@kolatts/pncli 1.3.0 → 1.4.0

package/dist/cli.js

@@ -1,276 +1,36 @@
 #!/usr/bin/env node
+import {
+  getGlobalConfigPath,
+  loadConfig,
+  maskConfig,
+  setConfigValue,
+  writeGlobalConfig,
+  writeRepoConfig
+} from "./chunk-JORIICS2.js";
+import {
+  ExitCode,
+  PncliError,
+  createHttpClient,
+  fail,
+  log,
+  setGlobalOptions,
+  setGlobalUser,
+  success,
+  warn
+} from "./chunk-HWXXNMGE.js";
+import {
+  AdoCoreClient
+} from "./chunk-KT3XINLJ.js";
 
 // src/cli.ts
 import { Command } from "commander";
 import { createRequire } from "module";
 
-// src/lib/output.ts
-import fs from "fs";
-import chalk from "chalk";
-
-// src/lib/errors.ts
-var PncliError = class extends Error {
-  status;
-  url;
-  constructor(message, status = 1, url) {
-    super(message);
-    this.name = "PncliError";
-    this.status = status;
-    this.url = url;
-  }
-};
-
-// src/lib/exitCodes.ts
-var ExitCode = {
-  SUCCESS: 0,
-  GENERAL_ERROR: 1,
-  USAGE_ERROR: 2,
-  NETWORK_ERROR: 69,
-  // EX_UNAVAILABLE from sysexits.h
-  AUTH_ERROR: 77,
-  // EX_NOPERM from sysexits.h
-  CONFIG_ERROR: 78
-  // EX_CONFIG from sysexits.h
-};
-function exitCodeFromStatus(httpStatus) {
-  if (httpStatus === 401 || httpStatus === 403) return ExitCode.AUTH_ERROR;
-  if (httpStatus === 0) return ExitCode.NETWORK_ERROR;
-  return ExitCode.GENERAL_ERROR;
-}
-
-// src/lib/output.ts
-var globalOptions = { pretty: false, verbose: false };
-var globalUser = { email: void 0, userId: void 0 };
-function setGlobalOptions(opts) {
-  globalOptions = opts;
-}
-function setGlobalUser(user) {
-  globalUser = user;
-}
-function buildMeta(service, action, startTime) {
-  return {
-    service,
-    action,
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    duration_ms: Date.now() - startTime,
-    user: globalUser.email ?? globalUser.userId ? globalUser : void 0
-  };
-}
-function success(data, service, action, startTime) {
-  const envelope = {
-    ok: true,
-    data,
-    meta: buildMeta(service, action, startTime)
-  };
-  process.stdout.write(
-    (globalOptions.pretty ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope)) + "\n"
-  );
-}
-function fail(err, service, action, startTime) {
-  const errorDetail = {
-    status: err instanceof PncliError ? err.status : 1,
-    message: err instanceof Error ? err.message : String(err),
-    url: err instanceof PncliError ? err.url ?? null : null
-  };
-  const envelope = {
-    ok: false,
-    error: errorDetail,
-    meta: buildMeta(service, action, startTime)
-  };
-  const msg = globalOptions.pretty ? chalk.red("\u2717 Error: ") + errorDetail.message : null;
-  if (msg) process.stderr.write(msg + "\n");
-  const output = (globalOptions.pretty ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope)) + "\n";
-  const exitCode = err instanceof PncliError ? exitCodeFromStatus(err.status) : ExitCode.GENERAL_ERROR;
-  try {
-    fs.writeSync(process.stdout.fd, output);
-  } catch (writeErr) {
-    if (writeErr.code !== "EPIPE") throw writeErr;
-  }
-  process.exitCode = exitCode;
-  throw new PncliError(errorDetail.message, errorDetail.status);
-}
-function log(message) {
-  if (globalOptions.verbose) {
-    process.stderr.write(
-      (globalOptions.pretty ? chalk.gray("\u25B8 ") : "") + message + "\n"
-    );
-  }
-}
-function warn(message) {
-  process.stderr.write(
-    (globalOptions.pretty ? chalk.yellow("\u26A0 ") : "") + message + "\n"
-  );
-}
-
-// src/lib/config.ts
-import fs2 from "fs";
-import os from "os";
-import path from "path";
-import { execSync } from "child_process";
-var ENV_KEYS = {
-  EMAIL: "PNCLI_EMAIL",
-  USERID: "PNCLI_USERID",
-  JIRA_BASE_URL: "PNCLI_JIRA_BASE_URL",
-  JIRA_API_TOKEN: "PNCLI_JIRA_API_TOKEN",
-  BITBUCKET_BASE_URL: "PNCLI_BITBUCKET_BASE_URL",
-  BITBUCKET_PAT: "PNCLI_BITBUCKET_PAT",
-  CONFLUENCE_BASE_URL: "PNCLI_CONFLUENCE_BASE_URL",
-  CONFLUENCE_API_TOKEN: "PNCLI_CONFLUENCE_API_TOKEN",
-  ARTIFACTORY_BASE_URL: "PNCLI_ARTIFACTORY_BASE_URL",
-  ARTIFACTORY_TOKEN: "PNCLI_ARTIFACTORY_TOKEN",
-  ARTIFACTORY_REPO_NPM: "PNCLI_ARTIFACTORY_REPO_NPM",
-  ARTIFACTORY_REPO_NUGET: "PNCLI_ARTIFACTORY_REPO_NUGET",
-  ARTIFACTORY_REPO_MAVEN: "PNCLI_ARTIFACTORY_REPO_MAVEN",
-  SONAR_BASE_URL: "PNCLI_SONAR_BASE_URL",
-  SONAR_TOKEN: "PNCLI_SONAR_TOKEN",
-  SDE_BASE_URL: "PNCLI_SDE_BASE_URL",
-  SDE_TOKEN: "PNCLI_SDE_TOKEN",
-  CONFIG_PATH: "PNCLI_CONFIG_PATH"
-};
-function getGlobalConfigPath(overridePath) {
-  if (overridePath) return overridePath;
-  const envPath = process.env[ENV_KEYS.CONFIG_PATH];
-  if (envPath) return envPath;
-  return path.join(os.homedir(), ".pncli", "config.json");
-}
-function loadJsonFile(filePath) {
-  try {
-    const content = fs2.readFileSync(filePath, "utf8");
-    return JSON.parse(content);
-  } catch {
-    return null;
-  }
-}
-function getRepoRoot() {
-  try {
-    return execSync("git rev-parse --show-toplevel", { encoding: "utf8" }).trim();
-  } catch {
-    return null;
-  }
-}
-function mergeCustomFields(global, repo) {
-  const map = /* @__PURE__ */ new Map();
-  for (const f of global ?? []) map.set(f.id, f);
-  for (const f of repo ?? []) map.set(f.id, f);
-  return Array.from(map.values());
-}
-function mergeDefaults(global, repo) {
-  return {
-    jira: { ...global?.jira, ...repo?.jira },
-    bitbucket: { ...global?.bitbucket, ...repo?.bitbucket },
-    sonar: { ...global?.sonar, ...repo?.sonar },
-    sde: { ...global?.sde, ...repo?.sde }
-  };
-}
-function loadConfig(opts = {}) {
-  const globalConfigPath = getGlobalConfigPath(opts.configPath);
-  const globalConfig = loadJsonFile(globalConfigPath) ?? {};
-  const repoRoot = getRepoRoot();
-  let repoConfig = {};
-  if (repoRoot) {
-    repoConfig = loadJsonFile(path.join(repoRoot, ".pncli.json")) ?? {};
-  }
-  const mergedDefaults = mergeDefaults(globalConfig.defaults, repoConfig.defaults);
-  return {
-    user: {
-      email: process.env[ENV_KEYS.EMAIL] ?? globalConfig.user?.email,
-      userId: process.env[ENV_KEYS.USERID] ?? globalConfig.user?.userId
-    },
-    jira: {
-      baseUrl: process.env[ENV_KEYS.JIRA_BASE_URL] ?? globalConfig.jira?.baseUrl,
-      apiToken: process.env[ENV_KEYS.JIRA_API_TOKEN] ?? globalConfig.jira?.apiToken,
-      customFields: mergeCustomFields(globalConfig.jira?.customFields, repoConfig.jira?.customFields)
-    },
-    bitbucket: {
-      baseUrl: process.env[ENV_KEYS.BITBUCKET_BASE_URL] ?? globalConfig.bitbucket?.baseUrl,
-      pat: process.env[ENV_KEYS.BITBUCKET_PAT] ?? globalConfig.bitbucket?.pat
-    },
-    confluence: {
-      baseUrl: process.env[ENV_KEYS.CONFLUENCE_BASE_URL] ?? globalConfig.confluence?.baseUrl,
-      apiToken: process.env[ENV_KEYS.CONFLUENCE_API_TOKEN] ?? globalConfig.confluence?.apiToken ?? process.env[ENV_KEYS.JIRA_API_TOKEN] ?? globalConfig.jira?.apiToken
-    },
-    artifactory: {
-      baseUrl: process.env[ENV_KEYS.ARTIFACTORY_BASE_URL] ?? globalConfig.artifactory?.baseUrl,
-      token: process.env[ENV_KEYS.ARTIFACTORY_TOKEN] ?? globalConfig.artifactory?.token,
-      npmRepo: process.env[ENV_KEYS.ARTIFACTORY_REPO_NPM] ?? globalConfig.artifactory?.npmRepo,
-      nugetRepo: process.env[ENV_KEYS.ARTIFACTORY_REPO_NUGET] ?? globalConfig.artifactory?.nugetRepo,
-      mavenRepo: process.env[ENV_KEYS.ARTIFACTORY_REPO_MAVEN] ?? globalConfig.artifactory?.mavenRepo
-    },
-    sonar: {
-      baseUrl: process.env[ENV_KEYS.SONAR_BASE_URL] ?? globalConfig.sonar?.baseUrl,
-      token: process.env[ENV_KEYS.SONAR_TOKEN] ?? globalConfig.sonar?.token
-    },
-    sde: {
-      baseUrl: process.env[ENV_KEYS.SDE_BASE_URL] ?? globalConfig.sde?.baseUrl,
-      token: process.env[ENV_KEYS.SDE_TOKEN] ?? globalConfig.sde?.token
-    },
-    defaults: mergedDefaults
-  };
-}
-function writeGlobalConfig(config, configPath) {
-  const filePath = getGlobalConfigPath(configPath);
-  const dir = path.dirname(filePath);
-  if (!fs2.existsSync(dir)) {
-    fs2.mkdirSync(dir, { recursive: true });
-  }
-  fs2.writeFileSync(filePath, JSON.stringify(config, null, 2) + "\n", "utf8");
-}
-function writeRepoConfig(config) {
-  const repoRoot = getRepoRoot();
-  const targetDir = repoRoot ?? process.cwd();
-  fs2.writeFileSync(path.join(targetDir, ".pncli.json"), JSON.stringify(config, null, 2) + "\n", "utf8");
-}
-function setConfigValue(key, value, configPath) {
-  const filePath = getGlobalConfigPath(configPath);
-  const existing = loadJsonFile(filePath) ?? {};
-  const parts = key.split(".");
-  let current = existing;
-  for (let i = 0; i < parts.length - 1; i++) {
-    const part = parts[i];
-    if (typeof current[part] !== "object" || current[part] === null) {
-      current[part] = {};
-    }
-    current = current[part];
-  }
-  current[parts[parts.length - 1]] = value;
-  writeGlobalConfig(existing, configPath);
-}
-function maskConfig(config) {
-  return {
-    ...config,
-    jira: {
-      ...config.jira,
-      apiToken: config.jira.apiToken ? "***" : void 0,
-      customFields: config.jira.customFields
-    },
-    bitbucket: {
-      ...config.bitbucket,
-      pat: config.bitbucket.pat ? "***" : void 0
-    },
-    confluence: {
-      ...config.confluence,
-      apiToken: config.confluence.apiToken ? "***" : void 0
-    },
-    artifactory: {
-      ...config.artifactory,
-      token: config.artifactory.token ? "***" : void 0
-    },
-    sonar: {
-      ...config.sonar,
-      token: config.sonar.token ? "***" : void 0
-    },
-    sde: {
-      ...config.sde,
-      token: config.sde.token ? "***" : void 0
-    }
-  };
-}
-
 // src/services/git/client.ts
-import { execSync as execSync2, execFileSync } from "child_process";
+import { execSync, execFileSync } from "child_process";
 var DIFF_LINE_LIMIT = 5e3;
 function exec(cmd, cwd) {
-  return execSync2(cmd, { encoding: "utf8", cwd }).trim();
+  return execSync(cmd, { encoding: "utf8", cwd }).trim();
 }
 function getStatus(root) {
   const output = exec("git status --porcelain", root);
@@ -402,17 +162,17 @@ function getBranches(root) {
 }
 
