@vm3jack/mcp-server-azure-devops 1.0.0

package/dist/shared/api/client.js

@@ -0,0 +1,242 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AzureDevOpsClient = void 0;
+const errors_1 = require("../errors");
+const auth_1 = require("../auth");
+const client_factory_1 = require("../auth/client-factory");
+/**
+ * Azure DevOps Client
+ *
+ * Provides access to Azure DevOps APIs
+ */
+class AzureDevOpsClient {
+    config;
+    clientPromise = null;
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Get the authenticated Azure DevOps client
+     *
+     * @returns The authenticated WebApi client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getClient() {
+        if (!this.clientPromise) {
+            this.clientPromise = (async () => {
+                try {
+                    const sharedClient = new client_factory_1.AzureDevOpsClient({
+                        method: auth_1.AuthenticationMethod.PersonalAccessToken,
+                        organizationUrl: this.config.orgUrl,
+                        personalAccessToken: this.config.pat,
+                    });
+                    return await sharedClient.getWebApiClient();
+                }
+                catch (error) {
+                    // If it's already an AzureDevOpsError, rethrow it
+                    if (error instanceof errors_1.AzureDevOpsError) {
+                        throw error;
+                    }
+                    // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+                    throw new errors_1.AzureDevOpsAuthenticationError(error instanceof Error
+                        ? `Authentication failed: ${error.message}`
+                        : 'Authentication failed: Unknown error');
+                }
+            })();
+        }
+        return this.clientPromise;
+    }
+    /**
+     * Check if the client is authenticated
+     *
+     * @returns True if the client is authenticated
+     */
+    async isAuthenticated() {
+        try {
+            const client = await this.getClient();
+            return !!client;
+        }
+        catch {
+            // Any error means we're not authenticated
+            return false;
+        }
+    }
+    /**
+     * Get the Core API
+     *
+     * @returns The Core API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getCoreApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getCoreApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof errors_1.AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new errors_1.AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Core API: ${error.message}`
+                : 'Failed to get Core API: Unknown error');
+        }
+    }
+    /**
+     * Get the Git API
+     *
+     * @returns The Git API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getGitApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getGitApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof errors_1.AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new errors_1.AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Git API: ${error.message}`
+                : 'Failed to get Git API: Unknown error');
+        }
+    }
+    /**
+     * Get the Work Item Tracking API
+     *
+     * @returns The Work Item Tracking API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getWorkItemTrackingApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getWorkItemTrackingApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof errors_1.AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new errors_1.AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Work Item Tracking API: ${error.message}`
+                : 'Failed to get Work Item Tracking API: Unknown error');
+        }
+    }
+    /**
+     * Get the Build API
+     *
+     * @returns The Build API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getBuildApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getBuildApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof errors_1.AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new errors_1.AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Build API: ${error.message}`
+                : 'Failed to get Build API: Unknown error');
+        }
+    }
+    /**
+     * Get the Test API
+     *
+     * @returns The Test API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getTestApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getTestApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof errors_1.AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new errors_1.AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Test API: ${error.message}`
+                : 'Failed to get Test API: Unknown error');
+        }
+    }
+    /**
+     * Get the Release API
+     *
+     * @returns The Release API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getReleaseApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getReleaseApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof errors_1.AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new errors_1.AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Release API: ${error.message}`
+                : 'Failed to get Release API: Unknown error');
+        }
+    }
+    /**
+     * Get the Task Agent API
+     *
+     * @returns The Task Agent API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getTaskAgentApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getTaskAgentApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof errors_1.AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new errors_1.AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Task Agent API: ${error.message}`
+                : 'Failed to get Task Agent API: Unknown error');
+        }
+    }
+    /**
+     * Get the Task API
+     *
+     * @returns The Task API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getTaskApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getTaskApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof errors_1.AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new errors_1.AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Task API: ${error.message}`
+                : 'Failed to get Task API: Unknown error');
+        }
+    }
+}
+exports.AzureDevOpsClient = AzureDevOpsClient;
+//# sourceMappingURL=client.js.map

