mcp-server-azure-devops 1.1.0

package/dist/shared/api/client.js

@@ -0,0 +1,238 @@
+import { AzureDevOpsError, AzureDevOpsAuthenticationError } from '../errors';
+import { AuthenticationMethod } from '../auth';
+import { AzureDevOpsClient as SharedClient } from '../auth/client-factory';
+/**
+ * Azure DevOps Client
+ *
+ * Provides access to Azure DevOps APIs
+ */
+export class AzureDevOpsClient {
+    config;
+    clientPromise = null;
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Get the authenticated Azure DevOps client
+     *
+     * @returns The authenticated WebApi client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getClient() {
+        if (!this.clientPromise) {
+            this.clientPromise = (async () => {
+                try {
+                    const sharedClient = new SharedClient({
+                        method: AuthenticationMethod.PersonalAccessToken,
+                        organizationUrl: this.config.orgUrl,
+                        personalAccessToken: this.config.pat,
+                    });
+                    return await sharedClient.getWebApiClient();
+                }
+                catch (error) {
+                    // If it's already an AzureDevOpsError, rethrow it
+                    if (error instanceof AzureDevOpsError) {
+                        throw error;
+                    }
+                    // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+                    throw new AzureDevOpsAuthenticationError(error instanceof Error
+                        ? `Authentication failed: ${error.message}`
+                        : 'Authentication failed: Unknown error');
+                }
+            })();
+        }
+        return this.clientPromise;
+    }
+    /**
+     * Check if the client is authenticated
+     *
+     * @returns True if the client is authenticated
+     */
+    async isAuthenticated() {
+        try {
+            const client = await this.getClient();
+            return !!client;
+        }
+        catch {
+            // Any error means we're not authenticated
+            return false;
+        }
+    }
+    /**
+     * Get the Core API
+     *
+     * @returns The Core API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getCoreApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getCoreApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Core API: ${error.message}`
+                : 'Failed to get Core API: Unknown error');
+        }
+    }
+    /**
+     * Get the Git API
+     *
+     * @returns The Git API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getGitApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getGitApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Git API: ${error.message}`
+                : 'Failed to get Git API: Unknown error');
+        }
+    }
+    /**
+     * Get the Work Item Tracking API
+     *
+     * @returns The Work Item Tracking API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getWorkItemTrackingApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getWorkItemTrackingApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Work Item Tracking API: ${error.message}`
+                : 'Failed to get Work Item Tracking API: Unknown error');
+        }
+    }
+    /**
+     * Get the Build API
+     *
+     * @returns The Build API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getBuildApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getBuildApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Build API: ${error.message}`
+                : 'Failed to get Build API: Unknown error');
+        }
+    }
+    /**
+     * Get the Test API
+     *
+     * @returns The Test API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getTestApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getTestApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Test API: ${error.message}`
+                : 'Failed to get Test API: Unknown error');
+        }
+    }
+    /**
+     * Get the Release API
+     *
+     * @returns The Release API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getReleaseApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getReleaseApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Release API: ${error.message}`
+                : 'Failed to get Release API: Unknown error');
+        }
+    }
+    /**
+     * Get the Task Agent API
+     *
+     * @returns The Task Agent API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getTaskAgentApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getTaskAgentApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Task Agent API: ${error.message}`
+                : 'Failed to get Task Agent API: Unknown error');
+        }
+    }
+    /**
+     * Get the Task API
+     *
+     * @returns The Task API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    async getTaskApi() {
+        try {
+            const client = await this.getClient();
+            return await client.getTaskApi();
+        }
+        catch (error) {
+            // If it's already an AzureDevOpsError, rethrow it
+            if (error instanceof AzureDevOpsError) {
+                throw error;
+            }
+            // Otherwise, wrap it in an AzureDevOpsAuthenticationError
+            throw new AzureDevOpsAuthenticationError(error instanceof Error
+                ? `Failed to get Task API: ${error.message}`
+                : 'Failed to get Task API: Unknown error');
+        }
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/shared/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/shared/api/client.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gBAAgB,EAAE,8BAA8B,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,iBAAiB,IAAI,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAO3E;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IACpB,MAAM,CAA0B;IAChC,aAAa,GAA2B,IAAI,CAAC;IAErD,YAAY,MAA+B;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,aAAa,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC/B,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC;wBACpC,MAAM,EAAE,oBAAoB,CAAC,mBAAmB;wBAChD,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;wBACnC,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;qBACrC,CAAC,CAAC;oBACH,OAAO,MAAM,YAAY,CAAC,eAAe,EAAE,CAAC;gBAC9C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,kDAAkD;oBAClD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;wBACtC,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,0DAA0D;oBAC1D,MAAM,IAAI,8BAA8B,CACtC,KAAK,YAAY,KAAK;wBACpB,CAAC,CAAC,0BAA0B,KAAK,CAAC,OAAO,EAAE;wBAC3C,CAAC,CAAC,sCAAsC,CAC3C,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,eAAe;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,MAAM,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,8BAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE;gBAC5C,CAAC,CAAC,uCAAuC,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,SAAS;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,8BAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,0BAA0B,KAAK,CAAC,OAAO,EAAE;gBAC3C,CAAC,CAAC,sCAAsC,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,sBAAsB;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,8BAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,yCAAyC,KAAK,CAAC,OAAO,EAAE;gBAC1D,CAAC,CAAC,qDAAqD,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,WAAW;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,8BAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,4BAA4B,KAAK,CAAC,OAAO,EAAE;gBAC7C,CAAC,CAAC,wCAAwC,CAC7C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,8BAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE;gBAC5C,CAAC,CAAC,uCAAuC,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,aAAa;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,8BAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,8BAA8B,KAAK,CAAC,OAAO,EAAE;gBAC/C,CAAC,CAAC,0CAA0C,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,eAAe;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,8BAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE;gBAClD,CAAC,CAAC,6CAA6C,CAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,IAAI,8BAA8B,CACtC,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE;gBAC5C,CAAC,CAAC,uCAAuC,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/shared/api/index.d.ts

