fix(shared): detect Azure DevOps SSH remotes

[Brechard]

Problem

Azure DevOps repositories using standard SSH remotes (git@ssh.dev.azure.com:v3/...) were classified as an unknown source-control provider. As a result, T3 Code did not run the Azure DevOps pull-request detection path even when the Azure CLI was available.

Fix

• Recognize ssh.dev.azure.com as an Azure DevOps host.
• Normalize that SSH host to https://dev.azure.com for Azure DevOps pull-request URLs and CLI integration.
• Pass explicit Azure repository context through pull-request lookup, creation, clone URL retrieval, default-branch lookup, and checkout.
• Use Git fetch with an exact PR-head checkout for SSH-backed and fork pull requests.
• Add a regression test for the standard Azure DevOps SSH remote format.

Verification

• Reproduced with a real Azure DevOps-backed repository in a local T3 development environment.
• Verified the existing active pull request appeared in the T3 Code UI after the change.
• Focused source-control tests: 101 passed.
• @t3tools/shared typecheck: passed.
• git diff --check: passed.

Fixes#5272

Completed by GPT-5.6-Luna via Codex.

---

Note

Medium Risk
Changes Azure DevOps PR listing, checkout, and Git remote identity paths; checkout behavior diverges from az repos pr checkout when repository context is present. PAT propagation from login shell touches credential-related environment handling.

Overview
Fixes Azure DevOps repos that use standard SSH remotes (git@ssh.dev.azure.com:v3/...) being treated as unknown providers, which blocked PR detection and Azure CLI workflows.

Shared detection adds parseAzureDevOpsRepositoryCoordinates and treats ssh.dev.azure.com as Azure DevOps with base URLs normalized to https://dev.azure.com. Git identity for remotes now resolves Azure org/project/repo (not only GitHub).

Azure DevOps CLI integration passes explicit --organization, --project, and --repository (or org-only for PR show) when context is parsed from the remote, instead of --detect true, which fails for SSH clones. Checkout with context uses az repos pr show plus git fetch and git checkout -B on the PR head branch, picking fork clone URLs to match SSH vs HTTPS. Fork PRs surface cross-repo metadata in normalized PR records.

The desktop app hydrates AZURE_DEVOPS_EXT_PAT from the login shell (with inherited values preserved), so Azure CLI auth works when the app is not launched from a terminal.

^{Reviewed by Cursor Bugbot for commit f103a6a. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add Azure DevOps SSH remote detection and explicit repository context to CLI commands

• Extends detectSourceControlProviderFromRemoteUrl and isAzureDevOpsHost in sourceControl.ts to recognize ssh.dev.azure.com as Azure DevOps, normalizing baseUrl to https://dev.azure.com for SSH remotes.
• Adds parseAzureDevOpsRepositoryCoordinates to extract organization/project/repository from both SSH (ssh.dev.azure.com v3) and HTTPS (dev.azure.com/_git) clone URLs.
• Replaces --detect true flags in AzureDevOpsCli with explicit org/project/repo args derived from a new repositoryContext parameter, reducing reliance on Azure CLI auto-detection.
• checkoutPullRequest now supports SSH-backed and fork PRs by fetching directly via git fetch/git checkout instead of az repos pr checkout, with failures mapped to a new AzureDevOpsGitCommandFailedError.
• Normalized PR records now include fork metadata (isCrossRepository, headRepositoryNameWithOwner, source clone URLs) when returned by the Azure API.
• Adds AZURE_DEVOPS_EXT_PAT to the login-shell environment variables propagated to the desktop app.

^{Macroscope summarized f103a6a.}

Summary by CodeRabbit

• Bug Fixes
  • Improved Azure DevOps repository detection for SSH and HTTPS remote URLs.
  • Pull-request listings, lookups, creation, checkout, and branch detection now work reliably with SSH repositories.
  • Azure DevOps SSH remotes now display the correct provider and base URL.
  • Desktop environments now correctly load Azure DevOps authentication settings from the login shell when needed.
• Tests
  • Added coverage for SSH remote parsing, repository operations, checkout flows, and authentication environment handling.

[coderabbitai]

📝 Walkthrough

Walkthrough

Azure DevOps SSH remotes are detected and parsed into repository context. Azure CLI operations use explicit repository arguments when context exists. Context-aware checkout fetches and checks out the pull-request branch. Fork repository URLs are preserved. The desktop shell propagates AZURE_DEVOPS_EXT_PAT.

Changes

Azure DevOps SSH pull-request support

Layer / File(s)	Summary
Azure DevOps SSH remote detection packages/shared/src/sourceControl.ts, packages/shared/src/sourceControl.test.ts	Azure DevOps detection includes ssh.dev.azure.com and maps it to https://dev.azure.com.
Fork source repository normalization apps/server/src/sourceControl/azureDevOpsPullRequests.ts	Pull-request normalization accepts fork repository metadata and prefers its SSH URL over its remote URL.
Repository context parsing and CLI operations apps/server/src/sourceControl/AzureDevOpsCli.ts, apps/server/src/sourceControl/AzureDevOpsCli.test.ts	SSH and HTTPS remotes are parsed into organization, project, and repository values. Azure CLI operations use explicit arguments when context exists. Context-aware checkout retrieves the pull-request branch, fetches it, and checks it out from FETCH_HEAD.
Provider repository-context forwarding apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts, apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts	The provider forwards repository context to pull-request, clone URL, default-branch, creation, and checkout operations. Cross-repository status uses the normalized source repository URL.

Desktop Azure DevOps PAT propagation

Layer / File(s)	Summary
Azure DevOps PAT environment propagation apps/desktop/src/shell/DesktopShellEnvironment.ts, apps/desktop/src/shell/DesktopShellEnvironment.test.ts	The desktop shell loads AZURE_DEVOPS_EXT_PAT from the POSIX login shell when absent and preserves an inherited value when present.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
participant Repository
participant AzureDevOpsSourceControlProvider
participant AzureDevOpsCli
participant AzureDevOps
participant Git
Repository->>AzureDevOpsSourceControlProvider: provide remoteUrl
AzureDevOpsSourceControlProvider->>AzureDevOpsCli: pass parsed repositoryContext
AzureDevOpsCli->>AzureDevOps: retrieve pull-request branch with explicit repository arguments
AzureDevOps-->>AzureDevOpsCli: return branch and source repository URL
AzureDevOpsCli->>Git: fetch branch from source repository
Git-->>AzureDevOpsCli: return FETCH_HEAD
AzureDevOpsCli->>Git: checkout FETCH_HEAD
Git-->>AzureDevOpsCli: return command result

Loading

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	The changes satisfy [#5272] by detecting Azure DevOps SSH remotes and enabling active pull-request detection through explicit repository context.
Out of Scope Changes check	✅ Passed	The CLI, checkout, fork handling, and desktop PAT changes support the linked issue’s Azure DevOps SSH pull-request workflow.
Title check	✅ Passed	The title clearly identifies the main change: Azure DevOps SSH remote detection.
Description check	✅ Passed	The description explains the problem, fix, scope, and verification, although it uses different headings from the template.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces new capability for Azure DevOps SSH remote detection and handling, affecting runtime behavior across multiple Azure DevOps CLI operations. The changes enable a previously non-functional code path and modify how repository context is passed to CLI commands.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate db68732

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c4bdf94

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate 77ab0c4

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c665bcb

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@apps/server/src/sourceControl/AzureDevOpsCli.ts`:
- Around line 234-236: Update the message returned by the error class’s get
message accessor to identify Git, not Azure DevOps CLI, as the failed command
while preserving the existing operation and detail values.
- Around line 122-124: Update the repository argument construction around
repositoryDetectionArgs so repositoryContext supplies only organization and
project while the repository parameter is always used for --repository,
preserving the requested selector when both values differ. Add a regression test
covering distinct repositoryContext and repository values and verify the
generated arguments target the requested repository.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3501c46a-1867-4f67-a45e-cbf701fcf862

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 7e69451.

📒 Files selected for processing (4)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[macroscopeapp]

One convention finding on the new Effect error introduced in apps/server/src/sourceControl/AzureDevOpsCli.ts. The rest of the touched service code (namespace imports, Foo["Service"] typing, dependency acquisition via yield* VcsProcess.VcsProcess, layer export, inline error construction at the failure boundary, bounded error attributes) follows the conventions.

^{Posted via Macroscope — Effect Service Conventions}

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

apps/server/src/sourceControl/azureDevOpsPullRequests.ts (1)

151-165: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Preserve the fork clone transport through checkout.

The PR normalizer drops the HTTPS clone URL when Azure returns both sshUrl and remoteUrl. AzureDevOpsCli.checkoutPullRequest then uses that single sourceRepositoryUrl for the fork git fetch, so an HTTPS checkout without SSH credentials fails.

Retain both fork clone URLs and choose the transport only during checkout. Include focused HTTPS and SSH fork-checkout tests for the selected fetch URL.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts` around lines 151 -
165, Update the Azure DevOps pull-request model and normalizer in
apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

Source: Coding guidelines

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Outside diff comments:
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts`:
- Around line 151-165: Update the Azure DevOps pull-request model and normalizer
in apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 99b81124-5404-4927-8003-5eac02c4bd5c

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 595ca4d.

📒 Files selected for processing (5)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts
• apps/server/src/sourceControl/azureDevOpsPullRequests.ts

🚧 Files skipped from review as they are similar to previous changes (2)

• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts

[Brechard]

@coderabbitai resume

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

✅ Action performed

Reviews resumed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 545281d. Configure here.}

[t3-code]

closing as already addressed. Azure DevOps SSH remote detection merged in #6187.