package/dist/shared/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/shared/api/client.ts"],"names":[],"mappings":";;;AASA,sCAA6E;AAC7E,kCAA+C;AAC/C,2DAA2E;AAO3E;;;;GAIG;AACH,MAAa,iBAAiB;IACpB,MAAM,CAA0B;IAChC,aAAa,GAA2B,IAAI,CAAC;IAErD,YAAY,MAA+B;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,aAAa,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC/B,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,IAAI,kCAAY,CAAC;wBACpC,MAAM,EAAE,2BAAoB,CAAC,mBAAmB;wBAChD,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;wBACnC,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;qBACrC,CAAC,CAAC;oBACH,OAAO,MAAM,YAAY,CAAC,eAAe,EAAE,CAAC;gBAC9C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,kDAAkD;oBAClD,IAAI,KAAK,YAAY,yBAAgB,EAAE,CAAC;wBACtC,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,0DAA0D;oBAC1D,MAAM,IAAI,uCAA8B,CACtC,KAAK,YAAY,KAAK;wBACpB,CAAC,CAAC,0BAA0B,KAAK,CAAC,OAAO,EAAE;wBAC3C,CAAC,CAAC,sCAAsC,CAC3C,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,eAAe;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,MAAM,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,yBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,uCAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE;gBAC5C,CAAC,CAAC,uCAAuC,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,SAAS;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,yBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,uCAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,0BAA0B,KAAK,CAAC,OAAO,EAAE;gBAC3C,CAAC,CAAC,sCAAsC,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,sBAAsB;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,yBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,uCAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,yCAAyC,KAAK,CAAC,OAAO,EAAE;gBAC1D,CAAC,CAAC,qDAAqD,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,WAAW;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,yBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,uCAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,4BAA4B,KAAK,CAAC,OAAO,EAAE;gBAC7C,CAAC,CAAC,wCAAwC,CAC7C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,yBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,uCAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE;gBAC5C,CAAC,CAAC,uCAAuC,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,aAAa;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,yBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,uCAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,8BAA8B,KAAK,CAAC,OAAO,EAAE;gBAC/C,CAAC,CAAC,0CAA0C,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,eAAe;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,yBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,uCAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE;gBAClD,CAAC,CAAC,6CAA6C,CAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,yBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,uCAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE;gBAC5C,CAAC,CAAC,uCAAuC,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAvPD,8CAuPC"}

package/dist/shared/api/index.d.ts

@@ -0,0 +1 @@
+export * from './client';

package/dist/shared/api/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./client"), exports);
+//# sourceMappingURL=index.js.map

package/dist/shared/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/shared/api/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB"}

package/dist/shared/auth/auth-factory.d.ts

@@ -0,0 +1,43 @@
+import { WebApi } from 'azure-devops-node-api';
+/**
+ * Authentication methods supported by the Azure DevOps client
+ */
+export declare enum AuthenticationMethod {
+    /**
+     * Personal Access Token authentication
+     */
+    PersonalAccessToken = "pat",
+    /**
+     * Azure Identity authentication (DefaultAzureCredential)
+     */
+    AzureIdentity = "azure-identity",
+    /**
+     * Azure CLI authentication (AzureCliCredential)
+     */
+    AzureCli = "azure-cli"
+}
+/**
+ * Authentication configuration for Azure DevOps
+ */
+export interface AuthConfig {
+    /**
+     * Authentication method to use
+     */
+    method: AuthenticationMethod;
+    /**
+     * Organization URL (e.g., https://dev.azure.com/myorg)
+     */
+    organizationUrl: string;
+    /**
+     * Personal Access Token for Azure DevOps (required for PAT authentication)
+     */
+    personalAccessToken?: string;
+}
+/**
+ * Creates an authenticated client for Azure DevOps API based on the specified authentication method
+ *
+ * @param config Authentication configuration
+ * @returns Authenticated WebApi client
+ * @throws {AzureDevOpsAuthenticationError} If authentication fails
+ */
+export declare function createAuthClient(config: AuthConfig): Promise<WebApi>;