@@ -0,0 +1 @@
+export * from './client';

package/dist/shared/api/index.js

@@ -0,0 +1,2 @@
+export * from './client';
+//# sourceMappingURL=index.js.map

package/dist/shared/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/shared/api/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC"}

package/dist/shared/auth/auth-factory.d.ts

@@ -0,0 +1,43 @@
+import { WebApi } from 'azure-devops-node-api';
+/**
+ * Authentication methods supported by the Azure DevOps client
+ */
+export declare enum AuthenticationMethod {
+    /**
+     * Personal Access Token authentication
+     */
+    PersonalAccessToken = "pat",
+    /**
+     * Azure Identity authentication (DefaultAzureCredential)
+     */
+    AzureIdentity = "azure-identity",
+    /**
+     * Azure CLI authentication (AzureCliCredential)
+     */
+    AzureCli = "azure-cli"
+}
+/**
+ * Authentication configuration for Azure DevOps
+ */
+export interface AuthConfig {
+    /**
+     * Authentication method to use
+     */
+    method: AuthenticationMethod;
+    /**
+     * Organization URL (e.g., https://dev.azure.com/myorg)
+     */
+    organizationUrl: string;
+    /**
+     * Personal Access Token for Azure DevOps (required for PAT authentication)
+     */
+    personalAccessToken?: string;
+}
+/**
+ * Creates an authenticated client for Azure DevOps API based on the specified authentication method
+ *
+ * @param config Authentication configuration
+ * @returns Authenticated WebApi client
+ * @throws {AzureDevOpsAuthenticationError} If authentication fails
+ */
+export declare function createAuthClient(config: AuthConfig): Promise<WebApi>;