 // src/lib/git-context.ts
-import { execSync as execSync3 } from "child_process";
-function getRepoRoot2() {
+import { execSync as execSync2 } from "child_process";
+function getRepoRoot() {
   try {
-    return execSync3("git rev-parse --show-toplevel", { encoding: "utf8" }).trim();
+    return execSync2("git rev-parse --show-toplevel", { encoding: "utf8" }).trim();
   } catch {
     return null;
   }
 }
 function getCurrentBranch(repoRoot) {
   try {
-    return execSync3("git rev-parse --abbrev-ref HEAD", {
+    return execSync2("git rev-parse --abbrev-ref HEAD", {
       encoding: "utf8",
       cwd: repoRoot
     }).trim();
@@ -439,16 +199,59 @@ function parseRemote(remoteUrl, bitbucketBaseUrl) {
   }
   return null;
 }
+function parseAdoRemote(remoteUrl, adoBaseUrl) {
+  if (!adoBaseUrl) return null;
+  let baseHostname;
+  try {
+    const normalizedBase = /^https?:\/\//.test(adoBaseUrl) ? adoBaseUrl : `https://${adoBaseUrl}`;
+    baseHostname = new URL(normalizedBase).hostname.toLowerCase();
+  } catch {
+    baseHostname = adoBaseUrl.replace(/\/$/, "").replace(/^https?:\/\//, "").split(/[:/]/)[0].toLowerCase();
+  }
+  let path5 = remoteUrl;
+  let remoteHostname = "";
+  const sshProtoMatch = path5.match(/^ssh:\/\/[^@]*@?([^/:]+)(?::\d+)?(.*)/);
+  if (sshProtoMatch) {
+    remoteHostname = sshProtoMatch[1].toLowerCase();
+    path5 = sshProtoMatch[2];
+  } else {
+    const gitAtMatch = path5.match(/^git@([^:]+)(?::\d+)?:(.*)/);
+    if (gitAtMatch) {
+      remoteHostname = gitAtMatch[1].toLowerCase();
+      path5 = "/" + gitAtMatch[2];
+    } else {
+      const httpsMatch = path5.match(/^https?:\/\/([^/:]+)(?::\d+)?(.*)/);
+      if (httpsMatch) {
+        remoteHostname = httpsMatch[1].toLowerCase();
+        path5 = httpsMatch[2];
+      }
+    }
+  }
+  if (!remoteHostname || remoteHostname !== baseHostname) return null;
+  path5 = path5.replace(/\.git$/, "");
+  const gitIdx = path5.indexOf("/_git/");
+  const sshIdx = path5.indexOf("/_ssh/");
+  const markerIdx = gitIdx !== -1 ? gitIdx : sshIdx;
+  if (markerIdx === -1) return null;
+  const repo = path5.slice(markerIdx + 6);
+  if (!repo) return null;
+  const before = path5.slice(1, markerIdx);
+  const parts = before.split("/").filter(Boolean);
+  if (parts.length < 2) return null;
+  const project = parts[parts.length - 1];
+  const collection = parts[parts.length - 2];
+  return { collection, project, repo };
+}
 function getRemoteUrls(repoRoot) {
   try {
-    const output = execSync3("git remote -v", { encoding: "utf8", cwd: repoRoot });
+    const output = execSync2("git remote -v", { encoding: "utf8", cwd: repoRoot });
     return output.split("\n").filter((line) => line.includes("(fetch)")).map((line) => line.split("	")[1]?.split(" ")[0] ?? "").filter(Boolean);
   } catch {
     return [];
   }
 }
 function getGitContext(config) {
-  const root = getRepoRoot2();
+  const root = getRepoRoot();
   if (!root) return null;
   const branch = getCurrentBranch(root) ?? "unknown";
   const remoteUrls = getRemoteUrls(root);
@@ -462,320 +265,15 @@ function getGitContext(config) {
       break;
     }
   }
-  return { root, branch, project, repo };
-}
-
-// src/lib/http.ts
-import fs3 from "fs";
-function buildUrl(base, path6, params) {
-  const url = new URL(path6, base.endsWith("/") ? base : base + "/");
-  if (params) {
-    for (const [key, val] of Object.entries(params)) {
-      if (val !== void 0) {
-        url.searchParams.set(key, String(val));
-      }
-    }
-  }
-  return url.toString();
-}
-async function fetchWithTimeout(url, init, timeoutMs) {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), timeoutMs);
-  try {
-    return await fetch(url, { ...init, signal: controller.signal });
-  } finally {
-    clearTimeout(timer);
-  }
-}
-async function request(url, init, timeoutMs) {
-  let lastError;
-  for (let attempt = 0; attempt < 3; attempt++) {
-    let response;
-    try {
-      response = await fetchWithTimeout(url, init, timeoutMs);
-    } catch (err) {
-      throw new PncliError(
-        `Request failed: ${err instanceof Error ? err.message : String(err)}`,
-        0,
-        url
-      );
-    }
-    if (response.status === 429) {
-      const retryAfter = response.headers.get("Retry-After");
-      const waitMs = retryAfter ? parseInt(retryAfter, 10) * 1e3 : (attempt + 1) * 1e3;
-      log(`Rate limited. Retrying after ${waitMs}ms...`);
-      await new Promise((resolve) => setTimeout(resolve, waitMs));
-      lastError = new PncliError("Rate limited", 429, url);
-      continue;
-    }
-    if (!response.ok) {
-      let message = `HTTP ${response.status} ${response.statusText}`;
-      try {
-        const body = await response.text();
-        const parsed = JSON.parse(body);
-        const parts = [];
-        if (Array.isArray(parsed.errorMessages)) {
-          parts.push(...parsed.errorMessages.filter(Boolean));
-        }
-        if (parsed.errors && typeof parsed.errors === "object" && !Array.isArray(parsed.errors)) {
-          for (const [field, msg] of Object.entries(parsed.errors)) {
-            parts.push(`${field}: ${msg}`);
-          }
-        }
-        if (Array.isArray(parsed.errors)) {
-          for (const e of parsed.errors) {
-            if (e?.message) parts.push(e.message);
-            else if (e?.msg) parts.push(e.msg);
-          }
-        }
-        if (parts.length === 0 && parsed.message) {
-          parts.push(String(parsed.message));
-        }
-        if (parts.length > 0) message = parts.join("; ");
-      } catch {
-      }
-      throw new PncliError(message, response.status, url);
-    }
-    if (response.status === 204) {
-      return void 0;
-    }
-    const text = await response.text();
-    if (!text) return void 0;
-    return JSON.parse(text);
-  }
-  throw lastError ?? new PncliError("Request failed after retries", 1, url);
-}
-var HttpClient = class {
-  config;
-  dryRun;
-  constructor(config, dryRun = false) {
-    this.config = config;
-    this.dryRun = dryRun;
-  }
-  jiraHeaders() {
-    const { apiToken } = this.config.jira;
-    if (!apiToken) throw new PncliError("Jira credentials not configured. Run: pncli config init");
-    return {
-      "Authorization": `Bearer ${apiToken}`,
-      "Content-Type": "application/json",
-      "Accept": "application/json",
-      "Connection": "close"
-    };
-  }
-  bitbucketHeaders() {
-    const { pat } = this.config.bitbucket;
-    if (!pat) throw new PncliError("Bitbucket credentials not configured. Run: pncli config init");
-    return {
-      "Authorization": `Bearer ${pat}`,
-      "Content-Type": "application/json",
-      "Accept": "application/json",
-      "Connection": "close"
-    };
-  }
-  async jira(path6, opts = {}) {
-    const baseUrl = this.config.jira.baseUrl;
-    if (!baseUrl) throw new PncliError("Jira baseUrl not configured. Run: pncli config init");
-    const url = buildUrl(baseUrl, path6, opts.params);
-    const headers = this.jiraHeaders();
-    const init = {
-      method: opts.method ?? "GET",
-      headers,
-      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
-    };
-    if (this.dryRun) {
-      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
-      const msg = `DRY RUN: ${init.method} ${url}
-Headers: ${JSON.stringify(safeHeaders, null, 2)}
-` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
-` : "");
-      fs3.writeSync(process.stderr.fd, msg);
-      process.exitCode = ExitCode.SUCCESS;
-      throw new PncliError("dry-run", 0);
-    }
-    return request(url, init, opts.timeoutMs ?? 3e4);
-  }
-  async bitbucket(path6, opts = {}) {
-    const baseUrl = this.config.bitbucket.baseUrl;
-    if (!baseUrl) throw new PncliError("Bitbucket baseUrl not configured. Run: pncli config init");
-    const url = buildUrl(baseUrl, path6, opts.params);
-    const headers = this.bitbucketHeaders();
-    const init = {
-      method: opts.method ?? "GET",
-      headers,
-      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
-    };
-    if (this.dryRun) {
-      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
-      const msg = `DRY RUN: ${init.method} ${url}
-Headers: ${JSON.stringify(safeHeaders, null, 2)}
-` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
-` : "");
-      fs3.writeSync(process.stderr.fd, msg);
-      process.exitCode = ExitCode.SUCCESS;
-      throw new PncliError("dry-run", 0);
-    }
-    return request(url, init, opts.timeoutMs ?? 3e4);
-  }
-  confluenceHeaders() {
-    const { apiToken } = this.config.confluence;
-    if (!apiToken) throw new PncliError("Confluence credentials not configured. Run: pncli config init");
-    return {
-      "Authorization": `Bearer ${apiToken}`,
-      "Content-Type": "application/json",
-      "Accept": "application/json",
-      "Connection": "close"
-    };
-  }
-  async confluence(path6, opts = {}) {
-    const baseUrl = this.config.confluence.baseUrl;
-    if (!baseUrl) throw new PncliError("Confluence baseUrl not configured. Run: pncli config init");
-    const url = buildUrl(baseUrl, path6, opts.params);
-    const headers = this.confluenceHeaders();
-    const init = {
-      method: opts.method ?? "GET",
-      headers,
-      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
-    };
-    if (this.dryRun) {
-      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
-      const msg = `DRY RUN: ${init.method} ${url}
-Headers: ${JSON.stringify(safeHeaders, null, 2)}
-` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
-` : "");
-      fs3.writeSync(process.stderr.fd, msg);
-      process.exitCode = ExitCode.SUCCESS;
-      throw new PncliError("dry-run", 0);
-    }
-    return request(url, init, opts.timeoutMs ?? 3e4);
-  }
-  sdeHeaders() {
-    const { token } = this.config.sde;
-    if (!token) throw new PncliError("SDElements credentials not configured. Run: pncli config init");
-    return {
-      "Authorization": `Token ${token}`,
-      "Content-Type": "application/json",
-      "Accept": "application/json",
-      "Connection": "close"
-    };
-  }
-  async sde(path6, opts = {}) {
-    const baseUrl = this.config.sde.baseUrl;
-    if (!baseUrl) throw new PncliError("SDElements baseUrl not configured. Run: pncli config init");
-    const url = buildUrl(baseUrl, path6, opts.params);
-    const headers = this.sdeHeaders();
-    const init = {
-      method: opts.method ?? "GET",
-      headers,
-      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
-    };
-    if (this.dryRun) {
-      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
-      const msg = `DRY RUN: ${init.method} ${url}
-Headers: ${JSON.stringify(safeHeaders, null, 2)}
-` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
-` : "");
-      fs3.writeSync(process.stderr.fd, msg);
-      process.exitCode = ExitCode.SUCCESS;
-      throw new PncliError("dry-run", 0);
-    }
-    return request(url, init, opts.timeoutMs ?? 3e4);
-  }
-  async sdePaginate(fetchPage) {
-    const results = [];
-    let page = 1;
-    const pageSize = 100;
-    while (true) {
-      const response = await fetchPage(page, pageSize);
-      results.push(...response.results);
-      if (results.length >= response.count || response.results.length === 0) break;
-      page++;
+  let adoContext = null;
+  for (const url of remoteUrls) {
+    const parsed = parseAdoRemote(url, config.ado.baseUrl);
+    if (parsed) {
+      adoContext = parsed;
+      break;
     }
-    return results;
-  }
-  sonarHeaders() {
-    const { token } = this.config.sonar;
-    if (!token) throw new PncliError("SonarQube credentials not configured. Run: pncli config init");
-    return {
-      "Authorization": `Bearer ${token}`,
-      "Content-Type": "application/json",
-      "Accept": "application/json",
-      "Connection": "close"
-    };
-  }
-  async sonar(path6, opts = {}) {
-    const baseUrl = this.config.sonar.baseUrl;
-    if (!baseUrl) throw new PncliError("SonarQube baseUrl not configured. Run: pncli config init");
-    const url = buildUrl(baseUrl, path6, opts.params);
-    const headers = this.sonarHeaders();
-    const init = {
-      method: opts.method ?? "GET",
-      headers,
-      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
-    };
-    if (this.dryRun) {
-      const safeHeaders = { ...headers, Authorization: "[REDACTED]" };
-      const msg = `DRY RUN: ${init.method} ${url}
-Headers: ${JSON.stringify(safeHeaders, null, 2)}
-` + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}
-` : "");
-      fs3.writeSync(process.stderr.fd, msg);
-      process.exitCode = ExitCode.SUCCESS;
-      throw new PncliError("dry-run", 0);
-    }
-    return request(url, init, opts.timeoutMs ?? 3e4);
-  }
-  async sonarPaginate(fetchPage) {
-    const results = [];
-    let page = 1;
-    const pageSize = 500;
-    while (true) {
-      const response = await fetchPage(page, pageSize);
-      results.push(...response.items);
-      if (results.length >= response.total || response.items.length === 0) break;
-      page++;
-    }
-    return results;
-  }
-  async confluencePaginate(fetchPage) {
-    const results = [];
-    let start = 0;
-    const limit = 25;
-    while (true) {
-      const page = await fetchPage(start, limit);
-      results.push(...page.results);
-      if (!page._links.next) break;
-      start += page.size;
-    }
-    return results;
-  }
-  async paginate(fetchPage) {
-    const results = [];
-    let start = 0;
-    const limit = 100;
-    while (true) {
-      const page = await fetchPage(start, limit);
-      results.push(...page.values);
-      if (page.isLastPage) break;
-      start = page.nextPageStart ?? start + limit;
-    }
-    return results;
-  }
-  async jiraPaginate(fetchPage) {
-    const results = [];
-    let startAt = 0;
-    const maxResults = 100;
-    while (true) {
-      const page = await fetchPage(startAt, maxResults);
-      const items = page.issues ?? page.values ?? [];
-      results.push(...items);
-      startAt += items.length;
-      if (startAt >= page.total || items.length === 0) break;
-    }
-    return results;
   }
-};
-function createHttpClient(config, dryRun = false) {
-  return new HttpClient(config, dryRun);
+  return { root, branch, project, repo, ado: adoContext };
 }
 