[Brechard]

Problem

Azure DevOps repositories using standard SSH remotes (git@ssh.dev.azure.com:v3/...) were classified as an unknown source-control provider. As a result, T3 Code did not run the Azure DevOps pull-request detection path even when the Azure CLI was available.

Fix

• Recognize ssh.dev.azure.com as an Azure DevOps host.
• Normalize that SSH host to https://dev.azure.com for Azure DevOps pull-request URLs and CLI integration.
• Pass explicit Azure repository context through pull-request lookup, creation, clone URL retrieval, default-branch lookup, and checkout.
• Use Git fetch with an exact PR-head checkout for SSH-backed and fork pull requests.
• Add a regression test for the standard Azure DevOps SSH remote format.

Verification

• Reproduced with a real Azure DevOps-backed repository in a local T3 development environment.
• Verified the existing active pull request appeared in the T3 Code UI after the change.
• Focused source-control tests: 101 passed.
• @t3tools/shared typecheck: passed.
• git diff --check: passed.

Fixes#5272

Completed by GPT-5.6-Luna via Codex.

---

Note

Medium Risk
Changes Azure DevOps PR listing, checkout, and Git remote identity paths; checkout behavior diverges from az repos pr checkout when repository context is present. PAT propagation from login shell touches credential-related environment handling.

Overview
Fixes Azure DevOps repos that use standard SSH remotes (git@ssh.dev.azure.com:v3/...) being treated as unknown providers, which blocked PR detection and Azure CLI workflows.

Shared detection adds parseAzureDevOpsRepositoryCoordinates and treats ssh.dev.azure.com as Azure DevOps with base URLs normalized to https://dev.azure.com. Git identity for remotes now resolves Azure org/project/repo (not only GitHub).

Azure DevOps CLI integration passes explicit --organization, --project, and --repository (or org-only for PR show) when context is parsed from the remote, instead of --detect true, which fails for SSH clones. Checkout with context uses az repos pr show plus git fetch and git checkout -B on the PR head branch, picking fork clone URLs to match SSH vs HTTPS. Fork PRs surface cross-repo metadata in normalized PR records.

The desktop app hydrates AZURE_DEVOPS_EXT_PAT from the login shell (with inherited values preserved), so Azure CLI auth works when the app is not launched from a terminal.

^{Reviewed by Cursor Bugbot for commit f103a6a. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add Azure DevOps SSH remote detection and explicit repository context to CLI commands

• Extends detectSourceControlProviderFromRemoteUrl and isAzureDevOpsHost in sourceControl.ts to recognize ssh.dev.azure.com as Azure DevOps, normalizing baseUrl to https://dev.azure.com for SSH remotes.
• Adds parseAzureDevOpsRepositoryCoordinates to extract organization/project/repository from both SSH (ssh.dev.azure.com v3) and HTTPS (dev.azure.com/_git) clone URLs.
• Replaces --detect true flags in AzureDevOpsCli with explicit org/project/repo args derived from a new repositoryContext parameter, reducing reliance on Azure CLI auto-detection.
• checkoutPullRequest now supports SSH-backed and fork PRs by fetching directly via git fetch/git checkout instead of az repos pr checkout, with failures mapped to a new AzureDevOpsGitCommandFailedError.
• Normalized PR records now include fork metadata (isCrossRepository, headRepositoryNameWithOwner, source clone URLs) when returned by the Azure API.
• Adds AZURE_DEVOPS_EXT_PAT to the login-shell environment variables propagated to the desktop app.

^{Macroscope summarized f103a6a.}

Summary by CodeRabbit

• Bug Fixes
  • Improved Azure DevOps repository detection for SSH and HTTPS remote URLs.
  • Pull-request listings, lookups, creation, checkout, and branch detection now work reliably with SSH repositories.
  • Azure DevOps SSH remotes now display the correct provider and base URL.
  • Desktop environments now correctly load Azure DevOps authentication settings from the login shell when needed.
• Tests
  • Added coverage for SSH remote parsing, repository operations, checkout flows, and authentication environment handling.

[coderabbitai]

📝 Walkthrough

Walkthrough

Azure DevOps SSH remotes are detected and parsed into repository context. Azure CLI operations use explicit repository arguments when context exists. Context-aware checkout fetches and checks out the pull-request branch. Fork repository URLs are preserved. The desktop shell propagates AZURE_DEVOPS_EXT_PAT.

Changes

Azure DevOps SSH pull-request support

Layer / File(s)	Summary
Azure DevOps SSH remote detection packages/shared/src/sourceControl.ts, packages/shared/src/sourceControl.test.ts	Azure DevOps detection includes ssh.dev.azure.com and maps it to https://dev.azure.com.
Fork source repository normalization apps/server/src/sourceControl/azureDevOpsPullRequests.ts	Pull-request normalization accepts fork repository metadata and prefers its SSH URL over its remote URL.
Repository context parsing and CLI operations apps/server/src/sourceControl/AzureDevOpsCli.ts, apps/server/src/sourceControl/AzureDevOpsCli.test.ts	SSH and HTTPS remotes are parsed into organization, project, and repository values. Azure CLI operations use explicit arguments when context exists. Context-aware checkout retrieves the pull-request branch, fetches it, and checks it out from FETCH_HEAD.
Provider repository-context forwarding apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts, apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts	The provider forwards repository context to pull-request, clone URL, default-branch, creation, and checkout operations. Cross-repository status uses the normalized source repository URL.

Desktop Azure DevOps PAT propagation

Layer / File(s)	Summary
Azure DevOps PAT environment propagation apps/desktop/src/shell/DesktopShellEnvironment.ts, apps/desktop/src/shell/DesktopShellEnvironment.test.ts	The desktop shell loads AZURE_DEVOPS_EXT_PAT from the POSIX login shell when absent and preserves an inherited value when present.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
participant Repository
participant AzureDevOpsSourceControlProvider
participant AzureDevOpsCli
participant AzureDevOps
participant Git
Repository->>AzureDevOpsSourceControlProvider: provide remoteUrl
AzureDevOpsSourceControlProvider->>AzureDevOpsCli: pass parsed repositoryContext
AzureDevOpsCli->>AzureDevOps: retrieve pull-request branch with explicit repository arguments
AzureDevOps-->>AzureDevOpsCli: return branch and source repository URL
AzureDevOpsCli->>Git: fetch branch from source repository
Git-->>AzureDevOpsCli: return FETCH_HEAD
AzureDevOpsCli->>Git: checkout FETCH_HEAD
Git-->>AzureDevOpsCli: return command result

Loading

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	The changes satisfy [#5272] by detecting Azure DevOps SSH remotes and enabling active pull-request detection through explicit repository context.
Out of Scope Changes check	✅ Passed	The CLI, checkout, fork handling, and desktop PAT changes support the linked issue’s Azure DevOps SSH pull-request workflow.
Title check	✅ Passed	The title clearly identifies the main change: Azure DevOps SSH remote detection.
Description check	✅ Passed	The description explains the problem, fix, scope, and verification, although it uses different headings from the template.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces new capability for Azure DevOps SSH remote detection and handling, affecting runtime behavior across multiple Azure DevOps CLI operations. The changes enable a previously non-functional code path and modify how repository context is passed to CLI commands.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate db68732

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c4bdf94

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate 77ab0c4

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c665bcb

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@apps/server/src/sourceControl/AzureDevOpsCli.ts`:
- Around line 234-236: Update the message returned by the error class’s get
message accessor to identify Git, not Azure DevOps CLI, as the failed command
while preserving the existing operation and detail values.
- Around line 122-124: Update the repository argument construction around
repositoryDetectionArgs so repositoryContext supplies only organization and
project while the repository parameter is always used for --repository,
preserving the requested selector when both values differ. Add a regression test
covering distinct repositoryContext and repository values and verify the
generated arguments target the requested repository.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3501c46a-1867-4f67-a45e-cbf701fcf862

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 7e69451.

📒 Files selected for processing (4)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[macroscopeapp]

One convention finding on the new Effect error introduced in apps/server/src/sourceControl/AzureDevOpsCli.ts. The rest of the touched service code (namespace imports, Foo["Service"] typing, dependency acquisition via yield* VcsProcess.VcsProcess, layer export, inline error construction at the failure boundary, bounded error attributes) follows the conventions.

^{Posted via Macroscope — Effect Service Conventions}

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

apps/server/src/sourceControl/azureDevOpsPullRequests.ts (1)

151-165: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Preserve the fork clone transport through checkout.

The PR normalizer drops the HTTPS clone URL when Azure returns both sshUrl and remoteUrl. AzureDevOpsCli.checkoutPullRequest then uses that single sourceRepositoryUrl for the fork git fetch, so an HTTPS checkout without SSH credentials fails.

Retain both fork clone URLs and choose the transport only during checkout. Include focused HTTPS and SSH fork-checkout tests for the selected fetch URL.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts` around lines 151 -
165, Update the Azure DevOps pull-request model and normalizer in
apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

Source: Coding guidelines

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Outside diff comments:
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts`:
- Around line 151-165: Update the Azure DevOps pull-request model and normalizer
in apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 99b81124-5404-4927-8003-5eac02c4bd5c

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 595ca4d.

📒 Files selected for processing (5)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts
• apps/server/src/sourceControl/azureDevOpsPullRequests.ts

🚧 Files skipped from review as they are similar to previous changes (2)

• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts

[Brechard]

@coderabbitai resume

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

✅ Action performed

Reviews resumed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 545281d. Configure here.}

[t3-code]

closing as already addressed. Azure DevOps SSH remote detection merged in #6187.

[Brechard]

Problem

Azure DevOps repositories using standard SSH remotes (git@ssh.dev.azure.com:v3/...) were classified as an unknown source-control provider. As a result, T3 Code did not run the Azure DevOps pull-request detection path even when the Azure CLI was available.