package/dist/shared/auth/auth-factory.js

@@ -0,0 +1,136 @@
+import { WebApi, getPersonalAccessTokenHandler } from 'azure-devops-node-api';
+import { BearerCredentialHandler } from 'azure-devops-node-api/handlers/bearertoken';
+import { DefaultAzureCredential, AzureCliCredential } from '@azure/identity';
+import { AzureDevOpsAuthenticationError } from '../errors';
+import { isAzureDevOpsServicesUrl } from '../azure-devops-url';
+/**
+ * Authentication methods supported by the Azure DevOps client
+ */
+export var AuthenticationMethod;
+(function (AuthenticationMethod) {
+    /**
+     * Personal Access Token authentication
+     */
+    AuthenticationMethod["PersonalAccessToken"] = "pat";
+    /**
+     * Azure Identity authentication (DefaultAzureCredential)
+     */
+    AuthenticationMethod["AzureIdentity"] = "azure-identity";
+    /**
+     * Azure CLI authentication (AzureCliCredential)
+     */
+    AuthenticationMethod["AzureCli"] = "azure-cli";
+})(AuthenticationMethod || (AuthenticationMethod = {}));
+/**
+ * Azure DevOps resource ID for token acquisition
+ */
+const AZURE_DEVOPS_RESOURCE_ID = '499b84ac-1321-427f-aa17-267ca6975798';
+/**
+ * Creates an authenticated client for Azure DevOps API based on the specified authentication method
+ *
+ * @param config Authentication configuration
+ * @returns Authenticated WebApi client
+ * @throws {AzureDevOpsAuthenticationError} If authentication fails
+ */
+export async function createAuthClient(config) {
+    if (!config.organizationUrl) {
+        throw new AzureDevOpsAuthenticationError('Organization URL is required');
+    }
+    if (!isAzureDevOpsServicesUrl(config.organizationUrl) &&
+        config.method !== AuthenticationMethod.PersonalAccessToken) {
+        throw new AzureDevOpsAuthenticationError('Azure DevOps Server requires Personal Access Token authentication');
+    }
+    try {
+        let client;
+        switch (config.method) {
+            case AuthenticationMethod.PersonalAccessToken:
+                client = await createPatClient(config);
+                break;
+            case AuthenticationMethod.AzureIdentity:
+                client = await createAzureIdentityClient(config);
+                break;
+            case AuthenticationMethod.AzureCli:
+                client = await createAzureCliClient(config);
+                break;
+            default:
+                throw new AzureDevOpsAuthenticationError(`Unsupported authentication method: ${config.method}`);
+        }
+        // Test the connection
+        const locationsApi = await client.getLocationsApi();
+        await locationsApi.getResourceAreas();
+        return client;
+    }
+    catch (error) {
+        if (error instanceof AzureDevOpsAuthenticationError) {
+            throw error;
+        }
+        throw new AzureDevOpsAuthenticationError(`Failed to authenticate with Azure DevOps: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Creates a client using Personal Access Token authentication
+ *
+ * @param config Authentication configuration
+ * @returns Authenticated WebApi client
+ * @throws {AzureDevOpsAuthenticationError} If PAT is missing or authentication fails
+ */
+async function createPatClient(config) {
+    if (!config.personalAccessToken) {
+        throw new AzureDevOpsAuthenticationError('Personal Access Token is required');
+    }
+    // Create authentication handler using PAT
+    const authHandler = getPersonalAccessTokenHandler(config.personalAccessToken);
+    // Create API client with the auth handler
+    return new WebApi(config.organizationUrl, authHandler);
+}
+/**
+ * Creates a client using DefaultAzureCredential authentication
+ *
+ * @param config Authentication configuration
+ * @returns Authenticated WebApi client
+ * @throws {AzureDevOpsAuthenticationError} If token acquisition fails
+ */
+async function createAzureIdentityClient(config) {
+    try {
+        // Create DefaultAzureCredential
+        const credential = new DefaultAzureCredential();
+        // Get token for Azure DevOps
+        const token = await credential.getToken(`${AZURE_DEVOPS_RESOURCE_ID}/.default`);
+        if (!token || !token.token) {
+            throw new Error('Failed to acquire token');
+        }
+        // Create bearer token handler
+        const authHandler = new BearerCredentialHandler(token.token);
+        // Create API client with the auth handler
+        return new WebApi(config.organizationUrl, authHandler);
+    }
+    catch (error) {
+        throw new AzureDevOpsAuthenticationError(`Failed to acquire Azure Identity token: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Creates a client using AzureCliCredential authentication
+ *
+ * @param config Authentication configuration
+ * @returns Authenticated WebApi client
+ * @throws {AzureDevOpsAuthenticationError} If token acquisition fails
+ */
+async function createAzureCliClient(config) {
+    try {
+        // Create AzureCliCredential
+        const credential = new AzureCliCredential();
+        // Get token for Azure DevOps
+        const token = await credential.getToken(`${AZURE_DEVOPS_RESOURCE_ID}/.default`);
+        if (!token || !token.token) {
+            throw new Error('Failed to acquire token');
+        }
+        // Create bearer token handler
+        const authHandler = new BearerCredentialHandler(token.token);
+        // Create API client with the auth handler
+        return new WebApi(config.organizationUrl, authHandler);
+    }
+    catch (error) {
+        throw new AzureDevOpsAuthenticationError(`Failed to acquire Azure CLI token: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+//# sourceMappingURL=auth-factory.js.map