 // src/services/bitbucket/client.ts
@@ -860,14 +358,29 @@ var BitbucketClient = class {
       { method: "POST", params: { version } }
     );
   }
-  async listComments(project, repo, prId) {
+  async listComments(project, repo, prId, opts = {}) {
+    const { withReplies = true, inlineOnly = false, generalOnly = false } = opts;
     const activities = await this.http.paginate(
       (start, limit) => this.http.bitbucket(
         `${API}/projects/${project}/repos/${repo}/pull-requests/${prId}/activities`,
         { params: { start, limit } }
       )
     );
-    return activities.filter((a) => a.action === "COMMENTED" && a.comment).map((a) => a.comment);
+    const topLevel = activities.filter((a) => a.action === "COMMENTED" && a.comment).map((a) => a.comment);
+    if (!withReplies) {
+      return topLevel.filter((c) => !inlineOnly || !!c.anchor).filter((c) => !generalOnly || !c.anchor);
+    }
+    function flatten(comment, parentId) {
+      const node = {
+        ...comment,
+        comments: void 0,
+        ...parentId !== void 0 ? { parentId } : {}
+      };
+      const replies = (comment.comments ?? []).flatMap((c) => flatten(c, comment.id));
+      return [node, ...replies];
+    }
+    const flat = topLevel.flatMap((c) => flatten(c));
+    return flat.filter((c) => !inlineOnly || !!c.anchor).filter((c) => !generalOnly || !c.anchor).sort((a, b) => a.createdDate - b.createdDate);
   }
   async addComment(project, repo, prId, text) {
     return this.http.bitbucket(
@@ -968,7 +481,7 @@ var BitbucketClient = class {
 
 // src/services/git/commands.ts
 function requireRepoRoot() {
-  const root = getRepoRoot2();
+  const root = getRepoRoot();
   if (!root) throw new PncliError("Not a git repository", 1);
   return root;
 }
@@ -1489,11 +1002,15 @@ function registerBitbucketCommands(program2) {
       fail(err, "bitbucket", "decline-pr", start);
     }
   });
-  bb.command("list-comments").description("List comments on a pull request").requiredOption("--pr <pr-id>", "Pull request ID").action(async (opts) => {
+  bb.command("list-comments").description("List comments on a pull request (includes threaded replies by default)").requiredOption("--pr <pr-id>", "Pull request ID").option("--no-with-replies", "Exclude replies; return top-level comments only").option("--inline-only", "Return only inline file comments").option("--general-only", "Return only general (non-inline) PR comments").action(async (opts) => {
     const start = Date.now();
     try {
       const { client, project, repo } = getClient2(program2);
-      const data = await client.listComments(project, repo, parseInt(opts.pr, 10));
+      const data = await client.listComments(project, repo, parseInt(opts.pr, 10), {
+        withReplies: opts.withReplies,
+        inlineOnly: opts.inlineOnly,
+        generalOnly: opts.generalOnly
+      });
       success(data, "bitbucket", "list-comments", start);
     } catch (err) {
       fail(err, "bitbucket", "list-comments", start);
@@ -2522,24 +2039,24 @@ function registerSdeCommands(program2) {
 }
 
 // src/services/deps/parsers/index.ts
-import fs4 from "fs";
-import path5 from "path";
-import { execSync as execSync4, execFileSync as execFileSync2 } from "child_process";
+import fs from "fs";
+import path4 from "path";
+import { execSync as execSync3, execFileSync as execFileSync2 } from "child_process";
 
 // src/services/deps/parsers/npm.ts
-import path2 from "path";
+import path from "path";
 function findNpmManifests(files) {
   const lockFiles = new Set(
     files.filter((f) => {
-      const base = path2.basename(f);
+      const base = path.basename(f);
       return base === "package-lock.json" || base === "yarn.lock" || base === "pnpm-lock.yaml";
     })
   );
   const manifests = [];
   for (const file of files) {
-    if (path2.basename(file) !== "package.json") continue;
+    if (path.basename(file) !== "package.json") continue;
     if (file.split("/").includes("node_modules")) continue;
-    const dir = path2.dirname(file);
+    const dir = path.dirname(file);
     let lockFile;
     for (const lf of ["package-lock.json", "yarn.lock", "pnpm-lock.yaml"]) {
       const candidate = dir === "." ? lf : `${dir}/${lf}`;
@@ -2554,7 +2071,7 @@ function findNpmManifests(files) {
 }
 function parseNpmPackages(content, manifest, opts, lockContent) {
   if (lockContent && manifest.lockFile) {
-    const base = path2.basename(manifest.lockFile);
+    const base = path.basename(manifest.lockFile);
     if (base === "package-lock.json") {
       const pkgs = parsePackageLock(lockContent, manifest.lockFile, opts);
       if (pkgs.length > 0) return pkgs;
@@ -2702,26 +2219,26 @@ function parsePnpmLock(content, lockFilePath, opts, packageJsonContent) {
 }
 
 // src/services/deps/parsers/nuget.ts
-import path3 from "path";
+import path2 from "path";
 var PROJ_EXTENSIONS = /* @__PURE__ */ new Set([".csproj", ".fsproj", ".vbproj"]);
 function findNugetManifests(files) {
   const lockFiles = /* @__PURE__ */ new Map();
   for (const f of files) {
-    if (path3.basename(f) === "packages.lock.json") {
-      lockFiles.set(path3.dirname(f), f);
+    if (path2.basename(f) === "packages.lock.json") {
+      lockFiles.set(path2.dirname(f), f);
     }
   }
   const manifests = [];
   for (const file of files) {
-    const base = path3.basename(file);
-    const ext = path3.extname(file);
+    const base = path2.basename(file);
+    const ext = path2.extname(file);
     if (PROJ_EXTENSIONS.has(ext) || base === "packages.config") {
-      const dir = path3.dirname(file);
+      const dir = path2.dirname(file);
       const lockFile = lockFiles.get(dir);
       manifests.push({ file, ecosystem: "nuget", lockFile });
     }
     if (base === "Directory.Packages.props") {
-      const dir = path3.dirname(file);
+      const dir = path2.dirname(file);
       manifests.push({ file, ecosystem: "nuget", lockFile: lockFiles.get(dir) });
     }
   }
@@ -2740,7 +2257,7 @@ function findNugetManifests(files) {
   return deduped;
 }
 function parseNugetPackages(content, manifest, opts, lockContent, propsContent) {
-  const base = path3.basename(manifest.file);
+  const base = path2.basename(manifest.file);
   if (lockContent) {
     return parsePackagesLock(lockContent, manifest.lockFile ?? manifest.file, opts);
   }
@@ -2861,14 +2378,14 @@ function parsePackagesLock(content, filePath, opts) {
 }
 