Fix

• Recognize ssh.dev.azure.com as an Azure DevOps host.
• Normalize that SSH host to https://dev.azure.com for Azure DevOps pull-request URLs and CLI integration.
• Pass explicit Azure repository context through pull-request lookup, creation, clone URL retrieval, default-branch lookup, and checkout.
• Use Git fetch with an exact PR-head checkout for SSH-backed and fork pull requests.
• Add a regression test for the standard Azure DevOps SSH remote format.

Verification

• Reproduced with a real Azure DevOps-backed repository in a local T3 development environment.
• Verified the existing active pull request appeared in the T3 Code UI after the change.
• Focused source-control tests: 101 passed.
• @t3tools/shared typecheck: passed.
• git diff --check: passed.

Fixes#5272

Completed by GPT-5.6-Luna via Codex.

---

Note

Medium Risk
Changes Azure DevOps PR listing, checkout, and Git remote identity paths; checkout behavior diverges from az repos pr checkout when repository context is present. PAT propagation from login shell touches credential-related environment handling.

Overview
Fixes Azure DevOps repos that use standard SSH remotes (git@ssh.dev.azure.com:v3/...) being treated as unknown providers, which blocked PR detection and Azure CLI workflows.

Shared detection adds parseAzureDevOpsRepositoryCoordinates and treats ssh.dev.azure.com as Azure DevOps with base URLs normalized to https://dev.azure.com. Git identity for remotes now resolves Azure org/project/repo (not only GitHub).

Azure DevOps CLI integration passes explicit --organization, --project, and --repository (or org-only for PR show) when context is parsed from the remote, instead of --detect true, which fails for SSH clones. Checkout with context uses az repos pr show plus git fetch and git checkout -B on the PR head branch, picking fork clone URLs to match SSH vs HTTPS. Fork PRs surface cross-repo metadata in normalized PR records.

The desktop app hydrates AZURE_DEVOPS_EXT_PAT from the login shell (with inherited values preserved), so Azure CLI auth works when the app is not launched from a terminal.

^{Reviewed by Cursor Bugbot for commit f103a6a. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add Azure DevOps SSH remote detection and explicit repository context to CLI commands

• Extends detectSourceControlProviderFromRemoteUrl and isAzureDevOpsHost in sourceControl.ts to recognize ssh.dev.azure.com as Azure DevOps, normalizing baseUrl to https://dev.azure.com for SSH remotes.
• Adds parseAzureDevOpsRepositoryCoordinates to extract organization/project/repository from both SSH (ssh.dev.azure.com v3) and HTTPS (dev.azure.com/_git) clone URLs.
• Replaces --detect true flags in AzureDevOpsCli with explicit org/project/repo args derived from a new repositoryContext parameter, reducing reliance on Azure CLI auto-detection.
• checkoutPullRequest now supports SSH-backed and fork PRs by fetching directly via git fetch/git checkout instead of az repos pr checkout, with failures mapped to a new AzureDevOpsGitCommandFailedError.
• Normalized PR records now include fork metadata (isCrossRepository, headRepositoryNameWithOwner, source clone URLs) when returned by the Azure API.
• Adds AZURE_DEVOPS_EXT_PAT to the login-shell environment variables propagated to the desktop app.

^{Macroscope summarized f103a6a.}

Summary by CodeRabbit

• Bug Fixes
  • Improved Azure DevOps repository detection for SSH and HTTPS remote URLs.
  • Pull-request listings, lookups, creation, checkout, and branch detection now work reliably with SSH repositories.
  • Azure DevOps SSH remotes now display the correct provider and base URL.
  • Desktop environments now correctly load Azure DevOps authentication settings from the login shell when needed.
• Tests
  • Added coverage for SSH remote parsing, repository operations, checkout flows, and authentication environment handling.

[coderabbitai]

📝 Walkthrough

Walkthrough

Azure DevOps SSH remotes are detected and parsed into repository context. Azure CLI operations use explicit repository arguments when context exists. Context-aware checkout fetches and checks out the pull-request branch. Fork repository URLs are preserved. The desktop shell propagates AZURE_DEVOPS_EXT_PAT.

Changes

Azure DevOps SSH pull-request support

Layer / File(s)	Summary
Azure DevOps SSH remote detection packages/shared/src/sourceControl.ts, packages/shared/src/sourceControl.test.ts	Azure DevOps detection includes ssh.dev.azure.com and maps it to https://dev.azure.com.
Fork source repository normalization apps/server/src/sourceControl/azureDevOpsPullRequests.ts	Pull-request normalization accepts fork repository metadata and prefers its SSH URL over its remote URL.
Repository context parsing and CLI operations apps/server/src/sourceControl/AzureDevOpsCli.ts, apps/server/src/sourceControl/AzureDevOpsCli.test.ts	SSH and HTTPS remotes are parsed into organization, project, and repository values. Azure CLI operations use explicit arguments when context exists. Context-aware checkout retrieves the pull-request branch, fetches it, and checks it out from FETCH_HEAD.
Provider repository-context forwarding apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts, apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts	The provider forwards repository context to pull-request, clone URL, default-branch, creation, and checkout operations. Cross-repository status uses the normalized source repository URL.

Desktop Azure DevOps PAT propagation

Layer / File(s)	Summary
Azure DevOps PAT environment propagation apps/desktop/src/shell/DesktopShellEnvironment.ts, apps/desktop/src/shell/DesktopShellEnvironment.test.ts	The desktop shell loads AZURE_DEVOPS_EXT_PAT from the POSIX login shell when absent and preserves an inherited value when present.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
participant Repository
participant AzureDevOpsSourceControlProvider
participant AzureDevOpsCli
participant AzureDevOps
participant Git
Repository->>AzureDevOpsSourceControlProvider: provide remoteUrl
AzureDevOpsSourceControlProvider->>AzureDevOpsCli: pass parsed repositoryContext
AzureDevOpsCli->>AzureDevOps: retrieve pull-request branch with explicit repository arguments
AzureDevOps-->>AzureDevOpsCli: return branch and source repository URL
AzureDevOpsCli->>Git: fetch branch from source repository
Git-->>AzureDevOpsCli: return FETCH_HEAD
AzureDevOpsCli->>Git: checkout FETCH_HEAD
Git-->>AzureDevOpsCli: return command result

Loading

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	The changes satisfy [#5272] by detecting Azure DevOps SSH remotes and enabling active pull-request detection through explicit repository context.
Out of Scope Changes check	✅ Passed	The CLI, checkout, fork handling, and desktop PAT changes support the linked issue’s Azure DevOps SSH pull-request workflow.
Title check	✅ Passed	The title clearly identifies the main change: Azure DevOps SSH remote detection.
Description check	✅ Passed	The description explains the problem, fix, scope, and verification, although it uses different headings from the template.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces new capability for Azure DevOps SSH remote detection and handling, affecting runtime behavior across multiple Azure DevOps CLI operations. The changes enable a previously non-functional code path and modify how repository context is passed to CLI commands.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate db68732

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c4bdf94

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate 77ab0c4

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c665bcb

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@apps/server/src/sourceControl/AzureDevOpsCli.ts`:
- Around line 234-236: Update the message returned by the error class’s get
message accessor to identify Git, not Azure DevOps CLI, as the failed command
while preserving the existing operation and detail values.
- Around line 122-124: Update the repository argument construction around
repositoryDetectionArgs so repositoryContext supplies only organization and
project while the repository parameter is always used for --repository,
preserving the requested selector when both values differ. Add a regression test
covering distinct repositoryContext and repository values and verify the
generated arguments target the requested repository.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3501c46a-1867-4f67-a45e-cbf701fcf862

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 7e69451.

📒 Files selected for processing (4)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[macroscopeapp]

One convention finding on the new Effect error introduced in apps/server/src/sourceControl/AzureDevOpsCli.ts. The rest of the touched service code (namespace imports, Foo["Service"] typing, dependency acquisition via yield* VcsProcess.VcsProcess, layer export, inline error construction at the failure boundary, bounded error attributes) follows the conventions.

^{Posted via Macroscope — Effect Service Conventions}

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

apps/server/src/sourceControl/azureDevOpsPullRequests.ts (1)

151-165: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Preserve the fork clone transport through checkout.

The PR normalizer drops the HTTPS clone URL when Azure returns both sshUrl and remoteUrl. AzureDevOpsCli.checkoutPullRequest then uses that single sourceRepositoryUrl for the fork git fetch, so an HTTPS checkout without SSH credentials fails.

Retain both fork clone URLs and choose the transport only during checkout. Include focused HTTPS and SSH fork-checkout tests for the selected fetch URL.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts` around lines 151 -
165, Update the Azure DevOps pull-request model and normalizer in
apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

Source: Coding guidelines

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Outside diff comments:
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts`:
- Around line 151-165: Update the Azure DevOps pull-request model and normalizer
in apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 99b81124-5404-4927-8003-5eac02c4bd5c

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 595ca4d.

📒 Files selected for processing (5)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts
• apps/server/src/sourceControl/azureDevOpsPullRequests.ts

🚧 Files skipped from review as they are similar to previous changes (2)

• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts

[Brechard]

@coderabbitai resume

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

✅ Action performed

Reviews resumed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 545281d. Configure here.}

[t3-code]

closing as already addressed. Azure DevOps SSH remote detection merged in #6187.

[Brechard]

Problem

Azure DevOps repositories using standard SSH remotes (git@ssh.dev.azure.com:v3/...) were classified as an unknown source-control provider. As a result, T3 Code did not run the Azure DevOps pull-request detection path even when the Azure CLI was available.