package/dist/shared/auth/auth-factory.js

@@ -0,0 +1,140 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationMethod = void 0;
+exports.createAuthClient = createAuthClient;
+const azure_devops_node_api_1 = require("azure-devops-node-api");
+const bearertoken_1 = require("azure-devops-node-api/handlers/bearertoken");
+const identity_1 = require("@azure/identity");
+const errors_1 = require("../errors");
+const azure_devops_url_1 = require("../azure-devops-url");
+/**
+ * Authentication methods supported by the Azure DevOps client
+ */
+var AuthenticationMethod;
+(function (AuthenticationMethod) {
+    /**
+     * Personal Access Token authentication
+     */
+    AuthenticationMethod["PersonalAccessToken"] = "pat";
+    /**
+     * Azure Identity authentication (DefaultAzureCredential)
+     */
+    AuthenticationMethod["AzureIdentity"] = "azure-identity";
+    /**
+     * Azure CLI authentication (AzureCliCredential)
+     */
+    AuthenticationMethod["AzureCli"] = "azure-cli";
+})(AuthenticationMethod || (exports.AuthenticationMethod = AuthenticationMethod = {}));
+/**
+ * Azure DevOps resource ID for token acquisition
+ */
+const AZURE_DEVOPS_RESOURCE_ID = '499b84ac-1321-427f-aa17-267ca6975798';
+/**
+ * Creates an authenticated client for Azure DevOps API based on the specified authentication method
+ *
+ * @param config Authentication configuration
+ * @returns Authenticated WebApi client
+ * @throws {AzureDevOpsAuthenticationError} If authentication fails
+ */
+async function createAuthClient(config) {
+    if (!config.organizationUrl) {
+        throw new errors_1.AzureDevOpsAuthenticationError('Organization URL is required');
+    }
+    if (!(0, azure_devops_url_1.isAzureDevOpsServicesUrl)(config.organizationUrl) &&
+        config.method !== AuthenticationMethod.PersonalAccessToken) {
+        throw new errors_1.AzureDevOpsAuthenticationError('Azure DevOps Server requires Personal Access Token authentication');
+    }
+    try {
+        let client;
+        switch (config.method) {
+            case AuthenticationMethod.PersonalAccessToken:
+                client = await createPatClient(config);
+                break;
+            case AuthenticationMethod.AzureIdentity:
+                client = await createAzureIdentityClient(config);
+                break;
+            case AuthenticationMethod.AzureCli:
+                client = await createAzureCliClient(config);
+                break;
+            default:
+                throw new errors_1.AzureDevOpsAuthenticationError(`Unsupported authentication method: ${config.method}`);
+        }
+        // Test the connection
+        const locationsApi = await client.getLocationsApi();
+        await locationsApi.getResourceAreas();
+        return client;
+    }
+    catch (error) {
+        if (error instanceof errors_1.AzureDevOpsAuthenticationError) {
+            throw error;
+        }
+        throw new errors_1.AzureDevOpsAuthenticationError(`Failed to authenticate with Azure DevOps: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Creates a client using Personal Access Token authentication
+ *
+ * @param config Authentication configuration
+ * @returns Authenticated WebApi client
+ * @throws {AzureDevOpsAuthenticationError} If PAT is missing or authentication fails
+ */
+async function createPatClient(config) {
+    if (!config.personalAccessToken) {
+        throw new errors_1.AzureDevOpsAuthenticationError('Personal Access Token is required');
+    }
+    // Create authentication handler using PAT
+    const authHandler = (0, azure_devops_node_api_1.getPersonalAccessTokenHandler)(config.personalAccessToken);
+    // Create API client with the auth handler
+    return new azure_devops_node_api_1.WebApi(config.organizationUrl, authHandler);
+}
+/**
+ * Creates a client using DefaultAzureCredential authentication
+ *
+ * @param config Authentication configuration
+ * @returns Authenticated WebApi client
+ * @throws {AzureDevOpsAuthenticationError} If token acquisition fails
+ */
+async function createAzureIdentityClient(config) {
+    try {
+        // Create DefaultAzureCredential
+        const credential = new identity_1.DefaultAzureCredential();
+        // Get token for Azure DevOps
+        const token = await credential.getToken(`${AZURE_DEVOPS_RESOURCE_ID}/.default`);
+        if (!token || !token.token) {
+            throw new Error('Failed to acquire token');
+        }
+        // Create bearer token handler
+        const authHandler = new bearertoken_1.BearerCredentialHandler(token.token);
+        // Create API client with the auth handler
+        return new azure_devops_node_api_1.WebApi(config.organizationUrl, authHandler);
+    }
+    catch (error) {
+        throw new errors_1.AzureDevOpsAuthenticationError(`Failed to acquire Azure Identity token: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Creates a client using AzureCliCredential authentication
+ *
+ * @param config Authentication configuration
+ * @returns Authenticated WebApi client
+ * @throws {AzureDevOpsAuthenticationError} If token acquisition fails
+ */
+async function createAzureCliClient(config) {
+    try {
+        // Create AzureCliCredential
+        const credential = new identity_1.AzureCliCredential();
+        // Get token for Azure DevOps
+        const token = await credential.getToken(`${AZURE_DEVOPS_RESOURCE_ID}/.default`);
+        if (!token || !token.token) {
+            throw new Error('Failed to acquire token');
+        }
+        // Create bearer token handler
+        const authHandler = new bearertoken_1.BearerCredentialHandler(token.token);
+        // Create API client with the auth handler
+        return new azure_devops_node_api_1.WebApi(config.organizationUrl, authHandler);
+    }
+    catch (error) {
+        throw new errors_1.AzureDevOpsAuthenticationError(`Failed to acquire Azure CLI token: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+//# sourceMappingURL=auth-factory.js.map

