devops-mcp 1.0.0__tar.gz → 1.1.0__tar.gz

{devops_mcp-1.0.0/src/devops_mcp.egg-info → devops_mcp-1.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devops-mcp
-Version: 1.0.0
+Version: 1.1.0
 Summary: An MCP server for interacting with Azure DevOps
 Author: Ryan James
 License-Expression: MIT
@@ -251,7 +251,7 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 
 ## Tools
 
-**31 tools** across 4 domains. Tools marked with a gate are only registered when the corresponding env flag is set.
+**46 tools** across 6 domains. Tools marked with a gate are only registered when the corresponding env flag is set.
 
 | Gate | Meaning |
 |---|---|
@@ -259,7 +259,7 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 | `write` | Registered only when `AZDO_ALLOW_WRITE=true`. |
 | `delete` | Registered only when `AZDO_ALLOW_DELETE=true`. |
 
-### Pipelines (7 tools)
+### Pipelines (8 tools)
 
 | Tool | Gate | Description |
 |---|---|---|
@@ -270,16 +270,21 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 | `devops_list_run_logs` | default | List log metadata for a build by `buildId` |
 | `devops_get_run_log_content` | default | Get plain-text content of a specific log; use `start_line`/`end_line` to slice large logs |
 | `devops_list_build_artifacts` | default | List artifacts produced by a build |
+| `devops_run_pipeline` | write | Trigger a new pipeline run; optionally override branch, template parameters, or queue-time variables |
 
-### Repositories (3 tools)
+### Repositories (7 tools)
 
 | Tool | Gate | Description |
 |---|---|---|
 | `devops_list_repositories` | default | List Git repositories in a project |
 | `devops_get_repository` | default | Get details of a specific repository |
 | `devops_list_branches` | default | List branches in a repository |
+| `devops_get_file_content` | default | Get the text content of a file; supports optional `branch` or `commit_id`; binary files return an error |
+| `devops_list_repository_items` | default | Browse files and folders; control depth with `recursion_level` (`oneLevel`, `full`, etc.) |
+| `devops_list_commits` | default | List commits with optional filters for branch, author, and date range |
+| `devops_get_commit` | default | Get details of a specific commit; set `change_count` to include changed file paths |
 
-### Pull Requests (14 tools)
+### Pull Requests (17 tools)
 
 | Tool | Gate | Description |
 |---|---|---|
@@ -287,6 +292,9 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 | `devops_list_pull_requests` | default | List pull requests with optional filters (status, branch, creator, reviewer, labels) |
 | `devops_create_pull_request` | write | Create a new pull request, optionally linking work items |
 | `devops_update_pull_request` | write | Update title, description, status, draft state, target branch, auto-complete, or completion options |
+| `devops_complete_pull_request` | write | Complete (merge) a pull request — irreversible; confirm merge strategy and source-branch deletion first to avoid unwanted merge type or history loss |
+| `devops_abandon_pull_request` | write | Abandon a pull request without merging |
+| `devops_vote_pull_request` | write | Cast a reviewer vote (10 approve, 5 approve with suggestions, 0 reset, -5 waiting, -10 reject) |
 | `devops_tag_pull_request` | write | Add labels/tags to a pull request |
 | `devops_link_work_items_to_pull_request` | write | Link Azure Boards work items to a pull request |
 | `devops_list_pull_request_threads` | default | List comment threads on a pull request |
@@ -298,7 +306,7 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 | `devops_list_pull_request_iterations` | default | List a pull request's iterations (push history) |
 | `devops_get_pull_request_changes` | default | List changed files for a PR iteration (path + change type) |
 
-### Work Items (7 tools)
+### Work Items (9 tools)
 
 | Tool | Gate | Description |
 |---|---|---|
@@ -309,11 +317,30 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 | `devops_update_work_item` | write | Update fields on an existing work item |
 | `devops_add_work_item_comment` | write | Add a comment to a work item |
 | `devops_update_work_item_comment` | write | Update an existing work item comment |
+| `devops_list_work_item_types` | default | List work item types (e.g., Bug, Task, Epic) and their reference names |
+| `devops_list_work_item_fields` | default | List field definitions for a work item type or all fields in the process |
+
+### Discovery (2 tools)
+
+| Tool | Gate | Description |
+|---|---|---|
+| `devops_list_projects` | default | List projects in an organization; use when project name is unknown |
+| `devops_list_teams` | default | List teams in a project; supports `mine=true` to filter to the authenticated user's teams |
+
+### Advanced Security (3 tools)
+
+Requires GitHub Advanced Security for Azure DevOps (GHAzDo) to be enabled on the repository.
+
+| Tool | Gate | Description |
+|---|---|---|
+| `devops_list_advanced_security_alerts` | default | List security alerts for a repository; filter by `alert_type` (`secret`, `dependency`, `code`), state, severity, rule, tool, or branch |
+| `devops_get_advanced_security_alert` | default | Get a single alert by ID. `expand=validationFingerprint` can return secret values in cleartext — leave unset unless needed |
+| `devops_update_advanced_security_alert` | write | Dismiss, re-activate, or mark an alert fixed; dismissing requires a dismissal reason |
 