Fix

• Recognize ssh.dev.azure.com as an Azure DevOps host.
• Normalize that SSH host to https://dev.azure.com for Azure DevOps pull-request URLs and CLI integration.
• Pass explicit Azure repository context through pull-request lookup, creation, clone URL retrieval, default-branch lookup, and checkout.
• Use Git fetch with an exact PR-head checkout for SSH-backed and fork pull requests.
• Add a regression test for the standard Azure DevOps SSH remote format.

Verification

• Reproduced with a real Azure DevOps-backed repository in a local T3 development environment.
• Verified the existing active pull request appeared in the T3 Code UI after the change.
• Focused source-control tests: 101 passed.
• @t3tools/shared typecheck: passed.
• git diff --check: passed.

Fixes#5272

Completed by GPT-5.6-Luna via Codex.

---

Note

Medium Risk
Changes Azure DevOps PR listing, checkout, and Git remote identity paths; checkout behavior diverges from az repos pr checkout when repository context is present. PAT propagation from login shell touches credential-related environment handling.

Overview
Fixes Azure DevOps repos that use standard SSH remotes (git@ssh.dev.azure.com:v3/...) being treated as unknown providers, which blocked PR detection and Azure CLI workflows.

Shared detection adds parseAzureDevOpsRepositoryCoordinates and treats ssh.dev.azure.com as Azure DevOps with base URLs normalized to https://dev.azure.com. Git identity for remotes now resolves Azure org/project/repo (not only GitHub).

Azure DevOps CLI integration passes explicit --organization, --project, and --repository (or org-only for PR show) when context is parsed from the remote, instead of --detect true, which fails for SSH clones. Checkout with context uses az repos pr show plus git fetch and git checkout -B on the PR head branch, picking fork clone URLs to match SSH vs HTTPS. Fork PRs surface cross-repo metadata in normalized PR records.

The desktop app hydrates AZURE_DEVOPS_EXT_PAT from the login shell (with inherited values preserved), so Azure CLI auth works when the app is not launched from a terminal.

^{Reviewed by Cursor Bugbot for commit f103a6a. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add Azure DevOps SSH remote detection and explicit repository context to CLI commands

• Extends detectSourceControlProviderFromRemoteUrl and isAzureDevOpsHost in sourceControl.ts to recognize ssh.dev.azure.com as Azure DevOps, normalizing baseUrl to https://dev.azure.com for SSH remotes.
• Adds parseAzureDevOpsRepositoryCoordinates to extract organization/project/repository from both SSH (ssh.dev.azure.com v3) and HTTPS (dev.azure.com/_git) clone URLs.
• Replaces --detect true flags in AzureDevOpsCli with explicit org/project/repo args derived from a new repositoryContext parameter, reducing reliance on Azure CLI auto-detection.
• checkoutPullRequest now supports SSH-backed and fork PRs by fetching directly via git fetch/git checkout instead of az repos pr checkout, with failures mapped to a new AzureDevOpsGitCommandFailedError.
• Normalized PR records now include fork metadata (isCrossRepository, headRepositoryNameWithOwner, source clone URLs) when returned by the Azure API.
• Adds AZURE_DEVOPS_EXT_PAT to the login-shell environment variables propagated to the desktop app.

^{Macroscope summarized f103a6a.}

Summary by CodeRabbit

• Bug Fixes
  • Improved Azure DevOps repository detection for SSH and HTTPS remote URLs.
  • Pull-request listings, lookups, creation, checkout, and branch detection now work reliably with SSH repositories.
  • Azure DevOps SSH remotes now display the correct provider and base URL.
  • Desktop environments now correctly load Azure DevOps authentication settings from the login shell when needed.
• Tests
  • Added coverage for SSH remote parsing, repository operations, checkout flows, and authentication environment handling.

[coderabbitai]

📝 Walkthrough

Walkthrough

Azure DevOps SSH remotes are detected and parsed into repository context. Azure CLI operations use explicit repository arguments when context exists. Context-aware checkout fetches and checks out the pull-request branch. Fork repository URLs are preserved. The desktop shell propagates AZURE_DEVOPS_EXT_PAT.

Changes

Azure DevOps SSH pull-request support

Layer / File(s)	Summary
Azure DevOps SSH remote detection packages/shared/src/sourceControl.ts, packages/shared/src/sourceControl.test.ts	Azure DevOps detection includes ssh.dev.azure.com and maps it to https://dev.azure.com.
Fork source repository normalization apps/server/src/sourceControl/azureDevOpsPullRequests.ts	Pull-request normalization accepts fork repository metadata and prefers its SSH URL over its remote URL.
Repository context parsing and CLI operations apps/server/src/sourceControl/AzureDevOpsCli.ts, apps/server/src/sourceControl/AzureDevOpsCli.test.ts	SSH and HTTPS remotes are parsed into organization, project, and repository values. Azure CLI operations use explicit arguments when context exists. Context-aware checkout retrieves the pull-request branch, fetches it, and checks it out from FETCH_HEAD.
Provider repository-context forwarding apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts, apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts	The provider forwards repository context to pull-request, clone URL, default-branch, creation, and checkout operations. Cross-repository status uses the normalized source repository URL.

Desktop Azure DevOps PAT propagation

Layer / File(s)	Summary
Azure DevOps PAT environment propagation apps/desktop/src/shell/DesktopShellEnvironment.ts, apps/desktop/src/shell/DesktopShellEnvironment.test.ts	The desktop shell loads AZURE_DEVOPS_EXT_PAT from the POSIX login shell when absent and preserves an inherited value when present.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
participant Repository
participant AzureDevOpsSourceControlProvider
participant AzureDevOpsCli
participant AzureDevOps
participant Git
Repository->>AzureDevOpsSourceControlProvider: provide remoteUrl
AzureDevOpsSourceControlProvider->>AzureDevOpsCli: pass parsed repositoryContext
AzureDevOpsCli->>AzureDevOps: retrieve pull-request branch with explicit repository arguments
AzureDevOps-->>AzureDevOpsCli: return branch and source repository URL
AzureDevOpsCli->>Git: fetch branch from source repository
Git-->>AzureDevOpsCli: return FETCH_HEAD
AzureDevOpsCli->>Git: checkout FETCH_HEAD
Git-->>AzureDevOpsCli: return command result

Loading

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	The changes satisfy [#5272] by detecting Azure DevOps SSH remotes and enabling active pull-request detection through explicit repository context.
Out of Scope Changes check	✅ Passed	The CLI, checkout, fork handling, and desktop PAT changes support the linked issue’s Azure DevOps SSH pull-request workflow.
Title check	✅ Passed	The title clearly identifies the main change: Azure DevOps SSH remote detection.
Description check	✅ Passed	The description explains the problem, fix, scope, and verification, although it uses different headings from the template.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces new capability for Azure DevOps SSH remote detection and handling, affecting runtime behavior across multiple Azure DevOps CLI operations. The changes enable a previously non-functional code path and modify how repository context is passed to CLI commands.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate db68732

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c4bdf94

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate 77ab0c4

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c665bcb

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@apps/server/src/sourceControl/AzureDevOpsCli.ts`:
- Around line 234-236: Update the message returned by the error class’s get
message accessor to identify Git, not Azure DevOps CLI, as the failed command
while preserving the existing operation and detail values.
- Around line 122-124: Update the repository argument construction around
repositoryDetectionArgs so repositoryContext supplies only organization and
project while the repository parameter is always used for --repository,
preserving the requested selector when both values differ. Add a regression test
covering distinct repositoryContext and repository values and verify the
generated arguments target the requested repository.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3501c46a-1867-4f67-a45e-cbf701fcf862

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 7e69451.

📒 Files selected for processing (4)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[macroscopeapp]

One convention finding on the new Effect error introduced in apps/server/src/sourceControl/AzureDevOpsCli.ts. The rest of the touched service code (namespace imports, Foo["Service"] typing, dependency acquisition via yield* VcsProcess.VcsProcess, layer export, inline error construction at the failure boundary, bounded error attributes) follows the conventions.

^{Posted via Macroscope — Effect Service Conventions}

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

apps/server/src/sourceControl/azureDevOpsPullRequests.ts (1)

151-165: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Preserve the fork clone transport through checkout.

The PR normalizer drops the HTTPS clone URL when Azure returns both sshUrl and remoteUrl. AzureDevOpsCli.checkoutPullRequest then uses that single sourceRepositoryUrl for the fork git fetch, so an HTTPS checkout without SSH credentials fails.

Retain both fork clone URLs and choose the transport only during checkout. Include focused HTTPS and SSH fork-checkout tests for the selected fetch URL.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts` around lines 151 -
165, Update the Azure DevOps pull-request model and normalizer in
apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

Source: Coding guidelines

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Outside diff comments:
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts`:
- Around line 151-165: Update the Azure DevOps pull-request model and normalizer
in apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 99b81124-5404-4927-8003-5eac02c4bd5c

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 595ca4d.

📒 Files selected for processing (5)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts
• apps/server/src/sourceControl/azureDevOpsPullRequests.ts

🚧 Files skipped from review as they are similar to previous changes (2)

• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts

[Brechard]

@coderabbitai resume

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

✅ Action performed

Reviews resumed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 545281d. Configure here.}

[t3-code]

closing as already addressed. Azure DevOps SSH remote detection merged in #6187.

[Brechard]

Problem

Azure DevOps repositories using standard SSH remotes (git@ssh.dev.azure.com:v3/...) were classified as an unknown source-control provider. As a result, T3 Code did not run the Azure DevOps pull-request detection path even when the Azure CLI was available.