 // src/services/deps/parsers/maven.ts
-import path4 from "path";
+import path3 from "path";
 function findMavenManifests(files) {
-  const lockFiles = new Set(files.filter((f) => path4.basename(f) === "gradle.lockfile"));
+  const lockFiles = new Set(files.filter((f) => path3.basename(f) === "gradle.lockfile"));
   const manifests = [];
   for (const file of files) {
-    const base = path4.basename(file);
+    const base = path3.basename(file);
     if (base === "pom.xml" || base === "build.gradle" || base === "build.gradle.kts") {
-      const dir = path4.dirname(file);
+      const dir = path3.dirname(file);
       const lockCandidate = dir === "." ? "gradle.lockfile" : `${dir}/gradle.lockfile`;
       const lockFile = lockFiles.has(lockCandidate) ? lockCandidate : void 0;
       manifests.push({ file, ecosystem: "maven", lockFile });
@@ -2877,7 +2394,7 @@ function findMavenManifests(files) {
   return manifests;
 }
 function parseMavenPackages(content, manifest, opts, lockContent) {
-  const base = path4.basename(manifest.file);
+  const base = path3.basename(manifest.file);
   if (lockContent && manifest.lockFile) {
     return parseGradleLock(lockContent, manifest.lockFile, opts);
   }
@@ -3026,7 +2543,7 @@ function parseGradleLock(content, filePath, opts) {
 // src/services/deps/parsers/index.ts
 function getRepoFiles(repoRoot) {
   try {
-    const out = execSync4("git ls-files --cached --others --exclude-standard", {
+    const out = execSync3("git ls-files --cached --others --exclude-standard", {
       encoding: "utf8",
       cwd: repoRoot,
       maxBuffer: 10 * 1024 * 1024
@@ -3038,7 +2555,7 @@ function getRepoFiles(repoRoot) {
 }
 function readFile(repoRoot, relPath) {
   try {
-    return fs4.readFileSync(path5.join(repoRoot, relPath), "utf8");
+    return fs.readFileSync(path4.join(repoRoot, relPath), "utf8");
   } catch {
     return null;
   }
@@ -3056,13 +2573,13 @@ function readFileAtRef(repoRoot, ref, relPath) {
   }
 }
 function findPropsContent(manifestFile, readFn) {
-  let dir = path5.dirname(manifestFile);
+  let dir = path4.dirname(manifestFile);
   for (let depth = 0; depth < 10; depth++) {
     const candidate = dir === "." ? "Directory.Packages.props" : `${dir}/Directory.Packages.props`;
     const content = readFn(candidate);
     if (content) return content;
     if (dir === ".") break;
-    dir = path5.dirname(dir);
+    dir = path4.dirname(dir);
   }
   return null;
 }
@@ -3149,7 +2666,7 @@ function buildScanData(manifests, packages) {
 // src/services/deps/scan.ts
 function runScan(config, opts) {
   void config;
-  const repoRoot = getRepoRoot2();
+  const repoRoot = getRepoRoot();
   if (!repoRoot) {
     throw new PncliError("Not inside a git repository. deps commands require a git repo root.", 1);
   }
@@ -3196,7 +2713,7 @@ function isDowngrade(from, to) {
 // src/services/deps/diff.ts
 function runDiff(config, from, to, opts) {
   void config;
-  const repoRoot = getRepoRoot2();
+  const repoRoot = getRepoRoot();
   if (!repoRoot) {
     throw new PncliError("Not inside a git repository.", 1);
   }
@@ -3252,7 +2769,7 @@ var OSV_ECOSYSTEM = {
   nuget: "NuGet",
   maven: "Maven"
 };
-async function fetchWithTimeout2(url, init) {
+async function fetchWithTimeout(url, init) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
   try {
@@ -3263,7 +2780,7 @@ async function fetchWithTimeout2(url, init) {
 }
 async function checkOsvConnectivity() {
   try {
-    const res = await fetchWithTimeout2(`${OSV_URL}/v1/querybatch`, {
+    const res = await fetchWithTimeout(`${OSV_URL}/v1/querybatch`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ queries: [] })
@@ -3335,7 +2852,7 @@ function mapVuln(vuln, pkg2) {
   };
 }
 async function queryBatch(queries, packages) {
-  const res = await fetchWithTimeout2(`${OSV_URL}/v1/querybatch`, {
+  const res = await fetchWithTimeout(`${OSV_URL}/v1/querybatch`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ queries })
@@ -3377,7 +2894,7 @@ async function checkPackagesForVulns(packages) {
 
 // src/services/deps/clients/artifactory.ts
 var TIMEOUT_MS2 = 15e3;
-async function fetchWithTimeout3(url, token) {
+async function fetchWithTimeout2(url, token) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), TIMEOUT_MS2);
   try {
@@ -3415,7 +2932,7 @@ async function checkArtifactoryConnectivity(config) {
     };
   }
   try {
-    const res = await fetchWithTimeout3(`${config.baseUrl}/api/system/ping`, config.token);
+    const res = await fetchWithTimeout2(`${config.baseUrl}/api/system/ping`, config.token);
     if (res.status === 401 || res.status === 403) {
       return {
         reachable: true,
@@ -3465,7 +2982,7 @@ function repoForEcosystem(config, eco) {
 async function getLatestNpm(baseUrl, token, repoName, packageName) {
   try {
     const encoded = packageName.startsWith("@") ? packageName.replace("/", "%2F") : packageName;
-    const res = await fetchWithTimeout3(`${baseUrl}/api/npm/${repoName}/${encoded}`, token);
+    const res = await fetchWithTimeout2(`${baseUrl}/api/npm/${repoName}/${encoded}`, token);
     if (!res.ok) return null;
     const data = await res.json();
     return data["dist-tags"]?.latest ?? null;
@@ -3476,7 +2993,7 @@ async function getLatestNpm(baseUrl, token, repoName, packageName) {
 async function getLatestNuget(baseUrl, token, repoName, packageName) {
   try {
     const lower = packageName.toLowerCase();
-    const res = await fetchWithTimeout3(
+    const res = await fetchWithTimeout2(
       `${baseUrl}/api/nuget/v3/${repoName}/flatcontainer/${lower}/index.json`,
       token
     );
@@ -3492,7 +3009,7 @@ async function getLatestMaven(baseUrl, token, repoName, packageName) {
   const [groupId, artifactId] = packageName.split(":");
   if (!groupId || !artifactId) return null;
   try {
-    const res = await fetchWithTimeout3(
+    const res = await fetchWithTimeout2(
       `${baseUrl}/api/search/latestVersion?g=${encodeURIComponent(groupId)}&a=${encodeURIComponent(artifactId)}&repos=${repoName}`,
       token
     );
@@ -3542,7 +3059,7 @@ async function getOutdatedPackages(packages, config, filterType) {
 async function getLicenseNpm(baseUrl, token, repoName, packageName) {
   try {
     const encoded = packageName.startsWith("@") ? packageName.replace("/", "%2F") : packageName;
-    const res = await fetchWithTimeout3(`${baseUrl}/api/npm/${repoName}/${encoded}`, token);
+    const res = await fetchWithTimeout2(`${baseUrl}/api/npm/${repoName}/${encoded}`, token);
     if (!res.ok) return null;
     const data = await res.json();
     if (typeof data.license === "string") return data.license;
@@ -3555,7 +3072,7 @@ async function getLicenseNpm(baseUrl, token, repoName, packageName) {
 async function getLicenseNuget(baseUrl, token, repoName, packageName, version) {
   try {
     const lower = packageName.toLowerCase();
-    const res = await fetchWithTimeout3(
+    const res = await fetchWithTimeout2(
       `${baseUrl}/api/nuget/v3/${repoName}/registration/${lower}/${version}.json`,
       token
     );
@@ -3651,7 +3168,7 @@ async function buildConnectivityData(config) {
 
 // src/services/deps/frisk.ts
 async function runFrisk(config, opts) {
-  const repoRoot = getRepoRoot2();
+  const repoRoot = getRepoRoot();
   if (!repoRoot) {
     throw new PncliError("Not inside a git repository.", 1);
   }
@@ -3681,7 +3198,7 @@ async function runFrisk(config, opts) {
 
 // src/services/deps/outdated.ts
 async function runOutdated(config, opts, filterType) {
-  const repoRoot = getRepoRoot2();
+  const repoRoot = getRepoRoot();
   if (!repoRoot) {
     throw new PncliError("Not inside a git repository.", 1);
   }
@@ -3713,7 +3230,7 @@ async function runOutdated(config, opts, filterType) {
 
 // src/services/deps/license-check.ts
 async function runLicenseCheck(config, opts) {
-  const repoRoot = getRepoRoot2();
+  const repoRoot = getRepoRoot();
   if (!repoRoot) {
     throw new PncliError("Not inside a git repository.", 1);
   }
@@ -3843,7 +3360,144 @@ function registerDepsCommands(program2) {
 
