Acceptance Criteria: azure-keyvault-keys-ts

Overview

This document defines the acceptance criteria for code generated using the @azure/keyvault-keys SDK for TypeScript/JavaScript.

Package: @azure/keyvault-keys
Repository: https://github.com/Azure/azure-sdk-for-js/tree/main/sdk/keyvault/keyvault-keys

---

1. Import Statements

✅ MUST

// ESM imports
import { KeyClient, CryptographyClient } from "@azure/keyvault-keys";
import { DefaultAzureCredential } from "@azure/identity";

❌ MUST NOT

// CommonJS require (deprecated pattern)
const { KeyClient } = require("@azure/keyvault-keys");

// Old SDK imports
import { KeyVaultClient } from "azure-keyvault";

---

2. Client Instantiation

✅ MUST

// Use DefaultAzureCredential for production
const credential = new DefaultAzureCredential();
const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new KeyClient(url, credential);

✅ MAY (for testing only)

import { AzureKeyCredential } from "@azure/core-auth";

// API key only for specific scenarios, prefer DefaultAzureCredential