Fix

• Recognize ssh.dev.azure.com as an Azure DevOps host.
• Normalize that SSH host to https://dev.azure.com for Azure DevOps pull-request URLs and CLI integration.
• Pass explicit Azure repository context through pull-request lookup, creation, clone URL retrieval, default-branch lookup, and checkout.
• Use Git fetch with an exact PR-head checkout for SSH-backed and fork pull requests.
• Add a regression test for the standard Azure DevOps SSH remote format.

Verification

• Reproduced with a real Azure DevOps-backed repository in a local T3 development environment.
• Verified the existing active pull request appeared in the T3 Code UI after the change.
• Focused source-control tests: 101 passed.
• @t3tools/shared typecheck: passed.
• git diff --check: passed.

Fixes#5272

Completed by GPT-5.6-Luna via Codex.

---

Note

Medium Risk
Changes Azure DevOps PR listing, checkout, and Git remote identity paths; checkout behavior diverges from az repos pr checkout when repository context is present. PAT propagation from login shell touches credential-related environment handling.

Overview
Fixes Azure DevOps repos that use standard SSH remotes (git@ssh.dev.azure.com:v3/...) being treated as unknown providers, which blocked PR detection and Azure CLI workflows.

Shared detection adds parseAzureDevOpsRepositoryCoordinates and treats ssh.dev.azure.com as Azure DevOps with base URLs normalized to https://dev.azure.com. Git identity for remotes now resolves Azure org/project/repo (not only GitHub).

Azure DevOps CLI integration passes explicit --organization, --project, and --repository (or org-only for PR show) when context is parsed from the remote, instead of --detect true, which fails for SSH clones. Checkout with context uses az repos pr show plus git fetch and git checkout -B on the PR head branch, picking fork clone URLs to match SSH vs HTTPS. Fork PRs surface cross-repo metadata in normalized PR records.

The desktop app hydrates AZURE_DEVOPS_EXT_PAT from the login shell (with inherited values preserved), so Azure CLI auth works when the app is not launched from a terminal.

^{Reviewed by Cursor Bugbot for commit f103a6a. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add Azure DevOps SSH remote detection and explicit repository context to CLI commands

• Extends detectSourceControlProviderFromRemoteUrl and isAzureDevOpsHost in sourceControl.ts to recognize ssh.dev.azure.com as Azure DevOps, normalizing baseUrl to https://dev.azure.com for SSH remotes.
• Adds parseAzureDevOpsRepositoryCoordinates to extract organization/project/repository from both SSH (ssh.dev.azure.com v3) and HTTPS (dev.azure.com/_git) clone URLs.
• Replaces --detect true flags in AzureDevOpsCli with explicit org/project/repo args derived from a new repositoryContext parameter, reducing reliance on Azure CLI auto-detection.
• checkoutPullRequest now supports SSH-backed and fork PRs by fetching directly via git fetch/git checkout instead of az repos pr checkout, with failures mapped to a new AzureDevOpsGitCommandFailedError.
• Normalized PR records now include fork metadata (isCrossRepository, headRepositoryNameWithOwner, source clone URLs) when returned by the Azure API.
• Adds AZURE_DEVOPS_EXT_PAT to the login-shell environment variables propagated to the desktop app.

^{Macroscope summarized f103a6a.}

Summary by CodeRabbit

• Bug Fixes
  • Improved Azure DevOps repository detection for SSH and HTTPS remote URLs.
  • Pull-request listings, lookups, creation, checkout, and branch detection now work reliably with SSH repositories.
  • Azure DevOps SSH remotes now display the correct provider and base URL.
  • Desktop environments now correctly load Azure DevOps authentication settings from the login shell when needed.
• Tests
  • Added coverage for SSH remote parsing, repository operations, checkout flows, and authentication environment handling.

[coderabbitai]

📝 Walkthrough

Walkthrough

Azure DevOps SSH remotes are detected and parsed into repository context. Azure CLI operations use explicit repository arguments when context exists. Context-aware checkout fetches and checks out the pull-request branch. Fork repository URLs are preserved. The desktop shell propagates AZURE_DEVOPS_EXT_PAT.

Changes

Azure DevOps SSH pull-request support

Layer / File(s)	Summary
Azure DevOps SSH remote detection packages/shared/src/sourceControl.ts, packages/shared/src/sourceControl.test.ts	Azure DevOps detection includes ssh.dev.azure.com and maps it to https://dev.azure.com.
Fork source repository normalization apps/server/src/sourceControl/azureDevOpsPullRequests.ts	Pull-request normalization accepts fork repository metadata and prefers its SSH URL over its remote URL.
Repository context parsing and CLI operations apps/server/src/sourceControl/AzureDevOpsCli.ts, apps/server/src/sourceControl/AzureDevOpsCli.test.ts	SSH and HTTPS remotes are parsed into organization, project, and repository values. Azure CLI operations use explicit arguments when context exists. Context-aware checkout retrieves the pull-request branch, fetches it, and checks it out from FETCH_HEAD.
Provider repository-context forwarding apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts, apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts	The provider forwards repository context to pull-request, clone URL, default-branch, creation, and checkout operations. Cross-repository status uses the normalized source repository URL.

Desktop Azure DevOps PAT propagation

Layer / File(s)	Summary
Azure DevOps PAT environment propagation apps/desktop/src/shell/DesktopShellEnvironment.ts, apps/desktop/src/shell/DesktopShellEnvironment.test.ts	The desktop shell loads AZURE_DEVOPS_EXT_PAT from the POSIX login shell when absent and preserves an inherited value when present.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
participant Repository
participant AzureDevOpsSourceControlProvider
participant AzureDevOpsCli
participant AzureDevOps
participant Git
Repository->>AzureDevOpsSourceControlProvider: provide remoteUrl
AzureDevOpsSourceControlProvider->>AzureDevOpsCli: pass parsed repositoryContext
AzureDevOpsCli->>AzureDevOps: retrieve pull-request branch with explicit repository arguments
AzureDevOps-->>AzureDevOpsCli: return branch and source repository URL
AzureDevOpsCli->>Git: fetch branch from source repository
Git-->>AzureDevOpsCli: return FETCH_HEAD
AzureDevOpsCli->>Git: checkout FETCH_HEAD
Git-->>AzureDevOpsCli: return command result

Loading

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	The changes satisfy [#5272] by detecting Azure DevOps SSH remotes and enabling active pull-request detection through explicit repository context.
Out of Scope Changes check	✅ Passed	The CLI, checkout, fork handling, and desktop PAT changes support the linked issue’s Azure DevOps SSH pull-request workflow.
Title check	✅ Passed	The title clearly identifies the main change: Azure DevOps SSH remote detection.
Description check	✅ Passed	The description explains the problem, fix, scope, and verification, although it uses different headings from the template.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces new capability for Azure DevOps SSH remote detection and handling, affecting runtime behavior across multiple Azure DevOps CLI operations. The changes enable a previously non-functional code path and modify how repository context is passed to CLI commands.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate db68732

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c4bdf94

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate 77ab0c4

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c665bcb

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@apps/server/src/sourceControl/AzureDevOpsCli.ts`:
- Around line 234-236: Update the message returned by the error class’s get
message accessor to identify Git, not Azure DevOps CLI, as the failed command
while preserving the existing operation and detail values.
- Around line 122-124: Update the repository argument construction around
repositoryDetectionArgs so repositoryContext supplies only organization and
project while the repository parameter is always used for --repository,
preserving the requested selector when both values differ. Add a regression test
covering distinct repositoryContext and repository values and verify the
generated arguments target the requested repository.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3501c46a-1867-4f67-a45e-cbf701fcf862

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 7e69451.

📒 Files selected for processing (4)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[macroscopeapp]

One convention finding on the new Effect error introduced in apps/server/src/sourceControl/AzureDevOpsCli.ts. The rest of the touched service code (namespace imports, Foo["Service"] typing, dependency acquisition via yield* VcsProcess.VcsProcess, layer export, inline error construction at the failure boundary, bounded error attributes) follows the conventions.

^{Posted via Macroscope — Effect Service Conventions}

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

apps/server/src/sourceControl/azureDevOpsPullRequests.ts (1)

151-165: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Preserve the fork clone transport through checkout.

The PR normalizer drops the HTTPS clone URL when Azure returns both sshUrl and remoteUrl. AzureDevOpsCli.checkoutPullRequest then uses that single sourceRepositoryUrl for the fork git fetch, so an HTTPS checkout without SSH credentials fails.

Retain both fork clone URLs and choose the transport only during checkout. Include focused HTTPS and SSH fork-checkout tests for the selected fetch URL.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts` around lines 151 -
165, Update the Azure DevOps pull-request model and normalizer in
apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

Source: Coding guidelines

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Outside diff comments:
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts`:
- Around line 151-165: Update the Azure DevOps pull-request model and normalizer
in apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 99b81124-5404-4927-8003-5eac02c4bd5c

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 595ca4d.

📒 Files selected for processing (5)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts
• apps/server/src/sourceControl/azureDevOpsPullRequests.ts

🚧 Files skipped from review as they are similar to previous changes (2)

• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts

[Brechard]

@coderabbitai resume

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

✅ Action performed

Reviews resumed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 545281d. Configure here.}

[t3-code]

closing as already addressed. Azure DevOps SSH remote detection merged in #6187.

[Brechard]

Problem

Azure DevOps repositories using standard SSH remotes (git@ssh.dev.azure.com:v3/...) were classified as an unknown source-control provider. As a result, T3 Code did not run the Azure DevOps pull-request detection path even when the Azure CLI was available.

Fix

• Recognize ssh.dev.azure.com as an Azure DevOps host.
• Normalize that SSH host to https://dev.azure.com for Azure DevOps pull-request URLs and CLI integration.
• Pass explicit Azure repository context through pull-request lookup, creation, clone URL retrieval, default-branch lookup, and checkout.
• Use Git fetch with an exact PR-head checkout for SSH-backed and fork pull requests.
• Add a regression test for the standard Azure DevOps SSH remote format.

