extensions

type Client interface {
	// GetSelfID retrieves the storage identifier of the authenticated user associated with the connection.
	GetSelfID(ctx context.Context) (uuid.UUID, error)
	// GetSubjectID resolves the storage key (UUID) for a given subject (user) name within the organization.
	GetSubjectID(ctx context.Context, subject string) (uuid.UUID, error)
	// GetVariableGroups fetches variable groups using the raw REST API, returning the continuation token with the response.
	GetVariableGroups(ctx context.Context, args taskagent.GetVariableGroupsArgs) (*VariableGroupsResponse, error)
	// FindGroupsByDisplayName locates Azure DevOps security groups that match the provided display name,
	// optionally scoped to a project descriptor, and returns their full details.
	FindGroupsByDisplayName(ctx context.Context, displayName string, scopeDescriptor *string) ([]*graph.GraphGroup, error)
	// ResolveSubject resolves a member identifier (descriptor, email, or principal name) into a graph subject descriptor.
	ResolveSubject(ctx context.Context, member string) (*graph.GraphSubject, error)
	ResolveIdentity(ctx context.Context, member string) (*identity.Identity, error)
}

type VariableGroupsResponse struct {
	Count             *int                      `json:"count,omitempty"`
	ContinuationToken *string                   `json:"continuationToken,omitempty"`
	Value             []taskagent.VariableGroup `json:"value,omitempty"`
}

type VariableValue struct {
	Name     string `json:"name"`
	Value    any    `json:"value,omitempty"`
	IsSecret bool   `json:"secret"`
}