum) {
+    if (args.positionals.length > maximum) {
+        throw new AxiError("unexpected positional arguments", "VALIDATION_ERROR", ["Use --help for this command's arguments"]);
+    }
+}
+export function auditLimit(args) {
+    const limit = flagNumber(args, "limit") ?? 100;
+    if (!Number.isSafeInteger(limit) || limit < 1) {
+        throw new AxiError("--limit must be a positive integer", "VALIDATION_ERROR");
+    }
+    return limit;
+}
+export function auditId(args, flag = "id", index = 0) {
+    assertAuditPositionals(args, index + 1);
+    const id = flagString(args, flag) ?? args.positionals[index];
+    if (!id)
+        throw new AxiError(`--${flag} or an identifier is required`, "VALIDATION_ERROR");
+    return encodeURIComponent(id);
+}
+/** Untrusted API errors can echo credentials. Audit reads expose only the error category. */
+export async function auditRequest(profile, options) {
+    try {
+        return await request(profile, { ...options, method: "GET" });
+    }
+    catch (error) {
+        const code = error instanceof AxiError ? error.code : "API_ERROR";
+        throw new AxiError("audit read failed; response details withheld to protect secrets", code, [
+            "Check the selected organization, project, identifier, and read permissions",
+        ]);
+    }
+}
+/** Count every page while retaining at most the requested number of records. */
+export async function auditList(profile, options, limit, collection = "value") {
+    const rows = [];
+    let total = 0;
+    let continuation;
+    const seen = new Set();
+    do {
+        let headerToken;
+        const response = await auditRequest(profile, {
+            ...options,
+            query: { ...options.query, continuationToken: continuation },
+            onHeaders: (headers) => { headerToken = headers.get("x-ms-continuationtoken") || undefined; },
+        });
+        const page = (Array.isArray(response) ? response : response[collection] ?? []);
+        total += page.length;
+        rows.push(...page.slice(0, Math.max(0, limit - rows.length)));
+        continuation = headerToken || (Array.isArray(response) ? undefined : response.continuationToken);
+        if (continuation && seen.has(continuation)) {
+            throw new AxiError("audit pagination did not advance; no partial result returned", "RESPONSE_INVALID");
+        }
+        if (continuation)
+            seen.add(continuation);
+    } while (continuation);
+    return { rows, total };
+}
+/** Mask before selecting fields or expanding details, including nested secret variables. */
+export function safeAudit(value, args) {
+    const limit = auditLimit(args);
+    const full = flagBool(args, "full");
+    function safe(item) {
+        if (typeof item === "string")
+            return full ? item : truncate(item, 1200).text;
+        if (Array.isArray(item)) {
+            const items = item.slice(0, limit).map(safe);
+            return item.length > limit ? { items, total: item.length, omitted: item.length - limit } : items;
+        }
+        if (!item || typeof item !== "object")
+            return item;
+        const record = item;
+        const out = {};
+        for (const [key, child] of Object.entries(record)) {
+            if (/authorization|credential|password|secret|accesstoken|refreshtoken|privatekey|certificate|providerdata|capabilities/i.test(key) && key !== "isSecret") {
+                out[key] = "***";
+            }
+            else if (key === "value" && record.isSecret === true) {
+                out[key] = "***";
+            }
+            else if (key === "variables" && child && typeof child === "object") {
+                const variables = Object.entries(child);
+                out[key] = variables.slice(0, limit).map(([name, variable]) => ({ name, ...safe(variable) }));
+                out["variables-total"] = variables.length;
+                out["variables-omitted"] = Math.max(0, variables.length - limit);
+            }
+            else if (key === "acesDictionary" && child && typeof child === "object") {
+                const entries = Object.entries(child);
+                out[key] = Object.fromEntries(entries.slice(0, limit).map(([descriptor, ace]) => [descriptor, safe(ace)]));
+                out["aces-total"] = entries.length;
+                out["aces-omitted"] = Math.max(0, entries.length - limit);
+            }
+            else {
+                out[key] = safe(child);
+            }
+        }
+        return out;
+    }
+    return safe(value);
+}
+export function auditOutput(name, result, args, columns) {
+    const safe = result.rows.map((row) => safeAudit(row, args));
+    const selected = flagList(args, "fields");
+    const fields = selected?.length ? selected : (flagBool(args, "full") ? undefined : [...columns]);
+    const rows = pickFields(safe, fields);
+    for (const [index, row] of rows.entries()) {
+        const record = safe[index];
+        for (const [collection, prefix] of [["acesDictionary", "aces"], ["variables", "variables"]]) {
+            if (!(collection in row))
+                continue;
+            for (const suffix of ["total", "omitted"]) {
+                const key = `${prefix}-${suffix}`;
+                if (key in record)
+                    row[key] = record[key];
+            }
+        }
+    }
+    const omitted = result.total - rows.length;
+    return {
+        count: `${rows.length} of ${result.total} ${name}`,
+        omitted,
+        [name]: rows,
+        ...(omitted > 0 ? { help: [`Pass --limit ${result.total} to include all ${name}; --full expands fields, not the limit`] } : {}),
+    };
+}
+//# sourceMappingURL=audit.js.map