Verification

• Reproduced with a real Azure DevOps-backed repository in a local T3 development environment.
• Verified the existing active pull request appeared in the T3 Code UI after the change.
• Focused source-control tests: 101 passed.
• @t3tools/shared typecheck: passed.
• git diff --check: passed.

Fixes#5272

Completed by GPT-5.6-Luna via Codex.

---

Note

Medium Risk
Changes Azure DevOps PR listing, checkout, and Git remote identity paths; checkout behavior diverges from az repos pr checkout when repository context is present. PAT propagation from login shell touches credential-related environment handling.

Overview
Fixes Azure DevOps repos that use standard SSH remotes (git@ssh.dev.azure.com:v3/...) being treated as unknown providers, which blocked PR detection and Azure CLI workflows.

Shared detection adds parseAzureDevOpsRepositoryCoordinates and treats ssh.dev.azure.com as Azure DevOps with base URLs normalized to https://dev.azure.com. Git identity for remotes now resolves Azure org/project/repo (not only GitHub).

Azure DevOps CLI integration passes explicit --organization, --project, and --repository (or org-only for PR show) when context is parsed from the remote, instead of --detect true, which fails for SSH clones. Checkout with context uses az repos pr show plus git fetch and git checkout -B on the PR head branch, picking fork clone URLs to match SSH vs HTTPS. Fork PRs surface cross-repo metadata in normalized PR records.

The desktop app hydrates AZURE_DEVOPS_EXT_PAT from the login shell (with inherited values preserved), so Azure CLI auth works when the app is not launched from a terminal.

^{Reviewed by Cursor Bugbot for commit f103a6a. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add Azure DevOps SSH remote detection and explicit repository context to CLI commands

• Extends detectSourceControlProviderFromRemoteUrl and isAzureDevOpsHost in sourceControl.ts to recognize ssh.dev.azure.com as Azure DevOps, normalizing baseUrl to https://dev.azure.com for SSH remotes.
• Adds parseAzureDevOpsRepositoryCoordinates to extract organization/project/repository from both SSH (ssh.dev.azure.com v3) and HTTPS (dev.azure.com/_git) clone URLs.
• Replaces --detect true flags in AzureDevOpsCli with explicit org/project/repo args derived from a new repositoryContext parameter, reducing reliance on Azure CLI auto-detection.
• checkoutPullRequest now supports SSH-backed and fork PRs by fetching directly via git fetch/git checkout instead of az repos pr checkout, with failures mapped to a new AzureDevOpsGitCommandFailedError.
• Normalized PR records now include fork metadata (isCrossRepository, headRepositoryNameWithOwner, source clone URLs) when returned by the Azure API.
• Adds AZURE_DEVOPS_EXT_PAT to the login-shell environment variables propagated to the desktop app.

^{Macroscope summarized f103a6a.}

Summary by CodeRabbit

• Bug Fixes
  • Improved Azure DevOps repository detection for SSH and HTTPS remote URLs.
  • Pull-request listings, lookups, creation, checkout, and branch detection now work reliably with SSH repositories.
  • Azure DevOps SSH remotes now display the correct provider and base URL.
  • Desktop environments now correctly load Azure DevOps authentication settings from the login shell when needed.
• Tests
  • Added coverage for SSH remote parsing, repository operations, checkout flows, and authentication environment handling.

[coderabbitai]

📝 Walkthrough

Walkthrough

Azure DevOps SSH remotes are detected and parsed into repository context. Azure CLI operations use explicit repository arguments when context exists. Context-aware checkout fetches and checks out the pull-request branch. Fork repository URLs are preserved. The desktop shell propagates AZURE_DEVOPS_EXT_PAT.

Changes

Azure DevOps SSH pull-request support

Layer / File(s)	Summary
Azure DevOps SSH remote detection packages/shared/src/sourceControl.ts, packages/shared/src/sourceControl.test.ts	Azure DevOps detection includes ssh.dev.azure.com and maps it to https://dev.azure.com.
Fork source repository normalization apps/server/src/sourceControl/azureDevOpsPullRequests.ts	Pull-request normalization accepts fork repository metadata and prefers its SSH URL over its remote URL.
Repository context parsing and CLI operations apps/server/src/sourceControl/AzureDevOpsCli.ts, apps/server/src/sourceControl/AzureDevOpsCli.test.ts	SSH and HTTPS remotes are parsed into organization, project, and repository values. Azure CLI operations use explicit arguments when context exists. Context-aware checkout retrieves the pull-request branch, fetches it, and checks it out from FETCH_HEAD.
Provider repository-context forwarding apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts, apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts	The provider forwards repository context to pull-request, clone URL, default-branch, creation, and checkout operations. Cross-repository status uses the normalized source repository URL.

Desktop Azure DevOps PAT propagation

Layer / File(s)	Summary
Azure DevOps PAT environment propagation apps/desktop/src/shell/DesktopShellEnvironment.ts, apps/desktop/src/shell/DesktopShellEnvironment.test.ts	The desktop shell loads AZURE_DEVOPS_EXT_PAT from the POSIX login shell when absent and preserves an inherited value when present.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
participant Repository
participant AzureDevOpsSourceControlProvider
participant AzureDevOpsCli
participant AzureDevOps
participant Git
Repository->>AzureDevOpsSourceControlProvider: provide remoteUrl
AzureDevOpsSourceControlProvider->>AzureDevOpsCli: pass parsed repositoryContext
AzureDevOpsCli->>AzureDevOps: retrieve pull-request branch with explicit repository arguments
AzureDevOps-->>AzureDevOpsCli: return branch and source repository URL
AzureDevOpsCli->>Git: fetch branch from source repository
Git-->>AzureDevOpsCli: return FETCH_HEAD
AzureDevOpsCli->>Git: checkout FETCH_HEAD
Git-->>AzureDevOpsCli: return command result

Loading

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	The changes satisfy [#5272] by detecting Azure DevOps SSH remotes and enabling active pull-request detection through explicit repository context.
Out of Scope Changes check	✅ Passed	The CLI, checkout, fork handling, and desktop PAT changes support the linked issue’s Azure DevOps SSH pull-request workflow.
Title check	✅ Passed	The title clearly identifies the main change: Azure DevOps SSH remote detection.
Description check	✅ Passed	The description explains the problem, fix, scope, and verification, although it uses different headings from the template.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces new capability for Azure DevOps SSH remote detection and handling, affecting runtime behavior across multiple Azure DevOps CLI operations. The changes enable a previously non-functional code path and modify how repository context is passed to CLI commands.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate db68732

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c4bdf94

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate 77ab0c4

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c665bcb

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@apps/server/src/sourceControl/AzureDevOpsCli.ts`:
- Around line 234-236: Update the message returned by the error class’s get
message accessor to identify Git, not Azure DevOps CLI, as the failed command
while preserving the existing operation and detail values.
- Around line 122-124: Update the repository argument construction around
repositoryDetectionArgs so repositoryContext supplies only organization and
project while the repository parameter is always used for --repository,
preserving the requested selector when both values differ. Add a regression test
covering distinct repositoryContext and repository values and verify the
generated arguments target the requested repository.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3501c46a-1867-4f67-a45e-cbf701fcf862

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 7e69451.

📒 Files selected for processing (4)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[macroscopeapp]

One convention finding on the new Effect error introduced in apps/server/src/sourceControl/AzureDevOpsCli.ts. The rest of the touched service code (namespace imports, Foo["Service"] typing, dependency acquisition via yield* VcsProcess.VcsProcess, layer export, inline error construction at the failure boundary, bounded error attributes) follows the conventions.

^{Posted via Macroscope — Effect Service Conventions}

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

apps/server/src/sourceControl/azureDevOpsPullRequests.ts (1)

151-165: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Preserve the fork clone transport through checkout.

The PR normalizer drops the HTTPS clone URL when Azure returns both sshUrl and remoteUrl. AzureDevOpsCli.checkoutPullRequest then uses that single sourceRepositoryUrl for the fork git fetch, so an HTTPS checkout without SSH credentials fails.

Retain both fork clone URLs and choose the transport only during checkout. Include focused HTTPS and SSH fork-checkout tests for the selected fetch URL.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts` around lines 151 -
165, Update the Azure DevOps pull-request model and normalizer in
apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

Source: Coding guidelines

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Outside diff comments:
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts`:
- Around line 151-165: Update the Azure DevOps pull-request model and normalizer
in apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 99b81124-5404-4927-8003-5eac02c4bd5c

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 595ca4d.

📒 Files selected for processing (5)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts
• apps/server/src/sourceControl/azureDevOpsPullRequests.ts

🚧 Files skipped from review as they are similar to previous changes (2)

• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts

[Brechard]

@coderabbitai resume

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

✅ Action performed

Reviews resumed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 545281d. Configure here.}

[t3-code]

closing as already addressed. Azure DevOps SSH remote detection merged in #6187.

[Brechard]

Problem

Azure DevOps repositories using standard SSH remotes (git@ssh.dev.azure.com:v3/...) were classified as an unknown source-control provider. As a result, T3 Code did not run the Azure DevOps pull-request detection path even when the Azure CLI was available.

Fix

• Recognize ssh.dev.azure.com as an Azure DevOps host.
• Normalize that SSH host to https://dev.azure.com for Azure DevOps pull-request URLs and CLI integration.
• Pass explicit Azure repository context through pull-request lookup, creation, clone URL retrieval, default-branch lookup, and checkout.
• Use Git fetch with an exact PR-head checkout for SSH-backed and fork pull requests.
• Add a regression test for the standard Azure DevOps SSH remote format.