 // src/services/config/commands.ts
 import { input, password, confirm } from "@inquirer/prompts";
-import fs5 from "fs";
+
+// src/services/ado/client/work.ts
+var API6 = "7.1";
+var API_PREVIEW = "7.1-preview.4";
+var AdoWorkClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async getWorkItem(collection, id) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/_apis/wit/workitems/${id}?api-version=${API6}&$expand=all`
+    );
+  }
+  async createWorkItem(collection, project, type, patch) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/wit/workitems/${encodeURIComponent("$" + type)}?api-version=${API6}`,
+      { method: "POST", body: patch, headers: { "Content-Type": "application/json-patch+json" } }
+    );
+  }
+  async updateWorkItem(collection, id, patch) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/_apis/wit/workitems/${id}?api-version=${API6}`,
+      { method: "PATCH", body: patch, headers: { "Content-Type": "application/json-patch+json" } }
+    );
+  }
+  async queryWiql(collection, project, wiql) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/wit/wiql?api-version=${API6}`,
+      { method: "POST", body: { query: wiql } }
+    );
+  }
+  async listComments(collection, project, workItemId) {
+    const result = await this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/wit/workItems/${workItemId}/comments?api-version=${API_PREVIEW}`
+    );
+    return result.value ?? [];
+  }
+  async addComment(collection, project, workItemId, text) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/wit/workItems/${workItemId}/comments?api-version=${API_PREVIEW}`,
+      { method: "POST", body: { text } }
+    );
+  }
+  async listWorkItemTypes(collection, project) {
+    const result = await this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/wit/workitemtypes?api-version=${API6}`
+    );
+    return result.value ?? [];
+  }
+  async listTypeStates(collection, project, type) {
+    const result = await this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/wit/workitemtypes/${encodeURIComponent(type)}/states?api-version=${API6}`
+    );
+    return result.value ?? [];
+  }
+  async listFields(collection, project) {
+    const scope = project ? `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}` : `/${encodeURIComponent(collection)}`;
+    const result = await this.http.ado(
+      `${scope}/_apis/wit/fields?api-version=${API6}`
+    );
+    return result.value ?? [];
+  }
+  async listTypeFields(collection, project, type) {
+    const result = await this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/wit/workitemtypes/${encodeURIComponent(type)}/fields?api-version=${API6}`
+    );
+    return result.value ?? [];
+  }
+};
+
+// src/services/ado/discovery.ts
+async function discoverFields(client, collection, project) {
+  const fields = await client.listFields(collection, project);
+  return fields.map(toFieldMeta);
+}
+async function discoverTypeFields(client, collection, project, type) {
+  const fields = await client.listTypeFields(collection, project, type);
+  return fields.map(toFieldMeta);
+}
+function toFieldMeta(f) {
+  return {
+    referenceName: f.referenceName,
+    name: f.name,
+    type: f.type,
+    readOnly: f.readOnly,
+    ...f.picklistId ? { picklistId: f.picklistId } : {}
+  };
+}
+async function discoverTypes(client, collection, project) {
+  const types = await client.listWorkItemTypes(collection, project);
+  const result = [];
+  for (const t of types) {
+    const states = await client.listTypeStates(collection, project, t.name);
+    const requiredFields = (t.fields ?? []).filter((f) => f.alwaysRequired).map((f) => f.referenceName);
+    result.push({
+      name: t.name,
+      states: states.map((s) => s.name),
+      requiredFields
+    });
+  }
+  return result;
+}
+function buildDefaultAliases(fields) {
+  const refNames = new Set(fields.map((f) => f.referenceName));
+  const candidates = [
+    ["title", "System.Title"],
+    ["state", "System.State"],
+    ["assignedto", "System.AssignedTo"],
+    ["assigned-to", "System.AssignedTo"],
+    ["description", "System.Description"],
+    ["areapath", "System.AreaPath"],
+    ["area-path", "System.AreaPath"],
+    ["iterationpath", "System.IterationPath"],
+    ["iteration", "System.IterationPath"],
+    ["tags", "System.Tags"],
+    ["priority", "Microsoft.VSTS.Common.Priority"],
+    ["severity", "Microsoft.VSTS.Common.Severity"],
+    ["effort", "Microsoft.VSTS.Scheduling.Effort"],
+    ["storypoints", "Microsoft.VSTS.Scheduling.StoryPoints"],
+    ["story-points", "Microsoft.VSTS.Scheduling.StoryPoints"],
+    ["remainingwork", "Microsoft.VSTS.Scheduling.RemainingWork"],
+    ["remaining", "Microsoft.VSTS.Scheduling.RemainingWork"],
+    ["acceptancecriteria", "Microsoft.VSTS.Common.AcceptanceCriteria"],
+    ["reprosteps", "Microsoft.VSTS.TCM.ReproSteps"],
+    ["foundinsource", "Microsoft.VSTS.Build.FoundIn"]
+  ];
+  const aliases = {};
+  for (const [alias, ref] of candidates) {
+    if (refNames.has(ref)) {
+      aliases[alias] = ref;
+    }
+  }
+  return aliases;
+}
+
+// src/services/config/commands.ts
+import fs2 from "fs";
 function registerConfigCommands(program2) {
   const config = program2.command("config").description("Manage pncli configuration");
   config.command("init").description("Interactive setup wizard").option("--repo", "Write repo config (.pncli.json) instead of global config").action(async (opts) => {
@@ -3939,6 +3593,18 @@ function registerConfigCommands(program2) {
       } else {
         results.sde = { ok: null, message: "not configured" };
       }
+      if (cfg.ado.baseUrl) {
+        try {
+          const collection = cfg.defaults.ado?.collection;
+          const path5 = collection ? `/${encodeURIComponent(collection)}/_apis/connectionData?api-version=7.1` : "/_apis/projectCollections?api-version=7.1";
+          await http.ado(path5);
+          results.ado = { ok: true, message: "connected" };
+        } catch (err) {
+          results.ado = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.ado = { ok: null, message: "not configured" };
+      }
       success(results, "config", "test", start);
     } catch (err) {
       fail(err, "config", "test", start);
@@ -4036,13 +3702,105 @@ async function initGlobalConfig(start) {
   let sdeBaseUrl = "";
   let sdeToken = "";
   if (useSde) {
-    sdeBaseUrl = await input({
-      message: "SDElements base URL\n  Cloud-hosted: https://your-org.sdelements.com\n  On-premise:   https://sde.your-company.com\n  URL: ",
+    process.stderr.write("  Connection string format: <api-token>@<base-url>\n");
+    const useSdeConnectionString = await confirm({
+      message: "Do you have a connection string to paste (token@url)?",
+      default: false
+    });
+    if (useSdeConnectionString) {
+      const sdeConnection = await password({
+        message: "SDElements connection string (api-token@hostname, e.g. mytoken@myorg.sdelements.com):"
+      });
+      const atIdx = sdeConnection.indexOf("@");
+      if (atIdx > 0) {
+        sdeToken = sdeConnection.slice(0, atIdx);
+        sdeBaseUrl = sdeConnection.slice(atIdx + 1);
+      }
+    } else {
+      sdeBaseUrl = await input({
+        message: "SDElements hostname\n  Cloud-hosted: your-org.sdelements.com\n  On-premise:   sde.your-company.com\n  Host: ",
+        default: ""
+      });
+      sdeToken = await password({
+        message: "SDElements API token:"
+      });
+    }
+  }
+  process.stderr.write("\n\u2500\u2500 Azure DevOps Server \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const useAdo = await confirm({
+    message: "Configure Azure DevOps Server for work items, repos, and pipelines?",
+    default: false
+  });
+  let adoBaseUrl = "";
+  let adoPat = "";
+  let adoCollection = "";
+  let adoProject = "";
+  let adoFieldAliases = {};
+  let adoDiscoveredFields = [];
+  let adoDiscoveredTypes = [];
+  if (useAdo) {
+    adoBaseUrl = await input({
+      message: "Azure DevOps Server base URL (e.g. https://tfs.company.com or https://devops.company.com/tfs):",
+      default: ""
+    });
+    adoPat = await password({
+      message: "Azure DevOps personal access token:"
+    });
+    adoCollection = await input({
+      message: "Default collection name (e.g. DefaultCollection):",
       default: ""
     });
-    sdeToken = await password({
-      message: "SDElements API token:"
+    adoProject = await input({
+      message: "Default team project name:",
+      default: ""
     });
+    if (adoBaseUrl && adoCollection) {
+      process.stderr.write("\n  Verifying connection...\n");
+      try {
+        const tempConfig = {
+          ...loadConfig(),
+          ado: {
+            baseUrl: adoBaseUrl,
+            pat: adoPat || void 0,
+            fieldAliases: {},
+            discoveredFields: [],
+            discoveredTypes: []
+          }
+        };
+        const tempHttp = createHttpClient(tempConfig);
+        const tempCore = new AdoCoreClient(tempHttp);
+        await tempCore.getConnectionData(adoCollection);
+        process.stderr.write("  Connected.\n");
+        if (adoProject) {
+          const doDiscover = await confirm({
+            message: "Discover work item types and fields from this collection now? (recommended)",
+            default: true
+          });
+          if (doDiscover) {
+            process.stderr.write("  Fetching work item types and fields...\n");
+            const tempWork = new AdoWorkClient(tempHttp);
+            adoDiscoveredFields = await discoverFields(tempWork, adoCollection);
+            process.stderr.write(`  Found ${adoDiscoveredFields.length} fields.
+`);
+            adoDiscoveredTypes = await discoverTypes(tempWork, adoCollection, adoProject);
+            process.stderr.write(`  Found ${adoDiscoveredTypes.length} work item types.
+`);
+            const doAliases = await confirm({
+              message: 'Save friendly aliases for common fields? (e.g. "priority" \u2192 reference name)',
+              default: true
+            });
+            if (doAliases) {
+              adoFieldAliases = buildDefaultAliases(adoDiscoveredFields);
+              process.stderr.write(`  Generated ${Object.keys(adoFieldAliases).length} aliases.
+`);
+            }
+          }
+        }
+      } catch (err) {
+        warn(`Could not connect to Azure DevOps: ${err instanceof Error ? err.message : String(err)}`);
+        warn("Config will be saved anyway. Check your URL and credentials and re-run pncli config init or pncli config test.");
+      }
+    }
   }
   process.stderr.write("\n\u2500\u2500 Defaults \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
   const jiraProject = await input({
@@ -4101,10 +3859,18 @@ async function initGlobalConfig(start) {
         token: sonarToken || void 0
       }
     } : {},
-    ...useSde ? {
+    ...useSde && sdeToken && sdeBaseUrl ? {
       sde: {
-        baseUrl: sdeBaseUrl || void 0,
-        token: sdeToken || void 0
+        connection: `${sdeToken}@${sdeBaseUrl}`
+      }
+    } : {},
+    ...useAdo && adoBaseUrl ? {
+      ado: {
+        baseUrl: adoBaseUrl,
+        ...adoPat ? { pat: adoPat } : {},
+        ...Object.keys(adoFieldAliases).length ? { fieldAliases: adoFieldAliases } : {},
+        ...adoDiscoveredFields.length ? { discoveredFields: adoDiscoveredFields } : {},
+        ...adoDiscoveredTypes.length ? { discoveredTypes: adoDiscoveredTypes } : {}
       }
     } : {},
     defaults: {
@@ -4120,7 +3886,13 @@ async function initGlobalConfig(start) {
         sde: {
           project: sdeProject || void 0
         }
-      } : {}
+      } : {},
+      ...useAdo && (adoCollection || adoProject) ? {
+        ado: {
+          collection: adoCollection || void 0,
+          project: adoProject || void 0
+        }
+      } : {}
     }
   });
   const configPath = getGlobalConfigPath();
@@ -4145,6 +3917,18 @@ async function initRepoConfig(start) {
     message: "Default target branch for PRs:",
     default: "main"
   });
+  const adoRepoCollection = await input({
+    message: "Default Azure DevOps collection for this repo (leave blank to use global):",
+    default: ""
+  });
+  const adoRepoProject = await input({
+    message: "Default Azure DevOps project for this repo (leave blank to use global):",
+    default: ""
+  });
+  const adoRepoRepo = await input({
+    message: "Default Azure DevOps repo name for this repo (leave blank to auto-detect):",
+    default: ""
+  });
   const confirmed = await confirm({
     message: "Write config to .pncli.json in repo root?",
     default: true
@@ -4154,7 +3938,7 @@ async function initRepoConfig(start) {
     process.exitCode = ExitCode.SUCCESS;
     return;
   }
-  if (fs5.existsSync(".pncli.json")) {
+  if (fs2.existsSync(".pncli.json")) {
     const overwrite = await confirm({
       message: ".pncli.json already exists. Overwrite?",
       default: false
@@ -4174,12 +3958,946 @@ async function initRepoConfig(start) {
       },
       bitbucket: {
         targetBranch: targetBranch || void 0
-      }
+      },
+      ...adoRepoCollection || adoRepoProject || adoRepoRepo ? {
+        ado: {
+          collection: adoRepoCollection || void 0,
+          project: adoRepoProject || void 0,
+          repo: adoRepoRepo || void 0
+        }
+      } : {}
     }
   });
   success({ written: ".pncli.json" }, "config", "init", start);
 }
 