package/dist/shared/auth/auth-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-factory.js","sourceRoot":"","sources":["../../../src/shared/auth/auth-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,8BAA8B,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D;;GAEG;AACH,MAAM,CAAN,IAAY,oBAeX;AAfD,WAAY,oBAAoB;IAC9B;;OAEG;IACH,mDAA2B,CAAA;IAE3B;;OAEG;IACH,wDAAgC,CAAA;IAEhC;;OAEG;IACH,8CAAsB,CAAA;AACxB,CAAC,EAfW,oBAAoB,KAApB,oBAAoB,QAe/B;AAsBD;;GAEG;AACH,MAAM,wBAAwB,GAAG,sCAAsC,CAAC;AAExE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAkB;IACvD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,8BAA8B,CAAC,8BAA8B,CAAC,CAAC;IAC3E,CAAC;IAED,IACE,CAAC,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC;QACjD,MAAM,CAAC,MAAM,KAAK,oBAAoB,CAAC,mBAAmB,EAC1D,CAAC;QACD,MAAM,IAAI,8BAA8B,CACtC,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,IAAI,MAAc,CAAC;QAEnB,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,oBAAoB,CAAC,mBAAmB;gBAC3C,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM;YACR,KAAK,oBAAoB,CAAC,aAAa;gBACrC,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;gBACjD,MAAM;YACR,KAAK,oBAAoB,CAAC,QAAQ;gBAChC,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;gBAC5C,MAAM;YACR;gBACE,MAAM,IAAI,8BAA8B,CACtC,sCAAsC,MAAM,CAAC,MAAM,EAAE,CACtD,CAAC;QACN,CAAC;QAED,sBAAsB;QACtB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;QACpD,MAAM,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAEtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;YACpD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,8BAA8B,CACtC,6CAA6C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAAC,MAAkB;IAC/C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAChC,MAAM,IAAI,8BAA8B,CACtC,mCAAmC,CACpC,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,MAAM,WAAW,GAAG,6BAA6B,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAE9E,0CAA0C;IAC1C,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,yBAAyB,CAAC,MAAkB;IACzD,IAAI,CAAC;QACH,gCAAgC;QAChC,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAEhD,6BAA6B;QAC7B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CACrC,GAAG,wBAAwB,WAAW,CACvC,CAAC;QAEF,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,8BAA8B;QAC9B,MAAM,WAAW,GAAG,IAAI,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE7D,0CAA0C;QAC1C,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,8BAA8B,CACtC,2CAA2C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB,CAAC,MAAkB;IACpD,IAAI,CAAC;QACH,4BAA4B;QAC5B,MAAM,UAAU,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAE5C,6BAA6B;QAC7B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CACrC,GAAG,wBAAwB,WAAW,CACvC,CAAC;QAEF,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,8BAA8B;QAC9B,MAAM,WAAW,GAAG,IAAI,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE7D,0CAA0C;QAC1C,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,8BAA8B,CACtC,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/shared/auth/auth-factory.spec.unit.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/shared/auth/auth-factory.spec.unit.js

@@ -0,0 +1,36 @@
+import { createAuthClient, AuthenticationMethod } from './auth-factory';
+import { AzureDevOpsAuthenticationError } from '../errors';
+jest.mock('azure-devops-node-api', () => ({
+    WebApi: jest.fn().mockImplementation(() => ({
+        getLocationsApi: jest.fn().mockResolvedValue({
+            getResourceAreas: jest.fn().mockResolvedValue([]),
+        }),
+    })),
+    getPersonalAccessTokenHandler: jest.fn().mockReturnValue({}),
+}));
+jest.mock('@azure/identity', () => ({
+    DefaultAzureCredential: jest.fn(),
+    AzureCliCredential: jest.fn(),
+}));
+describe('createAuthClient server auth guard', () => {
+    it('rejects Azure Identity for Azure DevOps Server URLs', async () => {
+        await expect(createAuthClient({
+            method: AuthenticationMethod.AzureIdentity,
+            organizationUrl: 'https://ado.local/tfs/DefaultCollection',
+        })).rejects.toThrow(AzureDevOpsAuthenticationError);
+    });
+    it('rejects Azure CLI auth for Azure DevOps Server URLs', async () => {
+        await expect(createAuthClient({
+            method: AuthenticationMethod.AzureCli,
+            organizationUrl: 'https://ado.local/tfs/DefaultCollection',
+        })).rejects.toThrow(AzureDevOpsAuthenticationError);
+    });
+    it('allows PAT auth for Azure DevOps Server URLs', async () => {
+        await expect(createAuthClient({
+            method: AuthenticationMethod.PersonalAccessToken,
+            organizationUrl: 'https://ado.local/tfs/DefaultCollection',
+            personalAccessToken: 'test-pat',
+        })).resolves.toBeDefined();
+    });
+});
+//# sourceMappingURL=auth-factory.spec.unit.js.map