Verification

• Reproduced with a real Azure DevOps-backed repository in a local T3 development environment.
• Verified the existing active pull request appeared in the T3 Code UI after the change.
• Focused source-control tests: 101 passed.
• @t3tools/shared typecheck: passed.
• git diff --check: passed.

Fixes#5272

Completed by GPT-5.6-Luna via Codex.

---

Note

Medium Risk
Changes Azure DevOps PR listing, checkout, and Git remote identity paths; checkout behavior diverges from az repos pr checkout when repository context is present. PAT propagation from login shell touches credential-related environment handling.

Overview
Fixes Azure DevOps repos that use standard SSH remotes (git@ssh.dev.azure.com:v3/...) being treated as unknown providers, which blocked PR detection and Azure CLI workflows.

Shared detection adds parseAzureDevOpsRepositoryCoordinates and treats ssh.dev.azure.com as Azure DevOps with base URLs normalized to https://dev.azure.com. Git identity for remotes now resolves Azure org/project/repo (not only GitHub).

Azure DevOps CLI integration passes explicit --organization, --project, and --repository (or org-only for PR show) when context is parsed from the remote, instead of --detect true, which fails for SSH clones. Checkout with context uses az repos pr show plus git fetch and git checkout -B on the PR head branch, picking fork clone URLs to match SSH vs HTTPS. Fork PRs surface cross-repo metadata in normalized PR records.

The desktop app hydrates AZURE_DEVOPS_EXT_PAT from the login shell (with inherited values preserved), so Azure CLI auth works when the app is not launched from a terminal.

^{Reviewed by Cursor Bugbot for commit f103a6a. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add Azure DevOps SSH remote detection and explicit repository context to CLI commands

• Extends detectSourceControlProviderFromRemoteUrl and isAzureDevOpsHost in sourceControl.ts to recognize ssh.dev.azure.com as Azure DevOps, normalizing baseUrl to https://dev.azure.com for SSH remotes.
• Adds parseAzureDevOpsRepositoryCoordinates to extract organization/project/repository from both SSH (ssh.dev.azure.com v3) and HTTPS (dev.azure.com/_git) clone URLs.
• Replaces --detect true flags in AzureDevOpsCli with explicit org/project/repo args derived from a new repositoryContext parameter, reducing reliance on Azure CLI auto-detection.
• checkoutPullRequest now supports SSH-backed and fork PRs by fetching directly via git fetch/git checkout instead of az repos pr checkout, with failures mapped to a new AzureDevOpsGitCommandFailedError.
• Normalized PR records now include fork metadata (isCrossRepository, headRepositoryNameWithOwner, source clone URLs) when returned by the Azure API.
• Adds AZURE_DEVOPS_EXT_PAT to the login-shell environment variables propagated to the desktop app.

^{Macroscope summarized f103a6a.}

Summary by CodeRabbit

• Bug Fixes
  • Improved Azure DevOps repository detection for SSH and HTTPS remote URLs.
  • Pull-request listings, lookups, creation, checkout, and branch detection now work reliably with SSH repositories.
  • Azure DevOps SSH remotes now display the correct provider and base URL.
  • Desktop environments now correctly load Azure DevOps authentication settings from the login shell when needed.
• Tests
  • Added coverage for SSH remote parsing, repository operations, checkout flows, and authentication environment handling.

[coderabbitai]

📝 Walkthrough

Walkthrough

Azure DevOps SSH remotes are detected and parsed into repository context. Azure CLI operations use explicit repository arguments when context exists. Context-aware checkout fetches and checks out the pull-request branch. Fork repository URLs are preserved. The desktop shell propagates AZURE_DEVOPS_EXT_PAT.

Changes

Azure DevOps SSH pull-request support

Layer / File(s)	Summary
Azure DevOps SSH remote detection packages/shared/src/sourceControl.ts, packages/shared/src/sourceControl.test.ts	Azure DevOps detection includes ssh.dev.azure.com and maps it to https://dev.azure.com.
Fork source repository normalization apps/server/src/sourceControl/azureDevOpsPullRequests.ts	Pull-request normalization accepts fork repository metadata and prefers its SSH URL over its remote URL.
Repository context parsing and CLI operations apps/server/src/sourceControl/AzureDevOpsCli.ts, apps/server/src/sourceControl/AzureDevOpsCli.test.ts	SSH and HTTPS remotes are parsed into organization, project, and repository values. Azure CLI operations use explicit arguments when context exists. Context-aware checkout retrieves the pull-request branch, fetches it, and checks it out from FETCH_HEAD.
Provider repository-context forwarding apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts, apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts	The provider forwards repository context to pull-request, clone URL, default-branch, creation, and checkout operations. Cross-repository status uses the normalized source repository URL.

Desktop Azure DevOps PAT propagation

Layer / File(s)	Summary
Azure DevOps PAT environment propagation apps/desktop/src/shell/DesktopShellEnvironment.ts, apps/desktop/src/shell/DesktopShellEnvironment.test.ts	The desktop shell loads AZURE_DEVOPS_EXT_PAT from the POSIX login shell when absent and preserves an inherited value when present.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
participant Repository
participant AzureDevOpsSourceControlProvider
participant AzureDevOpsCli
participant AzureDevOps
participant Git
Repository->>AzureDevOpsSourceControlProvider: provide remoteUrl
AzureDevOpsSourceControlProvider->>AzureDevOpsCli: pass parsed repositoryContext
AzureDevOpsCli->>AzureDevOps: retrieve pull-request branch with explicit repository arguments
AzureDevOps-->>AzureDevOpsCli: return branch and source repository URL
AzureDevOpsCli->>Git: fetch branch from source repository
Git-->>AzureDevOpsCli: return FETCH_HEAD
AzureDevOpsCli->>Git: checkout FETCH_HEAD
Git-->>AzureDevOpsCli: return command result

Loading

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	The changes satisfy [#5272] by detecting Azure DevOps SSH remotes and enabling active pull-request detection through explicit repository context.
Out of Scope Changes check	✅ Passed	The CLI, checkout, fork handling, and desktop PAT changes support the linked issue’s Azure DevOps SSH pull-request workflow.
Title check	✅ Passed	The title clearly identifies the main change: Azure DevOps SSH remote detection.
Description check	✅ Passed	The description explains the problem, fix, scope, and verification, although it uses different headings from the template.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces new capability for Azure DevOps SSH remote detection and handling, affecting runtime behavior across multiple Azure DevOps CLI operations. The changes enable a previously non-functional code path and modify how repository context is passed to CLI commands.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate db68732

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c4bdf94

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate 77ab0c4

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c665bcb

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@apps/server/src/sourceControl/AzureDevOpsCli.ts`:
- Around line 234-236: Update the message returned by the error class’s get
message accessor to identify Git, not Azure DevOps CLI, as the failed command
while preserving the existing operation and detail values.
- Around line 122-124: Update the repository argument construction around
repositoryDetectionArgs so repositoryContext supplies only organization and
project while the repository parameter is always used for --repository,
preserving the requested selector when both values differ. Add a regression test
covering distinct repositoryContext and repository values and verify the
generated arguments target the requested repository.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3501c46a-1867-4f67-a45e-cbf701fcf862

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 7e69451.

📒 Files selected for processing (4)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[macroscopeapp]

One convention finding on the new Effect error introduced in apps/server/src/sourceControl/AzureDevOpsCli.ts. The rest of the touched service code (namespace imports, Foo["Service"] typing, dependency acquisition via yield* VcsProcess.VcsProcess, layer export, inline error construction at the failure boundary, bounded error attributes) follows the conventions.

^{Posted via Macroscope — Effect Service Conventions}

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

apps/server/src/sourceControl/azureDevOpsPullRequests.ts (1)

151-165: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Preserve the fork clone transport through checkout.

The PR normalizer drops the HTTPS clone URL when Azure returns both sshUrl and remoteUrl. AzureDevOpsCli.checkoutPullRequest then uses that single sourceRepositoryUrl for the fork git fetch, so an HTTPS checkout without SSH credentials fails.

Retain both fork clone URLs and choose the transport only during checkout. Include focused HTTPS and SSH fork-checkout tests for the selected fetch URL.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts` around lines 151 -
165, Update the Azure DevOps pull-request model and normalizer in
apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

Source: Coding guidelines

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Outside diff comments:
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts`:
- Around line 151-165: Update the Azure DevOps pull-request model and normalizer
in apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 99b81124-5404-4927-8003-5eac02c4bd5c

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 595ca4d.

📒 Files selected for processing (5)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts
• apps/server/src/sourceControl/azureDevOpsPullRequests.ts

🚧 Files skipped from review as they are similar to previous changes (2)

• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts

[Brechard]

@coderabbitai resume

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

✅ Action performed

Reviews resumed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 545281d. Configure here.}

[t3-code]

closing as already addressed. Azure DevOps SSH remote detection merged in #6187.

[Brechard]

Problem

Azure DevOps repositories using standard SSH remotes (git@ssh.dev.azure.com:v3/...) were classified as an unknown source-control provider. As a result, T3 Code did not run the Azure DevOps pull-request detection path even when the Azure CLI was available.

Fix

• Recognize ssh.dev.azure.com as an Azure DevOps host.
• Normalize that SSH host to https://dev.azure.com for Azure DevOps pull-request URLs and CLI integration.
• Pass explicit Azure repository context through pull-request lookup, creation, clone URL retrieval, default-branch lookup, and checkout.
• Use Git fetch with an exact PR-head checkout for SSH-backed and fork pull requests.
• Add a regression test for the standard Azure DevOps SSH remote format.