+// src/services/ado/client/git.ts
+var API7 = "7.1";
+var AdoGitClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  // ── Repositories ──────────────────────────────────────────────────
+  async listRepos(collection, project) {
+    const result = await this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories?api-version=${API7}`
+    );
+    return result.value ?? [];
+  }
+  async getRepo(collection, project, repoId) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repoId)}?api-version=${API7}`
+    );
+  }
+  // ── Pull Requests ─────────────────────────────────────────────────
+  async listPRs(collection, project, repo, opts = {}) {
+    return this.http.adoPaginate(async (token) => {
+      const params = {
+        "api-version": API7,
+        "searchCriteria.status": opts.status ?? "active",
+        ...opts.creatorAlias ? { "searchCriteria.creatorId": opts.creatorAlias } : {},
+        ...opts.reviewerAlias ? { "searchCriteria.reviewerId": opts.reviewerAlias } : {},
+        ...token ? { continuationToken: token } : {}
+      };
+      return this.http.adoRaw(
+        `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests`,
+        { params }
+      );
+    });
+  }
+  async getPR(collection, project, repo, prId) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}?api-version=${API7}`
+    );
+  }
+  async createPR(collection, project, repo, body) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests?api-version=${API7}`,
+      { method: "POST", body }
+    );
+  }
+  async updatePR(collection, project, repo, prId, body) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}?api-version=${API7}`,
+      { method: "PATCH", body }
+    );
+  }
+  async completePR(collection, project, repo, prId, lastMergeSourceCommit, completionOptions) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}?api-version=${API7}`,
+      {
+        method: "PATCH",
+        body: {
+          status: "completed",
+          lastMergeSourceCommit: { commitId: lastMergeSourceCommit },
+          completionOptions
+        }
+      }
+    );
+  }
+  async abandonPR(collection, project, repo, prId) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}?api-version=${API7}`,
+      { method: "PATCH", body: { status: "abandoned" } }
+    );
+  }
+  // ── Reviewers / Votes ─────────────────────────────────────────────
+  async setPRVote(collection, project, repo, prId, reviewerId, vote) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}/reviewers/${encodeURIComponent(reviewerId)}?api-version=${API7}`,
+      { method: "PUT", body: { vote } }
+    );
+  }
+  async listReviewers(collection, project, repo, prId) {
+    const pr = await this.getPR(collection, project, repo, prId);
+    return pr.reviewers;
+  }
+  // ── Threads / Comments ────────────────────────────────────────────
+  async listThreads(collection, project, repo, prId) {
+    const result = await this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}/threads?api-version=${API7}`
+    );
+    return result.value ?? [];
+  }
+  async createThread(collection, project, repo, prId, body) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}/threads?api-version=${API7}`,
+      { method: "POST", body }
+    );
+  }
+  async addCommentToThread(collection, project, repo, prId, threadId, content) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}/threads/${threadId}/comments?api-version=${API7}`,
+      { method: "POST", body: { content, commentType: "text" } }
+    );
+  }
+  async updateThread(collection, project, repo, prId, threadId, status) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}/threads/${threadId}?api-version=${API7}`,
+      { method: "PATCH", body: { status } }
+    );
+  }
+  async deleteComment(collection, project, repo, prId, threadId, commentId) {
+    await this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}/threads/${threadId}/comments/${commentId}?api-version=${API7}`,
+      { method: "DELETE" }
+    );
+  }
+  // ── Diffs / Files ─────────────────────────────────────────────────
+  async listPRChanges(collection, project, repo, prId) {
+    const iterations = await this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}/iterations?api-version=${API7}`
+    );
+    const latestId = (iterations.value ?? []).at(-1)?.id;
+    if (!latestId) return [];
+    const changes = await this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/git/repositories/${encodeURIComponent(repo)}/pullrequests/${prId}/iterations/${latestId}/changes?api-version=${API7}`
+    );
+    return changes.changeEntries ?? [];
+  }
+};
+
+// src/services/ado/client/build.ts
+var API8 = "7.1";
+var AdoBuildClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  // ── Definitions ───────────────────────────────────────────────────
+  async listDefinitions(collection, project) {
+    return this.http.adoPaginate(async (token) => {
+      const params = {
+        "api-version": API8,
+        ...token ? { continuationToken: token } : {}
+      };
+      return this.http.adoRaw(
+        `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/build/definitions`,
+        { params }
+      );
+    });
+  }
+  async getDefinition(collection, project, id) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/build/definitions/${id}?api-version=${API8}`
+    );
+  }
+  // ── Builds (runs) ─────────────────────────────────────────────────
+  async queueBuild(collection, project, definitionId, opts = {}) {
+    const body = {
+      definition: { id: definitionId },
+      ...opts.sourceBranch ? { sourceBranch: opts.sourceBranch } : {},
+      ...opts.parameters ? { parameters: opts.parameters } : {}
+    };
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/build/builds?api-version=${API8}`,
+      { method: "POST", body }
+    );
+  }
+  async listBuilds(collection, project, opts = {}) {
+    return this.http.adoPaginate(async (token) => {
+      const params = {
+        "api-version": API8,
+        ...opts.definitionIds?.length ? { definitionIds: opts.definitionIds.join(",") } : {},
+        ...opts.branchName ? { branchName: opts.branchName } : {},
+        ...opts.statusFilter ? { statusFilter: opts.statusFilter } : {},
+        ...opts.top ? { "$top": opts.top } : {},
+        ...token ? { continuationToken: token } : {}
+      };
+      return this.http.adoRaw(
+        `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/build/builds`,
+        { params }
+      );
+    });
+  }
+  async getBuild(collection, project, buildId) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/build/builds/${buildId}?api-version=${API8}`
+    );
+  }
+  async cancelBuild(collection, project, buildId) {
+    return this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/build/builds/${buildId}?api-version=${API8}`,
+      { method: "PATCH", body: { status: "cancelling" } }
+    );
+  }
+  // ── Logs ──────────────────────────────────────────────────────────
+  async listLogs(collection, project, buildId) {
+    const result = await this.http.ado(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/build/builds/${buildId}/logs?api-version=${API8}`
+    );
+    return result.value ?? [];
+  }
+  async getLog(collection, project, buildId, logId) {
+    return this.http.adoText(
+      `/${encodeURIComponent(collection)}/${encodeURIComponent(project)}/_apis/build/builds/${buildId}/logs/${logId}?api-version=${API8}`
+    );
+  }
+};
+
+// src/services/ado/helpers.ts
+function getAdoContext(program2, requireRepo = false) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  const http = createHttpClient(config, Boolean(opts.dryRun));
+  const ctx = getGitContext(config);
+  const collection = opts.collection ?? opts.organization ?? ctx?.ado?.collection ?? config.defaults.ado?.collection ?? "";
+  const project = opts.project ?? ctx?.ado?.project ?? config.defaults.ado?.project ?? "";
+  const repo = opts.repo ?? ctx?.ado?.repo ?? config.defaults.ado?.repo ?? "";
+  if (!collection) {
+    throw new PncliError(
+      "Could not determine Azure DevOps collection. Pass --collection, or run pncli config init.",
+      1
+    );
+  }
+  if (!project) {
+    throw new PncliError(
+      "Could not determine Azure DevOps project. Pass --project, or run pncli config init.",
+      1
+    );
+  }
+  if (requireRepo && !repo) {
+    throw new PncliError(
+      "Could not determine Azure DevOps repo. Pass --repo, or run from inside a checked-out ADO repo.",
+      1
+    );
+  }
+  return {
+    collection,
+    project,
+    repo,
+    coreClient: new AdoCoreClient(http),
+    workClient: new AdoWorkClient(http),
+    gitClient: new AdoGitClient(http),
+    buildClient: new AdoBuildClient(http)
+  };
+}
+function parseFieldArgs2(fields) {
+  const result = {};
+  for (const f of fields) {
+    const eq = f.indexOf("=");
+    if (eq <= 0) throw new PncliError(`Invalid --field value "${f}". Expected format: name=value`, 1);
+    result[f.slice(0, eq)] = f.slice(eq + 1);
+  }
+  return result;
+}
+function buildFieldPatch(fields, fieldAliases) {
+  return Object.entries(fields).map(([key, value]) => {
+    const refName = fieldAliases[key.toLowerCase()] ?? fieldAliases[key] ?? key;
+    return { op: "add", path: `/fields/${refName}`, value };
+  });
+}
+function fieldArgsToPatch(fieldArgs, fieldAliases) {
+  return buildFieldPatch(parseFieldArgs2(fieldArgs), fieldAliases);
+}
+var PR_VOTE = {
+  APPROVE: 10,
+  APPROVE_WITH_SUGGESTIONS: 5,
+  NO_VOTE: 0,
+  WAIT_FOR_AUTHOR: -5,
+  REJECT: -10
+};
+var TERMINAL_STATUSES = /* @__PURE__ */ new Set(["completed"]);
+function isBuildTerminal(build) {
+  return TERMINAL_STATUSES.has(build.status);
+}
+async function pollUntilTerminal(fetchStatus, isTerminal, opts) {
+  const deadline = Date.now() + opts.timeoutSec * 1e3;
+  let status = await fetchStatus();
+  while (!isTerminal(status)) {
+    if (Date.now() >= deadline) {
+      throw new PncliError(
+        `Timed out waiting for completion after ${opts.timeoutSec}s`,
+        1
+      );
+    }
+    log(`Waiting ${opts.pollSec}s...`);
+    await new Promise((resolve) => setTimeout(resolve, opts.pollSec * 1e3));
+    status = await fetchStatus();
+  }
+  return status;
+}
+
+// src/services/ado/commands/project.ts
+function registerAdoProjectCommands(ado) {
+  const project = ado.command("project").description("Azure DevOps project and collection operations");
+  project.command("list-collections").description("List all project collections on the server").action(async () => {
+    const start = Date.now();
+    try {
+      const { coreClient } = getAdoContext(ado);
+      const data = await coreClient.listCollections();
+      success(data, "ado", "project-list-collections", start);
+    } catch (err) {
+      fail(err, "ado", "project-list-collections", start);
+    }
+  });
+  project.command("list").description("List team projects in a collection").action(async () => {
+    const start = Date.now();
+    try {
+      const { collection, coreClient } = getAdoContext(ado);
+      const data = await coreClient.listProjects(collection);
+      success(data, "ado", "project-list", start);
+    } catch (err) {
+      fail(err, "ado", "project-list", start);
+    }
+  });
+  project.command("get").description("Get a team project by name").requiredOption("--name <project>", "Project name").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, coreClient } = getAdoContext(ado);
+      const data = await coreClient.getProject(collection, opts.name);
+      success(data, "ado", "project-get", start);
+    } catch (err) {
+      fail(err, "ado", "project-get", start);
+    }
+  });
+}
+
+// src/services/ado/commands/work.ts
+function registerAdoWorkCommands(ado) {
+  const work = ado.command("work").description("Azure DevOps work item operations");
+  work.command("get").description("Get a work item by ID").requiredOption("--id <n>", "Work item ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, workClient } = getAdoContext(ado);
+      const data = await workClient.getWorkItem(collection, parseInt(opts.id, 10));
+      success(data, "ado", "work-get", start);
+    } catch (err) {
+      fail(err, "ado", "work-get", start);
+    }
+  });
+  work.command("create").description("Create a work item").requiredOption("--type <type>", "Work item type (e.g. Bug, Task, User Story)").requiredOption("--title <title>", "Work item title").option("--description <text>", "Description").option("--assignee <user>", "Assigned to (display name or email)").option("--priority <n>", "Priority (1-4)").option("--field <name=value>", "Additional field (repeatable)", (v, acc) => {
+    acc.push(v);
+    return acc;
+  }, []).action(async (opts) => {
+    const start = Date.now();
+    try {
+      const globalOpts = ado.optsWithGlobals();
+      const config = loadConfig({ configPath: globalOpts.config });
+      const { collection, project, workClient } = getAdoContext(ado);
+      const builtIn = {
+        "System.Title": opts.title,
+        ...opts.description ? { "System.Description": opts.description } : {},
+        ...opts.assignee ? { "System.AssignedTo": opts.assignee } : {},
+        ...opts.priority ? { "Microsoft.VSTS.Common.Priority": opts.priority } : {}
+      };
+      const extra = fieldArgsToPatch(opts.field, config.ado.fieldAliases);
+      const patch = [
+        ...Object.entries(builtIn).map(([k, v]) => ({ op: "add", path: `/fields/${k}`, value: v })),
+        ...extra
+      ];
+      const data = await workClient.createWorkItem(collection, project, opts.type, patch);
+      success(data, "ado", "work-create", start);
+    } catch (err) {
+      fail(err, "ado", "work-create", start);
+    }
+  });
+  work.command("update").description("Update a work item field").requiredOption("--id <n>", "Work item ID").option("--field <name=value>", "Field to update (repeatable)", (v, acc) => {
+    acc.push(v);
+    return acc;
+  }, []).action(async (opts) => {
+    const start = Date.now();
+    try {
+      const globalOpts = ado.optsWithGlobals();
+      const config = loadConfig({ configPath: globalOpts.config });