package/dist/lib/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/lib/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAmB,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,OAAO,EAAuB,MAAM,aAAa,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAInD,MAAM,UAAU,sBAAsB,CAAC,IAAgB,EAAE,OAAe;IACtE,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QACtC,MAAM,IAAI,QAAQ,CAAC,iCAAiC,EAAE,kBAAkB,EAAE,CAAC,yCAAyC,CAAC,CAAC,CAAC;IACzH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,QAAQ,CAAC,oCAAoC,EAAE,kBAAkB,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAgB,EAAE,IAAI,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC;IAC9D,sBAAsB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,KAAK,IAAI,+BAA+B,EAAE,kBAAkB,CAAC,CAAC;IAC1F,OAAO,kBAAkB,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,OAAwB,EAAE,OAAuB;IACrF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAI,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,iEAAiE,EAAE,IAAI,EAAE;YAC1F,4EAA4E;SAC7E,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAwB,EACxB,OAAuB,EACvB,KAAa,EACb,UAAU,GAAG,OAAO;IAEpB,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,YAAgC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,GAAG,CAAC;QACF,IAAI,WAA+B,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAA8B,OAAO,EAAE;YACxE,GAAG,OAAO;YACV,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE;YAC5D,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC;SAC9F,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAkB,CAAC;QAChG,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9D,YAAY,GAAG,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAuC,CAAC,CAAC;QACvH,IAAI,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAAC,8DAA8D,EAAE,kBAAkB,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,YAAY;YAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC,QAAQ,YAAY,EAAE;IACvB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,IAAgB;IACxD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,SAAS,IAAI,CAAC,IAAa;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;QAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACnG,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,MAAM,GAAG,IAAmB,CAAC;QACnC,MAAM,GAAG,GAAgB,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,qHAAqH,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;gBAC1J,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACnB,CAAC;iBAAM,IAAI,GAAG,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACvD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACnB,CAAC;iBAAM,IAAI,GAAG,KAAK,WAAW,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACxC,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAgB,EAAE,CAAC,CAAC,CAAC;gBAC7G,GAAG,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;gBAC1C,GAAG,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;YACnE,CAAC;iBAAM,IAAI,GAAG,KAAK,gBAAgB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACtC,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3G,GAAG,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;gBACnC,GAAG,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;YAC5D,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,MAA8C,EAC9C,IAAgB,EAChB,OAA0B;IAE1B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAgB,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAU,EAAE,CAAC;YACrG,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC;gBAAE,SAAS;YACnC,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;gBAClC,IAAI,GAAG,IAAI,MAAM;oBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3C,OAAO;QACL,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,OAAO,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE;QAClD,OAAO;QACP,CAAC,IAAI,CAAC,EAAE,IAAI;QACZ,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,gBAAgB,MAAM,CAAC,KAAK,mBAAmB,IAAI,wCAAwC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChI,CAAC;AACJ,CAAC"}

package/dist/lib/auth.d.ts

@@ -0,0 +1,8 @@
+import type { ResolvedProfile } from "./config.js";
+export interface Credential {
+    header: string;
+    mode: "pat" | "az";
+}
+export declare function resolveCredential(profile: ResolvedProfile, signal?: AbortSignal): Promise<Credential>;
+export declare function clearCredentialCache(): void;
+//# sourceMappingURL=auth.d.ts.map

package/dist/lib/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAOnD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;CACpB;AAID,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAU3G;AA6GD,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C"}