Verification

• Reproduced with a real Azure DevOps-backed repository in a local T3 development environment.
• Verified the existing active pull request appeared in the T3 Code UI after the change.
• Focused source-control tests: 101 passed.
• @t3tools/shared typecheck: passed.
• git diff --check: passed.

Fixes#5272

Completed by GPT-5.6-Luna via Codex.

---

Note

Medium Risk
Changes Azure DevOps PR listing, checkout, and Git remote identity paths; checkout behavior diverges from az repos pr checkout when repository context is present. PAT propagation from login shell touches credential-related environment handling.

Overview
Fixes Azure DevOps repos that use standard SSH remotes (git@ssh.dev.azure.com:v3/...) being treated as unknown providers, which blocked PR detection and Azure CLI workflows.

Shared detection adds parseAzureDevOpsRepositoryCoordinates and treats ssh.dev.azure.com as Azure DevOps with base URLs normalized to https://dev.azure.com. Git identity for remotes now resolves Azure org/project/repo (not only GitHub).

Azure DevOps CLI integration passes explicit --organization, --project, and --repository (or org-only for PR show) when context is parsed from the remote, instead of --detect true, which fails for SSH clones. Checkout with context uses az repos pr show plus git fetch and git checkout -B on the PR head branch, picking fork clone URLs to match SSH vs HTTPS. Fork PRs surface cross-repo metadata in normalized PR records.

The desktop app hydrates AZURE_DEVOPS_EXT_PAT from the login shell (with inherited values preserved), so Azure CLI auth works when the app is not launched from a terminal.

^{Reviewed by Cursor Bugbot for commit f103a6a. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add Azure DevOps SSH remote detection and explicit repository context to CLI commands

• Extends detectSourceControlProviderFromRemoteUrl and isAzureDevOpsHost in sourceControl.ts to recognize ssh.dev.azure.com as Azure DevOps, normalizing baseUrl to https://dev.azure.com for SSH remotes.
• Adds parseAzureDevOpsRepositoryCoordinates to extract organization/project/repository from both SSH (ssh.dev.azure.com v3) and HTTPS (dev.azure.com/_git) clone URLs.
• Replaces --detect true flags in AzureDevOpsCli with explicit org/project/repo args derived from a new repositoryContext parameter, reducing reliance on Azure CLI auto-detection.
• checkoutPullRequest now supports SSH-backed and fork PRs by fetching directly via git fetch/git checkout instead of az repos pr checkout, with failures mapped to a new AzureDevOpsGitCommandFailedError.
• Normalized PR records now include fork metadata (isCrossRepository, headRepositoryNameWithOwner, source clone URLs) when returned by the Azure API.
• Adds AZURE_DEVOPS_EXT_PAT to the login-shell environment variables propagated to the desktop app.

^{Macroscope summarized f103a6a.}

Summary by CodeRabbit

• Bug Fixes
  • Improved Azure DevOps repository detection for SSH and HTTPS remote URLs.
  • Pull-request listings, lookups, creation, checkout, and branch detection now work reliably with SSH repositories.
  • Azure DevOps SSH remotes now display the correct provider and base URL.
  • Desktop environments now correctly load Azure DevOps authentication settings from the login shell when needed.
• Tests
  • Added coverage for SSH remote parsing, repository operations, checkout flows, and authentication environment handling.

[coderabbitai]

📝 Walkthrough

Walkthrough

Azure DevOps SSH remotes are detected and parsed into repository context. Azure CLI operations use explicit repository arguments when context exists. Context-aware checkout fetches and checks out the pull-request branch. Fork repository URLs are preserved. The desktop shell propagates AZURE_DEVOPS_EXT_PAT.

Changes

Azure DevOps SSH pull-request support

Layer / File(s)	Summary
Azure DevOps SSH remote detection packages/shared/src/sourceControl.ts, packages/shared/src/sourceControl.test.ts	Azure DevOps detection includes ssh.dev.azure.com and maps it to https://dev.azure.com.
Fork source repository normalization apps/server/src/sourceControl/azureDevOpsPullRequests.ts	Pull-request normalization accepts fork repository metadata and prefers its SSH URL over its remote URL.
Repository context parsing and CLI operations apps/server/src/sourceControl/AzureDevOpsCli.ts, apps/server/src/sourceControl/AzureDevOpsCli.test.ts	SSH and HTTPS remotes are parsed into organization, project, and repository values. Azure CLI operations use explicit arguments when context exists. Context-aware checkout retrieves the pull-request branch, fetches it, and checks it out from FETCH_HEAD.
Provider repository-context forwarding apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts, apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts	The provider forwards repository context to pull-request, clone URL, default-branch, creation, and checkout operations. Cross-repository status uses the normalized source repository URL.

Desktop Azure DevOps PAT propagation

Layer / File(s)	Summary
Azure DevOps PAT environment propagation apps/desktop/src/shell/DesktopShellEnvironment.ts, apps/desktop/src/shell/DesktopShellEnvironment.test.ts	The desktop shell loads AZURE_DEVOPS_EXT_PAT from the POSIX login shell when absent and preserves an inherited value when present.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
participant Repository
participant AzureDevOpsSourceControlProvider
participant AzureDevOpsCli
participant AzureDevOps
participant Git
Repository->>AzureDevOpsSourceControlProvider: provide remoteUrl
AzureDevOpsSourceControlProvider->>AzureDevOpsCli: pass parsed repositoryContext
AzureDevOpsCli->>AzureDevOps: retrieve pull-request branch with explicit repository arguments
AzureDevOps-->>AzureDevOpsCli: return branch and source repository URL
AzureDevOpsCli->>Git: fetch branch from source repository
Git-->>AzureDevOpsCli: return FETCH_HEAD
AzureDevOpsCli->>Git: checkout FETCH_HEAD
Git-->>AzureDevOpsCli: return command result

Loading

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	The changes satisfy [#5272] by detecting Azure DevOps SSH remotes and enabling active pull-request detection through explicit repository context.
Out of Scope Changes check	✅ Passed	The CLI, checkout, fork handling, and desktop PAT changes support the linked issue’s Azure DevOps SSH pull-request workflow.
Title check	✅ Passed	The title clearly identifies the main change: Azure DevOps SSH remote detection.
Description check	✅ Passed	The description explains the problem, fix, scope, and verification, although it uses different headings from the template.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces new capability for Azure DevOps SSH remote detection and handling, affecting runtime behavior across multiple Azure DevOps CLI operations. The changes enable a previously non-functional code path and modify how repository context is passed to CLI commands.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate db68732

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c4bdf94

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate 77ab0c4

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Dismissing prior approval to re-evaluate c665bcb

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@apps/server/src/sourceControl/AzureDevOpsCli.ts`:
- Around line 234-236: Update the message returned by the error class’s get
message accessor to identify Git, not Azure DevOps CLI, as the failed command
while preserving the existing operation and detail values.
- Around line 122-124: Update the repository argument construction around
repositoryDetectionArgs so repositoryContext supplies only organization and
project while the repository parameter is always used for --repository,
preserving the requested selector when both values differ. Add a regression test
covering distinct repositoryContext and repository values and verify the
generated arguments target the requested repository.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3501c46a-1867-4f67-a45e-cbf701fcf862

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 7e69451.

📒 Files selected for processing (4)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[macroscopeapp]

One convention finding on the new Effect error introduced in apps/server/src/sourceControl/AzureDevOpsCli.ts. The rest of the touched service code (namespace imports, Foo["Service"] typing, dependency acquisition via yield* VcsProcess.VcsProcess, layer export, inline error construction at the failure boundary, bounded error attributes) follows the conventions.

^{Posted via Macroscope — Effect Service Conventions}

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

apps/server/src/sourceControl/azureDevOpsPullRequests.ts (1)

151-165: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Preserve the fork clone transport through checkout.

The PR normalizer drops the HTTPS clone URL when Azure returns both sshUrl and remoteUrl. AzureDevOpsCli.checkoutPullRequest then uses that single sourceRepositoryUrl for the fork git fetch, so an HTTPS checkout without SSH credentials fails.

Retain both fork clone URLs and choose the transport only during checkout. Include focused HTTPS and SSH fork-checkout tests for the selected fetch URL.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts` around lines 151 -
165, Update the Azure DevOps pull-request model and normalizer in
apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

Source: Coding guidelines

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Outside diff comments:
In `@apps/server/src/sourceControl/azureDevOpsPullRequests.ts`:
- Around line 151-165: Update the Azure DevOps pull-request model and normalizer
in apps/server/src/sourceControl/azureDevOpsPullRequests.ts:18-19 and 151-165 to
retain both fork SSH and HTTPS clone URLs instead of selecting one. Update
AzureDevOpsSourceControlProvider.ts:76-83 and 240-247 to propagate both values
through the provider and let AzureDevOpsCli.checkoutPullRequest choose the URL
matching the configured checkout transport. Extend
AzureDevOpsCli.test.ts:590-666 with focused HTTPS and SSH fork-checkout cases
asserting the selected fetch URL.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 99b81124-5404-4927-8003-5eac02c4bd5c

📥 Commits

Reviewing files that changed from the base of the PR and between c665bcb and 595ca4d.

📒 Files selected for processing (5)

• apps/server/src/sourceControl/AzureDevOpsCli.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.ts
• apps/server/src/sourceControl/azureDevOpsPullRequests.ts

🚧 Files skipped from review as they are similar to previous changes (2)

• apps/server/src/sourceControl/AzureDevOpsSourceControlProvider.test.ts
• apps/server/src/sourceControl/AzureDevOpsCli.ts

[Brechard]

@coderabbitai resume

[Brechard]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

✅ Action performed

Reviews resumed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 545281d. Configure here.}

[t3-code]

closing as already addressed. Azure DevOps SSH remote detection merged in #6187.