+      const { collection, workClient } = getAdoContext(ado);
+      const patch = fieldArgsToPatch(opts.field, config.ado.fieldAliases);
+      const data = await workClient.updateWorkItem(collection, parseInt(opts.id, 10), patch);
+      success(data, "ado", "work-update", start);
+    } catch (err) {
+      fail(err, "ado", "work-update", start);
+    }
+  });
+  work.command("transition").description("Set the state of a work item").requiredOption("--id <n>", "Work item ID").requiredOption("--state <state>", "New state (e.g. Active, Resolved, Closed)").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, workClient } = getAdoContext(ado);
+      const patch = [{ op: "add", path: "/fields/System.State", value: opts.state }];
+      const data = await workClient.updateWorkItem(collection, parseInt(opts.id, 10), patch);
+      success(data, "ado", "work-transition", start);
+    } catch (err) {
+      fail(err, "ado", "work-transition", start);
+    }
+  });
+  work.command("assign").description("Assign a work item to a user").requiredOption("--id <n>", "Work item ID").requiredOption("--to <user>", "User display name or email").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, workClient } = getAdoContext(ado);
+      const patch = [{ op: "add", path: "/fields/System.AssignedTo", value: opts.to }];
+      const data = await workClient.updateWorkItem(collection, parseInt(opts.id, 10), patch);
+      success(data, "ado", "work-assign", start);
+    } catch (err) {
+      fail(err, "ado", "work-assign", start);
+    }
+  });
+  work.command("link").description("Link two work items").requiredOption("--id <a>", "Source work item ID").requiredOption("--to <b>", "Target work item ID").option("--type <rel>", "Link type (related|parent|child|duplicate|duplicate-of)", "related").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const globalOpts = ado.optsWithGlobals();
+      const config = loadConfig({ configPath: globalOpts.config });
+      const { collection, workClient } = getAdoContext(ado);
+      const relMap = {
+        related: "System.LinkTypes.Related",
+        parent: "System.LinkTypes.Hierarchy-Reverse",
+        child: "System.LinkTypes.Hierarchy-Forward",
+        duplicate: "System.LinkTypes.Duplicate-Forward",
+        "duplicate-of": "System.LinkTypes.Duplicate-Reverse"
+      };
+      const rel = relMap[opts.type] ?? opts.type;
+      const baseUrl = config.ado.baseUrl?.replace(/\/$/, "");
+      const targetUrl = `${baseUrl}/${encodeURIComponent(collection)}/_apis/wit/workitems/${opts.to}`;
+      const patch = [{ op: "add", path: "/relations/-", value: { rel, url: targetUrl } }];
+      const data = await workClient.updateWorkItem(collection, parseInt(opts.id, 10), patch);
+      success(data, "ado", "work-link", start);
+    } catch (err) {
+      fail(err, "ado", "work-link", start);
+    }
+  });
+  work.command("search").description("Run a WIQL query").requiredOption("--wiql <query>", "WIQL query string").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, workClient } = getAdoContext(ado);
+      const data = await workClient.queryWiql(collection, project, opts.wiql);
+      success(data, "ado", "work-search", start);
+    } catch (err) {
+      fail(err, "ado", "work-search", start);
+    }
+  });
+  work.command("list-comments").description("List comments on a work item").requiredOption("--id <n>", "Work item ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, workClient } = getAdoContext(ado);
+      const data = await workClient.listComments(collection, project, parseInt(opts.id, 10));
+      success(data, "ado", "work-list-comments", start);
+    } catch (err) {
+      fail(err, "ado", "work-list-comments", start);
+    }
+  });
+  work.command("add-comment").description("Add a comment to a work item").requiredOption("--id <n>", "Work item ID").requiredOption("--body <text>", "Comment text").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, workClient } = getAdoContext(ado);
+      const data = await workClient.addComment(collection, project, parseInt(opts.id, 10), opts.body);
+      success(data, "ado", "work-add-comment", start);
+    } catch (err) {
+      fail(err, "ado", "work-add-comment", start);
+    }
+  });
+  work.command("types").description("List work item types in the project").option("--discover", "Fetch from server (always true for this command)").option("--save", "Save discovered types to ~/.pncli/config.json").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, workClient } = getAdoContext(ado);
+      const globalOpts = ado.optsWithGlobals();
+      const types = await discoverTypes(workClient, collection, project);
+      if (opts.save) {
+        const globalConfigPath = getGlobalConfigPath(globalOpts.config);
+        const fs3 = await import("fs");
+        const existing = JSON.parse(fs3.readFileSync(globalConfigPath, "utf8") || "{}");
+        existing.ado = { ...existing.ado ?? {}, discoveredTypes: types };
+        fs3.writeFileSync(globalConfigPath, JSON.stringify(existing, null, 2) + "\n", "utf8");
+        warn(`Saved ${types.length} types to ${globalConfigPath}`);
+      }
+      success(types, "ado", "work-types", start);
+    } catch (err) {
+      fail(err, "ado", "work-types", start);
+    }
+  });
+  work.command("list-states").description("List valid states for a work item type").requiredOption("--type <type>", "Work item type name (e.g. Bug)").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, workClient } = getAdoContext(ado);
+      const data = await workClient.listTypeStates(collection, project, opts.type);
+      success(data, "ado", "work-list-states", start);
+    } catch (err) {
+      fail(err, "ado", "work-list-states", start);
+    }
+  });
+  work.command("fields").description("List work item fields available in the collection").option("--type <type>", "Scope to fields for a specific work item type (e.g. Bug)").option("--custom-only", "Exclude System.* and Microsoft.VSTS.* fields").option("--discover", "Fetch from server (always true for this command)").option("--save", "Save discovered fields and aliases to ~/.pncli/config.json").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, workClient } = getAdoContext(ado);
+      const globalOpts = ado.optsWithGlobals();
+      const allFields = opts.type ? await discoverTypeFields(workClient, collection, project, opts.type) : await discoverFields(workClient, collection);
+      const fields = opts.customOnly ? allFields.filter(
+        (f) => !f.referenceName.startsWith("System.") && !f.referenceName.startsWith("Microsoft.VSTS.")
+      ) : allFields;
+      if (opts.save) {
+        const globalConfigPath = getGlobalConfigPath(globalOpts.config);
+        const fs3 = await import("fs");
+        const existing = JSON.parse(fs3.readFileSync(globalConfigPath, "utf8") || "{}");
+        const aliases = buildDefaultAliases(allFields);
+        existing.ado = { ...existing.ado ?? {}, discoveredFields: allFields, fieldAliases: aliases };
+        fs3.writeFileSync(globalConfigPath, JSON.stringify(existing, null, 2) + "\n", "utf8");
+        warn(`Saved ${allFields.length} fields and ${Object.keys(aliases).length} aliases to ${globalConfigPath}`);
+      }
+      success(fields, "ado", "work-fields", start);
+    } catch (err) {
+      fail(err, "ado", "work-fields", start);
+    }
+  });
+}
+
+// src/services/ado/commands/repo.ts
+function flattenThreadComments(threads, filterInlineOnly, filterGeneralOnly) {
+  const flat = [];
+  for (const thread of threads) {
+    if (thread.isDeleted) continue;
+    if (filterInlineOnly && !thread.threadContext) continue;
+    if (filterGeneralOnly && thread.threadContext) continue;
+    for (const comment of thread.comments) {
+      if (comment.isDeleted) continue;
+      flat.push({ ...comment, threadId: thread.id, threadContext: thread.threadContext ?? null });
+    }
+  }
+  return flat.sort((a, b) => a.publishedDate.localeCompare(b.publishedDate));
+}
+function registerAdoRepoCommands(ado) {
+  const repo = ado.command("repo").description("Azure DevOps repository and pull request operations");
+  repo.command("list").description("List git repositories in the project").action(async () => {
+    const start = Date.now();
+    try {
+      const { collection, project, gitClient } = getAdoContext(ado);
+      const data = await gitClient.listRepos(collection, project);
+      success(data, "ado", "repo-list", start);
+    } catch (err) {
+      fail(err, "ado", "repo-list", start);
+    }
+  });
+  repo.command("get").description("Get a specific repository").action(async () => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repoName, gitClient } = getAdoContext(ado, true);
+      const data = await gitClient.getRepo(collection, project, repoName);
+      success(data, "ado", "repo-get", start);
+    } catch (err) {
+      fail(err, "ado", "repo-get", start);
+    }
+  });
+  repo.command("list-prs").description("List pull requests").option("--state <state>", "PR state: active|abandoned|completed|all", "active").option("--creator <alias>", "Filter by creator").option("--reviewer <alias>", "Filter by reviewer").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const data = await gitClient.listPRs(collection, project, repo2, {
+        status: opts.state,
+        creatorAlias: opts.creator,
+        reviewerAlias: opts.reviewer
+      });
+      success(data, "ado", "repo-list-prs", start);
+    } catch (err) {
+      fail(err, "ado", "repo-list-prs", start);
+    }
+  });
+  repo.command("get-pr").description("Get a pull request by ID").requiredOption("--id <n>", "Pull request ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const data = await gitClient.getPR(collection, project, repo2, parseInt(opts.id, 10));
+      success(data, "ado", "repo-get-pr", start);
+    } catch (err) {
+      fail(err, "ado", "repo-get-pr", start);
+    }
+  });
+  repo.command("create-pr").description("Create a pull request").requiredOption("--title <title>", "PR title").requiredOption("--source <branch>", "Source branch").option("--target <branch>", "Target branch (default: main)", "main").option("--description <text>", "PR description").option("--reviewers <ids>", "Comma-separated reviewer IDs or display names").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const reviewers = opts.reviewers ? opts.reviewers.split(",").map((id) => ({ id: id.trim() })) : [];
+      const data = await gitClient.createPR(collection, project, repo2, {
+        title: opts.title,
+        description: opts.description,
+        sourceRefName: `refs/heads/${opts.source}`,
+        targetRefName: `refs/heads/${opts.target}`,
+        reviewers
+      });
+      success(data, "ado", "repo-create-pr", start);
+    } catch (err) {
+      fail(err, "ado", "repo-create-pr", start);
+    }
+  });
+  repo.command("update-pr").description("Update a pull request").requiredOption("--id <n>", "Pull request ID").option("--title <title>", "New title").option("--description <text>", "New description").option("--reviewers <ids>", "Comma-separated reviewer IDs").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const reviewers = opts.reviewers ? opts.reviewers.split(",").map((id) => ({ id: id.trim() })) : void 0;
+      const body = {};
+      if (opts.title) body.title = opts.title;
+      if (opts.description !== void 0) body.description = opts.description;
+      if (reviewers) body.reviewers = reviewers;
+      const data = await gitClient.updatePR(collection, project, repo2, parseInt(opts.id, 10), body);
+      success(data, "ado", "repo-update-pr", start);
+    } catch (err) {
+      fail(err, "ado", "repo-update-pr", start);
+    }
+  });
+  repo.command("merge-pr").description("Complete (merge) a pull request").requiredOption("--id <n>", "Pull request ID").option("--strategy <s>", "Merge strategy: noFastForward|squash|rebase|rebaseMerge", "noFastForward").option("--delete-source", "Delete source branch after merge").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const prId = parseInt(opts.id, 10);
+      const pr = await gitClient.getPR(collection, project, repo2, prId);
+      const data = await gitClient.completePR(
+        collection,
+        project,
+        repo2,
+        prId,
+        pr.lastMergeSourceCommit?.commitId ?? "",
+        {
+          mergeStrategy: opts.strategy,
+          deleteSourceBranch: opts.deleteSource ?? false
+        }
+      );
+      success(data, "ado", "repo-merge-pr", start);
+    } catch (err) {
+      fail(err, "ado", "repo-merge-pr", start);
+    }
+  });
+  repo.command("abandon-pr").description("Abandon a pull request").requiredOption("--id <n>", "Pull request ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const data = await gitClient.abandonPR(collection, project, repo2, parseInt(opts.id, 10));
+      success(data, "ado", "repo-abandon-pr", start);
+    } catch (err) {
+      fail(err, "ado", "repo-abandon-pr", start);
+    }
+  });
+  repo.command("list-comments").description("List all comments on a pull request (general + inline)").requiredOption("--pr <n>", "Pull request ID").option("--inline-only", "Return only inline file comments").option("--general-only", "Return only general PR comments").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const threads = await gitClient.listThreads(collection, project, repo2, parseInt(opts.pr, 10));
+      const flat = flattenThreadComments(threads, opts.inlineOnly ?? false, opts.generalOnly ?? false);
+      success(flat, "ado", "repo-list-comments", start);
+    } catch (err) {
+      fail(err, "ado", "repo-list-comments", start);
+    }
+  });
+  repo.command("add-comment").description("Add a general comment to a pull request").requiredOption("--pr <n>", "Pull request ID").requiredOption("--body <text>", "Comment text").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const data = await gitClient.createThread(collection, project, repo2, parseInt(opts.pr, 10), {
+        comments: [{ content: opts.body, commentType: "text" }],
+        status: "active"
+      });