package/dist/shared/auth/auth-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-factory.js","sourceRoot":"","sources":["../../../src/shared/auth/auth-factory.ts"],"names":[],"mappings":";;;AA0DA,4CA8CC;AAxGD,iEAA8E;AAC9E,4EAAqF;AACrF,8CAA6E;AAC7E,sCAA2D;AAC3D,0DAA+D;AAE/D;;GAEG;AACH,IAAY,oBAeX;AAfD,WAAY,oBAAoB;IAC9B;;OAEG;IACH,mDAA2B,CAAA;IAE3B;;OAEG;IACH,wDAAgC,CAAA;IAEhC;;OAEG;IACH,8CAAsB,CAAA;AACxB,CAAC,EAfW,oBAAoB,oCAApB,oBAAoB,QAe/B;AAsBD;;GAEG;AACH,MAAM,wBAAwB,GAAG,sCAAsC,CAAC;AAExE;;;;;;GAMG;AACI,KAAK,UAAU,gBAAgB,CAAC,MAAkB;IACvD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,uCAA8B,CAAC,8BAA8B,CAAC,CAAC;IAC3E,CAAC;IAED,IACE,CAAC,IAAA,2CAAwB,EAAC,MAAM,CAAC,eAAe,CAAC;QACjD,MAAM,CAAC,MAAM,KAAK,oBAAoB,CAAC,mBAAmB,EAC1D,CAAC;QACD,MAAM,IAAI,uCAA8B,CACtC,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,IAAI,MAAc,CAAC;QAEnB,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,oBAAoB,CAAC,mBAAmB;gBAC3C,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM;YACR,KAAK,oBAAoB,CAAC,aAAa;gBACrC,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;gBACjD,MAAM;YACR,KAAK,oBAAoB,CAAC,QAAQ;gBAChC,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;gBAC5C,MAAM;YACR;gBACE,MAAM,IAAI,uCAA8B,CACtC,sCAAsC,MAAM,CAAC,MAAM,EAAE,CACtD,CAAC;QACN,CAAC;QAED,sBAAsB;QACtB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;QACpD,MAAM,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAEtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uCAA8B,EAAE,CAAC;YACpD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,uCAA8B,CACtC,6CAA6C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAAC,MAAkB;IAC/C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAChC,MAAM,IAAI,uCAA8B,CACtC,mCAAmC,CACpC,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,MAAM,WAAW,GAAG,IAAA,qDAA6B,EAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAE9E,0CAA0C;IAC1C,OAAO,IAAI,8BAAM,CAAC,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,yBAAyB,CAAC,MAAkB;IACzD,IAAI,CAAC;QACH,gCAAgC;QAChC,MAAM,UAAU,GAAG,IAAI,iCAAsB,EAAE,CAAC;QAEhD,6BAA6B;QAC7B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CACrC,GAAG,wBAAwB,WAAW,CACvC,CAAC;QAEF,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,8BAA8B;QAC9B,MAAM,WAAW,GAAG,IAAI,qCAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE7D,0CAA0C;QAC1C,OAAO,IAAI,8BAAM,CAAC,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,uCAA8B,CACtC,2CAA2C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB,CAAC,MAAkB;IACpD,IAAI,CAAC;QACH,4BAA4B;QAC5B,MAAM,UAAU,GAAG,IAAI,6BAAkB,EAAE,CAAC;QAE5C,6BAA6B;QAC7B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CACrC,GAAG,wBAAwB,WAAW,CACvC,CAAC;QAEF,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,8BAA8B;QAC9B,MAAM,WAAW,GAAG,IAAI,qCAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE7D,0CAA0C;QAC1C,OAAO,IAAI,8BAAM,CAAC,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,uCAA8B,CACtC,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/shared/auth/auth-factory.spec.unit.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/shared/auth/auth-factory.spec.unit.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const auth_factory_1 = require("./auth-factory");
+const errors_1 = require("../errors");
+jest.mock('azure-devops-node-api', () => ({
+    WebApi: jest.fn().mockImplementation(() => ({
+        getLocationsApi: jest.fn().mockResolvedValue({
+            getResourceAreas: jest.fn().mockResolvedValue([]),
+        }),
+    })),
+    getPersonalAccessTokenHandler: jest.fn().mockReturnValue({}),
+}));
+jest.mock('@azure/identity', () => ({
+    DefaultAzureCredential: jest.fn(),
+    AzureCliCredential: jest.fn(),
+}));
+describe('createAuthClient server auth guard', () => {
+    it('rejects Azure Identity for Azure DevOps Server URLs', async () => {
+        await expect((0, auth_factory_1.createAuthClient)({
+            method: auth_factory_1.AuthenticationMethod.AzureIdentity,
+            organizationUrl: 'https://ado.local/tfs/DefaultCollection',
+        })).rejects.toThrow(errors_1.AzureDevOpsAuthenticationError);
+    });
+    it('rejects Azure CLI auth for Azure DevOps Server URLs', async () => {
+        await expect((0, auth_factory_1.createAuthClient)({
+            method: auth_factory_1.AuthenticationMethod.AzureCli,
+            organizationUrl: 'https://ado.local/tfs/DefaultCollection',
+        })).rejects.toThrow(errors_1.AzureDevOpsAuthenticationError);
+    });
+    it('allows PAT auth for Azure DevOps Server URLs', async () => {
+        await expect((0, auth_factory_1.createAuthClient)({
+            method: auth_factory_1.AuthenticationMethod.PersonalAccessToken,
+            organizationUrl: 'https://ado.local/tfs/DefaultCollection',
+            personalAccessToken: 'test-pat',
+        })).resolves.toBeDefined();
+    });
+});
+//# sourceMappingURL=auth-factory.spec.unit.js.map