package/dist/lib/auth.js

@@ -0,0 +1,127 @@
+import spawn from "cross-spawn";
+import { AxiError } from "axi-sdk-js";
+/** Azure DevOps AAD resource id — constant across all tenants. */
+const ADO_RESOURCE = "499b84ac-1321-427f-aa17-267ca6975798";
+const MAX_AZ_OUTPUT_BYTES = 8 * 1024 * 1024;
+const cache = new Map();
+export async function resolveCredential(profile, signal) {
+    signal?.throwIfAborted();
+    const key = `${profile.auth}:${profile.org}:${profile.patEnv ?? ""}:${profile.tenant ?? ""}`;
+    const hit = cache.get(key);
+    if (hit)
+        return hit;
+    const credential = profile.auth === "pat" ? patCredential(profile) : await azCredential(profile, signal);
+    signal?.throwIfAborted();
+    cache.set(key, credential);
+    return credential;
+}
+function patCredential(profile) {
+    const varName = profile.patEnv ?? "ADO_AXI_PAT";
+    const pat = process.env[varName];
+    if (!pat) {
+        throw new AxiError(`personal access token env var $${varName} is not set for org '${profile.org}'`, "AUTH_REQUIRED", [
+            `Set $${varName} to a PAT with the scopes you need (Work Items, Code, Build: read)`,
+            "Or switch the profile to az CLI auth: set \"auth\": \"az\" in the config file",
+            "Run `ado-axi doctor` to re-check authentication",
+        ]);
+    }
+    return { header: `Basic ${Buffer.from(`:${pat}`).toString("base64")}`, mode: "pat" };
+}
+async function azCredential(profile, signal) {
+    try {
+        const azArgs = ["account", "get-access-token", "--resource", ADO_RESOURCE, "--output", "json"];
+        if (profile.tenant)
+            azArgs.push("--tenant", profile.tenant);
+        const stdout = await runAz(azArgs, signal);
+        const parsed = JSON.parse(stdout);
+        if (!parsed.accessToken)
+            throw new Error("no accessToken in response");
+        return { header: `Bearer ${parsed.accessToken}`, mode: "az" };
+    }
+    catch (err) {
+        signal?.throwIfAborted();
+        const message = err instanceof Error ? err.message : String(err);
+        const notInstalled = /az CLI is not installed/i.test(message);
+        const notLoggedIn = !notInstalled && /az login|not logged in|AADSTS|Please run/i.test(message);
+        throw new AxiError(notInstalled
+            ? "Azure CLI ('az') is not installed or not on PATH"
+            : notLoggedIn
+                ? `not signed in to Azure CLI for org '${profile.org}'`
+                : `could not acquire an Azure DevOps access token for org '${profile.org}'`, "AUTH_REQUIRED", [
+            ...(notInstalled
+                ? ["Install the Azure CLI: https://learn.microsoft.com/cli/azure/install-azure-cli"]
+                : [
+                    profile.tenant
+                        ? `Run \`az login --tenant ${profile.tenant} --scope ${ADO_RESOURCE}/.default\``
+                        : "Run `az login` (and `az account set --subscription <id>` if needed)",
+                    profile.tenant
+                        ? ""
+                        : "If the organization lives in another Entra tenant, add \"tenant\": \"<tenant-id>\" to the profile",
+                ]),
+            `Or switch the profile to a PAT: set "auth": "pat" and "patEnv": "ADO_${profile.org.toUpperCase().replace(/[^A-Z0-9]/g, "_")}_PAT"`,
+            "Run `ado-axi doctor` to re-check authentication",
+        ].filter(Boolean));
+    }
+}
+/**
+ * Spawns the Azure CLI and resolves with its stdout. Uses `cross-spawn` instead
+ * of a raw `child_process.execFile`/`spawn` call because on Windows `az` is a
+ * `.cmd` shim: Node's default (shell-less) spawn cannot execute it and fails
+ * with ENOENT, wrongly implying the CLI is missing. `cross-spawn` resolves
+ * `.cmd`/`.bat` shims correctly on Windows while still passing arguments
+ * through as an argv array (not a shell command string), so there's no
+ * shell-injection risk from argument values (e.g. `--tenant`).
+ */
+function runAz(args, signal) {
+    signal?.throwIfAborted();
+    let onAbort;
+    return new Promise((resolve, reject) => {
+        const child = spawn("az", args, { windowsHide: true });
+        let stdout = "";
+        let stderr = "";
+        let truncated = false;
+        child.stdout?.on("data", (chunk) => {
+            if (stdout.length < MAX_AZ_OUTPUT_BYTES)
+                stdout += chunk.toString();
+            else
+                truncated = true;
+        });
+        child.stderr?.on("data", (chunk) => {
+            if (stderr.length < MAX_AZ_OUTPUT_BYTES)
+                stderr += chunk.toString();
+        });
+        child.on("error", (err) => {
+            if (err.code === "ENOENT") {
+                reject(new Error("az CLI is not installed or not on PATH"));
+            }
+            else {
+                reject(err);
+            }
+        });
+        child.on("close", (code) => {
+            if (code === 0 && !truncated) {
+                resolve(stdout);
+            }
+            else if (truncated) {
+                reject(new Error("az CLI output exceeded the maximum buffer size"));
+            }
+            else {
+                reject(new Error(stderr.trim() || `az exited with code ${code}`));
+            }
+        });
+        onAbort = () => {
+            child.kill();
+            reject(signal?.reason);
+        };
+        signal?.addEventListener("abort", onAbort, { once: true });
+        if (signal?.aborted)
+            onAbort();
+    }).finally(() => {
+        if (onAbort)
+            signal?.removeEventListener("abort", onAbort);
+    });
+}
+export function clearCredentialCache() {
+    cache.clear();
+}
+//# sourceMappingURL=auth.js.map