+      success(data, "ado", "repo-add-comment", start);
+    } catch (err) {
+      fail(err, "ado", "repo-add-comment", start);
+    }
+  });
+  repo.command("add-inline-comment").description("Add an inline comment on a file in a pull request").requiredOption("--pr <n>", "Pull request ID").requiredOption("--file <path>", "File path").requiredOption("--line <n>", "Line number").requiredOption("--body <text>", "Comment text").option("--line-type <side>", "Line side: left|right (default: right)", "right").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const lineNum = parseInt(opts.line, 10);
+      const isRight = opts.lineType !== "left";
+      const lineRange = isRight ? { rightFileStart: { line: lineNum, offset: 1 }, rightFileEnd: { line: lineNum, offset: 1 } } : { leftFileStart: { line: lineNum, offset: 1 }, leftFileEnd: { line: lineNum, offset: 1 } };
+      const data = await gitClient.createThread(collection, project, repo2, parseInt(opts.pr, 10), {
+        comments: [{ content: opts.body, commentType: "text" }],
+        status: "active",
+        threadContext: { filePath: opts.file, ...lineRange }
+      });
+      success(data, "ado", "repo-add-inline-comment", start);
+    } catch (err) {
+      fail(err, "ado", "repo-add-inline-comment", start);
+    }
+  });
+  repo.command("reply-comment").description("Reply to a comment thread").requiredOption("--pr <n>", "Pull request ID").requiredOption("--thread-id <id>", "Thread ID").requiredOption("--body <text>", "Reply text").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const data = await gitClient.addCommentToThread(
+        collection,
+        project,
+        repo2,
+        parseInt(opts.pr, 10),
+        parseInt(opts.threadId, 10),
+        opts.body
+      );
+      success(data, "ado", "repo-reply-comment", start);
+    } catch (err) {
+      fail(err, "ado", "repo-reply-comment", start);
+    }
+  });
+  repo.command("resolve-comment").description("Mark a comment thread as resolved (fixed)").requiredOption("--pr <n>", "Pull request ID").requiredOption("--thread-id <id>", "Thread ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const data = await gitClient.updateThread(
+        collection,
+        project,
+        repo2,
+        parseInt(opts.pr, 10),
+        parseInt(opts.threadId, 10),
+        "fixed"
+      );
+      success(data, "ado", "repo-resolve-comment", start);
+    } catch (err) {
+      fail(err, "ado", "repo-resolve-comment", start);
+    }
+  });
+  repo.command("delete-comment").description("Delete a comment from a thread").requiredOption("--pr <n>", "Pull request ID").requiredOption("--thread-id <id>", "Thread ID").requiredOption("--comment-id <id>", "Comment ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      await gitClient.deleteComment(
+        collection,
+        project,
+        repo2,
+        parseInt(opts.pr, 10),
+        parseInt(opts.threadId, 10),
+        parseInt(opts.commentId, 10)
+      );
+      success({ deleted: true }, "ado", "repo-delete-comment", start);
+    } catch (err) {
+      fail(err, "ado", "repo-delete-comment", start);
+    }
+  });
+  repo.command("list-files").description("List files changed in a pull request").requiredOption("--pr <n>", "Pull request ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const data = await gitClient.listPRChanges(collection, project, repo2, parseInt(opts.pr, 10));
+      success(data, "ado", "repo-list-files", start);
+    } catch (err) {
+      fail(err, "ado", "repo-list-files", start);
+    }
+  });
+  repo.command("list-reviewers").description("List reviewers on a pull request").requiredOption("--pr <n>", "Pull request ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+      const data = await gitClient.listReviewers(collection, project, repo2, parseInt(opts.pr, 10));
+      success(data, "ado", "repo-list-reviewers", start);
+    } catch (err) {
+      fail(err, "ado", "repo-list-reviewers", start);
+    }
+  });
+  const voteCmd = (name, description, vote, action) => {
+    repo.command(name).description(description).requiredOption("--pr <n>", "Pull request ID").action(async (opts) => {
+      const start = Date.now();
+      try {
+        const globalOpts = ado.optsWithGlobals();
+        const { loadConfig: lc } = await import("./config-KECF7FJ2.js");
+        const config = lc({ configPath: globalOpts.config });
+        const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
+        const { AdoCoreClient: AdoCoreClient2 } = await import("./core-AJYPJ2Z7.js");
+        const { createHttpClient: createHttpClient2 } = await import("./http-FC24JSK7.js");
+        const http = createHttpClient2(config, Boolean(globalOpts.dryRun));
+        const coreClient = new AdoCoreClient2(http);
+        const me = await coreClient.getConnectionData(collection);
+        const myId = me.authenticatedUser.id;
+        const data = await gitClient.setPRVote(collection, project, repo2, parseInt(opts.pr, 10), myId, vote);
+        success(data, "ado", action, start);
+      } catch (err) {
+        fail(err, "ado", action, start);
+      }
+    });
+  };
+  voteCmd("approve", "Approve a pull request", PR_VOTE.APPROVE, "repo-approve");
+  voteCmd("unapprove", "Remove approval from a pull request", PR_VOTE.NO_VOTE, "repo-unapprove");
+  voteCmd("wait-for-author", "Mark a pull request as waiting for author", PR_VOTE.WAIT_FOR_AUTHOR, "repo-wait-for-author");
+  repo.command("list-builds").description("List builds associated with a pull request").requiredOption("--pr <n>", "Pull request ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, repo: repo2, gitClient, buildClient } = getAdoContext(ado, true);
+      const pr = await gitClient.getPR(collection, project, repo2, parseInt(opts.pr, 10));
+      const data = await buildClient.listBuilds(collection, project, {
+        branchName: pr.sourceRefName
+      });
+      success(data, "ado", "repo-list-builds", start);
+    } catch (err) {
+      fail(err, "ado", "repo-list-builds", start);
+    }
+  });
+}
+
+// src/services/ado/commands/pipeline.ts
+function registerAdoPipelineCommands(ado) {
+  const pipeline = ado.command("pipeline").description("Azure DevOps pipeline (build) operations");
+  pipeline.command("list").description("List pipeline definitions").action(async () => {
+    const start = Date.now();
+    try {
+      const { collection, project, buildClient } = getAdoContext(ado);
+      const data = await buildClient.listDefinitions(collection, project);
+      success(data, "ado", "pipeline-list", start);
+    } catch (err) {
+      fail(err, "ado", "pipeline-list", start);
+    }
+  });
+  pipeline.command("get").description("Get a pipeline definition by ID").requiredOption("--id <n>", "Pipeline definition ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, buildClient } = getAdoContext(ado);
+      const data = await buildClient.getDefinition(collection, project, parseInt(opts.id, 10));
+      success(data, "ado", "pipeline-get", start);
+    } catch (err) {
+      fail(err, "ado", "pipeline-get", start);
+    }
+  });
+  pipeline.command("run").description("Queue a pipeline run").requiredOption("--id <n>", "Pipeline definition ID").option("--branch <ref>", "Source branch (e.g. refs/heads/main or main)").option("--parameter <k=v>", "Build parameter (repeatable)", (v, acc) => {
+    acc.push(v);
+    return acc;
+  }, []).option("--wait", "Wait for the run to complete before returning").option("--timeout <s>", "Max wait time in seconds (default 600)", "600").option("--poll <s>", "Poll interval in seconds (default 10)", "10").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, buildClient } = getAdoContext(ado);
+      const sourceBranch = opts.branch ? opts.branch.startsWith("refs/") ? opts.branch : `refs/heads/${opts.branch}` : void 0;
+      for (const p of opts.parameter) {
+        if (!p.includes("=")) throw new PncliError(`Invalid --parameter "${p}". Expected format: key=value`, 1);
+      }
+      const parameters = opts.parameter.length > 0 ? JSON.stringify(Object.fromEntries(opts.parameter.map((p) => {
+        const eq = p.indexOf("=");
+        return [p.slice(0, eq), p.slice(eq + 1)];
+      }))) : void 0;
+      let build = await buildClient.queueBuild(collection, project, parseInt(opts.id, 10), {
+        sourceBranch,
+        parameters
+      });
+      log(`Queued build #${build.id} (${build.buildNumber}) \u2014 status: ${build.status}`);
+      if (opts.wait) {
+        const timeoutSec = parseInt(opts.timeout, 10);
+        const pollSec = parseInt(opts.poll, 10);
+        if (isNaN(timeoutSec) || timeoutSec <= 0) throw new PncliError(`Invalid --timeout "${opts.timeout}". Expected a positive number of seconds.`, 1);
+        if (isNaN(pollSec) || pollSec <= 0) throw new PncliError(`Invalid --poll "${opts.poll}". Expected a positive number of seconds.`, 1);
+        log(`Waiting for build #${build.id} to complete (timeout ${timeoutSec}s, poll ${pollSec}s)...`);
+        build = await pollUntilTerminal(
+          () => buildClient.getBuild(collection, project, build.id),
+          isBuildTerminal,
+          { timeoutSec, pollSec }
+        );
+        if (build.result && build.result !== "succeeded") {
+          process.exitCode = ExitCode.GENERAL_ERROR;
+        }
+      }
+      success(build, "ado", "pipeline-run", start);
+    } catch (err) {
+      fail(err, "ado", "pipeline-run", start);
+    }
+  });
+  pipeline.command("list-runs").description("List pipeline runs").option("--definition <id>", "Filter by definition ID").option("--branch <ref>", "Filter by branch name").option("--status <filter>", "Filter by status (inProgress|completed|cancelling|...)").option("--top <n>", "Maximum results", "50").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, buildClient } = getAdoContext(ado);
+      const data = await buildClient.listBuilds(collection, project, {
+        definitionIds: opts.definition ? [parseInt(opts.definition, 10)] : void 0,
+        branchName: opts.branch,
+        statusFilter: opts.status,
+        top: parseInt(opts.top, 10)
+      });
+      success(data, "ado", "pipeline-list-runs", start);
+    } catch (err) {
+      fail(err, "ado", "pipeline-list-runs", start);
+    }
+  });
+  pipeline.command("get-run").description("Get a pipeline run by build ID").requiredOption("--id <n>", "Build ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, buildClient } = getAdoContext(ado);
+      const data = await buildClient.getBuild(collection, project, parseInt(opts.id, 10));
+      success(data, "ado", "pipeline-get-run", start);
+    } catch (err) {
+      fail(err, "ado", "pipeline-get-run", start);
+    }
+  });
+  pipeline.command("cancel-run").description("Cancel a running pipeline build").requiredOption("--id <n>", "Build ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, buildClient } = getAdoContext(ado);
+      const data = await buildClient.cancelBuild(collection, project, parseInt(opts.id, 10));
+      success(data, "ado", "pipeline-cancel-run", start);
+    } catch (err) {
+      fail(err, "ado", "pipeline-cancel-run", start);
+    }
+  });
+  pipeline.command("logs").description("List or retrieve build logs").requiredOption("--id <n>", "Build ID").option("--log-id <n>", "Specific log ID (omit to list all logs)").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const { collection, project, buildClient } = getAdoContext(ado);
+      const buildId = parseInt(opts.id, 10);
+      if (opts.logId) {
+        const data = await buildClient.getLog(collection, project, buildId, parseInt(opts.logId, 10));
+        success({ log: data }, "ado", "pipeline-logs", start);
+      } else {
+        const data = await buildClient.listLogs(collection, project, buildId);
+        success(data, "ado", "pipeline-logs", start);
+      }
+    } catch (err) {
+      fail(err, "ado", "pipeline-logs", start);
+    }
+  });
+}
+
+// src/services/ado/commands/index.ts
+function registerAdoCommands(program2) {
+  const ado = program2.command("ado").description("Azure DevOps Server operations").option("--collection <name>", "Azure DevOps collection (organization)").option("--organization <name>", "Alias for --collection").option("--project <name>", "Azure DevOps team project").option("--repo <name>", "Azure DevOps git repository name");
+  ado.command("whoami").description("Show current authenticated user").action(async () => {
+    const start = Date.now();
+    try {
+      const { collection, coreClient } = getAdoContext(ado);
+      const data = await coreClient.getConnectionData(collection);
+      success(data, "ado", "whoami", start);
+    } catch (err) {
+      fail(err, "ado", "whoami", start);
+    }
+  });
+  ado.command("connection-data").description("Show raw connection data from the ADO server").action(async () => {
+    const start = Date.now();
+    try {
+      const { collection, coreClient } = getAdoContext(ado);
+      const data = await coreClient.getConnectionData(collection);
+      success(data, "ado", "connection-data", start);
+    } catch (err) {
+      fail(err, "ado", "connection-data", start);
+    }
+  });
+  registerAdoProjectCommands(ado);
+  registerAdoWorkCommands(ado);
+  registerAdoRepoCommands(ado);
+  registerAdoPipelineCommands(ado);
+}
+
 // src/cli.ts
 if (!process.env.PNCLI_VERIFY_TLS) {
   process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
@@ -4209,6 +4927,7 @@ registerSonarCommands(program);
 registerSdeCommands(program);
 registerDepsCommands(program);
 registerConfigCommands(program);
+registerAdoCommands(program);
 program.addHelpText("after", `
 Services:
   git          Local git operations (status, diff, log, branch)
@@ -4218,6 +4937,7 @@ Services:
   confluence   Confluence
   sonar        SonarQube Server (quality gates, issues, metrics, hotspots)
   sde          SDElements (threat modeling, countermeasures, compliance)
+  ado          Azure DevOps Server (work items, repos, PRs, pipelines)
   config       Manage pncli configuration
 `);
 program.parseAsync(process.argv).catch((err) => {