package/dist/shared/auth/auth-factory.spec.unit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-factory.spec.unit.js","sourceRoot":"","sources":["../../../src/shared/auth/auth-factory.spec.unit.ts"],"names":[],"mappings":";;AAAA,iDAAwE;AACxE,sCAA2D;AAE3D,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1C,eAAe,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC3C,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;SAClD,CAAC;KACH,CAAC,CAAC;IACH,6BAA6B,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;CAC7D,CAAC,CAAC,CAAC;AAEJ,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,sBAAsB,EAAE,IAAI,CAAC,EAAE,EAAE;IACjC,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE;CAC9B,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,CACV,IAAA,+BAAgB,EAAC;YACf,MAAM,EAAE,mCAAoB,CAAC,aAAa;YAC1C,eAAe,EAAE,yCAAyC;SAC3D,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,uCAA8B,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,CACV,IAAA,+BAAgB,EAAC;YACf,MAAM,EAAE,mCAAoB,CAAC,QAAQ;YACrC,eAAe,EAAE,yCAAyC;SAC3D,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,uCAA8B,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,CACV,IAAA,+BAAgB,EAAC;YACf,MAAM,EAAE,mCAAoB,CAAC,mBAAmB;YAChD,eAAe,EAAE,yCAAyC;YAC1D,mBAAmB,EAAE,UAAU;SAChC,CAAC,CACH,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/shared/auth/client-factory.d.ts