 ---
 
 ## API Reference
 
-All tools use the [Azure DevOps REST API](https://learn.microsoft.com/en-us/rest/api/azure/devops/). Pipeline, repository, work item read tools, and the PR comment-thread and diff tools use **v7.1**. The remaining pull request tools (get/list/create/update/tag/link) and work item write operations use **v7.2-preview**.
+All tools use the [Azure DevOps REST API](https://learn.microsoft.com/en-us/rest/api/azure/devops/). Pipeline, repository, and discovery tools use **v7.1**. Work item schema tools (`devops_list_work_item_types`, `devops_list_work_item_fields`) use **v7.1**. PR tools (get/list/create/update/tag/link) and work item write operations use **v7.2-preview**. Advanced Security alert tools use **v7.2-preview.1** on the `advsec.dev.azure.com` host.
 
 **Note:** `run_id` and `build_id` share the same numeric value — a Pipelines API `run_id` is identical to the Build API `buildId` for the same run. This enables cross-API calls (e.g., use `devops_list_run_logs` to get log IDs, then `devops_get_run_log_content` with the same `build_id`).

{devops_mcp-1.0.0 → devops_mcp-1.1.0}/README.md

@@ -223,7 +223,7 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 
 ## Tools
 
-**31 tools** across 4 domains. Tools marked with a gate are only registered when the corresponding env flag is set.
+**46 tools** across 6 domains. Tools marked with a gate are only registered when the corresponding env flag is set.
 
 | Gate | Meaning |
 |---|---|
@@ -231,7 +231,7 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 | `write` | Registered only when `AZDO_ALLOW_WRITE=true`. |
 | `delete` | Registered only when `AZDO_ALLOW_DELETE=true`. |
 
-### Pipelines (7 tools)
+### Pipelines (8 tools)
 
 | Tool | Gate | Description |
 |---|---|---|
@@ -242,16 +242,21 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 | `devops_list_run_logs` | default | List log metadata for a build by `buildId` |
 | `devops_get_run_log_content` | default | Get plain-text content of a specific log; use `start_line`/`end_line` to slice large logs |
 | `devops_list_build_artifacts` | default | List artifacts produced by a build |
+| `devops_run_pipeline` | write | Trigger a new pipeline run; optionally override branch, template parameters, or queue-time variables |
 
-### Repositories (3 tools)
+### Repositories (7 tools)
 
 | Tool | Gate | Description |
 |---|---|---|
 | `devops_list_repositories` | default | List Git repositories in a project |
 | `devops_get_repository` | default | Get details of a specific repository |
 | `devops_list_branches` | default | List branches in a repository |
+| `devops_get_file_content` | default | Get the text content of a file; supports optional `branch` or `commit_id`; binary files return an error |
+| `devops_list_repository_items` | default | Browse files and folders; control depth with `recursion_level` (`oneLevel`, `full`, etc.) |
+| `devops_list_commits` | default | List commits with optional filters for branch, author, and date range |
+| `devops_get_commit` | default | Get details of a specific commit; set `change_count` to include changed file paths |
 
-### Pull Requests (14 tools)
+### Pull Requests (17 tools)
 
 | Tool | Gate | Description |
 |---|---|---|
@@ -259,6 +264,9 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 | `devops_list_pull_requests` | default | List pull requests with optional filters (status, branch, creator, reviewer, labels) |
 | `devops_create_pull_request` | write | Create a new pull request, optionally linking work items |
 | `devops_update_pull_request` | write | Update title, description, status, draft state, target branch, auto-complete, or completion options |
+| `devops_complete_pull_request` | write | Complete (merge) a pull request — irreversible; confirm merge strategy and source-branch deletion first to avoid unwanted merge type or history loss |
+| `devops_abandon_pull_request` | write | Abandon a pull request without merging |
+| `devops_vote_pull_request` | write | Cast a reviewer vote (10 approve, 5 approve with suggestions, 0 reset, -5 waiting, -10 reject) |
 | `devops_tag_pull_request` | write | Add labels/tags to a pull request |
 | `devops_link_work_items_to_pull_request` | write | Link Azure Boards work items to a pull request |
 | `devops_list_pull_request_threads` | default | List comment threads on a pull request |
@@ -270,7 +278,7 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 | `devops_list_pull_request_iterations` | default | List a pull request's iterations (push history) |
 | `devops_get_pull_request_changes` | default | List changed files for a PR iteration (path + change type) |
 