package/dist/lib/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,aAAa,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGtC,kEAAkE;AAClE,MAAM,YAAY,GAAG,sCAAsC,CAAC;AAE5D,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAO5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAwB,EAAE,MAAoB;IACpF,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IAC7F,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAEpB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzG,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC3B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CAAC,OAAwB;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,QAAQ,CAChB,kCAAkC,OAAO,wBAAwB,OAAO,CAAC,GAAG,GAAG,EAC/E,eAAe,EACf;YACE,QAAQ,OAAO,oEAAoE;YACnF,+EAA+E;YAC/E,iDAAiD;SAClD,CACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACvF,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAwB,EAAE,MAAoB;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,SAAS,EAAE,kBAAkB,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/F,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA6B,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACvE,OAAO,EAAE,MAAM,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,CAAC,YAAY,IAAI,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/F,MAAM,IAAI,QAAQ,CAChB,YAAY;YACV,CAAC,CAAC,kDAAkD;YACpD,CAAC,CAAC,WAAW;gBACX,CAAC,CAAC,uCAAuC,OAAO,CAAC,GAAG,GAAG;gBACvD,CAAC,CAAC,2DAA2D,OAAO,CAAC,GAAG,GAAG,EAC/E,eAAe,EACf;YACE,GAAG,CAAC,YAAY;gBACd,CAAC,CAAC,CAAC,gFAAgF,CAAC;gBACpF,CAAC,CAAC;oBACE,OAAO,CAAC,MAAM;wBACZ,CAAC,CAAC,2BAA2B,OAAO,CAAC,MAAM,YAAY,YAAY,aAAa;wBAChF,CAAC,CAAC,qEAAqE;oBACzE,OAAO,CAAC,MAAM;wBACZ,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,mGAAmG;iBACxG,CAAC;YACN,wEAAwE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO;YACnI,iDAAiD;SAClD,CAAC,MAAM,CAAC,OAAO,CAAC,CAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,KAAK,CAAC,IAAc,EAAE,MAAoB;IACjD,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,OAAiC,CAAC;IACtC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,MAAM,GAAG,mBAAmB;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;;gBAC/D,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,MAAM,GAAG,mBAAmB;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC7B,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,uBAAuB,IAAI,EAAE,CAAC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,GAAG,EAAE;YACb,KAAK,CAAC,IAAI,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACd,IAAI,OAAO;YAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC"}

package/dist/lib/client.d.ts

@@ -0,0 +1,32 @@
+import type { ResolvedProfile } from "./config.js";
+import { type AdoHost } from "./adoUrl.js";
+export declare const DEFAULT_API_VERSION = "7.1";
+export type { AdoHost } from "./adoUrl.js";
+export interface RequestOptions {
+    method?: string;
+    /** Path after the org (and project) segment, e.g. `_apis/wit/workitems/42`. */
+    path: string;
+    project?: string;
+    query?: Record<string, string | number | boolean | undefined>;
+    body?: unknown;
+    apiVersion?: string;
+    contentType?: string;
+    host?: AdoHost;
+    /** Override the Accept header — build logs and file content need `text/plain`. */
+    accept?: string;
+    /** Return the raw response text instead of parsed JSON (logs, files). */
+    raw?: boolean;
+    /** Read binary content with a hard bound, including responses without Content-Length. */
+    binaryMaxBytes?: number;
+    signal?: AbortSignal;
+    /** Observe pagination headers without exposing response bodies to callers. */
+    onHeaders?: (headers: Headers) => void;
+}
+export declare function buildUrl(profile: ResolvedProfile, options: RequestOptions): string;
+export declare function request<T = unknown>(profile: ResolvedProfile, options: RequestOptions): Promise<T>;
+export interface ListResponse<T> {
+    count?: number;
+    value?: T[];
+}
+export declare function requestList<T>(profile: ResolvedProfile, options: RequestOptions): Promise<T[]>;
+//# sourceMappingURL=client.d.ts.map

package/dist/lib/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAkD,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3F,eAAO,MAAM,mBAAmB,QAAQ,CAAC;AAEzC,YAAY,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;CACxC;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAiBlF;AAED,wBAAsB,OAAO,CAAC,CAAC,GAAG,OAAO,EACvC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,CAAC,CAAC,CAqFZ;AA2ED,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;CACb;AAED,wBAAsB,WAAW,CAAC,CAAC,EACjC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,CAAC,EAAE,CAAC,CAGd"}