@@ -0,0 +1,109 @@
+import { WebApi } from 'azure-devops-node-api';
+import { ICoreApi } from 'azure-devops-node-api/CoreApi';
+import { IGitApi } from 'azure-devops-node-api/GitApi';
+import { IWorkItemTrackingApi } from 'azure-devops-node-api/WorkItemTrackingApi';
+import { IBuildApi } from 'azure-devops-node-api/BuildApi';
+import { ITestApi } from 'azure-devops-node-api/TestApi';
+import { IReleaseApi } from 'azure-devops-node-api/ReleaseApi';
+import { ITaskAgentApi } from 'azure-devops-node-api/TaskAgentApi';
+import { ITaskApi } from 'azure-devops-node-api/TaskApi';
+import { IProfileApi } from 'azure-devops-node-api/ProfileApi';
+import { AuthConfig } from './auth-factory';
+/**
+ * Azure DevOps Client
+ *
+ * Provides access to Azure DevOps APIs using the configured authentication method
+ */
+export declare class AzureDevOpsClient {
+    private config;
+    private clientPromise;
+    /**
+     * Creates a new Azure DevOps client
+     *
+     * @param config Authentication configuration
+     */
+    constructor(config: AuthConfig);
+    /**
+     * Get the authenticated Azure DevOps client
+     *
+     * @returns The authenticated WebApi client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    private getClient;
+    /**
+     * Get the underlying WebApi client
+     *
+     * @returns The authenticated WebApi client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getWebApiClient(): Promise<WebApi>;
+    /**
+     * Check if the client is authenticated
+     *
+     * @returns True if the client is authenticated
+     */
+    isAuthenticated(): Promise<boolean>;
+    /**
+     * Get the Core API
+     *
+     * @returns The Core API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getCoreApi(): Promise<ICoreApi>;
+    /**
+     * Get the Git API
+     *
+     * @returns The Git API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getGitApi(): Promise<IGitApi>;
+    /**
+     * Get the Work Item Tracking API
+     *
+     * @returns The Work Item Tracking API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getWorkItemTrackingApi(): Promise<IWorkItemTrackingApi>;
+    /**
+     * Get the Build API
+     *
+     * @returns The Build API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getBuildApi(): Promise<IBuildApi>;
+    /**
+     * Get the Test API
+     *
+     * @returns The Test API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getTestApi(): Promise<ITestApi>;
+    /**
+     * Get the Release API
+     *
+     * @returns The Release API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getReleaseApi(): Promise<IReleaseApi>;
+    /**
+     * Get the Task Agent API
+     *
+     * @returns The Task Agent API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getTaskAgentApi(): Promise<ITaskAgentApi>;
+    /**
+     * Get the Task API
+     *
+     * @returns The Task API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getTaskApi(): Promise<ITaskApi>;
+    /**
+     * Get the Profile API
+     *
+     * @returns The Profile API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getProfileApi(): Promise<IProfileApi>;
+}