-### Work Items (7 tools)
+### Work Items (9 tools)
 
 | Tool | Gate | Description |
 |---|---|---|
@@ -281,11 +289,30 @@ Add to `.vscode/mcp.json` in your project root. Note: `.vscode/mcp.json` is giti
 | `devops_update_work_item` | write | Update fields on an existing work item |
 | `devops_add_work_item_comment` | write | Add a comment to a work item |
 | `devops_update_work_item_comment` | write | Update an existing work item comment |
+| `devops_list_work_item_types` | default | List work item types (e.g., Bug, Task, Epic) and their reference names |
+| `devops_list_work_item_fields` | default | List field definitions for a work item type or all fields in the process |
+
+### Discovery (2 tools)
+
+| Tool | Gate | Description |
+|---|---|---|
+| `devops_list_projects` | default | List projects in an organization; use when project name is unknown |
+| `devops_list_teams` | default | List teams in a project; supports `mine=true` to filter to the authenticated user's teams |
+
+### Advanced Security (3 tools)
+
+Requires GitHub Advanced Security for Azure DevOps (GHAzDo) to be enabled on the repository.
+
+| Tool | Gate | Description |
+|---|---|---|
+| `devops_list_advanced_security_alerts` | default | List security alerts for a repository; filter by `alert_type` (`secret`, `dependency`, `code`), state, severity, rule, tool, or branch |
+| `devops_get_advanced_security_alert` | default | Get a single alert by ID. `expand=validationFingerprint` can return secret values in cleartext — leave unset unless needed |
+| `devops_update_advanced_security_alert` | write | Dismiss, re-activate, or mark an alert fixed; dismissing requires a dismissal reason |
 
 ---
 
 ## API Reference
 
-All tools use the [Azure DevOps REST API](https://learn.microsoft.com/en-us/rest/api/azure/devops/). Pipeline, repository, work item read tools, and the PR comment-thread and diff tools use **v7.1**. The remaining pull request tools (get/list/create/update/tag/link) and work item write operations use **v7.2-preview**.
+All tools use the [Azure DevOps REST API](https://learn.microsoft.com/en-us/rest/api/azure/devops/). Pipeline, repository, and discovery tools use **v7.1**. Work item schema tools (`devops_list_work_item_types`, `devops_list_work_item_fields`) use **v7.1**. PR tools (get/list/create/update/tag/link) and work item write operations use **v7.2-preview**. Advanced Security alert tools use **v7.2-preview.1** on the `advsec.dev.azure.com` host.
 
 **Note:** `run_id` and `build_id` share the same numeric value — a Pipelines API `run_id` is identical to the Build API `buildId` for the same run. This enables cross-API calls (e.g., use `devops_list_run_logs` to get log IDs, then `devops_get_run_log_content` with the same `build_id`).

{devops_mcp-1.0.0 → devops_mcp-1.1.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "devops-mcp"
-version = "1.0.0"
+version = "1.1.0"
 description = "An MCP server for interacting with Azure DevOps"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -69,9 +69,8 @@ target-version = "py310"
 
 [tool.ruff.lint]
 # I = isort-compatible import ordering (stdlib -> third-party -> local).
-# Scoped to rules that pass cleanly across the repo; broader rule sets
-# (E, W, F, etc.) are deferred to avoid a repo-wide src/ refactor.
-select = ["I"]
+# F = Pyflakes: undefined names, unused imports/variables, f-string issues.
+select = ["I", "F"]
 
 [tool.ruff.lint.per-file-ignores]
 # src/ pre-dates this gate; import order there is deferred to avoid a

{devops_mcp-1.0.0 → devops_mcp-1.1.0}/src/devops_mcp/client.py

@@ -202,6 +202,26 @@ def build_url(organization: str, project: str, path: str) -> str:
     return f"https://dev.azure.com/{enc_org}/{enc_project}/_apis/{enc_path}"
 
 
+def build_org_url(organization: str, path: str) -> str:
+    """Build a percent-encoded Azure DevOps REST API URL at organization level (no project segment)."""
+    enc_org = quote(organization, safe="")
+    enc_path = quote(path, safe="/")
+    return f"https://dev.azure.com/{enc_org}/_apis/{enc_path}"
+
+
+def build_advsec_url(organization: str, project: str, path: str) -> str:
+    """Build a percent-encoded Advanced Security REST URL on advsec.dev.azure.com.
+
+    Same encoding contract as build_url (org/project encoded with safe="",
+    multi-segment path with safe="/"), but targets the advsec host that serves
+    the GHAzDo alerts API instead of dev.azure.com.
+    """
+    enc_org = quote(organization, safe="")
+    enc_project = quote(project, safe="")
+    enc_path = quote(path, safe="/")
+    return f"https://advsec.dev.azure.com/{enc_org}/{enc_project}/_apis/{enc_path}"
+
+
 def build_params(**kwargs) -> dict:
     """Build a params dict with the API version, filtering out None values."""
     params = {"api-version": API_VERSION}