package/dist/shared/auth/auth-factory.spec.unit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-factory.spec.unit.js","sourceRoot":"","sources":["../../../src/shared/auth/auth-factory.spec.unit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,WAAW,CAAC;AAE3D,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1C,eAAe,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC3C,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;SAClD,CAAC;KACH,CAAC,CAAC;IACH,6BAA6B,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;CAC7D,CAAC,CAAC,CAAC;AAEJ,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,sBAAsB,EAAE,IAAI,CAAC,EAAE,EAAE;IACjC,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE;CAC9B,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,CACV,gBAAgB,CAAC;YACf,MAAM,EAAE,oBAAoB,CAAC,aAAa;YAC1C,eAAe,EAAE,yCAAyC;SAC3D,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,CACV,gBAAgB,CAAC;YACf,MAAM,EAAE,oBAAoB,CAAC,QAAQ;YACrC,eAAe,EAAE,yCAAyC;SAC3D,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,CACV,gBAAgB,CAAC;YACf,MAAM,EAAE,oBAAoB,CAAC,mBAAmB;YAChD,eAAe,EAAE,yCAAyC;YAC1D,mBAAmB,EAAE,UAAU;SAChC,CAAC,CACH,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/shared/auth/client-factory.d.ts

@@ -0,0 +1,109 @@
+import { WebApi } from 'azure-devops-node-api';
+import { ICoreApi } from 'azure-devops-node-api/CoreApi';
+import { IGitApi } from 'azure-devops-node-api/GitApi';
+import { IWorkItemTrackingApi } from 'azure-devops-node-api/WorkItemTrackingApi';
+import { IBuildApi } from 'azure-devops-node-api/BuildApi';
+import { ITestApi } from 'azure-devops-node-api/TestApi';
+import { IReleaseApi } from 'azure-devops-node-api/ReleaseApi';
+import { ITaskAgentApi } from 'azure-devops-node-api/TaskAgentApi';
+import { ITaskApi } from 'azure-devops-node-api/TaskApi';
+import { IProfileApi } from 'azure-devops-node-api/ProfileApi';
+import { AuthConfig } from './auth-factory';
+/**
+ * Azure DevOps Client
+ *
+ * Provides access to Azure DevOps APIs using the configured authentication method
+ */
+export declare class AzureDevOpsClient {
+    private config;
+    private clientPromise;
+    /**
+     * Creates a new Azure DevOps client
+     *
+     * @param config Authentication configuration
+     */
+    constructor(config: AuthConfig);
+    /**
+     * Get the authenticated Azure DevOps client
+     *
+     * @returns The authenticated WebApi client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    private getClient;
+    /**
+     * Get the underlying WebApi client
+     *
+     * @returns The authenticated WebApi client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getWebApiClient(): Promise<WebApi>;
+    /**
+     * Check if the client is authenticated
+     *
+     * @returns True if the client is authenticated
+     */
+    isAuthenticated(): Promise<boolean>;
+    /**
+     * Get the Core API
+     *
+     * @returns The Core API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getCoreApi(): Promise<ICoreApi>;
+    /**
+     * Get the Git API
+     *
+     * @returns The Git API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getGitApi(): Promise<IGitApi>;
+    /**
+     * Get the Work Item Tracking API
+     *
+     * @returns The Work Item Tracking API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getWorkItemTrackingApi(): Promise<IWorkItemTrackingApi>;
+    /**
+     * Get the Build API
+     *
+     * @returns The Build API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getBuildApi(): Promise<IBuildApi>;
+    /**
+     * Get the Test API
+     *
+     * @returns The Test API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getTestApi(): Promise<ITestApi>;
+    /**
+     * Get the Release API
+     *
+     * @returns The Release API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getReleaseApi(): Promise<IReleaseApi>;
+    /**
+     * Get the Task Agent API
+     *
+     * @returns The Task Agent API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getTaskAgentApi(): Promise<ITaskAgentApi>;
+    /**
+     * Get the Task API
+     *
+     * @returns The Task API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getTaskApi(): Promise<ITaskApi>;
+    /**
+     * Get the Profile API
+     *
+     * @returns The Profile API client
+     * @throws {AzureDevOpsAuthenticationError} If authentication fails
+     */
+    getProfileApi(): Promise<IProfileApi>;
+}